# Flog Txt Version 1 # Analyzer Version: 2.4.0 # Analyzer Build Date: Jul 24 2018 18:08:56 # Log Creation Date: 28.08.2018 18:43:27.950 Process: id = "1" image_name = "asdfc4.exe" filename = "c:\\users\\ciihmnxmn6ps\\desktop\\asdfc4.exe" page_root = "0x2f5c5000" os_pid = "0xf38" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.exe\" " cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x390000 end_va = 0x461fff entry_point = 0x390000 region_type = mapped_file name = "asdfc4.exe" filename = "\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\asdfc4.exe") Region: id = 2 start_va = 0x470000 end_va = 0x48ffff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 3 start_va = 0x490000 end_va = 0x4a3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 4 start_va = 0x4b0000 end_va = 0x5affff entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 5 start_va = 0x5b0000 end_va = 0x5b3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 6 start_va = 0x5c0000 end_va = 0x5c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 7 start_va = 0x5d0000 end_va = 0x5d1fff entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 8 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 9 start_va = 0x7ff5ff6c0000 end_va = 0x7ff5ff6e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ff6c0000" filename = "" Region: id = 10 start_va = 0x7ff5ff6ed000 end_va = 0x7ff5ff6edfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff6ed000" filename = "" Region: id = 11 start_va = 0x7ff5ff6ee000 end_va = 0x7ff5ff6effff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff6ee000" filename = "" Region: id = 12 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 159 start_va = 0x780000 end_va = 0x87ffff entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 160 start_va = 0x7ffaed330000 end_va = 0x7ffaed397fff entry_point = 0x7ffaed330000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 161 start_va = 0x7ffaf4e50000 end_va = 0x7ffaf502cfff entry_point = 0x7ffaf4e50000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 162 start_va = 0x7ffaf70d0000 end_va = 0x7ffaf717cfff entry_point = 0x7ffaf70d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 163 start_va = 0x470000 end_va = 0x47ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 164 start_va = 0x480000 end_va = 0x486fff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 165 start_va = 0x5e0000 end_va = 0x69dfff entry_point = 0x5e0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 166 start_va = 0x770000 end_va = 0x77ffff entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 167 start_va = 0x7ff5ff5c0000 end_va = 0x7ff5ff6bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ff5c0000" filename = "" Region: id = 168 start_va = 0x7ffaf2b90000 end_va = 0x7ffaf2c07fff entry_point = 0x7ffaf2b90000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 169 start_va = 0x6a0000 end_va = 0x6a6fff entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 170 start_va = 0x880000 end_va = 0x97ffff entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 171 start_va = 0x7ff5ff6eb000 end_va = 0x7ff5ff6ecfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff6eb000" filename = "" Region: id = 172 start_va = 0x7ffaf5290000 end_va = 0x7ffaf53b5fff entry_point = 0x7ffaf5290000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 173 start_va = 0x7ffaf5700000 end_va = 0x7ffaf579cfff entry_point = 0x7ffaf5700000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 174 start_va = 0x7ffaf57a0000 end_va = 0x7ffaf57fafff entry_point = 0x7ffaf57a0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 175 start_va = 0x7ffaf75d0000 end_va = 0x7ffaf7675fff entry_point = 0x7ffaf75d0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 176 start_va = 0x6b0000 end_va = 0x6b6fff entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 177 start_va = 0x6f0000 end_va = 0x6fffff entry_point = 0x0 region_type = private name = "private_0x00000000006f0000" filename = "" Region: id = 178 start_va = 0x7ffadf5d0000 end_va = 0x7ffadf666fff entry_point = 0x7ffadf5d0000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 179 start_va = 0x7ffaf5140000 end_va = 0x7ffaf528dfff entry_point = 0x7ffaf5140000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 180 start_va = 0x7ffaf5800000 end_va = 0x7ffaf5984fff entry_point = 0x7ffaf5800000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 181 start_va = 0x7ffaf72e0000 end_va = 0x7ffaf755bfff entry_point = 0x7ffaf72e0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 182 start_va = 0x7ffaf7860000 end_va = 0x7ffaf78b0fff entry_point = 0x7ffaf7860000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 183 start_va = 0x980000 end_va = 0xb07fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000980000" filename = "" Region: id = 184 start_va = 0x7ffaf53c0000 end_va = 0x7ffaf53f5fff entry_point = 0x7ffaf53c0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 185 start_va = 0x7ffaf6f70000 end_va = 0x7ffaf70cbfff entry_point = 0x7ffaf6f70000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 186 start_va = 0x6c0000 end_va = 0x6c0fff entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 187 start_va = 0x6d0000 end_va = 0x6d0fff entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 188 start_va = 0xb10000 end_va = 0xc90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b10000" filename = "" Region: id = 189 start_va = 0xca0000 end_va = 0x209ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ca0000" filename = "" Region: id = 190 start_va = 0x7ffaf44d0000 end_va = 0x7ffaf44defff entry_point = 0x7ffaf44d0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 191 start_va = 0x7ffaeb6f0000 end_va = 0x7ffaeb6f9fff entry_point = 0x7ffaeb6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 192 start_va = 0x6e0000 end_va = 0x6e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 193 start_va = 0x2130000 end_va = 0x213ffff entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 194 start_va = 0x72f60000 end_va = 0x73028fff entry_point = 0x72f60000 region_type = mapped_file name = "msvcr80.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9185_none_88e323712fabe0b2\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9185_none_88e323712fabe0b2\\msvcr80.dll") Region: id = 195 start_va = 0x7ffadec30000 end_va = 0x7ffadf5cffff entry_point = 0x7ffadec30000 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 196 start_va = 0x20000 end_va = 0x3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 197 start_va = 0x700000 end_va = 0x706fff entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 198 start_va = 0x710000 end_va = 0x71ffff entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 199 start_va = 0x720000 end_va = 0x722fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000720000" filename = "" Region: id = 200 start_va = 0x730000 end_va = 0x730fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000730000" filename = "" Region: id = 201 start_va = 0x2140000 end_va = 0x223ffff entry_point = 0x0 region_type = private name = "private_0x0000000002140000" filename = "" Region: id = 202 start_va = 0x7ff5ff6e9000 end_va = 0x7ff5ff6eafff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff6e9000" filename = "" Region: id = 203 start_va = 0x7ffa7f4d0000 end_va = 0x7ffa7f4dffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f4d0000" filename = "" Region: id = 204 start_va = 0x7ffa7f4e0000 end_va = 0x7ffa7f4effff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f4e0000" filename = "" Region: id = 205 start_va = 0x7ffa7f4f0000 end_va = 0x7ffa7f58ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f4f0000" filename = "" Region: id = 206 start_va = 0x7ffa7f590000 end_va = 0x7ffa7f59ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f590000" filename = "" Region: id = 207 start_va = 0x7ffa7f5a0000 end_va = 0x7ffa7f60ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f5a0000" filename = "" Region: id = 208 start_va = 0x7ffaf4440000 end_va = 0x7ffaf4489fff entry_point = 0x7ffaf4440000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 209 start_va = 0x7ffaf4490000 end_va = 0x7ffaf44a2fff entry_point = 0x7ffaf4490000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 210 start_va = 0x7ffaf4590000 end_va = 0x7ffaf4bb7fff entry_point = 0x7ffaf4590000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 211 start_va = 0x7ffaf4bc0000 end_va = 0x7ffaf4c72fff entry_point = 0x7ffaf4bc0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 212 start_va = 0x7ffaf5990000 end_va = 0x7ffaf6eb4fff entry_point = 0x7ffaf5990000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 215 start_va = 0x740000 end_va = 0x740fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000740000" filename = "" Region: id = 216 start_va = 0x2240000 end_va = 0x2576fff entry_point = 0x2240000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 217 start_va = 0x2580000 end_va = 0x1a57ffff entry_point = 0x0 region_type = private name = "private_0x0000000002580000" filename = "" Region: id = 218 start_va = 0x1a580000 end_va = 0x1ac4ffff entry_point = 0x0 region_type = private name = "private_0x000000001a580000" filename = "" Region: id = 219 start_va = 0x1ac50000 end_va = 0x1ad55fff entry_point = 0x0 region_type = private name = "private_0x000000001ac50000" filename = "" Region: id = 220 start_va = 0x1ad60000 end_va = 0x1ae5ffff entry_point = 0x0 region_type = private name = "private_0x000000001ad60000" filename = "" Region: id = 221 start_va = 0x7ff5ff6e7000 end_va = 0x7ff5ff6e8fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff6e7000" filename = "" Region: id = 222 start_va = 0x7ffaddd50000 end_va = 0x7ffadec2dfff entry_point = 0x7ffaddd50000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\91a4b48cca231bafafe8b8b1de78487c\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\mscorlib\\91a4b48cca231bafafe8b8b1de78487c\\mscorlib.ni.dll") Region: id = 223 start_va = 0x7ff5ff520000 end_va = 0x7ff5ff52ffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff520000" filename = "" Region: id = 224 start_va = 0x7ff5ff530000 end_va = 0x7ff5ff5bffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff530000" filename = "" Region: id = 225 start_va = 0x7ffaf55b0000 end_va = 0x7ffaf56f0fff entry_point = 0x7ffaf55b0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 226 start_va = 0x1ae60000 end_va = 0x1af35fff entry_point = 0x1ae60000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 227 start_va = 0x7ffaf4290000 end_va = 0x7ffaf42fafff entry_point = 0x7ffaf4290000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 228 start_va = 0x750000 end_va = 0x752fff entry_point = 0x750000 region_type = mapped_file name = "l_intl.nls" filename = "\\Windows\\System32\\l_intl.nls" (normalized: "c:\\windows\\system32\\l_intl.nls") Region: id = 229 start_va = 0x760000 end_va = 0x760fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 230 start_va = 0x7ffa7f610000 end_va = 0x7ffa7f61ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f610000" filename = "" Region: id = 231 start_va = 0x7ffaddbc0000 end_va = 0x7ffaddd42fff entry_point = 0x7ffaddbc0000 region_type = mapped_file name = "mscorjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorjit.dll") Region: id = 232 start_va = 0x20a0000 end_va = 0x20affff entry_point = 0x0 region_type = private name = "private_0x00000000020a0000" filename = "" Region: id = 233 start_va = 0x20b0000 end_va = 0x20bffff entry_point = 0x0 region_type = private name = "private_0x00000000020b0000" filename = "" Region: id = 234 start_va = 0x20c0000 end_va = 0x20cffff entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 235 start_va = 0x20d0000 end_va = 0x20dffff entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 236 start_va = 0x7ffa7f620000 end_va = 0x7ffa7f65ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f620000" filename = "" Region: id = 237 start_va = 0x20e0000 end_va = 0x20effff entry_point = 0x0 region_type = private name = "private_0x00000000020e0000" filename = "" Region: id = 238 start_va = 0x7ffadd190000 end_va = 0x7ffaddbbffff entry_point = 0x7ffadd190000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System\\042a21e47eb8693a9393028c639e93c6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system\\042a21e47eb8693a9393028c639e93c6\\system.ni.dll") Region: id = 239 start_va = 0x7ffaecf10000 end_va = 0x7ffaecf16fff entry_point = 0x7ffaecf10000 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\System32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll") Region: id = 240 start_va = 0x20f0000 end_va = 0x20fffff entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 241 start_va = 0x2110000 end_va = 0x211ffff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 242 start_va = 0x2120000 end_va = 0x212ffff entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 243 start_va = 0x1ae60000 end_va = 0x1ae6ffff entry_point = 0x0 region_type = private name = "private_0x000000001ae60000" filename = "" Region: id = 244 start_va = 0x20b0000 end_va = 0x20b4fff entry_point = 0x20b0000 region_type = mapped_file name = "sorttbls.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp") Region: id = 245 start_va = 0x2100000 end_va = 0x210ffff entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 246 start_va = 0x1ae70000 end_va = 0x1aeb0fff entry_point = 0x1ae70000 region_type = mapped_file name = "sortkey.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp") Region: id = 247 start_va = 0x7ffa7f660000 end_va = 0x7ffa7f66ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f660000" filename = "" Region: id = 250 start_va = 0x880000 end_va = 0x88ffff entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 251 start_va = 0x890000 end_va = 0x89ffff entry_point = 0x0 region_type = private name = "private_0x0000000000890000" filename = "" Region: id = 252 start_va = 0x8a0000 end_va = 0x8affff entry_point = 0x0 region_type = private name = "private_0x00000000008a0000" filename = "" Region: id = 253 start_va = 0x8b0000 end_va = 0x8bffff entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 254 start_va = 0x8c0000 end_va = 0x8cffff entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 255 start_va = 0x1aec0000 end_va = 0x1afbffff entry_point = 0x0 region_type = private name = "private_0x000000001aec0000" filename = "" Region: id = 256 start_va = 0x7ffaf3d00000 end_va = 0x7ffaf3d16fff entry_point = 0x7ffaf3d00000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 257 start_va = 0x7ffaf4260000 end_va = 0x7ffaf4287fff entry_point = 0x7ffaf4260000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 258 start_va = 0x7ffaf3960000 end_va = 0x7ffaf3992fff entry_point = 0x7ffaf3960000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 259 start_va = 0x7ffaf41e0000 end_va = 0x7ffaf41eafff entry_point = 0x7ffaf41e0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 260 start_va = 0x7ffaf3a50000 end_va = 0x7ffaf3a6efff entry_point = 0x7ffaf3a50000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 261 start_va = 0x7ffaf44b0000 end_va = 0x7ffaf44c0fff entry_point = 0x7ffaf44b0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 262 start_va = 0x7ffaf4c80000 end_va = 0x7ffaf4e40fff entry_point = 0x7ffaf4c80000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 263 start_va = 0x7ffaf38c0000 end_va = 0x7ffaf38c9fff entry_point = 0x7ffaf38c0000 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 264 start_va = 0x8d0000 end_va = 0x8d9fff entry_point = 0x8d0000 region_type = mapped_file name = "crypt32.dll.mui" filename = "\\Windows\\System32\\en-US\\crypt32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\crypt32.dll.mui") Region: id = 265 start_va = 0x8e0000 end_va = 0x8effff entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 266 start_va = 0x8f0000 end_va = 0x8fffff entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 267 start_va = 0x900000 end_va = 0x900fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000900000" filename = "" Region: id = 268 start_va = 0x7ffaf0470000 end_va = 0x7ffaf0479fff entry_point = 0x7ffaf0470000 region_type = mapped_file name = "culture.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\culture.dll") Region: id = 269 start_va = 0x900000 end_va = 0x953fff entry_point = 0x900000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorrc.dll") Region: id = 270 start_va = 0x7ffadba70000 end_va = 0x7ffadbbdbfff entry_point = 0x7ffadba70000 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management\\f23887438de05dd4ab64f7d477cea394\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.management\\f23887438de05dd4ab64f7d477cea394\\system.management.ni.dll") Region: id = 271 start_va = 0x960000 end_va = 0x970fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000960000" filename = "" Region: id = 272 start_va = 0x1afc0000 end_va = 0x1b0bffff entry_point = 0x0 region_type = private name = "private_0x000000001afc0000" filename = "" Region: id = 273 start_va = 0x1b0c0000 end_va = 0x1b1bffff entry_point = 0x0 region_type = private name = "private_0x000000001b0c0000" filename = "" Region: id = 274 start_va = 0x1b1c0000 end_va = 0x1b2bffff entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 275 start_va = 0x7ff5ff51e000 end_va = 0x7ff5ff51ffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff51e000" filename = "" Region: id = 276 start_va = 0x7ff5ff6e3000 end_va = 0x7ff5ff6e4fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff6e3000" filename = "" Region: id = 277 start_va = 0x7ff5ff6e5000 end_va = 0x7ff5ff6e6fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff6e5000" filename = "" Region: id = 278 start_va = 0x7ffaf0470000 end_va = 0x7ffaf047cfff entry_point = 0x7ffaf0470000 region_type = mapped_file name = "wminet_utils.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\wminet_utils.dll") Region: id = 279 start_va = 0x20a0000 end_va = 0x20a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000020a0000" filename = "" Region: id = 280 start_va = 0x7ffaf7190000 end_va = 0x7ffaf724dfff entry_point = 0x7ffaf7190000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 281 start_va = 0x20c0000 end_va = 0x20c6fff entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 282 start_va = 0x20d0000 end_va = 0x20d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000020d0000" filename = "" Region: id = 283 start_va = 0x7ffaf6ec0000 end_va = 0x7ffaf6f64fff entry_point = 0x7ffaf6ec0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 284 start_va = 0x20e0000 end_va = 0x20e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000020e0000" filename = "" Region: id = 285 start_va = 0x7ffae9440000 end_va = 0x7ffae9464fff entry_point = 0x7ffae9440000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 286 start_va = 0x7ffaef560000 end_va = 0x7ffaef5defff entry_point = 0x7ffaef560000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 287 start_va = 0x7ffaf7560000 end_va = 0x7ffaf75c8fff entry_point = 0x7ffaf7560000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 288 start_va = 0x7ffaf7680000 end_va = 0x7ffaf7687fff entry_point = 0x7ffaf7680000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 289 start_va = 0x7ffae9fa0000 end_va = 0x7ffae9fb0fff entry_point = 0x7ffae9fa0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 290 start_va = 0x7ffae9470000 end_va = 0x7ffae9483fff entry_point = 0x7ffae9470000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 733 start_va = 0x7ffae9490000 end_va = 0x7ffae9587fff entry_point = 0x7ffae9490000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 838 start_va = 0x20f0000 end_va = 0x20fffff entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 839 start_va = 0x7ffadf9e0000 end_va = 0x7ffadfb26fff entry_point = 0x7ffadf9e0000 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Configuration\\1358e6a50351a7d721c0412b7bb5f951\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.configuration\\1358e6a50351a7d721c0412b7bb5f951\\system.configuration.ni.dll") Region: id = 840 start_va = 0x7ffadb1f0000 end_va = 0x7ffadb898fff entry_point = 0x7ffadb1f0000 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Xml\\58610f4b2168fbfdad44a42022ac83ad\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.xml\\58610f4b2168fbfdad44a42022ac83ad\\system.xml.ni.dll") Region: id = 841 start_va = 0x7ffaf1940000 end_va = 0x7ffaf194afff entry_point = 0x7ffaf1940000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 842 start_va = 0x7ffaf1960000 end_va = 0x7ffaf1997fff entry_point = 0x7ffaf1960000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 843 start_va = 0x7ffaf3ab0000 end_va = 0x7ffaf3b57fff entry_point = 0x7ffaf3ab0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 844 start_va = 0x7ffaf0810000 end_va = 0x7ffaf0825fff entry_point = 0x7ffaf0810000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 845 start_va = 0x7ffaf07f0000 end_va = 0x7ffaf0809fff entry_point = 0x7ffaf07f0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 846 start_va = 0x7ffaf3ca0000 end_va = 0x7ffaf3cfcfff entry_point = 0x7ffaf3ca0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 847 start_va = 0x7ffa7f670000 end_va = 0x7ffa7f67ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f670000" filename = "" Region: id = 848 start_va = 0x2100000 end_va = 0x211ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002100000" filename = "" Region: id = 849 start_va = 0x1b2c0000 end_va = 0x1b3bffff entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 850 start_va = 0x1b3c0000 end_va = 0x1b4bffff entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 851 start_va = 0x7ff5ff51a000 end_va = 0x7ff5ff51bfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff51a000" filename = "" Region: id = 852 start_va = 0x7ff5ff51c000 end_va = 0x7ff5ff51dfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff51c000" filename = "" Region: id = 853 start_va = 0x7ffaec410000 end_va = 0x7ffaec419fff entry_point = 0x7ffaec410000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 854 start_va = 0x7ffaf0920000 end_va = 0x7ffaf0987fff entry_point = 0x7ffaf0920000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 855 start_va = 0x1b4c0000 end_va = 0x1b59efff entry_point = 0x1b4c0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 856 start_va = 0x2120000 end_va = 0x2122fff entry_point = 0x2120000 region_type = mapped_file name = "security.dll" filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll") Region: id = 857 start_va = 0x7ffaebb50000 end_va = 0x7ffaebb5bfff entry_point = 0x7ffaebb50000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 858 start_va = 0x7ffaf41b0000 end_va = 0x7ffaf41dbfff entry_point = 0x7ffaf41b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 859 start_va = 0x7ffaf3840000 end_va = 0x7ffaf38b3fff entry_point = 0x7ffaf3840000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 860 start_va = 0x1ae60000 end_va = 0x1ae61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001ae60000" filename = "" Region: id = 861 start_va = 0x7ffae9750000 end_va = 0x7ffae9763fff entry_point = 0x7ffae9750000 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 862 start_va = 0x7ffaf4180000 end_va = 0x7ffaf41a5fff entry_point = 0x7ffaf4180000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 863 start_va = 0x7ffaf3ed0000 end_va = 0x7ffaf3f05fff entry_point = 0x7ffaf3ed0000 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 864 start_va = 0x7ffae9800000 end_va = 0x7ffae981efff entry_point = 0x7ffae9800000 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 865 start_va = 0x1b5a0000 end_va = 0x1b69ffff entry_point = 0x0 region_type = private name = "private_0x000000001b5a0000" filename = "" Region: id = 866 start_va = 0x7ff5ff518000 end_va = 0x7ff5ff519fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff518000" filename = "" Region: id = 867 start_va = 0x1b6a0000 end_va = 0x1b79ffff entry_point = 0x0 region_type = private name = "private_0x000000001b6a0000" filename = "" Region: id = 868 start_va = 0x1b7a0000 end_va = 0x1b99ffff entry_point = 0x0 region_type = private name = "private_0x000000001b7a0000" filename = "" Region: id = 869 start_va = 0x7ffaf3360000 end_va = 0x7ffaf3382fff entry_point = 0x7ffaf3360000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 870 start_va = 0x1b9a0000 end_va = 0x1ba9ffff entry_point = 0x0 region_type = private name = "private_0x000000001b9a0000" filename = "" Region: id = 871 start_va = 0x7ff5ff516000 end_va = 0x7ff5ff517fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff516000" filename = "" Region: id = 872 start_va = 0x7ffaf2d10000 end_va = 0x7ffaf2da5fff entry_point = 0x7ffaf2d10000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 873 start_va = 0x1baa0000 end_va = 0x1bc1ffff entry_point = 0x0 region_type = private name = "private_0x000000001baa0000" filename = "" Region: id = 874 start_va = 0x7ffaf1040000 end_va = 0x7ffaf11c2fff entry_point = 0x7ffaf1040000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 875 start_va = 0x1baa0000 end_va = 0x1baa3fff entry_point = 0x1baa0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 876 start_va = 0x1bc10000 end_va = 0x1bc1ffff entry_point = 0x0 region_type = private name = "private_0x000000001bc10000" filename = "" Region: id = 877 start_va = 0x1bab0000 end_va = 0x1baf2fff entry_point = 0x1bab0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000f.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db") Region: id = 878 start_va = 0x1bb00000 end_va = 0x1bb03fff entry_point = 0x1bb00000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 879 start_va = 0x1bb10000 end_va = 0x1bb9afff entry_point = 0x1bb10000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 880 start_va = 0x1bba0000 end_va = 0x1bbb0fff entry_point = 0x1bba0000 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 881 start_va = 0x1bbc0000 end_va = 0x1bbc3fff entry_point = 0x1bbc0000 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 882 start_va = 0x1bbc0000 end_va = 0x1bbc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bbc0000" filename = "" Region: id = 883 start_va = 0x1bc20000 end_va = 0x1bd1ffff entry_point = 0x0 region_type = private name = "private_0x000000001bc20000" filename = "" Region: id = 884 start_va = 0x7ff5ff514000 end_va = 0x7ff5ff515fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff514000" filename = "" Region: id = 885 start_va = 0x7ffaf4540000 end_va = 0x7ffaf4583fff entry_point = 0x7ffaf4540000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 886 start_va = 0x7ffaeb9b0000 end_va = 0x7ffaebb46fff entry_point = 0x7ffaeb9b0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 887 start_va = 0x1bd20000 end_va = 0x1be1ffff entry_point = 0x0 region_type = private name = "private_0x000000001bd20000" filename = "" Region: id = 888 start_va = 0x7ff5ff512000 end_va = 0x7ff5ff513fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ff512000" filename = "" Region: id = 889 start_va = 0x7ffaedb10000 end_va = 0x7ffaede85fff entry_point = 0x7ffaedb10000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 890 start_va = 0x1bbd0000 end_va = 0x1bbd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001bbd0000" filename = "" Region: id = 891 start_va = 0x7ff5ff4a0000 end_va = 0x7ff5ff50cfff entry_point = 0x7ff5ff4a0000 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Thread: id = 1 os_tid = 0xf3c [0046.376] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0046.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.exe", nBufferLength=0x105, lpBuffer=0x5ae400, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.exe", lpFilePart=0x0) returned 0x28 [0047.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.exe", nBufferLength=0x105, lpBuffer=0x5ae340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.exe", lpFilePart=0x0) returned 0x28 [0047.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", nBufferLength=0x105, lpBuffer=0x5ae250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpFilePart=0x0) returned 0x1e [0047.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", nBufferLength=0x105, lpBuffer=0x5ae440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpFilePart=0x0) returned 0x1e [0047.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", nBufferLength=0x105, lpBuffer=0x5ae340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpFilePart=0x0) returned 0x1e [0047.257] GetVersionExW (in: lpVersionInformation=0x5ae3a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5ae3a0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0047.351] GetVersionExW (in: lpVersionInformation=0x5ae3a0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5ae3a0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0048.514] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=1, lpName="CryptNarWalker90912") returned 0x230 [0048.773] GetCurrentProcess () returned 0xffffffffffffffff [0049.750] GetKernelObjectSecurity (in: Handle=0xffffffffffffffff, RequestedInformation=0x4, pSecurityDescriptor=0x2583740, nLength=0x0, lpnLengthNeeded=0x5aed94 | out: pSecurityDescriptor=0x2583740, lpnLengthNeeded=0x5aed94) returned 0 [0049.750] GetKernelObjectSecurity (in: Handle=0xffffffffffffffff, RequestedInformation=0x4, pSecurityDescriptor=0x2583758, nLength=0x64, lpnLengthNeeded=0x5aed94 | out: pSecurityDescriptor=0x2583758, lpnLengthNeeded=0x5aed94) returned 1 [0049.849] GetVersionExW (in: lpVersionInformation=0x5adc90*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5adc90*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0049.858] CreateWellKnownSid (in: WellKnownSidType=0x1, DomainSid=0x0, pSid=0x2583ba0, cbSid=0x5aecd0 | out: pSid=0x2583ba0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x1), SubAuthority=0x0), cbSid=0x5aecd0) returned 1 [0050.446] SetKernelObjectSecurity (Handle=0xffffffffffffffff, SecurityInformation=0x4, SecurityDescriptor=0x2583ce8) returned 1 [0051.050] CoTaskMemAlloc (cb=0x20c) returned 0x7e1910 [0051.050] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7e1910 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming") returned 0x0 [0051.051] CoTaskMemFree (pv=0x7e1910) [0051.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x5ae860, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0051.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\jokingwithyou.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\jokingwithyou.cryptoNar", lpFilePart=0x0) returned 0x3d [0051.054] GetVersionExW (in: lpVersionInformation=0x5aea70*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5aea70*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0051.054] SetErrorMode (uMode=0x1) returned 0x0 [0051.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\jokingwithyou.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\jokingwithyou.cryptonar"), fInfoLevelId=0x0, lpFileInformation=0x5aebd0 | out: lpFileInformation=0x5aebd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0051.056] SetErrorMode (uMode=0x0) returned 0x1 [0052.080] CoTaskMemAlloc (cb=0x20c) returned 0x7e14d0 [0052.080] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7e14d0 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming") returned 0x0 [0052.080] CoTaskMemFree (pv=0x7e14d0) [0052.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x5ae5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0052.082] CoTaskMemAlloc (cb=0x104) returned 0x7b8b40 [0052.082] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x7b8b40, nSize=0x80 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps") returned 0x15 [0052.082] CoTaskMemFree (pv=0x7b8b40) [0052.082] CoTaskMemAlloc (cb=0x20c) returned 0x7e0e70 [0052.082] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x7e0e70 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming") returned 0x0 [0052.082] CoTaskMemFree (pv=0x7e0e70) [0052.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x5ae5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0052.082] CoTaskMemAlloc (cb=0x20c) returned 0x7e0e70 [0052.082] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x7e0e70 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x0 [0052.083] CoTaskMemFree (pv=0x7e0e70) [0052.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", nBufferLength=0x105, lpBuffer=0x5ae5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x0) returned 0x1d [0052.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps", nBufferLength=0x105, lpBuffer=0x5ae4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps", lpFilePart=0x0) returned 0x15 [0052.307] SetErrorMode (uMode=0x1) returned 0x0 [0052.309] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\*.*", lpFindFileData=0x5ae660 | out: lpFindFileData=0x5ae660) returned 0x7b4d90 [0052.312] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.312] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.312] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.312] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.312] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.313] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.313] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.313] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.313] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.313] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.313] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.313] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.313] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.313] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.314] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.315] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.315] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.315] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.315] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.315] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.315] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.315] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.315] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 1 [0052.315] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae670 | out: lpFindFileData=0x5ae670) returned 0 [0052.316] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0052.316] SetErrorMode (uMode=0x0) returned 0x1 [0052.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps", nBufferLength=0x105, lpBuffer=0x5ae490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps", lpFilePart=0x0) returned 0x15 [0052.381] SetErrorMode (uMode=0x1) returned 0x0 [0052.381] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\*", lpFindFileData=0x5ae630 | out: lpFindFileData=0x5ae630) returned 0x7b4d90 [0052.382] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.382] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.382] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.382] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.382] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.382] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.382] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.382] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.383] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.383] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.383] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.383] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.383] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.383] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.383] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.383] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.383] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.385] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.385] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.385] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 1 [0052.385] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae640 | out: lpFindFileData=0x5ae640) returned 0 [0052.385] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0052.385] SetErrorMode (uMode=0x0) returned 0x1 [0052.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData", lpFilePart=0x0) returned 0x1d [0052.386] SetErrorMode (uMode=0x1) returned 0x0 [0052.386] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0x7b4310 [0052.386] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0052.386] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0052.386] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0052.386] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0052.386] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 0 [0052.386] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0052.386] SetErrorMode (uMode=0x0) returned 0x1 [0052.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData", nBufferLength=0x105, lpBuffer=0x5ae3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData", lpFilePart=0x0) returned 0x1d [0052.387] SetErrorMode (uMode=0x1) returned 0x0 [0052.387] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\*", lpFindFileData=0x5ae590 | out: lpFindFileData=0x5ae590) returned 0x7b4e50 [0052.387] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0052.387] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0052.387] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0052.388] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0052.388] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 0 [0052.388] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0052.388] SetErrorMode (uMode=0x0) returned 0x1 [0052.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x5ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0052.388] SetErrorMode (uMode=0x1) returned 0x0 [0052.388] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b4a90 [0052.388] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.388] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.389] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.389] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.389] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.389] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.389] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.389] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.389] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.389] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.389] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.389] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.389] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.390] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.390] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.390] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.390] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.390] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0052.390] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 0 [0052.390] FindClose (in: hFindFile=0x7b4a90 | out: hFindFile=0x7b4a90) returned 1 [0052.390] SetErrorMode (uMode=0x0) returned 0x1 [0052.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x5ae350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local", lpFilePart=0x0) returned 0x23 [0052.391] SetErrorMode (uMode=0x1) returned 0x0 [0052.391] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4d90 [0052.391] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.391] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.391] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0052.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 0 [0052.393] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0052.393] SetErrorMode (uMode=0x0) returned 0x1 [0052.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x29 [0052.393] SetErrorMode (uMode=0x1) returned 0x0 [0052.393] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4a90 [0052.394] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0052.394] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0052.394] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0052.394] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0052.394] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 0 [0052.394] FindClose (in: hFindFile=0x7b4a90 | out: hFindFile=0x7b4a90) returned 1 [0052.395] SetErrorMode (uMode=0x0) returned 0x1 [0052.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x5ae2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x29 [0052.398] SetErrorMode (uMode=0x1) returned 0x0 [0052.398] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4e50 [0052.398] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0052.398] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0052.398] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0052.398] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0052.398] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 0 [0052.399] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0052.399] SetErrorMode (uMode=0x0) returned 0x1 [0052.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x31 [0052.400] SetErrorMode (uMode=0x1) returned 0x0 [0052.400] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4a90 [0052.400] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0052.400] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0052.400] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0052.400] FindClose (in: hFindFile=0x7b4a90 | out: hFindFile=0x7b4a90) returned 1 [0052.401] SetErrorMode (uMode=0x0) returned 0x1 [0052.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x31 [0052.401] SetErrorMode (uMode=0x1) returned 0x0 [0052.401] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4a90 [0052.401] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0052.401] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0052.401] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0052.401] FindClose (in: hFindFile=0x7b4a90 | out: hFindFile=0x7b4a90) returned 1 [0052.401] SetErrorMode (uMode=0x0) returned 0x1 [0052.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x34 [0052.402] SetErrorMode (uMode=0x1) returned 0x0 [0052.402] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4a90 [0052.416] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.416] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.416] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.416] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.416] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.416] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.416] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.417] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.417] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.417] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.417] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.417] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0052.417] FindClose (in: hFindFile=0x7b4a90 | out: hFindFile=0x7b4a90) returned 1 [0052.418] SetErrorMode (uMode=0x0) returned 0x1 [0052.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x34 [0052.418] SetErrorMode (uMode=0x1) returned 0x0 [0052.419] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4e50 [0052.420] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.420] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.421] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.421] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.421] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0052.421] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0052.422] SetErrorMode (uMode=0x0) returned 0x1 [0052.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x3a [0052.422] SetErrorMode (uMode=0x1) returned 0x0 [0052.422] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0052.425] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0052.425] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0052.425] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0052.425] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0052.426] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0052.426] SetErrorMode (uMode=0x0) returned 0x1 [0052.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x3a [0052.427] SetErrorMode (uMode=0x1) returned 0x0 [0052.427] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0052.428] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0052.428] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0052.428] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0052.428] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0052.428] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0052.429] SetErrorMode (uMode=0x0) returned 0x1 [0052.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x48 [0052.430] SetErrorMode (uMode=0x1) returned 0x0 [0052.430] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0052.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0052.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0052.431] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0052.431] SetErrorMode (uMode=0x0) returned 0x1 [0052.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x48 [0052.431] SetErrorMode (uMode=0x1) returned 0x0 [0052.431] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4a90 [0052.431] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0052.432] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0052.432] FindClose (in: hFindFile=0x7b4a90 | out: hFindFile=0x7b4a90) returned 1 [0052.432] SetErrorMode (uMode=0x0) returned 0x1 [0052.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x31 [0052.432] SetErrorMode (uMode=0x1) returned 0x0 [0052.432] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0052.438] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0052.439] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0052.439] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0052.439] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0052.439] SetErrorMode (uMode=0x0) returned 0x1 [0052.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x31 [0052.439] SetErrorMode (uMode=0x1) returned 0x0 [0052.439] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4a90 [0052.440] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0052.440] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0052.440] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0052.440] FindClose (in: hFindFile=0x7b4a90 | out: hFindFile=0x7b4a90) returned 1 [0052.440] SetErrorMode (uMode=0x0) returned 0x1 [0052.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x34 [0052.441] SetErrorMode (uMode=0x1) returned 0x0 [0052.441] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4a90 [0052.441] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.441] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.441] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0052.441] FindClose (in: hFindFile=0x7b4a90 | out: hFindFile=0x7b4a90) returned 1 [0052.441] SetErrorMode (uMode=0x0) returned 0x1 [0052.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x34 [0052.442] SetErrorMode (uMode=0x1) returned 0x0 [0052.442] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0052.442] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.442] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.442] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0052.442] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0052.442] SetErrorMode (uMode=0x0) returned 0x1 [0052.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x3c [0052.443] SetErrorMode (uMode=0x1) returned 0x0 [0052.443] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0052.443] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0052.443] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0052.443] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0052.443] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0052.444] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0052.444] SetErrorMode (uMode=0x0) returned 0x1 [0052.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x3c [0052.444] SetErrorMode (uMode=0x1) returned 0x0 [0052.444] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0052.444] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0052.444] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0052.445] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0052.445] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0052.445] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0052.445] SetErrorMode (uMode=0x0) returned 0x1 [0052.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", lpFilePart=0x0) returned 0x42 [0052.445] SetErrorMode (uMode=0x1) returned 0x0 [0052.445] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b41f0 [0052.456] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0052.456] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0052.456] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0052.456] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 0 [0052.456] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0052.456] SetErrorMode (uMode=0x0) returned 0x1 [0052.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", lpFilePart=0x0) returned 0x42 [0052.457] SetErrorMode (uMode=0x1) returned 0x0 [0052.457] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4a90 [0052.457] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0052.457] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0052.458] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 0 [0052.458] FindClose (in: hFindFile=0x7b4a90 | out: hFindFile=0x7b4a90) returned 1 [0052.458] SetErrorMode (uMode=0x0) returned 0x1 [0052.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache", lpFilePart=0x0) returned 0x48 [0052.458] SetErrorMode (uMode=0x1) returned 0x0 [0052.458] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b41f0 [0052.458] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0052.459] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0052.459] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0052.459] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0052.459] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0052.459] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0052.459] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0052.459] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0052.459] SetErrorMode (uMode=0x0) returned 0x1 [0052.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache", lpFilePart=0x0) returned 0x48 [0052.460] SetErrorMode (uMode=0x1) returned 0x0 [0052.460] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4e50 [0052.460] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0052.460] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0052.461] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0052.461] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0052.461] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0052.461] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0052.461] SetErrorMode (uMode=0x0) returned 0x1 [0052.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", lpFilePart=0x0) returned 0x43 [0052.461] SetErrorMode (uMode=0x1) returned 0x0 [0052.461] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b41f0 [0052.462] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0052.462] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0052.462] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0052.462] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 0 [0052.462] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0052.462] SetErrorMode (uMode=0x0) returned 0x1 [0052.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", lpFilePart=0x0) returned 0x43 [0052.463] SetErrorMode (uMode=0x1) returned 0x0 [0052.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0052.463] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0052.464] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0052.464] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0052.464] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 0 [0052.464] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0052.464] SetErrorMode (uMode=0x0) returned 0x1 [0052.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x2f [0052.465] SetErrorMode (uMode=0x1) returned 0x0 [0052.465] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b41f0 [0052.465] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0052.465] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0052.465] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0052.465] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0052.465] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0052.465] SetErrorMode (uMode=0x0) returned 0x1 [0052.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x2f [0052.466] SetErrorMode (uMode=0x1) returned 0x0 [0052.466] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4a90 [0052.466] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0052.466] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0052.466] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0052.466] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0052.466] FindClose (in: hFindFile=0x7b4a90 | out: hFindFile=0x7b4a90) returned 1 [0052.466] SetErrorMode (uMode=0x0) returned 0x1 [0052.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x38 [0052.467] SetErrorMode (uMode=0x1) returned 0x0 [0052.467] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b41f0 [0052.468] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.468] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.468] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0052.468] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0052.468] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0052.468] SetErrorMode (uMode=0x0) returned 0x1 [0052.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x38 [0052.468] SetErrorMode (uMode=0x1) returned 0x0 [0052.469] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4a90 [0052.469] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.469] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.469] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0052.469] FindNextFileW (in: hFindFile=0x7b4a90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0052.469] FindClose (in: hFindFile=0x7b4a90 | out: hFindFile=0x7b4a90) returned 1 [0052.469] SetErrorMode (uMode=0x0) returned 0x1 [0052.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x34 [0052.470] SetErrorMode (uMode=0x1) returned 0x0 [0052.470] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Application Data\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0xffffffffffffffff [0053.382] SetErrorMode (uMode=0x0) returned 0x1 [0053.384] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x27 [0053.384] SetErrorMode (uMode=0x1) returned 0x0 [0053.384] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4d90 [0053.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0053.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0053.384] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 0 [0053.384] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.385] SetErrorMode (uMode=0x0) returned 0x1 [0053.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x5ae2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x27 [0053.385] SetErrorMode (uMode=0x1) returned 0x0 [0053.385] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0053.385] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0053.385] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0053.385] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 0 [0053.385] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.385] SetErrorMode (uMode=0x0) returned 0x1 [0053.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x31 [0053.386] SetErrorMode (uMode=0x1) returned 0x0 [0053.386] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0053.386] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.386] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.386] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0053.386] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.386] SetErrorMode (uMode=0x0) returned 0x1 [0053.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x31 [0053.387] SetErrorMode (uMode=0x1) returned 0x0 [0053.387] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0053.387] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.387] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.387] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0053.387] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.387] SetErrorMode (uMode=0x0) returned 0x1 [0053.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x3e [0053.387] SetErrorMode (uMode=0x1) returned 0x0 [0053.387] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4310 [0053.388] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.388] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0053.388] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0053.388] SetErrorMode (uMode=0x0) returned 0x1 [0053.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x3e [0053.388] SetErrorMode (uMode=0x1) returned 0x0 [0053.388] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0053.388] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.388] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0053.389] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.389] SetErrorMode (uMode=0x0) returned 0x1 [0053.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29 [0053.389] SetErrorMode (uMode=0x1) returned 0x0 [0053.389] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4e50 [0053.389] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0053.389] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0053.389] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0053.389] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0053.389] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 0 [0053.389] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0053.390] SetErrorMode (uMode=0x0) returned 0x1 [0053.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x5ae2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x29 [0053.390] SetErrorMode (uMode=0x1) returned 0x0 [0053.390] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0053.390] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0053.390] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0053.390] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0053.390] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0053.390] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 0 [0053.390] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.391] SetErrorMode (uMode=0x0) returned 0x1 [0053.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e [0053.391] SetErrorMode (uMode=0x1) returned 0x0 [0053.391] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b41f0 [0053.391] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.392] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.392] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0053.392] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.392] SetErrorMode (uMode=0x0) returned 0x1 [0053.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x2e [0053.392] SetErrorMode (uMode=0x1) returned 0x0 [0053.392] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b41f0 [0053.392] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.393] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.393] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0053.393] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.393] SetErrorMode (uMode=0x0) returned 0x1 [0053.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32 [0053.393] SetErrorMode (uMode=0x1) returned 0x0 [0053.393] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0053.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0053.393] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.394] SetErrorMode (uMode=0x0) returned 0x1 [0053.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x32 [0053.394] SetErrorMode (uMode=0x1) returned 0x0 [0053.394] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0053.394] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.394] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0053.394] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.394] SetErrorMode (uMode=0x0) returned 0x1 [0053.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34 [0053.395] SetErrorMode (uMode=0x1) returned 0x0 [0053.395] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0053.409] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.409] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.409] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.409] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.409] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.409] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.410] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.410] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0053.410] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.410] SetErrorMode (uMode=0x0) returned 0x1 [0053.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x34 [0053.411] SetErrorMode (uMode=0x1) returned 0x0 [0053.411] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0053.411] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.411] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.411] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.411] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.411] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.411] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.412] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.412] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0053.412] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.412] SetErrorMode (uMode=0x0) returned 0x1 [0053.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x2a [0053.412] SetErrorMode (uMode=0x1) returned 0x0 [0053.412] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4d90 [0053.413] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0053.413] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0053.413] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0053.413] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 0 [0053.413] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.413] SetErrorMode (uMode=0x0) returned 0x1 [0053.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x5ae2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x2a [0053.414] SetErrorMode (uMode=0x1) returned 0x0 [0053.414] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0053.414] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0053.414] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0053.414] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0053.414] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 0 [0053.414] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.414] SetErrorMode (uMode=0x0) returned 0x1 [0053.414] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x31 [0053.414] SetErrorMode (uMode=0x1) returned 0x0 [0053.414] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0053.415] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.415] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0053.415] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0053.415] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.415] SetErrorMode (uMode=0x0) returned 0x1 [0053.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x31 [0053.415] SetErrorMode (uMode=0x1) returned 0x0 [0053.416] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0053.416] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.416] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0053.416] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0053.416] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.416] SetErrorMode (uMode=0x0) returned 0x1 [0053.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3b [0053.416] SetErrorMode (uMode=0x1) returned 0x0 [0053.416] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0053.461] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.542] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.542] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.542] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.542] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.542] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.542] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.542] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.543] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.543] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.543] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.543] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.543] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.543] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.543] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.543] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.544] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.544] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.544] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.544] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.544] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.544] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.544] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.544] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.545] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.545] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.545] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.545] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.545] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.545] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0053.545] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0053.545] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.546] SetErrorMode (uMode=0x0) returned 0x1 [0053.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x3b [0053.547] SetErrorMode (uMode=0x1) returned 0x0 [0053.547] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0053.547] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.548] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.549] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.549] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.549] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.549] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.549] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.549] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.549] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.549] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.550] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0053.551] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0053.551] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.552] SetErrorMode (uMode=0x0) returned 0x1 [0053.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x53 [0053.552] SetErrorMode (uMode=0x1) returned 0x0 [0053.553] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0053.554] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.554] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0053.554] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.555] SetErrorMode (uMode=0x0) returned 0x1 [0053.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x53 [0053.555] SetErrorMode (uMode=0x1) returned 0x0 [0053.555] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0053.557] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.557] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0053.557] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.557] SetErrorMode (uMode=0x0) returned 0x1 [0053.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x44 [0053.557] SetErrorMode (uMode=0x1) returned 0x0 [0053.558] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4310 [0053.558] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.558] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.558] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.558] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.558] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0053.558] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0053.558] SetErrorMode (uMode=0x0) returned 0x1 [0053.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x44 [0053.559] SetErrorMode (uMode=0x1) returned 0x0 [0053.559] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0053.559] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.559] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.559] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.559] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.559] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0053.559] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.559] SetErrorMode (uMode=0x0) returned 0x1 [0053.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x4c [0053.560] SetErrorMode (uMode=0x1) returned 0x0 [0053.560] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4e50 [0053.560] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0053.561] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 0 [0053.561] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0053.561] SetErrorMode (uMode=0x0) returned 0x1 [0053.561] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x4c [0053.561] SetErrorMode (uMode=0x1) returned 0x0 [0053.561] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0053.561] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0053.562] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 0 [0053.562] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.562] SetErrorMode (uMode=0x0) returned 0x1 [0053.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x43 [0053.562] SetErrorMode (uMode=0x1) returned 0x0 [0053.562] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0053.568] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.570] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.571] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.572] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.572] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.572] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.572] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.572] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.572] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.575] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.576] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.576] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.576] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.576] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0053.576] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0053.576] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.576] SetErrorMode (uMode=0x0) returned 0x1 [0053.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x43 [0053.577] SetErrorMode (uMode=0x1) returned 0x0 [0053.577] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.578] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.579] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.580] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.580] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.580] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.580] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.580] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.580] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.580] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.580] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.580] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.580] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.580] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.581] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.581] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.581] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.581] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0053.581] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0053.581] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.582] SetErrorMode (uMode=0x0) returned 0x1 [0053.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x49 [0053.582] SetErrorMode (uMode=0x1) returned 0x0 [0053.582] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0053.595] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0053.595] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0053.595] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0053.598] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.599] SetErrorMode (uMode=0x0) returned 0x1 [0053.599] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x49 [0053.599] SetErrorMode (uMode=0x1) returned 0x0 [0053.599] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4310 [0053.605] SetErrorMode (uMode=0x0) returned 0x1 [0053.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", lpFilePart=0x0) returned 0x4d [0053.605] SetErrorMode (uMode=0x1) returned 0x0 [0053.605] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4e50 [0053.606] SetErrorMode (uMode=0x0) returned 0x1 [0053.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases", lpFilePart=0x0) returned 0x4d [0053.607] SetErrorMode (uMode=0x1) returned 0x0 [0053.607] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0053.607] SetErrorMode (uMode=0x0) returned 0x1 [0053.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x60 [0053.607] SetErrorMode (uMode=0x1) returned 0x0 [0053.607] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0053.622] SetErrorMode (uMode=0x0) returned 0x1 [0053.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x60 [0053.622] SetErrorMode (uMode=0x1) returned 0x0 [0053.622] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0053.624] SetErrorMode (uMode=0x0) returned 0x1 [0053.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x53 [0053.624] SetErrorMode (uMode=0x1) returned 0x0 [0053.624] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0053.642] SetErrorMode (uMode=0x0) returned 0x1 [0053.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x53 [0053.643] SetErrorMode (uMode=0x1) returned 0x0 [0053.643] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0053.644] SetErrorMode (uMode=0x0) returned 0x1 [0053.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x53 [0053.644] SetErrorMode (uMode=0x1) returned 0x0 [0053.644] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b41f0 [0053.654] SetErrorMode (uMode=0x0) returned 0x1 [0053.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x53 [0053.654] SetErrorMode (uMode=0x1) returned 0x0 [0053.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b41f0 [0053.655] SetErrorMode (uMode=0x0) returned 0x1 [0053.656] SetErrorMode (uMode=0x1) returned 0x0 [0053.656] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0053.677] SetErrorMode (uMode=0x0) returned 0x1 [0053.677] SetErrorMode (uMode=0x1) returned 0x0 [0053.677] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0053.678] SetErrorMode (uMode=0x0) returned 0x1 [0053.678] SetErrorMode (uMode=0x1) returned 0x0 [0053.679] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0053.683] SetErrorMode (uMode=0x0) returned 0x1 [0053.683] SetErrorMode (uMode=0x1) returned 0x0 [0053.683] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0053.683] SetErrorMode (uMode=0x0) returned 0x1 [0053.683] SetErrorMode (uMode=0x1) returned 0x0 [0053.683] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4d90 [0053.695] SetErrorMode (uMode=0x0) returned 0x1 [0053.695] SetErrorMode (uMode=0x1) returned 0x0 [0053.695] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0053.698] SetErrorMode (uMode=0x0) returned 0x1 [0053.698] SetErrorMode (uMode=0x1) returned 0x0 [0053.699] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4310 [0053.715] SetErrorMode (uMode=0x0) returned 0x1 [0053.715] SetErrorMode (uMode=0x1) returned 0x0 [0053.715] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b41f0 [0053.716] SetErrorMode (uMode=0x0) returned 0x1 [0053.717] SetErrorMode (uMode=0x1) returned 0x0 [0053.717] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.718] SetErrorMode (uMode=0x0) returned 0x1 [0053.718] SetErrorMode (uMode=0x1) returned 0x0 [0053.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.718] SetErrorMode (uMode=0x0) returned 0x1 [0053.718] SetErrorMode (uMode=0x1) returned 0x0 [0053.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.718] SetErrorMode (uMode=0x0) returned 0x1 [0053.718] SetErrorMode (uMode=0x1) returned 0x0 [0053.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.718] SetErrorMode (uMode=0x0) returned 0x1 [0053.719] SetErrorMode (uMode=0x1) returned 0x0 [0053.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.719] SetErrorMode (uMode=0x0) returned 0x1 [0053.719] SetErrorMode (uMode=0x1) returned 0x0 [0053.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.719] SetErrorMode (uMode=0x0) returned 0x1 [0053.720] SetErrorMode (uMode=0x1) returned 0x0 [0053.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.720] SetErrorMode (uMode=0x0) returned 0x1 [0053.720] SetErrorMode (uMode=0x1) returned 0x0 [0053.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.720] SetErrorMode (uMode=0x0) returned 0x1 [0053.720] SetErrorMode (uMode=0x1) returned 0x0 [0053.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.721] SetErrorMode (uMode=0x0) returned 0x1 [0053.721] SetErrorMode (uMode=0x1) returned 0x0 [0053.721] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.721] SetErrorMode (uMode=0x0) returned 0x1 [0053.721] SetErrorMode (uMode=0x1) returned 0x0 [0053.721] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.721] SetErrorMode (uMode=0x0) returned 0x1 [0053.721] SetErrorMode (uMode=0x1) returned 0x0 [0053.721] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.721] SetErrorMode (uMode=0x0) returned 0x1 [0053.722] SetErrorMode (uMode=0x1) returned 0x0 [0053.722] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.722] SetErrorMode (uMode=0x0) returned 0x1 [0053.722] SetErrorMode (uMode=0x1) returned 0x0 [0053.722] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.722] SetErrorMode (uMode=0x0) returned 0x1 [0053.722] SetErrorMode (uMode=0x1) returned 0x0 [0053.723] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.723] SetErrorMode (uMode=0x0) returned 0x1 [0053.723] SetErrorMode (uMode=0x1) returned 0x0 [0053.724] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.724] SetErrorMode (uMode=0x0) returned 0x1 [0053.724] SetErrorMode (uMode=0x1) returned 0x0 [0053.724] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.724] SetErrorMode (uMode=0x0) returned 0x1 [0053.724] SetErrorMode (uMode=0x1) returned 0x0 [0053.724] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.725] SetErrorMode (uMode=0x0) returned 0x1 [0053.725] SetErrorMode (uMode=0x1) returned 0x0 [0053.725] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0053.725] SetErrorMode (uMode=0x0) returned 0x1 [0053.725] SetErrorMode (uMode=0x1) returned 0x0 [0053.725] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.725] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.725] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.725] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.726] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.726] SetErrorMode (uMode=0x0) returned 0x1 [0053.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0053.726] SetErrorMode (uMode=0x1) returned 0x0 [0053.726] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.727] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.727] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.727] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.727] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.727] SetErrorMode (uMode=0x0) returned 0x1 [0053.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0053.728] SetErrorMode (uMode=0x1) returned 0x0 [0053.728] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.728] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.728] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.728] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.728] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.728] SetErrorMode (uMode=0x0) returned 0x1 [0053.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0053.728] SetErrorMode (uMode=0x1) returned 0x0 [0053.728] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.729] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.729] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.729] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.729] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.729] SetErrorMode (uMode=0x0) returned 0x1 [0053.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0053.729] SetErrorMode (uMode=0x1) returned 0x0 [0053.729] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.730] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.730] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.730] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.730] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.730] SetErrorMode (uMode=0x0) returned 0x1 [0053.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0053.730] SetErrorMode (uMode=0x1) returned 0x0 [0053.730] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.731] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.731] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.731] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.731] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.731] SetErrorMode (uMode=0x0) returned 0x1 [0053.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0053.731] SetErrorMode (uMode=0x1) returned 0x0 [0053.731] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.732] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.732] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.732] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.732] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.732] SetErrorMode (uMode=0x0) returned 0x1 [0053.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0053.732] SetErrorMode (uMode=0x1) returned 0x0 [0053.732] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0053.733] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.733] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.733] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.733] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0053.733] SetErrorMode (uMode=0x0) returned 0x1 [0053.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0053.733] SetErrorMode (uMode=0x1) returned 0x0 [0053.733] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.733] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.734] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.734] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.734] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.734] SetErrorMode (uMode=0x0) returned 0x1 [0053.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0053.734] SetErrorMode (uMode=0x1) returned 0x0 [0053.734] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.735] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.735] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.735] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.735] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.735] SetErrorMode (uMode=0x0) returned 0x1 [0053.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0053.736] SetErrorMode (uMode=0x1) returned 0x0 [0053.736] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.736] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.736] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.736] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.736] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.736] SetErrorMode (uMode=0x0) returned 0x1 [0053.737] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0053.737] SetErrorMode (uMode=0x1) returned 0x0 [0053.737] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.737] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.737] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.737] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.738] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.738] SetErrorMode (uMode=0x0) returned 0x1 [0053.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0053.738] SetErrorMode (uMode=0x1) returned 0x0 [0053.738] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.738] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.738] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.738] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.739] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.739] SetErrorMode (uMode=0x0) returned 0x1 [0053.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0053.739] SetErrorMode (uMode=0x1) returned 0x0 [0053.739] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.740] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.740] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.740] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.740] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.740] SetErrorMode (uMode=0x0) returned 0x1 [0053.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0053.741] SetErrorMode (uMode=0x1) returned 0x0 [0053.741] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.741] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.741] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.741] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.741] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.741] SetErrorMode (uMode=0x0) returned 0x1 [0053.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0053.742] SetErrorMode (uMode=0x1) returned 0x0 [0053.742] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.742] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.742] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.742] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.742] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.743] SetErrorMode (uMode=0x0) returned 0x1 [0053.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0053.744] SetErrorMode (uMode=0x1) returned 0x0 [0053.744] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.744] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.744] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.744] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.744] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.744] SetErrorMode (uMode=0x0) returned 0x1 [0053.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0053.744] SetErrorMode (uMode=0x1) returned 0x0 [0053.745] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.746] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.746] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.746] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.746] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.746] SetErrorMode (uMode=0x0) returned 0x1 [0053.746] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0053.746] SetErrorMode (uMode=0x1) returned 0x0 [0053.746] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.747] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.747] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.747] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.747] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.747] SetErrorMode (uMode=0x0) returned 0x1 [0053.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0053.747] SetErrorMode (uMode=0x1) returned 0x0 [0053.747] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.748] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.748] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.748] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.748] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.748] SetErrorMode (uMode=0x0) returned 0x1 [0053.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0053.749] SetErrorMode (uMode=0x1) returned 0x0 [0053.749] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.749] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.749] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.749] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.749] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.749] SetErrorMode (uMode=0x0) returned 0x1 [0053.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0053.750] SetErrorMode (uMode=0x1) returned 0x0 [0053.750] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.751] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.751] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.751] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.751] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.751] SetErrorMode (uMode=0x0) returned 0x1 [0053.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0053.752] SetErrorMode (uMode=0x1) returned 0x0 [0053.752] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.752] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.752] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.752] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.752] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.752] SetErrorMode (uMode=0x0) returned 0x1 [0053.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0053.752] SetErrorMode (uMode=0x1) returned 0x0 [0053.753] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.753] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.753] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.753] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.753] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.753] SetErrorMode (uMode=0x0) returned 0x1 [0053.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0053.754] SetErrorMode (uMode=0x1) returned 0x0 [0053.754] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.754] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.754] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.754] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.754] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.754] SetErrorMode (uMode=0x0) returned 0x1 [0053.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0053.755] SetErrorMode (uMode=0x1) returned 0x0 [0053.755] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.755] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.756] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.756] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.756] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.756] SetErrorMode (uMode=0x0) returned 0x1 [0053.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0053.756] SetErrorMode (uMode=0x1) returned 0x0 [0053.757] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0053.757] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.757] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.757] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.757] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0053.757] SetErrorMode (uMode=0x0) returned 0x1 [0053.757] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0053.757] SetErrorMode (uMode=0x1) returned 0x0 [0053.757] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.758] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.758] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.758] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.758] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.758] SetErrorMode (uMode=0x0) returned 0x1 [0053.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0053.759] SetErrorMode (uMode=0x1) returned 0x0 [0053.759] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.759] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.759] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.759] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.760] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.760] SetErrorMode (uMode=0x0) returned 0x1 [0053.760] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0053.760] SetErrorMode (uMode=0x1) returned 0x0 [0053.760] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.761] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.761] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.761] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.761] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.761] SetErrorMode (uMode=0x0) returned 0x1 [0053.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0053.762] SetErrorMode (uMode=0x1) returned 0x0 [0053.762] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.762] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.762] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.762] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.762] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.762] SetErrorMode (uMode=0x0) returned 0x1 [0053.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0053.762] SetErrorMode (uMode=0x1) returned 0x0 [0053.763] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.763] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.764] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.764] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.764] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.764] SetErrorMode (uMode=0x0) returned 0x1 [0053.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0053.764] SetErrorMode (uMode=0x1) returned 0x0 [0053.764] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.764] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.765] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.765] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.765] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.765] SetErrorMode (uMode=0x0) returned 0x1 [0053.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0053.765] SetErrorMode (uMode=0x1) returned 0x0 [0053.765] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.766] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.766] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.766] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.766] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.766] SetErrorMode (uMode=0x0) returned 0x1 [0053.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0053.766] SetErrorMode (uMode=0x1) returned 0x0 [0053.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4e50 [0053.767] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.767] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.767] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.767] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0053.767] SetErrorMode (uMode=0x0) returned 0x1 [0053.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0053.767] SetErrorMode (uMode=0x1) returned 0x0 [0053.767] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.767] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.767] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.767] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.767] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.768] SetErrorMode (uMode=0x0) returned 0x1 [0053.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0053.768] SetErrorMode (uMode=0x1) returned 0x0 [0053.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.768] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.768] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.768] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.768] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.768] SetErrorMode (uMode=0x0) returned 0x1 [0053.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0053.768] SetErrorMode (uMode=0x1) returned 0x0 [0053.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.769] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.769] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.769] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.769] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.769] SetErrorMode (uMode=0x0) returned 0x1 [0053.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0053.770] SetErrorMode (uMode=0x1) returned 0x0 [0053.770] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.770] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.770] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.770] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.770] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.770] SetErrorMode (uMode=0x0) returned 0x1 [0053.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0053.770] SetErrorMode (uMode=0x1) returned 0x0 [0053.770] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0053.770] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.770] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.771] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.771] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0053.771] SetErrorMode (uMode=0x0) returned 0x1 [0053.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0053.771] SetErrorMode (uMode=0x1) returned 0x0 [0053.771] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.771] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.771] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.771] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.771] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.771] SetErrorMode (uMode=0x0) returned 0x1 [0053.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0053.771] SetErrorMode (uMode=0x1) returned 0x0 [0053.772] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.772] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.772] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.772] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.772] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.772] SetErrorMode (uMode=0x0) returned 0x1 [0053.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0053.773] SetErrorMode (uMode=0x1) returned 0x0 [0053.773] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.773] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.773] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.773] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.773] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.773] SetErrorMode (uMode=0x0) returned 0x1 [0053.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0053.773] SetErrorMode (uMode=0x1) returned 0x0 [0053.773] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.774] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.774] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.774] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.774] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.774] SetErrorMode (uMode=0x0) returned 0x1 [0053.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0053.774] SetErrorMode (uMode=0x1) returned 0x0 [0053.775] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.775] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.775] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.775] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.775] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.775] SetErrorMode (uMode=0x0) returned 0x1 [0053.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0053.775] SetErrorMode (uMode=0x1) returned 0x0 [0053.776] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.776] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.776] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.776] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.777] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.777] SetErrorMode (uMode=0x0) returned 0x1 [0053.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0053.777] SetErrorMode (uMode=0x1) returned 0x0 [0053.777] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4e50 [0053.777] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.778] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.778] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.778] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0053.778] SetErrorMode (uMode=0x0) returned 0x1 [0053.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0053.778] SetErrorMode (uMode=0x1) returned 0x0 [0053.778] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.778] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.779] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.779] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.779] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.779] SetErrorMode (uMode=0x0) returned 0x1 [0053.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0053.779] SetErrorMode (uMode=0x1) returned 0x0 [0053.779] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.780] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.780] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.780] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.780] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.780] SetErrorMode (uMode=0x0) returned 0x1 [0053.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0053.780] SetErrorMode (uMode=0x1) returned 0x0 [0053.780] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.781] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.781] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.781] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.781] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.782] SetErrorMode (uMode=0x0) returned 0x1 [0053.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0053.782] SetErrorMode (uMode=0x1) returned 0x0 [0053.782] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.782] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.783] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.783] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.783] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.783] SetErrorMode (uMode=0x0) returned 0x1 [0053.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0053.783] SetErrorMode (uMode=0x1) returned 0x0 [0053.783] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.783] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.784] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.784] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.784] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.784] SetErrorMode (uMode=0x0) returned 0x1 [0053.784] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0053.784] SetErrorMode (uMode=0x1) returned 0x0 [0053.784] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.785] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.785] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.785] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.785] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.785] SetErrorMode (uMode=0x0) returned 0x1 [0053.785] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0053.785] SetErrorMode (uMode=0x1) returned 0x0 [0053.785] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.788] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.788] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.788] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.788] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.788] SetErrorMode (uMode=0x0) returned 0x1 [0053.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0053.789] SetErrorMode (uMode=0x1) returned 0x0 [0053.789] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.789] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.789] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.789] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.789] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.789] SetErrorMode (uMode=0x0) returned 0x1 [0053.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0053.790] SetErrorMode (uMode=0x1) returned 0x0 [0053.790] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.790] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.790] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.791] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.791] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.791] SetErrorMode (uMode=0x0) returned 0x1 [0053.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0053.791] SetErrorMode (uMode=0x1) returned 0x0 [0053.791] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.792] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.792] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.792] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.792] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.792] SetErrorMode (uMode=0x0) returned 0x1 [0053.792] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0053.792] SetErrorMode (uMode=0x1) returned 0x0 [0053.792] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.793] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.793] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.793] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.793] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.793] SetErrorMode (uMode=0x0) returned 0x1 [0053.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0053.794] SetErrorMode (uMode=0x1) returned 0x0 [0053.794] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.794] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.794] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.794] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.794] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.795] SetErrorMode (uMode=0x0) returned 0x1 [0053.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0053.795] SetErrorMode (uMode=0x1) returned 0x0 [0053.795] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.795] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.795] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.795] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.795] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.795] SetErrorMode (uMode=0x0) returned 0x1 [0053.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0053.796] SetErrorMode (uMode=0x1) returned 0x0 [0053.796] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.796] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.796] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.796] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.796] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.796] SetErrorMode (uMode=0x0) returned 0x1 [0053.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0053.796] SetErrorMode (uMode=0x1) returned 0x0 [0053.797] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.797] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.797] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.797] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.797] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.797] SetErrorMode (uMode=0x0) returned 0x1 [0053.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0053.798] SetErrorMode (uMode=0x1) returned 0x0 [0053.798] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.798] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.798] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.798] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.798] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.798] SetErrorMode (uMode=0x0) returned 0x1 [0053.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0053.798] SetErrorMode (uMode=0x1) returned 0x0 [0053.798] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.799] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.799] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.799] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.799] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.799] SetErrorMode (uMode=0x0) returned 0x1 [0053.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0053.799] SetErrorMode (uMode=0x1) returned 0x0 [0053.799] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.800] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.800] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.800] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.800] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.800] SetErrorMode (uMode=0x0) returned 0x1 [0053.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x5ade80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x7f [0053.800] SetErrorMode (uMode=0x1) returned 0x0 [0053.800] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0053.801] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.801] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.801] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.801] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 0 [0053.801] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.801] SetErrorMode (uMode=0x0) returned 0x1 [0053.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x5ade50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x7f [0053.802] SetErrorMode (uMode=0x1) returned 0x0 [0053.802] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0053.802] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.802] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.802] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.802] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 0 [0053.802] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.802] SetErrorMode (uMode=0x0) returned 0x1 [0053.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x6f [0053.802] SetErrorMode (uMode=0x1) returned 0x0 [0053.802] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0053.803] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0053.803] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0053.803] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0053.803] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.803] SetErrorMode (uMode=0x0) returned 0x1 [0053.803] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x6f [0053.803] SetErrorMode (uMode=0x1) returned 0x0 [0053.803] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0053.803] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0053.803] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0053.803] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0053.803] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.804] SetErrorMode (uMode=0x0) returned 0x1 [0053.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", nBufferLength=0x105, lpBuffer=0x5adf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpFilePart=0x0) returned 0x75 [0053.804] SetErrorMode (uMode=0x1) returned 0x0 [0053.804] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4d90 [0053.810] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0053.810] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0053.810] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0053.810] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0053.810] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0053.810] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0053.810] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0053.810] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0053.810] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 0 [0053.810] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.811] SetErrorMode (uMode=0x0) returned 0x1 [0053.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", nBufferLength=0x105, lpBuffer=0x5adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpFilePart=0x0) returned 0x75 [0053.811] SetErrorMode (uMode=0x1) returned 0x0 [0053.811] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0053.812] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0053.812] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0053.812] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0053.812] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0053.812] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0053.812] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0053.812] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0053.812] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0053.812] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 0 [0053.812] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.813] SetErrorMode (uMode=0x0) returned 0x1 [0053.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x5ade80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x7e [0053.813] SetErrorMode (uMode=0x1) returned 0x0 [0053.813] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0053.827] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.827] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.827] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.827] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.827] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.827] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.827] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.828] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.829] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.829] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.829] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.829] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.829] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.829] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.829] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.829] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0053.829] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 0 [0053.829] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.830] SetErrorMode (uMode=0x0) returned 0x1 [0053.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x5ade50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x7e [0053.830] SetErrorMode (uMode=0x1) returned 0x0 [0053.830] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0053.831] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.831] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.831] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.831] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.831] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.832] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.833] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.833] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.833] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.833] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.833] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.833] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.833] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.833] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.833] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.833] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.834] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.835] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.835] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.835] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.835] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0053.835] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 0 [0053.835] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.836] SetErrorMode (uMode=0x0) returned 0x1 [0053.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0053.836] SetErrorMode (uMode=0x1) returned 0x0 [0053.836] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.837] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.838] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.838] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.838] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.838] SetErrorMode (uMode=0x0) returned 0x1 [0053.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x81 [0053.838] SetErrorMode (uMode=0x1) returned 0x0 [0053.839] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.839] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.839] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.839] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.839] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.839] SetErrorMode (uMode=0x0) returned 0x1 [0053.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0053.839] SetErrorMode (uMode=0x1) returned 0x0 [0053.839] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.840] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.840] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.840] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.841] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.841] SetErrorMode (uMode=0x0) returned 0x1 [0053.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x81 [0053.841] SetErrorMode (uMode=0x1) returned 0x0 [0053.841] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.841] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.842] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.842] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.842] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.842] SetErrorMode (uMode=0x0) returned 0x1 [0053.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0053.842] SetErrorMode (uMode=0x1) returned 0x0 [0053.842] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0053.843] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.843] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.843] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.843] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0053.843] SetErrorMode (uMode=0x0) returned 0x1 [0053.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0053.844] SetErrorMode (uMode=0x1) returned 0x0 [0053.844] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.844] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.844] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.844] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.844] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.844] SetErrorMode (uMode=0x0) returned 0x1 [0053.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0053.845] SetErrorMode (uMode=0x1) returned 0x0 [0053.845] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.845] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.845] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.846] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.846] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.846] SetErrorMode (uMode=0x0) returned 0x1 [0053.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0053.846] SetErrorMode (uMode=0x1) returned 0x0 [0053.846] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.846] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.847] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.847] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.847] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.847] SetErrorMode (uMode=0x0) returned 0x1 [0053.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0053.847] SetErrorMode (uMode=0x1) returned 0x0 [0053.847] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0053.847] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.847] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.847] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.847] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0053.848] SetErrorMode (uMode=0x0) returned 0x1 [0053.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0053.848] SetErrorMode (uMode=0x1) returned 0x0 [0053.848] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.848] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.848] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.848] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.848] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.848] SetErrorMode (uMode=0x0) returned 0x1 [0053.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0053.849] SetErrorMode (uMode=0x1) returned 0x0 [0053.849] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0053.850] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.850] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.850] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.850] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0053.850] SetErrorMode (uMode=0x0) returned 0x1 [0053.850] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0053.850] SetErrorMode (uMode=0x1) returned 0x0 [0053.850] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.850] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.851] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.851] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.851] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.851] SetErrorMode (uMode=0x0) returned 0x1 [0053.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0053.851] SetErrorMode (uMode=0x1) returned 0x0 [0053.851] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.851] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.851] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.851] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.852] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.852] SetErrorMode (uMode=0x0) returned 0x1 [0053.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0053.852] SetErrorMode (uMode=0x1) returned 0x0 [0053.871] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.871] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.871] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.871] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.872] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.872] SetErrorMode (uMode=0x0) returned 0x1 [0053.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0053.872] SetErrorMode (uMode=0x1) returned 0x0 [0053.872] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.873] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.873] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.873] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.873] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.873] SetErrorMode (uMode=0x0) returned 0x1 [0053.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0053.873] SetErrorMode (uMode=0x1) returned 0x0 [0053.874] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.874] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.874] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.874] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.874] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.874] SetErrorMode (uMode=0x0) returned 0x1 [0053.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0053.874] SetErrorMode (uMode=0x1) returned 0x0 [0053.874] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.875] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.875] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.875] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.875] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.875] SetErrorMode (uMode=0x0) returned 0x1 [0053.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0053.875] SetErrorMode (uMode=0x1) returned 0x0 [0053.875] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.875] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.876] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.876] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.876] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.876] SetErrorMode (uMode=0x0) returned 0x1 [0053.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0053.876] SetErrorMode (uMode=0x1) returned 0x0 [0053.876] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.877] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.877] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.877] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.877] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.877] SetErrorMode (uMode=0x0) returned 0x1 [0053.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0053.878] SetErrorMode (uMode=0x1) returned 0x0 [0053.878] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.878] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.878] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.878] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.878] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.878] SetErrorMode (uMode=0x0) returned 0x1 [0053.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0053.878] SetErrorMode (uMode=0x1) returned 0x0 [0053.879] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.879] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.879] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.879] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.879] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.879] SetErrorMode (uMode=0x0) returned 0x1 [0053.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0053.879] SetErrorMode (uMode=0x1) returned 0x0 [0053.879] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.880] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.880] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.880] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.880] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.880] SetErrorMode (uMode=0x0) returned 0x1 [0053.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0053.880] SetErrorMode (uMode=0x1) returned 0x0 [0053.880] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.881] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.881] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.881] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.881] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.881] SetErrorMode (uMode=0x0) returned 0x1 [0053.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0053.882] SetErrorMode (uMode=0x1) returned 0x0 [0053.882] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.882] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.882] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.882] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.882] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.882] SetErrorMode (uMode=0x0) returned 0x1 [0053.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0053.882] SetErrorMode (uMode=0x1) returned 0x0 [0053.882] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0053.883] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.883] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.883] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.883] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0053.883] SetErrorMode (uMode=0x0) returned 0x1 [0053.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0053.884] SetErrorMode (uMode=0x1) returned 0x0 [0053.884] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.884] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.884] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.884] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.884] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.884] SetErrorMode (uMode=0x0) returned 0x1 [0053.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0053.885] SetErrorMode (uMode=0x1) returned 0x0 [0053.885] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.885] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.885] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.885] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.885] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.886] SetErrorMode (uMode=0x0) returned 0x1 [0053.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0053.886] SetErrorMode (uMode=0x1) returned 0x0 [0053.886] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.886] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.886] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.886] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.886] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.886] SetErrorMode (uMode=0x0) returned 0x1 [0053.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0053.887] SetErrorMode (uMode=0x1) returned 0x0 [0053.887] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.887] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.887] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.887] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.887] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.887] SetErrorMode (uMode=0x0) returned 0x1 [0053.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0053.888] SetErrorMode (uMode=0x1) returned 0x0 [0053.888] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.888] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.888] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.888] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.888] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.888] SetErrorMode (uMode=0x0) returned 0x1 [0053.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0053.888] SetErrorMode (uMode=0x1) returned 0x0 [0053.888] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.889] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.889] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.889] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.889] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.889] SetErrorMode (uMode=0x0) returned 0x1 [0053.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0053.890] SetErrorMode (uMode=0x1) returned 0x0 [0053.890] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.890] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.890] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.890] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.890] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.890] SetErrorMode (uMode=0x0) returned 0x1 [0053.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0053.890] SetErrorMode (uMode=0x1) returned 0x0 [0053.891] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.891] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.891] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.891] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.891] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.898] SetErrorMode (uMode=0x0) returned 0x1 [0053.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0053.899] SetErrorMode (uMode=0x1) returned 0x0 [0053.899] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.899] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.899] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.899] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.900] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.900] SetErrorMode (uMode=0x0) returned 0x1 [0053.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0053.900] SetErrorMode (uMode=0x1) returned 0x0 [0053.900] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.901] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.901] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.901] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.901] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.901] SetErrorMode (uMode=0x0) returned 0x1 [0053.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0053.901] SetErrorMode (uMode=0x1) returned 0x0 [0053.901] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.901] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.902] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.902] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.902] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.902] SetErrorMode (uMode=0x0) returned 0x1 [0053.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0053.902] SetErrorMode (uMode=0x1) returned 0x0 [0053.902] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.902] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.902] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.902] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.903] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.903] SetErrorMode (uMode=0x0) returned 0x1 [0053.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0053.903] SetErrorMode (uMode=0x1) returned 0x0 [0053.903] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.903] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.903] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.903] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.903] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.903] SetErrorMode (uMode=0x0) returned 0x1 [0053.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0053.904] SetErrorMode (uMode=0x1) returned 0x0 [0053.904] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.904] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.904] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.904] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.905] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.905] SetErrorMode (uMode=0x0) returned 0x1 [0053.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0053.905] SetErrorMode (uMode=0x1) returned 0x0 [0053.905] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0053.905] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.905] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.905] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.905] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0053.905] SetErrorMode (uMode=0x0) returned 0x1 [0053.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0053.906] SetErrorMode (uMode=0x1) returned 0x0 [0053.906] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.906] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.906] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.906] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.906] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.906] SetErrorMode (uMode=0x0) returned 0x1 [0053.906] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0053.906] SetErrorMode (uMode=0x1) returned 0x0 [0053.906] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.906] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.906] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.907] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.907] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.907] SetErrorMode (uMode=0x0) returned 0x1 [0053.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0053.907] SetErrorMode (uMode=0x1) returned 0x0 [0053.907] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.908] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.908] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.908] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.908] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.908] SetErrorMode (uMode=0x0) returned 0x1 [0053.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0053.908] SetErrorMode (uMode=0x1) returned 0x0 [0053.908] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.908] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.908] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.908] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.908] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.908] SetErrorMode (uMode=0x0) returned 0x1 [0053.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0053.908] SetErrorMode (uMode=0x1) returned 0x0 [0053.909] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.909] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.909] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.909] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.909] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.909] SetErrorMode (uMode=0x0) returned 0x1 [0053.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0053.909] SetErrorMode (uMode=0x1) returned 0x0 [0053.909] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.909] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.909] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.909] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.909] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.909] SetErrorMode (uMode=0x0) returned 0x1 [0053.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0053.910] SetErrorMode (uMode=0x1) returned 0x0 [0053.910] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.910] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.910] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.910] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.910] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.910] SetErrorMode (uMode=0x0) returned 0x1 [0053.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0053.911] SetErrorMode (uMode=0x1) returned 0x0 [0053.911] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.911] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.911] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.911] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.911] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.911] SetErrorMode (uMode=0x0) returned 0x1 [0053.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0053.911] SetErrorMode (uMode=0x1) returned 0x0 [0053.911] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.911] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.911] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.911] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.912] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.912] SetErrorMode (uMode=0x0) returned 0x1 [0053.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0053.912] SetErrorMode (uMode=0x1) returned 0x0 [0053.912] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.912] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.912] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.912] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.912] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.912] SetErrorMode (uMode=0x0) returned 0x1 [0053.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0053.912] SetErrorMode (uMode=0x1) returned 0x0 [0053.912] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.913] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.913] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.913] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.913] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.913] SetErrorMode (uMode=0x0) returned 0x1 [0053.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0053.913] SetErrorMode (uMode=0x1) returned 0x0 [0053.913] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.913] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.914] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.914] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.914] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.914] SetErrorMode (uMode=0x0) returned 0x1 [0053.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0053.914] SetErrorMode (uMode=0x1) returned 0x0 [0053.914] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.914] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.914] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.914] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.914] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.915] SetErrorMode (uMode=0x0) returned 0x1 [0053.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0053.915] SetErrorMode (uMode=0x1) returned 0x0 [0053.915] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.915] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.915] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.915] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.915] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.915] SetErrorMode (uMode=0x0) returned 0x1 [0053.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0053.916] SetErrorMode (uMode=0x1) returned 0x0 [0053.916] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.918] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.918] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.918] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.919] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.919] SetErrorMode (uMode=0x0) returned 0x1 [0053.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0053.919] SetErrorMode (uMode=0x1) returned 0x0 [0053.919] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.919] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.919] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.919] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.919] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.919] SetErrorMode (uMode=0x0) returned 0x1 [0053.919] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0053.919] SetErrorMode (uMode=0x1) returned 0x0 [0053.919] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.920] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.920] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.920] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.920] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.920] SetErrorMode (uMode=0x0) returned 0x1 [0053.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0053.920] SetErrorMode (uMode=0x1) returned 0x0 [0053.920] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0053.920] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.920] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.920] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.920] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0053.920] SetErrorMode (uMode=0x0) returned 0x1 [0053.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0053.920] SetErrorMode (uMode=0x1) returned 0x0 [0053.920] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.921] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.921] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.921] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.921] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.921] SetErrorMode (uMode=0x0) returned 0x1 [0053.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0053.921] SetErrorMode (uMode=0x1) returned 0x0 [0053.921] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4e50 [0053.921] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.921] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.922] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.922] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0053.922] SetErrorMode (uMode=0x0) returned 0x1 [0053.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0053.922] SetErrorMode (uMode=0x1) returned 0x0 [0053.922] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.922] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.922] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.922] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.922] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.922] SetErrorMode (uMode=0x0) returned 0x1 [0053.922] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0053.922] SetErrorMode (uMode=0x1) returned 0x0 [0053.922] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.922] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.922] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.922] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.922] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.923] SetErrorMode (uMode=0x0) returned 0x1 [0053.923] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0053.923] SetErrorMode (uMode=0x1) returned 0x0 [0053.923] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0053.923] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.923] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.923] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.923] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0053.923] SetErrorMode (uMode=0x0) returned 0x1 [0053.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0053.924] SetErrorMode (uMode=0x1) returned 0x0 [0053.924] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.924] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.924] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.924] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.924] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.924] SetErrorMode (uMode=0x0) returned 0x1 [0053.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0053.924] SetErrorMode (uMode=0x1) returned 0x0 [0053.924] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.924] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.924] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.924] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.924] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.924] SetErrorMode (uMode=0x0) returned 0x1 [0053.924] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0053.924] SetErrorMode (uMode=0x1) returned 0x0 [0053.925] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.925] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.925] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.925] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.925] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.925] SetErrorMode (uMode=0x0) returned 0x1 [0053.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0053.925] SetErrorMode (uMode=0x1) returned 0x0 [0053.925] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.925] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.925] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.926] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0053.926] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0053.926] SetErrorMode (uMode=0x0) returned 0x1 [0053.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0053.926] SetErrorMode (uMode=0x1) returned 0x0 [0053.926] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.926] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.926] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0053.926] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0053.926] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0053.926] SetErrorMode (uMode=0x0) returned 0x1 [0053.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0053.926] SetErrorMode (uMode=0x1) returned 0x0 [0053.926] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.926] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0053.927] SetErrorMode (uMode=0x0) returned 0x1 [0053.928] SetErrorMode (uMode=0x1) returned 0x0 [0053.928] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.928] SetErrorMode (uMode=0x0) returned 0x1 [0053.928] SetErrorMode (uMode=0x1) returned 0x0 [0053.928] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0053.928] SetErrorMode (uMode=0x0) returned 0x1 [0053.929] SetErrorMode (uMode=0x1) returned 0x0 [0053.929] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.929] SetErrorMode (uMode=0x0) returned 0x1 [0053.929] SetErrorMode (uMode=0x1) returned 0x0 [0053.929] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.929] SetErrorMode (uMode=0x0) returned 0x1 [0053.929] SetErrorMode (uMode=0x1) returned 0x0 [0053.929] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.929] SetErrorMode (uMode=0x0) returned 0x1 [0053.929] SetErrorMode (uMode=0x1) returned 0x0 [0053.933] SetErrorMode (uMode=0x0) returned 0x1 [0053.933] SetErrorMode (uMode=0x1) returned 0x0 [0053.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.933] SetErrorMode (uMode=0x0) returned 0x1 [0053.933] SetErrorMode (uMode=0x1) returned 0x0 [0053.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.933] SetErrorMode (uMode=0x0) returned 0x1 [0053.933] SetErrorMode (uMode=0x1) returned 0x0 [0053.933] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.933] SetErrorMode (uMode=0x0) returned 0x1 [0053.933] SetErrorMode (uMode=0x1) returned 0x0 [0053.934] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0053.936] SetErrorMode (uMode=0x0) returned 0x1 [0053.936] SetErrorMode (uMode=0x1) returned 0x0 [0053.936] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.936] SetErrorMode (uMode=0x0) returned 0x1 [0053.936] SetErrorMode (uMode=0x1) returned 0x0 [0053.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.937] SetErrorMode (uMode=0x0) returned 0x1 [0053.937] SetErrorMode (uMode=0x1) returned 0x0 [0053.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.937] SetErrorMode (uMode=0x0) returned 0x1 [0053.937] SetErrorMode (uMode=0x1) returned 0x0 [0053.937] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.940] SetErrorMode (uMode=0x0) returned 0x1 [0053.940] SetErrorMode (uMode=0x1) returned 0x0 [0053.940] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0053.940] SetErrorMode (uMode=0x0) returned 0x1 [0053.940] SetErrorMode (uMode=0x1) returned 0x0 [0053.940] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0053.940] SetErrorMode (uMode=0x0) returned 0x1 [0053.941] SetErrorMode (uMode=0x1) returned 0x0 [0053.941] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0053.941] SetErrorMode (uMode=0x0) returned 0x1 [0053.941] SetErrorMode (uMode=0x1) returned 0x0 [0053.941] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b41f0 [0053.943] SetErrorMode (uMode=0x0) returned 0x1 [0053.943] SetErrorMode (uMode=0x1) returned 0x0 [0053.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0053.943] SetErrorMode (uMode=0x0) returned 0x1 [0053.943] SetErrorMode (uMode=0x1) returned 0x0 [0053.943] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4310 [0053.950] SetErrorMode (uMode=0x0) returned 0x1 [0053.950] SetErrorMode (uMode=0x1) returned 0x0 [0053.950] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0053.952] SetErrorMode (uMode=0x0) returned 0x1 [0053.952] SetErrorMode (uMode=0x1) returned 0x0 [0053.952] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0053.962] SetErrorMode (uMode=0x0) returned 0x1 [0053.962] SetErrorMode (uMode=0x1) returned 0x0 [0053.962] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b41f0 [0053.964] SetErrorMode (uMode=0x0) returned 0x1 [0053.964] SetErrorMode (uMode=0x1) returned 0x0 [0053.964] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.965] SetErrorMode (uMode=0x0) returned 0x1 [0053.966] SetErrorMode (uMode=0x1) returned 0x0 [0053.966] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.966] SetErrorMode (uMode=0x0) returned 0x1 [0053.966] SetErrorMode (uMode=0x1) returned 0x0 [0053.966] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0053.966] SetErrorMode (uMode=0x0) returned 0x1 [0053.966] SetErrorMode (uMode=0x1) returned 0x0 [0053.966] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.967] SetErrorMode (uMode=0x0) returned 0x1 [0053.967] SetErrorMode (uMode=0x1) returned 0x0 [0053.967] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.968] SetErrorMode (uMode=0x0) returned 0x1 [0053.968] SetErrorMode (uMode=0x1) returned 0x0 [0053.968] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.968] SetErrorMode (uMode=0x0) returned 0x1 [0053.968] SetErrorMode (uMode=0x1) returned 0x0 [0053.968] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.968] SetErrorMode (uMode=0x0) returned 0x1 [0053.968] SetErrorMode (uMode=0x1) returned 0x0 [0053.968] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4e50 [0053.968] SetErrorMode (uMode=0x0) returned 0x1 [0053.969] SetErrorMode (uMode=0x1) returned 0x0 [0053.969] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0053.969] SetErrorMode (uMode=0x0) returned 0x1 [0053.969] SetErrorMode (uMode=0x1) returned 0x0 [0053.969] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.969] SetErrorMode (uMode=0x0) returned 0x1 [0053.970] SetErrorMode (uMode=0x1) returned 0x0 [0053.970] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.970] SetErrorMode (uMode=0x0) returned 0x1 [0053.970] SetErrorMode (uMode=0x1) returned 0x0 [0053.970] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4e50 [0053.970] SetErrorMode (uMode=0x0) returned 0x1 [0053.970] SetErrorMode (uMode=0x1) returned 0x0 [0053.970] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.971] SetErrorMode (uMode=0x0) returned 0x1 [0053.971] SetErrorMode (uMode=0x1) returned 0x0 [0053.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.971] SetErrorMode (uMode=0x0) returned 0x1 [0053.971] SetErrorMode (uMode=0x1) returned 0x0 [0053.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0053.971] SetErrorMode (uMode=0x0) returned 0x1 [0053.971] SetErrorMode (uMode=0x1) returned 0x0 [0053.971] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.972] SetErrorMode (uMode=0x0) returned 0x1 [0053.972] SetErrorMode (uMode=0x1) returned 0x0 [0053.972] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.973] SetErrorMode (uMode=0x0) returned 0x1 [0053.973] SetErrorMode (uMode=0x1) returned 0x0 [0053.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.973] SetErrorMode (uMode=0x0) returned 0x1 [0053.973] SetErrorMode (uMode=0x1) returned 0x0 [0053.973] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.973] SetErrorMode (uMode=0x0) returned 0x1 [0053.973] SetErrorMode (uMode=0x1) returned 0x0 [0053.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.974] SetErrorMode (uMode=0x0) returned 0x1 [0053.974] SetErrorMode (uMode=0x1) returned 0x0 [0053.974] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.974] SetErrorMode (uMode=0x0) returned 0x1 [0053.974] SetErrorMode (uMode=0x1) returned 0x0 [0053.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.975] SetErrorMode (uMode=0x0) returned 0x1 [0053.975] SetErrorMode (uMode=0x1) returned 0x0 [0053.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.975] SetErrorMode (uMode=0x0) returned 0x1 [0053.975] SetErrorMode (uMode=0x1) returned 0x0 [0053.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.975] SetErrorMode (uMode=0x0) returned 0x1 [0053.975] SetErrorMode (uMode=0x1) returned 0x0 [0053.975] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.976] SetErrorMode (uMode=0x0) returned 0x1 [0053.976] SetErrorMode (uMode=0x1) returned 0x0 [0053.976] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.976] SetErrorMode (uMode=0x0) returned 0x1 [0053.976] SetErrorMode (uMode=0x1) returned 0x0 [0053.976] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.976] SetErrorMode (uMode=0x0) returned 0x1 [0053.976] SetErrorMode (uMode=0x1) returned 0x0 [0053.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0053.977] SetErrorMode (uMode=0x0) returned 0x1 [0053.977] SetErrorMode (uMode=0x1) returned 0x0 [0053.977] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.978] SetErrorMode (uMode=0x0) returned 0x1 [0053.978] SetErrorMode (uMode=0x1) returned 0x0 [0053.978] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.978] SetErrorMode (uMode=0x0) returned 0x1 [0053.978] SetErrorMode (uMode=0x1) returned 0x0 [0053.978] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.978] SetErrorMode (uMode=0x0) returned 0x1 [0053.978] SetErrorMode (uMode=0x1) returned 0x0 [0053.978] SetErrorMode (uMode=0x0) returned 0x1 [0053.978] SetErrorMode (uMode=0x1) returned 0x0 [0053.978] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.979] SetErrorMode (uMode=0x0) returned 0x1 [0053.979] SetErrorMode (uMode=0x1) returned 0x0 [0053.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.979] SetErrorMode (uMode=0x0) returned 0x1 [0053.979] SetErrorMode (uMode=0x1) returned 0x0 [0053.979] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.980] SetErrorMode (uMode=0x0) returned 0x1 [0053.980] SetErrorMode (uMode=0x1) returned 0x0 [0053.980] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.980] SetErrorMode (uMode=0x0) returned 0x1 [0053.980] SetErrorMode (uMode=0x1) returned 0x0 [0053.980] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0053.983] SetErrorMode (uMode=0x0) returned 0x1 [0053.983] SetErrorMode (uMode=0x1) returned 0x0 [0053.983] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.983] SetErrorMode (uMode=0x0) returned 0x1 [0053.983] SetErrorMode (uMode=0x1) returned 0x0 [0053.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.984] SetErrorMode (uMode=0x0) returned 0x1 [0053.984] SetErrorMode (uMode=0x1) returned 0x0 [0053.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0053.984] SetErrorMode (uMode=0x0) returned 0x1 [0053.984] SetErrorMode (uMode=0x1) returned 0x0 [0053.984] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.985] SetErrorMode (uMode=0x0) returned 0x1 [0053.985] SetErrorMode (uMode=0x1) returned 0x0 [0053.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.985] SetErrorMode (uMode=0x0) returned 0x1 [0053.985] SetErrorMode (uMode=0x1) returned 0x0 [0053.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.985] SetErrorMode (uMode=0x0) returned 0x1 [0053.985] SetErrorMode (uMode=0x1) returned 0x0 [0053.985] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.985] SetErrorMode (uMode=0x0) returned 0x1 [0053.985] SetErrorMode (uMode=0x1) returned 0x0 [0053.986] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.986] SetErrorMode (uMode=0x0) returned 0x1 [0053.986] SetErrorMode (uMode=0x1) returned 0x0 [0053.986] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0053.986] SetErrorMode (uMode=0x0) returned 0x1 [0053.986] SetErrorMode (uMode=0x1) returned 0x0 [0053.986] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.987] SetErrorMode (uMode=0x0) returned 0x1 [0053.987] SetErrorMode (uMode=0x1) returned 0x0 [0053.987] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.987] SetErrorMode (uMode=0x0) returned 0x1 [0053.987] SetErrorMode (uMode=0x1) returned 0x0 [0053.987] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0053.990] SetErrorMode (uMode=0x0) returned 0x1 [0053.990] SetErrorMode (uMode=0x1) returned 0x0 [0053.990] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0053.990] SetErrorMode (uMode=0x0) returned 0x1 [0053.990] SetErrorMode (uMode=0x1) returned 0x0 [0053.990] SetErrorMode (uMode=0x0) returned 0x1 [0053.990] SetErrorMode (uMode=0x1) returned 0x0 [0053.991] SetErrorMode (uMode=0x0) returned 0x1 [0053.991] SetErrorMode (uMode=0x1) returned 0x0 [0053.991] SetErrorMode (uMode=0x0) returned 0x1 [0053.991] SetErrorMode (uMode=0x1) returned 0x0 [0053.992] SetErrorMode (uMode=0x0) returned 0x1 [0053.992] SetErrorMode (uMode=0x1) returned 0x0 [0053.992] SetErrorMode (uMode=0x0) returned 0x1 [0053.992] SetErrorMode (uMode=0x1) returned 0x0 [0053.992] SetErrorMode (uMode=0x0) returned 0x1 [0053.992] SetErrorMode (uMode=0x1) returned 0x0 [0053.993] SetErrorMode (uMode=0x0) returned 0x1 [0053.993] SetErrorMode (uMode=0x1) returned 0x0 [0053.993] SetErrorMode (uMode=0x0) returned 0x1 [0053.993] SetErrorMode (uMode=0x1) returned 0x0 [0053.993] SetErrorMode (uMode=0x0) returned 0x1 [0053.994] SetErrorMode (uMode=0x1) returned 0x0 [0053.994] SetErrorMode (uMode=0x0) returned 0x1 [0053.994] SetErrorMode (uMode=0x1) returned 0x0 [0053.995] SetErrorMode (uMode=0x0) returned 0x1 [0053.995] SetErrorMode (uMode=0x1) returned 0x0 [0053.995] SetErrorMode (uMode=0x0) returned 0x1 [0053.995] SetErrorMode (uMode=0x1) returned 0x0 [0053.995] SetErrorMode (uMode=0x0) returned 0x1 [0053.995] SetErrorMode (uMode=0x1) returned 0x0 [0053.995] SetErrorMode (uMode=0x0) returned 0x1 [0053.995] SetErrorMode (uMode=0x1) returned 0x0 [0053.996] SetErrorMode (uMode=0x0) returned 0x1 [0053.996] SetErrorMode (uMode=0x1) returned 0x0 [0053.996] SetErrorMode (uMode=0x0) returned 0x1 [0053.996] SetErrorMode (uMode=0x1) returned 0x0 [0053.996] SetErrorMode (uMode=0x0) returned 0x1 [0053.996] SetErrorMode (uMode=0x1) returned 0x0 [0053.997] SetErrorMode (uMode=0x0) returned 0x1 [0053.997] SetErrorMode (uMode=0x1) returned 0x0 [0053.997] SetErrorMode (uMode=0x0) returned 0x1 [0053.998] SetErrorMode (uMode=0x1) returned 0x0 [0053.998] SetErrorMode (uMode=0x0) returned 0x1 [0053.998] SetErrorMode (uMode=0x1) returned 0x0 [0053.998] SetErrorMode (uMode=0x0) returned 0x1 [0053.998] SetErrorMode (uMode=0x1) returned 0x0 [0053.998] SetErrorMode (uMode=0x0) returned 0x1 [0053.998] SetErrorMode (uMode=0x1) returned 0x0 [0053.999] SetErrorMode (uMode=0x0) returned 0x1 [0053.999] SetErrorMode (uMode=0x1) returned 0x0 [0053.999] SetErrorMode (uMode=0x0) returned 0x1 [0053.999] SetErrorMode (uMode=0x1) returned 0x0 [0053.999] SetErrorMode (uMode=0x0) returned 0x1 [0054.000] SetErrorMode (uMode=0x1) returned 0x0 [0054.000] SetErrorMode (uMode=0x0) returned 0x1 [0054.000] SetErrorMode (uMode=0x1) returned 0x0 [0054.000] SetErrorMode (uMode=0x0) returned 0x1 [0054.000] SetErrorMode (uMode=0x1) returned 0x0 [0054.001] SetErrorMode (uMode=0x0) returned 0x1 [0054.001] SetErrorMode (uMode=0x1) returned 0x0 [0054.001] SetErrorMode (uMode=0x0) returned 0x1 [0054.001] SetErrorMode (uMode=0x1) returned 0x0 [0054.001] SetErrorMode (uMode=0x0) returned 0x1 [0054.001] SetErrorMode (uMode=0x1) returned 0x0 [0054.002] SetErrorMode (uMode=0x0) returned 0x1 [0054.002] SetErrorMode (uMode=0x1) returned 0x0 [0054.002] SetErrorMode (uMode=0x0) returned 0x1 [0054.002] SetErrorMode (uMode=0x1) returned 0x0 [0054.002] SetErrorMode (uMode=0x0) returned 0x1 [0054.002] SetErrorMode (uMode=0x1) returned 0x0 [0054.002] SetErrorMode (uMode=0x0) returned 0x1 [0054.002] SetErrorMode (uMode=0x1) returned 0x0 [0054.003] SetErrorMode (uMode=0x0) returned 0x1 [0054.003] SetErrorMode (uMode=0x1) returned 0x0 [0054.004] SetErrorMode (uMode=0x0) returned 0x1 [0054.004] SetErrorMode (uMode=0x1) returned 0x0 [0054.004] SetErrorMode (uMode=0x0) returned 0x1 [0054.004] SetErrorMode (uMode=0x1) returned 0x0 [0054.004] SetErrorMode (uMode=0x0) returned 0x1 [0054.004] SetErrorMode (uMode=0x1) returned 0x0 [0054.005] SetErrorMode (uMode=0x0) returned 0x1 [0054.005] SetErrorMode (uMode=0x1) returned 0x0 [0054.005] SetErrorMode (uMode=0x0) returned 0x1 [0054.005] SetErrorMode (uMode=0x1) returned 0x0 [0054.009] SetErrorMode (uMode=0x0) returned 0x1 [0054.009] SetErrorMode (uMode=0x1) returned 0x0 [0054.009] SetErrorMode (uMode=0x0) returned 0x1 [0054.010] SetErrorMode (uMode=0x1) returned 0x0 [0054.021] SetErrorMode (uMode=0x0) returned 0x1 [0054.021] SetErrorMode (uMode=0x1) returned 0x0 [0054.023] SetErrorMode (uMode=0x0) returned 0x1 [0054.023] SetErrorMode (uMode=0x1) returned 0x0 [0054.028] SetErrorMode (uMode=0x0) returned 0x1 [0054.028] SetErrorMode (uMode=0x1) returned 0x0 [0054.030] SetErrorMode (uMode=0x0) returned 0x1 [0054.030] SetErrorMode (uMode=0x1) returned 0x0 [0054.031] SetErrorMode (uMode=0x0) returned 0x1 [0054.031] SetErrorMode (uMode=0x1) returned 0x0 [0054.031] SetErrorMode (uMode=0x0) returned 0x1 [0054.031] SetErrorMode (uMode=0x1) returned 0x0 [0054.031] SetErrorMode (uMode=0x0) returned 0x1 [0054.031] SetErrorMode (uMode=0x1) returned 0x0 [0054.031] SetErrorMode (uMode=0x0) returned 0x1 [0054.031] SetErrorMode (uMode=0x1) returned 0x0 [0054.032] SetErrorMode (uMode=0x0) returned 0x1 [0054.032] SetErrorMode (uMode=0x1) returned 0x0 [0054.032] SetErrorMode (uMode=0x0) returned 0x1 [0054.032] SetErrorMode (uMode=0x1) returned 0x0 [0054.033] SetErrorMode (uMode=0x0) returned 0x1 [0054.033] SetErrorMode (uMode=0x1) returned 0x0 [0054.033] SetErrorMode (uMode=0x0) returned 0x1 [0054.033] SetErrorMode (uMode=0x1) returned 0x0 [0054.033] SetErrorMode (uMode=0x0) returned 0x1 [0054.034] SetErrorMode (uMode=0x1) returned 0x0 [0054.034] SetErrorMode (uMode=0x0) returned 0x1 [0054.034] SetErrorMode (uMode=0x1) returned 0x0 [0054.034] SetErrorMode (uMode=0x0) returned 0x1 [0054.034] SetErrorMode (uMode=0x1) returned 0x0 [0054.034] SetErrorMode (uMode=0x0) returned 0x1 [0054.034] SetErrorMode (uMode=0x1) returned 0x0 [0054.035] SetErrorMode (uMode=0x0) returned 0x1 [0054.035] SetErrorMode (uMode=0x1) returned 0x0 [0054.035] SetErrorMode (uMode=0x0) returned 0x1 [0054.035] SetErrorMode (uMode=0x1) returned 0x0 [0054.035] SetErrorMode (uMode=0x0) returned 0x1 [0054.035] SetErrorMode (uMode=0x1) returned 0x0 [0054.036] SetErrorMode (uMode=0x0) returned 0x1 [0054.036] SetErrorMode (uMode=0x1) returned 0x0 [0054.036] SetErrorMode (uMode=0x0) returned 0x1 [0054.037] SetErrorMode (uMode=0x1) returned 0x0 [0054.037] SetErrorMode (uMode=0x0) returned 0x1 [0054.037] SetErrorMode (uMode=0x1) returned 0x0 [0054.037] SetErrorMode (uMode=0x0) returned 0x1 [0054.037] SetErrorMode (uMode=0x1) returned 0x0 [0054.037] SetErrorMode (uMode=0x0) returned 0x1 [0054.037] SetErrorMode (uMode=0x1) returned 0x0 [0054.038] SetErrorMode (uMode=0x0) returned 0x1 [0054.038] SetErrorMode (uMode=0x1) returned 0x0 [0054.038] SetErrorMode (uMode=0x0) returned 0x1 [0054.038] SetErrorMode (uMode=0x1) returned 0x0 [0054.039] SetErrorMode (uMode=0x0) returned 0x1 [0054.039] SetErrorMode (uMode=0x1) returned 0x0 [0054.039] SetErrorMode (uMode=0x0) returned 0x1 [0054.039] SetErrorMode (uMode=0x1) returned 0x0 [0054.040] SetErrorMode (uMode=0x0) returned 0x1 [0054.040] SetErrorMode (uMode=0x1) returned 0x0 [0054.040] SetErrorMode (uMode=0x0) returned 0x1 [0054.040] SetErrorMode (uMode=0x1) returned 0x0 [0054.040] SetErrorMode (uMode=0x0) returned 0x1 [0054.041] SetErrorMode (uMode=0x1) returned 0x0 [0054.041] SetErrorMode (uMode=0x0) returned 0x1 [0054.041] SetErrorMode (uMode=0x1) returned 0x0 [0054.041] SetErrorMode (uMode=0x0) returned 0x1 [0054.041] SetErrorMode (uMode=0x1) returned 0x0 [0054.042] SetErrorMode (uMode=0x0) returned 0x1 [0054.042] SetErrorMode (uMode=0x1) returned 0x0 [0054.042] SetErrorMode (uMode=0x0) returned 0x1 [0054.042] SetErrorMode (uMode=0x1) returned 0x0 [0054.042] SetErrorMode (uMode=0x0) returned 0x1 [0054.042] SetErrorMode (uMode=0x1) returned 0x0 [0054.043] SetErrorMode (uMode=0x0) returned 0x1 [0054.043] SetErrorMode (uMode=0x1) returned 0x0 [0054.043] SetErrorMode (uMode=0x0) returned 0x1 [0054.043] SetErrorMode (uMode=0x1) returned 0x0 [0054.043] SetErrorMode (uMode=0x0) returned 0x1 [0054.044] SetErrorMode (uMode=0x1) returned 0x0 [0054.044] SetErrorMode (uMode=0x0) returned 0x1 [0054.044] SetErrorMode (uMode=0x1) returned 0x0 [0054.044] SetErrorMode (uMode=0x0) returned 0x1 [0054.044] SetErrorMode (uMode=0x1) returned 0x0 [0054.045] SetErrorMode (uMode=0x0) returned 0x1 [0054.045] SetErrorMode (uMode=0x1) returned 0x0 [0054.045] SetErrorMode (uMode=0x0) returned 0x1 [0054.045] SetErrorMode (uMode=0x1) returned 0x0 [0054.045] SetErrorMode (uMode=0x0) returned 0x1 [0054.045] SetErrorMode (uMode=0x1) returned 0x0 [0054.046] SetErrorMode (uMode=0x0) returned 0x1 [0054.046] SetErrorMode (uMode=0x1) returned 0x0 [0054.046] SetErrorMode (uMode=0x0) returned 0x1 [0054.046] SetErrorMode (uMode=0x1) returned 0x0 [0054.046] SetErrorMode (uMode=0x0) returned 0x1 [0054.046] SetErrorMode (uMode=0x1) returned 0x0 [0054.046] SetErrorMode (uMode=0x0) returned 0x1 [0054.047] SetErrorMode (uMode=0x1) returned 0x0 [0054.048] SetErrorMode (uMode=0x0) returned 0x1 [0054.048] SetErrorMode (uMode=0x1) returned 0x0 [0054.048] SetErrorMode (uMode=0x0) returned 0x1 [0054.048] SetErrorMode (uMode=0x1) returned 0x0 [0054.048] SetErrorMode (uMode=0x0) returned 0x1 [0054.048] SetErrorMode (uMode=0x1) returned 0x0 [0054.048] SetErrorMode (uMode=0x0) returned 0x1 [0054.049] SetErrorMode (uMode=0x1) returned 0x0 [0054.050] SetErrorMode (uMode=0x0) returned 0x1 [0054.050] SetErrorMode (uMode=0x1) returned 0x0 [0054.050] SetErrorMode (uMode=0x0) returned 0x1 [0054.050] SetErrorMode (uMode=0x1) returned 0x0 [0054.050] SetErrorMode (uMode=0x0) returned 0x1 [0054.050] SetErrorMode (uMode=0x1) returned 0x0 [0054.051] SetErrorMode (uMode=0x0) returned 0x1 [0054.051] SetErrorMode (uMode=0x1) returned 0x0 [0054.051] SetErrorMode (uMode=0x0) returned 0x1 [0054.051] SetErrorMode (uMode=0x1) returned 0x0 [0054.052] SetErrorMode (uMode=0x0) returned 0x1 [0054.052] SetErrorMode (uMode=0x1) returned 0x0 [0054.052] SetErrorMode (uMode=0x0) returned 0x1 [0054.052] SetErrorMode (uMode=0x1) returned 0x0 [0054.052] SetErrorMode (uMode=0x0) returned 0x1 [0054.052] SetErrorMode (uMode=0x1) returned 0x0 [0054.053] SetErrorMode (uMode=0x0) returned 0x1 [0054.053] SetErrorMode (uMode=0x1) returned 0x0 [0054.053] SetErrorMode (uMode=0x0) returned 0x1 [0054.053] SetErrorMode (uMode=0x1) returned 0x0 [0054.053] SetErrorMode (uMode=0x0) returned 0x1 [0054.054] SetErrorMode (uMode=0x1) returned 0x0 [0054.054] SetErrorMode (uMode=0x0) returned 0x1 [0054.054] SetErrorMode (uMode=0x1) returned 0x0 [0054.110] SetErrorMode (uMode=0x1) returned 0x0 [0054.110] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0054.110] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.111] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.111] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.111] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0054.111] SetErrorMode (uMode=0x0) returned 0x1 [0054.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca", lpFilePart=0x0) returned 0x81 [0054.112] SetErrorMode (uMode=0x1) returned 0x0 [0054.112] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.112] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.112] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.112] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.112] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.112] SetErrorMode (uMode=0x0) returned 0x1 [0054.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0054.113] SetErrorMode (uMode=0x1) returned 0x0 [0054.113] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.114] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.114] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.114] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.114] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.114] SetErrorMode (uMode=0x0) returned 0x1 [0054.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs", lpFilePart=0x0) returned 0x81 [0054.115] SetErrorMode (uMode=0x1) returned 0x0 [0054.115] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.115] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.115] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.115] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.116] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.116] SetErrorMode (uMode=0x0) returned 0x1 [0054.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0054.116] SetErrorMode (uMode=0x1) returned 0x0 [0054.116] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.117] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.117] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.117] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.117] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.117] SetErrorMode (uMode=0x0) returned 0x1 [0054.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da", lpFilePart=0x0) returned 0x81 [0054.118] SetErrorMode (uMode=0x1) returned 0x0 [0054.118] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.118] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.118] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.118] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.119] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.119] SetErrorMode (uMode=0x0) returned 0x1 [0054.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0054.119] SetErrorMode (uMode=0x1) returned 0x0 [0054.119] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.120] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.120] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.120] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.121] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.121] SetErrorMode (uMode=0x0) returned 0x1 [0054.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de", lpFilePart=0x0) returned 0x81 [0054.121] SetErrorMode (uMode=0x1) returned 0x0 [0054.121] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.121] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.122] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.122] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.122] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.122] SetErrorMode (uMode=0x0) returned 0x1 [0054.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0054.122] SetErrorMode (uMode=0x1) returned 0x0 [0054.122] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.123] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.123] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.123] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.123] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.123] SetErrorMode (uMode=0x0) returned 0x1 [0054.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el", lpFilePart=0x0) returned 0x81 [0054.124] SetErrorMode (uMode=0x1) returned 0x0 [0054.124] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.124] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.124] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.125] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.125] SetErrorMode (uMode=0x0) returned 0x1 [0054.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0054.125] SetErrorMode (uMode=0x1) returned 0x0 [0054.125] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.133] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.133] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.133] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.133] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.133] SetErrorMode (uMode=0x0) returned 0x1 [0054.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x84 [0054.134] SetErrorMode (uMode=0x1) returned 0x0 [0054.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.134] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.134] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.134] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.135] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.135] SetErrorMode (uMode=0x0) returned 0x1 [0054.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0054.135] SetErrorMode (uMode=0x1) returned 0x0 [0054.135] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0054.135] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.135] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.136] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.136] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0054.136] SetErrorMode (uMode=0x0) returned 0x1 [0054.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US", lpFilePart=0x0) returned 0x84 [0054.136] SetErrorMode (uMode=0x1) returned 0x0 [0054.136] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.136] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.136] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.137] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.137] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.137] SetErrorMode (uMode=0x0) returned 0x1 [0054.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0054.137] SetErrorMode (uMode=0x1) returned 0x0 [0054.137] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.138] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.138] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.138] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.138] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.138] SetErrorMode (uMode=0x0) returned 0x1 [0054.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0054.139] SetErrorMode (uMode=0x1) returned 0x0 [0054.139] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.139] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.139] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.139] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.139] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.139] SetErrorMode (uMode=0x0) returned 0x1 [0054.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0054.139] SetErrorMode (uMode=0x1) returned 0x0 [0054.140] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.140] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.140] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.140] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.140] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.140] SetErrorMode (uMode=0x0) returned 0x1 [0054.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419", lpFilePart=0x0) returned 0x85 [0054.141] SetErrorMode (uMode=0x1) returned 0x0 [0054.141] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.141] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.141] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.141] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.141] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.141] SetErrorMode (uMode=0x0) returned 0x1 [0054.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0054.142] SetErrorMode (uMode=0x1) returned 0x0 [0054.142] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.143] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.143] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.143] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.143] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.143] SetErrorMode (uMode=0x0) returned 0x1 [0054.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et", lpFilePart=0x0) returned 0x81 [0054.144] SetErrorMode (uMode=0x1) returned 0x0 [0054.144] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.144] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.144] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.144] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.144] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.144] SetErrorMode (uMode=0x0) returned 0x1 [0054.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0054.144] SetErrorMode (uMode=0x1) returned 0x0 [0054.145] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.145] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.145] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.145] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.145] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.145] SetErrorMode (uMode=0x0) returned 0x1 [0054.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0054.145] SetErrorMode (uMode=0x1) returned 0x0 [0054.146] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.146] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.146] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.146] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.146] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.146] SetErrorMode (uMode=0x0) returned 0x1 [0054.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0054.146] SetErrorMode (uMode=0x1) returned 0x0 [0054.146] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.147] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.147] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.147] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.148] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.148] SetErrorMode (uMode=0x0) returned 0x1 [0054.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0054.148] SetErrorMode (uMode=0x1) returned 0x0 [0054.148] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.148] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.148] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.148] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.149] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.149] SetErrorMode (uMode=0x0) returned 0x1 [0054.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0054.149] SetErrorMode (uMode=0x1) returned 0x0 [0054.149] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.150] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.150] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.150] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.150] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.150] SetErrorMode (uMode=0x0) returned 0x1 [0054.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0054.150] SetErrorMode (uMode=0x1) returned 0x0 [0054.150] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.151] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.151] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.151] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.151] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.151] SetErrorMode (uMode=0x0) returned 0x1 [0054.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0054.151] SetErrorMode (uMode=0x1) returned 0x0 [0054.151] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.152] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.152] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.152] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.152] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.152] SetErrorMode (uMode=0x0) returned 0x1 [0054.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he", lpFilePart=0x0) returned 0x81 [0054.153] SetErrorMode (uMode=0x1) returned 0x0 [0054.153] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.153] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.153] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.153] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.153] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.153] SetErrorMode (uMode=0x0) returned 0x1 [0054.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0054.153] SetErrorMode (uMode=0x1) returned 0x0 [0054.153] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.154] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.154] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.154] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.154] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.154] SetErrorMode (uMode=0x0) returned 0x1 [0054.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0054.154] SetErrorMode (uMode=0x1) returned 0x0 [0054.154] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0054.155] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.155] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.155] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.155] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0054.155] SetErrorMode (uMode=0x0) returned 0x1 [0054.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0054.155] SetErrorMode (uMode=0x1) returned 0x0 [0054.155] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.156] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.156] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.156] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.156] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.156] SetErrorMode (uMode=0x0) returned 0x1 [0054.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0054.157] SetErrorMode (uMode=0x1) returned 0x0 [0054.157] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.157] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.157] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.157] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.157] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.157] SetErrorMode (uMode=0x0) returned 0x1 [0054.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0054.157] SetErrorMode (uMode=0x1) returned 0x0 [0054.157] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.158] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.158] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.158] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.158] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.158] SetErrorMode (uMode=0x0) returned 0x1 [0054.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0054.158] SetErrorMode (uMode=0x1) returned 0x0 [0054.158] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.159] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.159] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.159] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.159] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.159] SetErrorMode (uMode=0x0) returned 0x1 [0054.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0054.159] SetErrorMode (uMode=0x1) returned 0x0 [0054.159] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.160] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.160] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.160] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.160] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.160] SetErrorMode (uMode=0x0) returned 0x1 [0054.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0054.160] SetErrorMode (uMode=0x1) returned 0x0 [0054.161] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.161] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.161] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.161] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.161] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.161] SetErrorMode (uMode=0x0) returned 0x1 [0054.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0054.161] SetErrorMode (uMode=0x1) returned 0x0 [0054.161] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.161] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.162] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.162] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.162] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.162] SetErrorMode (uMode=0x0) returned 0x1 [0054.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0054.162] SetErrorMode (uMode=0x1) returned 0x0 [0054.162] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.162] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.162] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.162] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.163] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.163] SetErrorMode (uMode=0x0) returned 0x1 [0054.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0054.163] SetErrorMode (uMode=0x1) returned 0x0 [0054.163] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.164] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.164] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.164] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.164] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.164] SetErrorMode (uMode=0x0) returned 0x1 [0054.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0054.164] SetErrorMode (uMode=0x1) returned 0x0 [0054.164] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.164] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.164] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.165] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.165] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.165] SetErrorMode (uMode=0x0) returned 0x1 [0054.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0054.165] SetErrorMode (uMode=0x1) returned 0x0 [0054.165] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.166] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.166] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.166] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.166] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.166] SetErrorMode (uMode=0x0) returned 0x1 [0054.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0054.166] SetErrorMode (uMode=0x1) returned 0x0 [0054.166] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.166] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.167] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.167] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.167] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.167] SetErrorMode (uMode=0x0) returned 0x1 [0054.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0054.167] SetErrorMode (uMode=0x1) returned 0x0 [0054.167] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.168] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.168] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.168] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.168] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.168] SetErrorMode (uMode=0x0) returned 0x1 [0054.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0054.168] SetErrorMode (uMode=0x1) returned 0x0 [0054.168] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.169] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.169] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.169] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.169] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.169] SetErrorMode (uMode=0x0) returned 0x1 [0054.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0054.169] SetErrorMode (uMode=0x1) returned 0x0 [0054.169] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.169] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.169] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.170] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.170] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.170] SetErrorMode (uMode=0x0) returned 0x1 [0054.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms", lpFilePart=0x0) returned 0x81 [0054.170] SetErrorMode (uMode=0x1) returned 0x0 [0054.170] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.170] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.170] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.170] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.170] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.170] SetErrorMode (uMode=0x0) returned 0x1 [0054.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0054.171] SetErrorMode (uMode=0x1) returned 0x0 [0054.171] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.171] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.172] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.172] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.172] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.172] SetErrorMode (uMode=0x0) returned 0x1 [0054.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0054.172] SetErrorMode (uMode=0x1) returned 0x0 [0054.172] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.172] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.172] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.173] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.173] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.173] SetErrorMode (uMode=0x0) returned 0x1 [0054.173] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0054.173] SetErrorMode (uMode=0x1) returned 0x0 [0054.173] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0054.173] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.173] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.173] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.173] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0054.173] SetErrorMode (uMode=0x0) returned 0x1 [0054.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0054.174] SetErrorMode (uMode=0x1) returned 0x0 [0054.174] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.174] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.174] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.174] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.174] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.174] SetErrorMode (uMode=0x0) returned 0x1 [0054.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0054.174] SetErrorMode (uMode=0x1) returned 0x0 [0054.175] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.175] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.175] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.175] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.176] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.176] SetErrorMode (uMode=0x0) returned 0x1 [0054.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0054.176] SetErrorMode (uMode=0x1) returned 0x0 [0054.176] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0054.176] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.176] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.176] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.176] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0054.176] SetErrorMode (uMode=0x0) returned 0x1 [0054.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0054.176] SetErrorMode (uMode=0x1) returned 0x0 [0054.176] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.177] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.177] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.177] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.177] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.177] SetErrorMode (uMode=0x0) returned 0x1 [0054.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0054.177] SetErrorMode (uMode=0x1) returned 0x0 [0054.177] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.177] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.177] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.177] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.177] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.177] SetErrorMode (uMode=0x0) returned 0x1 [0054.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0054.178] SetErrorMode (uMode=0x1) returned 0x0 [0054.178] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.178] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.178] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.178] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.178] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.179] SetErrorMode (uMode=0x0) returned 0x1 [0054.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0054.179] SetErrorMode (uMode=0x1) returned 0x0 [0054.179] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.179] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.179] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.179] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.179] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.179] SetErrorMode (uMode=0x0) returned 0x1 [0054.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0054.179] SetErrorMode (uMode=0x1) returned 0x0 [0054.179] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.180] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.180] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.180] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.180] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.180] SetErrorMode (uMode=0x0) returned 0x1 [0054.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0054.180] SetErrorMode (uMode=0x1) returned 0x0 [0054.180] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.180] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.180] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.181] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.181] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.181] SetErrorMode (uMode=0x0) returned 0x1 [0054.181] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0054.181] SetErrorMode (uMode=0x1) returned 0x0 [0054.181] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.182] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.182] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.182] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.182] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.182] SetErrorMode (uMode=0x0) returned 0x1 [0054.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0054.182] SetErrorMode (uMode=0x1) returned 0x0 [0054.182] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.182] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.182] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.182] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.182] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.182] SetErrorMode (uMode=0x0) returned 0x1 [0054.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0054.183] SetErrorMode (uMode=0x1) returned 0x0 [0054.183] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0054.183] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.183] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.183] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.183] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0054.183] SetErrorMode (uMode=0x0) returned 0x1 [0054.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0054.183] SetErrorMode (uMode=0x1) returned 0x0 [0054.183] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.183] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.183] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.183] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.184] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.184] SetErrorMode (uMode=0x0) returned 0x1 [0054.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0054.184] SetErrorMode (uMode=0x1) returned 0x0 [0054.184] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.187] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.187] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.187] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.187] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.187] SetErrorMode (uMode=0x0) returned 0x1 [0054.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0054.188] SetErrorMode (uMode=0x1) returned 0x0 [0054.188] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.188] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.188] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.188] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.188] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.188] SetErrorMode (uMode=0x0) returned 0x1 [0054.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0054.188] SetErrorMode (uMode=0x1) returned 0x0 [0054.188] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.188] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.189] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.189] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.189] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.189] SetErrorMode (uMode=0x0) returned 0x1 [0054.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0054.189] SetErrorMode (uMode=0x1) returned 0x0 [0054.189] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.189] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.189] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.189] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.189] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.189] SetErrorMode (uMode=0x0) returned 0x1 [0054.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0054.189] SetErrorMode (uMode=0x1) returned 0x0 [0054.189] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.190] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.190] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.190] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.190] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.190] SetErrorMode (uMode=0x0) returned 0x1 [0054.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv", lpFilePart=0x0) returned 0x81 [0054.191] SetErrorMode (uMode=0x1) returned 0x0 [0054.191] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.191] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.191] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.191] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.191] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.191] SetErrorMode (uMode=0x0) returned 0x1 [0054.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0054.191] SetErrorMode (uMode=0x1) returned 0x0 [0054.191] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0054.191] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.191] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.191] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.191] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0054.192] SetErrorMode (uMode=0x0) returned 0x1 [0054.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0054.192] SetErrorMode (uMode=0x1) returned 0x0 [0054.192] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.192] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.192] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.192] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.192] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.192] SetErrorMode (uMode=0x0) returned 0x1 [0054.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0054.192] SetErrorMode (uMode=0x1) returned 0x0 [0054.192] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.193] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.193] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.193] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.193] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.193] SetErrorMode (uMode=0x0) returned 0x1 [0054.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0054.193] SetErrorMode (uMode=0x1) returned 0x0 [0054.194] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.194] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.194] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.194] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.194] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.194] SetErrorMode (uMode=0x0) returned 0x1 [0054.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0054.194] SetErrorMode (uMode=0x1) returned 0x0 [0054.194] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0054.194] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.194] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.194] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.194] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0054.195] SetErrorMode (uMode=0x0) returned 0x1 [0054.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0054.195] SetErrorMode (uMode=0x1) returned 0x0 [0054.195] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.195] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.195] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.195] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.195] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.195] SetErrorMode (uMode=0x0) returned 0x1 [0054.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0054.195] SetErrorMode (uMode=0x1) returned 0x0 [0054.195] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.196] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.196] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.196] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.196] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.196] SetErrorMode (uMode=0x0) returned 0x1 [0054.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0054.197] SetErrorMode (uMode=0x1) returned 0x0 [0054.197] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.197] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.197] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.197] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.197] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.197] SetErrorMode (uMode=0x0) returned 0x1 [0054.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0054.197] SetErrorMode (uMode=0x1) returned 0x0 [0054.197] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0054.197] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.197] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.197] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.198] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0054.198] SetErrorMode (uMode=0x0) returned 0x1 [0054.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0054.198] SetErrorMode (uMode=0x1) returned 0x0 [0054.198] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.198] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.198] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.198] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.198] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.198] SetErrorMode (uMode=0x0) returned 0x1 [0054.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0054.198] SetErrorMode (uMode=0x1) returned 0x0 [0054.198] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0054.205] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.205] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.205] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.205] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0054.205] SetErrorMode (uMode=0x0) returned 0x1 [0054.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0054.206] SetErrorMode (uMode=0x1) returned 0x0 [0054.206] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.206] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.206] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.206] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.206] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.206] SetErrorMode (uMode=0x0) returned 0x1 [0054.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x5ade80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpFilePart=0x0) returned 0x7f [0054.206] SetErrorMode (uMode=0x1) returned 0x0 [0054.206] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0054.208] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.208] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.208] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.208] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 0 [0054.208] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.208] SetErrorMode (uMode=0x0) returned 0x1 [0054.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x5ade50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata", lpFilePart=0x0) returned 0x7f [0054.208] SetErrorMode (uMode=0x1) returned 0x0 [0054.208] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b41f0 [0054.209] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0054.209] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0054.209] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0054.209] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 0 [0054.209] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.209] SetErrorMode (uMode=0x0) returned 0x1 [0054.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x6f [0054.209] SetErrorMode (uMode=0x1) returned 0x0 [0054.209] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0054.209] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0054.215] SetErrorMode (uMode=0x0) returned 0x1 [0054.215] SetErrorMode (uMode=0x1) returned 0x0 [0054.215] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0054.215] SetErrorMode (uMode=0x0) returned 0x1 [0054.216] SetErrorMode (uMode=0x1) returned 0x0 [0054.216] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4e50 [0054.237] SetErrorMode (uMode=0x0) returned 0x1 [0054.237] SetErrorMode (uMode=0x1) returned 0x0 [0054.237] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b41f0 [0054.239] SetErrorMode (uMode=0x0) returned 0x1 [0054.239] SetErrorMode (uMode=0x1) returned 0x0 [0054.239] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0054.246] SetErrorMode (uMode=0x0) returned 0x1 [0054.246] SetErrorMode (uMode=0x1) returned 0x0 [0054.247] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b41f0 [0054.248] SetErrorMode (uMode=0x0) returned 0x1 [0054.248] SetErrorMode (uMode=0x1) returned 0x0 [0054.248] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.250] SetErrorMode (uMode=0x0) returned 0x1 [0054.250] SetErrorMode (uMode=0x1) returned 0x0 [0054.250] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4e50 [0054.250] SetErrorMode (uMode=0x0) returned 0x1 [0054.250] SetErrorMode (uMode=0x1) returned 0x0 [0054.250] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0054.251] SetErrorMode (uMode=0x0) returned 0x1 [0054.251] SetErrorMode (uMode=0x1) returned 0x0 [0054.251] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.251] SetErrorMode (uMode=0x0) returned 0x1 [0054.251] SetErrorMode (uMode=0x1) returned 0x0 [0054.251] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.252] SetErrorMode (uMode=0x0) returned 0x1 [0054.252] SetErrorMode (uMode=0x1) returned 0x0 [0054.252] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4e50 [0054.252] SetErrorMode (uMode=0x0) returned 0x1 [0054.252] SetErrorMode (uMode=0x1) returned 0x0 [0054.252] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.253] SetErrorMode (uMode=0x0) returned 0x1 [0054.253] SetErrorMode (uMode=0x1) returned 0x0 [0054.253] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.253] SetErrorMode (uMode=0x0) returned 0x1 [0054.253] SetErrorMode (uMode=0x1) returned 0x0 [0054.253] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.254] SetErrorMode (uMode=0x0) returned 0x1 [0054.254] SetErrorMode (uMode=0x1) returned 0x0 [0054.254] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.254] SetErrorMode (uMode=0x0) returned 0x1 [0054.254] SetErrorMode (uMode=0x1) returned 0x0 [0054.254] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.255] SetErrorMode (uMode=0x0) returned 0x1 [0054.255] SetErrorMode (uMode=0x1) returned 0x0 [0054.255] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.255] SetErrorMode (uMode=0x0) returned 0x1 [0054.255] SetErrorMode (uMode=0x1) returned 0x0 [0054.255] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.255] SetErrorMode (uMode=0x0) returned 0x1 [0054.256] SetErrorMode (uMode=0x1) returned 0x0 [0054.256] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.256] SetErrorMode (uMode=0x0) returned 0x1 [0054.256] SetErrorMode (uMode=0x1) returned 0x0 [0054.256] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.257] SetErrorMode (uMode=0x0) returned 0x1 [0054.257] SetErrorMode (uMode=0x1) returned 0x0 [0054.257] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.257] SetErrorMode (uMode=0x0) returned 0x1 [0054.257] SetErrorMode (uMode=0x1) returned 0x0 [0054.257] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.257] SetErrorMode (uMode=0x0) returned 0x1 [0054.257] SetErrorMode (uMode=0x1) returned 0x0 [0054.257] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.258] SetErrorMode (uMode=0x0) returned 0x1 [0054.258] SetErrorMode (uMode=0x1) returned 0x0 [0054.258] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.259] SetErrorMode (uMode=0x0) returned 0x1 [0054.259] SetErrorMode (uMode=0x1) returned 0x0 [0054.265] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0054.266] SetErrorMode (uMode=0x0) returned 0x1 [0054.266] SetErrorMode (uMode=0x1) returned 0x0 [0054.266] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.266] SetErrorMode (uMode=0x0) returned 0x1 [0054.266] SetErrorMode (uMode=0x1) returned 0x0 [0054.266] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.266] SetErrorMode (uMode=0x0) returned 0x1 [0054.267] SetErrorMode (uMode=0x1) returned 0x0 [0054.267] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.267] SetErrorMode (uMode=0x0) returned 0x1 [0054.268] SetErrorMode (uMode=0x1) returned 0x0 [0054.268] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.268] SetErrorMode (uMode=0x0) returned 0x1 [0054.268] SetErrorMode (uMode=0x1) returned 0x0 [0054.268] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.268] SetErrorMode (uMode=0x0) returned 0x1 [0054.268] SetErrorMode (uMode=0x1) returned 0x0 [0054.268] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.268] SetErrorMode (uMode=0x0) returned 0x1 [0054.269] SetErrorMode (uMode=0x1) returned 0x0 [0054.269] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.269] SetErrorMode (uMode=0x0) returned 0x1 [0054.270] SetErrorMode (uMode=0x1) returned 0x0 [0054.270] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.270] SetErrorMode (uMode=0x0) returned 0x1 [0054.270] SetErrorMode (uMode=0x1) returned 0x0 [0054.270] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.270] SetErrorMode (uMode=0x0) returned 0x1 [0054.270] SetErrorMode (uMode=0x1) returned 0x0 [0054.270] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.270] SetErrorMode (uMode=0x0) returned 0x1 [0054.271] SetErrorMode (uMode=0x1) returned 0x0 [0054.271] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.271] SetErrorMode (uMode=0x0) returned 0x1 [0054.271] SetErrorMode (uMode=0x1) returned 0x0 [0054.271] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.272] SetErrorMode (uMode=0x0) returned 0x1 [0054.272] SetErrorMode (uMode=0x1) returned 0x0 [0054.272] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.272] SetErrorMode (uMode=0x0) returned 0x1 [0054.272] SetErrorMode (uMode=0x1) returned 0x0 [0054.272] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.272] SetErrorMode (uMode=0x0) returned 0x1 [0054.272] SetErrorMode (uMode=0x1) returned 0x0 [0054.275] SetErrorMode (uMode=0x0) returned 0x1 [0054.275] SetErrorMode (uMode=0x1) returned 0x0 [0054.275] SetErrorMode (uMode=0x0) returned 0x1 [0054.275] SetErrorMode (uMode=0x1) returned 0x0 [0054.276] SetErrorMode (uMode=0x0) returned 0x1 [0054.276] SetErrorMode (uMode=0x1) returned 0x0 [0054.276] SetErrorMode (uMode=0x0) returned 0x1 [0054.276] SetErrorMode (uMode=0x1) returned 0x0 [0054.277] SetErrorMode (uMode=0x0) returned 0x1 [0054.277] SetErrorMode (uMode=0x1) returned 0x0 [0054.277] SetErrorMode (uMode=0x0) returned 0x1 [0054.277] SetErrorMode (uMode=0x1) returned 0x0 [0054.277] SetErrorMode (uMode=0x0) returned 0x1 [0054.277] SetErrorMode (uMode=0x1) returned 0x0 [0054.277] SetErrorMode (uMode=0x0) returned 0x1 [0054.277] SetErrorMode (uMode=0x1) returned 0x0 [0054.298] SetErrorMode (uMode=0x0) returned 0x1 [0054.298] SetErrorMode (uMode=0x1) returned 0x0 [0054.298] SetErrorMode (uMode=0x0) returned 0x1 [0054.298] SetErrorMode (uMode=0x1) returned 0x0 [0054.298] SetErrorMode (uMode=0x0) returned 0x1 [0054.299] SetErrorMode (uMode=0x1) returned 0x0 [0054.299] SetErrorMode (uMode=0x0) returned 0x1 [0054.299] SetErrorMode (uMode=0x1) returned 0x0 [0054.300] SetErrorMode (uMode=0x0) returned 0x1 [0054.300] SetErrorMode (uMode=0x1) returned 0x0 [0054.300] SetErrorMode (uMode=0x0) returned 0x1 [0054.300] SetErrorMode (uMode=0x1) returned 0x0 [0054.300] SetErrorMode (uMode=0x0) returned 0x1 [0054.300] SetErrorMode (uMode=0x1) returned 0x0 [0054.300] SetErrorMode (uMode=0x0) returned 0x1 [0054.300] SetErrorMode (uMode=0x1) returned 0x0 [0054.301] SetErrorMode (uMode=0x0) returned 0x1 [0054.301] SetErrorMode (uMode=0x1) returned 0x0 [0054.301] SetErrorMode (uMode=0x0) returned 0x1 [0054.301] SetErrorMode (uMode=0x1) returned 0x0 [0054.301] SetErrorMode (uMode=0x0) returned 0x1 [0054.302] SetErrorMode (uMode=0x1) returned 0x0 [0054.302] SetErrorMode (uMode=0x0) returned 0x1 [0054.302] SetErrorMode (uMode=0x1) returned 0x0 [0054.302] SetErrorMode (uMode=0x0) returned 0x1 [0054.302] SetErrorMode (uMode=0x1) returned 0x0 [0054.302] SetErrorMode (uMode=0x0) returned 0x1 [0054.302] SetErrorMode (uMode=0x1) returned 0x0 [0054.303] SetErrorMode (uMode=0x0) returned 0x1 [0054.303] SetErrorMode (uMode=0x1) returned 0x0 [0054.303] SetErrorMode (uMode=0x0) returned 0x1 [0054.303] SetErrorMode (uMode=0x1) returned 0x0 [0054.303] SetErrorMode (uMode=0x0) returned 0x1 [0054.303] SetErrorMode (uMode=0x1) returned 0x0 [0054.304] SetErrorMode (uMode=0x0) returned 0x1 [0054.304] SetErrorMode (uMode=0x1) returned 0x0 [0054.304] SetErrorMode (uMode=0x0) returned 0x1 [0054.304] SetErrorMode (uMode=0x1) returned 0x0 [0054.305] SetErrorMode (uMode=0x0) returned 0x1 [0054.305] SetErrorMode (uMode=0x1) returned 0x0 [0054.305] SetErrorMode (uMode=0x0) returned 0x1 [0054.305] SetErrorMode (uMode=0x1) returned 0x0 [0054.305] SetErrorMode (uMode=0x0) returned 0x1 [0054.305] SetErrorMode (uMode=0x1) returned 0x0 [0054.308] SetErrorMode (uMode=0x0) returned 0x1 [0054.309] SetErrorMode (uMode=0x1) returned 0x0 [0054.309] SetErrorMode (uMode=0x0) returned 0x1 [0054.309] SetErrorMode (uMode=0x1) returned 0x0 [0054.309] SetErrorMode (uMode=0x0) returned 0x1 [0054.309] SetErrorMode (uMode=0x1) returned 0x0 [0054.309] SetErrorMode (uMode=0x0) returned 0x1 [0054.309] SetErrorMode (uMode=0x1) returned 0x0 [0054.310] SetErrorMode (uMode=0x0) returned 0x1 [0054.310] SetErrorMode (uMode=0x1) returned 0x0 [0054.310] SetErrorMode (uMode=0x0) returned 0x1 [0054.310] SetErrorMode (uMode=0x1) returned 0x0 [0054.311] SetErrorMode (uMode=0x0) returned 0x1 [0054.311] SetErrorMode (uMode=0x1) returned 0x0 [0054.311] SetErrorMode (uMode=0x0) returned 0x1 [0054.311] SetErrorMode (uMode=0x1) returned 0x0 [0054.312] SetErrorMode (uMode=0x0) returned 0x1 [0054.312] SetErrorMode (uMode=0x1) returned 0x0 [0054.312] SetErrorMode (uMode=0x0) returned 0x1 [0054.312] SetErrorMode (uMode=0x1) returned 0x0 [0054.312] SetErrorMode (uMode=0x0) returned 0x1 [0054.312] SetErrorMode (uMode=0x1) returned 0x0 [0054.312] SetErrorMode (uMode=0x0) returned 0x1 [0054.313] SetErrorMode (uMode=0x1) returned 0x0 [0054.313] SetErrorMode (uMode=0x0) returned 0x1 [0054.313] SetErrorMode (uMode=0x1) returned 0x0 [0054.314] SetErrorMode (uMode=0x0) returned 0x1 [0054.314] SetErrorMode (uMode=0x1) returned 0x0 [0054.314] SetErrorMode (uMode=0x0) returned 0x1 [0054.314] SetErrorMode (uMode=0x1) returned 0x0 [0054.314] SetErrorMode (uMode=0x0) returned 0x1 [0054.314] SetErrorMode (uMode=0x1) returned 0x0 [0054.315] SetErrorMode (uMode=0x0) returned 0x1 [0054.315] SetErrorMode (uMode=0x1) returned 0x0 [0054.315] SetErrorMode (uMode=0x0) returned 0x1 [0054.315] SetErrorMode (uMode=0x1) returned 0x0 [0054.315] SetErrorMode (uMode=0x0) returned 0x1 [0054.315] SetErrorMode (uMode=0x1) returned 0x0 [0054.316] SetErrorMode (uMode=0x0) returned 0x1 [0054.316] SetErrorMode (uMode=0x1) returned 0x0 [0054.316] SetErrorMode (uMode=0x0) returned 0x1 [0054.316] SetErrorMode (uMode=0x1) returned 0x0 [0054.317] SetErrorMode (uMode=0x0) returned 0x1 [0054.317] SetErrorMode (uMode=0x1) returned 0x0 [0054.317] SetErrorMode (uMode=0x0) returned 0x1 [0054.317] SetErrorMode (uMode=0x1) returned 0x0 [0054.317] SetErrorMode (uMode=0x0) returned 0x1 [0054.317] SetErrorMode (uMode=0x1) returned 0x0 [0054.318] SetErrorMode (uMode=0x0) returned 0x1 [0054.318] SetErrorMode (uMode=0x1) returned 0x0 [0054.318] SetErrorMode (uMode=0x0) returned 0x1 [0054.318] SetErrorMode (uMode=0x1) returned 0x0 [0054.319] SetErrorMode (uMode=0x0) returned 0x1 [0054.319] SetErrorMode (uMode=0x1) returned 0x0 [0054.319] SetErrorMode (uMode=0x0) returned 0x1 [0054.319] SetErrorMode (uMode=0x1) returned 0x0 [0054.320] SetErrorMode (uMode=0x0) returned 0x1 [0054.320] SetErrorMode (uMode=0x1) returned 0x0 [0054.320] SetErrorMode (uMode=0x0) returned 0x1 [0054.320] SetErrorMode (uMode=0x1) returned 0x0 [0054.320] SetErrorMode (uMode=0x0) returned 0x1 [0054.320] SetErrorMode (uMode=0x1) returned 0x0 [0054.320] SetErrorMode (uMode=0x0) returned 0x1 [0054.320] SetErrorMode (uMode=0x1) returned 0x0 [0054.321] SetErrorMode (uMode=0x0) returned 0x1 [0054.321] SetErrorMode (uMode=0x1) returned 0x0 [0054.321] SetErrorMode (uMode=0x0) returned 0x1 [0054.322] SetErrorMode (uMode=0x1) returned 0x0 [0054.322] SetErrorMode (uMode=0x0) returned 0x1 [0054.322] SetErrorMode (uMode=0x1) returned 0x0 [0054.322] SetErrorMode (uMode=0x0) returned 0x1 [0054.322] SetErrorMode (uMode=0x1) returned 0x0 [0054.323] SetErrorMode (uMode=0x0) returned 0x1 [0054.323] SetErrorMode (uMode=0x1) returned 0x0 [0054.323] SetErrorMode (uMode=0x0) returned 0x1 [0054.323] SetErrorMode (uMode=0x1) returned 0x0 [0054.323] SetErrorMode (uMode=0x0) returned 0x1 [0054.323] SetErrorMode (uMode=0x1) returned 0x0 [0054.324] SetErrorMode (uMode=0x0) returned 0x1 [0054.324] SetErrorMode (uMode=0x1) returned 0x0 [0054.326] SetErrorMode (uMode=0x0) returned 0x1 [0054.326] SetErrorMode (uMode=0x1) returned 0x0 [0054.326] SetErrorMode (uMode=0x0) returned 0x1 [0054.326] SetErrorMode (uMode=0x1) returned 0x0 [0054.326] SetErrorMode (uMode=0x0) returned 0x1 [0054.326] SetErrorMode (uMode=0x1) returned 0x0 [0054.326] SetErrorMode (uMode=0x0) returned 0x1 [0054.326] SetErrorMode (uMode=0x1) returned 0x0 [0054.327] SetErrorMode (uMode=0x0) returned 0x1 [0054.327] SetErrorMode (uMode=0x1) returned 0x0 [0054.327] SetErrorMode (uMode=0x0) returned 0x1 [0054.327] SetErrorMode (uMode=0x1) returned 0x0 [0054.328] SetErrorMode (uMode=0x0) returned 0x1 [0054.328] SetErrorMode (uMode=0x1) returned 0x0 [0054.328] SetErrorMode (uMode=0x0) returned 0x1 [0054.328] SetErrorMode (uMode=0x1) returned 0x0 [0054.329] SetErrorMode (uMode=0x0) returned 0x1 [0054.329] SetErrorMode (uMode=0x1) returned 0x0 [0054.329] SetErrorMode (uMode=0x0) returned 0x1 [0054.329] SetErrorMode (uMode=0x1) returned 0x0 [0054.329] SetErrorMode (uMode=0x0) returned 0x1 [0054.329] SetErrorMode (uMode=0x1) returned 0x0 [0054.329] SetErrorMode (uMode=0x0) returned 0x1 [0054.329] SetErrorMode (uMode=0x1) returned 0x0 [0054.330] SetErrorMode (uMode=0x0) returned 0x1 [0054.330] SetErrorMode (uMode=0x1) returned 0x0 [0054.330] SetErrorMode (uMode=0x0) returned 0x1 [0054.330] SetErrorMode (uMode=0x1) returned 0x0 [0054.331] SetErrorMode (uMode=0x0) returned 0x1 [0054.331] SetErrorMode (uMode=0x1) returned 0x0 [0054.331] SetErrorMode (uMode=0x0) returned 0x1 [0054.331] SetErrorMode (uMode=0x1) returned 0x0 [0054.332] SetErrorMode (uMode=0x0) returned 0x1 [0054.332] SetErrorMode (uMode=0x1) returned 0x0 [0054.332] SetErrorMode (uMode=0x0) returned 0x1 [0054.332] SetErrorMode (uMode=0x1) returned 0x0 [0054.332] SetErrorMode (uMode=0x0) returned 0x1 [0054.332] SetErrorMode (uMode=0x1) returned 0x0 [0054.332] SetErrorMode (uMode=0x0) returned 0x1 [0054.332] SetErrorMode (uMode=0x1) returned 0x0 [0054.333] SetErrorMode (uMode=0x0) returned 0x1 [0054.333] SetErrorMode (uMode=0x1) returned 0x0 [0054.333] SetErrorMode (uMode=0x0) returned 0x1 [0054.334] SetErrorMode (uMode=0x1) returned 0x0 [0054.334] SetErrorMode (uMode=0x0) returned 0x1 [0054.334] SetErrorMode (uMode=0x1) returned 0x0 [0054.334] SetErrorMode (uMode=0x0) returned 0x1 [0054.334] SetErrorMode (uMode=0x1) returned 0x0 [0054.335] SetErrorMode (uMode=0x0) returned 0x1 [0054.335] SetErrorMode (uMode=0x1) returned 0x0 [0054.335] SetErrorMode (uMode=0x0) returned 0x1 [0054.335] SetErrorMode (uMode=0x1) returned 0x0 [0054.335] SetErrorMode (uMode=0x0) returned 0x1 [0054.335] SetErrorMode (uMode=0x1) returned 0x0 [0054.336] SetErrorMode (uMode=0x0) returned 0x1 [0054.336] SetErrorMode (uMode=0x1) returned 0x0 [0054.336] SetErrorMode (uMode=0x0) returned 0x1 [0054.337] SetErrorMode (uMode=0x1) returned 0x0 [0054.337] SetErrorMode (uMode=0x0) returned 0x1 [0054.337] SetErrorMode (uMode=0x1) returned 0x0 [0054.338] SetErrorMode (uMode=0x0) returned 0x1 [0054.338] SetErrorMode (uMode=0x1) returned 0x0 [0054.338] SetErrorMode (uMode=0x0) returned 0x1 [0054.338] SetErrorMode (uMode=0x1) returned 0x0 [0054.339] SetErrorMode (uMode=0x0) returned 0x1 [0054.339] SetErrorMode (uMode=0x1) returned 0x0 [0054.340] SetErrorMode (uMode=0x0) returned 0x1 [0054.340] SetErrorMode (uMode=0x1) returned 0x0 [0054.341] SetErrorMode (uMode=0x0) returned 0x1 [0054.341] SetErrorMode (uMode=0x1) returned 0x0 [0054.341] SetErrorMode (uMode=0x0) returned 0x1 [0054.341] SetErrorMode (uMode=0x1) returned 0x0 [0054.353] SetErrorMode (uMode=0x0) returned 0x1 [0054.354] SetErrorMode (uMode=0x1) returned 0x0 [0054.355] SetErrorMode (uMode=0x0) returned 0x1 [0054.355] SetErrorMode (uMode=0x1) returned 0x0 [0054.429] SetErrorMode (uMode=0x0) returned 0x1 [0054.429] SetErrorMode (uMode=0x1) returned 0x0 [0054.431] SetErrorMode (uMode=0x0) returned 0x1 [0054.431] SetErrorMode (uMode=0x1) returned 0x0 [0054.431] SetErrorMode (uMode=0x0) returned 0x1 [0054.431] SetErrorMode (uMode=0x1) returned 0x0 [0054.432] SetErrorMode (uMode=0x0) returned 0x1 [0054.432] SetErrorMode (uMode=0x1) returned 0x0 [0054.432] SetErrorMode (uMode=0x0) returned 0x1 [0054.432] SetErrorMode (uMode=0x1) returned 0x0 [0054.432] SetErrorMode (uMode=0x0) returned 0x1 [0054.432] SetErrorMode (uMode=0x1) returned 0x0 [0054.432] SetErrorMode (uMode=0x0) returned 0x1 [0054.433] SetErrorMode (uMode=0x1) returned 0x0 [0054.433] SetErrorMode (uMode=0x0) returned 0x1 [0054.433] SetErrorMode (uMode=0x1) returned 0x0 [0054.433] SetErrorMode (uMode=0x0) returned 0x1 [0054.433] SetErrorMode (uMode=0x1) returned 0x0 [0054.433] SetErrorMode (uMode=0x0) returned 0x1 [0054.433] SetErrorMode (uMode=0x1) returned 0x0 [0054.434] SetErrorMode (uMode=0x0) returned 0x1 [0054.434] SetErrorMode (uMode=0x1) returned 0x0 [0054.434] SetErrorMode (uMode=0x0) returned 0x1 [0054.434] SetErrorMode (uMode=0x1) returned 0x0 [0054.434] SetErrorMode (uMode=0x0) returned 0x1 [0054.434] SetErrorMode (uMode=0x1) returned 0x0 [0054.434] SetErrorMode (uMode=0x0) returned 0x1 [0054.434] SetErrorMode (uMode=0x1) returned 0x0 [0054.434] SetErrorMode (uMode=0x0) returned 0x1 [0054.434] SetErrorMode (uMode=0x1) returned 0x0 [0054.434] SetErrorMode (uMode=0x0) returned 0x1 [0054.435] SetErrorMode (uMode=0x1) returned 0x0 [0054.435] SetErrorMode (uMode=0x0) returned 0x1 [0054.435] SetErrorMode (uMode=0x1) returned 0x0 [0054.435] SetErrorMode (uMode=0x0) returned 0x1 [0054.435] SetErrorMode (uMode=0x1) returned 0x0 [0054.435] SetErrorMode (uMode=0x0) returned 0x1 [0054.605] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en", lpFilePart=0x0) returned 0x81 [0054.605] SetErrorMode (uMode=0x1) returned 0x0 [0054.605] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.605] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.605] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.605] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.605] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.605] SetErrorMode (uMode=0x0) returned 0x1 [0054.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0054.606] SetErrorMode (uMode=0x1) returned 0x0 [0054.606] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.606] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.606] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.606] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.606] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.606] SetErrorMode (uMode=0x0) returned 0x1 [0054.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es", lpFilePart=0x0) returned 0x81 [0054.607] SetErrorMode (uMode=0x1) returned 0x0 [0054.607] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.607] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.607] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.607] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.607] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.607] SetErrorMode (uMode=0x0) returned 0x1 [0054.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0054.607] SetErrorMode (uMode=0x1) returned 0x0 [0054.607] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.608] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.608] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.608] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.608] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.608] SetErrorMode (uMode=0x0) returned 0x1 [0054.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi", lpFilePart=0x0) returned 0x81 [0054.609] SetErrorMode (uMode=0x1) returned 0x0 [0054.609] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.609] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.609] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.609] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.610] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.610] SetErrorMode (uMode=0x0) returned 0x1 [0054.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0054.610] SetErrorMode (uMode=0x1) returned 0x0 [0054.610] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.611] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.611] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.611] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.611] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.611] SetErrorMode (uMode=0x0) returned 0x1 [0054.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil", lpFilePart=0x0) returned 0x82 [0054.612] SetErrorMode (uMode=0x1) returned 0x0 [0054.612] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0054.612] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.612] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.612] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.612] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0054.612] SetErrorMode (uMode=0x0) returned 0x1 [0054.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0054.612] SetErrorMode (uMode=0x1) returned 0x0 [0054.613] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.613] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.613] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.613] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.613] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.613] SetErrorMode (uMode=0x0) returned 0x1 [0054.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr", lpFilePart=0x0) returned 0x81 [0054.614] SetErrorMode (uMode=0x1) returned 0x0 [0054.614] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.614] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.614] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.614] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.614] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.614] SetErrorMode (uMode=0x0) returned 0x1 [0054.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0054.614] SetErrorMode (uMode=0x1) returned 0x0 [0054.615] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.615] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.615] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.615] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.615] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.615] SetErrorMode (uMode=0x0) returned 0x1 [0054.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi", lpFilePart=0x0) returned 0x81 [0054.616] SetErrorMode (uMode=0x1) returned 0x0 [0054.616] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.616] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.616] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.616] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.616] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.616] SetErrorMode (uMode=0x0) returned 0x1 [0054.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x81 [0054.617] SetErrorMode (uMode=0x1) returned 0x0 [0054.617] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.617] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.617] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.617] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.617] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.617] SetErrorMode (uMode=0x0) returned 0x1 [0054.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr", lpFilePart=0x0) returned 0x81 [0054.618] SetErrorMode (uMode=0x1) returned 0x0 [0054.618] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.618] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.618] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.618] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.618] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.618] SetErrorMode (uMode=0x0) returned 0x1 [0054.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0054.618] SetErrorMode (uMode=0x1) returned 0x0 [0054.618] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.618] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.619] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.619] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.619] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.619] SetErrorMode (uMode=0x0) returned 0x1 [0054.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu", lpFilePart=0x0) returned 0x81 [0054.620] SetErrorMode (uMode=0x1) returned 0x0 [0054.620] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4e50 [0054.620] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.620] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.620] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.620] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0054.620] SetErrorMode (uMode=0x0) returned 0x1 [0054.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0054.620] SetErrorMode (uMode=0x1) returned 0x0 [0054.620] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.620] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.620] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.621] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.621] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.621] SetErrorMode (uMode=0x0) returned 0x1 [0054.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id", lpFilePart=0x0) returned 0x81 [0054.621] SetErrorMode (uMode=0x1) returned 0x0 [0054.621] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.621] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.621] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.621] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.621] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.621] SetErrorMode (uMode=0x0) returned 0x1 [0054.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0054.622] SetErrorMode (uMode=0x1) returned 0x0 [0054.622] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.622] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.622] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.622] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.622] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.622] SetErrorMode (uMode=0x0) returned 0x1 [0054.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it", lpFilePart=0x0) returned 0x81 [0054.623] SetErrorMode (uMode=0x1) returned 0x0 [0054.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4e50 [0054.623] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.623] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.623] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.623] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0054.623] SetErrorMode (uMode=0x0) returned 0x1 [0054.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0054.623] SetErrorMode (uMode=0x1) returned 0x0 [0054.623] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.624] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.624] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.624] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.624] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.624] SetErrorMode (uMode=0x0) returned 0x1 [0054.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja", lpFilePart=0x0) returned 0x81 [0054.624] SetErrorMode (uMode=0x1) returned 0x0 [0054.624] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.624] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.624] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.624] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.625] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.625] SetErrorMode (uMode=0x0) returned 0x1 [0054.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0054.625] SetErrorMode (uMode=0x1) returned 0x0 [0054.625] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.625] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.625] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.625] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.625] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.625] SetErrorMode (uMode=0x0) returned 0x1 [0054.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko", lpFilePart=0x0) returned 0x81 [0054.626] SetErrorMode (uMode=0x1) returned 0x0 [0054.626] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.626] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.626] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.626] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.626] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.626] SetErrorMode (uMode=0x0) returned 0x1 [0054.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0054.626] SetErrorMode (uMode=0x1) returned 0x0 [0054.626] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.627] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.627] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.627] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.627] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.627] SetErrorMode (uMode=0x0) returned 0x1 [0054.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt", lpFilePart=0x0) returned 0x81 [0054.627] SetErrorMode (uMode=0x1) returned 0x0 [0054.627] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.628] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.628] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.628] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.628] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.628] SetErrorMode (uMode=0x0) returned 0x1 [0054.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0054.628] SetErrorMode (uMode=0x1) returned 0x0 [0054.628] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0054.628] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.629] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.629] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.629] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0054.629] SetErrorMode (uMode=0x0) returned 0x1 [0054.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv", lpFilePart=0x0) returned 0x81 [0054.629] SetErrorMode (uMode=0x1) returned 0x0 [0054.629] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.629] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.629] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.629] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.630] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.630] SetErrorMode (uMode=0x0) returned 0x1 [0054.630] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0054.630] SetErrorMode (uMode=0x1) returned 0x0 [0054.630] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.630] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.630] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.630] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.630] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.630] SetErrorMode (uMode=0x0) returned 0x1 [0054.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl", lpFilePart=0x0) returned 0x81 [0054.631] SetErrorMode (uMode=0x1) returned 0x0 [0054.631] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.631] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.631] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.631] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.631] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.631] SetErrorMode (uMode=0x0) returned 0x1 [0054.631] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0054.632] SetErrorMode (uMode=0x1) returned 0x0 [0054.632] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.632] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.634] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.634] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.634] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.634] SetErrorMode (uMode=0x0) returned 0x1 [0054.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no", lpFilePart=0x0) returned 0x81 [0054.635] SetErrorMode (uMode=0x1) returned 0x0 [0054.635] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.635] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.635] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.635] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.635] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.635] SetErrorMode (uMode=0x0) returned 0x1 [0054.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0054.636] SetErrorMode (uMode=0x1) returned 0x0 [0054.636] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.636] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.636] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.636] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.636] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.636] SetErrorMode (uMode=0x0) returned 0x1 [0054.636] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl", lpFilePart=0x0) returned 0x81 [0054.636] SetErrorMode (uMode=0x1) returned 0x0 [0054.636] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.637] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.637] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.637] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.637] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.637] SetErrorMode (uMode=0x0) returned 0x1 [0054.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0054.637] SetErrorMode (uMode=0x1) returned 0x0 [0054.637] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.637] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.637] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.637] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.638] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.638] SetErrorMode (uMode=0x0) returned 0x1 [0054.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x84 [0054.638] SetErrorMode (uMode=0x1) returned 0x0 [0054.638] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.638] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.638] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.638] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.638] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.638] SetErrorMode (uMode=0x0) returned 0x1 [0054.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0054.639] SetErrorMode (uMode=0x1) returned 0x0 [0054.639] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.639] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.639] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.639] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.639] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.639] SetErrorMode (uMode=0x0) returned 0x1 [0054.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x84 [0054.640] SetErrorMode (uMode=0x1) returned 0x0 [0054.640] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.640] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.640] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.640] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.640] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.640] SetErrorMode (uMode=0x0) returned 0x1 [0054.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0054.641] SetErrorMode (uMode=0x1) returned 0x0 [0054.641] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.641] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.641] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.641] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.641] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.643] SetErrorMode (uMode=0x0) returned 0x1 [0054.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro", lpFilePart=0x0) returned 0x81 [0054.643] SetErrorMode (uMode=0x1) returned 0x0 [0054.643] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.644] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.644] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.644] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.644] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.644] SetErrorMode (uMode=0x0) returned 0x1 [0054.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0054.644] SetErrorMode (uMode=0x1) returned 0x0 [0054.644] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.644] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.644] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.644] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.645] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.645] SetErrorMode (uMode=0x0) returned 0x1 [0054.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru", lpFilePart=0x0) returned 0x81 [0054.645] SetErrorMode (uMode=0x1) returned 0x0 [0054.645] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.645] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.645] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.645] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.645] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.645] SetErrorMode (uMode=0x0) returned 0x1 [0054.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpFilePart=0x0) returned 0x81 [0054.646] SetErrorMode (uMode=0x1) returned 0x0 [0054.646] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.646] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.646] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.646] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.646] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.646] SetErrorMode (uMode=0x0) returned 0x1 [0054.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se", lpFilePart=0x0) returned 0x81 [0054.647] SetErrorMode (uMode=0x1) returned 0x0 [0054.647] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.647] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.647] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.647] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.647] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.647] SetErrorMode (uMode=0x0) returned 0x1 [0054.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0054.647] SetErrorMode (uMode=0x1) returned 0x0 [0054.647] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.648] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.648] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.648] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.648] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.648] SetErrorMode (uMode=0x0) returned 0x1 [0054.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk", lpFilePart=0x0) returned 0x81 [0054.648] SetErrorMode (uMode=0x1) returned 0x0 [0054.649] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.649] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.649] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.649] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.649] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.649] SetErrorMode (uMode=0x0) returned 0x1 [0054.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0054.649] SetErrorMode (uMode=0x1) returned 0x0 [0054.649] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.649] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.650] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.650] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.650] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.650] SetErrorMode (uMode=0x0) returned 0x1 [0054.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl", lpFilePart=0x0) returned 0x81 [0054.650] SetErrorMode (uMode=0x1) returned 0x0 [0054.650] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.651] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.651] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.651] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.651] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.651] SetErrorMode (uMode=0x0) returned 0x1 [0054.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0054.651] SetErrorMode (uMode=0x1) returned 0x0 [0054.651] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.651] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.651] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.651] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.652] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.652] SetErrorMode (uMode=0x0) returned 0x1 [0054.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr", lpFilePart=0x0) returned 0x81 [0054.652] SetErrorMode (uMode=0x1) returned 0x0 [0054.652] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.652] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.652] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.652] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.652] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.652] SetErrorMode (uMode=0x0) returned 0x1 [0054.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0054.653] SetErrorMode (uMode=0x1) returned 0x0 [0054.653] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.653] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.653] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.653] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.653] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.653] SetErrorMode (uMode=0x0) returned 0x1 [0054.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th", lpFilePart=0x0) returned 0x81 [0054.653] SetErrorMode (uMode=0x1) returned 0x0 [0054.653] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.653] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.654] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.654] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.654] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.654] SetErrorMode (uMode=0x0) returned 0x1 [0054.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0054.654] SetErrorMode (uMode=0x1) returned 0x0 [0054.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.654] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.654] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.654] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.654] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.654] SetErrorMode (uMode=0x0) returned 0x1 [0054.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr", lpFilePart=0x0) returned 0x81 [0054.654] SetErrorMode (uMode=0x1) returned 0x0 [0054.655] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.655] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.655] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.655] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.655] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.655] SetErrorMode (uMode=0x0) returned 0x1 [0054.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0054.655] SetErrorMode (uMode=0x1) returned 0x0 [0054.655] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.655] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.655] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.655] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.655] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.656] SetErrorMode (uMode=0x0) returned 0x1 [0054.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk", lpFilePart=0x0) returned 0x81 [0054.656] SetErrorMode (uMode=0x1) returned 0x0 [0054.656] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.656] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.656] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.656] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.656] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.656] SetErrorMode (uMode=0x0) returned 0x1 [0054.656] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0054.656] SetErrorMode (uMode=0x1) returned 0x0 [0054.656] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.656] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.656] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.657] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.657] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.657] SetErrorMode (uMode=0x0) returned 0x1 [0054.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi", lpFilePart=0x0) returned 0x81 [0054.657] SetErrorMode (uMode=0x1) returned 0x0 [0054.657] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4e50 [0054.657] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.657] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.657] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.657] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0054.657] SetErrorMode (uMode=0x0) returned 0x1 [0054.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0054.657] SetErrorMode (uMode=0x1) returned 0x0 [0054.657] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.658] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.658] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.658] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.658] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.658] SetErrorMode (uMode=0x0) returned 0x1 [0054.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x84 [0054.658] SetErrorMode (uMode=0x1) returned 0x0 [0054.658] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.658] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.658] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.658] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.658] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.658] SetErrorMode (uMode=0x0) returned 0x1 [0054.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0054.658] SetErrorMode (uMode=0x1) returned 0x0 [0054.658] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.659] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.659] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0054.659] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0054.659] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.659] SetErrorMode (uMode=0x0) returned 0x1 [0054.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x84 [0054.659] SetErrorMode (uMode=0x1) returned 0x0 [0054.659] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.659] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.659] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0054.659] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0054.659] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.659] SetErrorMode (uMode=0x0) returned 0x1 [0054.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x5ade80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata", lpFilePart=0x0) returned 0x7f [0054.659] SetErrorMode (uMode=0x1) returned 0x0 [0054.659] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4310 [0054.661] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.661] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.661] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 0 [0054.661] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0054.661] SetErrorMode (uMode=0x0) returned 0x1 [0054.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata", nBufferLength=0x105, lpBuffer=0x5ade50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata", lpFilePart=0x0) returned 0x7f [0054.661] SetErrorMode (uMode=0x1) returned 0x0 [0054.661] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0054.661] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0054.661] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0054.661] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 0 [0054.661] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.661] SetErrorMode (uMode=0x0) returned 0x1 [0054.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpFilePart=0x0) returned 0x6f [0054.661] SetErrorMode (uMode=0x1) returned 0x0 [0054.661] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4e50 [0054.662] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0054.662] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0054.662] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0054.662] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0054.662] SetErrorMode (uMode=0x0) returned 0x1 [0054.662] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpFilePart=0x0) returned 0x6f [0054.662] SetErrorMode (uMode=0x1) returned 0x0 [0054.662] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0054.662] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0054.662] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0054.662] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0054.663] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.663] SetErrorMode (uMode=0x0) returned 0x1 [0054.663] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0", nBufferLength=0x105, lpBuffer=0x5adf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0", lpFilePart=0x0) returned 0x7e [0054.663] SetErrorMode (uMode=0x1) returned 0x0 [0054.663] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b41f0 [0054.676] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.677] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.678] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.678] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.678] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.678] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.678] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0054.678] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 0 [0054.678] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.678] SetErrorMode (uMode=0x0) returned 0x1 [0054.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0", nBufferLength=0x105, lpBuffer=0x5adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0", lpFilePart=0x0) returned 0x7e [0054.679] SetErrorMode (uMode=0x1) returned 0x0 [0054.679] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0054.679] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.679] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.679] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.679] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0054.680] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 0 [0054.680] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0054.681] SetErrorMode (uMode=0x0) returned 0x1 [0054.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x5ade80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x89 [0054.681] SetErrorMode (uMode=0x1) returned 0x0 [0054.681] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b41f0 [0054.694] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.694] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.694] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.694] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.694] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.694] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.694] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.694] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.694] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0054.694] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 0 [0054.694] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0054.695] SetErrorMode (uMode=0x0) returned 0x1 [0054.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", nBufferLength=0x105, lpBuffer=0x5ade50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup", lpFilePart=0x0) returned 0x89 [0054.695] SetErrorMode (uMode=0x1) returned 0x0 [0054.695] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0054.697] SetErrorMode (uMode=0x0) returned 0x1 [0054.697] SetErrorMode (uMode=0x1) returned 0x0 [0054.698] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0054.698] SetErrorMode (uMode=0x0) returned 0x1 [0054.699] SetErrorMode (uMode=0x1) returned 0x0 [0054.699] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0054.699] SetErrorMode (uMode=0x0) returned 0x1 [0054.699] SetErrorMode (uMode=0x1) returned 0x0 [0054.699] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0054.705] SetErrorMode (uMode=0x0) returned 0x1 [0054.705] SetErrorMode (uMode=0x1) returned 0x0 [0054.705] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0054.706] SetErrorMode (uMode=0x0) returned 0x1 [0054.706] SetErrorMode (uMode=0x1) returned 0x0 [0054.706] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.707] SetErrorMode (uMode=0x0) returned 0x1 [0054.707] SetErrorMode (uMode=0x1) returned 0x0 [0054.707] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.707] SetErrorMode (uMode=0x0) returned 0x1 [0054.707] SetErrorMode (uMode=0x1) returned 0x0 [0054.707] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.707] SetErrorMode (uMode=0x0) returned 0x1 [0054.707] SetErrorMode (uMode=0x1) returned 0x0 [0054.707] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.708] SetErrorMode (uMode=0x0) returned 0x1 [0054.708] SetErrorMode (uMode=0x1) returned 0x0 [0054.708] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.708] SetErrorMode (uMode=0x0) returned 0x1 [0054.708] SetErrorMode (uMode=0x1) returned 0x0 [0054.708] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.709] SetErrorMode (uMode=0x0) returned 0x1 [0054.709] SetErrorMode (uMode=0x1) returned 0x0 [0054.709] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.709] SetErrorMode (uMode=0x0) returned 0x1 [0054.709] SetErrorMode (uMode=0x1) returned 0x0 [0054.709] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.709] SetErrorMode (uMode=0x0) returned 0x1 [0054.709] SetErrorMode (uMode=0x1) returned 0x0 [0054.709] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.710] SetErrorMode (uMode=0x0) returned 0x1 [0054.710] SetErrorMode (uMode=0x1) returned 0x0 [0054.710] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0054.710] SetErrorMode (uMode=0x0) returned 0x1 [0054.710] SetErrorMode (uMode=0x1) returned 0x0 [0054.710] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.710] SetErrorMode (uMode=0x0) returned 0x1 [0054.710] SetErrorMode (uMode=0x1) returned 0x0 [0054.710] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.711] SetErrorMode (uMode=0x0) returned 0x1 [0054.711] SetErrorMode (uMode=0x1) returned 0x0 [0054.711] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4e50 [0054.711] SetErrorMode (uMode=0x0) returned 0x1 [0054.711] SetErrorMode (uMode=0x1) returned 0x0 [0054.711] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.711] SetErrorMode (uMode=0x0) returned 0x1 [0054.712] SetErrorMode (uMode=0x1) returned 0x0 [0054.712] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.712] SetErrorMode (uMode=0x0) returned 0x1 [0054.712] SetErrorMode (uMode=0x1) returned 0x0 [0054.712] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.712] SetErrorMode (uMode=0x0) returned 0x1 [0054.712] SetErrorMode (uMode=0x1) returned 0x0 [0054.712] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.713] SetErrorMode (uMode=0x0) returned 0x1 [0054.713] SetErrorMode (uMode=0x1) returned 0x0 [0054.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.713] SetErrorMode (uMode=0x0) returned 0x1 [0054.713] SetErrorMode (uMode=0x1) returned 0x0 [0054.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.713] SetErrorMode (uMode=0x0) returned 0x1 [0054.713] SetErrorMode (uMode=0x1) returned 0x0 [0054.713] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.714] SetErrorMode (uMode=0x0) returned 0x1 [0054.714] SetErrorMode (uMode=0x1) returned 0x0 [0054.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.714] SetErrorMode (uMode=0x0) returned 0x1 [0054.714] SetErrorMode (uMode=0x1) returned 0x0 [0054.714] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.714] SetErrorMode (uMode=0x0) returned 0x1 [0054.715] SetErrorMode (uMode=0x1) returned 0x0 [0054.715] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.715] SetErrorMode (uMode=0x0) returned 0x1 [0054.715] SetErrorMode (uMode=0x1) returned 0x0 [0054.715] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.715] SetErrorMode (uMode=0x0) returned 0x1 [0054.715] SetErrorMode (uMode=0x1) returned 0x0 [0054.715] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.716] SetErrorMode (uMode=0x0) returned 0x1 [0054.716] SetErrorMode (uMode=0x1) returned 0x0 [0054.716] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.716] SetErrorMode (uMode=0x0) returned 0x1 [0054.716] SetErrorMode (uMode=0x1) returned 0x0 [0054.716] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.716] SetErrorMode (uMode=0x0) returned 0x1 [0054.716] SetErrorMode (uMode=0x1) returned 0x0 [0054.716] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.716] SetErrorMode (uMode=0x0) returned 0x1 [0054.717] SetErrorMode (uMode=0x1) returned 0x0 [0054.717] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.717] SetErrorMode (uMode=0x0) returned 0x1 [0054.717] SetErrorMode (uMode=0x1) returned 0x0 [0054.717] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.717] SetErrorMode (uMode=0x0) returned 0x1 [0054.718] SetErrorMode (uMode=0x1) returned 0x0 [0054.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.718] SetErrorMode (uMode=0x0) returned 0x1 [0054.718] SetErrorMode (uMode=0x1) returned 0x0 [0054.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.718] SetErrorMode (uMode=0x0) returned 0x1 [0054.718] SetErrorMode (uMode=0x1) returned 0x0 [0054.718] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.719] SetErrorMode (uMode=0x0) returned 0x1 [0054.719] SetErrorMode (uMode=0x1) returned 0x0 [0054.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.719] SetErrorMode (uMode=0x0) returned 0x1 [0054.719] SetErrorMode (uMode=0x1) returned 0x0 [0054.719] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.720] SetErrorMode (uMode=0x0) returned 0x1 [0054.720] SetErrorMode (uMode=0x1) returned 0x0 [0054.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.720] SetErrorMode (uMode=0x0) returned 0x1 [0054.720] SetErrorMode (uMode=0x1) returned 0x0 [0054.720] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.721] SetErrorMode (uMode=0x0) returned 0x1 [0054.721] SetErrorMode (uMode=0x1) returned 0x0 [0054.721] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.721] SetErrorMode (uMode=0x0) returned 0x1 [0054.721] SetErrorMode (uMode=0x1) returned 0x0 [0054.721] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.721] SetErrorMode (uMode=0x0) returned 0x1 [0054.721] SetErrorMode (uMode=0x1) returned 0x0 [0054.721] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.721] SetErrorMode (uMode=0x0) returned 0x1 [0054.721] SetErrorMode (uMode=0x1) returned 0x0 [0054.722] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.722] SetErrorMode (uMode=0x0) returned 0x1 [0054.722] SetErrorMode (uMode=0x1) returned 0x0 [0054.722] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.722] SetErrorMode (uMode=0x0) returned 0x1 [0054.722] SetErrorMode (uMode=0x1) returned 0x0 [0054.722] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4310 [0054.723] SetErrorMode (uMode=0x0) returned 0x1 [0054.723] SetErrorMode (uMode=0x1) returned 0x0 [0054.723] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.723] SetErrorMode (uMode=0x0) returned 0x1 [0054.723] SetErrorMode (uMode=0x1) returned 0x0 [0054.723] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.724] SetErrorMode (uMode=0x0) returned 0x1 [0054.724] SetErrorMode (uMode=0x1) returned 0x0 [0054.724] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0054.724] SetErrorMode (uMode=0x0) returned 0x1 [0054.724] SetErrorMode (uMode=0x1) returned 0x0 [0054.724] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0054.724] SetErrorMode (uMode=0x0) returned 0x1 [0054.724] SetErrorMode (uMode=0x1) returned 0x0 [0054.724] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0054.724] SetErrorMode (uMode=0x0) returned 0x1 [0054.724] SetErrorMode (uMode=0x1) returned 0x0 [0054.724] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.725] SetErrorMode (uMode=0x0) returned 0x1 [0054.725] SetErrorMode (uMode=0x1) returned 0x0 [0054.725] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4e50 [0054.725] SetErrorMode (uMode=0x0) returned 0x1 [0054.725] SetErrorMode (uMode=0x1) returned 0x0 [0054.725] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0054.726] SetErrorMode (uMode=0x0) returned 0x1 [0054.726] SetErrorMode (uMode=0x1) returned 0x0 [0054.726] SetErrorMode (uMode=0x0) returned 0x1 [0054.726] SetErrorMode (uMode=0x1) returned 0x0 [0054.727] SetErrorMode (uMode=0x0) returned 0x1 [0054.727] SetErrorMode (uMode=0x1) returned 0x0 [0054.728] SetErrorMode (uMode=0x0) returned 0x1 [0054.728] SetErrorMode (uMode=0x1) returned 0x0 [0054.728] SetErrorMode (uMode=0x0) returned 0x1 [0054.728] SetErrorMode (uMode=0x1) returned 0x0 [0054.728] SetErrorMode (uMode=0x0) returned 0x1 [0054.728] SetErrorMode (uMode=0x1) returned 0x0 [0054.729] SetErrorMode (uMode=0x0) returned 0x1 [0054.729] SetErrorMode (uMode=0x1) returned 0x0 [0054.729] SetErrorMode (uMode=0x0) returned 0x1 [0054.729] SetErrorMode (uMode=0x1) returned 0x0 [0054.729] SetErrorMode (uMode=0x0) returned 0x1 [0054.729] SetErrorMode (uMode=0x1) returned 0x0 [0054.729] SetErrorMode (uMode=0x0) returned 0x1 [0054.729] SetErrorMode (uMode=0x1) returned 0x0 [0054.730] SetErrorMode (uMode=0x0) returned 0x1 [0054.731] SetErrorMode (uMode=0x1) returned 0x0 [0054.731] SetErrorMode (uMode=0x0) returned 0x1 [0054.731] SetErrorMode (uMode=0x1) returned 0x0 [0054.731] SetErrorMode (uMode=0x0) returned 0x1 [0054.731] SetErrorMode (uMode=0x1) returned 0x0 [0054.731] SetErrorMode (uMode=0x0) returned 0x1 [0054.731] SetErrorMode (uMode=0x1) returned 0x0 [0054.732] SetErrorMode (uMode=0x0) returned 0x1 [0054.732] SetErrorMode (uMode=0x1) returned 0x0 [0054.732] SetErrorMode (uMode=0x0) returned 0x1 [0054.732] SetErrorMode (uMode=0x1) returned 0x0 [0054.732] SetErrorMode (uMode=0x0) returned 0x1 [0054.732] SetErrorMode (uMode=0x1) returned 0x0 [0054.732] SetErrorMode (uMode=0x0) returned 0x1 [0054.732] SetErrorMode (uMode=0x1) returned 0x0 [0054.733] SetErrorMode (uMode=0x0) returned 0x1 [0054.733] SetErrorMode (uMode=0x1) returned 0x0 [0054.733] SetErrorMode (uMode=0x0) returned 0x1 [0054.733] SetErrorMode (uMode=0x1) returned 0x0 [0054.733] SetErrorMode (uMode=0x0) returned 0x1 [0054.733] SetErrorMode (uMode=0x1) returned 0x0 [0054.733] SetErrorMode (uMode=0x0) returned 0x1 [0054.734] SetErrorMode (uMode=0x1) returned 0x0 [0054.734] SetErrorMode (uMode=0x0) returned 0x1 [0054.734] SetErrorMode (uMode=0x1) returned 0x0 [0054.734] SetErrorMode (uMode=0x0) returned 0x1 [0054.734] SetErrorMode (uMode=0x1) returned 0x0 [0054.735] SetErrorMode (uMode=0x0) returned 0x1 [0054.735] SetErrorMode (uMode=0x1) returned 0x0 [0054.735] SetErrorMode (uMode=0x0) returned 0x1 [0054.735] SetErrorMode (uMode=0x1) returned 0x0 [0054.736] SetErrorMode (uMode=0x0) returned 0x1 [0054.736] SetErrorMode (uMode=0x1) returned 0x0 [0054.736] SetErrorMode (uMode=0x0) returned 0x1 [0054.736] SetErrorMode (uMode=0x1) returned 0x0 [0054.736] SetErrorMode (uMode=0x0) returned 0x1 [0054.736] SetErrorMode (uMode=0x1) returned 0x0 [0054.736] SetErrorMode (uMode=0x0) returned 0x1 [0054.736] SetErrorMode (uMode=0x1) returned 0x0 [0054.737] SetErrorMode (uMode=0x0) returned 0x1 [0054.737] SetErrorMode (uMode=0x1) returned 0x0 [0054.737] SetErrorMode (uMode=0x0) returned 0x1 [0054.737] SetErrorMode (uMode=0x1) returned 0x0 [0054.737] SetErrorMode (uMode=0x0) returned 0x1 [0054.738] SetErrorMode (uMode=0x1) returned 0x0 [0054.738] SetErrorMode (uMode=0x0) returned 0x1 [0054.738] SetErrorMode (uMode=0x1) returned 0x0 [0054.738] SetErrorMode (uMode=0x0) returned 0x1 [0054.738] SetErrorMode (uMode=0x1) returned 0x0 [0054.738] SetErrorMode (uMode=0x0) returned 0x1 [0054.738] SetErrorMode (uMode=0x1) returned 0x0 [0054.739] SetErrorMode (uMode=0x0) returned 0x1 [0054.739] SetErrorMode (uMode=0x1) returned 0x0 [0054.739] SetErrorMode (uMode=0x0) returned 0x1 [0054.739] SetErrorMode (uMode=0x1) returned 0x0 [0054.739] SetErrorMode (uMode=0x0) returned 0x1 [0054.739] SetErrorMode (uMode=0x1) returned 0x0 [0054.739] SetErrorMode (uMode=0x0) returned 0x1 [0054.740] SetErrorMode (uMode=0x1) returned 0x0 [0054.740] SetErrorMode (uMode=0x0) returned 0x1 [0054.740] SetErrorMode (uMode=0x1) returned 0x0 [0054.740] SetErrorMode (uMode=0x0) returned 0x1 [0054.740] SetErrorMode (uMode=0x1) returned 0x0 [0054.740] SetErrorMode (uMode=0x0) returned 0x1 [0054.740] SetErrorMode (uMode=0x1) returned 0x0 [0054.741] SetErrorMode (uMode=0x0) returned 0x1 [0054.741] SetErrorMode (uMode=0x1) returned 0x0 [0054.741] SetErrorMode (uMode=0x0) returned 0x1 [0054.741] SetErrorMode (uMode=0x1) returned 0x0 [0054.741] SetErrorMode (uMode=0x0) returned 0x1 [0054.741] SetErrorMode (uMode=0x1) returned 0x0 [0054.741] SetErrorMode (uMode=0x0) returned 0x1 [0054.742] SetErrorMode (uMode=0x1) returned 0x0 [0054.742] SetErrorMode (uMode=0x0) returned 0x1 [0054.742] SetErrorMode (uMode=0x1) returned 0x0 [0054.742] SetErrorMode (uMode=0x0) returned 0x1 [0054.742] SetErrorMode (uMode=0x1) returned 0x0 [0054.742] SetErrorMode (uMode=0x0) returned 0x1 [0054.742] SetErrorMode (uMode=0x1) returned 0x0 [0054.743] SetErrorMode (uMode=0x0) returned 0x1 [0054.743] SetErrorMode (uMode=0x1) returned 0x0 [0054.743] SetErrorMode (uMode=0x0) returned 0x1 [0054.743] SetErrorMode (uMode=0x1) returned 0x0 [0054.743] SetErrorMode (uMode=0x0) returned 0x1 [0054.743] SetErrorMode (uMode=0x1) returned 0x0 [0054.743] SetErrorMode (uMode=0x0) returned 0x1 [0054.743] SetErrorMode (uMode=0x1) returned 0x0 [0054.744] SetErrorMode (uMode=0x0) returned 0x1 [0054.744] SetErrorMode (uMode=0x1) returned 0x0 [0054.744] SetErrorMode (uMode=0x0) returned 0x1 [0054.745] SetErrorMode (uMode=0x1) returned 0x0 [0054.745] SetErrorMode (uMode=0x0) returned 0x1 [0054.745] SetErrorMode (uMode=0x1) returned 0x0 [0054.745] SetErrorMode (uMode=0x0) returned 0x1 [0054.745] SetErrorMode (uMode=0x1) returned 0x0 [0054.746] SetErrorMode (uMode=0x0) returned 0x1 [0054.746] SetErrorMode (uMode=0x1) returned 0x0 [0054.746] SetErrorMode (uMode=0x0) returned 0x1 [0054.746] SetErrorMode (uMode=0x1) returned 0x0 [0054.760] SetErrorMode (uMode=0x0) returned 0x1 [0054.760] SetErrorMode (uMode=0x1) returned 0x0 [0054.761] SetErrorMode (uMode=0x0) returned 0x1 [0054.761] SetErrorMode (uMode=0x1) returned 0x0 [0054.764] SetErrorMode (uMode=0x0) returned 0x1 [0054.764] SetErrorMode (uMode=0x1) returned 0x0 [0054.766] SetErrorMode (uMode=0x0) returned 0x1 [0054.766] SetErrorMode (uMode=0x1) returned 0x0 [0054.766] SetErrorMode (uMode=0x0) returned 0x1 [0054.766] SetErrorMode (uMode=0x1) returned 0x0 [0054.767] SetErrorMode (uMode=0x0) returned 0x1 [0054.767] SetErrorMode (uMode=0x1) returned 0x0 [0054.767] SetErrorMode (uMode=0x0) returned 0x1 [0054.767] SetErrorMode (uMode=0x1) returned 0x0 [0054.767] SetErrorMode (uMode=0x0) returned 0x1 [0054.767] SetErrorMode (uMode=0x1) returned 0x0 [0054.767] SetErrorMode (uMode=0x0) returned 0x1 [0054.768] SetErrorMode (uMode=0x1) returned 0x0 [0054.768] SetErrorMode (uMode=0x0) returned 0x1 [0054.768] SetErrorMode (uMode=0x1) returned 0x0 [0054.786] SetErrorMode (uMode=0x0) returned 0x1 [0054.786] SetErrorMode (uMode=0x1) returned 0x0 [0054.788] SetErrorMode (uMode=0x0) returned 0x1 [0054.788] SetErrorMode (uMode=0x1) returned 0x0 [0054.815] SetErrorMode (uMode=0x0) returned 0x1 [0054.815] SetErrorMode (uMode=0x1) returned 0x0 [0054.816] SetErrorMode (uMode=0x0) returned 0x1 [0054.816] SetErrorMode (uMode=0x1) returned 0x0 [0054.817] SetErrorMode (uMode=0x0) returned 0x1 [0054.817] SetErrorMode (uMode=0x1) returned 0x0 [0054.817] SetErrorMode (uMode=0x0) returned 0x1 [0054.817] SetErrorMode (uMode=0x1) returned 0x0 [0054.818] SetErrorMode (uMode=0x0) returned 0x1 [0054.819] SetErrorMode (uMode=0x1) returned 0x0 [0054.819] SetErrorMode (uMode=0x0) returned 0x1 [0054.819] SetErrorMode (uMode=0x1) returned 0x0 [0054.824] SetErrorMode (uMode=0x0) returned 0x1 [0054.825] SetErrorMode (uMode=0x1) returned 0x0 [0054.826] SetErrorMode (uMode=0x0) returned 0x1 [0054.826] SetErrorMode (uMode=0x1) returned 0x0 [0054.843] SetErrorMode (uMode=0x0) returned 0x1 [0054.843] SetErrorMode (uMode=0x1) returned 0x0 [0054.844] SetErrorMode (uMode=0x0) returned 0x1 [0054.844] SetErrorMode (uMode=0x1) returned 0x0 [0054.863] SetErrorMode (uMode=0x0) returned 0x1 [0054.863] SetErrorMode (uMode=0x1) returned 0x0 [0054.866] SetErrorMode (uMode=0x0) returned 0x1 [0054.866] SetErrorMode (uMode=0x1) returned 0x0 [0054.877] SetErrorMode (uMode=0x0) returned 0x1 [0054.878] SetErrorMode (uMode=0x1) returned 0x0 [0054.879] SetErrorMode (uMode=0x0) returned 0x1 [0054.879] SetErrorMode (uMode=0x1) returned 0x0 [0054.890] SetErrorMode (uMode=0x0) returned 0x1 [0054.890] SetErrorMode (uMode=0x1) returned 0x0 [0054.891] SetErrorMode (uMode=0x0) returned 0x1 [0054.891] SetErrorMode (uMode=0x1) returned 0x0 [0054.927] SetErrorMode (uMode=0x0) returned 0x1 [0054.927] SetErrorMode (uMode=0x1) returned 0x0 [0054.928] SetErrorMode (uMode=0x0) returned 0x1 [0054.929] SetErrorMode (uMode=0x1) returned 0x0 [0054.930] SetErrorMode (uMode=0x0) returned 0x1 [0054.931] SetErrorMode (uMode=0x1) returned 0x0 [0054.932] SetErrorMode (uMode=0x0) returned 0x1 [0054.932] SetErrorMode (uMode=0x1) returned 0x0 [0054.945] SetErrorMode (uMode=0x0) returned 0x1 [0054.946] SetErrorMode (uMode=0x1) returned 0x0 [0054.947] SetErrorMode (uMode=0x0) returned 0x1 [0054.947] SetErrorMode (uMode=0x1) returned 0x0 [0054.965] SetErrorMode (uMode=0x0) returned 0x1 [0054.965] SetErrorMode (uMode=0x1) returned 0x0 [0054.966] SetErrorMode (uMode=0x0) returned 0x1 [0054.966] SetErrorMode (uMode=0x1) returned 0x0 [0054.981] SetErrorMode (uMode=0x0) returned 0x1 [0054.981] SetErrorMode (uMode=0x1) returned 0x0 [0054.982] SetErrorMode (uMode=0x0) returned 0x1 [0054.982] SetErrorMode (uMode=0x1) returned 0x0 [0055.000] SetErrorMode (uMode=0x0) returned 0x1 [0055.000] SetErrorMode (uMode=0x1) returned 0x0 [0055.001] SetErrorMode (uMode=0x0) returned 0x1 [0055.001] SetErrorMode (uMode=0x1) returned 0x0 [0055.004] SetErrorMode (uMode=0x0) returned 0x1 [0055.004] SetErrorMode (uMode=0x1) returned 0x0 [0055.005] SetErrorMode (uMode=0x0) returned 0x1 [0055.005] SetErrorMode (uMode=0x1) returned 0x0 [0055.006] SetErrorMode (uMode=0x0) returned 0x1 [0055.006] SetErrorMode (uMode=0x1) returned 0x0 [0055.006] SetErrorMode (uMode=0x0) returned 0x1 [0055.006] SetErrorMode (uMode=0x1) returned 0x0 [0055.014] SetErrorMode (uMode=0x0) returned 0x1 [0055.014] SetErrorMode (uMode=0x1) returned 0x0 [0055.015] SetErrorMode (uMode=0x0) returned 0x1 [0055.015] SetErrorMode (uMode=0x1) returned 0x0 [0055.016] SetErrorMode (uMode=0x0) returned 0x1 [0055.016] SetErrorMode (uMode=0x1) returned 0x0 [0055.016] SetErrorMode (uMode=0x0) returned 0x1 [0055.016] SetErrorMode (uMode=0x1) returned 0x0 [0055.017] SetErrorMode (uMode=0x0) returned 0x1 [0055.017] SetErrorMode (uMode=0x1) returned 0x0 [0055.017] SetErrorMode (uMode=0x0) returned 0x1 [0055.017] SetErrorMode (uMode=0x1) returned 0x0 [0055.017] SetErrorMode (uMode=0x0) returned 0x1 [0055.017] SetErrorMode (uMode=0x1) returned 0x0 [0055.017] SetErrorMode (uMode=0x0) returned 0x1 [0055.017] SetErrorMode (uMode=0x1) returned 0x0 [0055.018] SetErrorMode (uMode=0x0) returned 0x1 [0055.018] SetErrorMode (uMode=0x1) returned 0x0 [0055.018] SetErrorMode (uMode=0x0) returned 0x1 [0055.018] SetErrorMode (uMode=0x1) returned 0x0 [0055.018] SetErrorMode (uMode=0x0) returned 0x1 [0055.018] SetErrorMode (uMode=0x1) returned 0x0 [0055.019] SetErrorMode (uMode=0x0) returned 0x1 [0055.019] SetErrorMode (uMode=0x1) returned 0x0 [0055.019] SetErrorMode (uMode=0x0) returned 0x1 [0055.019] SetErrorMode (uMode=0x1) returned 0x0 [0055.019] SetErrorMode (uMode=0x0) returned 0x1 [0055.019] SetErrorMode (uMode=0x1) returned 0x0 [0055.020] SetErrorMode (uMode=0x0) returned 0x1 [0055.020] SetErrorMode (uMode=0x1) returned 0x0 [0055.020] SetErrorMode (uMode=0x0) returned 0x1 [0055.020] SetErrorMode (uMode=0x1) returned 0x0 [0055.020] SetErrorMode (uMode=0x0) returned 0x1 [0055.020] SetErrorMode (uMode=0x1) returned 0x0 [0055.020] SetErrorMode (uMode=0x0) returned 0x1 [0055.020] SetErrorMode (uMode=0x1) returned 0x0 [0055.020] SetErrorMode (uMode=0x0) returned 0x1 [0055.020] SetErrorMode (uMode=0x1) returned 0x0 [0055.021] SetErrorMode (uMode=0x0) returned 0x1 [0055.021] SetErrorMode (uMode=0x1) returned 0x0 [0055.021] SetErrorMode (uMode=0x0) returned 0x1 [0055.021] SetErrorMode (uMode=0x1) returned 0x0 [0055.021] SetErrorMode (uMode=0x0) returned 0x1 [0055.030] SetErrorMode (uMode=0x0) returned 0x1 [0055.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d [0055.031] SetErrorMode (uMode=0x1) returned 0x0 [0055.031] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4d90 [0055.032] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.032] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.032] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.032] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.032] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.032] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.032] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.033] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.033] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.033] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.033] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.033] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.033] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.033] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.033] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.033] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.033] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.033] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.034] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.034] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.034] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.034] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.034] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.034] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.034] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.034] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0055.034] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 0 [0055.034] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.035] SetErrorMode (uMode=0x0) returned 0x1 [0055.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x5ae2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x2d [0055.035] SetErrorMode (uMode=0x1) returned 0x0 [0055.035] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0055.035] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.035] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.035] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.035] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.036] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.036] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.036] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.036] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.036] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.036] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.036] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.036] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.036] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.036] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.037] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.038] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0055.038] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 0 [0055.038] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.038] SetErrorMode (uMode=0x0) returned 0x1 [0055.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x36 [0055.038] SetErrorMode (uMode=0x1) returned 0x0 [0055.038] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0055.038] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.039] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.039] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.039] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.039] SetErrorMode (uMode=0x0) returned 0x1 [0055.039] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x36 [0055.039] SetErrorMode (uMode=0x1) returned 0x0 [0055.039] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0055.039] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.039] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.039] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.039] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.040] SetErrorMode (uMode=0x0) returned 0x1 [0055.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0055.040] SetErrorMode (uMode=0x1) returned 0x0 [0055.040] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.040] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.040] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.040] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.040] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.040] SetErrorMode (uMode=0x0) returned 0x1 [0055.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0055.041] SetErrorMode (uMode=0x1) returned 0x0 [0055.041] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.041] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.041] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.041] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.041] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.041] SetErrorMode (uMode=0x0) returned 0x1 [0055.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36 [0055.041] SetErrorMode (uMode=0x1) returned 0x0 [0055.041] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0055.042] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.042] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.042] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.042] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.042] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.042] SetErrorMode (uMode=0x0) returned 0x1 [0055.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x36 [0055.042] SetErrorMode (uMode=0x1) returned 0x0 [0055.042] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0055.043] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.043] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.043] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.043] SetErrorMode (uMode=0x0) returned 0x1 [0055.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0055.043] SetErrorMode (uMode=0x1) returned 0x0 [0055.043] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.050] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.050] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.050] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.050] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.050] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.050] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.050] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.051] SetErrorMode (uMode=0x0) returned 0x1 [0055.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x40 [0055.051] SetErrorMode (uMode=0x1) returned 0x0 [0055.051] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.052] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.052] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.052] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.052] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.052] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.052] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.052] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.053] SetErrorMode (uMode=0x0) returned 0x1 [0055.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39 [0055.053] SetErrorMode (uMode=0x1) returned 0x0 [0055.053] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0055.054] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.054] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.054] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.054] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.054] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.054] SetErrorMode (uMode=0x0) returned 0x1 [0055.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x39 [0055.054] SetErrorMode (uMode=0x1) returned 0x0 [0055.055] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b41f0 [0055.055] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.055] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.055] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.055] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.055] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.055] SetErrorMode (uMode=0x0) returned 0x1 [0055.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x43 [0055.055] SetErrorMode (uMode=0x1) returned 0x0 [0055.055] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4e50 [0055.057] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.057] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.057] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.057] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.057] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0055.057] SetErrorMode (uMode=0x0) returned 0x1 [0055.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x43 [0055.057] SetErrorMode (uMode=0x1) returned 0x0 [0055.057] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.058] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.058] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.058] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.058] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.058] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.058] SetErrorMode (uMode=0x0) returned 0x1 [0055.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39 [0055.058] SetErrorMode (uMode=0x1) returned 0x0 [0055.058] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0055.059] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.059] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.059] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.059] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.059] SetErrorMode (uMode=0x0) returned 0x1 [0055.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x39 [0055.059] SetErrorMode (uMode=0x1) returned 0x0 [0055.059] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0055.060] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.060] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.060] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.060] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.060] SetErrorMode (uMode=0x0) returned 0x1 [0055.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x3a [0055.060] SetErrorMode (uMode=0x1) returned 0x0 [0055.060] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4310 [0055.062] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.062] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.062] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0055.063] SetErrorMode (uMode=0x0) returned 0x1 [0055.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x3a [0055.063] SetErrorMode (uMode=0x1) returned 0x0 [0055.063] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0055.063] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.063] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.064] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.064] SetErrorMode (uMode=0x0) returned 0x1 [0055.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33 [0055.064] SetErrorMode (uMode=0x1) returned 0x0 [0055.064] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0055.065] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.065] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.065] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.065] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.065] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.065] SetErrorMode (uMode=0x0) returned 0x1 [0055.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x33 [0055.065] SetErrorMode (uMode=0x1) returned 0x0 [0055.065] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4e50 [0055.065] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.066] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.066] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.066] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.066] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0055.066] SetErrorMode (uMode=0x0) returned 0x1 [0055.067] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x5ae120, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0055.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x5b [0055.068] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x5adf10, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0055.070] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x5ae110, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0055.070] SetErrorMode (uMode=0x1) returned 0x0 [0055.070] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.071] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.071] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.071] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.071] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.071] SetErrorMode (uMode=0x0) returned 0x1 [0055.072] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x5ae0f0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0055.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpFilePart=0x0) returned 0x5b [0055.073] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x5adee0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0055.074] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x5ae0e0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0055.075] SetErrorMode (uMode=0x1) returned 0x0 [0055.075] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.075] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.075] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.075] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.075] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.075] SetErrorMode (uMode=0x0) returned 0x1 [0055.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39 [0055.076] SetErrorMode (uMode=0x1) returned 0x0 [0055.076] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b41f0 [0055.077] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.077] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.077] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.077] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.077] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.077] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.077] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.077] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.078] SetErrorMode (uMode=0x0) returned 0x1 [0055.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x39 [0055.078] SetErrorMode (uMode=0x1) returned 0x0 [0055.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0055.079] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.080] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.080] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.081] SetErrorMode (uMode=0x0) returned 0x1 [0055.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8", lpFilePart=0x0) returned 0x42 [0055.081] SetErrorMode (uMode=0x1) returned 0x0 [0055.081] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.082] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.082] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.083] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.083] SetErrorMode (uMode=0x0) returned 0x1 [0055.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8", lpFilePart=0x0) returned 0x42 [0055.083] SetErrorMode (uMode=0x1) returned 0x0 [0055.083] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\6YGNCJW8\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.083] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.083] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.084] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.084] SetErrorMode (uMode=0x0) returned 0x1 [0055.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY", lpFilePart=0x0) returned 0x42 [0055.084] SetErrorMode (uMode=0x1) returned 0x0 [0055.084] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b41f0 [0055.084] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.084] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.084] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.084] SetErrorMode (uMode=0x0) returned 0x1 [0055.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY", lpFilePart=0x0) returned 0x42 [0055.085] SetErrorMode (uMode=0x1) returned 0x0 [0055.085] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\FZW2QEOY\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.085] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.085] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.085] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.085] SetErrorMode (uMode=0x0) returned 0x1 [0055.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE", lpFilePart=0x0) returned 0x42 [0055.086] SetErrorMode (uMode=0x1) returned 0x0 [0055.086] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.086] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.086] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.087] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.087] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.087] SetErrorMode (uMode=0x0) returned 0x1 [0055.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE", lpFilePart=0x0) returned 0x42 [0055.087] SetErrorMode (uMode=0x1) returned 0x0 [0055.087] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.087] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.088] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.088] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.088] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.088] SetErrorMode (uMode=0x0) returned 0x1 [0055.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54", lpFilePart=0x0) returned 0x42 [0055.088] SetErrorMode (uMode=0x1) returned 0x0 [0055.088] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.088] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.088] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.089] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.089] SetErrorMode (uMode=0x0) returned 0x1 [0055.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54", lpFilePart=0x0) returned 0x42 [0055.089] SetErrorMode (uMode=0x1) returned 0x0 [0055.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\PJ5H3B54\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.089] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.089] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.089] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.090] SetErrorMode (uMode=0x0) returned 0x1 [0055.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33 [0055.090] SetErrorMode (uMode=0x1) returned 0x0 [0055.090] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0055.091] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.091] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.091] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.091] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.091] SetErrorMode (uMode=0x0) returned 0x1 [0055.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x33 [0055.091] SetErrorMode (uMode=0x1) returned 0x0 [0055.091] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0055.092] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.092] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.092] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.092] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.092] SetErrorMode (uMode=0x0) returned 0x1 [0055.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x35 [0055.092] SetErrorMode (uMode=0x1) returned 0x0 [0055.092] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0055.092] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.093] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.093] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.093] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.093] SetErrorMode (uMode=0x0) returned 0x1 [0055.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x35 [0055.093] SetErrorMode (uMode=0x1) returned 0x0 [0055.093] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4310 [0055.093] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.093] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.094] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.094] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0055.094] SetErrorMode (uMode=0x0) returned 0x1 [0055.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x42 [0055.094] SetErrorMode (uMode=0x1) returned 0x0 [0055.094] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0055.094] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.094] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.095] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.095] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.095] SetErrorMode (uMode=0x0) returned 0x1 [0055.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x42 [0055.095] SetErrorMode (uMode=0x1) returned 0x0 [0055.095] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0055.095] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.095] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.095] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.095] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.095] SetErrorMode (uMode=0x0) returned 0x1 [0055.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x53 [0055.095] SetErrorMode (uMode=0x1) returned 0x0 [0055.095] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.096] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.096] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.096] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.096] SetErrorMode (uMode=0x0) returned 0x1 [0055.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x53 [0055.096] SetErrorMode (uMode=0x1) returned 0x0 [0055.096] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.096] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.096] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.097] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.097] SetErrorMode (uMode=0x0) returned 0x1 [0055.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3f [0055.097] SetErrorMode (uMode=0x1) returned 0x0 [0055.097] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.098] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.099] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.099] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.099] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.099] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.099] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.099] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.099] SetErrorMode (uMode=0x0) returned 0x1 [0055.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer", lpFilePart=0x0) returned 0x3f [0055.099] SetErrorMode (uMode=0x1) returned 0x0 [0055.099] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0055.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.101] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.101] SetErrorMode (uMode=0x0) returned 0x1 [0055.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions", lpFilePart=0x0) returned 0x51 [0055.102] SetErrorMode (uMode=0x1) returned 0x0 [0055.102] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.103] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.103] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.103] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.103] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.104] SetErrorMode (uMode=0x0) returned 0x1 [0055.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions", lpFilePart=0x0) returned 0x51 [0055.104] SetErrorMode (uMode=0x1) returned 0x0 [0055.104] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.104] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.104] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.104] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.104] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.105] SetErrorMode (uMode=0x0) returned 0x1 [0055.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x48 [0055.105] SetErrorMode (uMode=0x1) returned 0x0 [0055.105] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.105] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.105] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.105] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.105] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.105] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.105] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.105] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.105] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.105] SetErrorMode (uMode=0x0) returned 0x1 [0055.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore", lpFilePart=0x0) returned 0x48 [0055.105] SetErrorMode (uMode=0x1) returned 0x0 [0055.105] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0055.106] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.106] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.106] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.106] SetErrorMode (uMode=0x0) returned 0x1 [0055.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3", lpFilePart=0x0) returned 0x51 [0055.106] SetErrorMode (uMode=0x1) returned 0x0 [0055.106] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.107] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.107] SetErrorMode (uMode=0x0) returned 0x1 [0055.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3", lpFilePart=0x0) returned 0x51 [0055.107] SetErrorMode (uMode=0x1) returned 0x0 [0055.107] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\37JGORX3\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.107] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.107] SetErrorMode (uMode=0x0) returned 0x1 [0055.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV", lpFilePart=0x0) returned 0x51 [0055.107] SetErrorMode (uMode=0x1) returned 0x0 [0055.108] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.108] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.108] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.108] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.108] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.108] SetErrorMode (uMode=0x0) returned 0x1 [0055.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV", lpFilePart=0x0) returned 0x51 [0055.108] SetErrorMode (uMode=0x1) returned 0x0 [0055.108] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4310 [0055.108] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.108] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.108] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.108] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0055.108] SetErrorMode (uMode=0x0) returned 0x1 [0055.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L", lpFilePart=0x0) returned 0x51 [0055.109] SetErrorMode (uMode=0x1) returned 0x0 [0055.109] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0055.109] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.109] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.109] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.109] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.109] SetErrorMode (uMode=0x0) returned 0x1 [0055.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L", lpFilePart=0x0) returned 0x51 [0055.109] SetErrorMode (uMode=0x1) returned 0x0 [0055.109] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.109] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.109] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.109] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.109] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.109] SetErrorMode (uMode=0x0) returned 0x1 [0055.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5", lpFilePart=0x0) returned 0x51 [0055.110] SetErrorMode (uMode=0x1) returned 0x0 [0055.110] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.110] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.110] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.110] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.111] SetErrorMode (uMode=0x0) returned 0x1 [0055.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5", lpFilePart=0x0) returned 0x51 [0055.111] SetErrorMode (uMode=0x1) returned 0x0 [0055.111] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Q6TJEFY5\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.111] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.111] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.111] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.111] SetErrorMode (uMode=0x0) returned 0x1 [0055.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList", lpFilePart=0x0) returned 0x53 [0055.111] SetErrorMode (uMode=0x1) returned 0x0 [0055.111] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.112] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.112] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.112] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.112] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.112] SetErrorMode (uMode=0x0) returned 0x1 [0055.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList", lpFilePart=0x0) returned 0x53 [0055.112] SetErrorMode (uMode=0x1) returned 0x0 [0055.112] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.112] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.112] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.112] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.112] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.113] SetErrorMode (uMode=0x0) returned 0x1 [0055.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", lpFilePart=0x0) returned 0x4c [0055.113] SetErrorMode (uMode=0x1) returned 0x0 [0055.113] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4e50 [0055.113] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.113] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.113] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.113] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0055.113] SetErrorMode (uMode=0x0) returned 0x1 [0055.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList", lpFilePart=0x0) returned 0x4c [0055.113] SetErrorMode (uMode=0x1) returned 0x0 [0055.113] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0055.113] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.113] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.113] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.113] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.114] SetErrorMode (uMode=0x0) returned 0x1 [0055.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", lpFilePart=0x0) returned 0x4c [0055.114] SetErrorMode (uMode=0x1) returned 0x0 [0055.114] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b41f0 [0055.114] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.114] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.114] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.114] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.114] SetErrorMode (uMode=0x0) returned 0x1 [0055.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList", lpFilePart=0x0) returned 0x4c [0055.114] SetErrorMode (uMode=0x1) returned 0x0 [0055.114] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0055.114] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.114] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.114] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.115] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.115] SetErrorMode (uMode=0x0) returned 0x1 [0055.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", lpFilePart=0x0) returned 0x4c [0055.115] SetErrorMode (uMode=0x1) returned 0x0 [0055.115] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.116] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.116] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.116] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.116] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.116] SetErrorMode (uMode=0x0) returned 0x1 [0055.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData", lpFilePart=0x0) returned 0x4c [0055.116] SetErrorMode (uMode=0x1) returned 0x0 [0055.116] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0055.116] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.116] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.116] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.116] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.116] SetErrorMode (uMode=0x0) returned 0x1 [0055.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache", lpFilePart=0x0) returned 0x50 [0055.116] SetErrorMode (uMode=0x1) returned 0x0 [0055.116] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b41f0 [0055.117] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.117] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.117] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.117] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.117] SetErrorMode (uMode=0x0) returned 0x1 [0055.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache", lpFilePart=0x0) returned 0x50 [0055.117] SetErrorMode (uMode=0x1) returned 0x0 [0055.117] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.117] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.117] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.117] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.117] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.117] SetErrorMode (uMode=0x0) returned 0x1 [0055.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", lpFilePart=0x0) returned 0x4a [0055.117] SetErrorMode (uMode=0x1) returned 0x0 [0055.117] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.118] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.118] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.118] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.118] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.118] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.118] SetErrorMode (uMode=0x0) returned 0x1 [0055.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore", lpFilePart=0x0) returned 0x4a [0055.118] SetErrorMode (uMode=0x1) returned 0x0 [0055.118] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.118] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.118] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.118] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.118] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.118] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.118] SetErrorMode (uMode=0x0) returned 0x1 [0055.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh", lpFilePart=0x0) returned 0x52 [0055.119] SetErrorMode (uMode=0x1) returned 0x0 [0055.119] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.119] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.119] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.119] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.119] SetErrorMode (uMode=0x0) returned 0x1 [0055.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh", lpFilePart=0x0) returned 0x52 [0055.119] SetErrorMode (uMode=0x1) returned 0x0 [0055.119] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\dc8m5rh\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.119] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.119] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.119] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.119] SetErrorMode (uMode=0x0) returned 0x1 [0055.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n", lpFilePart=0x0) returned 0x52 [0055.119] SetErrorMode (uMode=0x1) returned 0x0 [0055.120] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.121] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.121] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.121] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.121] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.121] SetErrorMode (uMode=0x0) returned 0x1 [0055.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n", lpFilePart=0x0) returned 0x52 [0055.121] SetErrorMode (uMode=0x1) returned 0x0 [0055.121] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.121] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.121] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.121] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.121] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.121] SetErrorMode (uMode=0x0) returned 0x1 [0055.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x48 [0055.121] SetErrorMode (uMode=0x1) returned 0x0 [0055.122] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.122] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.122] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.122] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.122] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.122] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.122] SetErrorMode (uMode=0x0) returned 0x1 [0055.122] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery", lpFilePart=0x0) returned 0x48 [0055.122] SetErrorMode (uMode=0x1) returned 0x0 [0055.123] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.123] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.123] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.123] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.123] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.123] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.123] SetErrorMode (uMode=0x0) returned 0x1 [0055.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x4f [0055.123] SetErrorMode (uMode=0x1) returned 0x0 [0055.123] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4310 [0055.123] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.123] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.123] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0055.123] SetErrorMode (uMode=0x0) returned 0x1 [0055.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active", lpFilePart=0x0) returned 0x4f [0055.124] SetErrorMode (uMode=0x1) returned 0x0 [0055.124] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.124] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.124] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.124] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.124] SetErrorMode (uMode=0x0) returned 0x1 [0055.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x54 [0055.124] SetErrorMode (uMode=0x1) returned 0x0 [0055.124] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.125] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.125] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.125] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.125] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.125] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.126] SetErrorMode (uMode=0x0) returned 0x1 [0055.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active", lpFilePart=0x0) returned 0x54 [0055.126] SetErrorMode (uMode=0x1) returned 0x0 [0055.126] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0055.127] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.127] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.127] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.127] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.127] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.128] SetErrorMode (uMode=0x0) returned 0x1 [0055.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", lpFilePart=0x0) returned 0x4a [0055.128] SetErrorMode (uMode=0x1) returned 0x0 [0055.128] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.128] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.128] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.128] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.128] SetErrorMode (uMode=0x0) returned 0x1 [0055.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming", lpFilePart=0x0) returned 0x4a [0055.128] SetErrorMode (uMode=0x1) returned 0x0 [0055.129] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.129] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.129] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.129] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.129] SetErrorMode (uMode=0x0) returned 0x1 [0055.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", lpFilePart=0x0) returned 0x45 [0055.129] SetErrorMode (uMode=0x1) returned 0x0 [0055.129] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.129] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.129] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.129] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.129] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.129] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.129] SetErrorMode (uMode=0x0) returned 0x1 [0055.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles", lpFilePart=0x0) returned 0x45 [0055.129] SetErrorMode (uMode=0x1) returned 0x0 [0055.130] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4310 [0055.130] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.130] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.130] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.130] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.130] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0055.130] SetErrorMode (uMode=0x0) returned 0x1 [0055.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", lpFilePart=0x0) returned 0x53 [0055.130] SetErrorMode (uMode=0x1) returned 0x0 [0055.130] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.130] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.130] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.130] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.130] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.130] SetErrorMode (uMode=0x0) returned 0x1 [0055.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940", lpFilePart=0x0) returned 0x53 [0055.131] SetErrorMode (uMode=0x1) returned 0x0 [0055.131] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.131] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.131] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.131] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.131] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.131] SetErrorMode (uMode=0x0) returned 0x1 [0055.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530", lpFilePart=0x0) returned 0x53 [0055.131] SetErrorMode (uMode=0x1) returned 0x0 [0055.131] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.131] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.131] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.131] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.131] SetErrorMode (uMode=0x0) returned 0x1 [0055.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530", lpFilePart=0x0) returned 0x53 [0055.132] SetErrorMode (uMode=0x1) returned 0x0 [0055.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin7226654530\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.132] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.132] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.132] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.132] SetErrorMode (uMode=0x0) returned 0x1 [0055.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", lpFilePart=0x0) returned 0x53 [0055.132] SetErrorMode (uMode=0x1) returned 0x0 [0055.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b41f0 [0055.132] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.132] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.132] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.132] SetErrorMode (uMode=0x0) returned 0x1 [0055.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection", lpFilePart=0x0) returned 0x53 [0055.132] SetErrorMode (uMode=0x1) returned 0x0 [0055.133] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0055.133] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.133] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.133] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.133] SetErrorMode (uMode=0x0) returned 0x1 [0055.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", lpFilePart=0x0) returned 0x4e [0055.133] SetErrorMode (uMode=0x1) returned 0x0 [0055.133] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4310 [0055.133] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.133] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.133] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.133] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0055.133] SetErrorMode (uMode=0x0) returned 0x1 [0055.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager", lpFilePart=0x0) returned 0x4e [0055.133] SetErrorMode (uMode=0x1) returned 0x0 [0055.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.134] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.134] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0055.134] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0055.134] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.134] SetErrorMode (uMode=0x0) returned 0x1 [0055.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x3a [0055.134] SetErrorMode (uMode=0x1) returned 0x0 [0055.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4310 [0055.134] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.134] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.134] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0055.134] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0055.134] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0055.135] SetErrorMode (uMode=0x0) returned 0x1 [0055.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x3a [0055.135] SetErrorMode (uMode=0x1) returned 0x0 [0055.135] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0055.135] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.135] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.135] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0055.135] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0055.135] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.135] SetErrorMode (uMode=0x0) returned 0x1 [0055.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x49 [0055.135] SetErrorMode (uMode=0x1) returned 0x0 [0055.135] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.135] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.135] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0055.135] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0055.136] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.136] SetErrorMode (uMode=0x0) returned 0x1 [0055.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x49 [0055.136] SetErrorMode (uMode=0x1) returned 0x0 [0055.136] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.137] SetErrorMode (uMode=0x0) returned 0x1 [0055.137] SetErrorMode (uMode=0x1) returned 0x0 [0055.137] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.138] SetErrorMode (uMode=0x0) returned 0x1 [0055.138] SetErrorMode (uMode=0x1) returned 0x0 [0055.138] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0055.139] SetErrorMode (uMode=0x0) returned 0x1 [0055.139] SetErrorMode (uMode=0x1) returned 0x0 [0055.139] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b41f0 [0055.157] SetErrorMode (uMode=0x0) returned 0x1 [0055.157] SetErrorMode (uMode=0x1) returned 0x0 [0055.157] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0055.159] SetErrorMode (uMode=0x0) returned 0x1 [0055.159] SetErrorMode (uMode=0x1) returned 0x0 [0055.159] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.159] SetErrorMode (uMode=0x0) returned 0x1 [0055.159] SetErrorMode (uMode=0x1) returned 0x0 [0055.160] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.160] SetErrorMode (uMode=0x0) returned 0x1 [0055.160] SetErrorMode (uMode=0x1) returned 0x0 [0055.160] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4e50 [0055.160] SetErrorMode (uMode=0x0) returned 0x1 [0055.160] SetErrorMode (uMode=0x1) returned 0x0 [0055.160] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4e50 [0055.160] SetErrorMode (uMode=0x0) returned 0x1 [0055.160] SetErrorMode (uMode=0x1) returned 0x0 [0055.160] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.161] SetErrorMode (uMode=0x0) returned 0x1 [0055.161] SetErrorMode (uMode=0x1) returned 0x0 [0055.161] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.161] SetErrorMode (uMode=0x0) returned 0x1 [0055.161] SetErrorMode (uMode=0x1) returned 0x0 [0055.161] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0055.162] SetErrorMode (uMode=0x0) returned 0x1 [0055.162] SetErrorMode (uMode=0x1) returned 0x0 [0055.162] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.162] SetErrorMode (uMode=0x0) returned 0x1 [0055.162] SetErrorMode (uMode=0x1) returned 0x0 [0055.162] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0055.163] SetErrorMode (uMode=0x0) returned 0x1 [0055.163] SetErrorMode (uMode=0x1) returned 0x0 [0055.163] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4e50 [0055.163] SetErrorMode (uMode=0x0) returned 0x1 [0055.163] SetErrorMode (uMode=0x1) returned 0x0 [0055.163] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4e50 [0055.163] SetErrorMode (uMode=0x0) returned 0x1 [0055.164] SetErrorMode (uMode=0x1) returned 0x0 [0055.164] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.164] SetErrorMode (uMode=0x0) returned 0x1 [0055.164] SetErrorMode (uMode=0x1) returned 0x0 [0055.164] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4310 [0055.164] SetErrorMode (uMode=0x0) returned 0x1 [0055.164] SetErrorMode (uMode=0x1) returned 0x0 [0055.164] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0055.164] SetErrorMode (uMode=0x0) returned 0x1 [0055.164] SetErrorMode (uMode=0x1) returned 0x0 [0055.164] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0055.205] SetErrorMode (uMode=0x0) returned 0x1 [0055.205] SetErrorMode (uMode=0x1) returned 0x0 [0055.205] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0055.206] SetErrorMode (uMode=0x0) returned 0x1 [0055.207] SetErrorMode (uMode=0x1) returned 0x0 [0055.207] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b41f0 [0055.277] SetErrorMode (uMode=0x0) returned 0x1 [0055.277] SetErrorMode (uMode=0x1) returned 0x0 [0055.278] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b41f0 [0055.279] SetErrorMode (uMode=0x0) returned 0x1 [0055.279] SetErrorMode (uMode=0x1) returned 0x0 [0055.279] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4e50 [0055.281] SetErrorMode (uMode=0x0) returned 0x1 [0055.281] SetErrorMode (uMode=0x1) returned 0x0 [0055.281] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b41f0 [0055.282] SetErrorMode (uMode=0x0) returned 0x1 [0055.283] SetErrorMode (uMode=0x1) returned 0x0 [0055.283] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.283] SetErrorMode (uMode=0x0) returned 0x1 [0055.283] SetErrorMode (uMode=0x1) returned 0x0 [0055.283] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.284] SetErrorMode (uMode=0x0) returned 0x1 [0055.284] SetErrorMode (uMode=0x1) returned 0x0 [0055.284] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0055.284] SetErrorMode (uMode=0x0) returned 0x1 [0055.284] SetErrorMode (uMode=0x1) returned 0x0 [0055.285] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\Wef\\AppCommands\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0055.285] SetErrorMode (uMode=0x0) returned 0x1 [0055.285] SetErrorMode (uMode=0x1) returned 0x0 [0055.285] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b41f0 [0055.285] SetErrorMode (uMode=0x0) returned 0x1 [0055.285] SetErrorMode (uMode=0x1) returned 0x0 [0055.285] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\OTele\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.285] SetErrorMode (uMode=0x0) returned 0x1 [0055.285] SetErrorMode (uMode=0x1) returned 0x0 [0055.285] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0055.286] SetErrorMode (uMode=0x0) returned 0x1 [0055.286] SetErrorMode (uMode=0x1) returned 0x0 [0055.286] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0055.286] SetErrorMode (uMode=0x0) returned 0x1 [0055.286] SetErrorMode (uMode=0x1) returned 0x0 [0055.286] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b41f0 [0055.299] SetErrorMode (uMode=0x0) returned 0x1 [0055.299] SetErrorMode (uMode=0x1) returned 0x0 [0055.299] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.300] SetErrorMode (uMode=0x0) returned 0x1 [0055.300] SetErrorMode (uMode=0x1) returned 0x0 [0055.300] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.301] SetErrorMode (uMode=0x0) returned 0x1 [0055.301] SetErrorMode (uMode=0x1) returned 0x0 [0055.301] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.301] SetErrorMode (uMode=0x0) returned 0x1 [0055.301] SetErrorMode (uMode=0x1) returned 0x0 [0055.301] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.308] SetErrorMode (uMode=0x0) returned 0x1 [0055.308] SetErrorMode (uMode=0x1) returned 0x0 [0055.308] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.308] SetErrorMode (uMode=0x0) returned 0x1 [0055.308] SetErrorMode (uMode=0x1) returned 0x0 [0055.308] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4310 [0055.308] SetErrorMode (uMode=0x0) returned 0x1 [0055.309] SetErrorMode (uMode=0x1) returned 0x0 [0055.309] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ja\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.309] SetErrorMode (uMode=0x0) returned 0x1 [0055.309] SetErrorMode (uMode=0x1) returned 0x0 [0055.309] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b41f0 [0055.317] SetErrorMode (uMode=0x0) returned 0x1 [0055.317] SetErrorMode (uMode=0x1) returned 0x0 [0055.317] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0055.318] SetErrorMode (uMode=0x0) returned 0x1 [0055.318] SetErrorMode (uMode=0x1) returned 0x0 [0055.318] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.320] SetErrorMode (uMode=0x0) returned 0x1 [0055.320] SetErrorMode (uMode=0x1) returned 0x0 [0055.320] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.320] SetErrorMode (uMode=0x0) returned 0x1 [0055.320] SetErrorMode (uMode=0x1) returned 0x0 [0055.320] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.321] SetErrorMode (uMode=0x0) returned 0x1 [0055.321] SetErrorMode (uMode=0x1) returned 0x0 [0055.321] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.321] SetErrorMode (uMode=0x0) returned 0x1 [0055.321] SetErrorMode (uMode=0x1) returned 0x0 [0055.321] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.322] SetErrorMode (uMode=0x0) returned 0x1 [0055.322] SetErrorMode (uMode=0x1) returned 0x0 [0055.322] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.322] SetErrorMode (uMode=0x0) returned 0x1 [0055.322] SetErrorMode (uMode=0x1) returned 0x0 [0055.322] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.322] SetErrorMode (uMode=0x0) returned 0x1 [0055.322] SetErrorMode (uMode=0x1) returned 0x0 [0055.322] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.323] SetErrorMode (uMode=0x0) returned 0x1 [0055.323] SetErrorMode (uMode=0x1) returned 0x0 [0055.323] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0055.323] SetErrorMode (uMode=0x0) returned 0x1 [0055.323] SetErrorMode (uMode=0x1) returned 0x0 [0055.324] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.324] SetErrorMode (uMode=0x0) returned 0x1 [0055.324] SetErrorMode (uMode=0x1) returned 0x0 [0055.324] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.324] SetErrorMode (uMode=0x0) returned 0x1 [0055.325] SetErrorMode (uMode=0x1) returned 0x0 [0055.325] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\km-kh\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.325] SetErrorMode (uMode=0x0) returned 0x1 [0055.325] SetErrorMode (uMode=0x1) returned 0x0 [0055.325] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0055.360] SetErrorMode (uMode=0x0) returned 0x1 [0055.360] SetErrorMode (uMode=0x1) returned 0x0 [0055.360] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0055.362] SetErrorMode (uMode=0x0) returned 0x1 [0055.362] SetErrorMode (uMode=0x1) returned 0x0 [0055.362] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.363] SetErrorMode (uMode=0x0) returned 0x1 [0055.363] SetErrorMode (uMode=0x1) returned 0x0 [0055.363] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.363] SetErrorMode (uMode=0x0) returned 0x1 [0055.363] SetErrorMode (uMode=0x1) returned 0x0 [0055.363] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.364] SetErrorMode (uMode=0x0) returned 0x1 [0055.364] SetErrorMode (uMode=0x1) returned 0x0 [0055.364] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.364] SetErrorMode (uMode=0x0) returned 0x1 [0055.364] SetErrorMode (uMode=0x1) returned 0x0 [0055.366] SetErrorMode (uMode=0x0) returned 0x1 [0055.366] SetErrorMode (uMode=0x1) returned 0x0 [0055.366] SetErrorMode (uMode=0x0) returned 0x1 [0055.366] SetErrorMode (uMode=0x1) returned 0x0 [0055.366] SetErrorMode (uMode=0x0) returned 0x1 [0055.366] SetErrorMode (uMode=0x1) returned 0x0 [0055.366] SetErrorMode (uMode=0x0) returned 0x1 [0055.367] SetErrorMode (uMode=0x1) returned 0x0 [0055.367] SetErrorMode (uMode=0x0) returned 0x1 [0055.367] SetErrorMode (uMode=0x1) returned 0x0 [0055.367] SetErrorMode (uMode=0x0) returned 0x1 [0055.367] SetErrorMode (uMode=0x1) returned 0x0 [0055.368] SetErrorMode (uMode=0x0) returned 0x1 [0055.368] SetErrorMode (uMode=0x1) returned 0x0 [0055.368] SetErrorMode (uMode=0x0) returned 0x1 [0055.368] SetErrorMode (uMode=0x1) returned 0x0 [0055.368] SetErrorMode (uMode=0x0) returned 0x1 [0055.368] SetErrorMode (uMode=0x1) returned 0x0 [0055.368] SetErrorMode (uMode=0x0) returned 0x1 [0055.368] SetErrorMode (uMode=0x1) returned 0x0 [0055.378] SetErrorMode (uMode=0x0) returned 0x1 [0055.378] SetErrorMode (uMode=0x1) returned 0x0 [0055.378] SetErrorMode (uMode=0x0) returned 0x1 [0055.378] SetErrorMode (uMode=0x1) returned 0x0 [0055.379] SetErrorMode (uMode=0x0) returned 0x1 [0055.379] SetErrorMode (uMode=0x1) returned 0x0 [0055.379] SetErrorMode (uMode=0x0) returned 0x1 [0055.379] SetErrorMode (uMode=0x1) returned 0x0 [0055.379] SetErrorMode (uMode=0x0) returned 0x1 [0055.379] SetErrorMode (uMode=0x1) returned 0x0 [0055.380] SetErrorMode (uMode=0x0) returned 0x1 [0055.380] SetErrorMode (uMode=0x1) returned 0x0 [0055.380] SetErrorMode (uMode=0x0) returned 0x1 [0055.380] SetErrorMode (uMode=0x1) returned 0x0 [0055.380] SetErrorMode (uMode=0x0) returned 0x1 [0055.380] SetErrorMode (uMode=0x1) returned 0x0 [0055.381] SetErrorMode (uMode=0x0) returned 0x1 [0055.381] SetErrorMode (uMode=0x1) returned 0x0 [0055.381] SetErrorMode (uMode=0x0) returned 0x1 [0055.381] SetErrorMode (uMode=0x1) returned 0x0 [0055.383] SetErrorMode (uMode=0x0) returned 0x1 [0055.383] SetErrorMode (uMode=0x1) returned 0x0 [0055.383] SetErrorMode (uMode=0x0) returned 0x1 [0055.383] SetErrorMode (uMode=0x1) returned 0x0 [0055.384] SetErrorMode (uMode=0x0) returned 0x1 [0055.384] SetErrorMode (uMode=0x1) returned 0x0 [0055.384] SetErrorMode (uMode=0x0) returned 0x1 [0055.384] SetErrorMode (uMode=0x1) returned 0x0 [0055.385] SetErrorMode (uMode=0x0) returned 0x1 [0055.385] SetErrorMode (uMode=0x1) returned 0x0 [0055.385] SetErrorMode (uMode=0x0) returned 0x1 [0055.385] SetErrorMode (uMode=0x1) returned 0x0 [0055.388] SetErrorMode (uMode=0x0) returned 0x1 [0055.388] SetErrorMode (uMode=0x1) returned 0x0 [0055.389] SetErrorMode (uMode=0x0) returned 0x1 [0055.389] SetErrorMode (uMode=0x1) returned 0x0 [0055.390] SetErrorMode (uMode=0x0) returned 0x1 [0055.390] SetErrorMode (uMode=0x1) returned 0x0 [0055.390] SetErrorMode (uMode=0x0) returned 0x1 [0055.390] SetErrorMode (uMode=0x1) returned 0x0 [0055.391] SetErrorMode (uMode=0x0) returned 0x1 [0055.391] SetErrorMode (uMode=0x1) returned 0x0 [0055.391] SetErrorMode (uMode=0x0) returned 0x1 [0055.391] SetErrorMode (uMode=0x1) returned 0x0 [0055.392] SetErrorMode (uMode=0x0) returned 0x1 [0055.392] SetErrorMode (uMode=0x1) returned 0x0 [0055.392] SetErrorMode (uMode=0x0) returned 0x1 [0055.392] SetErrorMode (uMode=0x1) returned 0x0 [0055.393] SetErrorMode (uMode=0x0) returned 0x1 [0055.393] SetErrorMode (uMode=0x1) returned 0x0 [0055.393] SetErrorMode (uMode=0x0) returned 0x1 [0055.393] SetErrorMode (uMode=0x1) returned 0x0 [0055.394] SetErrorMode (uMode=0x0) returned 0x1 [0055.394] SetErrorMode (uMode=0x1) returned 0x0 [0055.394] SetErrorMode (uMode=0x0) returned 0x1 [0055.395] SetErrorMode (uMode=0x1) returned 0x0 [0055.396] SetErrorMode (uMode=0x0) returned 0x1 [0055.396] SetErrorMode (uMode=0x1) returned 0x0 [0055.396] SetErrorMode (uMode=0x0) returned 0x1 [0055.396] SetErrorMode (uMode=0x1) returned 0x0 [0055.397] SetErrorMode (uMode=0x0) returned 0x1 [0055.397] SetErrorMode (uMode=0x1) returned 0x0 [0055.397] SetErrorMode (uMode=0x0) returned 0x1 [0055.397] SetErrorMode (uMode=0x1) returned 0x0 [0055.398] SetErrorMode (uMode=0x0) returned 0x1 [0055.398] SetErrorMode (uMode=0x1) returned 0x0 [0055.398] SetErrorMode (uMode=0x0) returned 0x1 [0055.398] SetErrorMode (uMode=0x1) returned 0x0 [0055.399] SetErrorMode (uMode=0x0) returned 0x1 [0055.399] SetErrorMode (uMode=0x1) returned 0x0 [0055.399] SetErrorMode (uMode=0x0) returned 0x1 [0055.399] SetErrorMode (uMode=0x1) returned 0x0 [0055.399] SetErrorMode (uMode=0x0) returned 0x1 [0055.400] SetErrorMode (uMode=0x1) returned 0x0 [0055.400] SetErrorMode (uMode=0x0) returned 0x1 [0055.400] SetErrorMode (uMode=0x1) returned 0x0 [0055.402] SetErrorMode (uMode=0x0) returned 0x1 [0055.402] SetErrorMode (uMode=0x1) returned 0x0 [0055.402] SetErrorMode (uMode=0x0) returned 0x1 [0055.402] SetErrorMode (uMode=0x1) returned 0x0 [0055.402] SetErrorMode (uMode=0x0) returned 0x1 [0055.403] SetErrorMode (uMode=0x1) returned 0x0 [0055.403] SetErrorMode (uMode=0x0) returned 0x1 [0055.403] SetErrorMode (uMode=0x1) returned 0x0 [0055.403] SetErrorMode (uMode=0x0) returned 0x1 [0055.403] SetErrorMode (uMode=0x1) returned 0x0 [0055.404] SetErrorMode (uMode=0x0) returned 0x1 [0055.404] SetErrorMode (uMode=0x1) returned 0x0 [0055.404] SetErrorMode (uMode=0x0) returned 0x1 [0055.404] SetErrorMode (uMode=0x1) returned 0x0 [0055.404] SetErrorMode (uMode=0x0) returned 0x1 [0055.405] SetErrorMode (uMode=0x1) returned 0x0 [0055.405] SetErrorMode (uMode=0x0) returned 0x1 [0055.405] SetErrorMode (uMode=0x1) returned 0x0 [0055.405] SetErrorMode (uMode=0x0) returned 0x1 [0055.405] SetErrorMode (uMode=0x1) returned 0x0 [0055.406] SetErrorMode (uMode=0x0) returned 0x1 [0055.406] SetErrorMode (uMode=0x1) returned 0x0 [0055.406] SetErrorMode (uMode=0x0) returned 0x1 [0055.406] SetErrorMode (uMode=0x1) returned 0x0 [0055.407] SetErrorMode (uMode=0x0) returned 0x1 [0055.407] SetErrorMode (uMode=0x1) returned 0x0 [0055.407] SetErrorMode (uMode=0x0) returned 0x1 [0055.408] SetErrorMode (uMode=0x1) returned 0x0 [0055.408] SetErrorMode (uMode=0x0) returned 0x1 [0055.408] SetErrorMode (uMode=0x1) returned 0x0 [0055.408] SetErrorMode (uMode=0x0) returned 0x1 [0055.408] SetErrorMode (uMode=0x1) returned 0x0 [0055.409] SetErrorMode (uMode=0x0) returned 0x1 [0055.409] SetErrorMode (uMode=0x1) returned 0x0 [0055.409] SetErrorMode (uMode=0x0) returned 0x1 [0055.409] SetErrorMode (uMode=0x1) returned 0x0 [0055.410] SetErrorMode (uMode=0x0) returned 0x1 [0055.410] SetErrorMode (uMode=0x1) returned 0x0 [0055.410] SetErrorMode (uMode=0x0) returned 0x1 [0055.410] SetErrorMode (uMode=0x1) returned 0x0 [0055.411] SetErrorMode (uMode=0x0) returned 0x1 [0055.411] SetErrorMode (uMode=0x1) returned 0x0 [0055.411] SetErrorMode (uMode=0x0) returned 0x1 [0055.411] SetErrorMode (uMode=0x1) returned 0x0 [0055.412] SetErrorMode (uMode=0x0) returned 0x1 [0055.412] SetErrorMode (uMode=0x1) returned 0x0 [0055.412] SetErrorMode (uMode=0x0) returned 0x1 [0055.412] SetErrorMode (uMode=0x1) returned 0x0 [0055.413] SetErrorMode (uMode=0x0) returned 0x1 [0055.413] SetErrorMode (uMode=0x1) returned 0x0 [0055.413] SetErrorMode (uMode=0x0) returned 0x1 [0055.413] SetErrorMode (uMode=0x1) returned 0x0 [0055.414] SetErrorMode (uMode=0x0) returned 0x1 [0055.418] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng", lpFilePart=0x0) returned 0x4b [0055.418] SetErrorMode (uMode=0x1) returned 0x0 [0055.418] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.418] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.418] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.418] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.418] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.418] SetErrorMode (uMode=0x0) returned 0x1 [0055.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats", lpFilePart=0x0) returned 0x52 [0055.419] SetErrorMode (uMode=0x1) returned 0x0 [0055.419] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.419] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.420] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.420] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.420] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.420] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.420] SetErrorMode (uMode=0x0) returned 0x1 [0055.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats", lpFilePart=0x0) returned 0x52 [0055.420] SetErrorMode (uMode=0x1) returned 0x0 [0055.420] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.421] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.421] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.421] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.421] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.421] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.421] SetErrorMode (uMode=0x0) returned 0x1 [0055.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images", lpFilePart=0x0) returned 0x4c [0055.421] SetErrorMode (uMode=0x1) returned 0x0 [0055.422] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0055.424] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.424] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.424] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.425] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.425] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.425] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.425] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.425] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.425] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.425] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.425] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.425] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.425] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.426] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.426] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.426] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.426] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.426] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.426] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.426] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.426] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.426] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.427] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.427] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.427] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.427] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.427] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.427] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.427] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.427] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.427] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.427] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.428] SetErrorMode (uMode=0x0) returned 0x1 [0055.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images", lpFilePart=0x0) returned 0x4c [0055.429] SetErrorMode (uMode=0x1) returned 0x0 [0055.429] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.429] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.431] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.432] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.432] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.432] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.432] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.432] SetErrorMode (uMode=0x0) returned 0x1 [0055.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is", lpFilePart=0x0) returned 0x48 [0055.433] SetErrorMode (uMode=0x1) returned 0x0 [0055.433] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0055.433] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.433] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.433] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.433] SetErrorMode (uMode=0x0) returned 0x1 [0055.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is", lpFilePart=0x0) returned 0x48 [0055.434] SetErrorMode (uMode=0x1) returned 0x0 [0055.434] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4310 [0055.434] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.434] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.434] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.434] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0055.434] SetErrorMode (uMode=0x0) returned 0x1 [0055.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it", lpFilePart=0x0) returned 0x48 [0055.434] SetErrorMode (uMode=0x1) returned 0x0 [0055.434] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0055.435] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.435] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.435] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.435] SetErrorMode (uMode=0x0) returned 0x1 [0055.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it", lpFilePart=0x0) returned 0x48 [0055.435] SetErrorMode (uMode=0x1) returned 0x0 [0055.435] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0055.436] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.436] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.436] SetErrorMode (uMode=0x0) returned 0x1 [0055.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja", lpFilePart=0x0) returned 0x48 [0055.436] SetErrorMode (uMode=0x1) returned 0x0 [0055.436] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0055.436] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.436] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.437] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.437] SetErrorMode (uMode=0x0) returned 0x1 [0055.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja", lpFilePart=0x0) returned 0x48 [0055.437] SetErrorMode (uMode=0x1) returned 0x0 [0055.437] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.437] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.437] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.437] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.437] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.438] SetErrorMode (uMode=0x0) returned 0x1 [0055.438] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka", lpFilePart=0x0) returned 0x48 [0055.438] SetErrorMode (uMode=0x1) returned 0x0 [0055.438] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.439] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.439] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.439] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.439] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.439] SetErrorMode (uMode=0x0) returned 0x1 [0055.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka", lpFilePart=0x0) returned 0x48 [0055.439] SetErrorMode (uMode=0x1) returned 0x0 [0055.439] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0055.440] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.440] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.440] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.440] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.440] SetErrorMode (uMode=0x0) returned 0x1 [0055.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk", lpFilePart=0x0) returned 0x48 [0055.440] SetErrorMode (uMode=0x1) returned 0x0 [0055.440] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4e50 [0055.440] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.441] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.441] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.441] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0055.441] SetErrorMode (uMode=0x0) returned 0x1 [0055.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk", lpFilePart=0x0) returned 0x48 [0055.441] SetErrorMode (uMode=0x1) returned 0x0 [0055.441] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0055.441] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.441] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.442] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.442] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.442] SetErrorMode (uMode=0x0) returned 0x1 [0055.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh", lpFilePart=0x0) returned 0x4b [0055.442] SetErrorMode (uMode=0x1) returned 0x0 [0055.442] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0055.442] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.442] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.442] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.442] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.442] SetErrorMode (uMode=0x0) returned 0x1 [0055.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh", lpFilePart=0x0) returned 0x4b [0055.443] SetErrorMode (uMode=0x1) returned 0x0 [0055.443] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.443] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.443] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.443] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.443] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.443] SetErrorMode (uMode=0x0) returned 0x1 [0055.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn", lpFilePart=0x0) returned 0x48 [0055.444] SetErrorMode (uMode=0x1) returned 0x0 [0055.444] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.444] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.444] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.444] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.444] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.444] SetErrorMode (uMode=0x0) returned 0x1 [0055.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn", lpFilePart=0x0) returned 0x48 [0055.445] SetErrorMode (uMode=0x1) returned 0x0 [0055.445] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0055.445] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.445] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.445] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.445] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.445] SetErrorMode (uMode=0x0) returned 0x1 [0055.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko", lpFilePart=0x0) returned 0x48 [0055.445] SetErrorMode (uMode=0x1) returned 0x0 [0055.445] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.446] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.446] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.446] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.446] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.446] SetErrorMode (uMode=0x0) returned 0x1 [0055.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko", lpFilePart=0x0) returned 0x48 [0055.446] SetErrorMode (uMode=0x1) returned 0x0 [0055.446] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.447] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.447] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.447] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.447] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.447] SetErrorMode (uMode=0x0) returned 0x1 [0055.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok", lpFilePart=0x0) returned 0x49 [0055.447] SetErrorMode (uMode=0x1) returned 0x0 [0055.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0055.447] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.447] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.447] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.448] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.448] SetErrorMode (uMode=0x0) returned 0x1 [0055.448] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok", lpFilePart=0x0) returned 0x49 [0055.448] SetErrorMode (uMode=0x1) returned 0x0 [0055.448] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.448] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.448] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.448] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.448] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.449] SetErrorMode (uMode=0x0) returned 0x1 [0055.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab", lpFilePart=0x0) returned 0x4d [0055.449] SetErrorMode (uMode=0x1) returned 0x0 [0055.449] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.449] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.449] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.449] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.449] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.449] SetErrorMode (uMode=0x0) returned 0x1 [0055.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab", lpFilePart=0x0) returned 0x4d [0055.450] SetErrorMode (uMode=0x1) returned 0x0 [0055.450] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.450] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.450] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.450] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.450] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.450] SetErrorMode (uMode=0x0) returned 0x1 [0055.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky", lpFilePart=0x0) returned 0x48 [0055.451] SetErrorMode (uMode=0x1) returned 0x0 [0055.451] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.451] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.451] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.451] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.451] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.451] SetErrorMode (uMode=0x0) returned 0x1 [0055.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky", lpFilePart=0x0) returned 0x48 [0055.451] SetErrorMode (uMode=0x1) returned 0x0 [0055.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0055.452] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.452] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.452] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.452] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.452] SetErrorMode (uMode=0x0) returned 0x1 [0055.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu", lpFilePart=0x0) returned 0x4b [0055.452] SetErrorMode (uMode=0x1) returned 0x0 [0055.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.453] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.453] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.453] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.453] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.453] SetErrorMode (uMode=0x0) returned 0x1 [0055.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu", lpFilePart=0x0) returned 0x4b [0055.453] SetErrorMode (uMode=0x1) returned 0x0 [0055.453] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.453] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.454] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.454] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.454] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.454] SetErrorMode (uMode=0x0) returned 0x1 [0055.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt", lpFilePart=0x0) returned 0x48 [0055.454] SetErrorMode (uMode=0x1) returned 0x0 [0055.454] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.455] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.455] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.455] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.455] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.455] SetErrorMode (uMode=0x0) returned 0x1 [0055.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt", lpFilePart=0x0) returned 0x48 [0055.455] SetErrorMode (uMode=0x1) returned 0x0 [0055.455] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.456] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.456] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.456] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.456] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.456] SetErrorMode (uMode=0x0) returned 0x1 [0055.456] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv", lpFilePart=0x0) returned 0x48 [0055.456] SetErrorMode (uMode=0x1) returned 0x0 [0055.456] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0055.456] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.456] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.456] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.457] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.457] SetErrorMode (uMode=0x0) returned 0x1 [0055.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv", lpFilePart=0x0) returned 0x48 [0055.457] SetErrorMode (uMode=0x1) returned 0x0 [0055.457] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.457] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.457] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.457] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.457] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.457] SetErrorMode (uMode=0x0) returned 0x1 [0055.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz", lpFilePart=0x0) returned 0x4b [0055.458] SetErrorMode (uMode=0x1) returned 0x0 [0055.458] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.458] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.458] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.458] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.458] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.458] SetErrorMode (uMode=0x0) returned 0x1 [0055.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz", lpFilePart=0x0) returned 0x4b [0055.458] SetErrorMode (uMode=0x1) returned 0x0 [0055.458] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.459] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.459] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.459] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.459] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.459] SetErrorMode (uMode=0x0) returned 0x1 [0055.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk", lpFilePart=0x0) returned 0x48 [0055.459] SetErrorMode (uMode=0x1) returned 0x0 [0055.459] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.459] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.459] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.459] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.459] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.460] SetErrorMode (uMode=0x0) returned 0x1 [0055.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk", lpFilePart=0x0) returned 0x48 [0055.460] SetErrorMode (uMode=0x1) returned 0x0 [0055.460] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.460] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.460] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.460] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.460] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.460] SetErrorMode (uMode=0x0) returned 0x1 [0055.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in", lpFilePart=0x0) returned 0x4b [0055.461] SetErrorMode (uMode=0x1) returned 0x0 [0055.461] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.461] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.461] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.461] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.461] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.461] SetErrorMode (uMode=0x0) returned 0x1 [0055.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in", lpFilePart=0x0) returned 0x4b [0055.461] SetErrorMode (uMode=0x1) returned 0x0 [0055.461] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.461] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.462] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.462] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.462] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.462] SetErrorMode (uMode=0x0) returned 0x1 [0055.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn", lpFilePart=0x0) returned 0x48 [0055.462] SetErrorMode (uMode=0x1) returned 0x0 [0055.462] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.462] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.462] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.462] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.462] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.462] SetErrorMode (uMode=0x0) returned 0x1 [0055.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn", lpFilePart=0x0) returned 0x48 [0055.462] SetErrorMode (uMode=0x1) returned 0x0 [0055.462] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.463] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.463] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.463] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.463] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.463] SetErrorMode (uMode=0x0) returned 0x1 [0055.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr", lpFilePart=0x0) returned 0x48 [0055.463] SetErrorMode (uMode=0x1) returned 0x0 [0055.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4310 [0055.463] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.464] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.464] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.464] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0055.464] SetErrorMode (uMode=0x0) returned 0x1 [0055.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr", lpFilePart=0x0) returned 0x48 [0055.464] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.464] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.464] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.464] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.464] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.464] SetErrorMode (uMode=0x0) returned 0x1 [0055.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms", lpFilePart=0x0) returned 0x48 [0055.464] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.465] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.465] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.465] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.465] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.465] SetErrorMode (uMode=0x0) returned 0x1 [0055.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms", lpFilePart=0x0) returned 0x48 [0055.465] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4e50 [0055.465] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.466] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0055.466] SetErrorMode (uMode=0x0) returned 0x1 [0055.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt", lpFilePart=0x0) returned 0x4b [0055.466] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.466] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.466] SetErrorMode (uMode=0x0) returned 0x1 [0055.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt", lpFilePart=0x0) returned 0x4b [0055.466] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.467] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.467] SetErrorMode (uMode=0x0) returned 0x1 [0055.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no", lpFilePart=0x0) returned 0x4b [0055.467] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.467] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.467] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.467] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.467] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.468] SetErrorMode (uMode=0x0) returned 0x1 [0055.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no", lpFilePart=0x0) returned 0x4b [0055.468] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.468] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.468] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.468] SetErrorMode (uMode=0x0) returned 0x1 [0055.468] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np", lpFilePart=0x0) returned 0x4b [0055.468] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.468] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.468] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.468] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.468] SetErrorMode (uMode=0x0) returned 0x1 [0055.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np", lpFilePart=0x0) returned 0x4b [0055.469] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4310 [0055.469] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.469] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.469] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.469] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0055.469] SetErrorMode (uMode=0x0) returned 0x1 [0055.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl", lpFilePart=0x0) returned 0x48 [0055.469] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.469] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.470] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.470] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.470] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.470] SetErrorMode (uMode=0x0) returned 0x1 [0055.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl", lpFilePart=0x0) returned 0x48 [0055.470] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.470] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.470] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.470] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.470] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.470] SetErrorMode (uMode=0x0) returned 0x1 [0055.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no", lpFilePart=0x0) returned 0x4b [0055.470] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.471] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.471] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.471] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.471] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.472] SetErrorMode (uMode=0x0) returned 0x1 [0055.472] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no", lpFilePart=0x0) returned 0x4b [0055.472] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.472] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.472] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.472] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.472] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.473] SetErrorMode (uMode=0x0) returned 0x1 [0055.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za", lpFilePart=0x0) returned 0x4c [0055.473] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0055.473] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.473] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.473] SetErrorMode (uMode=0x0) returned 0x1 [0055.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za", lpFilePart=0x0) returned 0x4c [0055.473] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.473] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.473] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.473] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.473] SetErrorMode (uMode=0x0) returned 0x1 [0055.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in", lpFilePart=0x0) returned 0x4b [0055.474] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.474] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.474] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.474] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.474] SetErrorMode (uMode=0x0) returned 0x1 [0055.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in", lpFilePart=0x0) returned 0x4b [0055.475] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.475] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.475] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.475] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.475] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.475] SetErrorMode (uMode=0x0) returned 0x1 [0055.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa", lpFilePart=0x0) returned 0x48 [0055.475] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4310 [0055.475] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.475] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.475] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.475] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0055.475] SetErrorMode (uMode=0x0) returned 0x1 [0055.475] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa", lpFilePart=0x0) returned 0x48 [0055.475] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0055.476] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.476] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.476] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.476] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0055.476] SetErrorMode (uMode=0x0) returned 0x1 [0055.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab", lpFilePart=0x0) returned 0x4d [0055.476] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.479] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0055.479] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.479] SetErrorMode (uMode=0x0) returned 0x1 [0055.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab", lpFilePart=0x0) returned 0x4d [0055.479] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0055.479] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0055.479] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0055.479] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0055.479] SetErrorMode (uMode=0x0) returned 0x1 [0055.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl", lpFilePart=0x0) returned 0x48 [0055.480] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0055.480] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0055.480] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0056.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", lpFilePart=0x0) returned 0x4b [0056.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE", lpFilePart=0x0) returned 0x46 [0056.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache", lpFilePart=0x0) returned 0x3e [0056.409] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0057.491] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b41f0 [0058.362] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0058.362] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.362] SetErrorMode (uMode=0x0) returned 0x1 [0058.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache", lpFilePart=0x0) returned 0x7a [0058.362] SetErrorMode (uMode=0x1) returned 0x0 [0058.362] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b41f0 [0058.363] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.363] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0058.363] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0058.363] SetErrorMode (uMode=0x0) returned 0x1 [0058.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x6e [0058.363] SetErrorMode (uMode=0x1) returned 0x0 [0058.364] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.364] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.364] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0058.364] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.364] SetErrorMode (uMode=0x0) returned 0x1 [0058.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x6e [0058.365] SetErrorMode (uMode=0x1) returned 0x0 [0058.365] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.365] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.365] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.365] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0058.365] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.365] SetErrorMode (uMode=0x0) returned 0x1 [0058.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x5adf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x76 [0058.366] SetErrorMode (uMode=0x1) returned 0x0 [0058.366] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4d90 [0058.366] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.366] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.366] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.366] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 0 [0058.366] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.367] SetErrorMode (uMode=0x0) returned 0x1 [0058.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x5adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x76 [0058.367] SetErrorMode (uMode=0x1) returned 0x0 [0058.367] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b41f0 [0058.367] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.367] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.368] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 0 [0058.368] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0058.368] SetErrorMode (uMode=0x0) returned 0x1 [0058.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache", nBufferLength=0x105, lpBuffer=0x5ade80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache", lpFilePart=0x0) returned 0x7f [0058.368] SetErrorMode (uMode=0x1) returned 0x0 [0058.368] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0058.369] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0058.369] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 0 [0058.369] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.369] SetErrorMode (uMode=0x0) returned 0x1 [0058.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache", nBufferLength=0x105, lpBuffer=0x5ade50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache", lpFilePart=0x0) returned 0x7f [0058.370] SetErrorMode (uMode=0x1) returned 0x0 [0058.370] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4e50 [0058.370] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0058.370] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0058.370] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0058.370] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 0 [0058.370] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0058.371] SetErrorMode (uMode=0x0) returned 0x1 [0058.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8", lpFilePart=0x0) returned 0x88 [0058.371] SetErrorMode (uMode=0x1) returned 0x0 [0058.371] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0058.371] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0058.371] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0058.372] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0058.372] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.372] SetErrorMode (uMode=0x0) returned 0x1 [0058.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8", lpFilePart=0x0) returned 0x88 [0058.372] SetErrorMode (uMode=0x1) returned 0x0 [0058.372] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0058.373] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0058.373] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0058.373] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 0 [0058.373] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.373] SetErrorMode (uMode=0x0) returned 0x1 [0058.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x5ade80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList", lpFilePart=0x0) returned 0x83 [0058.373] SetErrorMode (uMode=0x1) returned 0x0 [0058.374] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0058.374] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0058.374] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 0 [0058.374] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.374] SetErrorMode (uMode=0x0) returned 0x1 [0058.374] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList", nBufferLength=0x105, lpBuffer=0x5ade50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList", lpFilePart=0x0) returned 0x83 [0058.375] SetErrorMode (uMode=0x1) returned 0x0 [0058.375] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\EmieSiteList\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0058.375] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0058.375] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 0 [0058.375] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.375] SetErrorMode (uMode=0x0) returned 0x1 [0058.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp", lpFilePart=0x0) returned 0x60 [0058.376] SetErrorMode (uMode=0x1) returned 0x0 [0058.376] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.376] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.376] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 0 [0058.376] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.376] SetErrorMode (uMode=0x0) returned 0x1 [0058.376] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp", lpFilePart=0x0) returned 0x60 [0058.377] SetErrorMode (uMode=0x1) returned 0x0 [0058.377] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Temp\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.377] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.377] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 0 [0058.377] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.377] SetErrorMode (uMode=0x0) returned 0x1 [0058.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState", lpFilePart=0x0) returned 0x65 [0058.377] SetErrorMode (uMode=0x1) returned 0x0 [0058.378] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b41f0 [0058.388] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.388] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 0 [0058.389] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0058.389] SetErrorMode (uMode=0x0) returned 0x1 [0058.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState", lpFilePart=0x0) returned 0x65 [0058.389] SetErrorMode (uMode=0x1) returned 0x0 [0058.389] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\TempState\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.389] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.390] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 0 [0058.390] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.390] SetErrorMode (uMode=0x0) returned 0x1 [0058.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", nBufferLength=0x105, lpBuffer=0x5ae100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", lpFilePart=0x0) returned 0x5b [0058.390] SetErrorMode (uMode=0x1) returned 0x0 [0058.390] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0058.390] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0058.391] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0058.391] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0058.391] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0058.391] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0058.391] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0058.391] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0058.391] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0058.391] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 1 [0058.391] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae2b0 | out: lpFindFileData=0x5ae2b0) returned 0 [0058.392] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0058.392] SetErrorMode (uMode=0x0) returned 0x1 [0058.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", nBufferLength=0x105, lpBuffer=0x5ae0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002", lpFilePart=0x0) returned 0x5b [0058.392] SetErrorMode (uMode=0x1) returned 0x0 [0058.392] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.392] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0058.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0058.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0058.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0058.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0058.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0058.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0058.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0058.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 1 [0058.393] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae280 | out: lpFindFileData=0x5ae280) returned 0 [0058.393] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.393] SetErrorMode (uMode=0x0) returned 0x1 [0058.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache", lpFilePart=0x0) returned 0x65 [0058.394] SetErrorMode (uMode=0x1) returned 0x0 [0058.394] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.395] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.395] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 0 [0058.395] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.396] SetErrorMode (uMode=0x0) returned 0x1 [0058.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache", lpFilePart=0x0) returned 0x65 [0058.396] SetErrorMode (uMode=0x1) returned 0x0 [0058.396] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCache\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b41f0 [0058.396] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.396] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 0 [0058.396] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0058.397] SetErrorMode (uMode=0x0) returned 0x1 [0058.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies", lpFilePart=0x0) returned 0x67 [0058.397] SetErrorMode (uMode=0x1) returned 0x0 [0058.397] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b41f0 [0058.397] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.397] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 0 [0058.397] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0058.398] SetErrorMode (uMode=0x0) returned 0x1 [0058.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies", lpFilePart=0x0) returned 0x67 [0058.398] SetErrorMode (uMode=0x1) returned 0x0 [0058.398] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetCookies\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.398] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.398] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 0 [0058.398] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.398] SetErrorMode (uMode=0x0) returned 0x1 [0058.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory", lpFilePart=0x0) returned 0x67 [0058.399] SetErrorMode (uMode=0x1) returned 0x0 [0058.399] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.399] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.399] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 0 [0058.399] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.399] SetErrorMode (uMode=0x0) returned 0x1 [0058.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory", lpFilePart=0x0) returned 0x67 [0058.400] SetErrorMode (uMode=0x1) returned 0x0 [0058.400] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\INetHistory\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b41f0 [0058.400] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.400] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 0 [0058.400] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0058.400] SetErrorMode (uMode=0x0) returned 0x1 [0058.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState", lpFilePart=0x0) returned 0x66 [0058.400] SetErrorMode (uMode=0x1) returned 0x0 [0058.401] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.401] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.401] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 0 [0058.401] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.401] SetErrorMode (uMode=0x0) returned 0x1 [0058.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState", lpFilePart=0x0) returned 0x66 [0058.401] SetErrorMode (uMode=0x1) returned 0x0 [0058.401] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\LocalState\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.402] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.402] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 0 [0058.402] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.402] SetErrorMode (uMode=0x0) returned 0x1 [0058.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft", lpFilePart=0x0) returned 0x65 [0058.402] SetErrorMode (uMode=0x1) returned 0x0 [0058.402] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.404] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.404] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.404] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.404] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 0 [0058.404] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.404] SetErrorMode (uMode=0x0) returned 0x1 [0058.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft", lpFilePart=0x0) returned 0x65 [0058.405] SetErrorMode (uMode=0x1) returned 0x0 [0058.405] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b41f0 [0058.405] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.405] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.405] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.405] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 0 [0058.405] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0058.405] SetErrorMode (uMode=0x0) returned 0x1 [0058.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x76 [0058.406] SetErrorMode (uMode=0x1) returned 0x0 [0058.406] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.406] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.406] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.406] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.406] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0058.406] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.406] SetErrorMode (uMode=0x0) returned 0x1 [0058.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x76 [0058.407] SetErrorMode (uMode=0x1) returned 0x0 [0058.407] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.407] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.407] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.407] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.407] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0058.407] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.407] SetErrorMode (uMode=0x0) returned 0x1 [0058.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x5adf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x7e [0058.408] SetErrorMode (uMode=0x1) returned 0x0 [0058.408] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4d90 [0058.420] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.421] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.421] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.421] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.421] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.421] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.421] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.421] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 0 [0058.421] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.422] SetErrorMode (uMode=0x0) returned 0x1 [0058.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x5adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x7e [0058.423] SetErrorMode (uMode=0x1) returned 0x0 [0058.423] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.423] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.424] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.424] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.424] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.424] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.424] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.424] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.424] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 0 [0058.424] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.425] SetErrorMode (uMode=0x0) returned 0x1 [0058.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x5adf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x7f [0058.425] SetErrorMode (uMode=0x1) returned 0x0 [0058.425] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4d90 [0058.427] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.427] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.427] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.427] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.427] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.427] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.427] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.427] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 0 [0058.428] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.428] SetErrorMode (uMode=0x0) returned 0x1 [0058.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x5adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x7f [0058.429] SetErrorMode (uMode=0x1) returned 0x0 [0058.429] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.430] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 0 [0058.430] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.431] SetErrorMode (uMode=0x0) returned 0x1 [0058.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x78 [0058.431] SetErrorMode (uMode=0x1) returned 0x0 [0058.431] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.432] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.432] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.432] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0058.432] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.433] SetErrorMode (uMode=0x0) returned 0x1 [0058.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x78 [0058.433] SetErrorMode (uMode=0x1) returned 0x0 [0058.433] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.433] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.433] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.433] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0058.433] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.434] SetErrorMode (uMode=0x0) returned 0x1 [0058.434] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x5adf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x7b [0058.434] SetErrorMode (uMode=0x1) returned 0x0 [0058.434] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4d90 [0058.435] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.435] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.435] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.435] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.435] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 0 [0058.435] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.435] SetErrorMode (uMode=0x0) returned 0x1 [0058.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x5adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x7b [0058.436] SetErrorMode (uMode=0x1) returned 0x0 [0058.436] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.436] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.436] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.436] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.436] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.436] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 0 [0058.436] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.436] SetErrorMode (uMode=0x0) returned 0x1 [0058.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x5ade80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x88 [0058.437] SetErrorMode (uMode=0x1) returned 0x0 [0058.437] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0058.437] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0058.437] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 0 [0058.437] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.439] SetErrorMode (uMode=0x0) returned 0x1 [0058.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x5ade50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x88 [0058.439] SetErrorMode (uMode=0x1) returned 0x0 [0058.439] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4310 [0058.440] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0058.440] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 0 [0058.441] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0058.441] SetErrorMode (uMode=0x0) returned 0x1 [0058.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x5ade80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x80 [0058.441] SetErrorMode (uMode=0x1) returned 0x0 [0058.441] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0058.442] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0058.442] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 0 [0058.442] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.442] SetErrorMode (uMode=0x0) returned 0x1 [0058.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x5ade50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x80 [0058.442] SetErrorMode (uMode=0x1) returned 0x0 [0058.442] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0058.443] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0058.443] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 0 [0058.443] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.443] SetErrorMode (uMode=0x0) returned 0x1 [0058.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x5ade80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x80 [0058.443] SetErrorMode (uMode=0x1) returned 0x0 [0058.443] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4310 [0058.443] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0058.443] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 0 [0058.443] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0058.443] SetErrorMode (uMode=0x0) returned 0x1 [0058.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x5ade50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x80 [0058.444] SetErrorMode (uMode=0x1) returned 0x0 [0058.444] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0058.444] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0058.444] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 0 [0058.444] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.444] SetErrorMode (uMode=0x0) returned 0x1 [0058.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x5ae060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge", lpFilePart=0x0) returned 0x69 [0058.444] SetErrorMode (uMode=0x1) returned 0x0 [0058.445] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.445] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.445] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.445] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.445] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.445] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.445] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.445] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.445] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 1 [0058.445] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae210 | out: lpFindFileData=0x5ae210) returned 0 [0058.445] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.445] SetErrorMode (uMode=0x0) returned 0x1 [0058.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x5ae030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge", lpFilePart=0x0) returned 0x69 [0058.445] SetErrorMode (uMode=0x1) returned 0x0 [0058.445] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b41f0 [0058.446] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.446] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.446] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.446] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.446] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.446] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.446] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.446] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 1 [0058.446] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae1e0 | out: lpFindFileData=0x5ae1e0) returned 0 [0058.446] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0058.446] SetErrorMode (uMode=0x0) returned 0x1 [0058.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache", lpFilePart=0x0) returned 0x6f [0058.446] SetErrorMode (uMode=0x1) returned 0x0 [0058.446] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.446] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.447] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.447] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0058.447] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.447] SetErrorMode (uMode=0x0) returned 0x1 [0058.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache", lpFilePart=0x0) returned 0x6f [0058.447] SetErrorMode (uMode=0x1) returned 0x0 [0058.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.447] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.447] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.447] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0058.447] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.447] SetErrorMode (uMode=0x0) returned 0x1 [0058.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies", lpFilePart=0x0) returned 0x71 [0058.447] SetErrorMode (uMode=0x1) returned 0x0 [0058.447] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.448] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.448] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.448] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.448] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.448] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.448] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.449] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.449] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.449] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.449] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.449] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0058.449] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.449] SetErrorMode (uMode=0x0) returned 0x1 [0058.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies", lpFilePart=0x0) returned 0x71 [0058.450] SetErrorMode (uMode=0x1) returned 0x0 [0058.450] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.450] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.450] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.450] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.450] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.451] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.451] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.451] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.451] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.451] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.451] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.451] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0058.451] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.451] SetErrorMode (uMode=0x0) returned 0x1 [0058.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History", lpFilePart=0x0) returned 0x71 [0058.452] SetErrorMode (uMode=0x1) returned 0x0 [0058.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.452] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.452] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.452] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0058.452] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.452] SetErrorMode (uMode=0x0) returned 0x1 [0058.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History", lpFilePart=0x0) returned 0x71 [0058.452] SetErrorMode (uMode=0x1) returned 0x0 [0058.452] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.452] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.452] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.453] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0058.453] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.453] SetErrorMode (uMode=0x0) returned 0x1 [0058.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache", lpFilePart=0x0) returned 0x77 [0058.453] SetErrorMode (uMode=0x1) returned 0x0 [0058.453] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.461] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.461] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.461] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0058.461] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.461] SetErrorMode (uMode=0x0) returned 0x1 [0058.461] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache", lpFilePart=0x0) returned 0x77 [0058.461] SetErrorMode (uMode=0x1) returned 0x0 [0058.461] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.462] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.462] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.462] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0058.462] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.462] SetErrorMode (uMode=0x0) returned 0x1 [0058.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache", lpFilePart=0x0) returned 0x79 [0058.462] SetErrorMode (uMode=0x1) returned 0x0 [0058.462] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.462] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.462] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.462] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0058.462] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.462] SetErrorMode (uMode=0x0) returned 0x1 [0058.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache", lpFilePart=0x0) returned 0x79 [0058.463] SetErrorMode (uMode=0x1) returned 0x0 [0058.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.463] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.463] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.463] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0058.463] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.463] SetErrorMode (uMode=0x0) returned 0x1 [0058.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x5adfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x6e [0058.463] SetErrorMode (uMode=0x1) returned 0x0 [0058.463] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.463] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.463] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 1 [0058.464] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae170 | out: lpFindFileData=0x5ae170) returned 0 [0058.464] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.464] SetErrorMode (uMode=0x0) returned 0x1 [0058.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x5adf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x6e [0058.464] SetErrorMode (uMode=0x1) returned 0x0 [0058.464] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.464] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.464] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 1 [0058.464] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae140 | out: lpFindFileData=0x5ae140) returned 0 [0058.464] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.464] SetErrorMode (uMode=0x0) returned 0x1 [0058.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x5adf20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x76 [0058.464] SetErrorMode (uMode=0x1) returned 0x0 [0058.464] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b41f0 [0058.465] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.465] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.465] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 1 [0058.465] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae0d0 | out: lpFindFileData=0x5ae0d0) returned 0 [0058.465] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0058.465] SetErrorMode (uMode=0x0) returned 0x1 [0058.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x5adef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x76 [0058.465] SetErrorMode (uMode=0x1) returned 0x0 [0058.465] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.465] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.465] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.465] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 1 [0058.465] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae0a0 | out: lpFindFileData=0x5ae0a0) returned 0 [0058.465] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.465] SetErrorMode (uMode=0x0) returned 0x1 [0058.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache", nBufferLength=0x105, lpBuffer=0x5ade80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache", lpFilePart=0x0) returned 0x7f [0058.466] SetErrorMode (uMode=0x1) returned 0x0 [0058.466] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0058.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0058.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0058.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 1 [0058.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae030 | out: lpFindFileData=0x5ae030) returned 0 [0058.466] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.466] SetErrorMode (uMode=0x0) returned 0x1 [0058.466] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache", nBufferLength=0x105, lpBuffer=0x5ade50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache", lpFilePart=0x0) returned 0x7f [0058.466] SetErrorMode (uMode=0x1) returned 0x0 [0058.466] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0058.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0058.466] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0058.467] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 1 [0058.467] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae000 | out: lpFindFileData=0x5ae000) returned 0 [0058.467] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.467] SetErrorMode (uMode=0x0) returned 0x1 [0058.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO", nBufferLength=0x105, lpBuffer=0x5adde0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO", lpFilePart=0x0) returned 0x88 [0058.467] SetErrorMode (uMode=0x1) returned 0x0 [0058.467] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0058.467] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0058.467] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0058.467] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 1 [0058.467] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5adf90 | out: lpFindFileData=0x5adf90) returned 0 [0058.467] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0058.467] SetErrorMode (uMode=0x0) returned 0x1 [0058.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO", nBufferLength=0x105, lpBuffer=0x5addb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO", lpFilePart=0x0) returned 0x88 [0058.468] SetErrorMode (uMode=0x1) returned 0x0 [0058.468] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4310 [0058.468] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0058.468] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0058.468] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5adf60 | out: lpFindFileData=0x5adf60) returned 1 [0058.469] SetErrorMode (uMode=0x0) returned 0x1 [0058.469] SetErrorMode (uMode=0x1) returned 0x0 [0058.469] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\*.*", lpFindFileData=0x5adee0 | out: lpFindFileData=0x5adee0) returned 0x7b41f0 [0058.476] SetErrorMode (uMode=0x0) returned 0x1 [0058.477] SetErrorMode (uMode=0x1) returned 0x0 [0058.477] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\*", lpFindFileData=0x5adeb0 | out: lpFindFileData=0x5adeb0) returned 0x7b4d90 [0058.478] SetErrorMode (uMode=0x0) returned 0x1 [0058.478] SetErrorMode (uMode=0x1) returned 0x0 [0058.478] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4e50 [0058.479] SetErrorMode (uMode=0x0) returned 0x1 [0058.479] SetErrorMode (uMode=0x1) returned 0x0 [0058.479] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0058.479] SetErrorMode (uMode=0x0) returned 0x1 [0058.479] SetErrorMode (uMode=0x1) returned 0x0 [0058.479] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0058.480] SetErrorMode (uMode=0x0) returned 0x1 [0058.480] SetErrorMode (uMode=0x1) returned 0x0 [0058.480] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\03HJF3R5\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0058.481] SetErrorMode (uMode=0x0) returned 0x1 [0058.481] SetErrorMode (uMode=0x1) returned 0x0 [0058.481] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0058.481] SetErrorMode (uMode=0x0) returned 0x1 [0058.481] SetErrorMode (uMode=0x1) returned 0x0 [0058.481] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0058.481] SetErrorMode (uMode=0x0) returned 0x1 [0058.481] SetErrorMode (uMode=0x1) returned 0x0 [0058.482] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b41f0 [0058.482] SetErrorMode (uMode=0x0) returned 0x1 [0058.482] SetErrorMode (uMode=0x1) returned 0x0 [0058.482] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\N6BZW9Z5\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0058.482] SetErrorMode (uMode=0x0) returned 0x1 [0058.482] SetErrorMode (uMode=0x1) returned 0x0 [0058.482] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0058.483] SetErrorMode (uMode=0x0) returned 0x1 [0058.483] SetErrorMode (uMode=0x1) returned 0x0 [0058.483] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0058.483] SetErrorMode (uMode=0x0) returned 0x1 [0058.483] SetErrorMode (uMode=0x1) returned 0x0 [0058.483] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.483] SetErrorMode (uMode=0x0) returned 0x1 [0058.483] SetErrorMode (uMode=0x1) returned 0x0 [0058.484] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Temp\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.484] SetErrorMode (uMode=0x0) returned 0x1 [0058.484] SetErrorMode (uMode=0x1) returned 0x0 [0058.484] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.484] SetErrorMode (uMode=0x0) returned 0x1 [0058.484] SetErrorMode (uMode=0x1) returned 0x0 [0058.484] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\TempState\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.485] SetErrorMode (uMode=0x0) returned 0x1 [0058.485] SetErrorMode (uMode=0x1) returned 0x0 [0058.485] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.486] SetErrorMode (uMode=0x0) returned 0x1 [0058.486] SetErrorMode (uMode=0x1) returned 0x0 [0058.486] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.486] SetErrorMode (uMode=0x0) returned 0x1 [0058.486] SetErrorMode (uMode=0x1) returned 0x0 [0058.486] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.487] SetErrorMode (uMode=0x0) returned 0x1 [0058.487] SetErrorMode (uMode=0x1) returned 0x0 [0058.487] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0058.487] SetErrorMode (uMode=0x0) returned 0x1 [0058.487] SetErrorMode (uMode=0x1) returned 0x0 [0058.487] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.487] SetErrorMode (uMode=0x0) returned 0x1 [0058.487] SetErrorMode (uMode=0x1) returned 0x0 [0058.488] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.488] SetErrorMode (uMode=0x0) returned 0x1 [0058.488] SetErrorMode (uMode=0x1) returned 0x0 [0058.488] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.500] SetErrorMode (uMode=0x0) returned 0x1 [0058.500] SetErrorMode (uMode=0x1) returned 0x0 [0058.500] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0058.500] SetErrorMode (uMode=0x0) returned 0x1 [0058.501] SetErrorMode (uMode=0x1) returned 0x0 [0058.501] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.516] SetErrorMode (uMode=0x0) returned 0x1 [0058.516] SetErrorMode (uMode=0x1) returned 0x0 [0058.516] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.516] SetErrorMode (uMode=0x0) returned 0x1 [0058.516] SetErrorMode (uMode=0x1) returned 0x0 [0058.516] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.534] SetErrorMode (uMode=0x0) returned 0x1 [0058.534] SetErrorMode (uMode=0x1) returned 0x0 [0058.534] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.536] SetErrorMode (uMode=0x0) returned 0x1 [0058.536] SetErrorMode (uMode=0x1) returned 0x0 [0058.536] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.538] SetErrorMode (uMode=0x0) returned 0x1 [0058.539] SetErrorMode (uMode=0x1) returned 0x0 [0058.539] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4310 [0058.540] SetErrorMode (uMode=0x0) returned 0x1 [0058.540] SetErrorMode (uMode=0x1) returned 0x0 [0058.540] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.541] SetErrorMode (uMode=0x0) returned 0x1 [0058.541] SetErrorMode (uMode=0x1) returned 0x0 [0058.541] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.541] SetErrorMode (uMode=0x0) returned 0x1 [0058.541] SetErrorMode (uMode=0x1) returned 0x0 [0058.541] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.541] SetErrorMode (uMode=0x0) returned 0x1 [0058.541] SetErrorMode (uMode=0x1) returned 0x0 [0058.542] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4310 [0058.542] SetErrorMode (uMode=0x0) returned 0x1 [0058.542] SetErrorMode (uMode=0x1) returned 0x0 [0058.542] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4310 [0058.542] SetErrorMode (uMode=0x0) returned 0x1 [0058.542] SetErrorMode (uMode=0x1) returned 0x0 [0058.542] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.543] SetErrorMode (uMode=0x0) returned 0x1 [0058.543] SetErrorMode (uMode=0x1) returned 0x0 [0058.543] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b41f0 [0058.543] SetErrorMode (uMode=0x0) returned 0x1 [0058.543] SetErrorMode (uMode=0x1) returned 0x0 [0058.543] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.543] SetErrorMode (uMode=0x0) returned 0x1 [0058.543] SetErrorMode (uMode=0x1) returned 0x0 [0058.544] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4e50 [0058.544] SetErrorMode (uMode=0x0) returned 0x1 [0058.544] SetErrorMode (uMode=0x1) returned 0x0 [0058.544] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.544] SetErrorMode (uMode=0x0) returned 0x1 [0058.544] SetErrorMode (uMode=0x1) returned 0x0 [0058.544] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.545] SetErrorMode (uMode=0x0) returned 0x1 [0058.545] SetErrorMode (uMode=0x1) returned 0x0 [0058.545] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.546] SetErrorMode (uMode=0x0) returned 0x1 [0058.546] SetErrorMode (uMode=0x1) returned 0x0 [0058.546] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4e50 [0058.547] SetErrorMode (uMode=0x0) returned 0x1 [0058.547] SetErrorMode (uMode=0x1) returned 0x0 [0058.547] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.547] SetErrorMode (uMode=0x0) returned 0x1 [0058.547] SetErrorMode (uMode=0x1) returned 0x0 [0058.547] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.547] SetErrorMode (uMode=0x0) returned 0x1 [0058.548] SetErrorMode (uMode=0x1) returned 0x0 [0058.548] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0058.548] SetErrorMode (uMode=0x0) returned 0x1 [0058.548] SetErrorMode (uMode=0x1) returned 0x0 [0058.548] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.549] SetErrorMode (uMode=0x0) returned 0x1 [0058.549] SetErrorMode (uMode=0x1) returned 0x0 [0058.549] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.549] SetErrorMode (uMode=0x0) returned 0x1 [0058.550] SetErrorMode (uMode=0x1) returned 0x0 [0058.550] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.550] SetErrorMode (uMode=0x0) returned 0x1 [0058.550] SetErrorMode (uMode=0x1) returned 0x0 [0058.550] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.550] SetErrorMode (uMode=0x0) returned 0x1 [0058.550] SetErrorMode (uMode=0x1) returned 0x0 [0058.550] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b41f0 [0058.553] SetErrorMode (uMode=0x0) returned 0x1 [0058.553] SetErrorMode (uMode=0x1) returned 0x0 [0058.553] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b41f0 [0058.555] SetErrorMode (uMode=0x0) returned 0x1 [0058.555] SetErrorMode (uMode=0x1) returned 0x0 [0058.555] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.555] SetErrorMode (uMode=0x0) returned 0x1 [0058.555] SetErrorMode (uMode=0x1) returned 0x0 [0058.555] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b41f0 [0058.555] SetErrorMode (uMode=0x0) returned 0x1 [0058.556] SetErrorMode (uMode=0x1) returned 0x0 [0058.556] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.556] SetErrorMode (uMode=0x0) returned 0x1 [0058.556] SetErrorMode (uMode=0x1) returned 0x0 [0058.556] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.556] SetErrorMode (uMode=0x0) returned 0x1 [0058.556] SetErrorMode (uMode=0x1) returned 0x0 [0058.556] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4310 [0058.557] SetErrorMode (uMode=0x0) returned 0x1 [0058.557] SetErrorMode (uMode=0x1) returned 0x0 [0058.557] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.557] SetErrorMode (uMode=0x0) returned 0x1 [0058.557] SetErrorMode (uMode=0x1) returned 0x0 [0058.557] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.558] SetErrorMode (uMode=0x0) returned 0x1 [0058.558] SetErrorMode (uMode=0x1) returned 0x0 [0058.558] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.558] SetErrorMode (uMode=0x0) returned 0x1 [0058.558] SetErrorMode (uMode=0x1) returned 0x0 [0058.558] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b41f0 [0058.558] SetErrorMode (uMode=0x0) returned 0x1 [0058.558] SetErrorMode (uMode=0x1) returned 0x0 [0058.559] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.559] SetErrorMode (uMode=0x0) returned 0x1 [0058.559] SetErrorMode (uMode=0x1) returned 0x0 [0058.559] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b41f0 [0058.559] SetErrorMode (uMode=0x0) returned 0x1 [0058.559] SetErrorMode (uMode=0x1) returned 0x0 [0058.559] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\PlayReady\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4d90 [0058.560] SetErrorMode (uMode=0x0) returned 0x1 [0058.560] SetErrorMode (uMode=0x1) returned 0x0 [0058.560] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.560] SetErrorMode (uMode=0x0) returned 0x1 [0058.560] SetErrorMode (uMode=0x1) returned 0x0 [0058.560] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b41f0 [0058.560] SetErrorMode (uMode=0x0) returned 0x1 [0058.560] SetErrorMode (uMode=0x1) returned 0x0 [0058.561] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.562] SetErrorMode (uMode=0x0) returned 0x1 [0058.562] SetErrorMode (uMode=0x1) returned 0x0 [0058.562] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4d90 [0058.564] SetErrorMode (uMode=0x0) returned 0x1 [0058.564] SetErrorMode (uMode=0x1) returned 0x0 [0058.564] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4d90 [0058.566] SetErrorMode (uMode=0x0) returned 0x1 [0058.566] SetErrorMode (uMode=0x1) returned 0x0 [0058.566] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4310 [0058.566] SetErrorMode (uMode=0x0) returned 0x1 [0058.566] SetErrorMode (uMode=0x1) returned 0x0 [0058.567] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0058.567] SetErrorMode (uMode=0x0) returned 0x1 [0058.567] SetErrorMode (uMode=0x1) returned 0x0 [0058.567] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0058.567] SetErrorMode (uMode=0x0) returned 0x1 [0058.567] SetErrorMode (uMode=0x1) returned 0x0 [0058.567] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0058.568] SetErrorMode (uMode=0x0) returned 0x1 [0058.568] SetErrorMode (uMode=0x1) returned 0x0 [0058.568] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b4d90 [0058.568] SetErrorMode (uMode=0x0) returned 0x1 [0058.568] SetErrorMode (uMode=0x1) returned 0x0 [0058.568] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\*.*", lpFindFileData=0x5adee0 | out: lpFindFileData=0x5adee0) returned 0x7b4d90 [0058.569] SetErrorMode (uMode=0x0) returned 0x1 [0058.569] SetErrorMode (uMode=0x1) returned 0x0 [0058.569] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\*", lpFindFileData=0x5adeb0 | out: lpFindFileData=0x5adeb0) returned 0x7b4d90 [0058.569] SetErrorMode (uMode=0x0) returned 0x1 [0058.569] SetErrorMode (uMode=0x1) returned 0x0 [0058.569] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\*.*", lpFindFileData=0x5ade40 | out: lpFindFileData=0x5ade40) returned 0x7b41f0 [0058.570] SetErrorMode (uMode=0x0) returned 0x1 [0058.570] SetErrorMode (uMode=0x1) returned 0x0 [0058.570] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\*", lpFindFileData=0x5ade10 | out: lpFindFileData=0x5ade10) returned 0x7b4d90 [0058.570] SetErrorMode (uMode=0x0) returned 0x1 [0058.571] SetErrorMode (uMode=0x1) returned 0x0 [0058.571] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\*.*", lpFindFileData=0x5adda0 | out: lpFindFileData=0x5adda0) returned 0x7b41f0 [0058.571] SetErrorMode (uMode=0x0) returned 0x1 [0058.571] SetErrorMode (uMode=0x1) returned 0x0 [0058.571] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\*", lpFindFileData=0x5add70 | out: lpFindFileData=0x5add70) returned 0x7b4d90 [0058.571] SetErrorMode (uMode=0x0) returned 0x1 [0058.571] SetErrorMode (uMode=0x1) returned 0x0 [0058.572] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0058.573] SetErrorMode (uMode=0x0) returned 0x1 [0058.573] SetErrorMode (uMode=0x1) returned 0x0 [0058.573] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b4d90 [0058.574] SetErrorMode (uMode=0x0) returned 0x1 [0058.574] SetErrorMode (uMode=0x1) returned 0x0 [0058.574] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\*.*", lpFindFileData=0x5adf80 | out: lpFindFileData=0x5adf80) returned 0x7b4d90 [0058.574] SetErrorMode (uMode=0x0) returned 0x1 [0058.574] SetErrorMode (uMode=0x1) returned 0x0 [0058.574] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\*", lpFindFileData=0x5adf50 | out: lpFindFileData=0x5adf50) returned 0x7b41f0 [0058.575] SetErrorMode (uMode=0x0) returned 0x1 [0058.575] SetErrorMode (uMode=0x1) returned 0x0 [0058.575] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\*.*", lpFindFileData=0x5adee0 | out: lpFindFileData=0x5adee0) returned 0x7b4d90 [0058.575] SetErrorMode (uMode=0x0) returned 0x1 [0058.575] SetErrorMode (uMode=0x1) returned 0x0 [0058.575] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\*", lpFindFileData=0x5adeb0 | out: lpFindFileData=0x5adeb0) returned 0x7b4d90 [0058.575] SetErrorMode (uMode=0x0) returned 0x1 [0058.576] SetErrorMode (uMode=0x1) returned 0x0 [0058.576] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\*.*", lpFindFileData=0x5ade40 | out: lpFindFileData=0x5ade40) returned 0x7b4e50 [0058.576] SetErrorMode (uMode=0x0) returned 0x1 [0058.576] SetErrorMode (uMode=0x1) returned 0x0 [0058.576] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Indexed\\Data\\nouser1\\120712-0049\\*", lpFindFileData=0x5ade10 | out: lpFindFileData=0x5ade10) returned 0x7b4d90 [0058.576] SetErrorMode (uMode=0x0) returned 0x1 [0058.576] SetErrorMode (uMode=0x1) returned 0x0 [0058.576] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4d90 [0058.577] SetErrorMode (uMode=0x0) returned 0x1 [0058.577] SetErrorMode (uMode=0x1) returned 0x0 [0058.577] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.577] SetErrorMode (uMode=0x0) returned 0x1 [0058.577] SetErrorMode (uMode=0x1) returned 0x0 [0058.577] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4d90 [0058.578] SetErrorMode (uMode=0x0) returned 0x1 [0058.578] SetErrorMode (uMode=0x1) returned 0x0 [0058.578] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.578] SetErrorMode (uMode=0x0) returned 0x1 [0058.578] SetErrorMode (uMode=0x1) returned 0x0 [0058.578] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b41f0 [0058.578] SetErrorMode (uMode=0x0) returned 0x1 [0058.578] SetErrorMode (uMode=0x1) returned 0x0 [0058.579] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.579] SetErrorMode (uMode=0x0) returned 0x1 [0058.579] SetErrorMode (uMode=0x1) returned 0x0 [0058.579] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4d90 [0058.580] SetErrorMode (uMode=0x0) returned 0x1 [0058.580] SetErrorMode (uMode=0x1) returned 0x0 [0058.580] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Favorites\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.580] SetErrorMode (uMode=0x0) returned 0x1 [0058.580] SetErrorMode (uMode=0x1) returned 0x0 [0058.580] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b41f0 [0058.582] SetErrorMode (uMode=0x0) returned 0x1 [0058.582] SetErrorMode (uMode=0x1) returned 0x0 [0058.583] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b41f0 [0058.583] SetErrorMode (uMode=0x0) returned 0x1 [0058.583] SetErrorMode (uMode=0x1) returned 0x0 [0058.583] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0058.583] SetErrorMode (uMode=0x0) returned 0x1 [0058.583] SetErrorMode (uMode=0x1) returned 0x0 [0058.583] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\ImageStore\\6zes7lw\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b41f0 [0058.584] SetErrorMode (uMode=0x0) returned 0x1 [0058.584] SetErrorMode (uMode=0x1) returned 0x0 [0058.584] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\*.*", lpFindFileData=0x5ae0c0 | out: lpFindFileData=0x5ae0c0) returned 0x7b4d90 [0058.585] SetErrorMode (uMode=0x0) returned 0x1 [0058.585] SetErrorMode (uMode=0x1) returned 0x0 [0058.585] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\*", lpFindFileData=0x5ae090 | out: lpFindFileData=0x5ae090) returned 0x7b4d90 [0058.585] SetErrorMode (uMode=0x0) returned 0x1 [0058.585] SetErrorMode (uMode=0x1) returned 0x0 [0058.585] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\*.*", lpFindFileData=0x5ae020 | out: lpFindFileData=0x5ae020) returned 0x7b4d90 [0058.601] SetErrorMode (uMode=0x0) returned 0x1 [0058.601] SetErrorMode (uMode=0x1) returned 0x0 [0058.601] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\*", lpFindFileData=0x5adff0 | out: lpFindFileData=0x5adff0) returned 0x7b41f0 [0058.602] SetErrorMode (uMode=0x0) returned 0x1 [0058.603] SetErrorMode (uMode=0x1) returned 0x0 [0058.603] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.603] SetErrorMode (uMode=0x0) returned 0x1 [0058.603] SetErrorMode (uMode=0x1) returned 0x0 [0058.603] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.603] SetErrorMode (uMode=0x0) returned 0x1 [0058.603] SetErrorMode (uMode=0x1) returned 0x0 [0058.604] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.604] SetErrorMode (uMode=0x0) returned 0x1 [0058.605] SetErrorMode (uMode=0x1) returned 0x0 [0058.605] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.605] SetErrorMode (uMode=0x0) returned 0x1 [0058.605] SetErrorMode (uMode=0x1) returned 0x0 [0058.605] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.606] SetErrorMode (uMode=0x0) returned 0x1 [0058.606] SetErrorMode (uMode=0x1) returned 0x0 [0058.606] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.606] SetErrorMode (uMode=0x0) returned 0x1 [0058.606] SetErrorMode (uMode=0x1) returned 0x0 [0058.606] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\*.*", lpFindFileData=0x5ae200 | out: lpFindFileData=0x5ae200) returned 0x7b4d90 [0058.607] SetErrorMode (uMode=0x0) returned 0x1 [0058.607] SetErrorMode (uMode=0x1) returned 0x0 [0058.607] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\*", lpFindFileData=0x5ae1d0 | out: lpFindFileData=0x5ae1d0) returned 0x7b4e50 [0058.608] SetErrorMode (uMode=0x0) returned 0x1 [0058.608] SetErrorMode (uMode=0x1) returned 0x0 [0058.608] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\*.*", lpFindFileData=0x5ae160 | out: lpFindFileData=0x5ae160) returned 0x7b4d90 [0058.653] SetErrorMode (uMode=0x0) returned 0x1 [0058.653] SetErrorMode (uMode=0x1) returned 0x0 [0058.654] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\*", lpFindFileData=0x5ae130 | out: lpFindFileData=0x5ae130) returned 0x7b4310 [0058.655] SetErrorMode (uMode=0x0) returned 0x1 [0058.655] SetErrorMode (uMode=0x1) returned 0x0 [0058.655] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.655] SetErrorMode (uMode=0x0) returned 0x1 [0058.655] SetErrorMode (uMode=0x1) returned 0x0 [0058.656] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0058.656] SetErrorMode (uMode=0x0) returned 0x1 [0058.656] SetErrorMode (uMode=0x1) returned 0x0 [0058.656] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.656] SetErrorMode (uMode=0x0) returned 0x1 [0058.657] SetErrorMode (uMode=0x1) returned 0x0 [0058.657] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0058.657] SetErrorMode (uMode=0x0) returned 0x1 [0058.657] SetErrorMode (uMode=0x1) returned 0x0 [0058.658] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.658] SetErrorMode (uMode=0x0) returned 0x1 [0058.658] SetErrorMode (uMode=0x1) returned 0x0 [0058.658] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\LocalState\\PinnedTiles\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.658] SetErrorMode (uMode=0x0) returned 0x1 [0058.658] SetErrorMode (uMode=0x1) returned 0x0 [0058.658] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4e50 [0058.659] SetErrorMode (uMode=0x0) returned 0x1 [0058.659] SetErrorMode (uMode=0x1) returned 0x0 [0058.659] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0058.659] SetErrorMode (uMode=0x0) returned 0x1 [0058.659] SetErrorMode (uMode=0x1) returned 0x0 [0058.659] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.738] SetErrorMode (uMode=0x0) returned 0x1 [0058.739] SetErrorMode (uMode=0x1) returned 0x0 [0058.739] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0058.740] SetErrorMode (uMode=0x0) returned 0x1 [0058.740] SetErrorMode (uMode=0x1) returned 0x0 [0058.740] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.741] SetErrorMode (uMode=0x0) returned 0x1 [0058.741] SetErrorMode (uMode=0x1) returned 0x0 [0058.741] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.741] SetErrorMode (uMode=0x0) returned 0x1 [0058.741] SetErrorMode (uMode=0x1) returned 0x0 [0058.741] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.764] SetErrorMode (uMode=0x0) returned 0x1 [0058.764] SetErrorMode (uMode=0x1) returned 0x0 [0058.765] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.766] SetErrorMode (uMode=0x0) returned 0x1 [0058.766] SetErrorMode (uMode=0x1) returned 0x0 [0058.766] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4310 [0058.767] SetErrorMode (uMode=0x0) returned 0x1 [0058.767] SetErrorMode (uMode=0x1) returned 0x0 [0058.767] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.767] SetErrorMode (uMode=0x0) returned 0x1 [0058.767] SetErrorMode (uMode=0x1) returned 0x0 [0058.767] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.768] SetErrorMode (uMode=0x0) returned 0x1 [0058.768] SetErrorMode (uMode=0x1) returned 0x0 [0058.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.768] SetErrorMode (uMode=0x0) returned 0x1 [0058.768] SetErrorMode (uMode=0x1) returned 0x0 [0058.768] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b41f0 [0058.781] SetErrorMode (uMode=0x0) returned 0x1 [0058.781] SetErrorMode (uMode=0x1) returned 0x0 [0058.781] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4310 [0058.783] SetErrorMode (uMode=0x0) returned 0x1 [0058.783] SetErrorMode (uMode=0x1) returned 0x0 [0058.783] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b41f0 [0058.799] SetErrorMode (uMode=0x0) returned 0x1 [0058.799] SetErrorMode (uMode=0x1) returned 0x0 [0058.799] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.801] SetErrorMode (uMode=0x0) returned 0x1 [0058.801] SetErrorMode (uMode=0x1) returned 0x0 [0058.801] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.802] SetErrorMode (uMode=0x0) returned 0x1 [0058.802] SetErrorMode (uMode=0x1) returned 0x0 [0058.802] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0058.803] SetErrorMode (uMode=0x0) returned 0x1 [0058.803] SetErrorMode (uMode=0x1) returned 0x0 [0058.803] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.803] SetErrorMode (uMode=0x0) returned 0x1 [0058.803] SetErrorMode (uMode=0x1) returned 0x0 [0058.803] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.803] SetErrorMode (uMode=0x0) returned 0x1 [0058.803] SetErrorMode (uMode=0x1) returned 0x0 [0058.803] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4e50 [0058.804] SetErrorMode (uMode=0x0) returned 0x1 [0058.804] SetErrorMode (uMode=0x1) returned 0x0 [0058.804] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b41f0 [0058.804] SetErrorMode (uMode=0x0) returned 0x1 [0058.804] SetErrorMode (uMode=0x1) returned 0x0 [0058.804] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.805] SetErrorMode (uMode=0x0) returned 0x1 [0058.805] SetErrorMode (uMode=0x1) returned 0x0 [0058.805] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.805] SetErrorMode (uMode=0x0) returned 0x1 [0058.805] SetErrorMode (uMode=0x1) returned 0x0 [0058.806] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.806] SetErrorMode (uMode=0x0) returned 0x1 [0058.806] SetErrorMode (uMode=0x1) returned 0x0 [0058.806] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.806] SetErrorMode (uMode=0x0) returned 0x1 [0058.806] SetErrorMode (uMode=0x1) returned 0x0 [0058.806] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.807] SetErrorMode (uMode=0x0) returned 0x1 [0058.807] SetErrorMode (uMode=0x1) returned 0x0 [0058.807] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0058.807] SetErrorMode (uMode=0x0) returned 0x1 [0058.807] SetErrorMode (uMode=0x1) returned 0x0 [0058.807] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4e50 [0058.808] SetErrorMode (uMode=0x0) returned 0x1 [0058.808] SetErrorMode (uMode=0x1) returned 0x0 [0058.808] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.808] SetErrorMode (uMode=0x0) returned 0x1 [0058.808] SetErrorMode (uMode=0x1) returned 0x0 [0058.808] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.808] SetErrorMode (uMode=0x0) returned 0x1 [0058.808] SetErrorMode (uMode=0x1) returned 0x0 [0058.809] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.809] SetErrorMode (uMode=0x0) returned 0x1 [0058.809] SetErrorMode (uMode=0x1) returned 0x0 [0058.809] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0058.825] SetErrorMode (uMode=0x0) returned 0x1 [0058.825] SetErrorMode (uMode=0x1) returned 0x0 [0058.825] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.826] SetErrorMode (uMode=0x0) returned 0x1 [0058.827] SetErrorMode (uMode=0x1) returned 0x0 [0058.827] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.827] SetErrorMode (uMode=0x0) returned 0x1 [0058.827] SetErrorMode (uMode=0x1) returned 0x0 [0058.827] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0058.827] SetErrorMode (uMode=0x0) returned 0x1 [0058.827] SetErrorMode (uMode=0x1) returned 0x0 [0058.827] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.828] SetErrorMode (uMode=0x0) returned 0x1 [0058.828] SetErrorMode (uMode=0x1) returned 0x0 [0058.828] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.828] SetErrorMode (uMode=0x0) returned 0x1 [0058.828] SetErrorMode (uMode=0x1) returned 0x0 [0058.828] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.828] SetErrorMode (uMode=0x0) returned 0x1 [0058.828] SetErrorMode (uMode=0x1) returned 0x0 [0058.828] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\SystemAppData\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.828] SetErrorMode (uMode=0x0) returned 0x1 [0058.829] SetErrorMode (uMode=0x1) returned 0x0 [0058.829] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.829] SetErrorMode (uMode=0x0) returned 0x1 [0058.829] SetErrorMode (uMode=0x1) returned 0x0 [0058.829] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\TempState\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.829] SetErrorMode (uMode=0x0) returned 0x1 [0058.830] SetErrorMode (uMode=0x1) returned 0x0 [0058.830] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0058.872] SetErrorMode (uMode=0x0) returned 0x1 [0058.873] SetErrorMode (uMode=0x1) returned 0x0 [0058.873] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0058.874] SetErrorMode (uMode=0x0) returned 0x1 [0058.874] SetErrorMode (uMode=0x1) returned 0x0 [0058.874] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b41f0 [0058.897] SetErrorMode (uMode=0x0) returned 0x1 [0058.897] SetErrorMode (uMode=0x1) returned 0x0 [0058.897] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.898] SetErrorMode (uMode=0x0) returned 0x1 [0058.898] SetErrorMode (uMode=0x1) returned 0x0 [0058.899] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b41f0 [0058.900] SetErrorMode (uMode=0x0) returned 0x1 [0058.900] SetErrorMode (uMode=0x1) returned 0x0 [0058.900] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCache\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.900] SetErrorMode (uMode=0x0) returned 0x1 [0058.900] SetErrorMode (uMode=0x1) returned 0x0 [0058.900] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.900] SetErrorMode (uMode=0x0) returned 0x1 [0058.900] SetErrorMode (uMode=0x1) returned 0x0 [0058.900] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetCookies\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.900] SetErrorMode (uMode=0x0) returned 0x1 [0058.901] SetErrorMode (uMode=0x1) returned 0x0 [0058.901] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4310 [0058.901] SetErrorMode (uMode=0x0) returned 0x1 [0058.901] SetErrorMode (uMode=0x1) returned 0x0 [0058.901] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\INetHistory\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.901] SetErrorMode (uMode=0x0) returned 0x1 [0058.901] SetErrorMode (uMode=0x1) returned 0x0 [0058.901] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.901] SetErrorMode (uMode=0x0) returned 0x1 [0058.901] SetErrorMode (uMode=0x1) returned 0x0 [0058.901] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AC\\Temp\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.902] SetErrorMode (uMode=0x0) returned 0x1 [0058.902] SetErrorMode (uMode=0x1) returned 0x0 [0058.902] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4310 [0058.902] SetErrorMode (uMode=0x0) returned 0x1 [0058.902] SetErrorMode (uMode=0x1) returned 0x0 [0058.902] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\AppData\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.902] SetErrorMode (uMode=0x0) returned 0x1 [0058.902] SetErrorMode (uMode=0x1) returned 0x0 [0058.902] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.903] SetErrorMode (uMode=0x0) returned 0x1 [0058.903] SetErrorMode (uMode=0x1) returned 0x0 [0058.903] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalCache\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b41f0 [0058.903] SetErrorMode (uMode=0x0) returned 0x1 [0058.903] SetErrorMode (uMode=0x1) returned 0x0 [0058.903] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.903] SetErrorMode (uMode=0x0) returned 0x1 [0058.903] SetErrorMode (uMode=0x1) returned 0x0 [0058.903] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\LocalState\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.903] SetErrorMode (uMode=0x0) returned 0x1 [0058.904] SetErrorMode (uMode=0x1) returned 0x0 [0058.904] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0058.905] SetErrorMode (uMode=0x0) returned 0x1 [0058.905] SetErrorMode (uMode=0x1) returned 0x0 [0058.905] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0058.905] SetErrorMode (uMode=0x0) returned 0x1 [0058.905] SetErrorMode (uMode=0x1) returned 0x0 [0058.905] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\*.*", lpFindFileData=0x5ae2a0 | out: lpFindFileData=0x5ae2a0) returned 0x7b4d90 [0058.929] SetErrorMode (uMode=0x0) returned 0x1 [0058.930] SetErrorMode (uMode=0x1) returned 0x0 [0058.930] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\*", lpFindFileData=0x5ae270 | out: lpFindFileData=0x5ae270) returned 0x7b4d90 [0058.931] SetErrorMode (uMode=0x0) returned 0x1 [0058.931] SetErrorMode (uMode=0x1) returned 0x0 [0058.931] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b41f0 [0058.931] SetErrorMode (uMode=0x0) returned 0x1 [0058.932] SetErrorMode (uMode=0x1) returned 0x0 [0058.932] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\RoamingState\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4310 [0061.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x31 [0062.019] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Contacts", lpFilePart=0x0) returned 0x1e [0062.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x0) returned 0x1d [0062.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x5ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2b [0062.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x5ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes", lpFilePart=0x0) returned 0x29 [0062.048] SetErrorMode (uMode=0x1) returned 0x0 [0062.048] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b4d90 [0062.050] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x5ae350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes", lpFilePart=0x0) returned 0x29 [0062.051] SetErrorMode (uMode=0x1) returned 0x0 [0062.052] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4d90 [0062.052] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.052] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.052] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.052] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.052] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 0 [0062.052] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x32 [0062.053] SetErrorMode (uMode=0x1) returned 0x0 [0062.053] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4d90 [0062.054] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.054] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.054] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 0 [0062.054] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x5ae2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x32 [0062.054] SetErrorMode (uMode=0x1) returned 0x0 [0062.054] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0062.055] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.055] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.055] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 0 [0062.055] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x5ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos", lpFilePart=0x0) returned 0x29 [0062.059] SetErrorMode (uMode=0x1) returned 0x0 [0062.059] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Videos\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0xffffffffffffffff [0062.061] SetErrorMode (uMode=0x0) returned 0x1 [0062.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks", nBufferLength=0x105, lpBuffer=0x5ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks", lpFilePart=0x0) returned 0x31 [0062.062] SetErrorMode (uMode=0x1) returned 0x0 [0062.063] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b4d90 [0062.063] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.063] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.063] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 0 [0062.063] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.064] SetErrorMode (uMode=0x0) returned 0x1 [0062.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks", nBufferLength=0x105, lpBuffer=0x5ae350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks", lpFilePart=0x0) returned 0x31 [0062.064] SetErrorMode (uMode=0x1) returned 0x0 [0062.064] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4d90 [0062.064] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.064] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.064] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 0 [0062.064] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.064] SetErrorMode (uMode=0x0) returned 0x1 [0062.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook", lpFilePart=0x0) returned 0x3d [0062.065] SetErrorMode (uMode=0x1) returned 0x0 [0062.065] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4d90 [0062.065] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.065] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.065] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.065] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 0 [0062.066] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.066] SetErrorMode (uMode=0x0) returned 0x1 [0062.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook", nBufferLength=0x105, lpBuffer=0x5ae2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook", lpFilePart=0x0) returned 0x3d [0062.066] SetErrorMode (uMode=0x1) returned 0x0 [0062.066] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0062.067] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.067] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.067] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.067] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 0 [0062.067] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.067] SetErrorMode (uMode=0x0) returned 0x1 [0062.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x5ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0062.067] SetErrorMode (uMode=0x1) returned 0x0 [0062.067] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b4d90 [0062.068] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.068] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.068] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 0 [0062.068] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.068] SetErrorMode (uMode=0x0) returned 0x1 [0062.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x5ae350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2d [0062.069] SetErrorMode (uMode=0x1) returned 0x0 [0062.069] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4310 [0062.069] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.069] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.069] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 0 [0062.069] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0062.069] SetErrorMode (uMode=0x0) returned 0x1 [0062.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5", nBufferLength=0x105, lpBuffer=0x5ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5", lpFilePart=0x0) returned 0x26 [0062.069] SetErrorMode (uMode=0x1) returned 0x0 [0062.070] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b4d90 [0062.070] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.070] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.070] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.070] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.070] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.070] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.070] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.070] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.070] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.070] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 0 [0062.070] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.070] SetErrorMode (uMode=0x0) returned 0x1 [0062.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5", nBufferLength=0x105, lpBuffer=0x5ae350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5", lpFilePart=0x0) returned 0x26 [0062.071] SetErrorMode (uMode=0x1) returned 0x0 [0062.071] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4d90 [0062.071] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.071] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.072] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.072] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 0 [0062.072] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.072] SetErrorMode (uMode=0x0) returned 0x1 [0062.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR", lpFilePart=0x0) returned 0x2e [0062.072] SetErrorMode (uMode=0x1) returned 0x0 [0062.072] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4d90 [0062.072] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.072] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.072] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.072] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.073] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 0 [0062.073] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.073] SetErrorMode (uMode=0x0) returned 0x1 [0062.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR", nBufferLength=0x105, lpBuffer=0x5ae2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR", lpFilePart=0x0) returned 0x2e [0062.074] SetErrorMode (uMode=0x1) returned 0x0 [0062.074] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b41f0 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.074] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.075] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.075] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.075] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.075] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 0 [0062.075] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0062.075] SetErrorMode (uMode=0x0) returned 0x1 [0062.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Downloads", lpFilePart=0x0) returned 0x1f [0062.075] SetErrorMode (uMode=0x1) returned 0x0 [0062.075] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0x7b4d90 [0062.075] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.076] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 0 [0062.076] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.076] SetErrorMode (uMode=0x0) returned 0x1 [0062.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads", nBufferLength=0x105, lpBuffer=0x5ae3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Downloads", lpFilePart=0x0) returned 0x1f [0062.077] SetErrorMode (uMode=0x1) returned 0x0 [0062.077] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\*", lpFindFileData=0x5ae590 | out: lpFindFileData=0x5ae590) returned 0x7b4e50 [0062.077] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.077] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.077] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.077] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.077] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 0 [0062.077] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0062.077] SetErrorMode (uMode=0x0) returned 0x1 [0062.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites", lpFilePart=0x0) returned 0x1f [0062.077] SetErrorMode (uMode=0x1) returned 0x0 [0062.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0x7b41f0 [0062.078] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.078] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.078] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.078] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.078] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 0 [0062.078] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0062.078] SetErrorMode (uMode=0x0) returned 0x1 [0062.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites", nBufferLength=0x105, lpBuffer=0x5ae3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites", lpFilePart=0x0) returned 0x1f [0062.078] SetErrorMode (uMode=0x1) returned 0x0 [0062.078] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\*", lpFindFileData=0x5ae590 | out: lpFindFileData=0x5ae590) returned 0x7b41f0 [0062.079] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.079] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.079] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.079] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.079] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 0 [0062.079] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0062.079] SetErrorMode (uMode=0x0) returned 0x1 [0062.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x5ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links", lpFilePart=0x0) returned 0x25 [0062.080] SetErrorMode (uMode=0x1) returned 0x0 [0062.080] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b4d90 [0062.080] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.080] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.080] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 0 [0062.080] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.080] SetErrorMode (uMode=0x0) returned 0x1 [0062.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x5ae350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links", lpFilePart=0x0) returned 0x25 [0062.080] SetErrorMode (uMode=0x1) returned 0x0 [0062.080] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4d90 [0062.081] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.081] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.081] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 0 [0062.081] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.081] SetErrorMode (uMode=0x0) returned 0x1 [0062.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Links", lpFilePart=0x0) returned 0x1b [0062.081] SetErrorMode (uMode=0x1) returned 0x0 [0062.081] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0x7b4d90 [0062.082] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.082] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.082] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.082] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.082] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.082] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 0 [0062.082] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.082] SetErrorMode (uMode=0x0) returned 0x1 [0062.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links", nBufferLength=0x105, lpBuffer=0x5ae3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Links", lpFilePart=0x0) returned 0x1b [0062.082] SetErrorMode (uMode=0x1) returned 0x0 [0062.082] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\*", lpFindFileData=0x5ae590 | out: lpFindFileData=0x5ae590) returned 0x7b41f0 [0062.083] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.083] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 0 [0062.083] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0062.083] SetErrorMode (uMode=0x0) returned 0x1 [0062.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Local Settings", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Local Settings", lpFilePart=0x0) returned 0x24 [0062.083] SetErrorMode (uMode=0x1) returned 0x0 [0062.083] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Local Settings\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0xffffffffffffffff [0062.085] SetErrorMode (uMode=0x0) returned 0x1 [0062.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music", lpFilePart=0x0) returned 0x1b [0062.085] SetErrorMode (uMode=0x1) returned 0x0 [0062.085] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0x7b4d90 [0062.086] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.086] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 0 [0062.086] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.086] SetErrorMode (uMode=0x0) returned 0x1 [0062.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music", nBufferLength=0x105, lpBuffer=0x5ae3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music", lpFilePart=0x0) returned 0x1b [0062.087] SetErrorMode (uMode=0x1) returned 0x0 [0062.087] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\*", lpFindFileData=0x5ae590 | out: lpFindFileData=0x5ae590) returned 0x7b4d90 [0062.087] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.087] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.087] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.087] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.087] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 0 [0062.087] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.087] SetErrorMode (uMode=0x0) returned 0x1 [0062.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK", nBufferLength=0x105, lpBuffer=0x5ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK", lpFilePart=0x0) returned 0x28 [0062.088] SetErrorMode (uMode=0x1) returned 0x0 [0062.088] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b4d90 [0062.088] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.088] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.088] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.088] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.088] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 0 [0062.088] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.088] SetErrorMode (uMode=0x0) returned 0x1 [0062.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK", nBufferLength=0x105, lpBuffer=0x5ae350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK", lpFilePart=0x0) returned 0x28 [0062.088] SetErrorMode (uMode=0x1) returned 0x0 [0062.089] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4310 [0062.089] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.089] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.089] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.089] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.089] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 0 [0062.089] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0062.089] SetErrorMode (uMode=0x0) returned 0x1 [0062.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ", lpFilePart=0x0) returned 0x3d [0062.089] SetErrorMode (uMode=0x1) returned 0x0 [0062.090] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4310 [0062.090] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.090] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.090] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.090] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 0 [0062.090] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0062.090] SetErrorMode (uMode=0x0) returned 0x1 [0062.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ", nBufferLength=0x105, lpBuffer=0x5ae2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ", lpFilePart=0x0) returned 0x3d [0062.090] SetErrorMode (uMode=0x1) returned 0x0 [0062.091] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0062.091] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.091] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 0 [0062.091] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.091] SetErrorMode (uMode=0x0) returned 0x1 [0062.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW", lpFilePart=0x0) returned 0x47 [0062.092] SetErrorMode (uMode=0x1) returned 0x0 [0062.092] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0062.092] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.092] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.092] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.092] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.092] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.092] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.092] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0062.092] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.092] SetErrorMode (uMode=0x0) returned 0x1 [0062.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW", lpFilePart=0x0) returned 0x47 [0062.093] SetErrorMode (uMode=0x1) returned 0x0 [0062.093] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b41f0 [0062.093] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.093] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.093] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.093] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.093] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.093] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.093] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0062.093] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0062.093] SetErrorMode (uMode=0x0) returned 0x1 [0062.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS", lpFilePart=0x0) returned 0x4e [0062.094] SetErrorMode (uMode=0x1) returned 0x0 [0062.094] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0062.094] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0062.094] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0062.094] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.094] SetErrorMode (uMode=0x0) returned 0x1 [0062.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS", lpFilePart=0x0) returned 0x4e [0062.094] SetErrorMode (uMode=0x1) returned 0x0 [0062.094] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0062.095] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0062.095] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0062.095] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0062.095] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0062.095] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0062.095] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.095] SetErrorMode (uMode=0x0) returned 0x1 [0062.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6", nBufferLength=0x105, lpBuffer=0x5ae1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6", lpFilePart=0x0) returned 0x52 [0062.095] SetErrorMode (uMode=0x1) returned 0x0 [0062.095] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4e50 [0062.095] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0062.095] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0062.095] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0062.095] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 1 [0062.096] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae350 | out: lpFindFileData=0x5ae350) returned 0 [0062.096] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0062.096] SetErrorMode (uMode=0x0) returned 0x1 [0062.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6", nBufferLength=0x105, lpBuffer=0x5ae170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6", lpFilePart=0x0) returned 0x52 [0062.097] SetErrorMode (uMode=0x1) returned 0x0 [0062.097] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0062.097] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0062.097] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0062.097] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0062.097] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 1 [0062.097] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae320 | out: lpFindFileData=0x5ae320) returned 0 [0062.097] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.097] SetErrorMode (uMode=0x0) returned 0x1 [0062.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof", nBufferLength=0x105, lpBuffer=0x5ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof", lpFilePart=0x0) returned 0x2a [0062.097] SetErrorMode (uMode=0x1) returned 0x0 [0062.098] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b41f0 [0062.098] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.098] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.098] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.098] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.098] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.098] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 0 [0062.098] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0062.098] SetErrorMode (uMode=0x0) returned 0x1 [0062.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof", nBufferLength=0x105, lpBuffer=0x5ae350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof", lpFilePart=0x0) returned 0x2a [0062.098] SetErrorMode (uMode=0x1) returned 0x0 [0062.098] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4e50 [0062.098] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.098] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.098] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.098] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.099] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.099] FindNextFileW (in: hFindFile=0x7b4e50, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 0 [0062.099] FindClose (in: hFindFile=0x7b4e50 | out: hFindFile=0x7b4e50) returned 1 [0062.099] SetErrorMode (uMode=0x0) returned 0x1 [0062.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj", nBufferLength=0x105, lpBuffer=0x5ae2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj", lpFilePart=0x0) returned 0x38 [0062.099] SetErrorMode (uMode=0x1) returned 0x0 [0062.099] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4310 [0062.099] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.099] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.099] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.099] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.099] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.099] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.099] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 1 [0062.099] FindNextFileW (in: hFindFile=0x7b4310, lpFindFileData=0x5ae490 | out: lpFindFileData=0x5ae490) returned 0 [0062.099] FindClose (in: hFindFile=0x7b4310 | out: hFindFile=0x7b4310) returned 1 [0062.099] SetErrorMode (uMode=0x0) returned 0x1 [0062.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj", nBufferLength=0x105, lpBuffer=0x5ae2b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj", lpFilePart=0x0) returned 0x38 [0062.100] SetErrorMode (uMode=0x1) returned 0x0 [0062.100] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0062.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 1 [0062.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae460 | out: lpFindFileData=0x5ae460) returned 0 [0062.100] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.100] SetErrorMode (uMode=0x0) returned 0x1 [0062.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS", nBufferLength=0x105, lpBuffer=0x5ae240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS", lpFilePart=0x0) returned 0x4b [0062.100] SetErrorMode (uMode=0x1) returned 0x0 [0062.100] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0062.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.100] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 1 [0062.101] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae3f0 | out: lpFindFileData=0x5ae3f0) returned 0 [0062.101] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.101] SetErrorMode (uMode=0x0) returned 0x1 [0062.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS", nBufferLength=0x105, lpBuffer=0x5ae210, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS", lpFilePart=0x0) returned 0x4b [0062.101] SetErrorMode (uMode=0x1) returned 0x0 [0062.101] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b41f0 [0062.101] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.101] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.101] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.101] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.101] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.101] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 1 [0062.101] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae3c0 | out: lpFindFileData=0x5ae3c0) returned 0 [0062.101] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0062.101] SetErrorMode (uMode=0x0) returned 0x1 [0062.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\My Documents", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\My Documents", lpFilePart=0x0) returned 0x22 [0062.102] SetErrorMode (uMode=0x1) returned 0x0 [0062.102] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\My Documents\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0xffffffffffffffff [0062.103] SetErrorMode (uMode=0x0) returned 0x1 [0062.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NetHood", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NetHood", lpFilePart=0x0) returned 0x1d [0062.103] SetErrorMode (uMode=0x1) returned 0x0 [0062.103] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NetHood\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0xffffffffffffffff [0062.104] SetErrorMode (uMode=0x0) returned 0x1 [0062.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\OneDrive", lpFilePart=0x0) returned 0x1e [0062.105] SetErrorMode (uMode=0x1) returned 0x0 [0062.105] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0x7b41f0 [0062.106] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.106] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.106] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 0 [0062.106] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0062.106] SetErrorMode (uMode=0x0) returned 0x1 [0062.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive", nBufferLength=0x105, lpBuffer=0x5ae3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\OneDrive", lpFilePart=0x0) returned 0x1e [0062.106] SetErrorMode (uMode=0x1) returned 0x0 [0062.106] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\*", lpFindFileData=0x5ae590 | out: lpFindFileData=0x5ae590) returned 0x7b4d90 [0062.106] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.106] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.106] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 0 [0062.106] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.106] SetErrorMode (uMode=0x0) returned 0x1 [0062.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures", lpFilePart=0x0) returned 0x1e [0062.106] SetErrorMode (uMode=0x1) returned 0x0 [0062.106] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0x7b4d90 [0062.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 1 [0062.107] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae5d0 | out: lpFindFileData=0x5ae5d0) returned 0 [0062.107] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.107] SetErrorMode (uMode=0x0) returned 0x1 [0062.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures", nBufferLength=0x105, lpBuffer=0x5ae3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures", lpFilePart=0x0) returned 0x1e [0062.108] SetErrorMode (uMode=0x1) returned 0x0 [0062.108] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\*", lpFindFileData=0x5ae590 | out: lpFindFileData=0x5ae590) returned 0x7b41f0 [0062.108] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.108] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.108] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.108] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.108] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.108] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.108] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.108] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 1 [0062.108] FindNextFileW (in: hFindFile=0x7b41f0, lpFindFileData=0x5ae5a0 | out: lpFindFileData=0x5ae5a0) returned 0 [0062.108] FindClose (in: hFindFile=0x7b41f0 | out: hFindFile=0x7b41f0) returned 1 [0062.108] SetErrorMode (uMode=0x0) returned 0x1 [0062.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV", nBufferLength=0x105, lpBuffer=0x5ae380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV", lpFilePart=0x0) returned 0x31 [0062.109] SetErrorMode (uMode=0x1) returned 0x0 [0062.109] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b4d90 [0062.109] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.109] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.109] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.109] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.109] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.109] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.109] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 1 [0062.109] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae530 | out: lpFindFileData=0x5ae530) returned 0 [0062.109] FindClose (in: hFindFile=0x7b4d90 | out: hFindFile=0x7b4d90) returned 1 [0062.110] SetErrorMode (uMode=0x0) returned 0x1 [0062.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV", nBufferLength=0x105, lpBuffer=0x5ae350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV", lpFilePart=0x0) returned 0x31 [0062.110] SetErrorMode (uMode=0x1) returned 0x0 [0062.110] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4d90 [0062.110] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.110] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.110] FindNextFileW (in: hFindFile=0x7b4d90, lpFindFileData=0x5ae500 | out: lpFindFileData=0x5ae500) returned 1 [0062.111] SetErrorMode (uMode=0x0) returned 0x1 [0062.111] SetErrorMode (uMode=0x1) returned 0x0 [0062.111] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b41f0 [0062.112] SetErrorMode (uMode=0x0) returned 0x1 [0062.112] SetErrorMode (uMode=0x1) returned 0x0 [0062.112] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0062.112] SetErrorMode (uMode=0x0) returned 0x1 [0062.112] SetErrorMode (uMode=0x1) returned 0x0 [0062.112] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0062.112] SetErrorMode (uMode=0x0) returned 0x1 [0062.112] SetErrorMode (uMode=0x1) returned 0x0 [0062.112] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0062.112] SetErrorMode (uMode=0x0) returned 0x1 [0062.113] SetErrorMode (uMode=0x1) returned 0x0 [0062.113] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\*.*", lpFindFileData=0x5ae340 | out: lpFindFileData=0x5ae340) returned 0x7b4d90 [0062.113] SetErrorMode (uMode=0x0) returned 0x1 [0062.113] SetErrorMode (uMode=0x1) returned 0x0 [0062.113] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\*", lpFindFileData=0x5ae310 | out: lpFindFileData=0x5ae310) returned 0x7b4d90 [0062.113] SetErrorMode (uMode=0x0) returned 0x1 [0062.113] SetErrorMode (uMode=0x1) returned 0x0 [0062.113] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0062.113] SetErrorMode (uMode=0x0) returned 0x1 [0062.113] SetErrorMode (uMode=0x1) returned 0x0 [0062.114] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0062.114] SetErrorMode (uMode=0x0) returned 0x1 [0062.114] SetErrorMode (uMode=0x1) returned 0x0 [0062.114] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4d90 [0062.114] SetErrorMode (uMode=0x0) returned 0x1 [0062.114] SetErrorMode (uMode=0x1) returned 0x0 [0062.114] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0062.114] SetErrorMode (uMode=0x0) returned 0x1 [0062.114] SetErrorMode (uMode=0x1) returned 0x0 [0062.114] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0062.115] SetErrorMode (uMode=0x0) returned 0x1 [0062.115] SetErrorMode (uMode=0x1) returned 0x0 [0062.115] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0062.115] SetErrorMode (uMode=0x0) returned 0x1 [0062.115] SetErrorMode (uMode=0x1) returned 0x0 [0062.115] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4d90 [0062.115] SetErrorMode (uMode=0x0) returned 0x1 [0062.115] SetErrorMode (uMode=0x1) returned 0x0 [0062.115] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0062.115] SetErrorMode (uMode=0x0) returned 0x1 [0062.116] SetErrorMode (uMode=0x1) returned 0x0 [0062.116] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0062.116] SetErrorMode (uMode=0x0) returned 0x1 [0062.116] SetErrorMode (uMode=0x1) returned 0x0 [0062.116] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0062.116] SetErrorMode (uMode=0x0) returned 0x1 [0062.116] SetErrorMode (uMode=0x1) returned 0x0 [0062.116] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\*.*", lpFindFileData=0x5ae3e0 | out: lpFindFileData=0x5ae3e0) returned 0x7b4d90 [0062.116] SetErrorMode (uMode=0x0) returned 0x1 [0062.116] SetErrorMode (uMode=0x1) returned 0x0 [0062.116] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\*", lpFindFileData=0x5ae3b0 | out: lpFindFileData=0x5ae3b0) returned 0x7b4d90 [0062.117] SetErrorMode (uMode=0x0) returned 0x1 [0062.117] SetErrorMode (uMode=0x1) returned 0x0 [0062.117] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b4310 [0062.117] SetErrorMode (uMode=0x0) returned 0x1 [0062.117] SetErrorMode (uMode=0x1) returned 0x0 [0062.117] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4d90 [0062.117] SetErrorMode (uMode=0x0) returned 0x1 [0062.117] SetErrorMode (uMode=0x1) returned 0x0 [0062.117] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b4d90 [0062.117] SetErrorMode (uMode=0x0) returned 0x1 [0062.118] SetErrorMode (uMode=0x1) returned 0x0 [0062.118] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4d90 [0062.118] SetErrorMode (uMode=0x0) returned 0x1 [0062.118] SetErrorMode (uMode=0x1) returned 0x0 [0062.118] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\PrintHood\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0xffffffffffffffff [0062.119] SetErrorMode (uMode=0x0) returned 0x1 [0062.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Recent", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Recent", lpFilePart=0x0) returned 0x1c [0062.120] SetErrorMode (uMode=0x1) returned 0x0 [0062.120] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Recent\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0xffffffffffffffff [0062.123] SetErrorMode (uMode=0x0) returned 0x1 [0062.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Saved Games", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Saved Games", lpFilePart=0x0) returned 0x21 [0062.123] SetErrorMode (uMode=0x1) returned 0x0 [0062.124] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0x7b4e50 [0062.124] SetErrorMode (uMode=0x0) returned 0x1 [0062.124] SetErrorMode (uMode=0x1) returned 0x0 [0062.124] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\*", lpFindFileData=0x5ae590 | out: lpFindFileData=0x5ae590) returned 0x7b41f0 [0062.124] SetErrorMode (uMode=0x0) returned 0x1 [0062.124] SetErrorMode (uMode=0x1) returned 0x0 [0062.124] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0x7b4d90 [0062.124] SetErrorMode (uMode=0x0) returned 0x1 [0062.124] SetErrorMode (uMode=0x1) returned 0x0 [0062.124] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\*", lpFindFileData=0x5ae590 | out: lpFindFileData=0x5ae590) returned 0x7b4d90 [0062.125] SetErrorMode (uMode=0x0) returned 0x1 [0062.125] SetErrorMode (uMode=0x1) returned 0x0 [0062.125] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\SendTo\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0xffffffffffffffff [0062.128] SetErrorMode (uMode=0x0) returned 0x1 [0062.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Start Menu", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Start Menu", lpFilePart=0x0) returned 0x20 [0062.129] SetErrorMode (uMode=0x1) returned 0x0 [0062.129] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Start Menu\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0xffffffffffffffff [0062.130] SetErrorMode (uMode=0x0) returned 0x1 [0062.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Templates", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Templates", lpFilePart=0x0) returned 0x1f [0062.131] SetErrorMode (uMode=0x1) returned 0x0 [0062.131] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Templates\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0xffffffffffffffff [0062.132] SetErrorMode (uMode=0x0) returned 0x1 [0062.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos", nBufferLength=0x105, lpBuffer=0x5ae420, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos", lpFilePart=0x0) returned 0x1c [0062.132] SetErrorMode (uMode=0x1) returned 0x0 [0062.132] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\*.*", lpFindFileData=0x5ae5c0 | out: lpFindFileData=0x5ae5c0) returned 0x7b4d90 [0062.133] SetErrorMode (uMode=0x0) returned 0x1 [0062.133] SetErrorMode (uMode=0x1) returned 0x0 [0062.133] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\*", lpFindFileData=0x5ae590 | out: lpFindFileData=0x5ae590) returned 0x7b4d90 [0062.133] SetErrorMode (uMode=0x0) returned 0x1 [0062.133] SetErrorMode (uMode=0x1) returned 0x0 [0062.133] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\*.*", lpFindFileData=0x5ae520 | out: lpFindFileData=0x5ae520) returned 0x7b4d90 [0062.133] SetErrorMode (uMode=0x0) returned 0x1 [0062.133] SetErrorMode (uMode=0x1) returned 0x0 [0062.133] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\*", lpFindFileData=0x5ae4f0 | out: lpFindFileData=0x5ae4f0) returned 0x7b4d90 [0062.134] SetErrorMode (uMode=0x0) returned 0x1 [0062.134] SetErrorMode (uMode=0x1) returned 0x0 [0062.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4d90 [0062.134] SetErrorMode (uMode=0x0) returned 0x1 [0062.134] SetErrorMode (uMode=0x1) returned 0x0 [0062.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0062.134] SetErrorMode (uMode=0x0) returned 0x1 [0062.134] SetErrorMode (uMode=0x1) returned 0x0 [0062.134] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\*.*", lpFindFileData=0x5ae480 | out: lpFindFileData=0x5ae480) returned 0x7b4d90 [0062.135] SetErrorMode (uMode=0x0) returned 0x1 [0062.135] SetErrorMode (uMode=0x1) returned 0x0 [0062.135] FindFirstFileW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\*", lpFindFileData=0x5ae450 | out: lpFindFileData=0x5ae450) returned 0x7b4d90 [0062.135] SetErrorMode (uMode=0x0) returned 0x1 [0062.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT", lpFilePart=0x0) returned 0x20 [0062.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT", lpFilePart=0x0) returned 0x20 [0062.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT", lpFilePart=0x0) returned 0x20 [0062.653] SetErrorMode (uMode=0x1) returned 0x0 [0062.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.071] SetErrorMode (uMode=0x0) returned 0x1 [0063.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1", lpFilePart=0x0) returned 0x25 [0063.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1", lpFilePart=0x0) returned 0x25 [0063.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1", lpFilePart=0x0) returned 0x25 [0063.073] SetErrorMode (uMode=0x1) returned 0x0 [0063.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.081] SetErrorMode (uMode=0x0) returned 0x1 [0063.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2", lpFilePart=0x0) returned 0x25 [0063.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2", lpFilePart=0x0) returned 0x25 [0063.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2", lpFilePart=0x0) returned 0x25 [0063.084] SetErrorMode (uMode=0x1) returned 0x0 [0063.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.087] SetErrorMode (uMode=0x0) returned 0x1 [0063.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpFilePart=0x0) returned 0x4d [0063.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpFilePart=0x0) returned 0x4d [0063.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf", lpFilePart=0x0) returned 0x4d [0063.089] SetErrorMode (uMode=0x1) returned 0x0 [0063.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.090] SetErrorMode (uMode=0x0) returned 0x1 [0063.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x72 [0063.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x72 [0063.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x72 [0063.092] SetErrorMode (uMode=0x1) returned 0x0 [0063.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.094] SetErrorMode (uMode=0x0) returned 0x1 [0063.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x72 [0063.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x72 [0063.095] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x72 [0063.096] SetErrorMode (uMode=0x1) returned 0x0 [0063.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\NTUSER.DAT{77a2c7ed-26f0-11e5-80da-e41d2d741090}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.dat{77a2c7ed-26f0-11e5-80da-e41d2d741090}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0063.097] SetErrorMode (uMode=0x0) returned 0x1 [0063.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini", lpFilePart=0x0) returned 0x20 [0063.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini", lpFilePart=0x0) returned 0x20 [0063.098] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini", lpFilePart=0x0) returned 0x20 [0063.099] SetErrorMode (uMode=0x1) returned 0x0 [0063.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0063.100] GetFileType (hFile=0x230) returned 0x1 [0063.100] SetErrorMode (uMode=0x0) returned 0x1 [0063.100] GetFileType (hFile=0x230) returned 0x1 [0063.236] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.419] ReadFile (in: hFile=0x230, lpBuffer=0x273d8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273d8f0*, lpNumberOfBytesRead=0x5ae8b8*=0x14, lpOverlapped=0x0) returned 1 [0063.421] ReadFile (in: hFile=0x230, lpBuffer=0x273d8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273d8f0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0063.421] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.684] WriteFile (in: hFile=0x230, lpBuffer=0x273d8f0*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273d8f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x14, lpOverlapped=0x0) returned 1 [0063.684] CloseHandle (hObject=0x230) returned 1 [0063.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini", lpFilePart=0x0) returned 0x20 [0063.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini", lpFilePart=0x0) returned 0x20 [0063.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.partially.cryptoNar", lpFilePart=0x0) returned 0x34 [0063.705] SetErrorMode (uMode=0x1) returned 0x0 [0063.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa86dec09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa86dec09, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x28686f73, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1 [0063.705] SetErrorMode (uMode=0x0) returned 0x1 [0063.757] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\ntuser.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\ntuser.ini.partially.cryptonar")) returned 1 [0063.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x30 [0063.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x30 [0063.758] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x30 [0063.759] SetErrorMode (uMode=0x1) returned 0x0 [0063.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0063.759] GetFileType (hFile=0x230) returned 0x1 [0063.759] SetErrorMode (uMode=0x0) returned 0x1 [0063.759] GetFileType (hFile=0x230) returned 0x1 [0063.759] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.759] ReadFile (in: hFile=0x230, lpBuffer=0x2740960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2740960*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0063.762] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0063.763] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.763] WriteFile (in: hFile=0x230, lpBuffer=0x2740960*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2740960*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0063.763] CloseHandle (hObject=0x230) returned 1 [0063.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x30 [0063.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x30 [0063.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db.partially.cryptoNar", lpFilePart=0x0) returned 0x44 [0063.767] SetErrorMode (uMode=0x1) returned 0x0 [0063.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xd0352ba0, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0352ba0, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x2876992c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1da38)) returned 1 [0063.768] SetErrorMode (uMode=0x0) returned 0x1 [0063.768] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\IconCache.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\iconcache.db.partially.cryptonar")) returned 1 [0063.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x47 [0063.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x47 [0063.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x47 [0063.769] SetErrorMode (uMode=0x1) returned 0x0 [0063.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0063.770] GetFileType (hFile=0x230) returned 0x1 [0063.770] SetErrorMode (uMode=0x0) returned 0x1 [0063.770] GetFileType (hFile=0x230) returned 0x1 [0063.770] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.770] ReadFile (in: hFile=0x230, lpBuffer=0x2743e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2743e60*, lpNumberOfBytesRead=0x5ae8b8*=0x40b, lpOverlapped=0x0) returned 1 [0063.784] SetFilePointer (in: hFile=0x230, lDistanceToMove=-11, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0063.784] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.784] WriteFile (in: hFile=0x230, lpBuffer=0x2743e60*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2743e60*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0063.785] CloseHandle (hObject=0x230) returned 1 [0063.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x47 [0063.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x47 [0063.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst.partially.cryptoNar", lpFilePart=0x0) returned 0x5b [0063.789] SetErrorMode (uMode=0x1) returned 0x0 [0063.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bd1b4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6f1bd1b4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x2878ed8e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40b)) returned 1 [0063.789] SetErrorMode (uMode=0x0) returned 0x1 [0063.789] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst.partially.cryptonar")) returned 1 [0063.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", lpFilePart=0x0) returned 0x47 [0063.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", lpFilePart=0x0) returned 0x47 [0063.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", lpFilePart=0x0) returned 0x47 [0063.790] SetErrorMode (uMode=0x1) returned 0x0 [0063.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0063.791] GetFileType (hFile=0x230) returned 0x1 [0063.791] SetErrorMode (uMode=0x0) returned 0x1 [0063.791] GetFileType (hFile=0x230) returned 0x1 [0063.791] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.791] ReadFile (in: hFile=0x230, lpBuffer=0x2747458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2747458*, lpNumberOfBytesRead=0x5ae8b8*=0x218, lpOverlapped=0x0) returned 1 [0063.792] ReadFile (in: hFile=0x230, lpBuffer=0x2747458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2747458*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0063.792] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.792] WriteFile (in: hFile=0x230, lpBuffer=0x2747458*, nNumberOfBytesToWrite=0x218, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2747458*, lpNumberOfBytesWritten=0x5ae8a8*=0x218, lpOverlapped=0x0) returned 1 [0063.792] CloseHandle (hObject=0x230) returned 1 [0063.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", lpFilePart=0x0) returned 0x47 [0063.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst", lpFilePart=0x0) returned 0x47 [0063.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst.partially.cryptoNar", lpFilePart=0x0) returned 0x5b [0063.793] SetErrorMode (uMode=0x1) returned 0x0 [0063.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3856cc, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xab3856cc, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x2878ed8e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x218)) returned 1 [0063.793] SetErrorMode (uMode=0x0) returned 0x1 [0063.793] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt17.lst.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt17.lst.partially.cryptonar")) returned 1 [0063.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x46 [0063.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x46 [0063.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x46 [0063.794] SetErrorMode (uMode=0x1) returned 0x0 [0063.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0063.795] GetFileType (hFile=0x230) returned 0x1 [0063.795] SetErrorMode (uMode=0x0) returned 0x1 [0063.795] GetFileType (hFile=0x230) returned 0x1 [0063.795] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.795] ReadFile (in: hFile=0x230, lpBuffer=0x274aa98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274aa98*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0063.862] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0063.862] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.862] WriteFile (in: hFile=0x230, lpBuffer=0x274aa98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274aa98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0063.862] CloseHandle (hObject=0x230) returned 1 [0063.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x46 [0063.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x46 [0063.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst.partially.cryptoNar", lpFilePart=0x0) returned 0x5a [0063.890] SetErrorMode (uMode=0x1) returned 0x0 [0063.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bd1b4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6f1bd1b4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x28882e3c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1613f)) returned 1 [0063.890] SetErrorMode (uMode=0x0) returned 0x1 [0063.890] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst.partially.cryptonar")) returned 1 [0063.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", lpFilePart=0x0) returned 0x46 [0063.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", lpFilePart=0x0) returned 0x46 [0063.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", lpFilePart=0x0) returned 0x46 [0063.892] SetErrorMode (uMode=0x1) returned 0x0 [0063.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0063.892] GetFileType (hFile=0x230) returned 0x1 [0063.892] SetErrorMode (uMode=0x0) returned 0x1 [0063.892] GetFileType (hFile=0x230) returned 0x1 [0063.892] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.892] ReadFile (in: hFile=0x230, lpBuffer=0x274e090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274e090*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0063.909] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0063.910] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0063.910] WriteFile (in: hFile=0x230, lpBuffer=0x274e090*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274e090*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0063.910] CloseHandle (hObject=0x230) returned 1 [0064.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", lpFilePart=0x0) returned 0x46 [0064.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst", lpFilePart=0x0) returned 0x46 [0064.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst.partially.cryptoNar", lpFilePart=0x0) returned 0x5a [0064.030] SetErrorMode (uMode=0x1) returned 0x0 [0064.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab3856cc, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xab3856cc, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x289cb16d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24b55)) returned 1 [0064.031] SetErrorMode (uMode=0x0) returned 0x1 [0064.031] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt17.lst.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt17.lst.partially.cryptonar")) returned 1 [0064.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x45 [0064.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x45 [0064.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x45 [0064.032] SetErrorMode (uMode=0x1) returned 0x0 [0064.032] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.033] GetFileType (hFile=0x230) returned 0x1 [0064.033] SetErrorMode (uMode=0x0) returned 0x1 [0064.033] GetFileType (hFile=0x230) returned 0x1 [0064.033] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.033] ReadFile (in: hFile=0x230, lpBuffer=0x2751688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2751688*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.051] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.051] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.051] WriteFile (in: hFile=0x230, lpBuffer=0x2751688*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2751688*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.052] CloseHandle (hObject=0x230) returned 1 [0064.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x45 [0064.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x45 [0064.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x59 [0064.054] SetErrorMode (uMode=0x1) returned 0x0 [0064.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee9c04b, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6ee9c04b, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x28a1e0ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd146)) returned 1 [0064.054] SetErrorMode (uMode=0x0) returned 0x1 [0064.054] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat.partially.cryptonar")) returned 1 [0064.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x4a [0064.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x4a [0064.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x4a [0064.055] SetErrorMode (uMode=0x1) returned 0x0 [0064.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.056] GetFileType (hFile=0x230) returned 0x1 [0064.056] SetErrorMode (uMode=0x0) returned 0x1 [0064.056] GetFileType (hFile=0x230) returned 0x1 [0064.056] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.056] ReadFile (in: hFile=0x230, lpBuffer=0x2754ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2754ca8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.095] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.095] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.095] WriteFile (in: hFile=0x230, lpBuffer=0x2754ca8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2754ca8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.096] CloseHandle (hObject=0x230) returned 1 [0064.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x4a [0064.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x4a [0064.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x5e [0064.103] SetErrorMode (uMode=0x1) returned 0x0 [0064.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb3d1687, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xfb3d1687, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x28a89c86, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2da43)) returned 1 [0064.103] SetErrorMode (uMode=0x0) returned 0x1 [0064.103] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat.partially.cryptonar")) returned 1 [0064.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x45 [0064.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x45 [0064.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x45 [0064.104] SetErrorMode (uMode=0x1) returned 0x0 [0064.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.105] GetFileType (hFile=0x230) returned 0x1 [0064.105] SetErrorMode (uMode=0x0) returned 0x1 [0064.105] GetFileType (hFile=0x230) returned 0x1 [0064.105] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.105] ReadFile (in: hFile=0x230, lpBuffer=0x2758280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2758280*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.107] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.107] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.107] WriteFile (in: hFile=0x230, lpBuffer=0x2758280*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2758280*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.117] CloseHandle (hObject=0x230) returned 1 [0064.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x45 [0064.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x45 [0064.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents.partially.cryptoNar", lpFilePart=0x0) returned 0x59 [0064.118] SetErrorMode (uMode=0x1) returned 0x0 [0064.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f0ba22e, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7f0ba22e, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x28aafe36, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1800)) returned 1 [0064.118] SetErrorMode (uMode=0x0) returned 0x1 [0064.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents.partially.cryptonar")) returned 1 [0064.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x42 [0064.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x42 [0064.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x42 [0064.119] SetErrorMode (uMode=0x1) returned 0x0 [0064.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.120] GetFileType (hFile=0x230) returned 0x1 [0064.120] SetErrorMode (uMode=0x0) returned 0x1 [0064.120] GetFileType (hFile=0x230) returned 0x1 [0064.120] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.120] ReadFile (in: hFile=0x230, lpBuffer=0x275b850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275b850*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.132] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.132] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.132] WriteFile (in: hFile=0x230, lpBuffer=0x275b850*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275b850*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.133] CloseHandle (hObject=0x230) returned 1 [0064.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x42 [0064.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x42 [0064.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin.partially.cryptoNar", lpFilePart=0x0) returned 0x56 [0064.165] SetErrorMode (uMode=0x1) returned 0x0 [0064.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d8bc749, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d8bc749, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x28b233c0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf7b5)) returned 1 [0064.166] SetErrorMode (uMode=0x0) returned 0x1 [0064.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin.partially.cryptonar")) returned 1 [0064.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x48 [0064.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x48 [0064.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x48 [0064.169] SetErrorMode (uMode=0x1) returned 0x0 [0064.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.176] GetFileType (hFile=0x230) returned 0x1 [0064.176] SetErrorMode (uMode=0x0) returned 0x1 [0064.176] GetFileType (hFile=0x230) returned 0x1 [0064.176] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.177] ReadFile (in: hFile=0x230, lpBuffer=0x275ee20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275ee20*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.191] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.191] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.191] WriteFile (in: hFile=0x230, lpBuffer=0x275ee20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275ee20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.192] CloseHandle (hObject=0x230) returned 1 [0064.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x48 [0064.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x48 [0064.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst.partially.cryptoNar", lpFilePart=0x0) returned 0x5c [0064.193] SetErrorMode (uMode=0x1) returned 0x0 [0064.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f1bd1b4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6f1bd1b4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x28b6ea5b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x255e)) returned 1 [0064.193] SetErrorMode (uMode=0x0) returned 0x1 [0064.193] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst.partially.cryptonar")) returned 1 [0064.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", lpFilePart=0x0) returned 0x48 [0064.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", lpFilePart=0x0) returned 0x48 [0064.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", lpFilePart=0x0) returned 0x48 [0064.196] SetErrorMode (uMode=0x1) returned 0x0 [0064.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.201] GetFileType (hFile=0x230) returned 0x1 [0064.201] SetErrorMode (uMode=0x0) returned 0x1 [0064.201] GetFileType (hFile=0x230) returned 0x1 [0064.201] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.202] ReadFile (in: hFile=0x230, lpBuffer=0x2762448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2762448*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.207] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.207] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.207] WriteFile (in: hFile=0x230, lpBuffer=0x2762448*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2762448*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.208] CloseHandle (hObject=0x230) returned 1 [0064.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", lpFilePart=0x0) returned 0x48 [0064.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst", lpFilePart=0x0) returned 0x48 [0064.209] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst.partially.cryptoNar", lpFilePart=0x0) returned 0x5c [0064.210] SetErrorMode (uMode=0x1) returned 0x0 [0064.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab35f474, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xab35f474, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x28b94cc3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x255e)) returned 1 [0064.210] SetErrorMode (uMode=0x0) returned 0x1 [0064.210] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt17.lst.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt17.lst.partially.cryptonar")) returned 1 [0064.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", lpFilePart=0x0) returned 0x50 [0064.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", lpFilePart=0x0) returned 0x50 [0064.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", lpFilePart=0x0) returned 0x50 [0064.213] SetErrorMode (uMode=0x1) returned 0x0 [0064.214] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.214] GetFileType (hFile=0x230) returned 0x1 [0064.214] SetErrorMode (uMode=0x0) returned 0x1 [0064.214] GetFileType (hFile=0x230) returned 0x1 [0064.215] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.215] ReadFile (in: hFile=0x230, lpBuffer=0x2765a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2765a50*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.220] WriteFile (in: hFile=0x230, lpBuffer=0x2765a50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2765a50*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.220] CloseHandle (hObject=0x230) returned 1 [0064.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", lpFilePart=0x0) returned 0x50 [0064.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links", lpFilePart=0x0) returned 0x50 [0064.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0064.233] SetErrorMode (uMode=0x1) returned 0x0 [0064.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa2b3717, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xaa2b3717, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x28bcb07e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0064.233] SetErrorMode (uMode=0x0) returned 0x1 [0064.234] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\visited links.partially.cryptonar")) returned 1 [0064.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", lpFilePart=0x0) returned 0x4f [0064.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", lpFilePart=0x0) returned 0x4f [0064.235] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", lpFilePart=0x0) returned 0x4f [0064.235] SetErrorMode (uMode=0x1) returned 0x0 [0064.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.237] GetFileType (hFile=0x230) returned 0x1 [0064.237] SetErrorMode (uMode=0x0) returned 0x1 [0064.237] GetFileType (hFile=0x230) returned 0x1 [0064.237] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.237] ReadFile (in: hFile=0x230, lpBuffer=0x2769080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2769080*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.241] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.241] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.241] WriteFile (in: hFile=0x230, lpBuffer=0x2769080*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2769080*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.241] CloseHandle (hObject=0x230) returned 1 [0064.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", lpFilePart=0x0) returned 0x4f [0064.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0", lpFilePart=0x0) returned 0x4f [0064.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0064.242] SetErrorMode (uMode=0x1) returned 0x0 [0064.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae807a73, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae807a73, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x28be123e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0064.242] SetErrorMode (uMode=0x0) returned 0x1 [0064.243] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_0.partially.cryptonar")) returned 1 [0064.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", lpFilePart=0x0) returned 0x4f [0064.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", lpFilePart=0x0) returned 0x4f [0064.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", lpFilePart=0x0) returned 0x4f [0064.244] SetErrorMode (uMode=0x1) returned 0x0 [0064.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.246] GetFileType (hFile=0x230) returned 0x1 [0064.246] SetErrorMode (uMode=0x0) returned 0x1 [0064.246] GetFileType (hFile=0x230) returned 0x1 [0064.246] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.246] ReadFile (in: hFile=0x230, lpBuffer=0x276c688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276c688*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.253] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.253] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.254] WriteFile (in: hFile=0x230, lpBuffer=0x276c688*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276c688*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.254] CloseHandle (hObject=0x230) returned 1 [0064.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", lpFilePart=0x0) returned 0x4f [0064.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1", lpFilePart=0x0) returned 0x4f [0064.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0064.264] SetErrorMode (uMode=0x1) returned 0x0 [0064.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80a181, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80a181, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x28c07331, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1 [0064.265] SetErrorMode (uMode=0x0) returned 0x1 [0064.265] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_1.partially.cryptonar")) returned 1 [0064.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", lpFilePart=0x0) returned 0x4f [0064.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", lpFilePart=0x0) returned 0x4f [0064.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", lpFilePart=0x0) returned 0x4f [0064.272] SetErrorMode (uMode=0x1) returned 0x0 [0064.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.273] GetFileType (hFile=0x230) returned 0x1 [0064.274] SetErrorMode (uMode=0x0) returned 0x1 [0064.274] GetFileType (hFile=0x230) returned 0x1 [0064.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.274] ReadFile (in: hFile=0x230, lpBuffer=0x276fc90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276fc90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.289] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.289] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.289] WriteFile (in: hFile=0x230, lpBuffer=0x276fc90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276fc90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.290] CloseHandle (hObject=0x230) returned 1 [0064.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", lpFilePart=0x0) returned 0x4f [0064.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2", lpFilePart=0x0) returned 0x4f [0064.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0064.292] SetErrorMode (uMode=0x1) returned 0x0 [0064.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80a181, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80a181, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x28c53989, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0064.292] SetErrorMode (uMode=0x0) returned 0x1 [0064.292] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_2.partially.cryptonar")) returned 1 [0064.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", lpFilePart=0x0) returned 0x4f [0064.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", lpFilePart=0x0) returned 0x4f [0064.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", lpFilePart=0x0) returned 0x4f [0064.293] SetErrorMode (uMode=0x1) returned 0x0 [0064.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.294] GetFileType (hFile=0x230) returned 0x1 [0064.294] SetErrorMode (uMode=0x0) returned 0x1 [0064.294] GetFileType (hFile=0x230) returned 0x1 [0064.294] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.294] ReadFile (in: hFile=0x230, lpBuffer=0x2773298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2773298*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.428] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.428] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.429] WriteFile (in: hFile=0x230, lpBuffer=0x2773298*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2773298*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.429] CloseHandle (hObject=0x230) returned 1 [0064.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", lpFilePart=0x0) returned 0x4f [0064.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3", lpFilePart=0x0) returned 0x4f [0064.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0064.430] SetErrorMode (uMode=0x1) returned 0x0 [0064.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae80d369, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae80d369, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x28db20c6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0064.430] SetErrorMode (uMode=0x0) returned 0x1 [0064.431] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\data_3.partially.cryptonar")) returned 1 [0064.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", lpFilePart=0x0) returned 0x4e [0064.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", lpFilePart=0x0) returned 0x4e [0064.432] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", lpFilePart=0x0) returned 0x4e [0064.432] SetErrorMode (uMode=0x1) returned 0x0 [0064.432] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.432] GetFileType (hFile=0x230) returned 0x1 [0064.432] SetErrorMode (uMode=0x0) returned 0x1 [0064.432] GetFileType (hFile=0x230) returned 0x1 [0064.432] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.432] ReadFile (in: hFile=0x230, lpBuffer=0x27768a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27768a0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.472] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.472] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.473] WriteFile (in: hFile=0x230, lpBuffer=0x27768a0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27768a0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.473] CloseHandle (hObject=0x230) returned 1 [0064.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", lpFilePart=0x0) returned 0x4e [0064.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index", lpFilePart=0x0) returned 0x4e [0064.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index.partially.cryptoNar", lpFilePart=0x0) returned 0x62 [0064.505] SetErrorMode (uMode=0x1) returned 0x0 [0064.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae7fde33, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0xae7fde33, ftLastAccessTime.dwHighDateTime=0x1d336e1, ftLastWriteTime.dwLowDateTime=0x28e718a4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1 [0064.505] SetErrorMode (uMode=0x0) returned 0x1 [0064.505] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\cache\\index.partially.cryptonar")) returned 1 [0064.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x4b [0064.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x4b [0064.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x4b [0064.506] SetErrorMode (uMode=0x1) returned 0x0 [0064.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.507] GetFileType (hFile=0x230) returned 0x1 [0064.507] SetErrorMode (uMode=0x0) returned 0x1 [0064.507] GetFileType (hFile=0x230) returned 0x1 [0064.507] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.507] ReadFile (in: hFile=0x230, lpBuffer=0x2779e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2779e90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.509] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.509] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.509] WriteFile (in: hFile=0x230, lpBuffer=0x2779e90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2779e90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.510] CloseHandle (hObject=0x230) returned 1 [0064.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x4b [0064.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x4b [0064.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies.partially.cryptoNar", lpFilePart=0x0) returned 0x5f [0064.511] SetErrorMode (uMode=0x1) returned 0x0 [0064.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffc6fd1, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7ffc6fd1, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x28e718a4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0064.511] SetErrorMode (uMode=0x0) returned 0x1 [0064.511] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies.partially.cryptonar")) returned 1 [0064.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0064.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0064.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0064.512] SetErrorMode (uMode=0x1) returned 0x0 [0064.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.512] GetFileType (hFile=0x230) returned 0x1 [0064.513] SetErrorMode (uMode=0x0) returned 0x1 [0064.513] GetFileType (hFile=0x230) returned 0x1 [0064.513] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.513] ReadFile (in: hFile=0x230, lpBuffer=0x277d498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277d498*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0064.513] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.513] CloseHandle (hObject=0x230) returned 1 [0064.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0064.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0064.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x67 [0064.514] SetErrorMode (uMode=0x1) returned 0x0 [0064.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffed24f, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7ffed24f, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0xae415f68, ftLastWriteTime.dwHighDateTime=0x1d336e1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0064.514] SetErrorMode (uMode=0x0) returned 0x1 [0064.514] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal.partially.cryptonar")) returned 1 [0064.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x3e [0064.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x3e [0064.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x3e [0064.515] SetErrorMode (uMode=0x1) returned 0x0 [0064.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.516] GetFileType (hFile=0x230) returned 0x1 [0064.516] SetErrorMode (uMode=0x0) returned 0x1 [0064.516] GetFileType (hFile=0x230) returned 0x1 [0064.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.516] ReadFile (in: hFile=0x230, lpBuffer=0x27806f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27806f0*, lpNumberOfBytesRead=0x5ae8b8*=0x48c, lpOverlapped=0x0) returned 1 [0064.534] SetFilePointer (in: hFile=0x230, lDistanceToMove=-140, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.534] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.535] WriteFile (in: hFile=0x230, lpBuffer=0x27806f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27806f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.535] CloseHandle (hObject=0x230) returned 1 [0064.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x3e [0064.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x3e [0064.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.partially.cryptoNar", lpFilePart=0x0) returned 0x52 [0064.540] SetErrorMode (uMode=0x1) returned 0x0 [0064.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\acecache11.lst"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0b0731, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d0b0731, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x28eb2988, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48c)) returned 1 [0064.540] SetErrorMode (uMode=0x0) returned 0x1 [0064.540] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\acecache11.lst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\acecache11.lst.partially.cryptonar")) returned 1 [0064.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x43 [0064.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x43 [0064.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x43 [0064.541] SetErrorMode (uMode=0x1) returned 0x0 [0064.541] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.542] GetFileType (hFile=0x230) returned 0x1 [0064.542] SetErrorMode (uMode=0x0) returned 0x1 [0064.542] GetFileType (hFile=0x230) returned 0x1 [0064.542] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.542] ReadFile (in: hFile=0x230, lpBuffer=0x2783c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2783c48*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.557] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.557] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.557] WriteFile (in: hFile=0x230, lpBuffer=0x2783c48*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2783c48*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.558] CloseHandle (hObject=0x230) returned 1 [0064.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x43 [0064.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x43 [0064.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.partially.cryptoNar", lpFilePart=0x0) returned 0x57 [0064.569] SetErrorMode (uMode=0x1) returned 0x0 [0064.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d098079, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d098079, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x28f0d83e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x102a0)) returned 1 [0064.569] SetErrorMode (uMode=0x0) returned 0x1 [0064.569] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc.partially.cryptonar")) returned 1 [0064.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x42 [0064.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x42 [0064.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x42 [0064.570] SetErrorMode (uMode=0x1) returned 0x0 [0064.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.571] GetFileType (hFile=0x230) returned 0x1 [0064.571] SetErrorMode (uMode=0x0) returned 0x1 [0064.571] GetFileType (hFile=0x230) returned 0x1 [0064.571] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.571] ReadFile (in: hFile=0x230, lpBuffer=0x27871d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27871d8*, lpNumberOfBytesRead=0x5ae8b8*=0xa74, lpOverlapped=0x0) returned 1 [0064.585] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1652, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.585] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.585] WriteFile (in: hFile=0x230, lpBuffer=0x27871d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27871d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.586] CloseHandle (hObject=0x230) returned 1 [0064.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x42 [0064.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x42 [0064.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.partially.cryptoNar", lpFilePart=0x0) returned 0x56 [0064.587] SetErrorMode (uMode=0x1) returned 0x0 [0064.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d0b0731, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d0b0731, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x28f25127, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa74)) returned 1 [0064.587] SetErrorMode (uMode=0x0) returned 0x1 [0064.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc.partially.cryptonar")) returned 1 [0064.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x40 [0064.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x40 [0064.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x40 [0064.590] SetErrorMode (uMode=0x1) returned 0x0 [0064.591] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.591] GetFileType (hFile=0x230) returned 0x1 [0064.591] SetErrorMode (uMode=0x0) returned 0x1 [0064.592] GetFileType (hFile=0x230) returned 0x1 [0064.592] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.592] ReadFile (in: hFile=0x230, lpBuffer=0x278a788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x278a788*, lpNumberOfBytesRead=0x5ae8b8*=0x14, lpOverlapped=0x0) returned 1 [0064.594] ReadFile (in: hFile=0x230, lpBuffer=0x278a788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x278a788*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0064.594] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.595] WriteFile (in: hFile=0x230, lpBuffer=0x278a788*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x278a788*, lpNumberOfBytesWritten=0x5ae8a8*=0x14, lpOverlapped=0x0) returned 1 [0064.595] CloseHandle (hObject=0x230) returned 1 [0064.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x40 [0064.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x40 [0064.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x54 [0064.600] SetErrorMode (uMode=0x1) returned 0x0 [0064.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e165a8a, ftCreationTime.dwHighDateTime=0x1d2d43a, ftLastAccessTime.dwLowDateTime=0x2e165a8a, ftLastAccessTime.dwHighDateTime=0x1d2d43a, ftLastWriteTime.dwLowDateTime=0x28f4b3ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1 [0064.600] SetErrorMode (uMode=0x0) returned 0x1 [0064.600] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\temp\\calendarcache.dat.partially.cryptonar")) returned 1 [0064.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", lpFilePart=0x0) returned 0x3e [0064.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", lpFilePart=0x0) returned 0x3e [0064.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", lpFilePart=0x0) returned 0x3e [0064.602] SetErrorMode (uMode=0x1) returned 0x0 [0064.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.604] GetFileType (hFile=0x230) returned 0x1 [0064.604] SetErrorMode (uMode=0x0) returned 0x1 [0064.604] GetFileType (hFile=0x230) returned 0x1 [0064.604] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.604] ReadFile (in: hFile=0x230, lpBuffer=0x278d940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x278d940*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.657] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.657] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.657] WriteFile (in: hFile=0x230, lpBuffer=0x278d940*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x278d940*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.657] CloseHandle (hObject=0x230) returned 1 [0064.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", lpFilePart=0x0) returned 0x3e [0064.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol", lpFilePart=0x0) returned 0x3e [0064.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol.partially.cryptoNar", lpFilePart=0x0) returned 0x52 [0064.899] SetErrorMode (uMode=0x1) returned 0x0 [0064.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe69687f6, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe69687f6, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x292203a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x600000)) returned 1 [0064.899] SetErrorMode (uMode=0x0) returned 0x1 [0064.899] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\store.vol.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\store.vol.partially.cryptonar")) returned 1 [0064.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", lpFilePart=0x0) returned 0x3c [0064.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", lpFilePart=0x0) returned 0x3c [0064.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", lpFilePart=0x0) returned 0x3c [0064.900] SetErrorMode (uMode=0x1) returned 0x0 [0064.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.900] GetFileType (hFile=0x230) returned 0x1 [0064.900] SetErrorMode (uMode=0x0) returned 0x1 [0064.900] GetFileType (hFile=0x230) returned 0x1 [0064.901] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.901] ReadFile (in: hFile=0x230, lpBuffer=0x2790e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2790e78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.915] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.915] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.915] WriteFile (in: hFile=0x230, lpBuffer=0x2790e78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2790e78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.915] CloseHandle (hObject=0x230) returned 1 [0064.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", lpFilePart=0x0) returned 0x3c [0064.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk", lpFilePart=0x0) returned 0x3c [0064.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk.partially.cryptoNar", lpFilePart=0x0) returned 0x50 [0064.938] SetErrorMode (uMode=0x1) returned 0x0 [0064.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6942617, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6942617, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x29292563, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0064.938] SetErrorMode (uMode=0x0) returned 0x1 [0064.938] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.chk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.chk.partially.cryptonar")) returned 1 [0064.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", lpFilePart=0x0) returned 0x3c [0064.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", lpFilePart=0x0) returned 0x3c [0064.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", lpFilePart=0x0) returned 0x3c [0064.939] SetErrorMode (uMode=0x1) returned 0x0 [0064.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0064.940] GetFileType (hFile=0x230) returned 0x1 [0064.940] SetErrorMode (uMode=0x0) returned 0x1 [0064.940] GetFileType (hFile=0x230) returned 0x1 [0064.940] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.940] ReadFile (in: hFile=0x230, lpBuffer=0x27943a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27943a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0064.972] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0064.972] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0064.972] WriteFile (in: hFile=0x230, lpBuffer=0x27943a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27943a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0064.972] CloseHandle (hObject=0x230) returned 1 [0065.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", lpFilePart=0x0) returned 0x3c [0065.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log", lpFilePart=0x0) returned 0x3c [0065.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log.partially.cryptoNar", lpFilePart=0x0) returned 0x50 [0065.077] SetErrorMode (uMode=0x1) returned 0x0 [0065.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x293e48f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0065.077] SetErrorMode (uMode=0x0) returned 0x1 [0065.077] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USS.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\uss.log.partially.cryptonar")) returned 1 [0065.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", lpFilePart=0x0) returned 0x44 [0065.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", lpFilePart=0x0) returned 0x44 [0065.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", lpFilePart=0x0) returned 0x44 [0065.078] SetErrorMode (uMode=0x1) returned 0x0 [0065.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0065.078] GetFileType (hFile=0x230) returned 0x1 [0065.078] SetErrorMode (uMode=0x0) returned 0x1 [0065.078] GetFileType (hFile=0x230) returned 0x1 [0065.078] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0065.078] ReadFile (in: hFile=0x230, lpBuffer=0x2797928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2797928*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0065.084] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0065.084] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0065.085] WriteFile (in: hFile=0x230, lpBuffer=0x2797928*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2797928*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0065.085] CloseHandle (hObject=0x230) returned 1 [0066.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", lpFilePart=0x0) returned 0x44 [0066.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs", lpFilePart=0x0) returned 0x44 [0066.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs.partially.cryptoNar", lpFilePart=0x0) returned 0x58 [0066.872] SetErrorMode (uMode=0x1) returned 0x0 [0066.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x2a504604, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0066.872] SetErrorMode (uMode=0x0) returned 0x1 [0066.872] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00001.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00001.jrs.partially.cryptonar")) returned 1 [0066.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", lpFilePart=0x0) returned 0x44 [0066.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", lpFilePart=0x0) returned 0x44 [0066.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", lpFilePart=0x0) returned 0x44 [0066.873] SetErrorMode (uMode=0x1) returned 0x0 [0066.873] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0066.873] GetFileType (hFile=0x230) returned 0x1 [0066.873] SetErrorMode (uMode=0x0) returned 0x1 [0066.873] GetFileType (hFile=0x230) returned 0x1 [0066.873] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0066.873] ReadFile (in: hFile=0x230, lpBuffer=0x279af08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x279af08*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0066.875] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0066.876] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0066.876] WriteFile (in: hFile=0x230, lpBuffer=0x279af08*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x279af08*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0066.876] CloseHandle (hObject=0x230) returned 1 [0066.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", lpFilePart=0x0) returned 0x44 [0066.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs", lpFilePart=0x0) returned 0x44 [0066.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs.partially.cryptoNar", lpFilePart=0x0) returned 0x58 [0066.960] SetErrorMode (uMode=0x1) returned 0x0 [0066.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x2a5d79c4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0066.960] SetErrorMode (uMode=0x0) returned 0x1 [0066.960] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USSres00002.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\ussres00002.jrs.partially.cryptonar")) returned 1 [0066.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", lpFilePart=0x0) returned 0x3f [0066.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", lpFilePart=0x0) returned 0x3f [0066.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", lpFilePart=0x0) returned 0x3f [0066.961] SetErrorMode (uMode=0x1) returned 0x0 [0066.961] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0066.962] GetFileType (hFile=0x230) returned 0x1 [0066.962] SetErrorMode (uMode=0x0) returned 0x1 [0066.962] GetFileType (hFile=0x230) returned 0x1 [0066.962] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0066.962] ReadFile (in: hFile=0x230, lpBuffer=0x279e4a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x279e4a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0066.964] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0066.964] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0066.964] WriteFile (in: hFile=0x230, lpBuffer=0x279e4a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x279e4a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0066.964] CloseHandle (hObject=0x230) returned 1 [0067.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", lpFilePart=0x0) returned 0x3f [0067.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log", lpFilePart=0x0) returned 0x3f [0067.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log.partially.cryptoNar", lpFilePart=0x0) returned 0x53 [0067.101] SetErrorMode (uMode=0x1) returned 0x0 [0067.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe691c3cb, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe691c3cb, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x2a734fb8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0067.102] SetErrorMode (uMode=0x0) returned 0x1 [0067.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\comms\\unistoredb\\usstmp.log.partially.cryptonar")) returned 1 [0067.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x45 [0067.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x45 [0067.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x45 [0067.103] SetErrorMode (uMode=0x1) returned 0x0 [0067.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0067.103] GetFileType (hFile=0x230) returned 0x1 [0067.103] SetErrorMode (uMode=0x0) returned 0x1 [0067.103] GetFileType (hFile=0x230) returned 0x1 [0067.103] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.103] ReadFile (in: hFile=0x230, lpBuffer=0x27a19d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a19d0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0067.103] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.103] CloseHandle (hObject=0x230) returned 1 [0067.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x45 [0067.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x45 [0067.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run.partially.cryptoNar", lpFilePart=0x0) returned 0x59 [0067.103] SetErrorMode (uMode=0x1) returned 0x0 [0067.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\first run"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d75fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x710d75fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x710d75fa, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.104] SetErrorMode (uMode=0x0) returned 0x1 [0067.104] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\first run"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\First Run.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\first run.partially.cryptonar")) returned 1 [0067.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x47 [0067.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x47 [0067.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x47 [0067.105] SetErrorMode (uMode=0x1) returned 0x0 [0067.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0067.105] GetFileType (hFile=0x230) returned 0x1 [0067.105] SetErrorMode (uMode=0x0) returned 0x1 [0067.105] GetFileType (hFile=0x230) returned 0x1 [0067.105] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.105] ReadFile (in: hFile=0x230, lpBuffer=0x27a4b68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a4b68*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0067.178] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0067.178] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.178] WriteFile (in: hFile=0x230, lpBuffer=0x27a4b68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27a4b68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0067.178] CloseHandle (hObject=0x230) returned 1 [0067.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x47 [0067.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x47 [0067.197] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.partially.cryptoNar", lpFilePart=0x0) returned 0x5b [0067.197] SetErrorMode (uMode=0x1) returned 0x0 [0067.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\local state"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e95b22, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d1d076f, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2a807911, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12b26)) returned 1 [0067.197] SetErrorMode (uMode=0x0) returned 0x1 [0067.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\local state"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\local state.partially.cryptonar")) returned 1 [0067.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", lpFilePart=0x0) returned 0x4f [0067.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", lpFilePart=0x0) returned 0x4f [0067.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", lpFilePart=0x0) returned 0x4f [0067.198] SetErrorMode (uMode=0x1) returned 0x0 [0067.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0067.198] GetFileType (hFile=0x230) returned 0x1 [0067.198] SetErrorMode (uMode=0x0) returned 0x1 [0067.199] GetFileType (hFile=0x230) returned 0x1 [0067.199] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.199] ReadFile (in: hFile=0x230, lpBuffer=0x27a8138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a8138*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0067.247] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0067.247] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.247] WriteFile (in: hFile=0x230, lpBuffer=0x27a8138*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27a8138*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0067.248] CloseHandle (hObject=0x230) returned 1 [0067.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", lpFilePart=0x0) returned 0x4f [0067.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom", lpFilePart=0x0) returned 0x4f [0067.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0067.494] SetErrorMode (uMode=0x1) returned 0x0 [0067.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2aaf00b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d7e84)) returned 1 [0067.495] SetErrorMode (uMode=0x0) returned 0x1 [0067.495] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom.partially.cryptonar")) returned 1 [0067.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", lpFilePart=0x0) returned 0x5a [0067.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", lpFilePart=0x0) returned 0x5a [0067.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", lpFilePart=0x0) returned 0x5a [0067.496] SetErrorMode (uMode=0x1) returned 0x0 [0067.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom prefix set"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0067.597] GetFileType (hFile=0x230) returned 0x1 [0067.597] SetErrorMode (uMode=0x0) returned 0x1 [0067.597] GetFileType (hFile=0x230) returned 0x1 [0067.597] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.597] ReadFile (in: hFile=0x230, lpBuffer=0x27ab7e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ab7e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0067.627] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0067.627] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.627] WriteFile (in: hFile=0x230, lpBuffer=0x27ab7e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ab7e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0067.627] CloseHandle (hObject=0x230) returned 1 [0067.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", lpFilePart=0x0) returned 0x5a [0067.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set", lpFilePart=0x0) returned 0x5a [0067.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0067.684] SetErrorMode (uMode=0x1) returned 0x0 [0067.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom prefix set"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x988edcb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x988edcb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2aca65a9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xac14c)) returned 1 [0067.685] SetErrorMode (uMode=0x0) returned 0x1 [0067.685] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom prefix set"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Bloom Prefix Set.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing bloom prefix set.partially.cryptonar")) returned 1 [0067.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x55 [0067.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x55 [0067.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x55 [0067.685] SetErrorMode (uMode=0x1) returned 0x0 [0067.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0067.686] GetFileType (hFile=0x230) returned 0x1 [0067.686] SetErrorMode (uMode=0x0) returned 0x1 [0067.687] GetFileType (hFile=0x230) returned 0x1 [0067.687] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.687] ReadFile (in: hFile=0x230, lpBuffer=0x27aeef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27aeef0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0067.744] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0067.745] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.745] WriteFile (in: hFile=0x230, lpBuffer=0x27aeef0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27aeef0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0067.745] CloseHandle (hObject=0x230) returned 1 [0067.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x55 [0067.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs", lpFilePart=0x0) returned 0x55 [0067.891] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs.partially.cryptoNar", lpFilePart=0x0) returned 0x69 [0067.891] SetErrorMode (uMode=0x1) returned 0x0 [0067.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77556505, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77556505, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2aebd2d7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0067.891] SetErrorMode (uMode=0x0) returned 0x1 [0067.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids.partially.cryptonar")) returned 1 [0067.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", lpFilePart=0x0) returned 0x5d [0067.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", lpFilePart=0x0) returned 0x5d [0067.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", lpFilePart=0x0) returned 0x5d [0067.892] SetErrorMode (uMode=0x1) returned 0x0 [0067.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0067.893] GetFileType (hFile=0x230) returned 0x1 [0067.893] SetErrorMode (uMode=0x0) returned 0x1 [0067.893] GetFileType (hFile=0x230) returned 0x1 [0067.893] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.893] ReadFile (in: hFile=0x230, lpBuffer=0x27b2620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b2620*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0067.893] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.893] CloseHandle (hObject=0x230) returned 1 [0067.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", lpFilePart=0x0) returned 0x5d [0067.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal", lpFilePart=0x0) returned 0x5d [0067.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x71 [0067.893] SetErrorMode (uMode=0x1) returned 0x0 [0067.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77558c33, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77558c33, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9aee64bb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.893] SetErrorMode (uMode=0x0) returned 0x1 [0067.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal.partially.cryptonar")) returned 1 [0067.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x51 [0067.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x51 [0067.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x51 [0067.894] SetErrorMode (uMode=0x1) returned 0x0 [0067.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0067.895] GetFileType (hFile=0x230) returned 0x1 [0067.895] SetErrorMode (uMode=0x0) returned 0x1 [0067.895] GetFileType (hFile=0x230) returned 0x1 [0067.895] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0067.895] ReadFile (in: hFile=0x230, lpBuffer=0x27b5950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b5950*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0068.104] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0068.104] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.104] WriteFile (in: hFile=0x230, lpBuffer=0x27b5950*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b5950*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0068.104] CloseHandle (hObject=0x230) returned 1 [0068.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x51 [0068.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies", lpFilePart=0x0) returned 0x51 [0068.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies.partially.cryptoNar", lpFilePart=0x0) returned 0x65 [0068.138] SetErrorMode (uMode=0x1) returned 0x0 [0068.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fac071, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76fac071, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b0f8650, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0068.138] SetErrorMode (uMode=0x0) returned 0x1 [0068.138] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies.partially.cryptonar")) returned 1 [0068.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", lpFilePart=0x0) returned 0x59 [0068.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", lpFilePart=0x0) returned 0x59 [0068.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", lpFilePart=0x0) returned 0x59 [0068.139] SetErrorMode (uMode=0x1) returned 0x0 [0068.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.139] GetFileType (hFile=0x230) returned 0x1 [0068.140] SetErrorMode (uMode=0x0) returned 0x1 [0068.140] GetFileType (hFile=0x230) returned 0x1 [0068.140] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.140] ReadFile (in: hFile=0x230, lpBuffer=0x27b9028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b9028*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0068.140] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.140] CloseHandle (hObject=0x230) returned 1 [0068.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", lpFilePart=0x0) returned 0x59 [0068.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal", lpFilePart=0x0) returned 0x59 [0068.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0068.141] SetErrorMode (uMode=0x1) returned 0x0 [0068.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76fae7ac, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76fae7ac, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9aec0279, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.141] SetErrorMode (uMode=0x0) returned 0x1 [0068.141] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal.partially.cryptonar")) returned 1 [0068.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", lpFilePart=0x0) returned 0x57 [0068.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", lpFilePart=0x0) returned 0x57 [0068.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", lpFilePart=0x0) returned 0x57 [0068.142] SetErrorMode (uMode=0x1) returned 0x0 [0068.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing csd whitelist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.143] GetFileType (hFile=0x230) returned 0x1 [0068.143] SetErrorMode (uMode=0x0) returned 0x1 [0068.143] GetFileType (hFile=0x230) returned 0x1 [0068.143] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.143] ReadFile (in: hFile=0x230, lpBuffer=0x27bc350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27bc350*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0068.155] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0068.159] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.159] WriteFile (in: hFile=0x230, lpBuffer=0x27bc350*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27bc350*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0068.159] CloseHandle (hObject=0x230) returned 1 [0068.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", lpFilePart=0x0) returned 0x57 [0068.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist", lpFilePart=0x0) returned 0x57 [0068.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0068.261] SetErrorMode (uMode=0x1) returned 0x0 [0068.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing csd whitelist"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b23098b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x370f4)) returned 1 [0068.262] SetErrorMode (uMode=0x0) returned 0x1 [0068.262] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing csd whitelist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Csd Whitelist.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing csd whitelist.partially.cryptonar")) returned 1 [0068.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", lpFilePart=0x0) returned 0x52 [0068.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", lpFilePart=0x0) returned 0x52 [0068.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", lpFilePart=0x0) returned 0x52 [0068.267] SetErrorMode (uMode=0x1) returned 0x0 [0068.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.268] GetFileType (hFile=0x230) returned 0x1 [0068.268] SetErrorMode (uMode=0x0) returned 0x1 [0068.268] GetFileType (hFile=0x230) returned 0x1 [0068.268] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.269] ReadFile (in: hFile=0x230, lpBuffer=0x27bfa08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27bfa08*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0068.285] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0068.286] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.286] WriteFile (in: hFile=0x230, lpBuffer=0x27bfa08*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27bfa08*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0068.286] CloseHandle (hObject=0x230) returned 1 [0068.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", lpFilePart=0x0) returned 0x52 [0068.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download", lpFilePart=0x0) returned 0x52 [0068.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0068.391] SetErrorMode (uMode=0x1) returned 0x0 [0068.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b382a48, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x41ed4)) returned 1 [0068.391] SetErrorMode (uMode=0x0) returned 0x1 [0068.392] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download.partially.cryptonar")) returned 1 [0068.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", lpFilePart=0x0) returned 0x5c [0068.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", lpFilePart=0x0) returned 0x5c [0068.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", lpFilePart=0x0) returned 0x5c [0068.392] SetErrorMode (uMode=0x1) returned 0x0 [0068.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download whitelist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.393] GetFileType (hFile=0x230) returned 0x1 [0068.393] SetErrorMode (uMode=0x0) returned 0x1 [0068.393] GetFileType (hFile=0x230) returned 0x1 [0068.393] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.393] ReadFile (in: hFile=0x230, lpBuffer=0x27c3108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c3108*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0068.411] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0068.411] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.411] WriteFile (in: hFile=0x230, lpBuffer=0x27c3108*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c3108*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0068.413] CloseHandle (hObject=0x230) returned 1 [0068.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", lpFilePart=0x0) returned 0x5c [0068.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist", lpFilePart=0x0) returned 0x5c [0068.463] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist.partially.cryptoNar", lpFilePart=0x0) returned 0x70 [0068.463] SetErrorMode (uMode=0x1) returned 0x0 [0068.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download whitelist"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b419866, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x55ac)) returned 1 [0068.463] SetErrorMode (uMode=0x0) returned 0x1 [0068.463] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download whitelist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Download Whitelist.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing download whitelist.partially.cryptonar")) returned 1 [0068.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", lpFilePart=0x0) returned 0x5d [0068.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", lpFilePart=0x0) returned 0x5d [0068.464] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", lpFilePart=0x0) returned 0x5d [0068.464] SetErrorMode (uMode=0x1) returned 0x0 [0068.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing extension blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.465] GetFileType (hFile=0x230) returned 0x1 [0068.465] SetErrorMode (uMode=0x0) returned 0x1 [0068.465] GetFileType (hFile=0x230) returned 0x1 [0068.465] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.465] ReadFile (in: hFile=0x230, lpBuffer=0x27c6898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c6898*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0068.658] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0068.658] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.659] WriteFile (in: hFile=0x230, lpBuffer=0x27c6898*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c6898*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0068.659] CloseHandle (hObject=0x230) returned 1 [0068.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", lpFilePart=0x0) returned 0x5d [0068.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist", lpFilePart=0x0) returned 0x5d [0068.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist.partially.cryptoNar", lpFilePart=0x0) returned 0x71 [0068.712] SetErrorMode (uMode=0x1) returned 0x0 [0068.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing extension blacklist"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b67bfd7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17048)) returned 1 [0068.713] SetErrorMode (uMode=0x0) returned 0x1 [0068.713] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing extension blacklist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Extension Blacklist.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing extension blacklist.partially.cryptonar")) returned 1 [0068.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", lpFilePart=0x0) returned 0x56 [0068.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", lpFilePart=0x0) returned 0x56 [0068.714] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", lpFilePart=0x0) returned 0x56 [0068.714] SetErrorMode (uMode=0x1) returned 0x0 [0068.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing ip blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.716] GetFileType (hFile=0x230) returned 0x1 [0068.716] SetErrorMode (uMode=0x0) returned 0x1 [0068.716] GetFileType (hFile=0x230) returned 0x1 [0068.716] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.716] ReadFile (in: hFile=0x230, lpBuffer=0x27c9fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c9fd8*, lpNumberOfBytesRead=0x5ae8b8*=0x70, lpOverlapped=0x0) returned 1 [0068.717] ReadFile (in: hFile=0x230, lpBuffer=0x27c9fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c9fd8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0068.717] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.717] WriteFile (in: hFile=0x230, lpBuffer=0x27c9fd8*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c9fd8*, lpNumberOfBytesWritten=0x5ae8a8*=0x70, lpOverlapped=0x0) returned 1 [0068.717] CloseHandle (hObject=0x230) returned 1 [0068.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", lpFilePart=0x0) returned 0x56 [0068.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist", lpFilePart=0x0) returned 0x56 [0068.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0068.720] SetErrorMode (uMode=0x1) returned 0x0 [0068.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing ip blacklist"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b6a298d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0068.720] SetErrorMode (uMode=0x0) returned 0x1 [0068.720] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing ip blacklist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing IP Blacklist.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing ip blacklist.partially.cryptonar")) returned 1 [0068.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", lpFilePart=0x0) returned 0x5a [0068.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", lpFilePart=0x0) returned 0x5a [0068.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", lpFilePart=0x0) returned 0x5a [0068.721] SetErrorMode (uMode=0x1) returned 0x0 [0068.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing module whitelist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.722] GetFileType (hFile=0x230) returned 0x1 [0068.722] SetErrorMode (uMode=0x0) returned 0x1 [0068.722] GetFileType (hFile=0x230) returned 0x1 [0068.722] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.722] ReadFile (in: hFile=0x230, lpBuffer=0x27cd3d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27cd3d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0068.764] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0068.764] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.764] WriteFile (in: hFile=0x230, lpBuffer=0x27cd3d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27cd3d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0068.765] CloseHandle (hObject=0x230) returned 1 [0068.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", lpFilePart=0x0) returned 0x5a [0068.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist", lpFilePart=0x0) returned 0x5a [0068.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0068.770] SetErrorMode (uMode=0x1) returned 0x0 [0068.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing module whitelist"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b7145f3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8f4)) returned 1 [0068.770] SetErrorMode (uMode=0x0) returned 0x1 [0068.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing module whitelist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Module Whitelist.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing module whitelist.partially.cryptonar")) returned 1 [0068.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", lpFilePart=0x0) returned 0x5c [0068.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", lpFilePart=0x0) returned 0x5c [0068.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", lpFilePart=0x0) returned 0x5c [0068.771] SetErrorMode (uMode=0x1) returned 0x0 [0068.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing resource blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.771] GetFileType (hFile=0x230) returned 0x1 [0068.771] SetErrorMode (uMode=0x0) returned 0x1 [0068.772] GetFileType (hFile=0x230) returned 0x1 [0068.772] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.772] ReadFile (in: hFile=0x230, lpBuffer=0x27d0b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d0b38*, lpNumberOfBytesRead=0x5ae8b8*=0x544, lpOverlapped=0x0) returned 1 [0068.773] SetFilePointer (in: hFile=0x230, lDistanceToMove=-324, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0068.773] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.773] WriteFile (in: hFile=0x230, lpBuffer=0x27d0b38*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27d0b38*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0068.773] CloseHandle (hObject=0x230) returned 1 [0068.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", lpFilePart=0x0) returned 0x5c [0068.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist", lpFilePart=0x0) returned 0x5c [0068.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist.partially.cryptoNar", lpFilePart=0x0) returned 0x70 [0068.774] SetErrorMode (uMode=0x1) returned 0x0 [0068.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing resource blacklist"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b7145f3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x544)) returned 1 [0068.774] SetErrorMode (uMode=0x0) returned 0x1 [0068.774] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing resource blacklist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Resource Blacklist.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing resource blacklist.partially.cryptonar")) returned 1 [0068.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", lpFilePart=0x0) returned 0x52 [0068.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", lpFilePart=0x0) returned 0x52 [0068.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", lpFilePart=0x0) returned 0x52 [0068.775] SetErrorMode (uMode=0x1) returned 0x0 [0068.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.775] GetFileType (hFile=0x230) returned 0x1 [0068.775] SetErrorMode (uMode=0x0) returned 0x1 [0068.775] GetFileType (hFile=0x230) returned 0x1 [0068.775] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.775] ReadFile (in: hFile=0x230, lpBuffer=0x27d4250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d4250*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0068.786] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0068.786] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.786] WriteFile (in: hFile=0x230, lpBuffer=0x27d4250*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27d4250*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0068.786] CloseHandle (hObject=0x230) returned 1 [0068.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", lpFilePart=0x0) returned 0x52 [0068.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List", lpFilePart=0x0) returned 0x52 [0068.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0068.831] SetErrorMode (uMode=0x1) returned 0x0 [0068.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ca9616, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x96ca9616, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b7b34c6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x96c54)) returned 1 [0068.831] SetErrorMode (uMode=0x0) returned 0x1 [0068.831] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list.partially.cryptonar")) returned 1 [0068.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", lpFilePart=0x0) returned 0x5d [0068.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", lpFilePart=0x0) returned 0x5d [0068.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", lpFilePart=0x0) returned 0x5d [0068.832] SetErrorMode (uMode=0x1) returned 0x0 [0068.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list prefix set"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.832] GetFileType (hFile=0x230) returned 0x1 [0068.832] SetErrorMode (uMode=0x0) returned 0x1 [0068.832] GetFileType (hFile=0x230) returned 0x1 [0068.832] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.832] ReadFile (in: hFile=0x230, lpBuffer=0x27d7950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d7950*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0068.834] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0068.834] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.834] WriteFile (in: hFile=0x230, lpBuffer=0x27d7950*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27d7950*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0068.835] CloseHandle (hObject=0x230) returned 1 [0068.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", lpFilePart=0x0) returned 0x5d [0068.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set", lpFilePart=0x0) returned 0x5d [0068.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set.partially.cryptoNar", lpFilePart=0x0) returned 0x71 [0068.839] SetErrorMode (uMode=0x1) returned 0x0 [0068.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list prefix set"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989d2afc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x989d2afc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b7b34c6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c942)) returned 1 [0068.839] SetErrorMode (uMode=0x0) returned 0x1 [0068.839] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list prefix set"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing UwS List Prefix Set.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\safe browsing uws list prefix set.partially.cryptonar")) returned 1 [0068.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x4d [0068.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x4d [0068.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x4d [0068.840] SetErrorMode (uMode=0x1) returned 0x0 [0068.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.842] GetFileType (hFile=0x230) returned 0x1 [0068.842] SetErrorMode (uMode=0x0) returned 0x1 [0068.842] GetFileType (hFile=0x230) returned 0x1 [0068.842] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.842] ReadFile (in: hFile=0x230, lpBuffer=0x27db020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27db020*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0068.842] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.842] CloseHandle (hObject=0x230) returned 1 [0068.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x4d [0068.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x4d [0068.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0068.842] SetErrorMode (uMode=0x1) returned 0x0 [0068.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70216cdc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x70216cdc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x70216cdc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.842] SetErrorMode (uMode=0x0) returned 0x1 [0068.842] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata.partially.cryptonar")) returned 1 [0068.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x51 [0068.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x51 [0068.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x51 [0068.843] SetErrorMode (uMode=0x1) returned 0x0 [0068.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.850] GetFileType (hFile=0x230) returned 0x1 [0068.850] SetErrorMode (uMode=0x0) returned 0x1 [0068.850] GetFileType (hFile=0x230) returned 0x1 [0068.850] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.850] ReadFile (in: hFile=0x230, lpBuffer=0x27de2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27de2c8*, lpNumberOfBytesRead=0x5ae8b8*=0x28, lpOverlapped=0x0) returned 1 [0068.851] ReadFile (in: hFile=0x230, lpBuffer=0x27de2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27de2c8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0068.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.851] WriteFile (in: hFile=0x230, lpBuffer=0x27de2c8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27de2c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x28, lpOverlapped=0x0) returned 1 [0068.851] CloseHandle (hObject=0x230) returned 1 [0068.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x51 [0068.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x51 [0068.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x65 [0068.852] SetErrorMode (uMode=0x1) returned 0x0 [0068.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70216cdc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x70216cdc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b7d3289, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0068.852] SetErrorMode (uMode=0x0) returned 0x1 [0068.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat.partially.cryptonar")) returned 1 [0068.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x4b [0068.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x4b [0068.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x4b [0068.852] SetErrorMode (uMode=0x1) returned 0x0 [0068.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.853] GetFileType (hFile=0x230) returned 0x1 [0068.853] SetErrorMode (uMode=0x0) returned 0x1 [0068.853] GetFileType (hFile=0x230) returned 0x1 [0068.853] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.853] ReadFile (in: hFile=0x230, lpBuffer=0x27e1550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e1550*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0068.855] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0068.855] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.855] WriteFile (in: hFile=0x230, lpBuffer=0x27e1550*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e1550*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0068.855] CloseHandle (hObject=0x230) returned 1 [0068.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x4b [0068.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x4b [0068.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.partially.cryptoNar", lpFilePart=0x0) returned 0x5f [0068.856] SetErrorMode (uMode=0x1) returned 0x0 [0068.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aca3f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aca3f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2b7d3289, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3400)) returned 1 [0068.857] SetErrorMode (uMode=0x0) returned 0x1 [0068.857] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies.partially.cryptonar")) returned 1 [0068.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0068.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0068.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0068.857] SetErrorMode (uMode=0x1) returned 0x0 [0068.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.858] GetFileType (hFile=0x230) returned 0x1 [0068.858] SetErrorMode (uMode=0x0) returned 0x1 [0068.858] GetFileType (hFile=0x230) returned 0x1 [0068.858] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.858] ReadFile (in: hFile=0x230, lpBuffer=0x27e4b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e4b58*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0068.858] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.858] CloseHandle (hObject=0x230) returned 1 [0068.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0068.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x53 [0068.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x67 [0068.858] SetErrorMode (uMode=0x1) returned 0x0 [0068.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728af09a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728af09a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d3c05cd, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0068.859] SetErrorMode (uMode=0x0) returned 0x1 [0068.859] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal.partially.cryptonar")) returned 1 [0068.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x53 [0068.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x53 [0068.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x53 [0068.860] SetErrorMode (uMode=0x1) returned 0x0 [0068.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0068.860] GetFileType (hFile=0x230) returned 0x1 [0068.860] SetErrorMode (uMode=0x0) returned 0x1 [0068.860] GetFileType (hFile=0x230) returned 0x1 [0068.860] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.860] ReadFile (in: hFile=0x230, lpBuffer=0x27e7dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e7dd8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0068.913] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0068.913] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0068.913] WriteFile (in: hFile=0x230, lpBuffer=0x27e7dd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e7dd8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0068.913] CloseHandle (hObject=0x230) returned 1 [0068.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x53 [0068.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x53 [0068.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.partially.cryptoNar", lpFilePart=0x0) returned 0x67 [0068.998] SetErrorMode (uMode=0x1) returned 0x0 [0068.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current session"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727f57a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x763f61d1, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2b92a7cc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3892)) returned 1 [0068.998] SetErrorMode (uMode=0x0) returned 0x1 [0068.998] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current session.partially.cryptonar")) returned 1 [0068.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x50 [0068.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x50 [0068.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x50 [0068.999] SetErrorMode (uMode=0x1) returned 0x0 [0068.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.000] GetFileType (hFile=0x230) returned 0x1 [0069.000] SetErrorMode (uMode=0x0) returned 0x1 [0069.000] GetFileType (hFile=0x230) returned 0x1 [0069.000] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.000] ReadFile (in: hFile=0x230, lpBuffer=0x27eb440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27eb440*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.071] WriteFile (in: hFile=0x230, lpBuffer=0x27eb440*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27eb440*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.072] CloseHandle (hObject=0x230) returned 1 [0069.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x50 [0069.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x50 [0069.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0069.074] SetErrorMode (uMode=0x1) returned 0x0 [0069.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e321e2f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7688ee7e, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2b9e9416, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3101)) returned 1 [0069.074] SetErrorMode (uMode=0x0) returned 0x1 [0069.074] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\current tabs.partially.cryptonar")) returned 1 [0069.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x4c [0069.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x4c [0069.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x4c [0069.075] SetErrorMode (uMode=0x1) returned 0x0 [0069.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.076] GetFileType (hFile=0x230) returned 0x1 [0069.076] SetErrorMode (uMode=0x0) returned 0x1 [0069.076] GetFileType (hFile=0x230) returned 0x1 [0069.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.076] ReadFile (in: hFile=0x230, lpBuffer=0x27eea80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27eea80*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.086] WriteFile (in: hFile=0x230, lpBuffer=0x27eea80*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27eea80*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.087] CloseHandle (hObject=0x230) returned 1 [0069.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x4c [0069.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x4c [0069.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.partially.cryptoNar", lpFilePart=0x0) returned 0x60 [0069.089] SetErrorMode (uMode=0x1) returned 0x0 [0069.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716f3653, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x716f3653, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ba10a98, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0069.089] SetErrorMode (uMode=0x0) returned 0x1 [0069.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons.partially.cryptonar")) returned 1 [0069.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x54 [0069.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x54 [0069.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x54 [0069.090] SetErrorMode (uMode=0x1) returned 0x0 [0069.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.091] GetFileType (hFile=0x230) returned 0x1 [0069.091] SetErrorMode (uMode=0x0) returned 0x1 [0069.091] GetFileType (hFile=0x230) returned 0x1 [0069.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.091] ReadFile (in: hFile=0x230, lpBuffer=0x27f20e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f20e0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0069.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.091] CloseHandle (hObject=0x230) returned 1 [0069.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x54 [0069.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x54 [0069.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x68 [0069.091] SetErrorMode (uMode=0x1) returned 0x0 [0069.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716f3653, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x716f3653, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c113e96, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.091] SetErrorMode (uMode=0x0) returned 0x1 [0069.092] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal.partially.cryptonar")) returned 1 [0069.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x56 [0069.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x56 [0069.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x56 [0069.092] SetErrorMode (uMode=0x1) returned 0x0 [0069.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.093] GetFileType (hFile=0x230) returned 0x1 [0069.093] SetErrorMode (uMode=0x0) returned 0x1 [0069.093] GetFileType (hFile=0x230) returned 0x1 [0069.093] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.093] ReadFile (in: hFile=0x230, lpBuffer=0x27f5408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f5408*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.134] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.135] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.135] WriteFile (in: hFile=0x230, lpBuffer=0x27f5408*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f5408*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.135] CloseHandle (hObject=0x230) returned 1 [0069.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x56 [0069.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x56 [0069.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0069.163] SetErrorMode (uMode=0x1) returned 0x0 [0069.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717198be, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x717198be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bace216, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9)) returned 1 [0069.163] SetErrorMode (uMode=0x0) returned 0x1 [0069.163] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico.partially.cryptonar")) returned 1 [0069.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x4b [0069.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x4b [0069.164] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x4b [0069.164] SetErrorMode (uMode=0x1) returned 0x0 [0069.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.165] GetFileType (hFile=0x230) returned 0x1 [0069.165] SetErrorMode (uMode=0x0) returned 0x1 [0069.165] GetFileType (hFile=0x230) returned 0x1 [0069.165] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.165] ReadFile (in: hFile=0x230, lpBuffer=0x27f8a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f8a50*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.184] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.184] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.184] WriteFile (in: hFile=0x230, lpBuffer=0x27f8a50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f8a50*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.185] CloseHandle (hObject=0x230) returned 1 [0069.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x4b [0069.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x4b [0069.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.partially.cryptoNar", lpFilePart=0x0) returned 0x5f [0069.188] SetErrorMode (uMode=0x1) returned 0x0 [0069.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713d24f3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x713d24f3, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bb1cb3b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19000)) returned 1 [0069.189] SetErrorMode (uMode=0x0) returned 0x1 [0069.189] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history.partially.cryptonar")) returned 1 [0069.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x5a [0069.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x5a [0069.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x5a [0069.189] SetErrorMode (uMode=0x1) returned 0x0 [0069.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.191] GetFileType (hFile=0x230) returned 0x1 [0069.191] SetErrorMode (uMode=0x0) returned 0x1 [0069.191] GetFileType (hFile=0x230) returned 0x1 [0069.191] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.191] ReadFile (in: hFile=0x230, lpBuffer=0x27fc0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27fc0a8*, lpNumberOfBytesRead=0x5ae8b8*=0x584, lpOverlapped=0x0) returned 1 [0069.192] SetFilePointer (in: hFile=0x230, lDistanceToMove=-388, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.192] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.192] WriteFile (in: hFile=0x230, lpBuffer=0x27fc0a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27fc0a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.193] CloseHandle (hObject=0x230) returned 1 [0069.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x5a [0069.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x5a [0069.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0069.193] SetErrorMode (uMode=0x1) returned 0x0 [0069.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab0663f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb65a824a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bb1cb3b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x584)) returned 1 [0069.194] SetErrorMode (uMode=0x0) returned 0x1 [0069.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache.partially.cryptonar")) returned 1 [0069.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x53 [0069.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x53 [0069.194] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x53 [0069.194] SetErrorMode (uMode=0x1) returned 0x0 [0069.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.195] GetFileType (hFile=0x230) returned 0x1 [0069.195] SetErrorMode (uMode=0x0) returned 0x1 [0069.195] GetFileType (hFile=0x230) returned 0x1 [0069.195] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.195] ReadFile (in: hFile=0x230, lpBuffer=0x27ff770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ff770*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.299] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.299] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.299] WriteFile (in: hFile=0x230, lpBuffer=0x27ff770*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ff770*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.300] CloseHandle (hObject=0x230) returned 1 [0069.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x53 [0069.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x53 [0069.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x67 [0069.308] SetErrorMode (uMode=0x1) returned 0x0 [0069.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x713d24f3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x713d24f3, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bc25a02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0069.309] SetErrorMode (uMode=0x0) returned 0x1 [0069.309] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\history-journal.partially.cryptonar")) returned 1 [0069.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x50 [0069.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x50 [0069.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x50 [0069.310] SetErrorMode (uMode=0x1) returned 0x0 [0069.310] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.310] GetFileType (hFile=0x230) returned 0x1 [0069.311] SetErrorMode (uMode=0x0) returned 0x1 [0069.311] GetFileType (hFile=0x230) returned 0x1 [0069.311] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.311] ReadFile (in: hFile=0x230, lpBuffer=0x2802dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2802dd8*, lpNumberOfBytesRead=0x5ae8b8*=0xd1, lpOverlapped=0x0) returned 1 [0069.312] ReadFile (in: hFile=0x230, lpBuffer=0x2802dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2802dd8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0069.312] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.312] WriteFile (in: hFile=0x230, lpBuffer=0x2802dd8*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2802dd8*, lpNumberOfBytesWritten=0x5ae8a8*=0xd1, lpOverlapped=0x0) returned 1 [0069.312] CloseHandle (hObject=0x230) returned 1 [0069.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x50 [0069.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x50 [0069.313] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0069.313] SetErrorMode (uMode=0x1) returned 0x0 [0069.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last session"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727f57a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xc02a2c3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bc4b895, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0069.313] SetErrorMode (uMode=0x0) returned 0x1 [0069.313] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last session.partially.cryptonar")) returned 1 [0069.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x4d [0069.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x4d [0069.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x4d [0069.314] SetErrorMode (uMode=0x1) returned 0x0 [0069.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.315] GetFileType (hFile=0x230) returned 0x1 [0069.315] SetErrorMode (uMode=0x0) returned 0x1 [0069.315] GetFileType (hFile=0x230) returned 0x1 [0069.315] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.315] ReadFile (in: hFile=0x230, lpBuffer=0x28061e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28061e0*, lpNumberOfBytesRead=0x5ae8b8*=0x8, lpOverlapped=0x0) returned 1 [0069.316] ReadFile (in: hFile=0x230, lpBuffer=0x28061e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28061e0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0069.316] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.316] WriteFile (in: hFile=0x230, lpBuffer=0x28061e0*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28061e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x8, lpOverlapped=0x0) returned 1 [0069.316] CloseHandle (hObject=0x230) returned 1 [0069.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x4d [0069.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x4d [0069.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0069.317] SetErrorMode (uMode=0x1) returned 0x0 [0069.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e321e2f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8c167ef, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bc4b895, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8)) returned 1 [0069.317] SetErrorMode (uMode=0x0) returned 0x1 [0069.317] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\last tabs.partially.cryptonar")) returned 1 [0069.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4e [0069.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4e [0069.318] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4e [0069.318] SetErrorMode (uMode=0x1) returned 0x0 [0069.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.318] GetFileType (hFile=0x230) returned 0x1 [0069.318] SetErrorMode (uMode=0x0) returned 0x1 [0069.319] GetFileType (hFile=0x230) returned 0x1 [0069.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.319] ReadFile (in: hFile=0x230, lpBuffer=0x2809418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2809418*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.340] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.340] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.340] WriteFile (in: hFile=0x230, lpBuffer=0x2809418*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2809418*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.340] CloseHandle (hObject=0x230) returned 1 [0069.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4e [0069.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x4e [0069.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.partially.cryptoNar", lpFilePart=0x0) returned 0x62 [0069.343] SetErrorMode (uMode=0x1) returned 0x0 [0069.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ed6d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x712ed6d5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bc71b8e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0069.343] SetErrorMode (uMode=0x0) returned 0x1 [0069.343] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data.partially.cryptonar")) returned 1 [0069.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x56 [0069.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x56 [0069.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x56 [0069.344] SetErrorMode (uMode=0x1) returned 0x0 [0069.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.345] GetFileType (hFile=0x230) returned 0x1 [0069.345] SetErrorMode (uMode=0x0) returned 0x1 [0069.345] GetFileType (hFile=0x230) returned 0x1 [0069.345] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.345] ReadFile (in: hFile=0x230, lpBuffer=0x280ca78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x280ca78*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0069.345] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.345] CloseHandle (hObject=0x230) returned 1 [0069.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x56 [0069.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x56 [0069.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0069.345] SetErrorMode (uMode=0x1) returned 0x0 [0069.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712ed6d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x712ed6d5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74e598ca, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.345] SetErrorMode (uMode=0x0) returned 0x1 [0069.345] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal.partially.cryptonar")) returned 1 [0069.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x5c [0069.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x5c [0069.346] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x5c [0069.346] SetErrorMode (uMode=0x1) returned 0x0 [0069.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.347] GetFileType (hFile=0x230) returned 0x1 [0069.347] SetErrorMode (uMode=0x0) returned 0x1 [0069.347] GetFileType (hFile=0x230) returned 0x1 [0069.347] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.347] ReadFile (in: hFile=0x230, lpBuffer=0x280fda0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x280fda0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.368] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.368] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.368] WriteFile (in: hFile=0x230, lpBuffer=0x280fda0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x280fda0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.368] CloseHandle (hObject=0x230) returned 1 [0069.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x5c [0069.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x5c [0069.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.partially.cryptoNar", lpFilePart=0x0) returned 0x70 [0069.385] SetErrorMode (uMode=0x1) returned 0x0 [0069.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718e34f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x718e34f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bcfdff1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0069.385] SetErrorMode (uMode=0x0) returned 0x1 [0069.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor.partially.cryptonar")) returned 1 [0069.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x64 [0069.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x64 [0069.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x64 [0069.386] SetErrorMode (uMode=0x1) returned 0x0 [0069.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.387] GetFileType (hFile=0x230) returned 0x1 [0069.387] SetErrorMode (uMode=0x0) returned 0x1 [0069.387] GetFileType (hFile=0x230) returned 0x1 [0069.387] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.387] ReadFile (in: hFile=0x230, lpBuffer=0x2813560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2813560*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0069.387] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.387] CloseHandle (hObject=0x230) returned 1 [0069.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x64 [0069.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x64 [0069.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x78 [0069.387] SetErrorMode (uMode=0x1) returned 0x0 [0069.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718e34f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x718e34f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb6e34138, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.387] SetErrorMode (uMode=0x0) returned 0x1 [0069.387] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal.partially.cryptonar")) returned 1 [0069.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", lpFilePart=0x0) returned 0x5c [0069.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", lpFilePart=0x0) returned 0x5c [0069.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", lpFilePart=0x0) returned 0x5c [0069.388] SetErrorMode (uMode=0x1) returned 0x0 [0069.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.388] GetFileType (hFile=0x230) returned 0x1 [0069.388] SetErrorMode (uMode=0x0) returned 0x1 [0069.388] GetFileType (hFile=0x230) returned 0x1 [0069.388] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.388] ReadFile (in: hFile=0x230, lpBuffer=0x2816948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2816948*, lpNumberOfBytesRead=0x5ae8b8*=0x28, lpOverlapped=0x0) returned 1 [0069.389] ReadFile (in: hFile=0x230, lpBuffer=0x2816948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2816948*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0069.389] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.389] WriteFile (in: hFile=0x230, lpBuffer=0x2816948*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2816948*, lpNumberOfBytesWritten=0x5ae8a8*=0x28, lpOverlapped=0x0) returned 1 [0069.389] CloseHandle (hObject=0x230) returned 1 [0069.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", lpFilePart=0x0) returned 0x5c [0069.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State", lpFilePart=0x0) returned 0x5c [0069.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.partially.cryptoNar", lpFilePart=0x0) returned 0x70 [0069.390] SetErrorMode (uMode=0x1) returned 0x0 [0069.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77381881, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac2154a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2bd0a93e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0069.390] SetErrorMode (uMode=0x0) returned 0x1 [0069.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state.partially.cryptonar")) returned 1 [0069.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x56 [0069.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x56 [0069.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x56 [0069.391] SetErrorMode (uMode=0x1) returned 0x0 [0069.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.392] GetFileType (hFile=0x230) returned 0x1 [0069.392] SetErrorMode (uMode=0x0) returned 0x1 [0069.392] GetFileType (hFile=0x230) returned 0x1 [0069.392] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.392] ReadFile (in: hFile=0x230, lpBuffer=0x2819cd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2819cd0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.417] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.417] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.418] WriteFile (in: hFile=0x230, lpBuffer=0x2819cd0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2819cd0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.418] CloseHandle (hObject=0x230) returned 1 [0069.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x56 [0069.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x56 [0069.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0069.419] SetErrorMode (uMode=0x1) returned 0x0 [0069.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7209626a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7209626a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bd324f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0069.419] SetErrorMode (uMode=0x0) returned 0x1 [0069.419] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs.partially.cryptonar")) returned 1 [0069.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x5e [0069.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x5e [0069.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x5e [0069.421] SetErrorMode (uMode=0x1) returned 0x0 [0069.421] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.422] GetFileType (hFile=0x230) returned 0x1 [0069.422] SetErrorMode (uMode=0x0) returned 0x1 [0069.422] GetFileType (hFile=0x230) returned 0x1 [0069.422] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.422] ReadFile (in: hFile=0x230, lpBuffer=0x281d3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x281d3e0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0069.422] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.422] CloseHandle (hObject=0x230) returned 1 [0069.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x5e [0069.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x5e [0069.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x72 [0069.422] SetErrorMode (uMode=0x1) returned 0x0 [0069.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72098983, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72098983, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x9b03d8a5, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.423] SetErrorMode (uMode=0x0) returned 0x1 [0069.423] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal.partially.cryptonar")) returned 1 [0069.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x4f [0069.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x4f [0069.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x4f [0069.424] SetErrorMode (uMode=0x1) returned 0x0 [0069.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.425] GetFileType (hFile=0x230) returned 0x1 [0069.425] SetErrorMode (uMode=0x0) returned 0x1 [0069.425] GetFileType (hFile=0x230) returned 0x1 [0069.425] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.425] ReadFile (in: hFile=0x230, lpBuffer=0x28206c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28206c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.446] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.446] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.446] WriteFile (in: hFile=0x230, lpBuffer=0x28206c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28206c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.447] CloseHandle (hObject=0x230) returned 1 [0069.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x4f [0069.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x4f [0069.483] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0069.483] SetErrorMode (uMode=0x1) returned 0x0 [0069.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f33bfa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d21cc1a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2bdcc94e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d4dc)) returned 1 [0069.483] SetErrorMode (uMode=0x0) returned 0x1 [0069.483] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\preferences.partially.cryptonar")) returned 1 [0069.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x57 [0069.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x57 [0069.484] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x57 [0069.484] SetErrorMode (uMode=0x1) returned 0x0 [0069.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.485] GetFileType (hFile=0x230) returned 0x1 [0069.485] SetErrorMode (uMode=0x0) returned 0x1 [0069.485] GetFileType (hFile=0x230) returned 0x1 [0069.485] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.485] ReadFile (in: hFile=0x230, lpBuffer=0x2823d68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2823d68*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.487] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.487] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.487] WriteFile (in: hFile=0x230, lpBuffer=0x2823d68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2823d68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.487] CloseHandle (hObject=0x230) returned 1 [0069.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x57 [0069.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x57 [0069.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0069.488] SetErrorMode (uMode=0x1) returned 0x0 [0069.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bdf1872, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0069.489] SetErrorMode (uMode=0x0) returned 0x1 [0069.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.partially.cryptonar")) returned 1 [0069.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x5f [0069.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x5f [0069.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x5f [0069.490] SetErrorMode (uMode=0x1) returned 0x0 [0069.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.490] GetFileType (hFile=0x230) returned 0x1 [0069.490] SetErrorMode (uMode=0x0) returned 0x1 [0069.490] GetFileType (hFile=0x230) returned 0x1 [0069.490] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.490] ReadFile (in: hFile=0x230, lpBuffer=0x28274d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28274d8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0069.490] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.490] CloseHandle (hObject=0x230) returned 1 [0069.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x5f [0069.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x5f [0069.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0069.490] SetErrorMode (uMode=0x1) returned 0x0 [0069.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x716f3653, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.491] SetErrorMode (uMode=0x0) returned 0x1 [0069.491] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal.partially.cryptonar")) returned 1 [0069.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x50 [0069.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x50 [0069.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x50 [0069.491] SetErrorMode (uMode=0x1) returned 0x0 [0069.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.492] GetFileType (hFile=0x230) returned 0x1 [0069.492] SetErrorMode (uMode=0x0) returned 0x1 [0069.492] GetFileType (hFile=0x230) returned 0x1 [0069.492] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.493] ReadFile (in: hFile=0x230, lpBuffer=0x282a7e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x282a7e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.513] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.513] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.513] WriteFile (in: hFile=0x230, lpBuffer=0x282a7e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x282a7e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.513] CloseHandle (hObject=0x230) returned 1 [0069.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x50 [0069.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x50 [0069.536] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0069.536] SetErrorMode (uMode=0x1) returned 0x0 [0069.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7684a450, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7684a450, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2be641ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1 [0069.536] SetErrorMode (uMode=0x0) returned 0x1 [0069.536] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager.partially.cryptonar")) returned 1 [0069.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x58 [0069.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x58 [0069.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x58 [0069.537] SetErrorMode (uMode=0x1) returned 0x0 [0069.537] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.537] GetFileType (hFile=0x230) returned 0x1 [0069.537] SetErrorMode (uMode=0x0) returned 0x1 [0069.537] GetFileType (hFile=0x230) returned 0x1 [0069.537] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.538] ReadFile (in: hFile=0x230, lpBuffer=0x282dea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x282dea0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0069.538] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.538] CloseHandle (hObject=0x230) returned 1 [0069.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x58 [0069.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x58 [0069.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0069.538] SetErrorMode (uMode=0x1) returned 0x0 [0069.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7684a450, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7684a450, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d47f188, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.538] SetErrorMode (uMode=0x0) returned 0x1 [0069.538] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal.partially.cryptonar")) returned 1 [0069.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x56 [0069.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x56 [0069.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x56 [0069.539] SetErrorMode (uMode=0x1) returned 0x0 [0069.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.540] GetFileType (hFile=0x230) returned 0x1 [0069.540] SetErrorMode (uMode=0x0) returned 0x1 [0069.540] GetFileType (hFile=0x230) returned 0x1 [0069.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.540] ReadFile (in: hFile=0x230, lpBuffer=0x28311a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28311a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.555] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.555] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.555] WriteFile (in: hFile=0x230, lpBuffer=0x28311a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28311a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.555] CloseHandle (hObject=0x230) returned 1 [0069.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x56 [0069.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x56 [0069.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0069.582] SetErrorMode (uMode=0x1) returned 0x0 [0069.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f80153, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7abb2ef2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2bed5f7e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8b23)) returned 1 [0069.582] SetErrorMode (uMode=0x0) returned 0x1 [0069.582] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences.partially.cryptonar")) returned 1 [0069.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x4d [0069.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x4d [0069.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x4d [0069.583] SetErrorMode (uMode=0x1) returned 0x0 [0069.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.583] GetFileType (hFile=0x230) returned 0x1 [0069.583] SetErrorMode (uMode=0x0) returned 0x1 [0069.583] GetFileType (hFile=0x230) returned 0x1 [0069.583] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.584] ReadFile (in: hFile=0x230, lpBuffer=0x2834818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2834818*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.601] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0069.601] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.601] WriteFile (in: hFile=0x230, lpBuffer=0x2834818*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2834818*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0069.601] CloseHandle (hObject=0x230) returned 1 [0069.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x4d [0069.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x4d [0069.613] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0069.613] SetErrorMode (uMode=0x1) returned 0x0 [0069.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717b221f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x717b221f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2bf29a7d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0069.613] SetErrorMode (uMode=0x0) returned 0x1 [0069.613] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts.partially.cryptonar")) returned 1 [0069.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x55 [0069.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x55 [0069.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x55 [0069.614] SetErrorMode (uMode=0x1) returned 0x0 [0069.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.615] GetFileType (hFile=0x230) returned 0x1 [0069.615] SetErrorMode (uMode=0x0) returned 0x1 [0069.615] GetFileType (hFile=0x230) returned 0x1 [0069.615] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.615] ReadFile (in: hFile=0x230, lpBuffer=0x2837e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2837e78*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0069.615] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.615] CloseHandle (hObject=0x230) returned 1 [0069.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x55 [0069.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x55 [0069.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x69 [0069.615] SetErrorMode (uMode=0x1) returned 0x0 [0069.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x717b221f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x717b221f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb6842fbf, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0069.615] SetErrorMode (uMode=0x0) returned 0x1 [0069.616] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal.partially.cryptonar")) returned 1 [0069.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x4d [0069.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x4d [0069.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x4d [0069.616] SetErrorMode (uMode=0x1) returned 0x0 [0069.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0069.617] GetFileType (hFile=0x230) returned 0x1 [0069.617] SetErrorMode (uMode=0x0) returned 0x1 [0069.618] GetFileType (hFile=0x230) returned 0x1 [0069.618] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0069.618] ReadFile (in: hFile=0x230, lpBuffer=0x283b100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x283b100*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0070.298] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0070.298] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0070.298] WriteFile (in: hFile=0x230, lpBuffer=0x283b100*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x283b100*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0070.299] CloseHandle (hObject=0x230) returned 1 [0070.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x4d [0070.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x4d [0070.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0070.398] SetErrorMode (uMode=0x1) returned 0x0 [0070.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122eb0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7122eb0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2c5b0c0e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0070.398] SetErrorMode (uMode=0x0) returned 0x1 [0070.398] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites.partially.cryptonar")) returned 1 [0070.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x55 [0070.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x55 [0070.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x55 [0070.399] SetErrorMode (uMode=0x1) returned 0x0 [0070.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0070.400] GetFileType (hFile=0x230) returned 0x1 [0070.400] SetErrorMode (uMode=0x0) returned 0x1 [0070.400] GetFileType (hFile=0x230) returned 0x1 [0070.400] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0070.400] ReadFile (in: hFile=0x230, lpBuffer=0x283e760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x283e760*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0070.400] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0070.400] CloseHandle (hObject=0x230) returned 1 [0070.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x55 [0070.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x55 [0070.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x69 [0070.401] SetErrorMode (uMode=0x1) returned 0x0 [0070.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7122eb0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7122eb0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x71eeae17, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0070.401] SetErrorMode (uMode=0x0) returned 0x1 [0070.401] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal.partially.cryptonar")) returned 1 [0070.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x55 [0070.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x55 [0070.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x55 [0070.402] SetErrorMode (uMode=0x1) returned 0x0 [0070.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0070.403] GetFileType (hFile=0x230) returned 0x1 [0070.403] SetErrorMode (uMode=0x0) returned 0x1 [0070.403] GetFileType (hFile=0x230) returned 0x1 [0070.403] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0070.403] ReadFile (in: hFile=0x230, lpBuffer=0x2841a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2841a38*, lpNumberOfBytesRead=0x5ae8b8*=0x776, lpOverlapped=0x0) returned 1 [0070.484] SetFilePointer (in: hFile=0x230, lDistanceToMove=-886, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0070.484] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0070.484] WriteFile (in: hFile=0x230, lpBuffer=0x2841a38*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2841a38*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0070.485] CloseHandle (hObject=0x230) returned 1 [0070.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x55 [0070.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x55 [0070.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.partially.cryptoNar", lpFilePart=0x0) returned 0x69 [0070.486] SetErrorMode (uMode=0x1) returned 0x0 [0070.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca3887f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac1c778, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2c77a7ae, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x776)) returned 1 [0070.486] SetErrorMode (uMode=0x0) returned 0x1 [0070.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity.partially.cryptonar")) returned 1 [0070.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x51 [0070.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x51 [0070.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x51 [0070.487] SetErrorMode (uMode=0x1) returned 0x0 [0070.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0070.487] GetFileType (hFile=0x230) returned 0x1 [0070.487] SetErrorMode (uMode=0x0) returned 0x1 [0070.487] GetFileType (hFile=0x230) returned 0x1 [0070.487] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0070.488] ReadFile (in: hFile=0x230, lpBuffer=0x28450d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28450d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0070.529] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0070.529] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0070.529] WriteFile (in: hFile=0x230, lpBuffer=0x28450d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28450d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0070.529] CloseHandle (hObject=0x230) returned 1 [0073.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x51 [0073.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x51 [0073.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.partially.cryptoNar", lpFilePart=0x0) returned 0x65 [0073.178] SetErrorMode (uMode=0x1) returned 0x0 [0073.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aad131, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x71aad131, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e11ba2f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0073.179] SetErrorMode (uMode=0x0) returned 0x1 [0073.179] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\visited links.partially.cryptonar")) returned 1 [0073.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x4c [0073.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x4c [0073.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x4c [0073.179] SetErrorMode (uMode=0x1) returned 0x0 [0073.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.180] GetFileType (hFile=0x230) returned 0x1 [0073.180] SetErrorMode (uMode=0x0) returned 0x1 [0073.180] GetFileType (hFile=0x230) returned 0x1 [0073.180] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.180] ReadFile (in: hFile=0x230, lpBuffer=0x2848710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2848710*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.181] WriteFile (in: hFile=0x230, lpBuffer=0x2848710*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2848710*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.181] CloseHandle (hObject=0x230) returned 1 [0073.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x4c [0073.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x4c [0073.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.partially.cryptoNar", lpFilePart=0x0) returned 0x60 [0073.204] SetErrorMode (uMode=0x1) returned 0x0 [0073.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d75fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x710d75fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e168ef1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1 [0073.204] SetErrorMode (uMode=0x0) returned 0x1 [0073.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data.partially.cryptonar")) returned 1 [0073.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x54 [0073.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x54 [0073.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x54 [0073.205] SetErrorMode (uMode=0x1) returned 0x0 [0073.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.205] GetFileType (hFile=0x230) returned 0x1 [0073.206] SetErrorMode (uMode=0x0) returned 0x1 [0073.206] GetFileType (hFile=0x230) returned 0x1 [0073.206] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.206] ReadFile (in: hFile=0x230, lpBuffer=0x284bd70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x284bd70*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0073.206] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.206] CloseHandle (hObject=0x230) returned 1 [0073.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x54 [0073.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x54 [0073.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x68 [0073.206] SetErrorMode (uMode=0x1) returned 0x0 [0073.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x710d75fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x710d75fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x74fb42e6, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0073.206] SetErrorMode (uMode=0x0) returned 0x1 [0073.206] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal.partially.cryptonar")) returned 1 [0073.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x50 [0073.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x50 [0073.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x50 [0073.208] SetErrorMode (uMode=0x1) returned 0x0 [0073.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.210] GetFileType (hFile=0x230) returned 0x1 [0073.210] SetErrorMode (uMode=0x0) returned 0x1 [0073.210] GetFileType (hFile=0x230) returned 0x1 [0073.210] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.210] ReadFile (in: hFile=0x230, lpBuffer=0x284f000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x284f000*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.212] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.212] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.213] WriteFile (in: hFile=0x230, lpBuffer=0x284f000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x284f000*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.213] CloseHandle (hObject=0x230) returned 1 [0073.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x50 [0073.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x50 [0073.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0073.214] SetErrorMode (uMode=0x1) returned 0x0 [0073.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72106768, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72106768, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e168ef1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1 [0073.214] SetErrorMode (uMode=0x0) returned 0x1 [0073.215] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0.partially.cryptonar")) returned 1 [0073.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x50 [0073.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x50 [0073.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x50 [0073.215] SetErrorMode (uMode=0x1) returned 0x0 [0073.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.216] GetFileType (hFile=0x230) returned 0x1 [0073.216] SetErrorMode (uMode=0x0) returned 0x1 [0073.216] GetFileType (hFile=0x230) returned 0x1 [0073.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.216] ReadFile (in: hFile=0x230, lpBuffer=0x2852648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2852648*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.221] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.221] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.221] WriteFile (in: hFile=0x230, lpBuffer=0x2852648*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2852648*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.222] CloseHandle (hObject=0x230) returned 1 [0073.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x50 [0073.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x50 [0073.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0073.232] SetErrorMode (uMode=0x1) returned 0x0 [0073.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72106768, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72106768, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e18e39a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1 [0073.233] SetErrorMode (uMode=0x0) returned 0x1 [0073.233] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1.partially.cryptonar")) returned 1 [0073.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x50 [0073.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x50 [0073.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x50 [0073.234] SetErrorMode (uMode=0x1) returned 0x0 [0073.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.237] GetFileType (hFile=0x230) returned 0x1 [0073.237] SetErrorMode (uMode=0x0) returned 0x1 [0073.237] GetFileType (hFile=0x230) returned 0x1 [0073.237] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.237] ReadFile (in: hFile=0x230, lpBuffer=0x2855c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2855c90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.267] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.267] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.267] WriteFile (in: hFile=0x230, lpBuffer=0x2855c90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2855c90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.268] CloseHandle (hObject=0x230) returned 1 [0073.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x50 [0073.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x50 [0073.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0073.329] SetErrorMode (uMode=0x1) returned 0x0 [0073.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72108e77, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72108e77, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e291550, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x102000)) returned 1 [0073.330] SetErrorMode (uMode=0x0) returned 0x1 [0073.330] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2.partially.cryptonar")) returned 1 [0073.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x50 [0073.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x50 [0073.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x50 [0073.340] SetErrorMode (uMode=0x1) returned 0x0 [0073.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.340] GetFileType (hFile=0x230) returned 0x1 [0073.340] SetErrorMode (uMode=0x0) returned 0x1 [0073.340] GetFileType (hFile=0x230) returned 0x1 [0073.340] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.340] ReadFile (in: hFile=0x230, lpBuffer=0x28592d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28592d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.355] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.355] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.355] WriteFile (in: hFile=0x230, lpBuffer=0x28592d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28592d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.355] CloseHandle (hObject=0x230) returned 1 [0073.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x50 [0073.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x50 [0073.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0073.513] SetErrorMode (uMode=0x1) returned 0x0 [0073.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72108e77, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72108e77, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e45b49f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x402000)) returned 1 [0073.513] SetErrorMode (uMode=0x0) returned 0x1 [0073.513] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3.partially.cryptonar")) returned 1 [0073.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", lpFilePart=0x0) returned 0x52 [0073.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", lpFilePart=0x0) returned 0x52 [0073.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", lpFilePart=0x0) returned 0x52 [0073.514] SetErrorMode (uMode=0x1) returned 0x0 [0073.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.519] GetFileType (hFile=0x230) returned 0x1 [0073.519] SetErrorMode (uMode=0x0) returned 0x1 [0073.519] GetFileType (hFile=0x230) returned 0x1 [0073.519] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.519] ReadFile (in: hFile=0x230, lpBuffer=0x285c930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285c930*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.541] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.542] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.542] WriteFile (in: hFile=0x230, lpBuffer=0x285c930*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x285c930*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.542] CloseHandle (hObject=0x230) returned 1 [0073.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", lpFilePart=0x0) returned 0x52 [0073.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001", lpFilePart=0x0) returned 0x52 [0073.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0073.551] SetErrorMode (uMode=0x1) returned 0x0 [0073.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000001"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75df12d0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75df12d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e4a78ef, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4355)) returned 1 [0073.551] SetErrorMode (uMode=0x0) returned 0x1 [0073.551] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000001.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000001.partially.cryptonar")) returned 1 [0073.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", lpFilePart=0x0) returned 0x52 [0073.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", lpFilePart=0x0) returned 0x52 [0073.552] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", lpFilePart=0x0) returned 0x52 [0073.552] SetErrorMode (uMode=0x1) returned 0x0 [0073.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000002"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.552] GetFileType (hFile=0x230) returned 0x1 [0073.552] SetErrorMode (uMode=0x0) returned 0x1 [0073.552] GetFileType (hFile=0x230) returned 0x1 [0073.552] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.553] ReadFile (in: hFile=0x230, lpBuffer=0x285ff90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285ff90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.624] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.624] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.624] WriteFile (in: hFile=0x230, lpBuffer=0x285ff90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x285ff90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.624] CloseHandle (hObject=0x230) returned 1 [0073.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", lpFilePart=0x0) returned 0x52 [0073.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002", lpFilePart=0x0) returned 0x52 [0073.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0073.642] SetErrorMode (uMode=0x1) returned 0x0 [0073.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000002"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76136a18, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76136a18, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e58c79a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12530)) returned 1 [0073.642] SetErrorMode (uMode=0x0) returned 0x1 [0073.642] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000002"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000002.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000002.partially.cryptonar")) returned 1 [0073.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", lpFilePart=0x0) returned 0x52 [0073.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", lpFilePart=0x0) returned 0x52 [0073.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", lpFilePart=0x0) returned 0x52 [0073.643] SetErrorMode (uMode=0x1) returned 0x0 [0073.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000003"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.644] GetFileType (hFile=0x230) returned 0x1 [0073.644] SetErrorMode (uMode=0x0) returned 0x1 [0073.644] GetFileType (hFile=0x230) returned 0x1 [0073.644] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.644] ReadFile (in: hFile=0x230, lpBuffer=0x28635f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28635f0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.672] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.672] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.672] WriteFile (in: hFile=0x230, lpBuffer=0x28635f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28635f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.673] CloseHandle (hObject=0x230) returned 1 [0073.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", lpFilePart=0x0) returned 0x52 [0073.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003", lpFilePart=0x0) returned 0x52 [0073.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0073.674] SetErrorMode (uMode=0x1) returned 0x0 [0073.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000003"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76262f03, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76262f03, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e5d8ca1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7e9e)) returned 1 [0073.674] SetErrorMode (uMode=0x0) returned 0x1 [0073.674] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000003"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000003.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000003.partially.cryptonar")) returned 1 [0073.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", lpFilePart=0x0) returned 0x52 [0073.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", lpFilePart=0x0) returned 0x52 [0073.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", lpFilePart=0x0) returned 0x52 [0073.675] SetErrorMode (uMode=0x1) returned 0x0 [0073.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000004"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.676] GetFileType (hFile=0x230) returned 0x1 [0073.676] SetErrorMode (uMode=0x0) returned 0x1 [0073.676] GetFileType (hFile=0x230) returned 0x1 [0073.676] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.676] ReadFile (in: hFile=0x230, lpBuffer=0x2866c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2866c50*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.691] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.691] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.691] WriteFile (in: hFile=0x230, lpBuffer=0x2866c50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2866c50*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.691] CloseHandle (hObject=0x230) returned 1 [0073.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", lpFilePart=0x0) returned 0x52 [0073.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004", lpFilePart=0x0) returned 0x52 [0073.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0073.726] SetErrorMode (uMode=0x1) returned 0x0 [0073.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000004"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76289ff9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76289ff9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e64b375, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5fcc)) returned 1 [0073.726] SetErrorMode (uMode=0x0) returned 0x1 [0073.726] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000004"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000004.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000004.partially.cryptonar")) returned 1 [0073.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", lpFilePart=0x0) returned 0x52 [0073.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", lpFilePart=0x0) returned 0x52 [0073.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", lpFilePart=0x0) returned 0x52 [0073.727] SetErrorMode (uMode=0x1) returned 0x0 [0073.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000005"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.727] GetFileType (hFile=0x230) returned 0x1 [0073.727] SetErrorMode (uMode=0x0) returned 0x1 [0073.727] GetFileType (hFile=0x230) returned 0x1 [0073.728] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.728] ReadFile (in: hFile=0x230, lpBuffer=0x286a2b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x286a2b0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.866] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.866] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.867] WriteFile (in: hFile=0x230, lpBuffer=0x286a2b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x286a2b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.867] CloseHandle (hObject=0x230) returned 1 [0073.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", lpFilePart=0x0) returned 0x52 [0073.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005", lpFilePart=0x0) returned 0x52 [0073.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0073.869] SetErrorMode (uMode=0x1) returned 0x0 [0073.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000005"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76293c6c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76293c6c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e7a28d4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1139e)) returned 1 [0073.869] SetErrorMode (uMode=0x0) returned 0x1 [0073.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000005"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000005.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000005.partially.cryptonar")) returned 1 [0073.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", lpFilePart=0x0) returned 0x52 [0073.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", lpFilePart=0x0) returned 0x52 [0073.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", lpFilePart=0x0) returned 0x52 [0073.870] SetErrorMode (uMode=0x1) returned 0x0 [0073.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000006"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.871] GetFileType (hFile=0x230) returned 0x1 [0073.871] SetErrorMode (uMode=0x0) returned 0x1 [0073.871] GetFileType (hFile=0x230) returned 0x1 [0073.871] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.871] ReadFile (in: hFile=0x230, lpBuffer=0x286d910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x286d910*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.950] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.951] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.951] WriteFile (in: hFile=0x230, lpBuffer=0x286d910*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x286d910*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.951] CloseHandle (hObject=0x230) returned 1 [0073.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", lpFilePart=0x0) returned 0x52 [0073.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006", lpFilePart=0x0) returned 0x52 [0073.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0073.961] SetErrorMode (uMode=0x1) returned 0x0 [0073.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000006"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76be2bc2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76be2bc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e88772d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16604)) returned 1 [0073.961] SetErrorMode (uMode=0x0) returned 0x1 [0073.961] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000006"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000006.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000006.partially.cryptonar")) returned 1 [0073.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", lpFilePart=0x0) returned 0x52 [0073.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", lpFilePart=0x0) returned 0x52 [0073.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", lpFilePart=0x0) returned 0x52 [0073.962] SetErrorMode (uMode=0x1) returned 0x0 [0073.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000007"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.963] GetFileType (hFile=0x230) returned 0x1 [0073.963] SetErrorMode (uMode=0x0) returned 0x1 [0073.963] GetFileType (hFile=0x230) returned 0x1 [0073.963] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.963] ReadFile (in: hFile=0x230, lpBuffer=0x2870f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2870f70*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0073.984] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0073.984] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.984] WriteFile (in: hFile=0x230, lpBuffer=0x2870f70*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2870f70*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0073.985] CloseHandle (hObject=0x230) returned 1 [0073.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", lpFilePart=0x0) returned 0x52 [0073.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007", lpFilePart=0x0) returned 0x52 [0073.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0073.987] SetErrorMode (uMode=0x1) returned 0x0 [0073.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000007"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7711cbb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7711cbb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e8d3c1c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe423)) returned 1 [0073.987] SetErrorMode (uMode=0x0) returned 0x1 [0073.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000007"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000007.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000007.partially.cryptonar")) returned 1 [0073.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", lpFilePart=0x0) returned 0x52 [0073.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", lpFilePart=0x0) returned 0x52 [0073.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", lpFilePart=0x0) returned 0x52 [0073.989] SetErrorMode (uMode=0x1) returned 0x0 [0073.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000008"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0073.989] GetFileType (hFile=0x230) returned 0x1 [0073.989] SetErrorMode (uMode=0x0) returned 0x1 [0073.989] GetFileType (hFile=0x230) returned 0x1 [0073.989] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0073.989] ReadFile (in: hFile=0x230, lpBuffer=0x28745d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28745d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.004] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.004] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.005] WriteFile (in: hFile=0x230, lpBuffer=0x28745d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28745d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.005] CloseHandle (hObject=0x230) returned 1 [0074.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", lpFilePart=0x0) returned 0x52 [0074.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008", lpFilePart=0x0) returned 0x52 [0074.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.014] SetErrorMode (uMode=0x1) returned 0x0 [0074.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000008"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772d4307, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x772d4307, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e9210a1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe2be)) returned 1 [0074.014] SetErrorMode (uMode=0x0) returned 0x1 [0074.014] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000008"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000008.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000008.partially.cryptonar")) returned 1 [0074.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", lpFilePart=0x0) returned 0x52 [0074.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", lpFilePart=0x0) returned 0x52 [0074.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", lpFilePart=0x0) returned 0x52 [0074.015] SetErrorMode (uMode=0x1) returned 0x0 [0074.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000009"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.015] GetFileType (hFile=0x230) returned 0x1 [0074.015] SetErrorMode (uMode=0x0) returned 0x1 [0074.015] GetFileType (hFile=0x230) returned 0x1 [0074.015] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.015] ReadFile (in: hFile=0x230, lpBuffer=0x2877c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2877c30*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.031] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.031] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.031] WriteFile (in: hFile=0x230, lpBuffer=0x2877c30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2877c30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.032] CloseHandle (hObject=0x230) returned 1 [0074.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", lpFilePart=0x0) returned 0x52 [0074.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009", lpFilePart=0x0) returned 0x52 [0074.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.055] SetErrorMode (uMode=0x1) returned 0x0 [0074.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000009"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774eae39, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x774eae39, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e97eeca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf65)) returned 1 [0074.056] SetErrorMode (uMode=0x0) returned 0x1 [0074.056] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000009"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000009.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000009.partially.cryptonar")) returned 1 [0074.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", lpFilePart=0x0) returned 0x52 [0074.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", lpFilePart=0x0) returned 0x52 [0074.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", lpFilePart=0x0) returned 0x52 [0074.058] SetErrorMode (uMode=0x1) returned 0x0 [0074.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.059] GetFileType (hFile=0x230) returned 0x1 [0074.059] SetErrorMode (uMode=0x0) returned 0x1 [0074.059] GetFileType (hFile=0x230) returned 0x1 [0074.059] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.059] ReadFile (in: hFile=0x230, lpBuffer=0x287b290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x287b290*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.062] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.062] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.062] WriteFile (in: hFile=0x230, lpBuffer=0x287b290*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x287b290*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.063] CloseHandle (hObject=0x230) returned 1 [0074.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", lpFilePart=0x0) returned 0x52 [0074.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a", lpFilePart=0x0) returned 0x52 [0074.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.065] SetErrorMode (uMode=0x1) returned 0x0 [0074.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77760d23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77760d23, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e9933fc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa600)) returned 1 [0074.065] SetErrorMode (uMode=0x0) returned 0x1 [0074.065] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000a.partially.cryptonar")) returned 1 [0074.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", lpFilePart=0x0) returned 0x52 [0074.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", lpFilePart=0x0) returned 0x52 [0074.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", lpFilePart=0x0) returned 0x52 [0074.067] SetErrorMode (uMode=0x1) returned 0x0 [0074.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.068] GetFileType (hFile=0x230) returned 0x1 [0074.069] SetErrorMode (uMode=0x0) returned 0x1 [0074.069] GetFileType (hFile=0x230) returned 0x1 [0074.069] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.069] ReadFile (in: hFile=0x230, lpBuffer=0x287e8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x287e8f0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.085] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.085] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.086] WriteFile (in: hFile=0x230, lpBuffer=0x287e8f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x287e8f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.086] CloseHandle (hObject=0x230) returned 1 [0074.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", lpFilePart=0x0) returned 0x52 [0074.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b", lpFilePart=0x0) returned 0x52 [0074.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.089] SetErrorMode (uMode=0x1) returned 0x0 [0074.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e54833, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79e54833, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2e9b927f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa038)) returned 1 [0074.089] SetErrorMode (uMode=0x0) returned 0x1 [0074.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000b.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000b.partially.cryptonar")) returned 1 [0074.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", lpFilePart=0x0) returned 0x52 [0074.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", lpFilePart=0x0) returned 0x52 [0074.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", lpFilePart=0x0) returned 0x52 [0074.090] SetErrorMode (uMode=0x1) returned 0x0 [0074.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.091] GetFileType (hFile=0x230) returned 0x1 [0074.091] SetErrorMode (uMode=0x0) returned 0x1 [0074.091] GetFileType (hFile=0x230) returned 0x1 [0074.092] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.092] ReadFile (in: hFile=0x230, lpBuffer=0x2881f50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2881f50*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.144] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.144] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.145] WriteFile (in: hFile=0x230, lpBuffer=0x2881f50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2881f50*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.145] CloseHandle (hObject=0x230) returned 1 [0074.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", lpFilePart=0x0) returned 0x52 [0074.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c", lpFilePart=0x0) returned 0x52 [0074.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.147] SetErrorMode (uMode=0x1) returned 0x0 [0074.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ea032b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ea032b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ea51379, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x72b1)) returned 1 [0074.147] SetErrorMode (uMode=0x0) returned 0x1 [0074.147] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000c.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000c.partially.cryptonar")) returned 1 [0074.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", lpFilePart=0x0) returned 0x52 [0074.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", lpFilePart=0x0) returned 0x52 [0074.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", lpFilePart=0x0) returned 0x52 [0074.148] SetErrorMode (uMode=0x1) returned 0x0 [0074.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.149] GetFileType (hFile=0x230) returned 0x1 [0074.149] SetErrorMode (uMode=0x0) returned 0x1 [0074.149] GetFileType (hFile=0x230) returned 0x1 [0074.149] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.149] ReadFile (in: hFile=0x230, lpBuffer=0x28855b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28855b0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.151] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.151] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.151] WriteFile (in: hFile=0x230, lpBuffer=0x28855b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28855b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.152] CloseHandle (hObject=0x230) returned 1 [0074.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", lpFilePart=0x0) returned 0x52 [0074.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d", lpFilePart=0x0) returned 0x52 [0074.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.154] SetErrorMode (uMode=0x1) returned 0x0 [0074.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a116216, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a116216, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ea77554, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaa4b)) returned 1 [0074.154] SetErrorMode (uMode=0x0) returned 0x1 [0074.154] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000d.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000d.partially.cryptonar")) returned 1 [0074.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", lpFilePart=0x0) returned 0x52 [0074.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", lpFilePart=0x0) returned 0x52 [0074.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", lpFilePart=0x0) returned 0x52 [0074.155] SetErrorMode (uMode=0x1) returned 0x0 [0074.156] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.156] GetFileType (hFile=0x230) returned 0x1 [0074.156] SetErrorMode (uMode=0x0) returned 0x1 [0074.156] GetFileType (hFile=0x230) returned 0x1 [0074.156] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.156] ReadFile (in: hFile=0x230, lpBuffer=0x2888c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2888c10*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.158] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.158] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.158] WriteFile (in: hFile=0x230, lpBuffer=0x2888c10*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2888c10*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.158] CloseHandle (hObject=0x230) returned 1 [0074.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", lpFilePart=0x0) returned 0x52 [0074.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e", lpFilePart=0x0) returned 0x52 [0074.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.160] SetErrorMode (uMode=0x1) returned 0x0 [0074.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a13369c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a13369c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ea77554, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8954)) returned 1 [0074.160] SetErrorMode (uMode=0x0) returned 0x1 [0074.160] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000e.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000e.partially.cryptonar")) returned 1 [0074.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", lpFilePart=0x0) returned 0x52 [0074.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", lpFilePart=0x0) returned 0x52 [0074.162] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", lpFilePart=0x0) returned 0x52 [0074.162] SetErrorMode (uMode=0x1) returned 0x0 [0074.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.162] GetFileType (hFile=0x230) returned 0x1 [0074.162] SetErrorMode (uMode=0x0) returned 0x1 [0074.162] GetFileType (hFile=0x230) returned 0x1 [0074.162] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.162] ReadFile (in: hFile=0x230, lpBuffer=0x288c270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x288c270*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.164] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.164] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.164] WriteFile (in: hFile=0x230, lpBuffer=0x288c270*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x288c270*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.164] CloseHandle (hObject=0x230) returned 1 [0074.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", lpFilePart=0x0) returned 0x52 [0074.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f", lpFilePart=0x0) returned 0x52 [0074.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.195] SetErrorMode (uMode=0x1) returned 0x0 [0074.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b0a44e1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b0a44e1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2eac3a00, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ab2c)) returned 1 [0074.195] SetErrorMode (uMode=0x0) returned 0x1 [0074.195] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00000f.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00000f.partially.cryptonar")) returned 1 [0074.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", lpFilePart=0x0) returned 0x52 [0074.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", lpFilePart=0x0) returned 0x52 [0074.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", lpFilePart=0x0) returned 0x52 [0074.196] SetErrorMode (uMode=0x1) returned 0x0 [0074.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000010"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.196] GetFileType (hFile=0x230) returned 0x1 [0074.196] SetErrorMode (uMode=0x0) returned 0x1 [0074.196] GetFileType (hFile=0x230) returned 0x1 [0074.197] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.197] ReadFile (in: hFile=0x230, lpBuffer=0x288f8d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x288f8d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.224] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.224] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.224] WriteFile (in: hFile=0x230, lpBuffer=0x288f8d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x288f8d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.224] CloseHandle (hObject=0x230) returned 1 [0074.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", lpFilePart=0x0) returned 0x52 [0074.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010", lpFilePart=0x0) returned 0x52 [0074.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.247] SetErrorMode (uMode=0x1) returned 0x0 [0074.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000010"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2ebd5f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b2ebd5f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2eb360b3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6b7c)) returned 1 [0074.248] SetErrorMode (uMode=0x0) returned 0x1 [0074.248] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000010"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000010.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000010.partially.cryptonar")) returned 1 [0074.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", lpFilePart=0x0) returned 0x52 [0074.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", lpFilePart=0x0) returned 0x52 [0074.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", lpFilePart=0x0) returned 0x52 [0074.249] SetErrorMode (uMode=0x1) returned 0x0 [0074.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000011"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.249] GetFileType (hFile=0x230) returned 0x1 [0074.249] SetErrorMode (uMode=0x0) returned 0x1 [0074.249] GetFileType (hFile=0x230) returned 0x1 [0074.249] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.249] ReadFile (in: hFile=0x230, lpBuffer=0x2892f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2892f30*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.303] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.303] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.303] WriteFile (in: hFile=0x230, lpBuffer=0x2892f30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2892f30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.303] CloseHandle (hObject=0x230) returned 1 [0074.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", lpFilePart=0x0) returned 0x52 [0074.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011", lpFilePart=0x0) returned 0x52 [0074.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.324] SetErrorMode (uMode=0x1) returned 0x0 [0074.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000011"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b304414, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7b304414, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ebf4c94, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb36a)) returned 1 [0074.324] SetErrorMode (uMode=0x0) returned 0x1 [0074.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000011"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000011.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000011.partially.cryptonar")) returned 1 [0074.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", lpFilePart=0x0) returned 0x52 [0074.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", lpFilePart=0x0) returned 0x52 [0074.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", lpFilePart=0x0) returned 0x52 [0074.326] SetErrorMode (uMode=0x1) returned 0x0 [0074.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000012"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.327] GetFileType (hFile=0x230) returned 0x1 [0074.327] SetErrorMode (uMode=0x0) returned 0x1 [0074.327] GetFileType (hFile=0x230) returned 0x1 [0074.327] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.327] ReadFile (in: hFile=0x230, lpBuffer=0x2896590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2896590*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.375] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.375] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.375] WriteFile (in: hFile=0x230, lpBuffer=0x2896590*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2896590*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.376] CloseHandle (hObject=0x230) returned 1 [0074.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", lpFilePart=0x0) returned 0x52 [0074.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012", lpFilePart=0x0) returned 0x52 [0074.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.385] SetErrorMode (uMode=0x1) returned 0x0 [0074.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000012"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c7d8961, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c7d8961, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ec92f66, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x66090)) returned 1 [0074.385] SetErrorMode (uMode=0x0) returned 0x1 [0074.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000012"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000012.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000012.partially.cryptonar")) returned 1 [0074.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", lpFilePart=0x0) returned 0x52 [0074.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", lpFilePart=0x0) returned 0x52 [0074.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", lpFilePart=0x0) returned 0x52 [0074.386] SetErrorMode (uMode=0x1) returned 0x0 [0074.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000013"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.389] GetFileType (hFile=0x230) returned 0x1 [0074.389] SetErrorMode (uMode=0x0) returned 0x1 [0074.389] GetFileType (hFile=0x230) returned 0x1 [0074.389] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.389] ReadFile (in: hFile=0x230, lpBuffer=0x2899bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2899bf0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.391] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.391] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.391] WriteFile (in: hFile=0x230, lpBuffer=0x2899bf0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2899bf0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.391] CloseHandle (hObject=0x230) returned 1 [0074.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", lpFilePart=0x0) returned 0x52 [0074.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013", lpFilePart=0x0) returned 0x52 [0074.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.393] SetErrorMode (uMode=0x1) returned 0x0 [0074.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000013"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e51cfbf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e51cfbf, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ecb378d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9da7)) returned 1 [0074.393] SetErrorMode (uMode=0x0) returned 0x1 [0074.393] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000013"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000013.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000013.partially.cryptonar")) returned 1 [0074.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", lpFilePart=0x0) returned 0x52 [0074.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", lpFilePart=0x0) returned 0x52 [0074.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", lpFilePart=0x0) returned 0x52 [0074.394] SetErrorMode (uMode=0x1) returned 0x0 [0074.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000014"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.394] GetFileType (hFile=0x230) returned 0x1 [0074.395] SetErrorMode (uMode=0x0) returned 0x1 [0074.395] GetFileType (hFile=0x230) returned 0x1 [0074.395] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.395] ReadFile (in: hFile=0x230, lpBuffer=0x289d250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x289d250*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.408] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.408] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.408] WriteFile (in: hFile=0x230, lpBuffer=0x289d250*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x289d250*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.409] CloseHandle (hObject=0x230) returned 1 [0074.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", lpFilePart=0x0) returned 0x52 [0074.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014", lpFilePart=0x0) returned 0x52 [0074.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.411] SetErrorMode (uMode=0x1) returned 0x0 [0074.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000014"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e797ca4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e797ca4, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ecd99cf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x159cc)) returned 1 [0074.412] SetErrorMode (uMode=0x0) returned 0x1 [0074.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000014"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000014.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000014.partially.cryptonar")) returned 1 [0074.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", lpFilePart=0x0) returned 0x52 [0074.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", lpFilePart=0x0) returned 0x52 [0074.413] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", lpFilePart=0x0) returned 0x52 [0074.413] SetErrorMode (uMode=0x1) returned 0x0 [0074.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000015"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.413] GetFileType (hFile=0x230) returned 0x1 [0074.413] SetErrorMode (uMode=0x0) returned 0x1 [0074.413] GetFileType (hFile=0x230) returned 0x1 [0074.413] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.413] ReadFile (in: hFile=0x230, lpBuffer=0x28a08b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a08b0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.430] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.430] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.430] WriteFile (in: hFile=0x230, lpBuffer=0x28a08b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a08b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.430] CloseHandle (hObject=0x230) returned 1 [0074.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", lpFilePart=0x0) returned 0x52 [0074.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015", lpFilePart=0x0) returned 0x52 [0074.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.496] SetErrorMode (uMode=0x1) returned 0x0 [0074.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000015"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e7cff19, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8e7cff19, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ed519ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4192)) returned 1 [0074.497] SetErrorMode (uMode=0x0) returned 0x1 [0074.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000015"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000015.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000015.partially.cryptonar")) returned 1 [0074.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", lpFilePart=0x0) returned 0x52 [0074.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", lpFilePart=0x0) returned 0x52 [0074.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", lpFilePart=0x0) returned 0x52 [0074.498] SetErrorMode (uMode=0x1) returned 0x0 [0074.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000016"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.499] GetFileType (hFile=0x230) returned 0x1 [0074.499] SetErrorMode (uMode=0x0) returned 0x1 [0074.499] GetFileType (hFile=0x230) returned 0x1 [0074.499] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.499] ReadFile (in: hFile=0x230, lpBuffer=0x28a3f10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a3f10*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.516] WriteFile (in: hFile=0x230, lpBuffer=0x28a3f10*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a3f10*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.516] CloseHandle (hObject=0x230) returned 1 [0074.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", lpFilePart=0x0) returned 0x52 [0074.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016", lpFilePart=0x0) returned 0x52 [0074.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.568] SetErrorMode (uMode=0x1) returned 0x0 [0074.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000016"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb3041f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8eb3041f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ee5cd29, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x25f0a)) returned 1 [0074.568] SetErrorMode (uMode=0x0) returned 0x1 [0074.568] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000016"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000016.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000016.partially.cryptonar")) returned 1 [0074.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", lpFilePart=0x0) returned 0x52 [0074.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", lpFilePart=0x0) returned 0x52 [0074.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", lpFilePart=0x0) returned 0x52 [0074.570] SetErrorMode (uMode=0x1) returned 0x0 [0074.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000017"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.570] GetFileType (hFile=0x230) returned 0x1 [0074.570] SetErrorMode (uMode=0x0) returned 0x1 [0074.570] GetFileType (hFile=0x230) returned 0x1 [0074.570] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.571] ReadFile (in: hFile=0x230, lpBuffer=0x28a7570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a7570*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.572] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.573] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.573] WriteFile (in: hFile=0x230, lpBuffer=0x28a7570*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a7570*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.573] CloseHandle (hObject=0x230) returned 1 [0074.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", lpFilePart=0x0) returned 0x52 [0074.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017", lpFilePart=0x0) returned 0x52 [0074.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.575] SetErrorMode (uMode=0x1) returned 0x0 [0074.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000017"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ecad221, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8ecad221, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ee5cd29, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb74d)) returned 1 [0074.575] SetErrorMode (uMode=0x0) returned 0x1 [0074.575] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000017"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000017.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000017.partially.cryptonar")) returned 1 [0074.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", lpFilePart=0x0) returned 0x52 [0074.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", lpFilePart=0x0) returned 0x52 [0074.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", lpFilePart=0x0) returned 0x52 [0074.576] SetErrorMode (uMode=0x1) returned 0x0 [0074.576] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000018"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.576] GetFileType (hFile=0x230) returned 0x1 [0074.576] SetErrorMode (uMode=0x0) returned 0x1 [0074.577] GetFileType (hFile=0x230) returned 0x1 [0074.577] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.577] ReadFile (in: hFile=0x230, lpBuffer=0x28aabd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28aabd0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.578] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.579] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.579] WriteFile (in: hFile=0x230, lpBuffer=0x28aabd0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28aabd0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.579] CloseHandle (hObject=0x230) returned 1 [0074.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", lpFilePart=0x0) returned 0x52 [0074.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018", lpFilePart=0x0) returned 0x52 [0074.675] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.675] SetErrorMode (uMode=0x1) returned 0x0 [0074.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000018"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f0a2627, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8f0a2627, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ef67df8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10fe0)) returned 1 [0074.675] SetErrorMode (uMode=0x0) returned 0x1 [0074.676] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000018"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_000018.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_000018.partially.cryptonar")) returned 1 [0074.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", lpFilePart=0x0) returned 0x52 [0074.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", lpFilePart=0x0) returned 0x52 [0074.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", lpFilePart=0x0) returned 0x52 [0074.677] SetErrorMode (uMode=0x1) returned 0x0 [0074.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.678] GetFileType (hFile=0x230) returned 0x1 [0074.678] SetErrorMode (uMode=0x0) returned 0x1 [0074.678] GetFileType (hFile=0x230) returned 0x1 [0074.678] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.678] ReadFile (in: hFile=0x230, lpBuffer=0x28ae230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28ae230*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.680] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.680] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.680] WriteFile (in: hFile=0x230, lpBuffer=0x28ae230*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28ae230*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.680] CloseHandle (hObject=0x230) returned 1 [0074.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", lpFilePart=0x0) returned 0x52 [0074.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a", lpFilePart=0x0) returned 0x52 [0074.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.682] SetErrorMode (uMode=0x1) returned 0x0 [0074.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74d2847, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb74d2847, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2ef67df8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12530)) returned 1 [0074.682] SetErrorMode (uMode=0x0) returned 0x1 [0074.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001a.partially.cryptonar")) returned 1 [0074.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", lpFilePart=0x0) returned 0x52 [0074.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", lpFilePart=0x0) returned 0x52 [0074.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", lpFilePart=0x0) returned 0x52 [0074.683] SetErrorMode (uMode=0x1) returned 0x0 [0074.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.716] GetFileType (hFile=0x230) returned 0x1 [0074.717] SetErrorMode (uMode=0x0) returned 0x1 [0074.717] GetFileType (hFile=0x230) returned 0x1 [0074.717] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.717] ReadFile (in: hFile=0x230, lpBuffer=0x28b1890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b1890*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.742] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.742] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.742] WriteFile (in: hFile=0x230, lpBuffer=0x28b1890*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b1890*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.742] CloseHandle (hObject=0x230) returned 1 [0074.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", lpFilePart=0x0) returned 0x52 [0074.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b", lpFilePart=0x0) returned 0x52 [0074.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.770] SetErrorMode (uMode=0x1) returned 0x0 [0074.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb79b706e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb79b706e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f04cc11, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe503)) returned 1 [0074.770] SetErrorMode (uMode=0x0) returned 0x1 [0074.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001b.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001b.partially.cryptonar")) returned 1 [0074.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", lpFilePart=0x0) returned 0x52 [0074.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", lpFilePart=0x0) returned 0x52 [0074.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", lpFilePart=0x0) returned 0x52 [0074.771] SetErrorMode (uMode=0x1) returned 0x0 [0074.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.772] GetFileType (hFile=0x230) returned 0x1 [0074.772] SetErrorMode (uMode=0x0) returned 0x1 [0074.772] GetFileType (hFile=0x230) returned 0x1 [0074.772] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.772] ReadFile (in: hFile=0x230, lpBuffer=0x28b4ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b4ef0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.774] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.774] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.774] WriteFile (in: hFile=0x230, lpBuffer=0x28b4ef0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b4ef0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.774] CloseHandle (hObject=0x230) returned 1 [0074.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", lpFilePart=0x0) returned 0x52 [0074.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c", lpFilePart=0x0) returned 0x52 [0074.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.776] SetErrorMode (uMode=0x1) returned 0x0 [0074.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75c6fab6, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75c6fab6, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2f04cc11, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4403)) returned 1 [0074.776] SetErrorMode (uMode=0x0) returned 0x1 [0074.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001c.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001c.partially.cryptonar")) returned 1 [0074.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", lpFilePart=0x0) returned 0x52 [0074.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", lpFilePart=0x0) returned 0x52 [0074.777] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", lpFilePart=0x0) returned 0x52 [0074.777] SetErrorMode (uMode=0x1) returned 0x0 [0074.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.778] GetFileType (hFile=0x230) returned 0x1 [0074.778] SetErrorMode (uMode=0x0) returned 0x1 [0074.778] GetFileType (hFile=0x230) returned 0x1 [0074.778] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.778] ReadFile (in: hFile=0x230, lpBuffer=0x28b8550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b8550*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.787] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.787] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.787] WriteFile (in: hFile=0x230, lpBuffer=0x28b8550*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b8550*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.787] CloseHandle (hObject=0x230) returned 1 [0074.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", lpFilePart=0x0) returned 0x52 [0074.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d", lpFilePart=0x0) returned 0x52 [0074.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.790] SetErrorMode (uMode=0x1) returned 0x0 [0074.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76073958, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76073958, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2f072d95, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10314)) returned 1 [0074.790] SetErrorMode (uMode=0x0) returned 0x1 [0074.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001d.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001d.partially.cryptonar")) returned 1 [0074.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", lpFilePart=0x0) returned 0x52 [0074.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", lpFilePart=0x0) returned 0x52 [0074.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", lpFilePart=0x0) returned 0x52 [0074.791] SetErrorMode (uMode=0x1) returned 0x0 [0074.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.791] GetFileType (hFile=0x230) returned 0x1 [0074.791] SetErrorMode (uMode=0x0) returned 0x1 [0074.792] GetFileType (hFile=0x230) returned 0x1 [0074.792] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.792] ReadFile (in: hFile=0x230, lpBuffer=0x28bbbb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28bbbb0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.817] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.817] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.817] WriteFile (in: hFile=0x230, lpBuffer=0x28bbbb0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28bbbb0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.818] CloseHandle (hObject=0x230) returned 1 [0074.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", lpFilePart=0x0) returned 0x52 [0074.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e", lpFilePart=0x0) returned 0x52 [0074.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.819] SetErrorMode (uMode=0x1) returned 0x0 [0074.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76466600, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76466600, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2f0bf2f6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe425)) returned 1 [0074.820] SetErrorMode (uMode=0x0) returned 0x1 [0074.820] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001e.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001e.partially.cryptonar")) returned 1 [0074.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", lpFilePart=0x0) returned 0x52 [0074.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", lpFilePart=0x0) returned 0x52 [0074.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", lpFilePart=0x0) returned 0x52 [0074.821] SetErrorMode (uMode=0x1) returned 0x0 [0074.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.821] GetFileType (hFile=0x230) returned 0x1 [0074.821] SetErrorMode (uMode=0x0) returned 0x1 [0074.821] GetFileType (hFile=0x230) returned 0x1 [0074.821] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.821] ReadFile (in: hFile=0x230, lpBuffer=0x28bf210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28bf210*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.851] WriteFile (in: hFile=0x230, lpBuffer=0x28bf210*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28bf210*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.851] CloseHandle (hObject=0x230) returned 1 [0074.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", lpFilePart=0x0) returned 0x52 [0074.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f", lpFilePart=0x0) returned 0x52 [0074.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0074.869] SetErrorMode (uMode=0x1) returned 0x0 [0074.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768ce617, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768ce617, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2f1319e2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf65)) returned 1 [0074.869] SetErrorMode (uMode=0x0) returned 0x1 [0074.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\f_00001f.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\f_00001f.partially.cryptonar")) returned 1 [0074.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x4f [0074.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x4f [0074.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x4f [0074.870] SetErrorMode (uMode=0x1) returned 0x0 [0074.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.870] GetFileType (hFile=0x230) returned 0x1 [0074.870] SetErrorMode (uMode=0x0) returned 0x1 [0074.870] GetFileType (hFile=0x230) returned 0x1 [0074.870] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.870] ReadFile (in: hFile=0x230, lpBuffer=0x28c2848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28c2848*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.915] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.916] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.916] WriteFile (in: hFile=0x230, lpBuffer=0x28c2848*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28c2848*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.916] CloseHandle (hObject=0x230) returned 1 [0074.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x4f [0074.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x4f [0074.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0074.928] SetErrorMode (uMode=0x1) returned 0x0 [0074.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72056acc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x72056acc, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f1ca283, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1 [0074.928] SetErrorMode (uMode=0x0) returned 0x1 [0074.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index.partially.cryptonar")) returned 1 [0074.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", lpFilePart=0x0) returned 0x5a [0074.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", lpFilePart=0x0) returned 0x5a [0074.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", lpFilePart=0x0) returned 0x5a [0074.929] SetErrorMode (uMode=0x1) returned 0x0 [0074.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.929] GetFileType (hFile=0x230) returned 0x1 [0074.929] SetErrorMode (uMode=0x0) returned 0x1 [0074.929] GetFileType (hFile=0x230) returned 0x1 [0074.929] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.929] ReadFile (in: hFile=0x230, lpBuffer=0x28c5ef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28c5ef8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0074.932] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0074.932] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.932] WriteFile (in: hFile=0x230, lpBuffer=0x28c5ef8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28c5ef8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0074.932] CloseHandle (hObject=0x230) returned 1 [0074.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", lpFilePart=0x0) returned 0x5a [0074.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db", lpFilePart=0x0) returned 0x5a [0074.933] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0074.933] SetErrorMode (uMode=0x1) returned 0x0 [0074.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d46f718, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d46f718, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f1ca283, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0074.933] SetErrorMode (uMode=0x0) returned 0x1 [0074.933] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db.partially.cryptonar")) returned 1 [0074.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", lpFilePart=0x0) returned 0x62 [0074.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", lpFilePart=0x0) returned 0x62 [0074.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", lpFilePart=0x0) returned 0x62 [0074.935] SetErrorMode (uMode=0x1) returned 0x0 [0074.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.935] GetFileType (hFile=0x230) returned 0x1 [0074.935] SetErrorMode (uMode=0x0) returned 0x1 [0074.935] GetFileType (hFile=0x230) returned 0x1 [0074.935] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.935] ReadFile (in: hFile=0x230, lpBuffer=0x28c96a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28c96a8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0074.935] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.935] CloseHandle (hObject=0x230) returned 1 [0074.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", lpFilePart=0x0) returned 0x62 [0074.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal", lpFilePart=0x0) returned 0x62 [0074.936] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal.partially.cryptoNar", lpFilePart=0x0) returned 0x76 [0074.936] SetErrorMode (uMode=0x1) returned 0x0 [0074.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d46f718, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d46f718, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d5a314e, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0074.936] SetErrorMode (uMode=0x0) returned 0x1 [0074.936] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\databases\\Databases.db-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\databases\\databases.db-journal.partially.cryptonar")) returned 1 [0074.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFilePart=0x0) returned 0x6b [0074.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFilePart=0x0) returned 0x6b [0074.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFilePart=0x0) returned 0x6b [0074.937] SetErrorMode (uMode=0x1) returned 0x0 [0074.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.939] GetFileType (hFile=0x230) returned 0x1 [0074.939] SetErrorMode (uMode=0x0) returned 0x1 [0074.939] GetFileType (hFile=0x230) returned 0x1 [0074.939] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.939] ReadFile (in: hFile=0x230, lpBuffer=0x28ccac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28ccac0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0074.939] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.939] CloseHandle (hObject=0x230) returned 1 [0074.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFilePart=0x0) returned 0x6b [0074.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log", lpFilePart=0x0) returned 0x6b [0074.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log.partially.cryptoNar", lpFilePart=0x0) returned 0x7f [0074.939] SetErrorMode (uMode=0x1) returned 0x0 [0074.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714dd573, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x714dd573, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x714dd573, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0074.940] SetErrorMode (uMode=0x0) returned 0x1 [0074.940] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log.partially.cryptonar")) returned 1 [0074.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x68 [0074.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x68 [0074.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x68 [0074.940] SetErrorMode (uMode=0x1) returned 0x0 [0074.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0074.941] GetFileType (hFile=0x230) returned 0x1 [0074.941] SetErrorMode (uMode=0x0) returned 0x1 [0074.941] GetFileType (hFile=0x230) returned 0x1 [0074.941] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.941] ReadFile (in: hFile=0x230, lpBuffer=0x28cfed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28cfed8*, lpNumberOfBytesRead=0x5ae8b8*=0x10, lpOverlapped=0x0) returned 1 [0074.941] ReadFile (in: hFile=0x230, lpBuffer=0x28cfed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28cfed8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0074.941] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0074.942] WriteFile (in: hFile=0x230, lpBuffer=0x28cfed8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28cfed8*, lpNumberOfBytesWritten=0x5ae8a8*=0x10, lpOverlapped=0x0) returned 1 [0074.942] CloseHandle (hObject=0x230) returned 1 [0075.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x68 [0075.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x68 [0075.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.partially.cryptoNar", lpFilePart=0x0) returned 0x7c [0075.066] SetErrorMode (uMode=0x1) returned 0x0 [0075.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f32a024, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0075.067] SetErrorMode (uMode=0x0) returned 0x1 [0075.067] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current.partially.cryptonar")) returned 1 [0075.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x65 [0075.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x65 [0075.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x65 [0075.068] SetErrorMode (uMode=0x1) returned 0x0 [0075.068] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.068] GetFileType (hFile=0x230) returned 0x1 [0075.068] SetErrorMode (uMode=0x0) returned 0x1 [0075.068] GetFileType (hFile=0x230) returned 0x1 [0075.068] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.068] ReadFile (in: hFile=0x230, lpBuffer=0x28d32f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28d32f0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.068] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.068] CloseHandle (hObject=0x230) returned 1 [0075.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x65 [0075.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x65 [0075.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK.partially.cryptoNar", lpFilePart=0x0) returned 0x79 [0075.069] SetErrorMode (uMode=0x1) returned 0x0 [0075.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7141e9ad, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.069] SetErrorMode (uMode=0x0) returned 0x1 [0075.069] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock.partially.cryptonar")) returned 1 [0075.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x64 [0075.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x64 [0075.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x64 [0075.070] SetErrorMode (uMode=0x1) returned 0x0 [0075.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.071] GetFileType (hFile=0x230) returned 0x1 [0075.071] SetErrorMode (uMode=0x0) returned 0x1 [0075.071] GetFileType (hFile=0x230) returned 0x1 [0075.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.071] ReadFile (in: hFile=0x230, lpBuffer=0x28d66b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28d66b0*, lpNumberOfBytesRead=0x5ae8b8*=0x168, lpOverlapped=0x0) returned 1 [0075.072] ReadFile (in: hFile=0x230, lpBuffer=0x28d66b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28d66b0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.072] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.072] WriteFile (in: hFile=0x230, lpBuffer=0x28d66b0*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28d66b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x168, lpOverlapped=0x0) returned 1 [0075.072] CloseHandle (hObject=0x230) returned 1 [0075.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x64 [0075.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x64 [0075.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.partially.cryptoNar", lpFilePart=0x0) returned 0x78 [0075.079] SetErrorMode (uMode=0x1) returned 0x0 [0075.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74c69a3a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2f32a024, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x168)) returned 1 [0075.079] SetErrorMode (uMode=0x0) returned 0x1 [0075.079] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.partially.cryptonar")) returned 1 [0075.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", lpFilePart=0x0) returned 0x68 [0075.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", lpFilePart=0x0) returned 0x68 [0075.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", lpFilePart=0x0) returned 0x68 [0075.080] SetErrorMode (uMode=0x1) returned 0x0 [0075.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.old"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.081] GetFileType (hFile=0x230) returned 0x1 [0075.081] SetErrorMode (uMode=0x0) returned 0x1 [0075.081] GetFileType (hFile=0x230) returned 0x1 [0075.081] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.081] ReadFile (in: hFile=0x230, lpBuffer=0x28d9db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28d9db0*, lpNumberOfBytesRead=0x5ae8b8*=0x168, lpOverlapped=0x0) returned 1 [0075.082] ReadFile (in: hFile=0x230, lpBuffer=0x28d9db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28d9db0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.082] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.082] WriteFile (in: hFile=0x230, lpBuffer=0x28d9db0*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28d9db0*, lpNumberOfBytesWritten=0x5ae8a8*=0x168, lpOverlapped=0x0) returned 1 [0075.082] CloseHandle (hObject=0x230) returned 1 [0075.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", lpFilePart=0x0) returned 0x68 [0075.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old", lpFilePart=0x0) returned 0x68 [0075.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old.partially.cryptoNar", lpFilePart=0x0) returned 0x7c [0075.083] SetErrorMode (uMode=0x1) returned 0x0 [0075.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xbf38cf6c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f349934, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x168)) returned 1 [0075.083] SetErrorMode (uMode=0x0) returned 0x1 [0075.083] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.old.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.old.partially.cryptonar")) returned 1 [0075.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x70 [0075.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x70 [0075.084] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x70 [0075.084] SetErrorMode (uMode=0x1) returned 0x0 [0075.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.084] GetFileType (hFile=0x230) returned 0x1 [0075.084] SetErrorMode (uMode=0x0) returned 0x1 [0075.084] GetFileType (hFile=0x230) returned 0x1 [0075.084] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.084] ReadFile (in: hFile=0x230, lpBuffer=0x28dd4e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28dd4e0*, lpNumberOfBytesRead=0x5ae8b8*=0x29, lpOverlapped=0x0) returned 1 [0075.085] ReadFile (in: hFile=0x230, lpBuffer=0x28dd4e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28dd4e0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.085] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.085] WriteFile (in: hFile=0x230, lpBuffer=0x28dd4e0*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28dd4e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x29, lpOverlapped=0x0) returned 1 [0075.086] CloseHandle (hObject=0x230) returned 1 [0075.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x70 [0075.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x70 [0075.086] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0075.086] SetErrorMode (uMode=0x1) returned 0x0 [0075.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7141e9ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7141e9ad, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f349934, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0075.087] SetErrorMode (uMode=0x0) returned 0x1 [0075.087] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001.partially.cryptonar")) returned 1 [0075.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x5e [0075.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x5e [0075.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x5e [0075.088] SetErrorMode (uMode=0x1) returned 0x0 [0075.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.090] GetFileType (hFile=0x230) returned 0x1 [0075.090] SetErrorMode (uMode=0x0) returned 0x1 [0075.090] GetFileType (hFile=0x230) returned 0x1 [0075.090] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.090] ReadFile (in: hFile=0x230, lpBuffer=0x28e09c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28e09c8*, lpNumberOfBytesRead=0x5ae8b8*=0x214, lpOverlapped=0x0) returned 1 [0075.091] ReadFile (in: hFile=0x230, lpBuffer=0x28e09c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28e09c8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.091] WriteFile (in: hFile=0x230, lpBuffer=0x28e09c8*, nNumberOfBytesToWrite=0x214, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28e09c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x214, lpOverlapped=0x0) returned 1 [0075.091] CloseHandle (hObject=0x230) returned 1 [0075.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x5e [0075.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x5e [0075.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.partially.cryptoNar", lpFilePart=0x0) returned 0x72 [0075.092] SetErrorMode (uMode=0x1) returned 0x0 [0075.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7296b0b6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7296b0b6, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f349934, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x214)) returned 1 [0075.092] SetErrorMode (uMode=0x0) returned 0x1 [0075.092] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log.partially.cryptonar")) returned 1 [0075.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x5b [0075.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x5b [0075.094] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x5b [0075.094] SetErrorMode (uMode=0x1) returned 0x0 [0075.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.094] GetFileType (hFile=0x230) returned 0x1 [0075.094] SetErrorMode (uMode=0x0) returned 0x1 [0075.094] GetFileType (hFile=0x230) returned 0x1 [0075.094] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.099] ReadFile (in: hFile=0x230, lpBuffer=0x26bc280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26bc280*, lpNumberOfBytesRead=0x5ae8b8*=0x10, lpOverlapped=0x0) returned 1 [0075.100] ReadFile (in: hFile=0x230, lpBuffer=0x26bc280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26bc280*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.100] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.100] WriteFile (in: hFile=0x230, lpBuffer=0x26bc280*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26bc280*, lpNumberOfBytesWritten=0x5ae8a8*=0x10, lpOverlapped=0x0) returned 1 [0075.100] CloseHandle (hObject=0x230) returned 1 [0075.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x5b [0075.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x5b [0075.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.partially.cryptoNar", lpFilePart=0x0) returned 0x6f [0075.100] SetErrorMode (uMode=0x1) returned 0x0 [0075.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f36dd1f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0075.101] SetErrorMode (uMode=0x0) returned 0x1 [0075.101] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current.partially.cryptonar")) returned 1 [0075.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x58 [0075.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x58 [0075.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x58 [0075.101] SetErrorMode (uMode=0x1) returned 0x0 [0075.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.102] GetFileType (hFile=0x230) returned 0x1 [0075.102] SetErrorMode (uMode=0x0) returned 0x1 [0075.102] GetFileType (hFile=0x230) returned 0x1 [0075.102] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.102] ReadFile (in: hFile=0x230, lpBuffer=0x26bf590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26bf590*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.102] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.102] CloseHandle (hObject=0x230) returned 1 [0075.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x58 [0075.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x58 [0075.102] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0075.102] SetErrorMode (uMode=0x1) returned 0x0 [0075.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x728aa275, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.102] SetErrorMode (uMode=0x0) returned 0x1 [0075.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock.partially.cryptonar")) returned 1 [0075.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x57 [0075.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x57 [0075.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x57 [0075.103] SetErrorMode (uMode=0x1) returned 0x0 [0075.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.103] GetFileType (hFile=0x230) returned 0x1 [0075.103] SetErrorMode (uMode=0x0) returned 0x1 [0075.103] GetFileType (hFile=0x230) returned 0x1 [0075.104] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.104] ReadFile (in: hFile=0x230, lpBuffer=0x26c2858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c2858*, lpNumberOfBytesRead=0x5ae8b8*=0x14e, lpOverlapped=0x0) returned 1 [0075.105] ReadFile (in: hFile=0x230, lpBuffer=0x26c2858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c2858*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.105] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.105] WriteFile (in: hFile=0x230, lpBuffer=0x26c2858*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c2858*, lpNumberOfBytesWritten=0x5ae8a8*=0x14e, lpOverlapped=0x0) returned 1 [0075.105] CloseHandle (hObject=0x230) returned 1 [0075.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x57 [0075.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x57 [0075.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0075.106] SetErrorMode (uMode=0x1) returned 0x0 [0075.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8972424, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f36dd1f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0075.106] SetErrorMode (uMode=0x0) returned 0x1 [0075.106] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.partially.cryptonar")) returned 1 [0075.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", lpFilePart=0x0) returned 0x5b [0075.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", lpFilePart=0x0) returned 0x5b [0075.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", lpFilePart=0x0) returned 0x5b [0075.107] SetErrorMode (uMode=0x1) returned 0x0 [0075.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.old"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.107] GetFileType (hFile=0x230) returned 0x1 [0075.107] SetErrorMode (uMode=0x0) returned 0x1 [0075.107] GetFileType (hFile=0x230) returned 0x1 [0075.107] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.107] ReadFile (in: hFile=0x230, lpBuffer=0x26c5e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c5e08*, lpNumberOfBytesRead=0x5ae8b8*=0x92, lpOverlapped=0x0) returned 1 [0075.108] ReadFile (in: hFile=0x230, lpBuffer=0x26c5e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c5e08*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.108] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.108] WriteFile (in: hFile=0x230, lpBuffer=0x26c5e08*, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c5e08*, lpNumberOfBytesWritten=0x5ae8a8*=0x92, lpOverlapped=0x0) returned 1 [0075.109] CloseHandle (hObject=0x230) returned 1 [0075.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", lpFilePart=0x0) returned 0x5b [0075.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old", lpFilePart=0x0) returned 0x5b [0075.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old.partially.cryptoNar", lpFilePart=0x0) returned 0x6f [0075.110] SetErrorMode (uMode=0x1) returned 0x0 [0075.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f393fdf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x92)) returned 1 [0075.111] SetErrorMode (uMode=0x0) returned 0x1 [0075.111] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.old.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.old.partially.cryptonar")) returned 1 [0075.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0075.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0075.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0075.112] SetErrorMode (uMode=0x1) returned 0x0 [0075.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.113] GetFileType (hFile=0x230) returned 0x1 [0075.113] SetErrorMode (uMode=0x0) returned 0x1 [0075.113] GetFileType (hFile=0x230) returned 0x1 [0075.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.113] ReadFile (in: hFile=0x230, lpBuffer=0x26c9278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c9278*, lpNumberOfBytesRead=0x5ae8b8*=0x29, lpOverlapped=0x0) returned 1 [0075.114] ReadFile (in: hFile=0x230, lpBuffer=0x26c9278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c9278*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.114] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.114] WriteFile (in: hFile=0x230, lpBuffer=0x26c9278*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c9278*, lpNumberOfBytesWritten=0x5ae8a8*=0x29, lpOverlapped=0x0) returned 1 [0075.114] CloseHandle (hObject=0x230) returned 1 [0075.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0075.114] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0075.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.partially.cryptoNar", lpFilePart=0x0) returned 0x77 [0075.115] SetErrorMode (uMode=0x1) returned 0x0 [0075.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728aa275, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x728aa275, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f393fdf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0075.115] SetErrorMode (uMode=0x0) returned 0x1 [0075.115] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001.partially.cryptonar")) returned 1 [0075.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x5e [0075.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x5e [0075.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x5e [0075.116] SetErrorMode (uMode=0x1) returned 0x0 [0075.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.121] GetFileType (hFile=0x230) returned 0x1 [0075.121] SetErrorMode (uMode=0x0) returned 0x1 [0075.121] GetFileType (hFile=0x230) returned 0x1 [0075.121] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.121] ReadFile (in: hFile=0x230, lpBuffer=0x26cc6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cc6a0*, lpNumberOfBytesRead=0x5ae8b8*=0x4e6, lpOverlapped=0x0) returned 1 [0075.132] SetFilePointer (in: hFile=0x230, lDistanceToMove=-230, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0075.132] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.132] WriteFile (in: hFile=0x230, lpBuffer=0x26cc6a0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cc6a0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0075.132] CloseHandle (hObject=0x230) returned 1 [0075.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x5e [0075.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x5e [0075.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.partially.cryptoNar", lpFilePart=0x0) returned 0x72 [0075.133] SetErrorMode (uMode=0x1) returned 0x0 [0075.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a7bd36, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76a7bd36, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f3ba16c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e6)) returned 1 [0075.133] SetErrorMode (uMode=0x0) returned 0x1 [0075.134] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log.partially.cryptonar")) returned 1 [0075.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x5b [0075.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x5b [0075.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x5b [0075.134] SetErrorMode (uMode=0x1) returned 0x0 [0075.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.135] GetFileType (hFile=0x230) returned 0x1 [0075.135] SetErrorMode (uMode=0x0) returned 0x1 [0075.135] GetFileType (hFile=0x230) returned 0x1 [0075.135] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.135] ReadFile (in: hFile=0x230, lpBuffer=0x26cfda8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cfda8*, lpNumberOfBytesRead=0x5ae8b8*=0x10, lpOverlapped=0x0) returned 1 [0075.136] ReadFile (in: hFile=0x230, lpBuffer=0x26cfda8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cfda8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.136] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.136] WriteFile (in: hFile=0x230, lpBuffer=0x26cfda8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cfda8*, lpNumberOfBytesWritten=0x5ae8a8*=0x10, lpOverlapped=0x0) returned 1 [0075.136] CloseHandle (hObject=0x230) returned 1 [0075.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x5b [0075.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x5b [0075.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.partially.cryptoNar", lpFilePart=0x0) returned 0x6f [0075.137] SetErrorMode (uMode=0x1) returned 0x0 [0075.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e6e48, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x769e6e48, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f3ba16c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0075.137] SetErrorMode (uMode=0x0) returned 0x1 [0075.137] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current.partially.cryptonar")) returned 1 [0075.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x58 [0075.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x58 [0075.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x58 [0075.138] SetErrorMode (uMode=0x1) returned 0x0 [0075.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.139] GetFileType (hFile=0x230) returned 0x1 [0075.139] SetErrorMode (uMode=0x0) returned 0x1 [0075.139] GetFileType (hFile=0x230) returned 0x1 [0075.139] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.139] ReadFile (in: hFile=0x230, lpBuffer=0x26d30b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d30b8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.139] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.139] CloseHandle (hObject=0x230) returned 1 [0075.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x58 [0075.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x58 [0075.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0075.139] SetErrorMode (uMode=0x1) returned 0x0 [0075.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x769e4729, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x769e4729, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.139] SetErrorMode (uMode=0x0) returned 0x1 [0075.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock.partially.cryptonar")) returned 1 [0075.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x57 [0075.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x57 [0075.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x57 [0075.141] SetErrorMode (uMode=0x1) returned 0x0 [0075.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.142] GetFileType (hFile=0x230) returned 0x1 [0075.142] SetErrorMode (uMode=0x0) returned 0x1 [0075.142] GetFileType (hFile=0x230) returned 0x1 [0075.142] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.142] ReadFile (in: hFile=0x230, lpBuffer=0x26d6380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d6380*, lpNumberOfBytesRead=0x5ae8b8*=0x14e, lpOverlapped=0x0) returned 1 [0075.143] ReadFile (in: hFile=0x230, lpBuffer=0x26d6380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d6380*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.143] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.143] WriteFile (in: hFile=0x230, lpBuffer=0x26d6380*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d6380*, lpNumberOfBytesWritten=0x5ae8a8*=0x14e, lpOverlapped=0x0) returned 1 [0075.143] CloseHandle (hObject=0x230) returned 1 [0075.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x57 [0075.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x57 [0075.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0075.145] SetErrorMode (uMode=0x1) returned 0x0 [0075.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7665ae58, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x2f3e05e7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0075.145] SetErrorMode (uMode=0x0) returned 0x1 [0075.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.partially.cryptonar")) returned 1 [0075.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", lpFilePart=0x0) returned 0x5b [0075.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", lpFilePart=0x0) returned 0x5b [0075.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", lpFilePart=0x0) returned 0x5b [0075.146] SetErrorMode (uMode=0x1) returned 0x0 [0075.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.old"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.146] GetFileType (hFile=0x230) returned 0x1 [0075.146] SetErrorMode (uMode=0x0) returned 0x1 [0075.147] GetFileType (hFile=0x230) returned 0x1 [0075.147] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.147] ReadFile (in: hFile=0x230, lpBuffer=0x26d9930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d9930*, lpNumberOfBytesRead=0x5ae8b8*=0x14e, lpOverlapped=0x0) returned 1 [0075.148] ReadFile (in: hFile=0x230, lpBuffer=0x26d9930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d9930*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.148] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.148] WriteFile (in: hFile=0x230, lpBuffer=0x26d9930*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d9930*, lpNumberOfBytesWritten=0x5ae8a8*=0x14e, lpOverlapped=0x0) returned 1 [0075.148] CloseHandle (hObject=0x230) returned 1 [0075.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", lpFilePart=0x0) returned 0x5b [0075.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old", lpFilePart=0x0) returned 0x5b [0075.150] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old.partially.cryptoNar", lpFilePart=0x0) returned 0x6f [0075.150] SetErrorMode (uMode=0x1) returned 0x0 [0075.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7734e80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f3e05e7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0075.150] SetErrorMode (uMode=0x0) returned 0x1 [0075.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.old.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.old.partially.cryptonar")) returned 1 [0075.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0075.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0075.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0075.152] SetErrorMode (uMode=0x1) returned 0x0 [0075.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.152] GetFileType (hFile=0x230) returned 0x1 [0075.152] SetErrorMode (uMode=0x0) returned 0x1 [0075.152] GetFileType (hFile=0x230) returned 0x1 [0075.152] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.152] ReadFile (in: hFile=0x230, lpBuffer=0x26dcf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26dcf10*, lpNumberOfBytesRead=0x5ae8b8*=0x29, lpOverlapped=0x0) returned 1 [0075.153] ReadFile (in: hFile=0x230, lpBuffer=0x26dcf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26dcf10*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.153] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.153] WriteFile (in: hFile=0x230, lpBuffer=0x26dcf10*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26dcf10*, lpNumberOfBytesWritten=0x5ae8a8*=0x29, lpOverlapped=0x0) returned 1 [0075.154] CloseHandle (hObject=0x230) returned 1 [0075.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0075.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0075.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.partially.cryptoNar", lpFilePart=0x0) returned 0x77 [0075.154] SetErrorMode (uMode=0x1) returned 0x0 [0075.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x769e4729, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x769e4729, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f3e05e7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0075.154] SetErrorMode (uMode=0x0) returned 0x1 [0075.154] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001.partially.cryptonar")) returned 1 [0075.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0075.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0075.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0075.155] SetErrorMode (uMode=0x1) returned 0x0 [0075.156] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.157] GetFileType (hFile=0x230) returned 0x1 [0075.157] SetErrorMode (uMode=0x0) returned 0x1 [0075.157] GetFileType (hFile=0x230) returned 0x1 [0075.157] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.157] ReadFile (in: hFile=0x230, lpBuffer=0x26e0420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e0420*, lpNumberOfBytesRead=0x5ae8b8*=0xd2c, lpOverlapped=0x0) returned 1 [0075.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=-2348, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0075.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.220] WriteFile (in: hFile=0x230, lpBuffer=0x26e0420*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e0420*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0075.220] CloseHandle (hObject=0x230) returned 1 [0075.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0075.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x82 [0075.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.partially.cryptoNar", lpFilePart=0x0) returned 0x96 [0075.221] SetErrorMode (uMode=0x1) returned 0x0 [0075.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7554aae7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7580ebb8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f49f8c9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd2c)) returned 1 [0075.221] SetErrorMode (uMode=0x0) returned 0x1 [0075.221] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.partially.cryptonar")) returned 1 [0075.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0075.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0075.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0075.222] SetErrorMode (uMode=0x1) returned 0x0 [0075.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.223] GetFileType (hFile=0x230) returned 0x1 [0075.223] SetErrorMode (uMode=0x0) returned 0x1 [0075.223] GetFileType (hFile=0x230) returned 0x1 [0075.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.223] ReadFile (in: hFile=0x230, lpBuffer=0x26e3e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e3e30*, lpNumberOfBytesRead=0x5ae8b8*=0xa0, lpOverlapped=0x0) returned 1 [0075.224] ReadFile (in: hFile=0x230, lpBuffer=0x26e3e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e3e30*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.224] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.224] WriteFile (in: hFile=0x230, lpBuffer=0x26e3e30*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e3e30*, lpNumberOfBytesWritten=0x5ae8a8*=0xa0, lpOverlapped=0x0) returned 1 [0075.224] CloseHandle (hObject=0x230) returned 1 [0075.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0075.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x81 [0075.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.partially.cryptoNar", lpFilePart=0x0) returned 0x95 [0075.225] SetErrorMode (uMode=0x1) returned 0x0 [0075.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7555202f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7580ebb8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f49f8c9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0075.225] SetErrorMode (uMode=0x0) returned 0x1 [0075.226] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.partially.cryptonar")) returned 1 [0075.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0075.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0075.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0075.227] SetErrorMode (uMode=0x1) returned 0x0 [0075.227] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.227] GetFileType (hFile=0x230) returned 0x1 [0075.227] SetErrorMode (uMode=0x0) returned 0x1 [0075.227] GetFileType (hFile=0x230) returned 0x1 [0075.227] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.227] ReadFile (in: hFile=0x230, lpBuffer=0x26e7578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e7578*, lpNumberOfBytesRead=0x5ae8b8*=0x5c, lpOverlapped=0x0) returned 1 [0075.228] ReadFile (in: hFile=0x230, lpBuffer=0x26e7578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e7578*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.228] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.228] WriteFile (in: hFile=0x230, lpBuffer=0x26e7578*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e7578*, lpNumberOfBytesWritten=0x5ae8a8*=0x5c, lpOverlapped=0x0) returned 1 [0075.228] CloseHandle (hObject=0x230) returned 1 [0075.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0075.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x7f [0075.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.partially.cryptoNar", lpFilePart=0x0) returned 0x93 [0075.229] SetErrorMode (uMode=0x1) returned 0x0 [0075.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7555bc70, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7555bb10, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f49f8c9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0075.231] SetErrorMode (uMode=0x0) returned 0x1 [0075.232] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.partially.cryptonar")) returned 1 [0075.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0075.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0075.233] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0075.233] SetErrorMode (uMode=0x1) returned 0x0 [0075.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.235] GetFileType (hFile=0x230) returned 0x1 [0075.235] SetErrorMode (uMode=0x0) returned 0x1 [0075.235] GetFileType (hFile=0x230) returned 0x1 [0075.235] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.237] ReadFile (in: hFile=0x230, lpBuffer=0x26eabf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26eabf8*, lpNumberOfBytesRead=0x5ae8b8*=0x5f, lpOverlapped=0x0) returned 1 [0075.238] ReadFile (in: hFile=0x230, lpBuffer=0x26eabf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26eabf8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.238] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.238] WriteFile (in: hFile=0x230, lpBuffer=0x26eabf8*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26eabf8*, lpNumberOfBytesWritten=0x5ae8a8*=0x5f, lpOverlapped=0x0) returned 1 [0075.239] CloseHandle (hObject=0x230) returned 1 [0075.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0075.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x7d [0075.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.partially.cryptoNar", lpFilePart=0x0) returned 0x91 [0075.240] SetErrorMode (uMode=0x1) returned 0x0 [0075.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75567fb8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7556a570, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f4c5fa6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0075.240] SetErrorMode (uMode=0x0) returned 0x1 [0075.240] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.partially.cryptonar")) returned 1 [0075.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0075.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0075.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0075.241] SetErrorMode (uMode=0x1) returned 0x0 [0075.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.242] GetFileType (hFile=0x230) returned 0x1 [0075.242] SetErrorMode (uMode=0x0) returned 0x1 [0075.242] GetFileType (hFile=0x230) returned 0x1 [0075.242] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.242] ReadFile (in: hFile=0x230, lpBuffer=0x26ee2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ee2b8*, lpNumberOfBytesRead=0x5ae8b8*=0x2d5, lpOverlapped=0x0) returned 1 [0075.261] ReadFile (in: hFile=0x230, lpBuffer=0x26ee2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ee2b8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.261] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.261] WriteFile (in: hFile=0x230, lpBuffer=0x26ee2b8*, nNumberOfBytesToWrite=0x2d5, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ee2b8*, lpNumberOfBytesWritten=0x5ae8a8*=0x2d5, lpOverlapped=0x0) returned 1 [0075.261] CloseHandle (hObject=0x230) returned 1 [0075.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0075.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x83 [0075.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.partially.cryptoNar", lpFilePart=0x0) returned 0x97 [0075.263] SetErrorMode (uMode=0x1) returned 0x0 [0075.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75002104, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75571aa0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f4eb541, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1 [0075.263] SetErrorMode (uMode=0x0) returned 0x1 [0075.264] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.partially.cryptonar")) returned 1 [0075.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0075.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0075.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0075.272] SetErrorMode (uMode=0x1) returned 0x0 [0075.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.275] GetFileType (hFile=0x230) returned 0x1 [0075.275] SetErrorMode (uMode=0x0) returned 0x1 [0075.276] GetFileType (hFile=0x230) returned 0x1 [0075.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.279] ReadFile (in: hFile=0x230, lpBuffer=0x26f1ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f1ee8*, lpNumberOfBytesRead=0x5ae8b8*=0x101, lpOverlapped=0x0) returned 1 [0075.280] ReadFile (in: hFile=0x230, lpBuffer=0x26f1ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f1ee8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.280] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.282] WriteFile (in: hFile=0x230, lpBuffer=0x26f1ee8*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f1ee8*, lpNumberOfBytesWritten=0x5ae8a8*=0x101, lpOverlapped=0x0) returned 1 [0075.283] CloseHandle (hObject=0x230) returned 1 [0075.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0075.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x8f [0075.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.284] SetErrorMode (uMode=0x1) returned 0x0 [0075.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750243e4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75026af0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f538e22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1 [0075.284] SetErrorMode (uMode=0x0) returned 0x1 [0075.284] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.partially.cryptonar")) returned 1 [0075.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0075.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0075.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0075.286] SetErrorMode (uMode=0x1) returned 0x0 [0075.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.286] GetFileType (hFile=0x230) returned 0x1 [0075.286] SetErrorMode (uMode=0x0) returned 0x1 [0075.286] GetFileType (hFile=0x230) returned 0x1 [0075.286] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.286] ReadFile (in: hFile=0x230, lpBuffer=0x26f5808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f5808*, lpNumberOfBytesRead=0x5ae8b8*=0x110, lpOverlapped=0x0) returned 1 [0075.287] ReadFile (in: hFile=0x230, lpBuffer=0x26f5808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f5808*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.287] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.288] WriteFile (in: hFile=0x230, lpBuffer=0x26f5808*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f5808*, lpNumberOfBytesWritten=0x5ae8a8*=0x110, lpOverlapped=0x0) returned 1 [0075.288] CloseHandle (hObject=0x230) returned 1 [0075.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0075.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x8f [0075.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.289] SetErrorMode (uMode=0x1) returned 0x0 [0075.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7502e02f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7502e020, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f538e22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0075.289] SetErrorMode (uMode=0x0) returned 0x1 [0075.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.partially.cryptonar")) returned 1 [0075.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0075.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0075.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0075.290] SetErrorMode (uMode=0x1) returned 0x0 [0075.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.291] GetFileType (hFile=0x230) returned 0x1 [0075.291] SetErrorMode (uMode=0x0) returned 0x1 [0075.291] GetFileType (hFile=0x230) returned 0x1 [0075.291] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.291] ReadFile (in: hFile=0x230, lpBuffer=0x26f9138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f9138*, lpNumberOfBytesRead=0x5ae8b8*=0xe0, lpOverlapped=0x0) returned 1 [0075.292] ReadFile (in: hFile=0x230, lpBuffer=0x26f9138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f9138*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.292] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.292] WriteFile (in: hFile=0x230, lpBuffer=0x26f9138*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f9138*, lpNumberOfBytesWritten=0x5ae8a8*=0xe0, lpOverlapped=0x0) returned 1 [0075.292] CloseHandle (hObject=0x230) returned 1 [0075.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0075.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x8f [0075.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.293] SetErrorMode (uMode=0x1) returned 0x0 [0075.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7503ca95, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7503ca80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f538e22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0075.294] SetErrorMode (uMode=0x0) returned 0x1 [0075.294] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.partially.cryptonar")) returned 1 [0075.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0075.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0075.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0075.295] SetErrorMode (uMode=0x1) returned 0x0 [0075.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.296] GetFileType (hFile=0x230) returned 0x1 [0075.296] SetErrorMode (uMode=0x0) returned 0x1 [0075.296] GetFileType (hFile=0x230) returned 0x1 [0075.296] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.296] ReadFile (in: hFile=0x230, lpBuffer=0x26fca08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fca08*, lpNumberOfBytesRead=0x5ae8b8*=0xe0, lpOverlapped=0x0) returned 1 [0075.297] ReadFile (in: hFile=0x230, lpBuffer=0x26fca08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fca08*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.297] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.297] WriteFile (in: hFile=0x230, lpBuffer=0x26fca08*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26fca08*, lpNumberOfBytesWritten=0x5ae8a8*=0xe0, lpOverlapped=0x0) returned 1 [0075.297] CloseHandle (hObject=0x230) returned 1 [0075.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0075.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x8f [0075.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.298] SetErrorMode (uMode=0x1) returned 0x0 [0075.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750466f0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750466c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f55dc58, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0075.299] SetErrorMode (uMode=0x0) returned 0x1 [0075.299] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.partially.cryptonar")) returned 1 [0075.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0075.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0075.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0075.300] SetErrorMode (uMode=0x1) returned 0x0 [0075.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.300] GetFileType (hFile=0x230) returned 0x1 [0075.300] SetErrorMode (uMode=0x0) returned 0x1 [0075.300] GetFileType (hFile=0x230) returned 0x1 [0075.300] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.300] ReadFile (in: hFile=0x230, lpBuffer=0x27002d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27002d8*, lpNumberOfBytesRead=0x5ae8b8*=0xe0, lpOverlapped=0x0) returned 1 [0075.301] ReadFile (in: hFile=0x230, lpBuffer=0x27002d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27002d8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.301] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.302] WriteFile (in: hFile=0x230, lpBuffer=0x27002d8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27002d8*, lpNumberOfBytesWritten=0x5ae8a8*=0xe0, lpOverlapped=0x0) returned 1 [0075.302] CloseHandle (hObject=0x230) returned 1 [0075.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0075.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x8f [0075.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.303] SetErrorMode (uMode=0x1) returned 0x0 [0075.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750725f8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750725e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f55dc58, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0075.303] SetErrorMode (uMode=0x0) returned 0x1 [0075.303] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.partially.cryptonar")) returned 1 [0075.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0075.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0075.304] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0075.304] SetErrorMode (uMode=0x1) returned 0x0 [0075.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.305] GetFileType (hFile=0x230) returned 0x1 [0075.305] SetErrorMode (uMode=0x0) returned 0x1 [0075.305] GetFileType (hFile=0x230) returned 0x1 [0075.305] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.305] ReadFile (in: hFile=0x230, lpBuffer=0x2703ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2703ba8*, lpNumberOfBytesRead=0x5ae8b8*=0xea, lpOverlapped=0x0) returned 1 [0075.306] ReadFile (in: hFile=0x230, lpBuffer=0x2703ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2703ba8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.306] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.306] WriteFile (in: hFile=0x230, lpBuffer=0x2703ba8*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2703ba8*, lpNumberOfBytesWritten=0x5ae8a8*=0xea, lpOverlapped=0x0) returned 1 [0075.306] CloseHandle (hObject=0x230) returned 1 [0075.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0075.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x8f [0075.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.308] SetErrorMode (uMode=0x1) returned 0x0 [0075.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75096ff5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75096fd0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f55dc58, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0075.308] SetErrorMode (uMode=0x0) returned 0x1 [0075.309] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.partially.cryptonar")) returned 1 [0075.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0075.309] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0075.310] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0075.310] SetErrorMode (uMode=0x1) returned 0x0 [0075.310] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.310] GetFileType (hFile=0x230) returned 0x1 [0075.310] SetErrorMode (uMode=0x0) returned 0x1 [0075.310] GetFileType (hFile=0x230) returned 0x1 [0075.310] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.310] ReadFile (in: hFile=0x230, lpBuffer=0x2707498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2707498*, lpNumberOfBytesRead=0x5ae8b8*=0x112, lpOverlapped=0x0) returned 1 [0075.311] ReadFile (in: hFile=0x230, lpBuffer=0x2707498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2707498*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.311] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.311] WriteFile (in: hFile=0x230, lpBuffer=0x2707498*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2707498*, lpNumberOfBytesWritten=0x5ae8a8*=0x112, lpOverlapped=0x0) returned 1 [0075.311] CloseHandle (hObject=0x230) returned 1 [0075.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0075.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x8f [0075.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.315] SetErrorMode (uMode=0x1) returned 0x0 [0075.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750a3349, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750a3320, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f583f79, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1 [0075.315] SetErrorMode (uMode=0x0) returned 0x1 [0075.315] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.partially.cryptonar")) returned 1 [0075.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0075.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0075.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0075.316] SetErrorMode (uMode=0x1) returned 0x0 [0075.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.317] GetFileType (hFile=0x230) returned 0x1 [0075.317] SetErrorMode (uMode=0x0) returned 0x1 [0075.317] GetFileType (hFile=0x230) returned 0x1 [0075.317] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.317] ReadFile (in: hFile=0x230, lpBuffer=0x270adf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270adf0*, lpNumberOfBytesRead=0x5ae8b8*=0xd6, lpOverlapped=0x0) returned 1 [0075.327] ReadFile (in: hFile=0x230, lpBuffer=0x270adf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270adf0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.328] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.328] WriteFile (in: hFile=0x230, lpBuffer=0x270adf0*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270adf0*, lpNumberOfBytesWritten=0x5ae8a8*=0xd6, lpOverlapped=0x0) returned 1 [0075.424] CloseHandle (hObject=0x230) returned 1 [0075.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0075.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x92 [0075.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa6 [0075.425] SetErrorMode (uMode=0x1) returned 0x0 [0075.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750c0816, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750c2ef0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f68eda9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0075.426] SetErrorMode (uMode=0x0) returned 0x1 [0075.426] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json.partially.cryptonar")) returned 1 [0075.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0075.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0075.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0075.427] SetErrorMode (uMode=0x1) returned 0x0 [0075.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.427] GetFileType (hFile=0x230) returned 0x1 [0075.427] SetErrorMode (uMode=0x0) returned 0x1 [0075.427] GetFileType (hFile=0x230) returned 0x1 [0075.427] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.427] ReadFile (in: hFile=0x230, lpBuffer=0x270e6f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270e6f8*, lpNumberOfBytesRead=0x5ae8b8*=0xd7, lpOverlapped=0x0) returned 1 [0075.428] ReadFile (in: hFile=0x230, lpBuffer=0x270e6f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270e6f8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.428] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.428] WriteFile (in: hFile=0x230, lpBuffer=0x270e6f8*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270e6f8*, lpNumberOfBytesWritten=0x5ae8a8*=0xd7, lpOverlapped=0x0) returned 1 [0075.428] CloseHandle (hObject=0x230) returned 1 [0075.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0075.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x92 [0075.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa6 [0075.429] SetErrorMode (uMode=0x1) returned 0x0 [0075.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x750ea02e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x750e9ff0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f68eda9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0075.430] SetErrorMode (uMode=0x0) returned 0x1 [0075.430] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json.partially.cryptonar")) returned 1 [0075.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0075.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0075.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0075.431] SetErrorMode (uMode=0x1) returned 0x0 [0075.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.431] GetFileType (hFile=0x230) returned 0x1 [0075.431] SetErrorMode (uMode=0x0) returned 0x1 [0075.431] GetFileType (hFile=0x230) returned 0x1 [0075.431] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.431] ReadFile (in: hFile=0x230, lpBuffer=0x2711fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2711fe8*, lpNumberOfBytesRead=0x5ae8b8*=0xdf, lpOverlapped=0x0) returned 1 [0075.434] ReadFile (in: hFile=0x230, lpBuffer=0x2711fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2711fe8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.434] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.434] WriteFile (in: hFile=0x230, lpBuffer=0x2711fe8*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2711fe8*, lpNumberOfBytesWritten=0x5ae8a8*=0xdf, lpOverlapped=0x0) returned 1 [0075.435] CloseHandle (hObject=0x230) returned 1 [0075.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0075.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x8f [0075.436] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.436] SetErrorMode (uMode=0x1) returned 0x0 [0075.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751026d3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751074b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f68eda9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0075.436] SetErrorMode (uMode=0x0) returned 0x1 [0075.436] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.partially.cryptonar")) returned 1 [0075.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0075.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0075.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0075.437] SetErrorMode (uMode=0x1) returned 0x0 [0075.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.447] GetFileType (hFile=0x230) returned 0x1 [0075.447] SetErrorMode (uMode=0x0) returned 0x1 [0075.447] GetFileType (hFile=0x230) returned 0x1 [0075.447] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.447] ReadFile (in: hFile=0x230, lpBuffer=0x27158d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27158d0*, lpNumberOfBytesRead=0x5ae8b8*=0xdd, lpOverlapped=0x0) returned 1 [0075.448] ReadFile (in: hFile=0x230, lpBuffer=0x27158d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27158d0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.448] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.448] WriteFile (in: hFile=0x230, lpBuffer=0x27158d0*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27158d0*, lpNumberOfBytesWritten=0x5ae8a8*=0xdd, lpOverlapped=0x0) returned 1 [0075.448] CloseHandle (hObject=0x230) returned 1 [0075.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0075.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x93 [0075.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa7 [0075.449] SetErrorMode (uMode=0x1) returned 0x0 [0075.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751297dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75129790, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f6b6d31, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0075.449] SetErrorMode (uMode=0x0) returned 0x1 [0075.449] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.partially.cryptonar")) returned 1 [0075.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0075.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0075.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0075.450] SetErrorMode (uMode=0x1) returned 0x0 [0075.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.451] GetFileType (hFile=0x230) returned 0x1 [0075.451] SetErrorMode (uMode=0x0) returned 0x1 [0075.451] GetFileType (hFile=0x230) returned 0x1 [0075.451] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.451] ReadFile (in: hFile=0x230, lpBuffer=0x27191d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27191d0*, lpNumberOfBytesRead=0x5ae8b8*=0xd6, lpOverlapped=0x0) returned 1 [0075.452] ReadFile (in: hFile=0x230, lpBuffer=0x27191d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27191d0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.452] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.452] WriteFile (in: hFile=0x230, lpBuffer=0x27191d0*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27191d0*, lpNumberOfBytesWritten=0x5ae8a8*=0xd6, lpOverlapped=0x0) returned 1 [0075.452] CloseHandle (hObject=0x230) returned 1 [0075.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0075.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x8f [0075.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.453] SetErrorMode (uMode=0x1) returned 0x0 [0075.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7513f774, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7514e180, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f6dc4ed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0075.454] SetErrorMode (uMode=0x0) returned 0x1 [0075.454] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.partially.cryptonar")) returned 1 [0075.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0075.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0075.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0075.455] SetErrorMode (uMode=0x1) returned 0x0 [0075.455] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.456] GetFileType (hFile=0x230) returned 0x1 [0075.456] SetErrorMode (uMode=0x0) returned 0x1 [0075.456] GetFileType (hFile=0x230) returned 0x1 [0075.456] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.456] ReadFile (in: hFile=0x230, lpBuffer=0x271ca90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271ca90*, lpNumberOfBytesRead=0x5ae8b8*=0xd9, lpOverlapped=0x0) returned 1 [0075.457] ReadFile (in: hFile=0x230, lpBuffer=0x271ca90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271ca90*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.457] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.457] WriteFile (in: hFile=0x230, lpBuffer=0x271ca90*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271ca90*, lpNumberOfBytesWritten=0x5ae8a8*=0xd9, lpOverlapped=0x0) returned 1 [0075.457] CloseHandle (hObject=0x230) returned 1 [0075.459] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0075.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x8f [0075.460] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.460] SetErrorMode (uMode=0x1) returned 0x0 [0075.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751668da, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75166820, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f6dc4ed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0075.461] SetErrorMode (uMode=0x0) returned 0x1 [0075.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.partially.cryptonar")) returned 1 [0075.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0075.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0075.462] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0075.462] SetErrorMode (uMode=0x1) returned 0x0 [0075.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.463] GetFileType (hFile=0x230) returned 0x1 [0075.463] SetErrorMode (uMode=0x0) returned 0x1 [0075.463] GetFileType (hFile=0x230) returned 0x1 [0075.463] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.463] ReadFile (in: hFile=0x230, lpBuffer=0x2720378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2720378*, lpNumberOfBytesRead=0x5ae8b8*=0xe0, lpOverlapped=0x0) returned 1 [0075.464] ReadFile (in: hFile=0x230, lpBuffer=0x2720378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2720378*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.464] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.464] WriteFile (in: hFile=0x230, lpBuffer=0x2720378*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2720378*, lpNumberOfBytesWritten=0x5ae8a8*=0xe0, lpOverlapped=0x0) returned 1 [0075.464] CloseHandle (hObject=0x230) returned 1 [0075.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0075.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x90 [0075.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa4 [0075.465] SetErrorMode (uMode=0x1) returned 0x0 [0075.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75186457, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751863f0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f6dc4ed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0075.466] SetErrorMode (uMode=0x0) returned 0x1 [0075.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.partially.cryptonar")) returned 1 [0075.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0075.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0075.467] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0075.467] SetErrorMode (uMode=0x1) returned 0x0 [0075.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.468] GetFileType (hFile=0x230) returned 0x1 [0075.468] SetErrorMode (uMode=0x0) returned 0x1 [0075.468] GetFileType (hFile=0x230) returned 0x1 [0075.468] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.468] ReadFile (in: hFile=0x230, lpBuffer=0x2723c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2723c70*, lpNumberOfBytesRead=0x5ae8b8*=0xde, lpOverlapped=0x0) returned 1 [0075.483] ReadFile (in: hFile=0x230, lpBuffer=0x2723c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2723c70*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.483] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.484] WriteFile (in: hFile=0x230, lpBuffer=0x2723c70*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2723c70*, lpNumberOfBytesWritten=0x5ae8a8*=0xde, lpOverlapped=0x0) returned 1 [0075.484] CloseHandle (hObject=0x230) returned 1 [0075.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0075.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x8f [0075.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.485] SetErrorMode (uMode=0x1) returned 0x0 [0075.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75199cd7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7519ea90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f72784b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0075.485] SetErrorMode (uMode=0x0) returned 0x1 [0075.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.partially.cryptonar")) returned 1 [0075.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0075.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0075.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0075.486] SetErrorMode (uMode=0x1) returned 0x0 [0075.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.487] GetFileType (hFile=0x230) returned 0x1 [0075.487] SetErrorMode (uMode=0x0) returned 0x1 [0075.487] GetFileType (hFile=0x230) returned 0x1 [0075.487] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.487] ReadFile (in: hFile=0x230, lpBuffer=0x2727540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2727540*, lpNumberOfBytesRead=0x5ae8b8*=0xe1, lpOverlapped=0x0) returned 1 [0075.488] ReadFile (in: hFile=0x230, lpBuffer=0x2727540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2727540*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.488] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.488] WriteFile (in: hFile=0x230, lpBuffer=0x2727540*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2727540*, lpNumberOfBytesWritten=0x5ae8a8*=0xe1, lpOverlapped=0x0) returned 1 [0075.488] CloseHandle (hObject=0x230) returned 1 [0075.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0075.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x8f [0075.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.489] SetErrorMode (uMode=0x1) returned 0x0 [0075.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751b4a8e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751b4a20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f72784b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1 [0075.489] SetErrorMode (uMode=0x0) returned 0x1 [0075.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.partially.cryptonar")) returned 1 [0075.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0075.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0075.490] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0075.490] SetErrorMode (uMode=0x1) returned 0x0 [0075.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.490] GetFileType (hFile=0x230) returned 0x1 [0075.490] SetErrorMode (uMode=0x0) returned 0x1 [0075.490] GetFileType (hFile=0x230) returned 0x1 [0075.490] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.490] ReadFile (in: hFile=0x230, lpBuffer=0x272ae20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272ae20*, lpNumberOfBytesRead=0x5ae8b8*=0x123, lpOverlapped=0x0) returned 1 [0075.491] ReadFile (in: hFile=0x230, lpBuffer=0x272ae20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272ae20*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.491] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.491] WriteFile (in: hFile=0x230, lpBuffer=0x272ae20*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272ae20*, lpNumberOfBytesWritten=0x5ae8a8*=0x123, lpOverlapped=0x0) returned 1 [0075.491] CloseHandle (hObject=0x230) returned 1 [0075.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0075.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x8f [0075.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.492] SetErrorMode (uMode=0x1) returned 0x0 [0075.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751caa24, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751cf7d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f72784b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x123)) returned 1 [0075.492] SetErrorMode (uMode=0x0) returned 0x1 [0075.492] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.partially.cryptonar")) returned 1 [0075.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0075.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0075.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0075.493] SetErrorMode (uMode=0x1) returned 0x0 [0075.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.494] GetFileType (hFile=0x230) returned 0x1 [0075.494] SetErrorMode (uMode=0x0) returned 0x1 [0075.494] GetFileType (hFile=0x230) returned 0x1 [0075.494] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.494] ReadFile (in: hFile=0x230, lpBuffer=0x272e780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272e780*, lpNumberOfBytesRead=0x5ae8b8*=0xe6, lpOverlapped=0x0) returned 1 [0075.494] ReadFile (in: hFile=0x230, lpBuffer=0x272e780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272e780*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.495] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.495] WriteFile (in: hFile=0x230, lpBuffer=0x272e780*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272e780*, lpNumberOfBytesWritten=0x5ae8a8*=0xe6, lpOverlapped=0x0) returned 1 [0075.495] CloseHandle (hObject=0x230) returned 1 [0075.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0075.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x8f [0075.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.496] SetErrorMode (uMode=0x1) returned 0x0 [0075.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751f1b33, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x751f41c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f72784b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0075.496] SetErrorMode (uMode=0x0) returned 0x1 [0075.496] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.partially.cryptonar")) returned 1 [0075.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0075.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0075.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0075.497] SetErrorMode (uMode=0x1) returned 0x0 [0075.497] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.497] GetFileType (hFile=0x230) returned 0x1 [0075.497] SetErrorMode (uMode=0x0) returned 0x1 [0075.497] GetFileType (hFile=0x230) returned 0x1 [0075.497] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.497] ReadFile (in: hFile=0x230, lpBuffer=0x2732060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2732060*, lpNumberOfBytesRead=0x5ae8b8*=0xd0, lpOverlapped=0x0) returned 1 [0075.498] ReadFile (in: hFile=0x230, lpBuffer=0x2732060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2732060*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.498] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.498] WriteFile (in: hFile=0x230, lpBuffer=0x2732060*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2732060*, lpNumberOfBytesWritten=0x5ae8a8*=0xd0, lpOverlapped=0x0) returned 1 [0075.498] CloseHandle (hObject=0x230) returned 1 [0075.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0075.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x8f [0075.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.499] SetErrorMode (uMode=0x1) returned 0x0 [0075.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75200596, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75202c20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f72784b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0075.500] SetErrorMode (uMode=0x0) returned 0x1 [0075.500] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.partially.cryptonar")) returned 1 [0075.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0075.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0075.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0075.500] SetErrorMode (uMode=0x1) returned 0x0 [0075.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.501] GetFileType (hFile=0x230) returned 0x1 [0075.501] SetErrorMode (uMode=0x0) returned 0x1 [0075.501] GetFileType (hFile=0x230) returned 0x1 [0075.501] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.501] ReadFile (in: hFile=0x230, lpBuffer=0x2735910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2735910*, lpNumberOfBytesRead=0x5ae8b8*=0xdd, lpOverlapped=0x0) returned 1 [0075.502] ReadFile (in: hFile=0x230, lpBuffer=0x2735910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2735910*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.502] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.502] WriteFile (in: hFile=0x230, lpBuffer=0x2735910*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2735910*, lpNumberOfBytesWritten=0x5ae8a8*=0xdd, lpOverlapped=0x0) returned 1 [0075.502] CloseHandle (hObject=0x230) returned 1 [0075.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0075.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x8f [0075.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.503] SetErrorMode (uMode=0x1) returned 0x0 [0075.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75224f99, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75227610, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f74db62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0075.503] SetErrorMode (uMode=0x0) returned 0x1 [0075.503] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.partially.cryptonar")) returned 1 [0075.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0075.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0075.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0075.504] SetErrorMode (uMode=0x1) returned 0x0 [0075.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.504] GetFileType (hFile=0x230) returned 0x1 [0075.504] SetErrorMode (uMode=0x0) returned 0x1 [0075.504] GetFileType (hFile=0x230) returned 0x1 [0075.504] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.504] ReadFile (in: hFile=0x230, lpBuffer=0x27391e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27391e0*, lpNumberOfBytesRead=0x5ae8b8*=0xec, lpOverlapped=0x0) returned 1 [0075.505] ReadFile (in: hFile=0x230, lpBuffer=0x27391e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27391e0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.505] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.505] WriteFile (in: hFile=0x230, lpBuffer=0x27391e0*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27391e0*, lpNumberOfBytesWritten=0x5ae8a8*=0xec, lpOverlapped=0x0) returned 1 [0075.505] CloseHandle (hObject=0x230) returned 1 [0075.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0075.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x8f [0075.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.506] SetErrorMode (uMode=0x1) returned 0x0 [0075.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7524245a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75244ad0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f74db62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1 [0075.506] SetErrorMode (uMode=0x0) returned 0x1 [0075.506] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.partially.cryptonar")) returned 1 [0075.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0075.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0075.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0075.507] SetErrorMode (uMode=0x1) returned 0x0 [0075.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.508] GetFileType (hFile=0x230) returned 0x1 [0075.508] SetErrorMode (uMode=0x0) returned 0x1 [0075.508] GetFileType (hFile=0x230) returned 0x1 [0075.508] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.508] ReadFile (in: hFile=0x230, lpBuffer=0x273cad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273cad0*, lpNumberOfBytesRead=0x5ae8b8*=0xe6, lpOverlapped=0x0) returned 1 [0075.509] ReadFile (in: hFile=0x230, lpBuffer=0x273cad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273cad0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.509] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.509] WriteFile (in: hFile=0x230, lpBuffer=0x273cad0*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273cad0*, lpNumberOfBytesWritten=0x5ae8a8*=0xe6, lpOverlapped=0x0) returned 1 [0075.509] CloseHandle (hObject=0x230) returned 1 [0075.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0075.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x8f [0075.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.510] SetErrorMode (uMode=0x1) returned 0x0 [0075.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7529a2a6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7529c910, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f74db62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0075.510] SetErrorMode (uMode=0x0) returned 0x1 [0075.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.partially.cryptonar")) returned 1 [0075.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0075.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0075.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0075.510] SetErrorMode (uMode=0x1) returned 0x0 [0075.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.511] GetFileType (hFile=0x230) returned 0x1 [0075.511] SetErrorMode (uMode=0x0) returned 0x1 [0075.511] GetFileType (hFile=0x230) returned 0x1 [0075.511] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.511] ReadFile (in: hFile=0x230, lpBuffer=0x27403b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27403b0*, lpNumberOfBytesRead=0x5ae8b8*=0xe4, lpOverlapped=0x0) returned 1 [0075.512] ReadFile (in: hFile=0x230, lpBuffer=0x27403b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27403b0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.512] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.512] WriteFile (in: hFile=0x230, lpBuffer=0x27403b0*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27403b0*, lpNumberOfBytesWritten=0x5ae8a8*=0xe4, lpOverlapped=0x0) returned 1 [0075.512] CloseHandle (hObject=0x230) returned 1 [0075.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0075.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x8f [0075.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.513] SetErrorMode (uMode=0x1) returned 0x0 [0075.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x752c3ac8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x752eab10, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f74db62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1 [0075.513] SetErrorMode (uMode=0x0) returned 0x1 [0075.513] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.partially.cryptonar")) returned 1 [0075.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0075.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0075.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0075.514] SetErrorMode (uMode=0x1) returned 0x0 [0075.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.515] GetFileType (hFile=0x230) returned 0x1 [0075.515] SetErrorMode (uMode=0x0) returned 0x1 [0075.515] GetFileType (hFile=0x230) returned 0x1 [0075.515] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.515] ReadFile (in: hFile=0x230, lpBuffer=0x2743c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2743c90*, lpNumberOfBytesRead=0x5ae8b8*=0xe9, lpOverlapped=0x0) returned 1 [0075.520] ReadFile (in: hFile=0x230, lpBuffer=0x2743c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2743c90*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.520] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.520] WriteFile (in: hFile=0x230, lpBuffer=0x2743c90*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2743c90*, lpNumberOfBytesWritten=0x5ae8a8*=0xe9, lpOverlapped=0x0) returned 1 [0075.520] CloseHandle (hObject=0x230) returned 1 [0075.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0075.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x8f [0075.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.521] SetErrorMode (uMode=0x1) returned 0x0 [0075.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75333fbc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75336600, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f7740d2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1 [0075.521] SetErrorMode (uMode=0x0) returned 0x1 [0075.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.partially.cryptonar")) returned 1 [0075.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0075.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0075.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0075.529] SetErrorMode (uMode=0x1) returned 0x0 [0075.529] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.530] GetFileType (hFile=0x230) returned 0x1 [0075.530] SetErrorMode (uMode=0x0) returned 0x1 [0075.530] GetFileType (hFile=0x230) returned 0x1 [0075.530] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.530] ReadFile (in: hFile=0x230, lpBuffer=0x2747580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2747580*, lpNumberOfBytesRead=0x5ae8b8*=0xd2, lpOverlapped=0x0) returned 1 [0075.532] ReadFile (in: hFile=0x230, lpBuffer=0x2747580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2747580*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.532] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.532] WriteFile (in: hFile=0x230, lpBuffer=0x2747580*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2747580*, lpNumberOfBytesWritten=0x5ae8a8*=0xd2, lpOverlapped=0x0) returned 1 [0075.532] CloseHandle (hObject=0x230) returned 1 [0075.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0075.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x8f [0075.533] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.533] SetErrorMode (uMode=0x1) returned 0x0 [0075.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753625f4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75384800, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f799ef3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0075.533] SetErrorMode (uMode=0x0) returned 0x1 [0075.533] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.partially.cryptonar")) returned 1 [0075.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.534] SetErrorMode (uMode=0x1) returned 0x0 [0075.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.535] GetFileType (hFile=0x230) returned 0x1 [0075.535] SetErrorMode (uMode=0x0) returned 0x1 [0075.535] GetFileType (hFile=0x230) returned 0x1 [0075.535] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.535] ReadFile (in: hFile=0x230, lpBuffer=0x274ae40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274ae40*, lpNumberOfBytesRead=0x5ae8b8*=0xdd, lpOverlapped=0x0) returned 1 [0075.536] ReadFile (in: hFile=0x230, lpBuffer=0x274ae40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274ae40*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.536] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.536] WriteFile (in: hFile=0x230, lpBuffer=0x274ae40*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274ae40*, lpNumberOfBytesWritten=0x5ae8a8*=0xdd, lpOverlapped=0x0) returned 1 [0075.536] CloseHandle (hObject=0x230) returned 1 [0075.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.537] SetErrorMode (uMode=0x1) returned 0x0 [0075.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753c4091, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x753c3fa0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f799ef3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0075.537] SetErrorMode (uMode=0x0) returned 0x1 [0075.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.partially.cryptonar")) returned 1 [0075.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0075.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0075.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0075.538] SetErrorMode (uMode=0x1) returned 0x0 [0075.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.539] GetFileType (hFile=0x230) returned 0x1 [0075.539] SetErrorMode (uMode=0x0) returned 0x1 [0075.539] GetFileType (hFile=0x230) returned 0x1 [0075.539] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.539] ReadFile (in: hFile=0x230, lpBuffer=0x274e710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274e710*, lpNumberOfBytesRead=0x5ae8b8*=0xcb, lpOverlapped=0x0) returned 1 [0075.540] ReadFile (in: hFile=0x230, lpBuffer=0x274e710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274e710*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.540] WriteFile (in: hFile=0x230, lpBuffer=0x274e710*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274e710*, lpNumberOfBytesWritten=0x5ae8a8*=0xcb, lpOverlapped=0x0) returned 1 [0075.540] CloseHandle (hObject=0x230) returned 1 [0075.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0075.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x8f [0075.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.541] SetErrorMode (uMode=0x1) returned 0x0 [0075.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753d03eb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x753d2a00, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f799ef3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1 [0075.541] SetErrorMode (uMode=0x0) returned 0x1 [0075.541] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.partially.cryptonar")) returned 1 [0075.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.542] SetErrorMode (uMode=0x1) returned 0x0 [0075.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.543] GetFileType (hFile=0x230) returned 0x1 [0075.543] SetErrorMode (uMode=0x0) returned 0x1 [0075.543] GetFileType (hFile=0x230) returned 0x1 [0075.543] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.543] ReadFile (in: hFile=0x230, lpBuffer=0x2751fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2751fc0*, lpNumberOfBytesRead=0x5ae8b8*=0xd9, lpOverlapped=0x0) returned 1 [0075.544] ReadFile (in: hFile=0x230, lpBuffer=0x2751fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2751fc0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.544] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.544] WriteFile (in: hFile=0x230, lpBuffer=0x2751fc0*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2751fc0*, lpNumberOfBytesWritten=0x5ae8a8*=0xd9, lpOverlapped=0x0) returned 1 [0075.544] CloseHandle (hObject=0x230) returned 1 [0075.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.545] SetErrorMode (uMode=0x1) returned 0x0 [0075.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x753f26d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x753f25d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f799ef3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0075.545] SetErrorMode (uMode=0x0) returned 0x1 [0075.545] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.partially.cryptonar")) returned 1 [0075.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0075.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0075.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0075.546] SetErrorMode (uMode=0x1) returned 0x0 [0075.546] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.547] GetFileType (hFile=0x230) returned 0x1 [0075.547] SetErrorMode (uMode=0x0) returned 0x1 [0075.547] GetFileType (hFile=0x230) returned 0x1 [0075.547] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.547] ReadFile (in: hFile=0x230, lpBuffer=0x27558a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27558a8*, lpNumberOfBytesRead=0x5ae8b8*=0xde, lpOverlapped=0x0) returned 1 [0075.548] ReadFile (in: hFile=0x230, lpBuffer=0x27558a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27558a8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.548] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.548] WriteFile (in: hFile=0x230, lpBuffer=0x27558a8*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27558a8*, lpNumberOfBytesWritten=0x5ae8a8*=0xde, lpOverlapped=0x0) returned 1 [0075.548] CloseHandle (hObject=0x230) returned 1 [0075.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0075.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x92 [0075.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa6 [0075.549] SetErrorMode (uMode=0x1) returned 0x0 [0075.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7540d486, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7542cf50, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f7c026f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0075.549] SetErrorMode (uMode=0x0) returned 0x1 [0075.549] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json.partially.cryptonar")) returned 1 [0075.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0075.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0075.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0075.550] SetErrorMode (uMode=0x1) returned 0x0 [0075.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.550] GetFileType (hFile=0x230) returned 0x1 [0075.550] SetErrorMode (uMode=0x0) returned 0x1 [0075.550] GetFileType (hFile=0x230) returned 0x1 [0075.550] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.551] ReadFile (in: hFile=0x230, lpBuffer=0x27591c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27591c0*, lpNumberOfBytesRead=0x5ae8b8*=0xe0, lpOverlapped=0x0) returned 1 [0075.551] ReadFile (in: hFile=0x230, lpBuffer=0x27591c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27591c0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.551] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.551] WriteFile (in: hFile=0x230, lpBuffer=0x27591c0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27591c0*, lpNumberOfBytesWritten=0x5ae8a8*=0xe0, lpOverlapped=0x0) returned 1 [0075.551] CloseHandle (hObject=0x230) returned 1 [0075.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0075.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x92 [0075.586] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa6 [0075.586] SetErrorMode (uMode=0x1) returned 0x0 [0075.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7543bacd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7543e0c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f816643, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0075.586] SetErrorMode (uMode=0x0) returned 0x1 [0075.587] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json.partially.cryptonar")) returned 1 [0075.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0075.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0075.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0075.588] SetErrorMode (uMode=0x1) returned 0x0 [0075.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.588] GetFileType (hFile=0x230) returned 0x1 [0075.588] SetErrorMode (uMode=0x0) returned 0x1 [0075.588] GetFileType (hFile=0x230) returned 0x1 [0075.588] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.588] ReadFile (in: hFile=0x230, lpBuffer=0x275cac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275cac0*, lpNumberOfBytesRead=0x5ae8b8*=0xde, lpOverlapped=0x0) returned 1 [0075.589] ReadFile (in: hFile=0x230, lpBuffer=0x275cac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275cac0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.589] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.589] WriteFile (in: hFile=0x230, lpBuffer=0x275cac0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275cac0*, lpNumberOfBytesWritten=0x5ae8a8*=0xde, lpOverlapped=0x0) returned 1 [0075.589] CloseHandle (hObject=0x230) returned 1 [0075.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0075.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x8f [0075.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.590] SetErrorMode (uMode=0x1) returned 0x0 [0075.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75447e18, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7544a410, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f816643, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0075.591] SetErrorMode (uMode=0x0) returned 0x1 [0075.591] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.partially.cryptonar")) returned 1 [0075.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0075.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0075.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0075.592] SetErrorMode (uMode=0x1) returned 0x0 [0075.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.592] GetFileType (hFile=0x230) returned 0x1 [0075.592] SetErrorMode (uMode=0x0) returned 0x1 [0075.592] GetFileType (hFile=0x230) returned 0x1 [0075.592] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.593] ReadFile (in: hFile=0x230, lpBuffer=0x2760390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2760390*, lpNumberOfBytesRead=0x5ae8b8*=0x110, lpOverlapped=0x0) returned 1 [0075.594] ReadFile (in: hFile=0x230, lpBuffer=0x2760390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2760390*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.594] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.594] WriteFile (in: hFile=0x230, lpBuffer=0x2760390*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2760390*, lpNumberOfBytesWritten=0x5ae8a8*=0x110, lpOverlapped=0x0) returned 1 [0075.594] CloseHandle (hObject=0x230) returned 1 [0075.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0075.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x8f [0075.595] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.595] SetErrorMode (uMode=0x1) returned 0x0 [0075.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754604bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754603a0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f8328ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0075.595] SetErrorMode (uMode=0x0) returned 0x1 [0075.595] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.partially.cryptonar")) returned 1 [0075.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0075.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0075.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0075.596] SetErrorMode (uMode=0x1) returned 0x0 [0075.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.600] GetFileType (hFile=0x230) returned 0x1 [0075.600] SetErrorMode (uMode=0x0) returned 0x1 [0075.600] GetFileType (hFile=0x230) returned 0x1 [0075.600] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.601] ReadFile (in: hFile=0x230, lpBuffer=0x2763cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2763cc0*, lpNumberOfBytesRead=0x5ae8b8*=0xe3, lpOverlapped=0x0) returned 1 [0075.601] ReadFile (in: hFile=0x230, lpBuffer=0x2763cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2763cc0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.601] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.601] WriteFile (in: hFile=0x230, lpBuffer=0x2763cc0*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2763cc0*, lpNumberOfBytesWritten=0x5ae8a8*=0xe3, lpOverlapped=0x0) returned 1 [0075.602] CloseHandle (hObject=0x230) returned 1 [0075.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0075.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x8f [0075.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.603] SetErrorMode (uMode=0x1) returned 0x0 [0075.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7546a104, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7546c6f0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f8328ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0075.603] SetErrorMode (uMode=0x0) returned 0x1 [0075.603] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.partially.cryptonar")) returned 1 [0075.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.604] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.604] SetErrorMode (uMode=0x1) returned 0x0 [0075.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.604] GetFileType (hFile=0x230) returned 0x1 [0075.604] SetErrorMode (uMode=0x0) returned 0x1 [0075.604] GetFileType (hFile=0x230) returned 0x1 [0075.604] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.604] ReadFile (in: hFile=0x230, lpBuffer=0x27675a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27675a0*, lpNumberOfBytesRead=0x5ae8b8*=0xdf, lpOverlapped=0x0) returned 1 [0075.605] ReadFile (in: hFile=0x230, lpBuffer=0x27675a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27675a0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.605] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.605] WriteFile (in: hFile=0x230, lpBuffer=0x27675a0*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27675a0*, lpNumberOfBytesWritten=0x5ae8a8*=0xdf, lpOverlapped=0x0) returned 1 [0075.606] CloseHandle (hObject=0x230) returned 1 [0075.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x8f [0075.606] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.607] SetErrorMode (uMode=0x1) returned 0x0 [0075.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7547d987, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7547ff70, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f8328ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0075.607] SetErrorMode (uMode=0x0) returned 0x1 [0075.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.partially.cryptonar")) returned 1 [0075.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0075.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0075.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0075.608] SetErrorMode (uMode=0x1) returned 0x0 [0075.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.608] GetFileType (hFile=0x230) returned 0x1 [0075.608] SetErrorMode (uMode=0x0) returned 0x1 [0075.608] GetFileType (hFile=0x230) returned 0x1 [0075.608] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.609] ReadFile (in: hFile=0x230, lpBuffer=0x276ae70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276ae70*, lpNumberOfBytesRead=0x5ae8b8*=0x104, lpOverlapped=0x0) returned 1 [0075.610] ReadFile (in: hFile=0x230, lpBuffer=0x276ae70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276ae70*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.610] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.610] WriteFile (in: hFile=0x230, lpBuffer=0x276ae70*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276ae70*, lpNumberOfBytesWritten=0x5ae8a8*=0x104, lpOverlapped=0x0) returned 1 [0075.610] CloseHandle (hObject=0x230) returned 1 [0075.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0075.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x8f [0075.611] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.611] SetErrorMode (uMode=0x1) returned 0x0 [0075.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7548c3eb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7548c2c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f859545, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0075.611] SetErrorMode (uMode=0x0) returned 0x1 [0075.611] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.partially.cryptonar")) returned 1 [0075.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0075.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0075.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0075.612] SetErrorMode (uMode=0x1) returned 0x0 [0075.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.613] GetFileType (hFile=0x230) returned 0x1 [0075.613] SetErrorMode (uMode=0x0) returned 0x1 [0075.613] GetFileType (hFile=0x230) returned 0x1 [0075.613] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.613] ReadFile (in: hFile=0x230, lpBuffer=0x276e790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276e790*, lpNumberOfBytesRead=0x5ae8b8*=0xe2, lpOverlapped=0x0) returned 1 [0075.614] ReadFile (in: hFile=0x230, lpBuffer=0x276e790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276e790*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.614] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.614] WriteFile (in: hFile=0x230, lpBuffer=0x276e790*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276e790*, lpNumberOfBytesWritten=0x5ae8a8*=0xe2, lpOverlapped=0x0) returned 1 [0075.614] CloseHandle (hObject=0x230) returned 1 [0075.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0075.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x8f [0075.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.615] SetErrorMode (uMode=0x1) returned 0x0 [0075.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754b833b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754b81e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f859545, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0075.616] SetErrorMode (uMode=0x0) returned 0x1 [0075.616] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.partially.cryptonar")) returned 1 [0075.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0075.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0075.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0075.617] SetErrorMode (uMode=0x1) returned 0x0 [0075.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.617] GetFileType (hFile=0x230) returned 0x1 [0075.617] SetErrorMode (uMode=0x0) returned 0x1 [0075.618] GetFileType (hFile=0x230) returned 0x1 [0075.618] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.618] ReadFile (in: hFile=0x230, lpBuffer=0x2772070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2772070*, lpNumberOfBytesRead=0x5ae8b8*=0x104, lpOverlapped=0x0) returned 1 [0075.618] ReadFile (in: hFile=0x230, lpBuffer=0x2772070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2772070*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0075.619] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.619] WriteFile (in: hFile=0x230, lpBuffer=0x2772070*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2772070*, lpNumberOfBytesWritten=0x5ae8a8*=0x104, lpOverlapped=0x0) returned 1 [0075.619] CloseHandle (hObject=0x230) returned 1 [0075.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0075.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x8f [0075.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.partially.cryptoNar", lpFilePart=0x0) returned 0xa3 [0075.620] SetErrorMode (uMode=0x1) returned 0x0 [0075.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754cbb98, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754cba60, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f859545, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0075.621] SetErrorMode (uMode=0x0) returned 0x1 [0075.621] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.partially.cryptonar")) returned 1 [0075.622] SetErrorMode (uMode=0x1) returned 0x0 [0075.622] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.622] SetErrorMode (uMode=0x0) returned 0x1 [0075.622] GetFileType (hFile=0x230) returned 0x1 [0075.622] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.634] SetErrorMode (uMode=0x1) returned 0x0 [0075.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x754d7ef0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x754da4c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f87ed62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0075.634] SetErrorMode (uMode=0x0) returned 0x1 [0075.634] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.partially.cryptonar")) returned 1 [0075.635] SetErrorMode (uMode=0x1) returned 0x0 [0075.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.635] SetErrorMode (uMode=0x0) returned 0x1 [0075.636] GetFileType (hFile=0x230) returned 0x1 [0075.636] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.637] SetErrorMode (uMode=0x1) returned 0x0 [0075.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7550b340, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7550d910, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f87ed62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10e)) returned 1 [0075.637] SetErrorMode (uMode=0x0) returned 0x1 [0075.637] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.partially.cryptonar")) returned 1 [0075.638] SetErrorMode (uMode=0x1) returned 0x0 [0075.638] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.638] SetErrorMode (uMode=0x0) returned 0x1 [0075.638] GetFileType (hFile=0x230) returned 0x1 [0075.639] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.640] SetErrorMode (uMode=0x1) returned 0x0 [0075.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7551ebcf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7551ea80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f8a5135, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0075.641] SetErrorMode (uMode=0x0) returned 0x1 [0075.641] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.partially.cryptonar")) returned 1 [0075.642] SetErrorMode (uMode=0x1) returned 0x0 [0075.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.642] SetErrorMode (uMode=0x0) returned 0x1 [0075.642] GetFileType (hFile=0x230) returned 0x1 [0075.642] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.644] SetErrorMode (uMode=0x1) returned 0x0 [0075.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7552af23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7552d4e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f8a5135, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0075.644] SetErrorMode (uMode=0x0) returned 0x1 [0075.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json.partially.cryptonar")) returned 1 [0075.645] SetErrorMode (uMode=0x1) returned 0x0 [0075.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.645] SetErrorMode (uMode=0x0) returned 0x1 [0075.646] GetFileType (hFile=0x230) returned 0x1 [0075.646] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.647] SetErrorMode (uMode=0x1) returned 0x0 [0075.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75537277, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75537120, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f8a5135, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0075.647] SetErrorMode (uMode=0x0) returned 0x1 [0075.647] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json.partially.cryptonar")) returned 1 [0075.648] SetErrorMode (uMode=0x1) returned 0x0 [0075.648] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.648] SetErrorMode (uMode=0x0) returned 0x1 [0075.648] GetFileType (hFile=0x230) returned 0x1 [0075.648] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.649] SetErrorMode (uMode=0x1) returned 0x0 [0075.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75861c04, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75861c04, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f8a5135, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0075.650] SetErrorMode (uMode=0x0) returned 0x1 [0075.650] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.partially.cryptonar")) returned 1 [0075.650] SetErrorMode (uMode=0x1) returned 0x0 [0075.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.651] SetErrorMode (uMode=0x0) returned 0x1 [0075.651] GetFileType (hFile=0x230) returned 0x1 [0075.651] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.726] SetErrorMode (uMode=0x1) returned 0x0 [0075.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75579137, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7557b6e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f963a58, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0075.727] SetErrorMode (uMode=0x0) returned 0x1 [0075.727] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.partially.cryptonar")) returned 1 [0075.727] SetErrorMode (uMode=0x1) returned 0x0 [0075.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.728] SetErrorMode (uMode=0x0) returned 0x1 [0075.728] GetFileType (hFile=0x230) returned 0x1 [0075.728] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.765] SetErrorMode (uMode=0x1) returned 0x0 [0075.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766e0eb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76d22930, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9afff0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc8d)) returned 1 [0075.765] SetErrorMode (uMode=0x0) returned 0x1 [0075.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.partially.cryptonar")) returned 1 [0075.766] SetErrorMode (uMode=0x1) returned 0x0 [0075.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.766] SetErrorMode (uMode=0x0) returned 0x1 [0075.766] GetFileType (hFile=0x230) returned 0x1 [0075.766] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.767] SetErrorMode (uMode=0x1) returned 0x0 [0075.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76703188, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76d22930, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9d6281, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8f)) returned 1 [0075.767] SetErrorMode (uMode=0x0) returned 0x1 [0075.767] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.partially.cryptonar")) returned 1 [0075.768] SetErrorMode (uMode=0x1) returned 0x0 [0075.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.768] SetErrorMode (uMode=0x0) returned 0x1 [0075.768] GetFileType (hFile=0x230) returned 0x1 [0075.768] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.769] SetErrorMode (uMode=0x1) returned 0x0 [0075.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7670a6d9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x767e37e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9d6281, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0075.769] SetErrorMode (uMode=0x0) returned 0x1 [0075.769] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.partially.cryptonar")) returned 1 [0075.770] SetErrorMode (uMode=0x1) returned 0x0 [0075.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.770] SetErrorMode (uMode=0x0) returned 0x1 [0075.770] GetFileType (hFile=0x230) returned 0x1 [0075.770] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.771] SetErrorMode (uMode=0x1) returned 0x0 [0075.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x767e89ad, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x767ead12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9d6281, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5b)) returned 1 [0075.771] SetErrorMode (uMode=0x0) returned 0x1 [0075.771] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.partially.cryptonar")) returned 1 [0075.772] SetErrorMode (uMode=0x1) returned 0x0 [0075.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.772] SetErrorMode (uMode=0x0) returned 0x1 [0075.772] GetFileType (hFile=0x230) returned 0x1 [0075.773] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.774] SetErrorMode (uMode=0x1) returned 0x0 [0075.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75966ff6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x768a93f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9d6281, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1 [0075.774] SetErrorMode (uMode=0x0) returned 0x1 [0075.774] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.partially.cryptonar")) returned 1 [0075.775] SetErrorMode (uMode=0x1) returned 0x0 [0075.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.776] SetErrorMode (uMode=0x0) returned 0x1 [0075.776] GetFileType (hFile=0x230) returned 0x1 [0075.776] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.776] SetErrorMode (uMode=0x1) returned 0x0 [0075.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7597816c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75978162, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9d6281, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1 [0075.777] SetErrorMode (uMode=0x0) returned 0x1 [0075.777] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.partially.cryptonar")) returned 1 [0075.777] SetErrorMode (uMode=0x1) returned 0x0 [0075.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.778] SetErrorMode (uMode=0x0) returned 0x1 [0075.778] GetFileType (hFile=0x230) returned 0x1 [0075.778] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.779] SetErrorMode (uMode=0x1) returned 0x0 [0075.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75986bd0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759892d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9d6281, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0075.779] SetErrorMode (uMode=0x0) returned 0x1 [0075.779] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.partially.cryptonar")) returned 1 [0075.780] SetErrorMode (uMode=0x1) returned 0x0 [0075.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.780] SetErrorMode (uMode=0x0) returned 0x1 [0075.780] GetFileType (hFile=0x230) returned 0x1 [0075.780] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.781] SetErrorMode (uMode=0x1) returned 0x0 [0075.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75990811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75992f12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9fc445, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0075.781] SetErrorMode (uMode=0x0) returned 0x1 [0075.781] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.partially.cryptonar")) returned 1 [0075.782] SetErrorMode (uMode=0x1) returned 0x0 [0075.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.782] SetErrorMode (uMode=0x0) returned 0x1 [0075.782] GetFileType (hFile=0x230) returned 0x1 [0075.782] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.783] SetErrorMode (uMode=0x1) returned 0x0 [0075.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7599cb62, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7599cb52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9fc445, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0075.783] SetErrorMode (uMode=0x0) returned 0x1 [0075.783] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.partially.cryptonar")) returned 1 [0075.784] SetErrorMode (uMode=0x1) returned 0x0 [0075.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.784] SetErrorMode (uMode=0x0) returned 0x1 [0075.784] GetFileType (hFile=0x230) returned 0x1 [0075.784] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.785] SetErrorMode (uMode=0x1) returned 0x0 [0075.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x759a4081, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759a8ea2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9fc445, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0075.785] SetErrorMode (uMode=0x0) returned 0x1 [0075.785] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.partially.cryptonar")) returned 1 [0075.786] SetErrorMode (uMode=0x1) returned 0x0 [0075.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.786] SetErrorMode (uMode=0x0) returned 0x1 [0075.786] GetFileType (hFile=0x230) returned 0x1 [0075.786] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.787] SetErrorMode (uMode=0x1) returned 0x0 [0075.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x759b790d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759b7902, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9fc445, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0075.787] SetErrorMode (uMode=0x0) returned 0x1 [0075.787] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.partially.cryptonar")) returned 1 [0075.788] SetErrorMode (uMode=0x1) returned 0x0 [0075.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.788] SetErrorMode (uMode=0x0) returned 0x1 [0075.788] GetFileType (hFile=0x230) returned 0x1 [0075.788] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.789] SetErrorMode (uMode=0x1) returned 0x0 [0075.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x759ed489, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x759efb72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9fc445, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0075.789] SetErrorMode (uMode=0x0) returned 0x1 [0075.789] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.partially.cryptonar")) returned 1 [0075.790] SetErrorMode (uMode=0x1) returned 0x0 [0075.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.790] SetErrorMode (uMode=0x0) returned 0x1 [0075.790] GetFileType (hFile=0x230) returned 0x1 [0075.790] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.791] SetErrorMode (uMode=0x1) returned 0x0 [0075.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a11e76, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a11e52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9fc445, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0075.791] SetErrorMode (uMode=0x0) returned 0x1 [0075.791] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json.partially.cryptonar")) returned 1 [0075.792] SetErrorMode (uMode=0x1) returned 0x0 [0075.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.792] SetErrorMode (uMode=0x0) returned 0x1 [0075.792] GetFileType (hFile=0x230) returned 0x1 [0075.792] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.793] SetErrorMode (uMode=0x1) returned 0x0 [0075.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a25705, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a27de2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9fc445, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0075.793] SetErrorMode (uMode=0x0) returned 0x1 [0075.793] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json.partially.cryptonar")) returned 1 [0075.794] SetErrorMode (uMode=0x1) returned 0x0 [0075.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.794] SetErrorMode (uMode=0x0) returned 0x1 [0075.794] GetFileType (hFile=0x230) returned 0x1 [0075.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.795] SetErrorMode (uMode=0x1) returned 0x0 [0075.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a31a40, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a31a22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2f9fc445, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0075.795] SetErrorMode (uMode=0x0) returned 0x1 [0075.795] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.partially.cryptonar")) returned 1 [0075.796] SetErrorMode (uMode=0x1) returned 0x0 [0075.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.796] SetErrorMode (uMode=0x0) returned 0x1 [0075.796] GetFileType (hFile=0x230) returned 0x1 [0075.796] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.797] SetErrorMode (uMode=0x1) returned 0x0 [0075.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a3dd97, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a40482, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa226eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0075.797] SetErrorMode (uMode=0x0) returned 0x1 [0075.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.partially.cryptonar")) returned 1 [0075.798] SetErrorMode (uMode=0x1) returned 0x0 [0075.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.798] SetErrorMode (uMode=0x0) returned 0x1 [0075.798] GetFileType (hFile=0x230) returned 0x1 [0075.798] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.799] SetErrorMode (uMode=0x1) returned 0x0 [0075.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a53d46, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a53d02, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa226eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0075.799] SetErrorMode (uMode=0x0) returned 0x1 [0075.799] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.partially.cryptonar")) returned 1 [0075.800] SetErrorMode (uMode=0x1) returned 0x0 [0075.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.800] SetErrorMode (uMode=0x0) returned 0x1 [0075.800] GetFileType (hFile=0x230) returned 0x1 [0075.800] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.801] SetErrorMode (uMode=0x1) returned 0x0 [0075.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a5d97e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a60052, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa226eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0075.801] SetErrorMode (uMode=0x0) returned 0x1 [0075.801] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.partially.cryptonar")) returned 1 [0075.802] SetErrorMode (uMode=0x1) returned 0x0 [0075.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.802] SetErrorMode (uMode=0x0) returned 0x1 [0075.802] GetFileType (hFile=0x230) returned 0x1 [0075.802] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.803] SetErrorMode (uMode=0x1) returned 0x0 [0075.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a76023, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a75fe2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa226eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1 [0075.803] SetErrorMode (uMode=0x0) returned 0x1 [0075.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.partially.cryptonar")) returned 1 [0075.805] SetErrorMode (uMode=0x1) returned 0x0 [0075.805] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.805] SetErrorMode (uMode=0x0) returned 0x1 [0075.805] GetFileType (hFile=0x230) returned 0x1 [0075.805] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.806] SetErrorMode (uMode=0x1) returned 0x0 [0075.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a82377, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a82332, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa226eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0075.806] SetErrorMode (uMode=0x0) returned 0x1 [0075.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.partially.cryptonar")) returned 1 [0075.807] SetErrorMode (uMode=0x1) returned 0x0 [0075.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.807] SetErrorMode (uMode=0x0) returned 0x1 [0075.807] GetFileType (hFile=0x230) returned 0x1 [0075.807] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.808] SetErrorMode (uMode=0x1) returned 0x0 [0075.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75a8e6c8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75a8e682, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa226eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0075.808] SetErrorMode (uMode=0x0) returned 0x1 [0075.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.partially.cryptonar")) returned 1 [0075.808] SetErrorMode (uMode=0x1) returned 0x0 [0075.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.809] SetErrorMode (uMode=0x0) returned 0x1 [0075.809] GetFileType (hFile=0x230) returned 0x1 [0075.809] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.810] SetErrorMode (uMode=0x1) returned 0x0 [0075.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75aa1f51, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75aa1f02, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa226eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x117)) returned 1 [0075.810] SetErrorMode (uMode=0x0) returned 0x1 [0075.810] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.partially.cryptonar")) returned 1 [0075.811] SetErrorMode (uMode=0x1) returned 0x0 [0075.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.811] SetErrorMode (uMode=0x0) returned 0x1 [0075.811] GetFileType (hFile=0x230) returned 0x1 [0075.811] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.812] SetErrorMode (uMode=0x1) returned 0x0 [0075.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ab097c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ab0962, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa48982, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0075.812] SetErrorMode (uMode=0x0) returned 0x1 [0075.813] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.partially.cryptonar")) returned 1 [0075.813] SetErrorMode (uMode=0x1) returned 0x0 [0075.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.814] SetErrorMode (uMode=0x0) returned 0x1 [0075.814] GetFileType (hFile=0x230) returned 0x1 [0075.814] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.815] SetErrorMode (uMode=0x1) returned 0x0 [0075.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ac4240, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ac68f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa48982, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0075.815] SetErrorMode (uMode=0x0) returned 0x1 [0075.815] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.partially.cryptonar")) returned 1 [0075.816] SetErrorMode (uMode=0x1) returned 0x0 [0075.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.817] SetErrorMode (uMode=0x0) returned 0x1 [0075.817] GetFileType (hFile=0x230) returned 0x1 [0075.817] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.818] SetErrorMode (uMode=0x1) returned 0x0 [0075.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ad2c94, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ad2c42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa48982, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0075.818] SetErrorMode (uMode=0x0) returned 0x1 [0075.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.partially.cryptonar")) returned 1 [0075.819] SetErrorMode (uMode=0x1) returned 0x0 [0075.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.820] SetErrorMode (uMode=0x0) returned 0x1 [0075.820] GetFileType (hFile=0x230) returned 0x1 [0075.820] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.821] SetErrorMode (uMode=0x1) returned 0x0 [0075.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ae3e11, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75ae64c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa48982, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0075.821] SetErrorMode (uMode=0x0) returned 0x1 [0075.821] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.partially.cryptonar")) returned 1 [0075.822] SetErrorMode (uMode=0x1) returned 0x0 [0075.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.822] SetErrorMode (uMode=0x0) returned 0x1 [0075.822] GetFileType (hFile=0x230) returned 0x1 [0075.822] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.823] SetErrorMode (uMode=0x1) returned 0x0 [0075.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75af287b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75af2812, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa48982, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0075.823] SetErrorMode (uMode=0x0) returned 0x1 [0075.823] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.partially.cryptonar")) returned 1 [0075.824] SetErrorMode (uMode=0x1) returned 0x0 [0075.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.825] SetErrorMode (uMode=0x0) returned 0x1 [0075.825] GetFileType (hFile=0x230) returned 0x1 [0075.825] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.826] SetErrorMode (uMode=0x1) returned 0x0 [0075.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75afebc5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75afeb62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa48982, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1 [0075.826] SetErrorMode (uMode=0x0) returned 0x1 [0075.826] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.partially.cryptonar")) returned 1 [0075.827] SetErrorMode (uMode=0x1) returned 0x0 [0075.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.827] SetErrorMode (uMode=0x0) returned 0x1 [0075.827] GetFileType (hFile=0x230) returned 0x1 [0075.827] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.829] SetErrorMode (uMode=0x1) returned 0x0 [0075.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b1244e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b123e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa6eb87, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0075.829] SetErrorMode (uMode=0x0) returned 0x1 [0075.829] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.partially.cryptonar")) returned 1 [0075.830] SetErrorMode (uMode=0x1) returned 0x0 [0075.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.830] SetErrorMode (uMode=0x0) returned 0x1 [0075.830] GetFileType (hFile=0x230) returned 0x1 [0075.830] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.831] SetErrorMode (uMode=0x1) returned 0x0 [0075.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b25cdb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b25c62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa6eb87, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0075.831] SetErrorMode (uMode=0x0) returned 0x1 [0075.831] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.partially.cryptonar")) returned 1 [0075.832] SetErrorMode (uMode=0x1) returned 0x0 [0075.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.832] SetErrorMode (uMode=0x0) returned 0x1 [0075.832] GetFileType (hFile=0x230) returned 0x1 [0075.832] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.836] SetErrorMode (uMode=0x1) returned 0x0 [0075.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b3e37c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b3e302, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa6eb87, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0075.836] SetErrorMode (uMode=0x0) returned 0x1 [0075.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.partially.cryptonar")) returned 1 [0075.837] SetErrorMode (uMode=0x1) returned 0x0 [0075.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.838] SetErrorMode (uMode=0x0) returned 0x1 [0075.838] GetFileType (hFile=0x230) returned 0x1 [0075.838] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.839] SetErrorMode (uMode=0x1) returned 0x0 [0075.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b47fc1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b4a652, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa6eb87, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc3)) returned 1 [0075.839] SetErrorMode (uMode=0x0) returned 0x1 [0075.839] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.partially.cryptonar")) returned 1 [0075.840] SetErrorMode (uMode=0x1) returned 0x0 [0075.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.841] SetErrorMode (uMode=0x0) returned 0x1 [0075.841] GetFileType (hFile=0x230) returned 0x1 [0075.841] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.842] SetErrorMode (uMode=0x1) returned 0x0 [0075.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75b5b83a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x75b5ded2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa6eb87, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0075.842] SetErrorMode (uMode=0x0) returned 0x1 [0075.842] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.partially.cryptonar")) returned 1 [0075.843] SetErrorMode (uMode=0x1) returned 0x0 [0075.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.843] SetErrorMode (uMode=0x0) returned 0x1 [0075.843] GetFileType (hFile=0x230) returned 0x1 [0075.844] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.844] SetErrorMode (uMode=0x1) returned 0x0 [0075.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7627408f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7650bf42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa94da2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0075.845] SetErrorMode (uMode=0x0) returned 0x1 [0075.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json.partially.cryptonar")) returned 1 [0075.845] SetErrorMode (uMode=0x1) returned 0x0 [0075.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.846] SetErrorMode (uMode=0x0) returned 0x1 [0075.846] GetFileType (hFile=0x230) returned 0x1 [0075.846] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.847] SetErrorMode (uMode=0x1) returned 0x0 [0075.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7660ef16, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7660ebe2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa94da2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0075.847] SetErrorMode (uMode=0x0) returned 0x1 [0075.847] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json.partially.cryptonar")) returned 1 [0075.848] SetErrorMode (uMode=0x1) returned 0x0 [0075.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.849] SetErrorMode (uMode=0x0) returned 0x1 [0075.849] GetFileType (hFile=0x230) returned 0x1 [0075.849] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.850] SetErrorMode (uMode=0x1) returned 0x0 [0075.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7661d97d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7661d642, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa94da2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0075.850] SetErrorMode (uMode=0x0) returned 0x1 [0075.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.partially.cryptonar")) returned 1 [0075.851] SetErrorMode (uMode=0x1) returned 0x0 [0075.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.851] SetErrorMode (uMode=0x0) returned 0x1 [0075.851] GetFileType (hFile=0x230) returned 0x1 [0075.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.852] SetErrorMode (uMode=0x1) returned 0x0 [0075.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76638738, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766383f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa94da2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10a)) returned 1 [0075.852] SetErrorMode (uMode=0x0) returned 0x1 [0075.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.partially.cryptonar")) returned 1 [0075.853] SetErrorMode (uMode=0x1) returned 0x0 [0075.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.854] SetErrorMode (uMode=0x0) returned 0x1 [0075.854] GetFileType (hFile=0x230) returned 0x1 [0075.854] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.854] SetErrorMode (uMode=0x1) returned 0x0 [0075.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642392, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76644742, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa94da2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0075.855] SetErrorMode (uMode=0x0) returned 0x1 [0075.855] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.partially.cryptonar")) returned 1 [0075.855] SetErrorMode (uMode=0x1) returned 0x0 [0075.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.856] SetErrorMode (uMode=0x0) returned 0x1 [0075.856] GetFileType (hFile=0x230) returned 0x1 [0075.856] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.857] SetErrorMode (uMode=0x1) returned 0x0 [0075.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7665aa18, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7665a6d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa94da2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0075.857] SetErrorMode (uMode=0x0) returned 0x1 [0075.857] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.partially.cryptonar")) returned 1 [0075.858] SetErrorMode (uMode=0x1) returned 0x0 [0075.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.858] SetErrorMode (uMode=0x0) returned 0x1 [0075.858] GetFileType (hFile=0x230) returned 0x1 [0075.858] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.859] SetErrorMode (uMode=0x1) returned 0x0 [0075.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76666d75, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76669132, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fa94da2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1 [0075.868] SetErrorMode (uMode=0x0) returned 0x1 [0075.868] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.partially.cryptonar")) returned 1 [0075.869] SetErrorMode (uMode=0x1) returned 0x0 [0075.869] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.869] SetErrorMode (uMode=0x0) returned 0x1 [0075.869] GetFileType (hFile=0x230) returned 0x1 [0075.869] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.870] SetErrorMode (uMode=0x1) returned 0x0 [0075.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766730bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76672d72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fabbecb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0075.870] SetErrorMode (uMode=0x0) returned 0x1 [0075.870] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.partially.cryptonar")) returned 1 [0075.871] SetErrorMode (uMode=0x1) returned 0x0 [0075.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.872] SetErrorMode (uMode=0x0) returned 0x1 [0075.872] GetFileType (hFile=0x230) returned 0x1 [0075.872] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.873] SetErrorMode (uMode=0x1) returned 0x0 [0075.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7669058e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76690232, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fabbecb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0075.873] SetErrorMode (uMode=0x0) returned 0x1 [0075.873] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.partially.cryptonar")) returned 1 [0075.874] SetErrorMode (uMode=0x1) returned 0x0 [0075.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.874] SetErrorMode (uMode=0x0) returned 0x1 [0075.874] GetFileType (hFile=0x230) returned 0x1 [0075.875] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.875] SetErrorMode (uMode=0x1) returned 0x0 [0075.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7669a1cf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7669c582, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fae13b6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0075.876] SetErrorMode (uMode=0x0) returned 0x1 [0075.876] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.partially.cryptonar")) returned 1 [0075.876] SetErrorMode (uMode=0x1) returned 0x0 [0075.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.877] SetErrorMode (uMode=0x0) returned 0x1 [0075.877] GetFileType (hFile=0x230) returned 0x1 [0075.877] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.878] SetErrorMode (uMode=0x1) returned 0x0 [0075.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766ada58, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766ad6f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fae13b6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0075.878] SetErrorMode (uMode=0x0) returned 0x1 [0075.878] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.partially.cryptonar")) returned 1 [0075.879] SetErrorMode (uMode=0x1) returned 0x0 [0075.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.879] SetErrorMode (uMode=0x0) returned 0x1 [0075.879] GetFileType (hFile=0x230) returned 0x1 [0075.879] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.880] SetErrorMode (uMode=0x1) returned 0x0 [0075.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766b9d9c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766bc152, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fae13b6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1 [0075.880] SetErrorMode (uMode=0x0) returned 0x1 [0075.880] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.partially.cryptonar")) returned 1 [0075.881] SetErrorMode (uMode=0x1) returned 0x0 [0075.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.882] SetErrorMode (uMode=0x0) returned 0x1 [0075.882] GetFileType (hFile=0x230) returned 0x1 [0075.882] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.883] SetErrorMode (uMode=0x1) returned 0x0 [0075.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766cd62c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766cd2c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fae13b6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0075.883] SetErrorMode (uMode=0x0) returned 0x1 [0075.883] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json.partially.cryptonar")) returned 1 [0075.883] SetErrorMode (uMode=0x1) returned 0x0 [0075.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.884] SetErrorMode (uMode=0x0) returned 0x1 [0075.884] GetFileType (hFile=0x230) returned 0x1 [0075.884] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.885] SetErrorMode (uMode=0x1) returned 0x0 [0075.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x766d9989, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x766d9612, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fae13b6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0075.885] SetErrorMode (uMode=0x0) returned 0x1 [0075.885] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json.partially.cryptonar")) returned 1 [0075.886] SetErrorMode (uMode=0x1) returned 0x0 [0075.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.887] SetErrorMode (uMode=0x0) returned 0x1 [0075.887] GetFileType (hFile=0x230) returned 0x1 [0075.887] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.888] SetErrorMode (uMode=0x1) returned 0x0 [0075.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e38eaa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76e38eaa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fae13b6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0075.888] SetErrorMode (uMode=0x0) returned 0x1 [0075.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.partially.cryptonar")) returned 1 [0075.889] SetErrorMode (uMode=0x1) returned 0x0 [0075.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.890] SetErrorMode (uMode=0x0) returned 0x1 [0075.890] GetFileType (hFile=0x230) returned 0x1 [0075.890] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.921] SetErrorMode (uMode=0x1) returned 0x0 [0075.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7690162a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76903942, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fb2d751, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0075.921] SetErrorMode (uMode=0x0) returned 0x1 [0075.922] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.partially.cryptonar")) returned 1 [0075.922] SetErrorMode (uMode=0x1) returned 0x0 [0075.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.923] SetErrorMode (uMode=0x0) returned 0x1 [0075.923] GetFileType (hFile=0x230) returned 0x1 [0075.923] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.964] SetErrorMode (uMode=0x1) returned 0x0 [0075.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7871b523, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78bc05b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fb9fe1c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a33)) returned 1 [0075.965] SetErrorMode (uMode=0x0) returned 0x1 [0075.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.partially.cryptonar")) returned 1 [0075.965] SetErrorMode (uMode=0x1) returned 0x0 [0075.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.966] SetErrorMode (uMode=0x0) returned 0x1 [0075.966] GetFileType (hFile=0x230) returned 0x1 [0075.966] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.980] SetErrorMode (uMode=0x1) returned 0x0 [0075.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7870f1de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x789a24be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fbc6097, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ec)) returned 1 [0075.980] SetErrorMode (uMode=0x0) returned 0x1 [0075.980] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.partially.cryptonar")) returned 1 [0075.981] SetErrorMode (uMode=0x1) returned 0x0 [0075.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.982] SetErrorMode (uMode=0x0) returned 0x1 [0075.982] GetFileType (hFile=0x230) returned 0x1 [0075.982] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.983] SetErrorMode (uMode=0x1) returned 0x0 [0075.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787314c2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78733bce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fbc6097, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0075.983] SetErrorMode (uMode=0x0) returned 0x1 [0075.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.partially.cryptonar")) returned 1 [0075.984] SetErrorMode (uMode=0x1) returned 0x0 [0075.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.985] SetErrorMode (uMode=0x0) returned 0x1 [0075.985] GetFileType (hFile=0x230) returned 0x1 [0075.985] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.985] SetErrorMode (uMode=0x1) returned 0x0 [0075.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7873ff1f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7873ff1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fbec282, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13f)) returned 1 [0075.986] SetErrorMode (uMode=0x0) returned 0x1 [0075.986] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.partially.cryptonar")) returned 1 [0075.986] SetErrorMode (uMode=0x1) returned 0x0 [0075.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.987] SetErrorMode (uMode=0x0) returned 0x1 [0075.987] GetFileType (hFile=0x230) returned 0x1 [0075.987] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.988] SetErrorMode (uMode=0x1) returned 0x0 [0075.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78749b6a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7874e97e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fbec282, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1 [0075.988] SetErrorMode (uMode=0x0) returned 0x1 [0075.988] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.partially.cryptonar")) returned 1 [0075.989] SetErrorMode (uMode=0x1) returned 0x0 [0075.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.989] SetErrorMode (uMode=0x0) returned 0x1 [0075.989] GetFileType (hFile=0x230) returned 0x1 [0075.989] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.990] SetErrorMode (uMode=0x1) returned 0x0 [0075.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7875acda, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7875d3de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fbec282, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0075.990] SetErrorMode (uMode=0x0) returned 0x1 [0075.990] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.partially.cryptonar")) returned 1 [0075.991] SetErrorMode (uMode=0x1) returned 0x0 [0075.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.992] SetErrorMode (uMode=0x0) returned 0x1 [0075.992] GetFileType (hFile=0x230) returned 0x1 [0075.992] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.992] SetErrorMode (uMode=0x1) returned 0x0 [0075.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7876be50, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7876be3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fbec282, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf3)) returned 1 [0075.993] SetErrorMode (uMode=0x0) returned 0x1 [0075.993] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.partially.cryptonar")) returned 1 [0075.993] SetErrorMode (uMode=0x1) returned 0x0 [0075.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.994] SetErrorMode (uMode=0x0) returned 0x1 [0075.994] GetFileType (hFile=0x230) returned 0x1 [0075.994] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.995] SetErrorMode (uMode=0x1) returned 0x0 [0075.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7877f6dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7877f6be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fbec282, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0075.995] SetErrorMode (uMode=0x0) returned 0x1 [0075.995] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.partially.cryptonar")) returned 1 [0075.996] SetErrorMode (uMode=0x1) returned 0x0 [0075.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0075.996] SetErrorMode (uMode=0x0) returned 0x1 [0075.996] GetFileType (hFile=0x230) returned 0x1 [0075.996] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0075.998] SetErrorMode (uMode=0x1) returned 0x0 [0075.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78789317, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7878ba0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fbec282, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x149)) returned 1 [0075.998] SetErrorMode (uMode=0x0) returned 0x1 [0075.998] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.partially.cryptonar")) returned 1 [0076.000] SetErrorMode (uMode=0x1) returned 0x0 [0076.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0076.001] SetErrorMode (uMode=0x0) returned 0x1 [0076.001] GetFileType (hFile=0x230) returned 0x1 [0076.001] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0076.002] SetErrorMode (uMode=0x1) returned 0x0 [0076.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78797d7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78797d5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fc125a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1 [0076.002] SetErrorMode (uMode=0x0) returned 0x1 [0076.002] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json.partially.cryptonar")) returned 1 [0076.003] SetErrorMode (uMode=0x1) returned 0x0 [0076.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0076.004] SetErrorMode (uMode=0x0) returned 0x1 [0076.004] GetFileType (hFile=0x230) returned 0x1 [0076.004] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0076.005] SetErrorMode (uMode=0x1) returned 0x0 [0076.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787ab5fe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787ab5de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fc125a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1 [0076.005] SetErrorMode (uMode=0x0) returned 0x1 [0076.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json.partially.cryptonar")) returned 1 [0076.006] SetErrorMode (uMode=0x1) returned 0x0 [0076.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0076.007] SetErrorMode (uMode=0x0) returned 0x1 [0076.007] GetFileType (hFile=0x230) returned 0x1 [0076.007] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0076.008] SetErrorMode (uMode=0x1) returned 0x0 [0076.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787b5245, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787b792e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fc125a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0076.008] SetErrorMode (uMode=0x0) returned 0x1 [0076.008] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.partially.cryptonar")) returned 1 [0076.009] SetErrorMode (uMode=0x1) returned 0x0 [0076.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0076.009] SetErrorMode (uMode=0x0) returned 0x1 [0076.010] GetFileType (hFile=0x230) returned 0x1 [0076.010] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0076.011] SetErrorMode (uMode=0x1) returned 0x0 [0076.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787bee87, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787c3c7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fc125a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0076.011] SetErrorMode (uMode=0x0) returned 0x1 [0076.011] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.partially.cryptonar")) returned 1 [0076.012] SetErrorMode (uMode=0x1) returned 0x0 [0076.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0076.013] SetErrorMode (uMode=0x0) returned 0x1 [0076.013] GetFileType (hFile=0x230) returned 0x1 [0076.013] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0076.014] SetErrorMode (uMode=0x1) returned 0x0 [0076.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787d2713, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787d26de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fc125a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0076.014] SetErrorMode (uMode=0x0) returned 0x1 [0076.014] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.partially.cryptonar")) returned 1 [0076.015] SetErrorMode (uMode=0x1) returned 0x0 [0076.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0076.016] SetErrorMode (uMode=0x0) returned 0x1 [0076.016] GetFileType (hFile=0x230) returned 0x1 [0076.016] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0076.017] SetErrorMode (uMode=0x1) returned 0x0 [0076.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787dea6a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787dea2e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fc38861, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf3)) returned 1 [0076.017] SetErrorMode (uMode=0x0) returned 0x1 [0076.017] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.partially.cryptonar")) returned 1 [0076.018] SetErrorMode (uMode=0x1) returned 0x0 [0076.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0076.019] SetErrorMode (uMode=0x0) returned 0x1 [0076.019] GetFileType (hFile=0x230) returned 0x1 [0076.019] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0076.020] SetErrorMode (uMode=0x1) returned 0x0 [0076.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787e86a2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787ead7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fc38861, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1 [0076.020] SetErrorMode (uMode=0x0) returned 0x1 [0076.020] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.partially.cryptonar")) returned 1 [0076.021] SetErrorMode (uMode=0x1) returned 0x0 [0076.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0076.022] SetErrorMode (uMode=0x0) returned 0x1 [0076.022] GetFileType (hFile=0x230) returned 0x1 [0076.022] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0076.023] SetErrorMode (uMode=0x1) returned 0x0 [0076.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x787f49f6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x787f70ce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fc38861, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0076.024] SetErrorMode (uMode=0x0) returned 0x1 [0076.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.partially.cryptonar")) returned 1 [0076.025] SetErrorMode (uMode=0x1) returned 0x0 [0076.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0076.025] SetErrorMode (uMode=0x0) returned 0x1 [0076.025] GetFileType (hFile=0x230) returned 0x1 [0076.025] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0076.027] SetErrorMode (uMode=0x1) returned 0x0 [0076.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78805b69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78805b2e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fc38861, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1 [0076.027] SetErrorMode (uMode=0x0) returned 0x1 [0076.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.partially.cryptonar")) returned 1 [0076.028] SetErrorMode (uMode=0x1) returned 0x0 [0076.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0076.028] SetErrorMode (uMode=0x0) returned 0x1 [0076.028] GetFileType (hFile=0x230) returned 0x1 [0076.028] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0076.029] SetErrorMode (uMode=0x1) returned 0x0 [0076.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7880f7a8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78811e7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x2fc38861, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1 [0076.030] SetErrorMode (uMode=0x0) returned 0x1 [0076.030] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.partially.cryptonar")) returned 1 [0078.015] SetErrorMode (uMode=0x1) returned 0x0 [0078.016] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.016] SetErrorMode (uMode=0x0) returned 0x1 [0078.016] GetFileType (hFile=0x230) returned 0x1 [0078.016] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.017] SetErrorMode (uMode=0x1) returned 0x0 [0078.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7881e20e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788208de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x30f4b4c3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x159)) returned 1 [0078.017] SetErrorMode (uMode=0x0) returned 0x1 [0078.018] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.partially.cryptonar")) returned 1 [0078.019] SetErrorMode (uMode=0x1) returned 0x0 [0078.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.019] SetErrorMode (uMode=0x0) returned 0x1 [0078.019] GetFileType (hFile=0x230) returned 0x1 [0078.019] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.020] SetErrorMode (uMode=0x1) returned 0x0 [0078.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7882a562, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7882cc2e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x30f4b4c3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x107)) returned 1 [0078.020] SetErrorMode (uMode=0x0) returned 0x1 [0078.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.partially.cryptonar")) returned 1 [0078.021] SetErrorMode (uMode=0x1) returned 0x0 [0078.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.022] SetErrorMode (uMode=0x0) returned 0x1 [0078.022] GetFileType (hFile=0x230) returned 0x1 [0078.022] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.023] SetErrorMode (uMode=0x1) returned 0x0 [0078.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78838fb3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7883dd9e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x30f4b4c3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0078.023] SetErrorMode (uMode=0x0) returned 0x1 [0078.023] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.partially.cryptonar")) returned 1 [0078.024] SetErrorMode (uMode=0x1) returned 0x0 [0078.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.025] SetErrorMode (uMode=0x0) returned 0x1 [0078.025] GetFileType (hFile=0x230) returned 0x1 [0078.025] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.026] SetErrorMode (uMode=0x1) returned 0x0 [0078.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7884a13f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78869cbe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x30f4b4c3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x105)) returned 1 [0078.026] SetErrorMode (uMode=0x0) returned 0x1 [0078.026] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.partially.cryptonar")) returned 1 [0078.027] SetErrorMode (uMode=0x1) returned 0x0 [0078.027] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.028] SetErrorMode (uMode=0x0) returned 0x1 [0078.028] GetFileType (hFile=0x230) returned 0x1 [0078.028] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.029] SetErrorMode (uMode=0x1) returned 0x0 [0078.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788787ce, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7887871e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x30f4b4c3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1 [0078.029] SetErrorMode (uMode=0x0) returned 0x1 [0078.029] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.partially.cryptonar")) returned 1 [0078.030] SetErrorMode (uMode=0x1) returned 0x0 [0078.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.031] SetErrorMode (uMode=0x0) returned 0x1 [0078.031] GetFileType (hFile=0x230) returned 0x1 [0078.031] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.032] SetErrorMode (uMode=0x1) returned 0x0 [0078.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788823b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7888235e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x30f7176b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1 [0078.032] SetErrorMode (uMode=0x0) returned 0x1 [0078.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.partially.cryptonar")) returned 1 [0078.033] SetErrorMode (uMode=0x1) returned 0x0 [0078.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.034] SetErrorMode (uMode=0x0) returned 0x1 [0078.034] GetFileType (hFile=0x230) returned 0x1 [0078.034] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.035] SetErrorMode (uMode=0x1) returned 0x0 [0078.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7889352b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788934ce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x30f7176b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0078.035] SetErrorMode (uMode=0x0) returned 0x1 [0078.035] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.partially.cryptonar")) returned 1 [0078.036] SetErrorMode (uMode=0x1) returned 0x0 [0078.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.037] SetErrorMode (uMode=0x0) returned 0x1 [0078.037] GetFileType (hFile=0x230) returned 0x1 [0078.037] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.038] SetErrorMode (uMode=0x1) returned 0x0 [0078.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7889d167, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7889d10e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x30f7176b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11d)) returned 1 [0078.038] SetErrorMode (uMode=0x0) returned 0x1 [0078.038] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.partially.cryptonar")) returned 1 [0078.039] SetErrorMode (uMode=0x1) returned 0x0 [0078.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.040] SetErrorMode (uMode=0x0) returned 0x1 [0078.040] GetFileType (hFile=0x230) returned 0x1 [0078.040] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.041] SetErrorMode (uMode=0x1) returned 0x0 [0078.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788a94da, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788a945e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x30f7176b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1 [0078.041] SetErrorMode (uMode=0x0) returned 0x1 [0078.041] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.partially.cryptonar")) returned 1 [0078.042] SetErrorMode (uMode=0x1) returned 0x0 [0078.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.042] SetErrorMode (uMode=0x0) returned 0x1 [0078.043] GetFileType (hFile=0x230) returned 0x1 [0078.043] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.044] SetErrorMode (uMode=0x1) returned 0x0 [0078.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788c4279, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788c420e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x30f7176b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0078.044] SetErrorMode (uMode=0x0) returned 0x1 [0078.044] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.partially.cryptonar")) returned 1 [0078.045] SetErrorMode (uMode=0x1) returned 0x0 [0078.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.045] SetErrorMode (uMode=0x0) returned 0x1 [0078.046] GetFileType (hFile=0x230) returned 0x1 [0078.046] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.047] SetErrorMode (uMode=0x1) returned 0x0 [0078.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788d05cd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788d537e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x30f979e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1 [0078.047] SetErrorMode (uMode=0x0) returned 0x1 [0078.047] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.partially.cryptonar")) returned 1 [0078.048] SetErrorMode (uMode=0x1) returned 0x0 [0078.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.048] SetErrorMode (uMode=0x0) returned 0x1 [0078.048] GetFileType (hFile=0x230) returned 0x1 [0078.048] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.153] SetErrorMode (uMode=0x1) returned 0x0 [0078.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788e1740, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788e3dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31082bb0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0078.153] SetErrorMode (uMode=0x0) returned 0x1 [0078.153] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.partially.cryptonar")) returned 1 [0078.155] SetErrorMode (uMode=0x1) returned 0x0 [0078.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.162] SetErrorMode (uMode=0x0) returned 0x1 [0078.162] GetFileType (hFile=0x230) returned 0x1 [0078.162] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.167] SetErrorMode (uMode=0x1) returned 0x0 [0078.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788eb384, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788eda1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x310a44a4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1 [0078.169] SetErrorMode (uMode=0x0) returned 0x1 [0078.169] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.partially.cryptonar")) returned 1 [0078.175] SetErrorMode (uMode=0x1) returned 0x0 [0078.175] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.176] SetErrorMode (uMode=0x0) returned 0x1 [0078.176] GetFileType (hFile=0x230) returned 0x1 [0078.176] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.177] SetErrorMode (uMode=0x1) returned 0x0 [0078.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788f76d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x788f765e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x310c8c80, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1 [0078.177] SetErrorMode (uMode=0x0) returned 0x1 [0078.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json.partially.cryptonar")) returned 1 [0078.178] SetErrorMode (uMode=0x1) returned 0x0 [0078.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.179] SetErrorMode (uMode=0x0) returned 0x1 [0078.179] GetFileType (hFile=0x230) returned 0x1 [0078.179] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.180] SetErrorMode (uMode=0x1) returned 0x0 [0078.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7890884c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7890aede, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x310c8c80, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0078.181] SetErrorMode (uMode=0x0) returned 0x1 [0078.181] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json.partially.cryptonar")) returned 1 [0078.182] SetErrorMode (uMode=0x1) returned 0x0 [0078.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.183] SetErrorMode (uMode=0x0) returned 0x1 [0078.183] GetFileType (hFile=0x230) returned 0x1 [0078.183] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.184] SetErrorMode (uMode=0x1) returned 0x0 [0078.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7891248a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78914b1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x310c8c80, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0078.184] SetErrorMode (uMode=0x0) returned 0x1 [0078.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.partially.cryptonar")) returned 1 [0078.185] SetErrorMode (uMode=0x1) returned 0x0 [0078.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.186] SetErrorMode (uMode=0x0) returned 0x1 [0078.186] GetFileType (hFile=0x230) returned 0x1 [0078.186] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.195] WriteFile (in: hFile=0x230, lpBuffer=0x26bd840*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26bd840*, lpNumberOfBytesWritten=0x5ae8a8*=0x152, lpOverlapped=0x0) returned 1 [0078.246] SetErrorMode (uMode=0x1) returned 0x0 [0078.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7891e7de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7891e75e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x311615d8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1 [0078.246] SetErrorMode (uMode=0x0) returned 0x1 [0078.246] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.partially.cryptonar")) returned 1 [0078.247] SetErrorMode (uMode=0x1) returned 0x0 [0078.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.248] SetErrorMode (uMode=0x0) returned 0x1 [0078.248] GetFileType (hFile=0x230) returned 0x1 [0078.248] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.250] SetErrorMode (uMode=0x1) returned 0x0 [0078.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7892d241, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7892f8ce, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x311615d8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1 [0078.250] SetErrorMode (uMode=0x0) returned 0x1 [0078.250] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.partially.cryptonar")) returned 1 [0078.251] SetErrorMode (uMode=0x1) returned 0x0 [0078.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.251] SetErrorMode (uMode=0x0) returned 0x1 [0078.251] GetFileType (hFile=0x230) returned 0x1 [0078.251] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.252] SetErrorMode (uMode=0x1) returned 0x0 [0078.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78939596, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7893950e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31187827, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1 [0078.253] SetErrorMode (uMode=0x0) returned 0x1 [0078.253] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.partially.cryptonar")) returned 1 [0078.255] SetErrorMode (uMode=0x1) returned 0x0 [0078.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.255] SetErrorMode (uMode=0x0) returned 0x1 [0078.255] GetFileType (hFile=0x230) returned 0x1 [0078.255] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.256] SetErrorMode (uMode=0x1) returned 0x0 [0078.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789431d7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7894314e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31187827, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11f)) returned 1 [0078.257] SetErrorMode (uMode=0x0) returned 0x1 [0078.257] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.partially.cryptonar")) returned 1 [0078.259] SetErrorMode (uMode=0x1) returned 0x0 [0078.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.259] SetErrorMode (uMode=0x0) returned 0x1 [0078.259] GetFileType (hFile=0x230) returned 0x1 [0078.259] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.261] SetErrorMode (uMode=0x1) returned 0x0 [0078.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78951c69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78951bae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31187827, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfd)) returned 1 [0078.261] SetErrorMode (uMode=0x0) returned 0x1 [0078.261] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.partially.cryptonar")) returned 1 [0078.262] SetErrorMode (uMode=0x1) returned 0x0 [0078.262] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.262] SetErrorMode (uMode=0x0) returned 0x1 [0078.262] GetFileType (hFile=0x230) returned 0x1 [0078.262] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.263] SetErrorMode (uMode=0x1) returned 0x0 [0078.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7895b8a4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7895b7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31187827, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x164)) returned 1 [0078.263] SetErrorMode (uMode=0x0) returned 0x1 [0078.264] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.partially.cryptonar")) returned 1 [0078.264] SetErrorMode (uMode=0x1) returned 0x0 [0078.264] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.265] SetErrorMode (uMode=0x0) returned 0x1 [0078.265] GetFileType (hFile=0x230) returned 0x1 [0078.265] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.266] SetErrorMode (uMode=0x1) returned 0x0 [0078.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789654ec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78967b3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x311add57, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10e)) returned 1 [0078.266] SetErrorMode (uMode=0x0) returned 0x1 [0078.267] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.partially.cryptonar")) returned 1 [0078.267] SetErrorMode (uMode=0x1) returned 0x0 [0078.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.268] SetErrorMode (uMode=0x0) returned 0x1 [0078.268] GetFileType (hFile=0x230) returned 0x1 [0078.268] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.269] SetErrorMode (uMode=0x1) returned 0x0 [0078.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78973f1b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7897659e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x311add57, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x161)) returned 1 [0078.269] SetErrorMode (uMode=0x0) returned 0x1 [0078.269] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.partially.cryptonar")) returned 1 [0078.270] SetErrorMode (uMode=0x1) returned 0x0 [0078.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.271] SetErrorMode (uMode=0x0) returned 0x1 [0078.271] GetFileType (hFile=0x230) returned 0x1 [0078.271] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.272] SetErrorMode (uMode=0x1) returned 0x0 [0078.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7897db7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x789801de, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x311add57, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x117)) returned 1 [0078.272] SetErrorMode (uMode=0x0) returned 0x1 [0078.273] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.partially.cryptonar")) returned 1 [0078.273] SetErrorMode (uMode=0x1) returned 0x0 [0078.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.274] SetErrorMode (uMode=0x0) returned 0x1 [0078.274] GetFileType (hFile=0x230) returned 0x1 [0078.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.275] SetErrorMode (uMode=0x1) returned 0x0 [0078.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78989ebd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78989e1e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x311add57, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x111)) returned 1 [0078.275] SetErrorMode (uMode=0x0) returned 0x1 [0078.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json.partially.cryptonar")) returned 1 [0078.276] SetErrorMode (uMode=0x1) returned 0x0 [0078.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.277] SetErrorMode (uMode=0x0) returned 0x1 [0078.277] GetFileType (hFile=0x230) returned 0x1 [0078.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.278] SetErrorMode (uMode=0x1) returned 0x0 [0078.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78993afe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78993a5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x311add57, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10b)) returned 1 [0078.278] SetErrorMode (uMode=0x0) returned 0x1 [0078.278] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json.partially.cryptonar")) returned 1 [0078.279] SetErrorMode (uMode=0x1) returned 0x0 [0078.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.280] SetErrorMode (uMode=0x0) returned 0x1 [0078.280] GetFileType (hFile=0x230) returned 0x1 [0078.280] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.420] SetErrorMode (uMode=0x1) returned 0x0 [0078.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x789ac19d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x789ac0fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3130de87, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5)) returned 1 [0078.420] SetErrorMode (uMode=0x0) returned 0x1 [0078.420] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.partially.cryptonar")) returned 1 [0078.422] SetErrorMode (uMode=0x1) returned 0x0 [0078.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.422] SetErrorMode (uMode=0x0) returned 0x1 [0078.422] GetFileType (hFile=0x230) returned 0x1 [0078.422] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.475] SetErrorMode (uMode=0x1) returned 0x0 [0078.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f1bc98, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x794fe3a5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3139d9ac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd4e)) returned 1 [0078.475] SetErrorMode (uMode=0x0) returned 0x1 [0078.475] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.partially.cryptonar")) returned 1 [0078.476] SetErrorMode (uMode=0x1) returned 0x0 [0078.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.477] SetErrorMode (uMode=0x0) returned 0x1 [0078.477] GetFileType (hFile=0x230) returned 0x1 [0078.477] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.500] SetErrorMode (uMode=0x1) returned 0x0 [0078.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f0ab22, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79266122, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x313e9d69, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2d8)) returned 1 [0078.501] SetErrorMode (uMode=0x0) returned 0x1 [0078.501] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.partially.cryptonar")) returned 1 [0078.502] SetErrorMode (uMode=0x1) returned 0x0 [0078.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.503] SetErrorMode (uMode=0x0) returned 0x1 [0078.503] GetFileType (hFile=0x230) returned 0x1 [0078.503] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.504] SetErrorMode (uMode=0x1) returned 0x0 [0078.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f2ce1b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f31c22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x313e9d69, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.504] SetErrorMode (uMode=0x0) returned 0x1 [0078.505] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.partially.cryptonar")) returned 1 [0078.505] SetErrorMode (uMode=0x1) returned 0x0 [0078.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.506] SetErrorMode (uMode=0x0) returned 0x1 [0078.506] GetFileType (hFile=0x230) returned 0x1 [0078.506] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.507] SetErrorMode (uMode=0x1) returned 0x0 [0078.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f3b872, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f3df72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x313e9d69, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.507] SetErrorMode (uMode=0x0) returned 0x1 [0078.507] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.partially.cryptonar")) returned 1 [0078.508] SetErrorMode (uMode=0x1) returned 0x0 [0078.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.509] SetErrorMode (uMode=0x0) returned 0x1 [0078.509] GetFileType (hFile=0x230) returned 0x1 [0078.509] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.510] SetErrorMode (uMode=0x1) returned 0x0 [0078.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f4a2df, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f4a2c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x313e9d69, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.510] SetErrorMode (uMode=0x0) returned 0x1 [0078.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.partially.cryptonar")) returned 1 [0078.511] SetErrorMode (uMode=0x1) returned 0x0 [0078.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.512] SetErrorMode (uMode=0x0) returned 0x1 [0078.512] GetFileType (hFile=0x230) returned 0x1 [0078.512] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.513] SetErrorMode (uMode=0x1) returned 0x0 [0078.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f56630, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f58d22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x313e9d69, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.513] SetErrorMode (uMode=0x0) returned 0x1 [0078.513] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.partially.cryptonar")) returned 1 [0078.514] SetErrorMode (uMode=0x1) returned 0x0 [0078.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.516] SetErrorMode (uMode=0x0) returned 0x1 [0078.516] GetFileType (hFile=0x230) returned 0x1 [0078.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.517] SetErrorMode (uMode=0x1) returned 0x0 [0078.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f677aa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f6c5a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314113f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.517] SetErrorMode (uMode=0x0) returned 0x1 [0078.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.partially.cryptonar")) returned 1 [0078.518] SetErrorMode (uMode=0x1) returned 0x0 [0078.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.519] SetErrorMode (uMode=0x0) returned 0x1 [0078.519] GetFileType (hFile=0x230) returned 0x1 [0078.519] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.520] SetErrorMode (uMode=0x1) returned 0x0 [0078.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f76204, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f761e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314113f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.520] SetErrorMode (uMode=0x0) returned 0x1 [0078.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.partially.cryptonar")) returned 1 [0078.521] SetErrorMode (uMode=0x1) returned 0x0 [0078.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.522] SetErrorMode (uMode=0x0) returned 0x1 [0078.522] GetFileType (hFile=0x230) returned 0x1 [0078.522] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.523] SetErrorMode (uMode=0x1) returned 0x0 [0078.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f8255e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f84c42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314113f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.523] SetErrorMode (uMode=0x0) returned 0x1 [0078.523] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.partially.cryptonar")) returned 1 [0078.524] SetErrorMode (uMode=0x1) returned 0x0 [0078.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.525] SetErrorMode (uMode=0x0) returned 0x1 [0078.525] GetFileType (hFile=0x230) returned 0x1 [0078.525] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.526] SetErrorMode (uMode=0x1) returned 0x0 [0078.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78f95de4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78f984c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314113f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.526] SetErrorMode (uMode=0x0) returned 0x1 [0078.526] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.partially.cryptonar")) returned 1 [0078.527] SetErrorMode (uMode=0x1) returned 0x0 [0078.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.528] SetErrorMode (uMode=0x0) returned 0x1 [0078.528] GetFileType (hFile=0x230) returned 0x1 [0078.528] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.529] SetErrorMode (uMode=0x1) returned 0x0 [0078.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fba7d4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78fbf5c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314113f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.529] SetErrorMode (uMode=0x0) returned 0x1 [0078.529] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.partially.cryptonar")) returned 1 [0078.530] SetErrorMode (uMode=0x1) returned 0x0 [0078.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.531] SetErrorMode (uMode=0x0) returned 0x1 [0078.532] GetFileType (hFile=0x230) returned 0x1 [0078.532] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.533] SetErrorMode (uMode=0x1) returned 0x0 [0078.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fd0773, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78fd0732, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314368af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.533] SetErrorMode (uMode=0x0) returned 0x1 [0078.533] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.partially.cryptonar")) returned 1 [0078.534] SetErrorMode (uMode=0x1) returned 0x0 [0078.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.534] SetErrorMode (uMode=0x0) returned 0x1 [0078.535] GetFileType (hFile=0x230) returned 0x1 [0078.535] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.536] SetErrorMode (uMode=0x1) returned 0x0 [0078.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78fe3ff2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78fe66c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314368af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.536] SetErrorMode (uMode=0x0) returned 0x1 [0078.536] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.partially.cryptonar")) returned 1 [0078.537] SetErrorMode (uMode=0x1) returned 0x0 [0078.537] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.538] SetErrorMode (uMode=0x0) returned 0x1 [0078.538] GetFileType (hFile=0x230) returned 0x1 [0078.538] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.539] SetErrorMode (uMode=0x1) returned 0x0 [0078.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ff0334, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78ff2a12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314368af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.539] SetErrorMode (uMode=0x0) returned 0x1 [0078.539] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.partially.cryptonar")) returned 1 [0078.540] SetErrorMode (uMode=0x1) returned 0x0 [0078.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.541] SetErrorMode (uMode=0x0) returned 0x1 [0078.541] GetFileType (hFile=0x230) returned 0x1 [0078.541] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.542] SetErrorMode (uMode=0x1) returned 0x0 [0078.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffc69d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78ffc652, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314368af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.542] SetErrorMode (uMode=0x0) returned 0x1 [0078.542] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.partially.cryptonar")) returned 1 [0078.543] SetErrorMode (uMode=0x1) returned 0x0 [0078.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.543] SetErrorMode (uMode=0x0) returned 0x1 [0078.543] GetFileType (hFile=0x230) returned 0x1 [0078.543] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.545] SetErrorMode (uMode=0x1) returned 0x0 [0078.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7900ff23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7900fed2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314368af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.545] SetErrorMode (uMode=0x0) returned 0x1 [0078.545] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.partially.cryptonar")) returned 1 [0078.546] SetErrorMode (uMode=0x1) returned 0x0 [0078.546] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.547] SetErrorMode (uMode=0x0) returned 0x1 [0078.547] GetFileType (hFile=0x230) returned 0x1 [0078.547] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.548] SetErrorMode (uMode=0x1) returned 0x0 [0078.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7901e987, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7901e932, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3145c4e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.548] SetErrorMode (uMode=0x0) returned 0x1 [0078.548] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.partially.cryptonar")) returned 1 [0078.549] SetErrorMode (uMode=0x1) returned 0x0 [0078.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.549] SetErrorMode (uMode=0x0) returned 0x1 [0078.550] GetFileType (hFile=0x230) returned 0x1 [0078.550] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.551] SetErrorMode (uMode=0x1) returned 0x0 [0078.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790321fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790348c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3145c4e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.551] SetErrorMode (uMode=0x0) returned 0x1 [0078.551] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.partially.cryptonar")) returned 1 [0078.552] SetErrorMode (uMode=0x1) returned 0x0 [0078.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.553] SetErrorMode (uMode=0x0) returned 0x1 [0078.553] GetFileType (hFile=0x230) returned 0x1 [0078.553] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.554] SetErrorMode (uMode=0x1) returned 0x0 [0078.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7904cfb8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79054492, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3145c4e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.554] SetErrorMode (uMode=0x0) returned 0x1 [0078.554] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.partially.cryptonar")) returned 1 [0078.555] SetErrorMode (uMode=0x1) returned 0x0 [0078.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.555] SetErrorMode (uMode=0x0) returned 0x1 [0078.555] GetFileType (hFile=0x230) returned 0x1 [0078.555] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.556] SetErrorMode (uMode=0x1) returned 0x0 [0078.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79060838, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79062ef2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3145c4e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.557] SetErrorMode (uMode=0x0) returned 0x1 [0078.557] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.partially.cryptonar")) returned 1 [0078.557] SetErrorMode (uMode=0x1) returned 0x0 [0078.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.558] SetErrorMode (uMode=0x0) returned 0x1 [0078.558] GetFileType (hFile=0x230) returned 0x1 [0078.558] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.559] SetErrorMode (uMode=0x1) returned 0x0 [0078.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79091588, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79091522, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3145c4e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.559] SetErrorMode (uMode=0x0) returned 0x1 [0078.559] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.partially.cryptonar")) returned 1 [0078.560] SetErrorMode (uMode=0x1) returned 0x0 [0078.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.561] SetErrorMode (uMode=0x0) returned 0x1 [0078.561] GetFileType (hFile=0x230) returned 0x1 [0078.561] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.562] SetErrorMode (uMode=0x1) returned 0x0 [0078.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790a4e14, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790a74b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3148275d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.562] SetErrorMode (uMode=0x0) returned 0x1 [0078.563] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.partially.cryptonar")) returned 1 [0078.563] SetErrorMode (uMode=0x1) returned 0x0 [0078.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.564] SetErrorMode (uMode=0x0) returned 0x1 [0078.564] GetFileType (hFile=0x230) returned 0x1 [0078.564] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.565] SetErrorMode (uMode=0x1) returned 0x0 [0078.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790b5fe5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790b5f12, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3148275d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.566] SetErrorMode (uMode=0x0) returned 0x1 [0078.566] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.partially.cryptonar")) returned 1 [0078.567] SetErrorMode (uMode=0x1) returned 0x0 [0078.567] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.567] SetErrorMode (uMode=0x0) returned 0x1 [0078.567] GetFileType (hFile=0x230) returned 0x1 [0078.567] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.568] SetErrorMode (uMode=0x1) returned 0x0 [0078.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790bfbcc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790c7082, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3148275d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.569] SetErrorMode (uMode=0x0) returned 0x1 [0078.569] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.partially.cryptonar")) returned 1 [0078.569] SetErrorMode (uMode=0x1) returned 0x0 [0078.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.570] SetErrorMode (uMode=0x0) returned 0x1 [0078.570] GetFileType (hFile=0x230) returned 0x1 [0078.570] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.571] SetErrorMode (uMode=0x1) returned 0x0 [0078.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790d5b5e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790d81f2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3148275d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.571] SetErrorMode (uMode=0x0) returned 0x1 [0078.571] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.partially.cryptonar")) returned 1 [0078.572] SetErrorMode (uMode=0x1) returned 0x0 [0078.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.573] SetErrorMode (uMode=0x0) returned 0x1 [0078.573] GetFileType (hFile=0x230) returned 0x1 [0078.573] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.574] SetErrorMode (uMode=0x1) returned 0x0 [0078.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790e45c8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790e4542, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3148275d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9f)) returned 1 [0078.574] SetErrorMode (uMode=0x0) returned 0x1 [0078.574] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.partially.cryptonar")) returned 1 [0078.575] SetErrorMode (uMode=0x1) returned 0x0 [0078.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.575] SetErrorMode (uMode=0x0) returned 0x1 [0078.576] GetFileType (hFile=0x230) returned 0x1 [0078.576] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.577] SetErrorMode (uMode=0x1) returned 0x0 [0078.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x790f7e4e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x790f7dc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3148275d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.577] SetErrorMode (uMode=0x0) returned 0x1 [0078.577] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.partially.cryptonar")) returned 1 [0078.578] SetErrorMode (uMode=0x1) returned 0x0 [0078.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.578] SetErrorMode (uMode=0x0) returned 0x1 [0078.578] GetFileType (hFile=0x230) returned 0x1 [0078.579] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.580] SetErrorMode (uMode=0x1) returned 0x0 [0078.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7910418c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79104112, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314a91b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.580] SetErrorMode (uMode=0x0) returned 0x1 [0078.580] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json.partially.cryptonar")) returned 1 [0078.581] SetErrorMode (uMode=0x1) returned 0x0 [0078.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.581] SetErrorMode (uMode=0x0) returned 0x1 [0078.581] GetFileType (hFile=0x230) returned 0x1 [0078.581] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.582] SetErrorMode (uMode=0x1) returned 0x0 [0078.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7911a102, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791215d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314a91b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.582] SetErrorMode (uMode=0x0) returned 0x1 [0078.582] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json.partially.cryptonar")) returned 1 [0078.583] SetErrorMode (uMode=0x1) returned 0x0 [0078.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.584] SetErrorMode (uMode=0x0) returned 0x1 [0078.584] GetFileType (hFile=0x230) returned 0x1 [0078.584] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.585] SetErrorMode (uMode=0x1) returned 0x0 [0078.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7912d9b4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7912d922, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314a91b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.586] SetErrorMode (uMode=0x0) returned 0x1 [0078.586] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.partially.cryptonar")) returned 1 [0078.595] SetErrorMode (uMode=0x1) returned 0x0 [0078.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.596] SetErrorMode (uMode=0x0) returned 0x1 [0078.596] GetFileType (hFile=0x230) returned 0x1 [0078.596] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.597] SetErrorMode (uMode=0x1) returned 0x0 [0078.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7916f87d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7916f7d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314cec46, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.597] SetErrorMode (uMode=0x0) returned 0x1 [0078.597] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.partially.cryptonar")) returned 1 [0078.598] SetErrorMode (uMode=0x1) returned 0x0 [0078.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.599] SetErrorMode (uMode=0x0) returned 0x1 [0078.599] GetFileType (hFile=0x230) returned 0x1 [0078.599] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.601] SetErrorMode (uMode=0x1) returned 0x0 [0078.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791809ee, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79180942, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314cec46, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.601] SetErrorMode (uMode=0x0) returned 0x1 [0078.601] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.partially.cryptonar")) returned 1 [0078.602] SetErrorMode (uMode=0x1) returned 0x0 [0078.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.602] SetErrorMode (uMode=0x0) returned 0x1 [0078.602] GetFileType (hFile=0x230) returned 0x1 [0078.602] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.603] SetErrorMode (uMode=0x1) returned 0x0 [0078.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791a05dd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791a0512, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314cec46, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.604] SetErrorMode (uMode=0x0) returned 0x1 [0078.604] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.partially.cryptonar")) returned 1 [0078.604] SetErrorMode (uMode=0x1) returned 0x0 [0078.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.605] SetErrorMode (uMode=0x0) returned 0x1 [0078.605] GetFileType (hFile=0x230) returned 0x1 [0078.605] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.606] SetErrorMode (uMode=0x1) returned 0x0 [0078.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791aa282, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791c7612, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314cec46, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.606] SetErrorMode (uMode=0x0) returned 0x1 [0078.606] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.partially.cryptonar")) returned 1 [0078.607] SetErrorMode (uMode=0x1) returned 0x0 [0078.607] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.607] SetErrorMode (uMode=0x0) returned 0x1 [0078.608] GetFileType (hFile=0x230) returned 0x1 [0078.608] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.609] SetErrorMode (uMode=0x1) returned 0x0 [0078.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791e2488, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791e23c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314cec46, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.609] SetErrorMode (uMode=0x0) returned 0x1 [0078.609] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.partially.cryptonar")) returned 1 [0078.610] SetErrorMode (uMode=0x1) returned 0x0 [0078.610] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.610] SetErrorMode (uMode=0x0) returned 0x1 [0078.610] GetFileType (hFile=0x230) returned 0x1 [0078.610] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.611] SetErrorMode (uMode=0x1) returned 0x0 [0078.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x791f0f11, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x791f3532, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314f4de0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.612] SetErrorMode (uMode=0x0) returned 0x1 [0078.612] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.partially.cryptonar")) returned 1 [0078.612] SetErrorMode (uMode=0x1) returned 0x0 [0078.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.613] SetErrorMode (uMode=0x0) returned 0x1 [0078.613] GetFileType (hFile=0x230) returned 0x1 [0078.613] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.615] SetErrorMode (uMode=0x1) returned 0x0 [0078.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79209597, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x792094c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314f4de0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.615] SetErrorMode (uMode=0x0) returned 0x1 [0078.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.partially.cryptonar")) returned 1 [0078.616] SetErrorMode (uMode=0x1) returned 0x0 [0078.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.616] SetErrorMode (uMode=0x0) returned 0x1 [0078.616] GetFileType (hFile=0x230) returned 0x1 [0078.616] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.617] SetErrorMode (uMode=0x1) returned 0x0 [0078.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7922916d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7922b7a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314f4de0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.617] SetErrorMode (uMode=0x0) returned 0x1 [0078.617] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.partially.cryptonar")) returned 1 [0078.618] SetErrorMode (uMode=0x1) returned 0x0 [0078.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.619] SetErrorMode (uMode=0x0) returned 0x1 [0078.619] GetFileType (hFile=0x230) returned 0x1 [0078.619] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.620] SetErrorMode (uMode=0x1) returned 0x0 [0078.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7923a2de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7923c912, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314f4de0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.620] SetErrorMode (uMode=0x0) returned 0x1 [0078.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.partially.cryptonar")) returned 1 [0078.621] SetErrorMode (uMode=0x1) returned 0x0 [0078.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.622] SetErrorMode (uMode=0x0) returned 0x1 [0078.622] GetFileType (hFile=0x230) returned 0x1 [0078.622] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.623] SetErrorMode (uMode=0x1) returned 0x0 [0078.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7924662b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79246552, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x314f4de0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.623] SetErrorMode (uMode=0x0) returned 0x1 [0078.623] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json.partially.cryptonar")) returned 1 [0078.624] SetErrorMode (uMode=0x1) returned 0x0 [0078.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.625] SetErrorMode (uMode=0x0) returned 0x1 [0078.625] GetFileType (hFile=0x230) returned 0x1 [0078.625] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.626] SetErrorMode (uMode=0x1) returned 0x0 [0078.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7925c5c1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7925c4e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3151b0da, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0078.626] SetErrorMode (uMode=0x0) returned 0x1 [0078.626] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json.partially.cryptonar")) returned 1 [0078.627] SetErrorMode (uMode=0x1) returned 0x0 [0078.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.628] SetErrorMode (uMode=0x0) returned 0x1 [0078.628] GetFileType (hFile=0x230) returned 0x1 [0078.628] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.722] SetErrorMode (uMode=0x1) returned 0x0 [0078.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7926d7b7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79277292, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x315ffee0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2769)) returned 1 [0078.722] SetErrorMode (uMode=0x0) returned 0x1 [0078.722] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.partially.cryptonar")) returned 1 [0078.723] SetErrorMode (uMode=0x1) returned 0x0 [0078.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.724] SetErrorMode (uMode=0x0) returned 0x1 [0078.724] GetFileType (hFile=0x230) returned 0x1 [0078.724] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.736] SetErrorMode (uMode=0x1) returned 0x0 [0078.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bab524, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ffae66, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31626177, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd47)) returned 1 [0078.736] SetErrorMode (uMode=0x0) returned 0x1 [0078.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.partially.cryptonar")) returned 1 [0078.737] SetErrorMode (uMode=0x1) returned 0x0 [0078.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.737] SetErrorMode (uMode=0x0) returned 0x1 [0078.737] GetFileType (hFile=0x230) returned 0x1 [0078.737] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.738] SetErrorMode (uMode=0x1) returned 0x0 [0078.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bb2a58, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ffae66, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31626177, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9d)) returned 1 [0078.738] SetErrorMode (uMode=0x0) returned 0x1 [0078.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.partially.cryptonar")) returned 1 [0078.739] SetErrorMode (uMode=0x1) returned 0x0 [0078.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.739] SetErrorMode (uMode=0x0) returned 0x1 [0078.739] GetFileType (hFile=0x230) returned 0x1 [0078.739] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.740] SetErrorMode (uMode=0x1) returned 0x0 [0078.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bbc69a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79bc3ada, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31626177, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0078.740] SetErrorMode (uMode=0x0) returned 0x1 [0078.740] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.partially.cryptonar")) returned 1 [0078.741] SetErrorMode (uMode=0x1) returned 0x0 [0078.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.741] SetErrorMode (uMode=0x0) returned 0x1 [0078.741] GetFileType (hFile=0x230) returned 0x1 [0078.741] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.742] SetErrorMode (uMode=0x1) returned 0x0 [0078.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79bc89de, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79bcb00a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31626177, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0078.742] SetErrorMode (uMode=0x0) returned 0x1 [0078.742] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.partially.cryptonar")) returned 1 [0078.743] SetErrorMode (uMode=0x1) returned 0x0 [0078.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.743] SetErrorMode (uMode=0x0) returned 0x1 [0078.743] GetFileType (hFile=0x230) returned 0x1 [0078.743] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.778] SetErrorMode (uMode=0x1) returned 0x0 [0078.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7984d73a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79c0327a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316725de, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2d6)) returned 1 [0078.779] SetErrorMode (uMode=0x0) returned 0x1 [0078.779] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.partially.cryptonar")) returned 1 [0078.780] SetErrorMode (uMode=0x1) returned 0x0 [0078.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.781] SetErrorMode (uMode=0x0) returned 0x1 [0078.781] GetFileType (hFile=0x230) returned 0x1 [0078.781] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.782] SetErrorMode (uMode=0x1) returned 0x0 [0078.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79860fc0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79860faa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31698770, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0078.782] SetErrorMode (uMode=0x0) returned 0x1 [0078.782] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.partially.cryptonar")) returned 1 [0078.782] SetErrorMode (uMode=0x1) returned 0x0 [0078.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.783] SetErrorMode (uMode=0x0) returned 0x1 [0078.783] GetFileType (hFile=0x230) returned 0x1 [0078.783] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.784] SetErrorMode (uMode=0x1) returned 0x0 [0078.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7987212a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7987211a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31698770, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12f)) returned 1 [0078.784] SetErrorMode (uMode=0x0) returned 0x1 [0078.784] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.partially.cryptonar")) returned 1 [0078.784] SetErrorMode (uMode=0x1) returned 0x0 [0078.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.785] SetErrorMode (uMode=0x0) returned 0x1 [0078.785] GetFileType (hFile=0x230) returned 0x1 [0078.785] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.786] SetErrorMode (uMode=0x1) returned 0x0 [0078.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7987e487, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7987e46a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31698770, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0078.786] SetErrorMode (uMode=0x0) returned 0x1 [0078.786] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.partially.cryptonar")) returned 1 [0078.787] SetErrorMode (uMode=0x1) returned 0x0 [0078.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.787] SetErrorMode (uMode=0x0) returned 0x1 [0078.787] GetFileType (hFile=0x230) returned 0x1 [0078.787] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.788] SetErrorMode (uMode=0x1) returned 0x0 [0078.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7988ceeb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7988f5da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31698770, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0078.788] SetErrorMode (uMode=0x0) returned 0x1 [0078.788] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.partially.cryptonar")) returned 1 [0078.789] SetErrorMode (uMode=0x1) returned 0x0 [0078.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.790] SetErrorMode (uMode=0x0) returned 0x1 [0078.790] GetFileType (hFile=0x230) returned 0x1 [0078.790] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.791] SetErrorMode (uMode=0x1) returned 0x0 [0078.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7989923f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7989921a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31698770, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0078.791] SetErrorMode (uMode=0x0) returned 0x1 [0078.791] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.partially.cryptonar")) returned 1 [0078.792] SetErrorMode (uMode=0x1) returned 0x0 [0078.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.792] SetErrorMode (uMode=0x0) returned 0x1 [0078.792] GetFileType (hFile=0x230) returned 0x1 [0078.792] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.793] SetErrorMode (uMode=0x1) returned 0x0 [0078.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798a2e7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79906fea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31698770, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1 [0078.793] SetErrorMode (uMode=0x0) returned 0x1 [0078.793] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.partially.cryptonar")) returned 1 [0078.794] SetErrorMode (uMode=0x1) returned 0x0 [0078.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.794] SetErrorMode (uMode=0x0) returned 0x1 [0078.794] GetFileType (hFile=0x230) returned 0x1 [0078.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.795] SetErrorMode (uMode=0x1) returned 0x0 [0078.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79913375, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7991333a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31698770, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0078.795] SetErrorMode (uMode=0x0) returned 0x1 [0078.795] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.partially.cryptonar")) returned 1 [0078.796] SetErrorMode (uMode=0x1) returned 0x0 [0078.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.796] SetErrorMode (uMode=0x0) returned 0x1 [0078.796] GetFileType (hFile=0x230) returned 0x1 [0078.796] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.797] SetErrorMode (uMode=0x1) returned 0x0 [0078.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7991f6cf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79921d9a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31698770, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0078.797] SetErrorMode (uMode=0x0) returned 0x1 [0078.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json.partially.cryptonar")) returned 1 [0078.798] SetErrorMode (uMode=0x1) returned 0x0 [0078.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.798] SetErrorMode (uMode=0x0) returned 0x1 [0078.799] GetFileType (hFile=0x230) returned 0x1 [0078.799] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.799] SetErrorMode (uMode=0x1) returned 0x0 [0078.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79937d77, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7993a43a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316c40e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0078.800] SetErrorMode (uMode=0x0) returned 0x1 [0078.800] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json.partially.cryptonar")) returned 1 [0078.800] SetErrorMode (uMode=0x1) returned 0x0 [0078.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.801] SetErrorMode (uMode=0x0) returned 0x1 [0078.801] GetFileType (hFile=0x230) returned 0x1 [0078.801] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.801] SetErrorMode (uMode=0x1) returned 0x0 [0078.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799440bf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7994678a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316c40e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0078.802] SetErrorMode (uMode=0x0) returned 0x1 [0078.802] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.partially.cryptonar")) returned 1 [0078.802] SetErrorMode (uMode=0x1) returned 0x0 [0078.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.803] SetErrorMode (uMode=0x0) returned 0x1 [0078.803] GetFileType (hFile=0x230) returned 0x1 [0078.803] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.804] SetErrorMode (uMode=0x1) returned 0x0 [0078.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996d8e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7996d88a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316c40e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0078.804] SetErrorMode (uMode=0x0) returned 0x1 [0078.804] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.partially.cryptonar")) returned 1 [0078.804] SetErrorMode (uMode=0x1) returned 0x0 [0078.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.805] SetErrorMode (uMode=0x0) returned 0x1 [0078.805] GetFileType (hFile=0x230) returned 0x1 [0078.805] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.806] SetErrorMode (uMode=0x1) returned 0x0 [0078.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79983879, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7998381a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316c40e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0078.806] SetErrorMode (uMode=0x0) returned 0x1 [0078.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.partially.cryptonar")) returned 1 [0078.806] SetErrorMode (uMode=0x1) returned 0x0 [0078.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.807] SetErrorMode (uMode=0x0) returned 0x1 [0078.807] GetFileType (hFile=0x230) returned 0x1 [0078.807] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.808] SetErrorMode (uMode=0x1) returned 0x0 [0078.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7998fbbd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7998fb6a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316c40e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1 [0078.808] SetErrorMode (uMode=0x0) returned 0x1 [0078.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.partially.cryptonar")) returned 1 [0078.808] SetErrorMode (uMode=0x1) returned 0x0 [0078.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.809] SetErrorMode (uMode=0x0) returned 0x1 [0078.809] GetFileType (hFile=0x230) returned 0x1 [0078.809] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.810] SetErrorMode (uMode=0x1) returned 0x0 [0078.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79999811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7999e5ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316c40e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0078.810] SetErrorMode (uMode=0x0) returned 0x1 [0078.810] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.partially.cryptonar")) returned 1 [0078.810] SetErrorMode (uMode=0x1) returned 0x0 [0078.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.811] SetErrorMode (uMode=0x0) returned 0x1 [0078.811] GetFileType (hFile=0x230) returned 0x1 [0078.811] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.812] SetErrorMode (uMode=0x1) returned 0x0 [0078.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799b1eb6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799b1e4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316e4ce3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0078.812] SetErrorMode (uMode=0x0) returned 0x1 [0078.812] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.partially.cryptonar")) returned 1 [0078.813] SetErrorMode (uMode=0x1) returned 0x0 [0078.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.813] SetErrorMode (uMode=0x0) returned 0x1 [0078.813] GetFileType (hFile=0x230) returned 0x1 [0078.813] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.814] SetErrorMode (uMode=0x1) returned 0x0 [0078.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799bbaf8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799be19a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316e4ce3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xee)) returned 1 [0078.815] SetErrorMode (uMode=0x0) returned 0x1 [0078.815] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.partially.cryptonar")) returned 1 [0078.815] SetErrorMode (uMode=0x1) returned 0x0 [0078.815] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.816] SetErrorMode (uMode=0x0) returned 0x1 [0078.816] GetFileType (hFile=0x230) returned 0x1 [0078.816] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.817] SetErrorMode (uMode=0x1) returned 0x0 [0078.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799d4197, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799d412a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316e4ce3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0078.817] SetErrorMode (uMode=0x0) returned 0x1 [0078.817] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.partially.cryptonar")) returned 1 [0078.818] SetErrorMode (uMode=0x1) returned 0x0 [0078.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.818] SetErrorMode (uMode=0x0) returned 0x1 [0078.818] GetFileType (hFile=0x230) returned 0x1 [0078.818] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.819] SetErrorMode (uMode=0x1) returned 0x0 [0078.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799e04ee, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799e047a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316e4ce3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0078.819] SetErrorMode (uMode=0x0) returned 0x1 [0078.819] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.partially.cryptonar")) returned 1 [0078.820] SetErrorMode (uMode=0x1) returned 0x0 [0078.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.823] SetErrorMode (uMode=0x0) returned 0x1 [0078.823] GetFileType (hFile=0x230) returned 0x1 [0078.823] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.824] SetErrorMode (uMode=0x1) returned 0x0 [0078.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799ec845, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x799f15ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316e4ce3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0078.824] SetErrorMode (uMode=0x0) returned 0x1 [0078.824] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.partially.cryptonar")) returned 1 [0078.825] SetErrorMode (uMode=0x1) returned 0x0 [0078.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.826] SetErrorMode (uMode=0x0) returned 0x1 [0078.826] GetFileType (hFile=0x230) returned 0x1 [0078.826] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.827] SetErrorMode (uMode=0x1) returned 0x0 [0078.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a1d582, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a1d50a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x316e4ce3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0078.827] SetErrorMode (uMode=0x0) returned 0x1 [0078.827] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.partially.cryptonar")) returned 1 [0078.830] SetErrorMode (uMode=0x1) returned 0x0 [0078.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.831] SetErrorMode (uMode=0x0) returned 0x1 [0078.831] GetFileType (hFile=0x230) returned 0x1 [0078.831] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.832] SetErrorMode (uMode=0x1) returned 0x0 [0078.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a30e15, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a30d8a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3170b01e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf5)) returned 1 [0078.832] SetErrorMode (uMode=0x0) returned 0x1 [0078.832] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.partially.cryptonar")) returned 1 [0078.833] SetErrorMode (uMode=0x1) returned 0x0 [0078.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.834] SetErrorMode (uMode=0x0) returned 0x1 [0078.834] GetFileType (hFile=0x230) returned 0x1 [0078.834] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.835] SetErrorMode (uMode=0x1) returned 0x0 [0078.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a44698, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a4bb3a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3170b01e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0078.835] SetErrorMode (uMode=0x0) returned 0x1 [0078.835] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.partially.cryptonar")) returned 1 [0078.836] SetErrorMode (uMode=0x1) returned 0x0 [0078.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.837] SetErrorMode (uMode=0x0) returned 0x1 [0078.837] GetFileType (hFile=0x230) returned 0x1 [0078.837] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.839] SetErrorMode (uMode=0x1) returned 0x0 [0078.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a57f21, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a57e8a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3170b01e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0078.839] SetErrorMode (uMode=0x0) returned 0x1 [0078.839] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.partially.cryptonar")) returned 1 [0078.840] SetErrorMode (uMode=0x1) returned 0x0 [0078.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.841] SetErrorMode (uMode=0x0) returned 0x1 [0078.841] GetFileType (hFile=0x230) returned 0x1 [0078.841] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.842] SetErrorMode (uMode=0x1) returned 0x0 [0078.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a6907e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a68ffa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3170b01e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1 [0078.842] SetErrorMode (uMode=0x0) returned 0x1 [0078.842] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.partially.cryptonar")) returned 1 [0078.843] SetErrorMode (uMode=0x1) returned 0x0 [0078.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.844] SetErrorMode (uMode=0x0) returned 0x1 [0078.844] GetFileType (hFile=0x230) returned 0x1 [0078.844] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.845] SetErrorMode (uMode=0x1) returned 0x0 [0078.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a7a20a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a7c87a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31735169, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0078.845] SetErrorMode (uMode=0x0) returned 0x1 [0078.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.partially.cryptonar")) returned 1 [0078.846] SetErrorMode (uMode=0x1) returned 0x0 [0078.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.847] SetErrorMode (uMode=0x0) returned 0x1 [0078.847] GetFileType (hFile=0x230) returned 0x1 [0078.847] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.886] SetErrorMode (uMode=0x1) returned 0x0 [0078.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a8da6b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79a900fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3177d552, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0078.886] SetErrorMode (uMode=0x0) returned 0x1 [0078.886] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.partially.cryptonar")) returned 1 [0078.887] SetErrorMode (uMode=0x1) returned 0x0 [0078.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.888] SetErrorMode (uMode=0x0) returned 0x1 [0078.888] GetFileType (hFile=0x230) returned 0x1 [0078.888] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.891] SetErrorMode (uMode=0x1) returned 0x0 [0078.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79aa3a03, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79aa397a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317a38c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbf)) returned 1 [0078.891] SetErrorMode (uMode=0x0) returned 0x1 [0078.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.partially.cryptonar")) returned 1 [0078.892] SetErrorMode (uMode=0x1) returned 0x0 [0078.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.893] SetErrorMode (uMode=0x0) returned 0x1 [0078.893] GetFileType (hFile=0x230) returned 0x1 [0078.893] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.894] SetErrorMode (uMode=0x1) returned 0x0 [0078.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ab4b99, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ab4aea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317a38c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0078.895] SetErrorMode (uMode=0x0) returned 0x1 [0078.895] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.partially.cryptonar")) returned 1 [0078.896] SetErrorMode (uMode=0x1) returned 0x0 [0078.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.897] SetErrorMode (uMode=0x0) returned 0x1 [0078.897] GetFileType (hFile=0x230) returned 0x1 [0078.897] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.898] SetErrorMode (uMode=0x1) returned 0x0 [0078.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79abe7d7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79abe72a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317a38c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0078.898] SetErrorMode (uMode=0x0) returned 0x1 [0078.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json.partially.cryptonar")) returned 1 [0078.899] SetErrorMode (uMode=0x1) returned 0x0 [0078.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.900] SetErrorMode (uMode=0x0) returned 0x1 [0078.900] GetFileType (hFile=0x230) returned 0x1 [0078.900] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.901] SetErrorMode (uMode=0x1) returned 0x0 [0078.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79acf94d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79acf89a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317a38c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0078.901] SetErrorMode (uMode=0x0) returned 0x1 [0078.901] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json.partially.cryptonar")) returned 1 [0078.902] SetErrorMode (uMode=0x1) returned 0x0 [0078.902] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.903] SetErrorMode (uMode=0x0) returned 0x1 [0078.903] GetFileType (hFile=0x230) returned 0x1 [0078.903] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.904] SetErrorMode (uMode=0x1) returned 0x0 [0078.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ae0ac0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ae311a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317a38c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0078.904] SetErrorMode (uMode=0x0) returned 0x1 [0078.905] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.partially.cryptonar")) returned 1 [0078.905] SetErrorMode (uMode=0x1) returned 0x0 [0078.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.906] SetErrorMode (uMode=0x0) returned 0x1 [0078.906] GetFileType (hFile=0x230) returned 0x1 [0078.906] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.907] SetErrorMode (uMode=0x1) returned 0x0 [0078.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79af4340, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79af428a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317c9af2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0078.907] SetErrorMode (uMode=0x0) returned 0x1 [0078.907] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.partially.cryptonar")) returned 1 [0078.908] SetErrorMode (uMode=0x1) returned 0x0 [0078.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.908] SetErrorMode (uMode=0x0) returned 0x1 [0078.908] GetFileType (hFile=0x230) returned 0x1 [0078.908] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.909] SetErrorMode (uMode=0x1) returned 0x0 [0078.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b02d9d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b02cea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317c9af2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1 [0078.909] SetErrorMode (uMode=0x0) returned 0x1 [0078.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.partially.cryptonar")) returned 1 [0078.910] SetErrorMode (uMode=0x1) returned 0x0 [0078.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.910] SetErrorMode (uMode=0x0) returned 0x1 [0078.910] GetFileType (hFile=0x230) returned 0x1 [0078.910] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.911] SetErrorMode (uMode=0x1) returned 0x0 [0078.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b0c9f5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b0f03a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317c9af2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0078.911] SetErrorMode (uMode=0x0) returned 0x1 [0078.911] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.partially.cryptonar")) returned 1 [0078.912] SetErrorMode (uMode=0x1) returned 0x0 [0078.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.912] SetErrorMode (uMode=0x0) returned 0x1 [0078.912] GetFileType (hFile=0x230) returned 0x1 [0078.912] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.913] SetErrorMode (uMode=0x1) returned 0x0 [0078.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b2026b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b2c4fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317c9af2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1 [0078.913] SetErrorMode (uMode=0x0) returned 0x1 [0078.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.partially.cryptonar")) returned 1 [0078.914] SetErrorMode (uMode=0x1) returned 0x0 [0078.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.914] SetErrorMode (uMode=0x0) returned 0x1 [0078.914] GetFileType (hFile=0x230) returned 0x1 [0078.914] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.915] SetErrorMode (uMode=0x1) returned 0x0 [0078.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b36200, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b3613a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317c9af2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0078.915] SetErrorMode (uMode=0x0) returned 0x1 [0078.915] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.partially.cryptonar")) returned 1 [0078.916] SetErrorMode (uMode=0x1) returned 0x0 [0078.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.916] SetErrorMode (uMode=0x0) returned 0x1 [0078.916] GetFileType (hFile=0x230) returned 0x1 [0078.916] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.917] SetErrorMode (uMode=0x1) returned 0x0 [0078.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b4737d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b472aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317c9af2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10a)) returned 1 [0078.917] SetErrorMode (uMode=0x0) returned 0x1 [0078.917] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.partially.cryptonar")) returned 1 [0078.918] SetErrorMode (uMode=0x1) returned 0x0 [0078.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.918] SetErrorMode (uMode=0x0) returned 0x1 [0078.918] GetFileType (hFile=0x230) returned 0x1 [0078.918] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.923] SetErrorMode (uMode=0x1) returned 0x0 [0078.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b55de0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b5841a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317efc00, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1 [0078.923] SetErrorMode (uMode=0x0) returned 0x1 [0078.923] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.partially.cryptonar")) returned 1 [0078.924] SetErrorMode (uMode=0x1) returned 0x0 [0078.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.924] SetErrorMode (uMode=0x0) returned 0x1 [0078.925] GetFileType (hFile=0x230) returned 0x1 [0078.925] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.925] SetErrorMode (uMode=0x1) returned 0x0 [0078.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b69666, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b6958a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317efc00, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0078.926] SetErrorMode (uMode=0x0) returned 0x1 [0078.926] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.partially.cryptonar")) returned 1 [0078.926] SetErrorMode (uMode=0x1) returned 0x0 [0078.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.927] SetErrorMode (uMode=0x0) returned 0x1 [0078.927] GetFileType (hFile=0x230) returned 0x1 [0078.927] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.927] SetErrorMode (uMode=0x1) returned 0x0 [0078.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b84446, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b8433a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317efc00, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0078.928] SetErrorMode (uMode=0x0) returned 0x1 [0078.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.partially.cryptonar")) returned 1 [0078.928] SetErrorMode (uMode=0x1) returned 0x0 [0078.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.929] SetErrorMode (uMode=0x0) returned 0x1 [0078.929] GetFileType (hFile=0x230) returned 0x1 [0078.929] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.929] SetErrorMode (uMode=0x1) returned 0x0 [0078.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b97c9e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79b9a2ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317efc00, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1 [0078.930] SetErrorMode (uMode=0x0) returned 0x1 [0078.930] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json.partially.cryptonar")) returned 1 [0078.930] SetErrorMode (uMode=0x1) returned 0x0 [0078.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.931] SetErrorMode (uMode=0x0) returned 0x1 [0078.931] GetFileType (hFile=0x230) returned 0x1 [0078.931] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.931] SetErrorMode (uMode=0x1) returned 0x0 [0078.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ba3ff5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79ba661a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317efc00, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1 [0078.932] SetErrorMode (uMode=0x0) returned 0x1 [0078.932] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json.partially.cryptonar")) returned 1 [0078.932] SetErrorMode (uMode=0x1) returned 0x0 [0078.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.933] SetErrorMode (uMode=0x0) returned 0x1 [0078.933] GetFileType (hFile=0x230) returned 0x1 [0078.933] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.934] SetErrorMode (uMode=0x1) returned 0x0 [0078.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a0af944, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a0af944, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x317efc00, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0078.934] SetErrorMode (uMode=0x0) returned 0x1 [0078.934] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.partially.cryptonar")) returned 1 [0078.934] SetErrorMode (uMode=0x1) returned 0x0 [0078.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.935] SetErrorMode (uMode=0x0) returned 0x1 [0078.935] GetFileType (hFile=0x230) returned 0x1 [0078.935] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0078.994] SetErrorMode (uMode=0x1) returned 0x0 [0078.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c0a8ae, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x79c16afa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31888865, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0078.994] SetErrorMode (uMode=0x0) returned 0x1 [0078.995] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.partially.cryptonar")) returned 1 [0078.995] SetErrorMode (uMode=0x1) returned 0x0 [0078.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0078.996] SetErrorMode (uMode=0x0) returned 0x1 [0078.996] GetFileType (hFile=0x230) returned 0x1 [0078.996] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.070] SetErrorMode (uMode=0x1) returned 0x0 [0079.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7435059f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74d16f0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3194966f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0079.070] SetErrorMode (uMode=0x0) returned 0x1 [0079.071] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.partially.cryptonar")) returned 1 [0079.071] SetErrorMode (uMode=0x1) returned 0x0 [0079.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.072] SetErrorMode (uMode=0x0) returned 0x1 [0079.072] GetFileType (hFile=0x230) returned 0x1 [0079.072] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.086] SetErrorMode (uMode=0x1) returned 0x0 [0079.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748ac811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748b14d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3196d4dc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1103)) returned 1 [0079.087] SetErrorMode (uMode=0x0) returned 0x1 [0079.087] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.partially.cryptonar")) returned 1 [0079.088] SetErrorMode (uMode=0x1) returned 0x0 [0079.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.088] SetErrorMode (uMode=0x0) returned 0x1 [0079.088] GetFileType (hFile=0x230) returned 0x1 [0079.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.112] SetErrorMode (uMode=0x1) returned 0x0 [0079.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748bb26f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748bff32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x319b99cf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x356)) returned 1 [0079.112] SetErrorMode (uMode=0x0) returned 0x1 [0079.112] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json.partially.cryptonar")) returned 1 [0079.113] SetErrorMode (uMode=0x1) returned 0x0 [0079.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.114] SetErrorMode (uMode=0x0) returned 0x1 [0079.114] GetFileType (hFile=0x230) returned 0x1 [0079.114] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.133] SetErrorMode (uMode=0x1) returned 0x0 [0079.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748c4ec0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748c9b72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x319e093a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1 [0079.133] SetErrorMode (uMode=0x0) returned 0x1 [0079.134] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.partially.cryptonar")) returned 1 [0079.134] SetErrorMode (uMode=0x1) returned 0x0 [0079.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.135] SetErrorMode (uMode=0x0) returned 0x1 [0079.135] GetFileType (hFile=0x230) returned 0x1 [0079.135] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.152] SetErrorMode (uMode=0x1) returned 0x0 [0079.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7434695a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748d10a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a05e55, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0079.152] SetErrorMode (uMode=0x0) returned 0x1 [0079.152] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.partially.cryptonar")) returned 1 [0079.153] SetErrorMode (uMode=0x1) returned 0x0 [0079.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.154] SetErrorMode (uMode=0x0) returned 0x1 [0079.154] GetFileType (hFile=0x230) returned 0x1 [0079.154] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.155] SetErrorMode (uMode=0x1) returned 0x0 [0079.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748d6036, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748d85d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a05e55, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0079.156] SetErrorMode (uMode=0x0) returned 0x1 [0079.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.partially.cryptonar")) returned 1 [0079.158] SetErrorMode (uMode=0x1) returned 0x0 [0079.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.159] SetErrorMode (uMode=0x0) returned 0x1 [0079.159] GetFileType (hFile=0x230) returned 0x1 [0079.159] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.160] SetErrorMode (uMode=0x1) returned 0x0 [0079.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7435c8f0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7435c8e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a2c122, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x84)) returned 1 [0079.160] SetErrorMode (uMode=0x0) returned 0x1 [0079.160] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.partially.cryptonar")) returned 1 [0079.161] SetErrorMode (uMode=0x1) returned 0x0 [0079.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.162] SetErrorMode (uMode=0x0) returned 0x1 [0079.162] GetFileType (hFile=0x230) returned 0x1 [0079.162] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.163] SetErrorMode (uMode=0x1) returned 0x0 [0079.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7436b350, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7436b342, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a2c122, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0079.164] SetErrorMode (uMode=0x0) returned 0x1 [0079.164] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.partially.cryptonar")) returned 1 [0079.165] SetErrorMode (uMode=0x1) returned 0x0 [0079.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.165] SetErrorMode (uMode=0x0) returned 0x1 [0079.165] GetFileType (hFile=0x230) returned 0x1 [0079.165] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.166] SetErrorMode (uMode=0x1) returned 0x0 [0079.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74374f95, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74374f82, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a2c122, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0079.167] SetErrorMode (uMode=0x0) returned 0x1 [0079.167] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.partially.cryptonar")) returned 1 [0079.168] SetErrorMode (uMode=0x1) returned 0x0 [0079.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.169] SetErrorMode (uMode=0x0) returned 0x1 [0079.169] GetFileType (hFile=0x230) returned 0x1 [0079.169] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.170] SetErrorMode (uMode=0x1) returned 0x0 [0079.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7437c4c7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7437ebc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a2c122, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1 [0079.170] SetErrorMode (uMode=0x0) returned 0x1 [0079.170] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.partially.cryptonar")) returned 1 [0079.171] SetErrorMode (uMode=0x1) returned 0x0 [0079.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.172] SetErrorMode (uMode=0x0) returned 0x1 [0079.172] GetFileType (hFile=0x230) returned 0x1 [0079.172] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.173] SetErrorMode (uMode=0x1) returned 0x0 [0079.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7438d637, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7438d622, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a5237e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x114)) returned 1 [0079.173] SetErrorMode (uMode=0x0) returned 0x1 [0079.173] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.partially.cryptonar")) returned 1 [0079.174] SetErrorMode (uMode=0x1) returned 0x0 [0079.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.175] SetErrorMode (uMode=0x0) returned 0x1 [0079.175] GetFileType (hFile=0x230) returned 0x1 [0079.175] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.176] SetErrorMode (uMode=0x1) returned 0x0 [0079.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74397281, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74397262, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a5237e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14b)) returned 1 [0079.176] SetErrorMode (uMode=0x0) returned 0x1 [0079.176] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.partially.cryptonar")) returned 1 [0079.177] SetErrorMode (uMode=0x1) returned 0x0 [0079.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.178] SetErrorMode (uMode=0x0) returned 0x1 [0079.178] GetFileType (hFile=0x230) returned 0x1 [0079.178] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.179] SetErrorMode (uMode=0x1) returned 0x0 [0079.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743d913f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x743ddf32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a5237e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0079.180] SetErrorMode (uMode=0x0) returned 0x1 [0079.180] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.partially.cryptonar")) returned 1 [0079.180] SetErrorMode (uMode=0x1) returned 0x0 [0079.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.181] SetErrorMode (uMode=0x0) returned 0x1 [0079.181] GetFileType (hFile=0x230) returned 0x1 [0079.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.182] SetErrorMode (uMode=0x1) returned 0x0 [0079.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743e7ba5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x743e7b72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a5237e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xad)) returned 1 [0079.182] SetErrorMode (uMode=0x0) returned 0x1 [0079.182] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.partially.cryptonar")) returned 1 [0079.183] SetErrorMode (uMode=0x1) returned 0x0 [0079.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.184] SetErrorMode (uMode=0x0) returned 0x1 [0079.184] GetFileType (hFile=0x230) returned 0x1 [0079.184] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.185] SetErrorMode (uMode=0x1) returned 0x0 [0079.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743f17e0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x743f17b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a5237e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1 [0079.185] SetErrorMode (uMode=0x0) returned 0x1 [0079.185] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.partially.cryptonar")) returned 1 [0079.186] SetErrorMode (uMode=0x1) returned 0x0 [0079.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.186] SetErrorMode (uMode=0x0) returned 0x1 [0079.186] GetFileType (hFile=0x230) returned 0x1 [0079.186] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.187] SetErrorMode (uMode=0x1) returned 0x0 [0079.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743fdb34, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74400212, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a5237e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc1)) returned 1 [0079.187] SetErrorMode (uMode=0x0) returned 0x1 [0079.187] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.partially.cryptonar")) returned 1 [0079.188] SetErrorMode (uMode=0x1) returned 0x0 [0079.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.189] SetErrorMode (uMode=0x0) returned 0x1 [0079.189] GetFileType (hFile=0x230) returned 0x1 [0079.189] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.209] SetErrorMode (uMode=0x1) returned 0x0 [0079.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74409e8f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74409e52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a9e799, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12a)) returned 1 [0079.209] SetErrorMode (uMode=0x0) returned 0x1 [0079.209] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.partially.cryptonar")) returned 1 [0079.211] SetErrorMode (uMode=0x1) returned 0x0 [0079.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.211] SetErrorMode (uMode=0x0) returned 0x1 [0079.211] GetFileType (hFile=0x230) returned 0x1 [0079.211] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.212] SetErrorMode (uMode=0x1) returned 0x0 [0079.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744113bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74413a92, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a9e799, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1 [0079.212] SetErrorMode (uMode=0x0) returned 0x1 [0079.212] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json.partially.cryptonar")) returned 1 [0079.213] SetErrorMode (uMode=0x1) returned 0x0 [0079.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.213] SetErrorMode (uMode=0x0) returned 0x1 [0079.214] GetFileType (hFile=0x230) returned 0x1 [0079.214] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.214] SetErrorMode (uMode=0x1) returned 0x0 [0079.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7441d715, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7441d6d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a9e799, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1 [0079.214] SetErrorMode (uMode=0x0) returned 0x1 [0079.214] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json.partially.cryptonar")) returned 1 [0079.216] SetErrorMode (uMode=0x1) returned 0x0 [0079.216] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.217] SetErrorMode (uMode=0x0) returned 0x1 [0079.217] GetFileType (hFile=0x230) returned 0x1 [0079.217] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.217] SetErrorMode (uMode=0x1) returned 0x0 [0079.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7442e86f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7442e842, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31a9e799, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcc)) returned 1 [0079.218] SetErrorMode (uMode=0x0) returned 0x1 [0079.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.partially.cryptonar")) returned 1 [0079.219] SetErrorMode (uMode=0x1) returned 0x0 [0079.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.219] SetErrorMode (uMode=0x0) returned 0x1 [0079.219] GetFileType (hFile=0x230) returned 0x1 [0079.219] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.220] SetErrorMode (uMode=0x1) returned 0x0 [0079.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744384c9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74438482, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31ac495a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0079.220] SetErrorMode (uMode=0x0) returned 0x1 [0079.220] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.partially.cryptonar")) returned 1 [0079.221] SetErrorMode (uMode=0x1) returned 0x0 [0079.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.221] SetErrorMode (uMode=0x0) returned 0x1 [0079.221] GetFileType (hFile=0x230) returned 0x1 [0079.221] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.222] SetErrorMode (uMode=0x1) returned 0x0 [0079.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74442107, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744420c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31ac495a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1 [0079.222] SetErrorMode (uMode=0x0) returned 0x1 [0079.222] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.partially.cryptonar")) returned 1 [0079.223] SetErrorMode (uMode=0x1) returned 0x0 [0079.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.224] SetErrorMode (uMode=0x0) returned 0x1 [0079.224] GetFileType (hFile=0x230) returned 0x1 [0079.224] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.225] SetErrorMode (uMode=0x1) returned 0x0 [0079.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7444e446, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7444e412, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31ac495a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x98)) returned 1 [0079.225] SetErrorMode (uMode=0x0) returned 0x1 [0079.225] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.partially.cryptonar")) returned 1 [0079.226] SetErrorMode (uMode=0x1) returned 0x0 [0079.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.226] SetErrorMode (uMode=0x0) returned 0x1 [0079.226] GetFileType (hFile=0x230) returned 0x1 [0079.226] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.227] SetErrorMode (uMode=0x1) returned 0x0 [0079.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744580a3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74458052, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31ac495a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1 [0079.228] SetErrorMode (uMode=0x0) returned 0x1 [0079.228] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.partially.cryptonar")) returned 1 [0079.229] SetErrorMode (uMode=0x1) returned 0x0 [0079.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.229] SetErrorMode (uMode=0x0) returned 0x1 [0079.229] GetFileType (hFile=0x230) returned 0x1 [0079.229] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.230] SetErrorMode (uMode=0x1) returned 0x0 [0079.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74461ce1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74461c92, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31ac495a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb7)) returned 1 [0079.230] SetErrorMode (uMode=0x0) returned 0x1 [0079.230] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.partially.cryptonar")) returned 1 [0079.231] SetErrorMode (uMode=0x1) returned 0x0 [0079.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.232] SetErrorMode (uMode=0x0) returned 0x1 [0079.232] GetFileType (hFile=0x230) returned 0x1 [0079.232] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.233] SetErrorMode (uMode=0x1) returned 0x0 [0079.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74469213, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7446b8d2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31ac495a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc7)) returned 1 [0079.233] SetErrorMode (uMode=0x0) returned 0x1 [0079.233] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.partially.cryptonar")) returned 1 [0079.234] SetErrorMode (uMode=0x1) returned 0x0 [0079.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.234] SetErrorMode (uMode=0x0) returned 0x1 [0079.234] GetFileType (hFile=0x230) returned 0x1 [0079.234] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.235] SetErrorMode (uMode=0x1) returned 0x0 [0079.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74477c7a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74477c22, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31aeac53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0079.235] SetErrorMode (uMode=0x0) returned 0x1 [0079.235] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.partially.cryptonar")) returned 1 [0079.236] SetErrorMode (uMode=0x1) returned 0x0 [0079.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.237] SetErrorMode (uMode=0x0) returned 0x1 [0079.237] GetFileType (hFile=0x230) returned 0x1 [0079.237] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.237] SetErrorMode (uMode=0x1) returned 0x0 [0079.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744818b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74481862, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31aeac53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0079.238] SetErrorMode (uMode=0x0) returned 0x1 [0079.238] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json.partially.cryptonar")) returned 1 [0079.238] SetErrorMode (uMode=0x1) returned 0x0 [0079.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.239] SetErrorMode (uMode=0x0) returned 0x1 [0079.239] GetFileType (hFile=0x230) returned 0x1 [0079.239] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.240] SetErrorMode (uMode=0x1) returned 0x0 [0079.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7448b500, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7448b4a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31aeac53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1 [0079.240] SetErrorMode (uMode=0x0) returned 0x1 [0079.240] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.partially.cryptonar")) returned 1 [0079.241] SetErrorMode (uMode=0x1) returned 0x0 [0079.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.241] SetErrorMode (uMode=0x0) returned 0x1 [0079.241] GetFileType (hFile=0x230) returned 0x1 [0079.241] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.242] SetErrorMode (uMode=0x1) returned 0x0 [0079.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74495141, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744950e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31aeac53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1 [0079.242] SetErrorMode (uMode=0x0) returned 0x1 [0079.242] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.partially.cryptonar")) returned 1 [0079.243] SetErrorMode (uMode=0x1) returned 0x0 [0079.243] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.244] SetErrorMode (uMode=0x0) returned 0x1 [0079.244] GetFileType (hFile=0x230) returned 0x1 [0079.244] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.245] SetErrorMode (uMode=0x1) returned 0x0 [0079.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744a1492, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744a1432, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31aeac53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1 [0079.245] SetErrorMode (uMode=0x0) returned 0x1 [0079.245] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.partially.cryptonar")) returned 1 [0079.246] SetErrorMode (uMode=0x1) returned 0x0 [0079.246] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.246] SetErrorMode (uMode=0x0) returned 0x1 [0079.246] GetFileType (hFile=0x230) returned 0x1 [0079.246] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.247] SetErrorMode (uMode=0x1) returned 0x0 [0079.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744ad7e9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744ad782, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31aeac53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc8)) returned 1 [0079.247] SetErrorMode (uMode=0x0) returned 0x1 [0079.247] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.partially.cryptonar")) returned 1 [0079.248] SetErrorMode (uMode=0x1) returned 0x0 [0079.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.248] SetErrorMode (uMode=0x0) returned 0x1 [0079.248] GetFileType (hFile=0x230) returned 0x1 [0079.248] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.249] SetErrorMode (uMode=0x1) returned 0x0 [0079.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744b742b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x744b73c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31aeac53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0079.249] SetErrorMode (uMode=0x0) returned 0x1 [0079.249] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.partially.cryptonar")) returned 1 [0079.250] SetErrorMode (uMode=0x1) returned 0x0 [0079.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.251] SetErrorMode (uMode=0x0) returned 0x1 [0079.251] GetFileType (hFile=0x230) returned 0x1 [0079.251] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.254] SetErrorMode (uMode=0x1) returned 0x0 [0079.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745203f7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74520372, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b10ea3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x299)) returned 1 [0079.255] SetErrorMode (uMode=0x0) returned 0x1 [0079.255] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.partially.cryptonar")) returned 1 [0079.256] SetErrorMode (uMode=0x1) returned 0x0 [0079.256] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.257] SetErrorMode (uMode=0x0) returned 0x1 [0079.257] GetFileType (hFile=0x230) returned 0x1 [0079.257] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.258] SetErrorMode (uMode=0x1) returned 0x0 [0079.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7452a04e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74529fb2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b10ea3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0079.258] SetErrorMode (uMode=0x0) returned 0x1 [0079.259] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.partially.cryptonar")) returned 1 [0079.259] SetErrorMode (uMode=0x1) returned 0x0 [0079.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.260] SetErrorMode (uMode=0x0) returned 0x1 [0079.260] GetFileType (hFile=0x230) returned 0x1 [0079.260] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.261] SetErrorMode (uMode=0x1) returned 0x0 [0079.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7453d8bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7453d832, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b10ea3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1 [0079.261] SetErrorMode (uMode=0x0) returned 0x1 [0079.261] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.partially.cryptonar")) returned 1 [0079.262] SetErrorMode (uMode=0x1) returned 0x0 [0079.262] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.262] SetErrorMode (uMode=0x0) returned 0x1 [0079.262] GetFileType (hFile=0x230) returned 0x1 [0079.262] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.263] SetErrorMode (uMode=0x1) returned 0x0 [0079.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745474fc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74547472, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b10ea3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1 [0079.263] SetErrorMode (uMode=0x0) returned 0x1 [0079.263] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.partially.cryptonar")) returned 1 [0079.264] SetErrorMode (uMode=0x1) returned 0x0 [0079.264] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.264] SetErrorMode (uMode=0x0) returned 0x1 [0079.264] GetFileType (hFile=0x230) returned 0x1 [0079.264] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.265] SetErrorMode (uMode=0x1) returned 0x0 [0079.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74551141, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x745510b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b370cc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1 [0079.265] SetErrorMode (uMode=0x0) returned 0x1 [0079.266] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.partially.cryptonar")) returned 1 [0079.266] SetErrorMode (uMode=0x1) returned 0x0 [0079.266] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.267] SetErrorMode (uMode=0x0) returned 0x1 [0079.267] GetFileType (hFile=0x230) returned 0x1 [0079.267] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.268] SetErrorMode (uMode=0x1) returned 0x0 [0079.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7455d492, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74562222, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b370cc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0079.268] SetErrorMode (uMode=0x0) returned 0x1 [0079.268] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.partially.cryptonar")) returned 1 [0079.269] SetErrorMode (uMode=0x1) returned 0x0 [0079.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.269] SetErrorMode (uMode=0x0) returned 0x1 [0079.269] GetFileType (hFile=0x230) returned 0x1 [0079.269] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.270] SetErrorMode (uMode=0x1) returned 0x0 [0079.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7456bef8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7456be62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b370cc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x165)) returned 1 [0079.270] SetErrorMode (uMode=0x0) returned 0x1 [0079.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.partially.cryptonar")) returned 1 [0079.271] SetErrorMode (uMode=0x1) returned 0x0 [0079.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.271] SetErrorMode (uMode=0x0) returned 0x1 [0079.271] GetFileType (hFile=0x230) returned 0x1 [0079.271] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.273] SetErrorMode (uMode=0x1) returned 0x0 [0079.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74575b3a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x745781b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b370cc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x25f)) returned 1 [0079.274] SetErrorMode (uMode=0x0) returned 0x1 [0079.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.partially.cryptonar")) returned 1 [0079.276] SetErrorMode (uMode=0x1) returned 0x0 [0079.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.277] SetErrorMode (uMode=0x0) returned 0x1 [0079.277] GetFileType (hFile=0x230) returned 0x1 [0079.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.277] SetErrorMode (uMode=0x1) returned 0x0 [0079.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7458bacc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7458ba32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b370cc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x147)) returned 1 [0079.278] SetErrorMode (uMode=0x0) returned 0x1 [0079.278] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.partially.cryptonar")) returned 1 [0079.278] SetErrorMode (uMode=0x1) returned 0x0 [0079.278] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.279] SetErrorMode (uMode=0x0) returned 0x1 [0079.279] GetFileType (hFile=0x230) returned 0x1 [0079.279] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.280] SetErrorMode (uMode=0x1) returned 0x0 [0079.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74597e23, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74597d82, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b370cc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0079.280] SetErrorMode (uMode=0x0) returned 0x1 [0079.280] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.partially.cryptonar")) returned 1 [0079.281] SetErrorMode (uMode=0x1) returned 0x0 [0079.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.281] SetErrorMode (uMode=0x0) returned 0x1 [0079.281] GetFileType (hFile=0x230) returned 0x1 [0079.281] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.282] SetErrorMode (uMode=0x1) returned 0x0 [0079.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745d9cda, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x745dc342, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b5d2cd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c2)) returned 1 [0079.282] SetErrorMode (uMode=0x0) returned 0x1 [0079.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.partially.cryptonar")) returned 1 [0079.283] SetErrorMode (uMode=0x1) returned 0x0 [0079.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.283] SetErrorMode (uMode=0x0) returned 0x1 [0079.284] GetFileType (hFile=0x230) returned 0x1 [0079.284] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.284] SetErrorMode (uMode=0x1) returned 0x0 [0079.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74600dec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7460a972, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b5d2cd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0079.284] SetErrorMode (uMode=0x0) returned 0x1 [0079.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.partially.cryptonar")) returned 1 [0079.285] SetErrorMode (uMode=0x1) returned 0x0 [0079.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.286] SetErrorMode (uMode=0x0) returned 0x1 [0079.286] GetFileType (hFile=0x230) returned 0x1 [0079.286] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.286] SetErrorMode (uMode=0x1) returned 0x0 [0079.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74616d8e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74616cc2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31b5d2cd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0079.287] SetErrorMode (uMode=0x0) returned 0x1 [0079.287] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.partially.cryptonar")) returned 1 [0079.287] SetErrorMode (uMode=0x1) returned 0x0 [0079.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.288] SetErrorMode (uMode=0x0) returned 0x1 [0079.288] GetFileType (hFile=0x230) returned 0x1 [0079.288] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.344] SetErrorMode (uMode=0x1) returned 0x0 [0079.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7467af2c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7467d562, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31bf5cbf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x183)) returned 1 [0079.344] SetErrorMode (uMode=0x0) returned 0x1 [0079.344] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.partially.cryptonar")) returned 1 [0079.345] SetErrorMode (uMode=0x1) returned 0x0 [0079.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.346] SetErrorMode (uMode=0x0) returned 0x1 [0079.346] GetFileType (hFile=0x230) returned 0x1 [0079.346] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.347] SetErrorMode (uMode=0x1) returned 0x0 [0079.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746b0a98, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746b09b2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31bf5cbf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0079.347] SetErrorMode (uMode=0x0) returned 0x1 [0079.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.partially.cryptonar")) returned 1 [0079.348] SetErrorMode (uMode=0x1) returned 0x0 [0079.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.349] SetErrorMode (uMode=0x0) returned 0x1 [0079.349] GetFileType (hFile=0x230) returned 0x1 [0079.349] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.350] SetErrorMode (uMode=0x1) returned 0x0 [0079.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746cb850, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746d0582, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31bf5cbf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12c)) returned 1 [0079.350] SetErrorMode (uMode=0x0) returned 0x1 [0079.350] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.partially.cryptonar")) returned 1 [0079.352] SetErrorMode (uMode=0x1) returned 0x0 [0079.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.353] SetErrorMode (uMode=0x0) returned 0x1 [0079.353] GetFileType (hFile=0x230) returned 0x1 [0079.353] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.353] SetErrorMode (uMode=0x1) returned 0x0 [0079.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746df0c9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746defe2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31bf5cbf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1 [0079.354] SetErrorMode (uMode=0x0) returned 0x1 [0079.354] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.partially.cryptonar")) returned 1 [0079.354] SetErrorMode (uMode=0x1) returned 0x0 [0079.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.355] SetErrorMode (uMode=0x0) returned 0x1 [0079.355] GetFileType (hFile=0x230) returned 0x1 [0079.355] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.356] SetErrorMode (uMode=0x1) returned 0x0 [0079.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x746f5068, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x746f4f72, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31bf5cbf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20b)) returned 1 [0079.356] SetErrorMode (uMode=0x0) returned 0x1 [0079.356] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.partially.cryptonar")) returned 1 [0079.356] SetErrorMode (uMode=0x1) returned 0x0 [0079.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.357] SetErrorMode (uMode=0x0) returned 0x1 [0079.357] GetFileType (hFile=0x230) returned 0x1 [0079.357] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.358] SetErrorMode (uMode=0x1) returned 0x0 [0079.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74703ace, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747060e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31bf5cbf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb1)) returned 1 [0079.358] SetErrorMode (uMode=0x0) returned 0x1 [0079.358] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.partially.cryptonar")) returned 1 [0079.359] SetErrorMode (uMode=0x1) returned 0x0 [0079.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.360] SetErrorMode (uMode=0x0) returned 0x1 [0079.360] GetFileType (hFile=0x230) returned 0x1 [0079.360] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.361] SetErrorMode (uMode=0x1) returned 0x0 [0079.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74717354, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74719962, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c1c5c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x96)) returned 1 [0079.361] SetErrorMode (uMode=0x0) returned 0x1 [0079.361] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.partially.cryptonar")) returned 1 [0079.361] SetErrorMode (uMode=0x1) returned 0x0 [0079.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.362] SetErrorMode (uMode=0x0) returned 0x1 [0079.362] GetFileType (hFile=0x230) returned 0x1 [0079.362] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.363] SetErrorMode (uMode=0x1) returned 0x0 [0079.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747284c4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747283c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c1c5c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1 [0079.363] SetErrorMode (uMode=0x0) returned 0x1 [0079.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.partially.cryptonar")) returned 1 [0079.364] SetErrorMode (uMode=0x1) returned 0x0 [0079.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.364] SetErrorMode (uMode=0x0) returned 0x1 [0079.364] GetFileType (hFile=0x230) returned 0x1 [0079.364] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.365] SetErrorMode (uMode=0x1) returned 0x0 [0079.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7474a7ab, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7474a6a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c1c5c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0079.365] SetErrorMode (uMode=0x0) returned 0x1 [0079.366] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json.partially.cryptonar")) returned 1 [0079.366] SetErrorMode (uMode=0x1) returned 0x0 [0079.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.367] SetErrorMode (uMode=0x0) returned 0x1 [0079.367] GetFileType (hFile=0x230) returned 0x1 [0079.367] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.368] SetErrorMode (uMode=0x1) returned 0x0 [0079.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7476072e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74762d42, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c1c5c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0079.368] SetErrorMode (uMode=0x0) returned 0x1 [0079.368] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json.partially.cryptonar")) returned 1 [0079.370] SetErrorMode (uMode=0x1) returned 0x0 [0079.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.370] SetErrorMode (uMode=0x0) returned 0x1 [0079.370] GetFileType (hFile=0x230) returned 0x1 [0079.371] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.371] SetErrorMode (uMode=0x1) returned 0x0 [0079.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7476f1c0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7476f092, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c1c5c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf)) returned 1 [0079.371] SetErrorMode (uMode=0x0) returned 0x1 [0079.372] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.partially.cryptonar")) returned 1 [0079.372] SetErrorMode (uMode=0x1) returned 0x0 [0079.372] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.373] SetErrorMode (uMode=0x0) returned 0x1 [0079.373] GetFileType (hFile=0x230) returned 0x1 [0079.373] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.374] SetErrorMode (uMode=0x1) returned 0x0 [0079.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74782a24, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74782912, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c1c5c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0079.374] SetErrorMode (uMode=0x0) returned 0x1 [0079.374] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.partially.cryptonar")) returned 1 [0079.375] SetErrorMode (uMode=0x1) returned 0x0 [0079.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.375] SetErrorMode (uMode=0x0) returned 0x1 [0079.376] GetFileType (hFile=0x230) returned 0x1 [0079.376] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.376] SetErrorMode (uMode=0x1) returned 0x0 [0079.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74791487, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74791372, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c421bb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0079.377] SetErrorMode (uMode=0x0) returned 0x1 [0079.377] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.partially.cryptonar")) returned 1 [0079.377] SetErrorMode (uMode=0x1) returned 0x0 [0079.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.378] SetErrorMode (uMode=0x0) returned 0x1 [0079.378] GetFileType (hFile=0x230) returned 0x1 [0079.378] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.379] SetErrorMode (uMode=0x1) returned 0x0 [0079.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7479d7e5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7479d6c2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c421bb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc5)) returned 1 [0079.379] SetErrorMode (uMode=0x0) returned 0x1 [0079.379] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.partially.cryptonar")) returned 1 [0079.380] SetErrorMode (uMode=0x1) returned 0x0 [0079.380] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.381] SetErrorMode (uMode=0x0) returned 0x1 [0079.381] GetFileType (hFile=0x230) returned 0x1 [0079.381] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.382] SetErrorMode (uMode=0x1) returned 0x0 [0079.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747b377a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747b3652, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c421bb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0079.385] SetErrorMode (uMode=0x0) returned 0x1 [0079.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.partially.cryptonar")) returned 1 [0079.386] SetErrorMode (uMode=0x1) returned 0x0 [0079.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.387] SetErrorMode (uMode=0x0) returned 0x1 [0079.387] GetFileType (hFile=0x230) returned 0x1 [0079.387] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.388] SetErrorMode (uMode=0x1) returned 0x0 [0079.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747bfac2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747bf9a2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c421bb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0079.388] SetErrorMode (uMode=0x0) returned 0x1 [0079.388] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.partially.cryptonar")) returned 1 [0079.389] SetErrorMode (uMode=0x1) returned 0x0 [0079.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.390] SetErrorMode (uMode=0x0) returned 0x1 [0079.390] GetFileType (hFile=0x230) returned 0x1 [0079.390] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.391] SetErrorMode (uMode=0x1) returned 0x0 [0079.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747d5a63, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747d8042, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c68545, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0079.391] SetErrorMode (uMode=0x0) returned 0x1 [0079.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.partially.cryptonar")) returned 1 [0079.392] SetErrorMode (uMode=0x1) returned 0x0 [0079.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.393] SetErrorMode (uMode=0x0) returned 0x1 [0079.393] GetFileType (hFile=0x230) returned 0x1 [0079.393] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.394] SetErrorMode (uMode=0x1) returned 0x0 [0079.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747e44be, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747e4392, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c68545, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0079.395] SetErrorMode (uMode=0x0) returned 0x1 [0079.395] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.partially.cryptonar")) returned 1 [0079.396] SetErrorMode (uMode=0x1) returned 0x0 [0079.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.396] SetErrorMode (uMode=0x0) returned 0x1 [0079.396] GetFileType (hFile=0x230) returned 0x1 [0079.396] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.397] SetErrorMode (uMode=0x1) returned 0x0 [0079.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x747f081b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x747fa322, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c68545, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0079.397] SetErrorMode (uMode=0x0) returned 0x1 [0079.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.partially.cryptonar")) returned 1 [0079.398] SetErrorMode (uMode=0x1) returned 0x0 [0079.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.399] SetErrorMode (uMode=0x0) returned 0x1 [0079.399] GetFileType (hFile=0x230) returned 0x1 [0079.399] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.400] SetErrorMode (uMode=0x1) returned 0x0 [0079.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74808eba, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74808d82, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c68545, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1 [0079.400] SetErrorMode (uMode=0x0) returned 0x1 [0079.400] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.partially.cryptonar")) returned 1 [0079.401] SetErrorMode (uMode=0x1) returned 0x0 [0079.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.402] SetErrorMode (uMode=0x0) returned 0x1 [0079.402] GetFileType (hFile=0x230) returned 0x1 [0079.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.403] SetErrorMode (uMode=0x1) returned 0x0 [0079.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74815214, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748177e2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c68545, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1 [0079.403] SetErrorMode (uMode=0x0) returned 0x1 [0079.403] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.partially.cryptonar")) returned 1 [0079.404] SetErrorMode (uMode=0x1) returned 0x0 [0079.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.405] SetErrorMode (uMode=0x0) returned 0x1 [0079.405] GetFileType (hFile=0x230) returned 0x1 [0079.405] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.408] SetErrorMode (uMode=0x1) returned 0x0 [0079.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7482b1a7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7482b062, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c8e6d7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcd)) returned 1 [0079.408] SetErrorMode (uMode=0x0) returned 0x1 [0079.408] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.partially.cryptonar")) returned 1 [0079.409] SetErrorMode (uMode=0x1) returned 0x0 [0079.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.410] SetErrorMode (uMode=0x0) returned 0x1 [0079.410] GetFileType (hFile=0x230) returned 0x1 [0079.410] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.411] SetErrorMode (uMode=0x1) returned 0x0 [0079.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748374fb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74839ac2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c8e6d7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1 [0079.411] SetErrorMode (uMode=0x0) returned 0x1 [0079.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.partially.cryptonar")) returned 1 [0079.412] SetErrorMode (uMode=0x1) returned 0x0 [0079.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.413] SetErrorMode (uMode=0x0) returned 0x1 [0079.413] GetFileType (hFile=0x230) returned 0x1 [0079.413] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.415] SetErrorMode (uMode=0x1) returned 0x0 [0079.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7484fba3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7484fa52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31c8e6d7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x177)) returned 1 [0079.415] SetErrorMode (uMode=0x0) returned 0x1 [0079.415] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.partially.cryptonar")) returned 1 [0079.416] SetErrorMode (uMode=0x1) returned 0x0 [0079.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.417] SetErrorMode (uMode=0x0) returned 0x1 [0079.417] GetFileType (hFile=0x230) returned 0x1 [0079.417] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.514] SetErrorMode (uMode=0x1) returned 0x0 [0079.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748597e1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7485bda2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31d74b7a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0079.514] SetErrorMode (uMode=0x0) returned 0x1 [0079.514] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.partially.cryptonar")) returned 1 [0079.515] SetErrorMode (uMode=0x1) returned 0x0 [0079.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.516] SetErrorMode (uMode=0x0) returned 0x1 [0079.516] GetFileType (hFile=0x230) returned 0x1 [0079.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.517] SetErrorMode (uMode=0x1) returned 0x0 [0079.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7486f77a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74871d32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31d9ad03, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0079.517] SetErrorMode (uMode=0x0) returned 0x1 [0079.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json.partially.cryptonar")) returned 1 [0079.518] SetErrorMode (uMode=0x1) returned 0x0 [0079.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.518] SetErrorMode (uMode=0x0) returned 0x1 [0079.518] GetFileType (hFile=0x230) returned 0x1 [0079.518] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.519] SetErrorMode (uMode=0x1) returned 0x0 [0079.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748808ed, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74880792, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31d9ad03, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0079.519] SetErrorMode (uMode=0x0) returned 0x1 [0079.519] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json.partially.cryptonar")) returned 1 [0079.520] SetErrorMode (uMode=0x1) returned 0x0 [0079.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.520] SetErrorMode (uMode=0x0) returned 0x1 [0079.520] GetFileType (hFile=0x230) returned 0x1 [0079.521] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.521] SetErrorMode (uMode=0x1) returned 0x0 [0079.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7489687c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74896722, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31d9ad03, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaa)) returned 1 [0079.521] SetErrorMode (uMode=0x0) returned 0x1 [0079.522] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json.partially.cryptonar")) returned 1 [0079.522] SetErrorMode (uMode=0x1) returned 0x0 [0079.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.523] SetErrorMode (uMode=0x0) returned 0x1 [0079.523] GetFileType (hFile=0x230) returned 0x1 [0079.523] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.524] SetErrorMode (uMode=0x1) returned 0x0 [0079.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748a52e9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748a7892, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31d9ad03, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc2)) returned 1 [0079.524] SetErrorMode (uMode=0x0) returned 0x1 [0079.524] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.partially.cryptonar")) returned 1 [0079.525] SetErrorMode (uMode=0x1) returned 0x0 [0079.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.527] SetErrorMode (uMode=0x0) returned 0x1 [0079.527] GetFileType (hFile=0x230) returned 0x1 [0079.527] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.574] SetErrorMode (uMode=0x1) returned 0x0 [0079.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74d9d3bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74d9d3bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31e0d4dd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf3)) returned 1 [0079.575] SetErrorMode (uMode=0x0) returned 0x1 [0079.575] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.partially.cryptonar")) returned 1 [0079.576] SetErrorMode (uMode=0x1) returned 0x0 [0079.576] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.576] SetErrorMode (uMode=0x0) returned 0x1 [0079.577] GetFileType (hFile=0x230) returned 0x1 [0079.577] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.596] SetErrorMode (uMode=0x1) returned 0x0 [0079.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748ebfc8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x748ebe52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31e59a10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4454)) returned 1 [0079.596] SetErrorMode (uMode=0x0) returned 0x1 [0079.596] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.partially.cryptonar")) returned 1 [0079.597] SetErrorMode (uMode=0x1) returned 0x0 [0079.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.598] SetErrorMode (uMode=0x0) returned 0x1 [0079.598] GetFileType (hFile=0x230) returned 0x1 [0079.598] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.650] SetErrorMode (uMode=0x1) returned 0x0 [0079.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb786d6f4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb891a5b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31ecc09a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0079.650] SetErrorMode (uMode=0x0) returned 0x1 [0079.650] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.partially.cryptonar")) returned 1 [0079.651] SetErrorMode (uMode=0x1) returned 0x0 [0079.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.651] SetErrorMode (uMode=0x0) returned 0x1 [0079.651] GetFileType (hFile=0x230) returned 0x1 [0079.652] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.666] SetErrorMode (uMode=0x1) returned 0x0 [0079.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31ef2338, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1103)) returned 1 [0079.666] SetErrorMode (uMode=0x0) returned 0x1 [0079.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.partially.cryptonar")) returned 1 [0079.667] SetErrorMode (uMode=0x1) returned 0x0 [0079.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.668] SetErrorMode (uMode=0x0) returned 0x1 [0079.668] GetFileType (hFile=0x230) returned 0x1 [0079.668] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.695] SetErrorMode (uMode=0x1) returned 0x0 [0079.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31f40e38, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x356)) returned 1 [0079.695] SetErrorMode (uMode=0x0) returned 0x1 [0079.695] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json.partially.cryptonar")) returned 1 [0079.696] SetErrorMode (uMode=0x1) returned 0x0 [0079.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.696] SetErrorMode (uMode=0x0) returned 0x1 [0079.696] GetFileType (hFile=0x230) returned 0x1 [0079.696] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.698] SetErrorMode (uMode=0x1) returned 0x0 [0079.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31f40e38, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1 [0079.699] SetErrorMode (uMode=0x0) returned 0x1 [0079.699] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.partially.cryptonar")) returned 1 [0079.700] SetErrorMode (uMode=0x1) returned 0x0 [0079.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.700] SetErrorMode (uMode=0x0) returned 0x1 [0079.700] GetFileType (hFile=0x230) returned 0x1 [0079.700] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.729] SetErrorMode (uMode=0x1) returned 0x0 [0079.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7809515, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31f8ad80, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0079.729] SetErrorMode (uMode=0x0) returned 0x1 [0079.729] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json.partially.cryptonar")) returned 1 [0079.730] SetErrorMode (uMode=0x1) returned 0x0 [0079.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.731] SetErrorMode (uMode=0x0) returned 0x1 [0079.731] GetFileType (hFile=0x230) returned 0x1 [0079.731] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.732] SetErrorMode (uMode=0x1) returned 0x0 [0079.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31f8ad80, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0079.732] SetErrorMode (uMode=0x0) returned 0x1 [0079.732] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.partially.cryptonar")) returned 1 [0079.733] SetErrorMode (uMode=0x1) returned 0x0 [0079.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.734] SetErrorMode (uMode=0x0) returned 0x1 [0079.734] GetFileType (hFile=0x230) returned 0x1 [0079.734] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.735] SetErrorMode (uMode=0x1) returned 0x0 [0079.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7be3b7f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7be887e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31fb0fc7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x84)) returned 1 [0079.736] SetErrorMode (uMode=0x0) returned 0x1 [0079.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json.partially.cryptonar")) returned 1 [0079.737] SetErrorMode (uMode=0x1) returned 0x0 [0079.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.737] SetErrorMode (uMode=0x0) returned 0x1 [0079.737] GetFileType (hFile=0x230) returned 0x1 [0079.737] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.739] SetErrorMode (uMode=0x1) returned 0x0 [0079.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c05e69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7c05d3e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31fb0fc7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0079.739] SetErrorMode (uMode=0x0) returned 0x1 [0079.739] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json.partially.cryptonar")) returned 1 [0079.740] SetErrorMode (uMode=0x1) returned 0x0 [0079.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.741] SetErrorMode (uMode=0x0) returned 0x1 [0079.741] GetFileType (hFile=0x230) returned 0x1 [0079.741] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.742] SetErrorMode (uMode=0x1) returned 0x0 [0079.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cdf31a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb7cf786e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31fb0fc7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0079.742] SetErrorMode (uMode=0x0) returned 0x1 [0079.742] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json.partially.cryptonar")) returned 1 [0079.743] SetErrorMode (uMode=0x1) returned 0x0 [0079.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.744] SetErrorMode (uMode=0x0) returned 0x1 [0079.744] GetFileType (hFile=0x230) returned 0x1 [0079.744] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.744] SetErrorMode (uMode=0x1) returned 0x0 [0079.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb81891f3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8188f5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31fb0fc7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1 [0079.745] SetErrorMode (uMode=0x0) returned 0x1 [0079.745] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json.partially.cryptonar")) returned 1 [0079.745] SetErrorMode (uMode=0x1) returned 0x0 [0079.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.746] SetErrorMode (uMode=0x0) returned 0x1 [0079.746] GetFileType (hFile=0x230) returned 0x1 [0079.746] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.747] SetErrorMode (uMode=0x1) returned 0x0 [0079.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb828498b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82894ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31fb0fc7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x114)) returned 1 [0079.747] SetErrorMode (uMode=0x0) returned 0x1 [0079.747] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json.partially.cryptonar")) returned 1 [0079.748] SetErrorMode (uMode=0x1) returned 0x0 [0079.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.748] SetErrorMode (uMode=0x0) returned 0x1 [0079.748] GetFileType (hFile=0x230) returned 0x1 [0079.748] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.749] SetErrorMode (uMode=0x1) returned 0x0 [0079.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb829a91d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb829a65e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31fb0fc7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14b)) returned 1 [0079.749] SetErrorMode (uMode=0x0) returned 0x1 [0079.749] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json.partially.cryptonar")) returned 1 [0079.750] SetErrorMode (uMode=0x1) returned 0x0 [0079.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.751] SetErrorMode (uMode=0x0) returned 0x1 [0079.751] GetFileType (hFile=0x230) returned 0x1 [0079.751] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.752] SetErrorMode (uMode=0x1) returned 0x0 [0079.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82aba84, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82b2cfe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31fd7129, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0079.752] SetErrorMode (uMode=0x0) returned 0x1 [0079.752] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json.partially.cryptonar")) returned 1 [0079.753] SetErrorMode (uMode=0x1) returned 0x0 [0079.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.753] SetErrorMode (uMode=0x0) returned 0x1 [0079.753] GetFileType (hFile=0x230) returned 0x1 [0079.753] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.754] SetErrorMode (uMode=0x1) returned 0x0 [0079.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82bf319, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82bf04e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31fd7129, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xad)) returned 1 [0079.754] SetErrorMode (uMode=0x0) returned 0x1 [0079.754] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json.partially.cryptonar")) returned 1 [0079.755] SetErrorMode (uMode=0x1) returned 0x0 [0079.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.756] SetErrorMode (uMode=0x0) returned 0x1 [0079.756] GetFileType (hFile=0x230) returned 0x1 [0079.756] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.757] SetErrorMode (uMode=0x1) returned 0x0 [0079.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31fd7129, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1 [0079.757] SetErrorMode (uMode=0x0) returned 0x1 [0079.757] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json.partially.cryptonar")) returned 1 [0079.757] SetErrorMode (uMode=0x1) returned 0x0 [0079.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.758] SetErrorMode (uMode=0x0) returned 0x1 [0079.758] GetFileType (hFile=0x230) returned 0x1 [0079.758] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.759] SetErrorMode (uMode=0x1) returned 0x0 [0079.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x31fd7129, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc1)) returned 1 [0079.759] SetErrorMode (uMode=0x0) returned 0x1 [0079.759] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json.partially.cryptonar")) returned 1 [0079.760] SetErrorMode (uMode=0x1) returned 0x0 [0079.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.760] SetErrorMode (uMode=0x0) returned 0x1 [0079.760] GetFileType (hFile=0x230) returned 0x1 [0079.760] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.856] SetErrorMode (uMode=0x1) returned 0x0 [0079.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x320bbf57, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12a)) returned 1 [0079.856] SetErrorMode (uMode=0x0) returned 0x1 [0079.856] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json.partially.cryptonar")) returned 1 [0079.866] SetErrorMode (uMode=0x1) returned 0x0 [0079.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.868] SetErrorMode (uMode=0x0) returned 0x1 [0079.868] GetFileType (hFile=0x230) returned 0x1 [0079.868] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.869] SetErrorMode (uMode=0x1) returned 0x0 [0079.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb82ffc4c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb82fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x320e2138, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1 [0079.869] SetErrorMode (uMode=0x0) returned 0x1 [0079.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json.partially.cryptonar")) returned 1 [0079.870] SetErrorMode (uMode=0x1) returned 0x0 [0079.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.871] SetErrorMode (uMode=0x0) returned 0x1 [0079.871] GetFileType (hFile=0x230) returned 0x1 [0079.871] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.872] SetErrorMode (uMode=0x1) returned 0x0 [0079.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x320e2138, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1 [0079.872] SetErrorMode (uMode=0x0) returned 0x1 [0079.872] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json.partially.cryptonar")) returned 1 [0079.873] SetErrorMode (uMode=0x1) returned 0x0 [0079.873] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.873] SetErrorMode (uMode=0x0) returned 0x1 [0079.874] GetFileType (hFile=0x230) returned 0x1 [0079.874] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.874] SetErrorMode (uMode=0x1) returned 0x0 [0079.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x320e2138, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcc)) returned 1 [0079.875] SetErrorMode (uMode=0x0) returned 0x1 [0079.875] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json.partially.cryptonar")) returned 1 [0079.882] SetErrorMode (uMode=0x1) returned 0x0 [0079.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.883] SetErrorMode (uMode=0x0) returned 0x1 [0079.883] GetFileType (hFile=0x230) returned 0x1 [0079.883] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.883] SetErrorMode (uMode=0x1) returned 0x0 [0079.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32108452, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0079.884] SetErrorMode (uMode=0x0) returned 0x1 [0079.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json.partially.cryptonar")) returned 1 [0079.884] SetErrorMode (uMode=0x1) returned 0x0 [0079.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.885] SetErrorMode (uMode=0x0) returned 0x1 [0079.885] GetFileType (hFile=0x230) returned 0x1 [0079.885] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.886] SetErrorMode (uMode=0x1) returned 0x0 [0079.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8325e28, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83258ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32108452, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1 [0079.886] SetErrorMode (uMode=0x0) returned 0x1 [0079.886] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json.partially.cryptonar")) returned 1 [0079.887] SetErrorMode (uMode=0x1) returned 0x0 [0079.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.887] SetErrorMode (uMode=0x0) returned 0x1 [0079.887] GetFileType (hFile=0x230) returned 0x1 [0079.887] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.888] SetErrorMode (uMode=0x1) returned 0x0 [0079.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8383075, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8384c5e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32108452, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x98)) returned 1 [0079.888] SetErrorMode (uMode=0x0) returned 0x1 [0079.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json.partially.cryptonar")) returned 1 [0079.889] SetErrorMode (uMode=0x1) returned 0x0 [0079.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.889] SetErrorMode (uMode=0x0) returned 0x1 [0079.889] GetFileType (hFile=0x230) returned 0x1 [0079.890] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.890] SetErrorMode (uMode=0x1) returned 0x0 [0079.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb838f3c6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb838e89e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32108452, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1 [0079.891] SetErrorMode (uMode=0x0) returned 0x1 [0079.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json.partially.cryptonar")) returned 1 [0079.891] SetErrorMode (uMode=0x1) returned 0x0 [0079.891] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.892] SetErrorMode (uMode=0x0) returned 0x1 [0079.892] GetFileType (hFile=0x230) returned 0x1 [0079.892] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.893] SetErrorMode (uMode=0x1) returned 0x0 [0079.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83b3db2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83b328e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3212e69d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb7)) returned 1 [0079.893] SetErrorMode (uMode=0x0) returned 0x1 [0079.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json.partially.cryptonar")) returned 1 [0079.893] SetErrorMode (uMode=0x1) returned 0x0 [0079.893] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.894] SetErrorMode (uMode=0x0) returned 0x1 [0079.894] GetFileType (hFile=0x230) returned 0x1 [0079.894] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.895] SetErrorMode (uMode=0x1) returned 0x0 [0079.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c281c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c43fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3212e69d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc7)) returned 1 [0079.895] SetErrorMode (uMode=0x0) returned 0x1 [0079.895] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json.partially.cryptonar")) returned 1 [0079.896] SetErrorMode (uMode=0x1) returned 0x0 [0079.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.897] SetErrorMode (uMode=0x0) returned 0x1 [0079.897] GetFileType (hFile=0x230) returned 0x1 [0079.897] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.898] SetErrorMode (uMode=0x1) returned 0x0 [0079.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c7a41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c6b0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3212e69d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0079.898] SetErrorMode (uMode=0x0) returned 0x1 [0079.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json.partially.cryptonar")) returned 1 [0079.898] SetErrorMode (uMode=0x1) returned 0x0 [0079.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.899] SetErrorMode (uMode=0x0) returned 0x1 [0079.899] GetFileType (hFile=0x230) returned 0x1 [0079.899] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.900] SetErrorMode (uMode=0x1) returned 0x0 [0079.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c7a41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c6b0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3212e69d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0079.900] SetErrorMode (uMode=0x0) returned 0x1 [0079.900] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json.partially.cryptonar")) returned 1 [0079.901] SetErrorMode (uMode=0x1) returned 0x0 [0079.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.901] SetErrorMode (uMode=0x0) returned 0x1 [0079.901] GetFileType (hFile=0x230) returned 0x1 [0079.901] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.902] SetErrorMode (uMode=0x1) returned 0x0 [0079.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83c7a41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83c6b0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3212e69d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1 [0079.902] SetErrorMode (uMode=0x0) returned 0x1 [0079.902] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json.partially.cryptonar")) returned 1 [0079.903] SetErrorMode (uMode=0x1) returned 0x0 [0079.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.903] SetErrorMode (uMode=0x0) returned 0x1 [0079.903] GetFileType (hFile=0x230) returned 0x1 [0079.903] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.905] SetErrorMode (uMode=0x1) returned 0x0 [0079.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83edc26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83edc0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3212e69d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1 [0079.905] SetErrorMode (uMode=0x0) returned 0x1 [0079.905] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json.partially.cryptonar")) returned 1 [0079.906] SetErrorMode (uMode=0x1) returned 0x0 [0079.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.906] SetErrorMode (uMode=0x0) returned 0x1 [0079.906] GetFileType (hFile=0x230) returned 0x1 [0079.906] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.907] SetErrorMode (uMode=0x1) returned 0x0 [0079.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83edc26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83edc0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3212e69d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1 [0079.909] SetErrorMode (uMode=0x0) returned 0x1 [0079.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json.partially.cryptonar")) returned 1 [0079.910] SetErrorMode (uMode=0x1) returned 0x0 [0079.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.910] SetErrorMode (uMode=0x0) returned 0x1 [0079.910] GetFileType (hFile=0x230) returned 0x1 [0079.910] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.912] SetErrorMode (uMode=0x1) returned 0x0 [0079.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb83edc26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb83edc0e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32157ad7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc8)) returned 1 [0079.912] SetErrorMode (uMode=0x0) returned 0x1 [0079.912] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json.partially.cryptonar")) returned 1 [0079.914] SetErrorMode (uMode=0x1) returned 0x0 [0079.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.914] SetErrorMode (uMode=0x0) returned 0x1 [0079.914] GetFileType (hFile=0x230) returned 0x1 [0079.914] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.915] SetErrorMode (uMode=0x1) returned 0x0 [0079.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32157ad7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0079.916] SetErrorMode (uMode=0x0) returned 0x1 [0079.916] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json.partially.cryptonar")) returned 1 [0079.916] SetErrorMode (uMode=0x1) returned 0x0 [0079.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.917] SetErrorMode (uMode=0x0) returned 0x1 [0079.917] GetFileType (hFile=0x230) returned 0x1 [0079.917] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.989] SetErrorMode (uMode=0x1) returned 0x0 [0079.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3221347b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x299)) returned 1 [0079.989] SetErrorMode (uMode=0x0) returned 0x1 [0079.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json.partially.cryptonar")) returned 1 [0079.990] SetErrorMode (uMode=0x1) returned 0x0 [0079.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.991] SetErrorMode (uMode=0x0) returned 0x1 [0079.991] GetFileType (hFile=0x230) returned 0x1 [0079.991] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.991] SetErrorMode (uMode=0x1) returned 0x0 [0079.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3221347b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0079.992] SetErrorMode (uMode=0x0) returned 0x1 [0079.992] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json.partially.cryptonar")) returned 1 [0079.992] SetErrorMode (uMode=0x1) returned 0x0 [0079.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.993] SetErrorMode (uMode=0x0) returned 0x1 [0079.993] GetFileType (hFile=0x230) returned 0x1 [0079.993] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.993] SetErrorMode (uMode=0x1) returned 0x0 [0079.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8413e78, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84125fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3221347b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1 [0079.994] SetErrorMode (uMode=0x0) returned 0x1 [0079.994] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json.partially.cryptonar")) returned 1 [0079.995] SetErrorMode (uMode=0x1) returned 0x0 [0079.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.995] SetErrorMode (uMode=0x0) returned 0x1 [0079.995] GetFileType (hFile=0x230) returned 0x1 [0079.995] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.996] SetErrorMode (uMode=0x1) returned 0x0 [0079.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb843a0d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84396fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3221347b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1 [0079.996] SetErrorMode (uMode=0x0) returned 0x1 [0079.996] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json.partially.cryptonar")) returned 1 [0079.997] SetErrorMode (uMode=0x1) returned 0x0 [0079.997] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.997] SetErrorMode (uMode=0x0) returned 0x1 [0079.997] GetFileType (hFile=0x230) returned 0x1 [0079.997] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0079.998] SetErrorMode (uMode=0x1) returned 0x0 [0079.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb843a0d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84396fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3221347b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1 [0079.998] SetErrorMode (uMode=0x0) returned 0x1 [0079.998] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json.partially.cryptonar")) returned 1 [0079.999] SetErrorMode (uMode=0x1) returned 0x0 [0079.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0079.999] SetErrorMode (uMode=0x0) returned 0x1 [0079.999] GetFileType (hFile=0x230) returned 0x1 [0079.999] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.000] SetErrorMode (uMode=0x1) returned 0x0 [0080.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb843a0d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84396fe, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3223965f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0080.001] SetErrorMode (uMode=0x0) returned 0x1 [0080.001] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json.partially.cryptonar")) returned 1 [0080.001] SetErrorMode (uMode=0x1) returned 0x0 [0080.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.002] SetErrorMode (uMode=0x0) returned 0x1 [0080.002] GetFileType (hFile=0x230) returned 0x1 [0080.002] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.002] SetErrorMode (uMode=0x1) returned 0x0 [0080.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3223965f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x165)) returned 1 [0080.003] SetErrorMode (uMode=0x0) returned 0x1 [0080.003] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json.partially.cryptonar")) returned 1 [0080.003] SetErrorMode (uMode=0x1) returned 0x0 [0080.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.004] SetErrorMode (uMode=0x0) returned 0x1 [0080.004] GetFileType (hFile=0x230) returned 0x1 [0080.004] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.032] SetErrorMode (uMode=0x1) returned 0x0 [0080.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32285b67, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x25f)) returned 1 [0080.032] SetErrorMode (uMode=0x0) returned 0x1 [0080.033] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json.partially.cryptonar")) returned 1 [0080.033] SetErrorMode (uMode=0x1) returned 0x0 [0080.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.034] SetErrorMode (uMode=0x0) returned 0x1 [0080.034] GetFileType (hFile=0x230) returned 0x1 [0080.034] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.034] SetErrorMode (uMode=0x1) returned 0x0 [0080.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32285b67, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x147)) returned 1 [0080.035] SetErrorMode (uMode=0x0) returned 0x1 [0080.035] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json.partially.cryptonar")) returned 1 [0080.035] SetErrorMode (uMode=0x1) returned 0x0 [0080.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.036] SetErrorMode (uMode=0x0) returned 0x1 [0080.036] GetFileType (hFile=0x230) returned 0x1 [0080.036] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.037] SetErrorMode (uMode=0x1) returned 0x0 [0080.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb846031c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb845e0ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32285b67, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0080.037] SetErrorMode (uMode=0x0) returned 0x1 [0080.037] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json.partially.cryptonar")) returned 1 [0080.037] SetErrorMode (uMode=0x1) returned 0x0 [0080.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.038] SetErrorMode (uMode=0x0) returned 0x1 [0080.038] GetFileType (hFile=0x230) returned 0x1 [0080.038] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.039] SetErrorMode (uMode=0x1) returned 0x0 [0080.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb848658b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84851ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32285b67, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c2)) returned 1 [0080.039] SetErrorMode (uMode=0x0) returned 0x1 [0080.039] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json.partially.cryptonar")) returned 1 [0080.039] SetErrorMode (uMode=0x1) returned 0x0 [0080.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.040] SetErrorMode (uMode=0x0) returned 0x1 [0080.040] GetFileType (hFile=0x230) returned 0x1 [0080.040] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.041] SetErrorMode (uMode=0x1) returned 0x0 [0080.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb848658b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84851ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32285b67, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0080.041] SetErrorMode (uMode=0x0) returned 0x1 [0080.041] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json.partially.cryptonar")) returned 1 [0080.042] SetErrorMode (uMode=0x1) returned 0x0 [0080.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.042] SetErrorMode (uMode=0x0) returned 0x1 [0080.042] GetFileType (hFile=0x230) returned 0x1 [0080.042] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.043] SetErrorMode (uMode=0x1) returned 0x0 [0080.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb848658b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84851ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32285b67, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0080.043] SetErrorMode (uMode=0x0) returned 0x1 [0080.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json.partially.cryptonar")) returned 1 [0080.044] SetErrorMode (uMode=0x1) returned 0x0 [0080.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.044] SetErrorMode (uMode=0x0) returned 0x1 [0080.044] GetFileType (hFile=0x230) returned 0x1 [0080.044] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.758] SetErrorMode (uMode=0x1) returned 0x0 [0080.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32974554, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x183)) returned 1 [0080.758] SetErrorMode (uMode=0x0) returned 0x1 [0080.759] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json.partially.cryptonar")) returned 1 [0080.762] SetErrorMode (uMode=0x1) returned 0x0 [0080.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.764] SetErrorMode (uMode=0x0) returned 0x1 [0080.764] GetFileType (hFile=0x230) returned 0x1 [0080.764] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.766] SetErrorMode (uMode=0x1) returned 0x0 [0080.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3297e1a9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0080.766] SetErrorMode (uMode=0x0) returned 0x1 [0080.766] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json.partially.cryptonar")) returned 1 [0080.767] SetErrorMode (uMode=0x1) returned 0x0 [0080.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.769] SetErrorMode (uMode=0x0) returned 0x1 [0080.769] GetFileType (hFile=0x230) returned 0x1 [0080.769] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.771] SetErrorMode (uMode=0x1) returned 0x0 [0080.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3297e1a9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12c)) returned 1 [0080.771] SetErrorMode (uMode=0x0) returned 0x1 [0080.771] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json.partially.cryptonar")) returned 1 [0080.773] SetErrorMode (uMode=0x1) returned 0x0 [0080.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.774] SetErrorMode (uMode=0x0) returned 0x1 [0080.774] GetFileType (hFile=0x230) returned 0x1 [0080.774] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.776] SetErrorMode (uMode=0x1) returned 0x0 [0080.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84ac7e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84ac2ee, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3297e1a9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1 [0080.777] SetErrorMode (uMode=0x0) returned 0x1 [0080.777] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json.partially.cryptonar")) returned 1 [0080.779] SetErrorMode (uMode=0x1) returned 0x0 [0080.779] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.784] SetErrorMode (uMode=0x0) returned 0x1 [0080.785] GetFileType (hFile=0x230) returned 0x1 [0080.785] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.787] SetErrorMode (uMode=0x1) returned 0x0 [0080.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84d2a3e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84d0cde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x329b9857, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20b)) returned 1 [0080.787] SetErrorMode (uMode=0x0) returned 0x1 [0080.787] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json.partially.cryptonar")) returned 1 [0080.788] SetErrorMode (uMode=0x1) returned 0x0 [0080.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.790] SetErrorMode (uMode=0x0) returned 0x1 [0080.790] GetFileType (hFile=0x230) returned 0x1 [0080.790] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.792] SetErrorMode (uMode=0x1) returned 0x0 [0080.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84d2a3e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84d0cde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x329c5ba1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb1)) returned 1 [0080.792] SetErrorMode (uMode=0x0) returned 0x1 [0080.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json.partially.cryptonar")) returned 1 [0080.794] SetErrorMode (uMode=0x1) returned 0x0 [0080.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.794] SetErrorMode (uMode=0x0) returned 0x1 [0080.795] GetFileType (hFile=0x230) returned 0x1 [0080.795] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.796] SetErrorMode (uMode=0x1) returned 0x0 [0080.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84d2a3e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84d0cde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x329ce3aa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x96)) returned 1 [0080.796] SetErrorMode (uMode=0x0) returned 0x1 [0080.796] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json.partially.cryptonar")) returned 1 [0080.797] SetErrorMode (uMode=0x1) returned 0x0 [0080.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.798] SetErrorMode (uMode=0x0) returned 0x1 [0080.798] GetFileType (hFile=0x230) returned 0x1 [0080.798] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.854] SetErrorMode (uMode=0x1) returned 0x0 [0080.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32a40dcb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1 [0080.854] SetErrorMode (uMode=0x0) returned 0x1 [0080.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json.partially.cryptonar")) returned 1 [0080.855] SetErrorMode (uMode=0x1) returned 0x0 [0080.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.856] SetErrorMode (uMode=0x0) returned 0x1 [0080.856] GetFileType (hFile=0x230) returned 0x1 [0080.856] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.857] SetErrorMode (uMode=0x1) returned 0x0 [0080.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32a40dcb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0080.857] SetErrorMode (uMode=0x0) returned 0x1 [0080.857] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_BR\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_br\\messages.json.partially.cryptonar")) returned 1 [0080.858] SetErrorMode (uMode=0x1) returned 0x0 [0080.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.859] SetErrorMode (uMode=0x0) returned 0x1 [0080.859] GetFileType (hFile=0x230) returned 0x1 [0080.859] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.861] SetErrorMode (uMode=0x1) returned 0x0 [0080.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32a66f8d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0080.861] SetErrorMode (uMode=0x0) returned 0x1 [0080.861] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_PT\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pt_pt\\messages.json.partially.cryptonar")) returned 1 [0080.862] SetErrorMode (uMode=0x1) returned 0x0 [0080.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.862] SetErrorMode (uMode=0x0) returned 0x1 [0080.862] GetFileType (hFile=0x230) returned 0x1 [0080.863] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.863] SetErrorMode (uMode=0x1) returned 0x0 [0080.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb84f8c93, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb84f7dde, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32a66f8d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf)) returned 1 [0080.864] SetErrorMode (uMode=0x0) returned 0x1 [0080.864] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ro\\messages.json.partially.cryptonar")) returned 1 [0080.865] SetErrorMode (uMode=0x1) returned 0x0 [0080.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.865] SetErrorMode (uMode=0x0) returned 0x1 [0080.865] GetFileType (hFile=0x230) returned 0x1 [0080.865] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.866] SetErrorMode (uMode=0x1) returned 0x0 [0080.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb851eeef, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb851eede, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32a66f8d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0080.867] SetErrorMode (uMode=0x0) returned 0x1 [0080.867] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ru\\messages.json.partially.cryptonar")) returned 1 [0080.868] SetErrorMode (uMode=0x1) returned 0x0 [0080.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.869] SetErrorMode (uMode=0x0) returned 0x1 [0080.869] GetFileType (hFile=0x230) returned 0x1 [0080.869] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.870] SetErrorMode (uMode=0x1) returned 0x0 [0080.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8539597, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb853757e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32a66f8d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0080.870] SetErrorMode (uMode=0x0) returned 0x1 [0080.870] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\si\\messages.json.partially.cryptonar")) returned 1 [0080.871] SetErrorMode (uMode=0x1) returned 0x0 [0080.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.872] SetErrorMode (uMode=0x0) returned 0x1 [0080.872] GetFileType (hFile=0x230) returned 0x1 [0080.872] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.873] SetErrorMode (uMode=0x1) returned 0x0 [0080.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85431d9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85411be, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32a66f8d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc5)) returned 1 [0080.873] SetErrorMode (uMode=0x0) returned 0x1 [0080.873] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sk\\messages.json.partially.cryptonar")) returned 1 [0080.874] SetErrorMode (uMode=0x1) returned 0x0 [0080.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.875] SetErrorMode (uMode=0x0) returned 0x1 [0080.875] GetFileType (hFile=0x230) returned 0x1 [0080.875] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.876] SetErrorMode (uMode=0x1) returned 0x0 [0080.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb855434f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb855232e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32a8d37a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0080.877] SetErrorMode (uMode=0x0) returned 0x1 [0080.877] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sl\\messages.json.partially.cryptonar")) returned 1 [0080.878] SetErrorMode (uMode=0x1) returned 0x0 [0080.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.879] SetErrorMode (uMode=0x0) returned 0x1 [0080.879] GetFileType (hFile=0x230) returned 0x1 [0080.879] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.880] SetErrorMode (uMode=0x1) returned 0x0 [0080.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8566e0b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8565bae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32a8d37a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0080.880] SetErrorMode (uMode=0x0) returned 0x1 [0080.880] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sr\\messages.json.partially.cryptonar")) returned 1 [0080.881] SetErrorMode (uMode=0x1) returned 0x0 [0080.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.882] SetErrorMode (uMode=0x0) returned 0x1 [0080.882] GetFileType (hFile=0x230) returned 0x1 [0080.882] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.883] SetErrorMode (uMode=0x1) returned 0x0 [0080.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8566e0b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8565bae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32a8d37a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0080.883] SetErrorMode (uMode=0x0) returned 0x1 [0080.883] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sv\\messages.json.partially.cryptonar")) returned 1 [0080.884] SetErrorMode (uMode=0x1) returned 0x0 [0080.884] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.885] SetErrorMode (uMode=0x0) returned 0x1 [0080.885] GetFileType (hFile=0x230) returned 0x1 [0080.885] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.886] SetErrorMode (uMode=0x1) returned 0x0 [0080.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb858cfd7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb858ccae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32a8d37a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0080.886] SetErrorMode (uMode=0x0) returned 0x1 [0080.886] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\sw\\messages.json.partially.cryptonar")) returned 1 [0080.887] SetErrorMode (uMode=0x1) returned 0x0 [0080.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.887] SetErrorMode (uMode=0x0) returned 0x1 [0080.887] GetFileType (hFile=0x230) returned 0x1 [0080.887] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.898] SetErrorMode (uMode=0x1) returned 0x0 [0080.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb858cfd7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb858ccae, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32ac2d6a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0080.898] SetErrorMode (uMode=0x0) returned 0x1 [0080.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ta\\messages.json.partially.cryptonar")) returned 1 [0080.899] SetErrorMode (uMode=0x1) returned 0x0 [0080.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.900] SetErrorMode (uMode=0x0) returned 0x1 [0080.900] GetFileType (hFile=0x230) returned 0x1 [0080.900] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.901] SetErrorMode (uMode=0x1) returned 0x0 [0080.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85b3229, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85b169e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32ac2d6a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1 [0080.902] SetErrorMode (uMode=0x0) returned 0x1 [0080.902] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\te\\messages.json.partially.cryptonar")) returned 1 [0080.903] SetErrorMode (uMode=0x1) returned 0x0 [0080.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.903] SetErrorMode (uMode=0x0) returned 0x1 [0080.903] GetFileType (hFile=0x230) returned 0x1 [0080.903] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.904] SetErrorMode (uMode=0x1) returned 0x0 [0080.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85b3229, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85b169e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32ad96f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1 [0080.905] SetErrorMode (uMode=0x0) returned 0x1 [0080.905] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\th\\messages.json.partially.cryptonar")) returned 1 [0080.906] SetErrorMode (uMode=0x1) returned 0x0 [0080.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.906] SetErrorMode (uMode=0x0) returned 0x1 [0080.906] GetFileType (hFile=0x230) returned 0x1 [0080.906] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.907] SetErrorMode (uMode=0x1) returned 0x0 [0080.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85b3229, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85b169e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32ad96f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcd)) returned 1 [0080.907] SetErrorMode (uMode=0x0) returned 0x1 [0080.907] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\tr\\messages.json.partially.cryptonar")) returned 1 [0080.909] SetErrorMode (uMode=0x1) returned 0x0 [0080.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.909] SetErrorMode (uMode=0x0) returned 0x1 [0080.909] GetFileType (hFile=0x230) returned 0x1 [0080.909] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.910] SetErrorMode (uMode=0x1) returned 0x0 [0080.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85d947b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85d879e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32ad96f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1 [0080.910] SetErrorMode (uMode=0x0) returned 0x1 [0080.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\uk\\messages.json.partially.cryptonar")) returned 1 [0080.911] SetErrorMode (uMode=0x1) returned 0x0 [0080.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.912] SetErrorMode (uMode=0x0) returned 0x1 [0080.912] GetFileType (hFile=0x230) returned 0x1 [0080.912] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.913] SetErrorMode (uMode=0x1) returned 0x0 [0080.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85ff6ec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85fd18e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32ad96f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x177)) returned 1 [0080.913] SetErrorMode (uMode=0x0) returned 0x1 [0080.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ur\\messages.json.partially.cryptonar")) returned 1 [0080.914] SetErrorMode (uMode=0x1) returned 0x0 [0080.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.914] SetErrorMode (uMode=0x0) returned 0x1 [0080.915] GetFileType (hFile=0x230) returned 0x1 [0080.915] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.915] SetErrorMode (uMode=0x1) returned 0x0 [0080.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb85ff6ec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb85fd18e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32ad96f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0080.916] SetErrorMode (uMode=0x0) returned 0x1 [0080.916] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\vi\\messages.json.partially.cryptonar")) returned 1 [0080.917] SetErrorMode (uMode=0x1) returned 0x0 [0080.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.917] SetErrorMode (uMode=0x0) returned 0x1 [0080.917] GetFileType (hFile=0x230) returned 0x1 [0080.917] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.918] SetErrorMode (uMode=0x1) returned 0x0 [0080.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32ad96f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0080.919] SetErrorMode (uMode=0x0) returned 0x1 [0080.919] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_CN\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_cn\\messages.json.partially.cryptonar")) returned 1 [0080.920] SetErrorMode (uMode=0x1) returned 0x0 [0080.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.921] SetErrorMode (uMode=0x0) returned 0x1 [0080.921] GetFileType (hFile=0x230) returned 0x1 [0080.921] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.922] SetErrorMode (uMode=0x1) returned 0x0 [0080.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_hk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32affa9d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0080.922] SetErrorMode (uMode=0x0) returned 0x1 [0080.922] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_hk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_HK\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_hk\\messages.json.partially.cryptonar")) returned 1 [0080.923] SetErrorMode (uMode=0x1) returned 0x0 [0080.923] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.924] SetErrorMode (uMode=0x0) returned 0x1 [0080.924] GetFileType (hFile=0x230) returned 0x1 [0080.924] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.925] SetErrorMode (uMode=0x1) returned 0x0 [0080.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32affa9d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaa)) returned 1 [0080.925] SetErrorMode (uMode=0x0) returned 0x1 [0080.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_TW\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zh_tw\\messages.json.partially.cryptonar")) returned 1 [0080.926] SetErrorMode (uMode=0x1) returned 0x0 [0080.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.927] SetErrorMode (uMode=0x0) returned 0x1 [0080.927] GetFileType (hFile=0x230) returned 0x1 [0080.927] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.928] SetErrorMode (uMode=0x1) returned 0x0 [0080.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb862593b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb862428e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32affa9d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc2)) returned 1 [0080.928] SetErrorMode (uMode=0x0) returned 0x1 [0080.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\zu\\messages.json.partially.cryptonar")) returned 1 [0080.929] SetErrorMode (uMode=0x1) returned 0x0 [0080.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.929] SetErrorMode (uMode=0x0) returned 0x1 [0080.929] GetFileType (hFile=0x230) returned 0x1 [0080.929] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.969] SetErrorMode (uMode=0x1) returned 0x0 [0080.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb89a5887, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb89a5887, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32b7073f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf3)) returned 1 [0080.969] SetErrorMode (uMode=0x0) returned 0x1 [0080.969] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\computed_hashes.json.partially.cryptonar")) returned 1 [0080.970] SetErrorMode (uMode=0x1) returned 0x0 [0080.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.971] SetErrorMode (uMode=0x0) returned 0x1 [0080.971] GetFileType (hFile=0x230) returned 0x1 [0080.971] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.972] SetErrorMode (uMode=0x1) returned 0x0 [0080.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb864bbb9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb864b38e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32b7073f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4454)) returned 1 [0080.973] SetErrorMode (uMode=0x0) returned 0x1 [0080.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_metadata\\verified_contents.json.partially.cryptonar")) returned 1 [0080.974] SetErrorMode (uMode=0x1) returned 0x0 [0080.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.974] SetErrorMode (uMode=0x0) returned 0x1 [0080.974] GetFileType (hFile=0x230) returned 0x1 [0080.974] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.988] SetErrorMode (uMode=0x1) returned 0x0 [0080.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73abfd45, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ac5e90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32b96c32, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e)) returned 1 [0080.989] SetErrorMode (uMode=0x0) returned 0x1 [0080.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.partially.cryptonar")) returned 1 [0080.990] SetErrorMode (uMode=0x1) returned 0x0 [0080.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.990] SetErrorMode (uMode=0x0) returned 0x1 [0080.990] GetFileType (hFile=0x230) returned 0x1 [0080.990] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0080.993] SetErrorMode (uMode=0x1) returned 0x0 [0080.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ad0ec2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ae0c40, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32b96c32, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b059)) returned 1 [0080.994] SetErrorMode (uMode=0x0) returned 0x1 [0080.994] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.partially.cryptonar")) returned 1 [0080.995] SetErrorMode (uMode=0x1) returned 0x0 [0080.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0080.996] SetErrorMode (uMode=0x0) returned 0x1 [0080.996] GetFileType (hFile=0x230) returned 0x1 [0080.996] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.017] SetErrorMode (uMode=0x1) returned 0x0 [0081.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x732972ee, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bd0060, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32be3198, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0081.017] SetErrorMode (uMode=0x0) returned 0x1 [0081.017] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.partially.cryptonar")) returned 1 [0081.018] SetErrorMode (uMode=0x1) returned 0x0 [0081.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.019] SetErrorMode (uMode=0x0) returned 0x1 [0081.019] GetFileType (hFile=0x230) returned 0x1 [0081.019] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.067] SetErrorMode (uMode=0x1) returned 0x0 [0081.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aee38c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73af1db0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32c5588c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6cd)) returned 1 [0081.068] SetErrorMode (uMode=0x0) returned 0x1 [0081.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.partially.cryptonar")) returned 1 [0081.069] SetErrorMode (uMode=0x1) returned 0x0 [0081.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.069] SetErrorMode (uMode=0x0) returned 0x1 [0081.069] GetFileType (hFile=0x230) returned 0x1 [0081.069] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.090] SetErrorMode (uMode=0x1) returned 0x0 [0081.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b06a34, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73b0a450, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32c7ba9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x32a)) returned 1 [0081.090] SetErrorMode (uMode=0x0) returned 0x1 [0081.090] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.partially.cryptonar")) returned 1 [0081.091] SetErrorMode (uMode=0x1) returned 0x0 [0081.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.093] SetErrorMode (uMode=0x0) returned 0x1 [0081.093] GetFileType (hFile=0x230) returned 0x1 [0081.093] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.110] SetErrorMode (uMode=0x1) returned 0x0 [0081.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b60f96, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73b670b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32cc7f0f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x112dc)) returned 1 [0081.111] SetErrorMode (uMode=0x0) returned 0x1 [0081.111] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.partially.cryptonar")) returned 1 [0081.112] SetErrorMode (uMode=0x1) returned 0x0 [0081.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.113] SetErrorMode (uMode=0x0) returned 0x1 [0081.113] GetFileType (hFile=0x230) returned 0x1 [0081.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.122] SetErrorMode (uMode=0x1) returned 0x0 [0081.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b7487d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7408016b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32cc7f0f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1109)) returned 1 [0081.123] SetErrorMode (uMode=0x0) returned 0x1 [0081.123] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.partially.cryptonar")) returned 1 [0081.124] SetErrorMode (uMode=0x1) returned 0x0 [0081.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.125] SetErrorMode (uMode=0x0) returned 0x1 [0081.125] GetFileType (hFile=0x230) returned 0x1 [0081.125] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.126] SetErrorMode (uMode=0x1) returned 0x0 [0081.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b80b73, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7408288d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32cee0f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22c)) returned 1 [0081.126] SetErrorMode (uMode=0x0) returned 0x1 [0081.126] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.partially.cryptonar")) returned 1 [0081.127] SetErrorMode (uMode=0x1) returned 0x0 [0081.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.128] SetErrorMode (uMode=0x0) returned 0x1 [0081.128] GetFileType (hFile=0x230) returned 0x1 [0081.128] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.129] SetErrorMode (uMode=0x1) returned 0x0 [0081.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b8ceca, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73b908c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32cee0f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0081.130] SetErrorMode (uMode=0x0) returned 0x1 [0081.130] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.partially.cryptonar")) returned 1 [0081.131] SetErrorMode (uMode=0x1) returned 0x0 [0081.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.131] SetErrorMode (uMode=0x0) returned 0x1 [0081.131] GetFileType (hFile=0x230) returned 0x1 [0081.131] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.132] SetErrorMode (uMode=0x1) returned 0x0 [0081.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b9e03b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ba1a30, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32cee0f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1 [0081.132] SetErrorMode (uMode=0x0) returned 0x1 [0081.132] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.partially.cryptonar")) returned 1 [0081.133] SetErrorMode (uMode=0x1) returned 0x0 [0081.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.134] SetErrorMode (uMode=0x0) returned 0x1 [0081.134] GetFileType (hFile=0x230) returned 0x1 [0081.134] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.135] SetErrorMode (uMode=0x1) returned 0x0 [0081.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73ba7c79, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bab670, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32cee0f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0081.135] SetErrorMode (uMode=0x0) returned 0x1 [0081.135] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.partially.cryptonar")) returned 1 [0081.136] SetErrorMode (uMode=0x1) returned 0x0 [0081.136] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.137] SetErrorMode (uMode=0x0) returned 0x1 [0081.137] GetFileType (hFile=0x230) returned 0x1 [0081.137] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.139] SetErrorMode (uMode=0x1) returned 0x0 [0081.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73bb3fcd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bb79c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32d143ad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa6)) returned 1 [0081.139] SetErrorMode (uMode=0x0) returned 0x1 [0081.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.partially.cryptonar")) returned 1 [0081.140] SetErrorMode (uMode=0x1) returned 0x0 [0081.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.140] SetErrorMode (uMode=0x0) returned 0x1 [0081.141] GetFileType (hFile=0x230) returned 0x1 [0081.141] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.142] SetErrorMode (uMode=0x1) returned 0x0 [0081.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73bc2a34, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bc6420, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32d143ad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0081.142] SetErrorMode (uMode=0x0) returned 0x1 [0081.142] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.partially.cryptonar")) returned 1 [0081.143] SetErrorMode (uMode=0x1) returned 0x0 [0081.143] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.144] SetErrorMode (uMode=0x0) returned 0x1 [0081.144] GetFileType (hFile=0x230) returned 0x1 [0081.144] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.165] SetErrorMode (uMode=0x1) returned 0x0 [0081.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733dcf7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x733de550, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32d3a6a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x376)) returned 1 [0081.166] SetErrorMode (uMode=0x0) returned 0x1 [0081.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.partially.cryptonar")) returned 1 [0081.167] SetErrorMode (uMode=0x1) returned 0x0 [0081.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.168] SetErrorMode (uMode=0x0) returned 0x1 [0081.168] GetFileType (hFile=0x230) returned 0x1 [0081.168] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.169] SetErrorMode (uMode=0x1) returned 0x0 [0081.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7341ef2a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73431570, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32d3a6a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c1)) returned 1 [0081.170] SetErrorMode (uMode=0x0) returned 0x1 [0081.170] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.partially.cryptonar")) returned 1 [0081.171] SetErrorMode (uMode=0x1) returned 0x0 [0081.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.172] SetErrorMode (uMode=0x0) returned 0x1 [0081.172] GetFileType (hFile=0x230) returned 0x1 [0081.172] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.174] SetErrorMode (uMode=0x1) returned 0x0 [0081.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734a53ba, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x734a6870, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32d60862, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x297)) returned 1 [0081.174] SetErrorMode (uMode=0x0) returned 0x1 [0081.174] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.partially.cryptonar")) returned 1 [0081.175] SetErrorMode (uMode=0x1) returned 0x0 [0081.175] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.178] SetErrorMode (uMode=0x0) returned 0x1 [0081.178] GetFileType (hFile=0x230) returned 0x1 [0081.178] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.180] SetErrorMode (uMode=0x1) returned 0x0 [0081.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73510a96, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7353b740, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32d60862, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1 [0081.180] SetErrorMode (uMode=0x0) returned 0x1 [0081.180] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.partially.cryptonar")) returned 1 [0081.182] SetErrorMode (uMode=0x1) returned 0x0 [0081.182] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.183] SetErrorMode (uMode=0x0) returned 0x1 [0081.183] GetFileType (hFile=0x230) returned 0x1 [0081.183] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.184] SetErrorMode (uMode=0x1) returned 0x0 [0081.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735bb925, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x735bcd90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32d60862, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2bd)) returned 1 [0081.184] SetErrorMode (uMode=0x0) returned 0x1 [0081.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.partially.cryptonar")) returned 1 [0081.186] SetErrorMode (uMode=0x1) returned 0x0 [0081.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.187] SetErrorMode (uMode=0x0) returned 0x1 [0081.187] GetFileType (hFile=0x230) returned 0x1 [0081.187] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.188] SetErrorMode (uMode=0x1) returned 0x0 [0081.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73604d1d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73782f30, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32d86b10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x36b)) returned 1 [0081.188] SetErrorMode (uMode=0x0) returned 0x1 [0081.188] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.partially.cryptonar")) returned 1 [0081.189] SetErrorMode (uMode=0x1) returned 0x0 [0081.189] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.190] SetErrorMode (uMode=0x0) returned 0x1 [0081.190] GetFileType (hFile=0x230) returned 0x1 [0081.190] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0081.193] SetErrorMode (uMode=0x1) returned 0x0 [0081.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737b9dbb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x737bb1a0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x32d86b10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1 [0081.193] SetErrorMode (uMode=0x0) returned 0x1 [0081.193] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.partially.cryptonar")) returned 1 [0081.194] SetErrorMode (uMode=0x1) returned 0x0 [0081.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0081.195] SetErrorMode (uMode=0x0) returned 0x1 [0081.195] GetFileType (hFile=0x230) returned 0x1 [0081.195] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.280] SetErrorMode (uMode=0x1) returned 0x0 [0083.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737cd640, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x737dad70, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3417e638, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1 [0083.280] SetErrorMode (uMode=0x0) returned 0x1 [0083.280] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json.partially.cryptonar")) returned 1 [0083.281] SetErrorMode (uMode=0x1) returned 0x0 [0083.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.282] SetErrorMode (uMode=0x0) returned 0x1 [0083.282] GetFileType (hFile=0x230) returned 0x1 [0083.282] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.294] SetErrorMode (uMode=0x1) returned 0x0 [0083.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737fe38e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73801e70, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3417e638, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1 [0083.294] SetErrorMode (uMode=0x0) returned 0x1 [0083.294] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.partially.cryptonar")) returned 1 [0083.295] SetErrorMode (uMode=0x1) returned 0x0 [0083.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.296] SetErrorMode (uMode=0x0) returned 0x1 [0083.296] GetFileType (hFile=0x230) returned 0x1 [0083.296] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.319] SetErrorMode (uMode=0x1) returned 0x0 [0083.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7381913f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7381cc20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x341caa5a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29b)) returned 1 [0083.319] SetErrorMode (uMode=0x0) returned 0x1 [0083.319] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.partially.cryptonar")) returned 1 [0083.320] SetErrorMode (uMode=0x1) returned 0x0 [0083.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.321] SetErrorMode (uMode=0x0) returned 0x1 [0083.321] GetFileType (hFile=0x230) returned 0x1 [0083.321] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.421] SetErrorMode (uMode=0x1) returned 0x0 [0083.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73890b72, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73894630, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x342d5ace, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x261)) returned 1 [0083.421] SetErrorMode (uMode=0x0) returned 0x1 [0083.421] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.partially.cryptonar")) returned 1 [0083.422] SetErrorMode (uMode=0x1) returned 0x0 [0083.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.423] SetErrorMode (uMode=0x0) returned 0x1 [0083.423] GetFileType (hFile=0x230) returned 0x1 [0083.423] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.424] SetErrorMode (uMode=0x1) returned 0x0 [0083.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738a43f5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738a7eb0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x342d5ace, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2a1)) returned 1 [0083.425] SetErrorMode (uMode=0x0) returned 0x1 [0083.425] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.partially.cryptonar")) returned 1 [0083.426] SetErrorMode (uMode=0x1) returned 0x0 [0083.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.427] SetErrorMode (uMode=0x0) returned 0x1 [0083.427] GetFileType (hFile=0x230) returned 0x1 [0083.427] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.428] SetErrorMode (uMode=0x1) returned 0x0 [0083.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738ba38d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738bb730, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x342d5ace, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2b4)) returned 1 [0083.428] SetErrorMode (uMode=0x0) returned 0x1 [0083.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.partially.cryptonar")) returned 1 [0083.430] SetErrorMode (uMode=0x1) returned 0x0 [0083.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.430] SetErrorMode (uMode=0x0) returned 0x1 [0083.430] GetFileType (hFile=0x230) returned 0x1 [0083.430] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.432] SetErrorMode (uMode=0x1) returned 0x0 [0083.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d5145, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738d64e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x342d5ace, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c4)) returned 1 [0083.432] SetErrorMode (uMode=0x0) returned 0x1 [0083.432] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.partially.cryptonar")) returned 1 [0083.433] SetErrorMode (uMode=0x1) returned 0x0 [0083.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.434] SetErrorMode (uMode=0x0) returned 0x1 [0083.434] GetFileType (hFile=0x230) returned 0x1 [0083.434] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.436] SetErrorMode (uMode=0x1) returned 0x0 [0083.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738e3ba8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738e4f40, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x342fbd6f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad)) returned 1 [0083.436] SetErrorMode (uMode=0x0) returned 0x1 [0083.436] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.partially.cryptonar")) returned 1 [0083.437] SetErrorMode (uMode=0x1) returned 0x0 [0083.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.438] SetErrorMode (uMode=0x0) returned 0x1 [0083.438] GetFileType (hFile=0x230) returned 0x1 [0083.438] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.445] SetErrorMode (uMode=0x1) returned 0x0 [0083.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738ed7ea, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738f1290, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x342fbd6f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x279)) returned 1 [0083.446] SetErrorMode (uMode=0x0) returned 0x1 [0083.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.partially.cryptonar")) returned 1 [0083.447] SetErrorMode (uMode=0x1) returned 0x0 [0083.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.449] SetErrorMode (uMode=0x0) returned 0x1 [0083.449] GetFileType (hFile=0x230) returned 0x1 [0083.449] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.451] SetErrorMode (uMode=0x1) returned 0x0 [0083.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738f742e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x738f87c0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x342fbd6f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c6)) returned 1 [0083.451] SetErrorMode (uMode=0x0) returned 0x1 [0083.451] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.partially.cryptonar")) returned 1 [0083.452] SetErrorMode (uMode=0x1) returned 0x0 [0083.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.453] SetErrorMode (uMode=0x0) returned 0x1 [0083.453] GetFileType (hFile=0x230) returned 0x1 [0083.453] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.455] SetErrorMode (uMode=0x1) returned 0x0 [0083.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73905e8f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73907220, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34321f6b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1 [0083.455] SetErrorMode (uMode=0x0) returned 0x1 [0083.455] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.partially.cryptonar")) returned 1 [0083.456] SetErrorMode (uMode=0x1) returned 0x0 [0083.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.457] SetErrorMode (uMode=0x0) returned 0x1 [0083.457] GetFileType (hFile=0x230) returned 0x1 [0083.457] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.537] SetErrorMode (uMode=0x1) returned 0x0 [0083.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7392f6aa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73930a30, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x343e0bfa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x26e)) returned 1 [0083.537] SetErrorMode (uMode=0x0) returned 0x1 [0083.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.partially.cryptonar")) returned 1 [0083.538] SetErrorMode (uMode=0x1) returned 0x0 [0083.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.576] SetErrorMode (uMode=0x0) returned 0x1 [0083.576] GetFileType (hFile=0x230) returned 0x1 [0083.576] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.577] SetErrorMode (uMode=0x1) returned 0x0 [0083.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739392ef, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7393a670, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x344532e0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x30a)) returned 1 [0083.578] SetErrorMode (uMode=0x0) returned 0x1 [0083.578] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.partially.cryptonar")) returned 1 [0083.579] SetErrorMode (uMode=0x1) returned 0x0 [0083.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.580] SetErrorMode (uMode=0x0) returned 0x1 [0083.580] GetFileType (hFile=0x230) returned 0x1 [0083.580] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.581] SetErrorMode (uMode=0x1) returned 0x0 [0083.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73940836, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739442b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x344532e0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29d)) returned 1 [0083.581] SetErrorMode (uMode=0x0) returned 0x1 [0083.581] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.partially.cryptonar")) returned 1 [0083.582] SetErrorMode (uMode=0x1) returned 0x0 [0083.582] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.583] SetErrorMode (uMode=0x0) returned 0x1 [0083.583] GetFileType (hFile=0x230) returned 0x1 [0083.583] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.584] SetErrorMode (uMode=0x1) returned 0x0 [0083.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7394a45f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7394def0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x344532e0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1 [0083.584] SetErrorMode (uMode=0x0) returned 0x1 [0083.584] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.partially.cryptonar")) returned 1 [0083.585] SetErrorMode (uMode=0x1) returned 0x0 [0083.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.586] SetErrorMode (uMode=0x0) returned 0x1 [0083.586] GetFileType (hFile=0x230) returned 0x1 [0083.586] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.615] SetErrorMode (uMode=0x1) returned 0x0 [0083.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73958ec5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7395a240, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3449f747, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2bb)) returned 1 [0083.616] SetErrorMode (uMode=0x0) returned 0x1 [0083.616] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.partially.cryptonar")) returned 1 [0083.617] SetErrorMode (uMode=0x1) returned 0x0 [0083.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.618] SetErrorMode (uMode=0x0) returned 0x1 [0083.618] GetFileType (hFile=0x230) returned 0x1 [0083.618] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.620] SetErrorMode (uMode=0x1) returned 0x0 [0083.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73962ade, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73963e80, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3449f747, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x284)) returned 1 [0083.620] SetErrorMode (uMode=0x0) returned 0x1 [0083.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.partially.cryptonar")) returned 1 [0083.621] SetErrorMode (uMode=0x1) returned 0x0 [0083.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.622] SetErrorMode (uMode=0x0) returned 0x1 [0083.622] GetFileType (hFile=0x230) returned 0x1 [0083.622] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.624] SetErrorMode (uMode=0x1) returned 0x0 [0083.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7396c74b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7396dac0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x344c598c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1 [0083.624] SetErrorMode (uMode=0x0) returned 0x1 [0083.624] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.partially.cryptonar")) returned 1 [0083.625] SetErrorMode (uMode=0x1) returned 0x0 [0083.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.626] SetErrorMode (uMode=0x0) returned 0x1 [0083.626] GetFileType (hFile=0x230) returned 0x1 [0083.626] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.628] SetErrorMode (uMode=0x1) returned 0x0 [0083.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73978a9f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7397c520, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x344c598c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1 [0083.628] SetErrorMode (uMode=0x0) returned 0x1 [0083.628] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.partially.cryptonar")) returned 1 [0083.629] SetErrorMode (uMode=0x1) returned 0x0 [0083.629] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.629] SetErrorMode (uMode=0x0) returned 0x1 [0083.629] GetFileType (hFile=0x230) returned 0x1 [0083.629] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.631] SetErrorMode (uMode=0x1) returned 0x0 [0083.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73984df0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73986160, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x344c598c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29b)) returned 1 [0083.631] SetErrorMode (uMode=0x0) returned 0x1 [0083.631] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json.partially.cryptonar")) returned 1 [0083.632] SetErrorMode (uMode=0x1) returned 0x0 [0083.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.633] SetErrorMode (uMode=0x0) returned 0x1 [0083.633] GetFileType (hFile=0x230) returned 0x1 [0083.633] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.634] SetErrorMode (uMode=0x1) returned 0x0 [0083.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7398ea54, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7398fda0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x344c598c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x295)) returned 1 [0083.634] SetErrorMode (uMode=0x0) returned 0x1 [0083.634] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json.partially.cryptonar")) returned 1 [0083.635] SetErrorMode (uMode=0x1) returned 0x0 [0083.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.636] SetErrorMode (uMode=0x0) returned 0x1 [0083.636] GetFileType (hFile=0x230) returned 0x1 [0083.636] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.676] SetErrorMode (uMode=0x1) returned 0x0 [0083.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73998676, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739999e0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x345381b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29c)) returned 1 [0083.676] SetErrorMode (uMode=0x0) returned 0x1 [0083.676] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.partially.cryptonar")) returned 1 [0083.677] SetErrorMode (uMode=0x1) returned 0x0 [0083.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.678] SetErrorMode (uMode=0x0) returned 0x1 [0083.678] GetFileType (hFile=0x230) returned 0x1 [0083.678] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.682] SetErrorMode (uMode=0x1) returned 0x0 [0083.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739a49ca, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739a8440, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x345381b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x30f)) returned 1 [0083.682] SetErrorMode (uMode=0x0) returned 0x1 [0083.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.partially.cryptonar")) returned 1 [0083.684] SetErrorMode (uMode=0x1) returned 0x0 [0083.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.685] SetErrorMode (uMode=0x0) returned 0x1 [0083.685] GetFileType (hFile=0x230) returned 0x1 [0083.685] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.686] SetErrorMode (uMode=0x1) returned 0x0 [0083.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739ae612, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739b2080, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3455e38f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29f)) returned 1 [0083.687] SetErrorMode (uMode=0x0) returned 0x1 [0083.687] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.partially.cryptonar")) returned 1 [0083.688] SetErrorMode (uMode=0x1) returned 0x0 [0083.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.688] SetErrorMode (uMode=0x0) returned 0x1 [0083.689] GetFileType (hFile=0x230) returned 0x1 [0083.689] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.690] SetErrorMode (uMode=0x1) returned 0x0 [0083.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739b824d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739bbcc0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3455e38f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1 [0083.690] SetErrorMode (uMode=0x0) returned 0x1 [0083.690] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.partially.cryptonar")) returned 1 [0083.691] SetErrorMode (uMode=0x1) returned 0x0 [0083.691] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.692] SetErrorMode (uMode=0x0) returned 0x1 [0083.692] GetFileType (hFile=0x230) returned 0x1 [0083.692] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.694] SetErrorMode (uMode=0x1) returned 0x0 [0083.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739c45a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739c5900, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3455e38f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0083.694] SetErrorMode (uMode=0x0) returned 0x1 [0083.694] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.partially.cryptonar")) returned 1 [0083.695] SetErrorMode (uMode=0x1) returned 0x0 [0083.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.696] SetErrorMode (uMode=0x0) returned 0x1 [0083.696] GetFileType (hFile=0x230) returned 0x1 [0083.696] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.697] SetErrorMode (uMode=0x1) returned 0x0 [0083.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739d090e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739d1c50, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3455e38f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x289)) returned 1 [0083.698] SetErrorMode (uMode=0x0) returned 0x1 [0083.698] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.partially.cryptonar")) returned 1 [0083.699] SetErrorMode (uMode=0x1) returned 0x0 [0083.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.699] SetErrorMode (uMode=0x0) returned 0x1 [0083.699] GetFileType (hFile=0x230) returned 0x1 [0083.699] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.701] SetErrorMode (uMode=0x1) returned 0x0 [0083.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739da52d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739db890, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x345844d0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x44b)) returned 1 [0083.701] SetErrorMode (uMode=0x0) returned 0x1 [0083.701] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.partially.cryptonar")) returned 1 [0083.703] SetErrorMode (uMode=0x1) returned 0x0 [0083.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.704] SetErrorMode (uMode=0x0) returned 0x1 [0083.704] GetFileType (hFile=0x230) returned 0x1 [0083.704] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.724] SetErrorMode (uMode=0x1) returned 0x0 [0083.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739e4178, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739e54d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x345aa8f6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x28a)) returned 1 [0083.724] SetErrorMode (uMode=0x0) returned 0x1 [0083.724] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.partially.cryptonar")) returned 1 [0083.725] SetErrorMode (uMode=0x1) returned 0x0 [0083.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.726] SetErrorMode (uMode=0x0) returned 0x1 [0083.726] GetFileType (hFile=0x230) returned 0x1 [0083.726] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.757] SetErrorMode (uMode=0x1) returned 0x0 [0083.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739f04cc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739f1820, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x345fef5b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x315)) returned 1 [0083.757] SetErrorMode (uMode=0x0) returned 0x1 [0083.757] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.partially.cryptonar")) returned 1 [0083.758] SetErrorMode (uMode=0x1) returned 0x0 [0083.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.759] SetErrorMode (uMode=0x0) returned 0x1 [0083.759] GetFileType (hFile=0x230) returned 0x1 [0083.759] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.761] SetErrorMode (uMode=0x1) returned 0x0 [0083.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739fa114, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x739fb460, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x345fef5b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0083.761] SetErrorMode (uMode=0x0) returned 0x1 [0083.761] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.partially.cryptonar")) returned 1 [0083.762] SetErrorMode (uMode=0x1) returned 0x0 [0083.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.763] SetErrorMode (uMode=0x0) returned 0x1 [0083.763] GetFileType (hFile=0x230) returned 0x1 [0083.763] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.765] SetErrorMode (uMode=0x1) returned 0x0 [0083.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73a03d4f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73a77c90, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3461cf6e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x253)) returned 1 [0083.765] SetErrorMode (uMode=0x0) returned 0x1 [0083.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json.partially.cryptonar")) returned 1 [0083.766] SetErrorMode (uMode=0x1) returned 0x0 [0083.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.767] SetErrorMode (uMode=0x0) returned 0x1 [0083.767] GetFileType (hFile=0x230) returned 0x1 [0083.767] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.768] SetErrorMode (uMode=0x1) returned 0x0 [0083.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73aa9db9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73ab4d20, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3461cf6e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0083.768] SetErrorMode (uMode=0x0) returned 0x1 [0083.768] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json.partially.cryptonar")) returned 1 [0083.769] SetErrorMode (uMode=0x1) returned 0x0 [0083.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.770] SetErrorMode (uMode=0x0) returned 0x1 [0083.770] GetFileType (hFile=0x230) returned 0x1 [0083.770] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.833] SetErrorMode (uMode=0x1) returned 0x0 [0083.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73bdb0dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x73bdc3b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x346b57ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1 [0083.834] SetErrorMode (uMode=0x0) returned 0x1 [0083.834] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.partially.cryptonar")) returned 1 [0083.835] SetErrorMode (uMode=0x1) returned 0x0 [0083.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.835] SetErrorMode (uMode=0x0) returned 0x1 [0083.835] GetFileType (hFile=0x230) returned 0x1 [0083.835] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.928] SetErrorMode (uMode=0x1) returned 0x0 [0083.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b49d94, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x782bf24d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3479a726, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x180f)) returned 1 [0083.928] SetErrorMode (uMode=0x0) returned 0x1 [0083.929] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.partially.cryptonar")) returned 1 [0083.929] SetErrorMode (uMode=0x1) returned 0x0 [0083.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.930] SetErrorMode (uMode=0x0) returned 0x1 [0083.930] GetFileType (hFile=0x230) returned 0x1 [0083.930] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.932] SetErrorMode (uMode=0x1) returned 0x0 [0083.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a9c7fb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77b44f48, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3479a726, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1 [0083.932] SetErrorMode (uMode=0x0) returned 0x1 [0083.932] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.partially.cryptonar")) returned 1 [0083.933] SetErrorMode (uMode=0x1) returned 0x0 [0083.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.935] SetErrorMode (uMode=0x0) returned 0x1 [0083.935] GetFileType (hFile=0x230) returned 0x1 [0083.935] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.936] SetErrorMode (uMode=0x1) returned 0x0 [0083.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dcbfb0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dcbed8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x347c07f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x138)) returned 1 [0083.936] SetErrorMode (uMode=0x0) returned 0x1 [0083.936] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.partially.cryptonar")) returned 1 [0083.937] SetErrorMode (uMode=0x1) returned 0x0 [0083.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.938] SetErrorMode (uMode=0x0) returned 0x1 [0083.938] GetFileType (hFile=0x230) returned 0x1 [0083.938] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.939] SetErrorMode (uMode=0x1) returned 0x0 [0083.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dc4a7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dc49a8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x347c07f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x124)) returned 1 [0083.940] SetErrorMode (uMode=0x0) returned 0x1 [0083.940] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.partially.cryptonar")) returned 1 [0083.940] SetErrorMode (uMode=0x1) returned 0x0 [0083.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.942] SetErrorMode (uMode=0x0) returned 0x1 [0083.942] GetFileType (hFile=0x230) returned 0x1 [0083.942] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.942] SetErrorMode (uMode=0x1) returned 0x0 [0083.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cb5a64, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cb59b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x347c07f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1 [0083.943] SetErrorMode (uMode=0x0) returned 0x1 [0083.943] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.partially.cryptonar")) returned 1 [0083.944] SetErrorMode (uMode=0x1) returned 0x0 [0083.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.945] SetErrorMode (uMode=0x0) returned 0x1 [0083.945] GetFileType (hFile=0x230) returned 0x1 [0083.945] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.945] SetErrorMode (uMode=0x1) returned 0x0 [0083.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c602ef, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c62998, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x347c07f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1 [0083.946] SetErrorMode (uMode=0x0) returned 0x1 [0083.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.partially.cryptonar")) returned 1 [0083.947] SetErrorMode (uMode=0x1) returned 0x0 [0083.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.947] SetErrorMode (uMode=0x0) returned 0x1 [0083.947] GetFileType (hFile=0x230) returned 0x1 [0083.947] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.948] SetErrorMode (uMode=0x1) returned 0x0 [0083.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77db6015, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77db8658, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x347c07f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1 [0083.948] SetErrorMode (uMode=0x0) returned 0x1 [0083.949] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.partially.cryptonar")) returned 1 [0083.949] SetErrorMode (uMode=0x1) returned 0x0 [0083.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.950] SetErrorMode (uMode=0x0) returned 0x1 [0083.950] GetFileType (hFile=0x230) returned 0x1 [0083.950] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.952] SetErrorMode (uMode=0x1) returned 0x0 [0083.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ca6fe8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ca6f58, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x347e6b52, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xef)) returned 1 [0083.952] SetErrorMode (uMode=0x0) returned 0x1 [0083.952] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.partially.cryptonar")) returned 1 [0083.953] SetErrorMode (uMode=0x1) returned 0x0 [0083.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.954] SetErrorMode (uMode=0x0) returned 0x1 [0083.954] GetFileType (hFile=0x230) returned 0x1 [0083.954] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.955] SetErrorMode (uMode=0x1) returned 0x0 [0083.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cfa018, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cfc688, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x347e6b52, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1 [0083.955] SetErrorMode (uMode=0x0) returned 0x1 [0083.955] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.partially.cryptonar")) returned 1 [0083.956] SetErrorMode (uMode=0x1) returned 0x0 [0083.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.957] SetErrorMode (uMode=0x0) returned 0x1 [0083.957] GetFileType (hFile=0x230) returned 0x1 [0083.957] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.958] SetErrorMode (uMode=0x1) returned 0x0 [0083.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77da9cc4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77db1128, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x347e6b52, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0083.958] SetErrorMode (uMode=0x0) returned 0x1 [0083.958] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.partially.cryptonar")) returned 1 [0083.959] SetErrorMode (uMode=0x1) returned 0x0 [0083.960] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.960] SetErrorMode (uMode=0x0) returned 0x1 [0083.960] GetFileType (hFile=0x230) returned 0x1 [0083.960] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.961] SetErrorMode (uMode=0x1) returned 0x0 [0083.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c6ed69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c713f8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x347e6b52, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10d)) returned 1 [0083.962] SetErrorMode (uMode=0x0) returned 0x1 [0083.962] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.partially.cryptonar")) returned 1 [0083.963] SetErrorMode (uMode=0x1) returned 0x0 [0083.963] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.963] SetErrorMode (uMode=0x0) returned 0x1 [0083.964] GetFileType (hFile=0x230) returned 0x1 [0083.964] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.965] SetErrorMode (uMode=0x1) returned 0x0 [0083.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ce678c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ce8e08, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x347e6b52, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0083.965] SetErrorMode (uMode=0x0) returned 0x1 [0083.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.partially.cryptonar")) returned 1 [0083.966] SetErrorMode (uMode=0x1) returned 0x0 [0083.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.968] SetErrorMode (uMode=0x0) returned 0x1 [0083.968] GetFileType (hFile=0x230) returned 0x1 [0083.968] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.969] SetErrorMode (uMode=0x1) returned 0x0 [0083.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d4340d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d43358, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3480ced3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0083.969] SetErrorMode (uMode=0x0) returned 0x1 [0083.969] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.partially.cryptonar")) returned 1 [0083.970] SetErrorMode (uMode=0x1) returned 0x0 [0083.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.972] SetErrorMode (uMode=0x0) returned 0x1 [0083.972] GetFileType (hFile=0x230) returned 0x1 [0083.972] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.973] SetErrorMode (uMode=0x1) returned 0x0 [0083.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cbcf7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cbcee8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3480ced3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1 [0083.973] SetErrorMode (uMode=0x0) returned 0x1 [0083.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.partially.cryptonar")) returned 1 [0083.974] SetErrorMode (uMode=0x1) returned 0x0 [0083.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.975] SetErrorMode (uMode=0x0) returned 0x1 [0083.975] GetFileType (hFile=0x230) returned 0x1 [0083.975] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.976] SetErrorMode (uMode=0x1) returned 0x0 [0083.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c5b4e3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c5b468, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3480ced3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x121)) returned 1 [0083.976] SetErrorMode (uMode=0x0) returned 0x1 [0083.976] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.partially.cryptonar")) returned 1 [0083.978] SetErrorMode (uMode=0x1) returned 0x0 [0083.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.979] SetErrorMode (uMode=0x0) returned 0x1 [0083.979] GetFileType (hFile=0x230) returned 0x1 [0083.979] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.980] SetErrorMode (uMode=0x1) returned 0x0 [0083.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cf51f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cf5158, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3480ced3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0083.980] SetErrorMode (uMode=0x0) returned 0x1 [0083.980] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.partially.cryptonar")) returned 1 [0083.981] SetErrorMode (uMode=0x1) returned 0x0 [0083.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.982] SetErrorMode (uMode=0x0) returned 0x1 [0083.983] GetFileType (hFile=0x230) returned 0x1 [0083.983] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.984] SetErrorMode (uMode=0x1) returned 0x0 [0083.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c67831, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c69ec8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34833869, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0083.984] SetErrorMode (uMode=0x0) returned 0x1 [0083.984] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.partially.cryptonar")) returned 1 [0083.985] SetErrorMode (uMode=0x1) returned 0x0 [0083.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.986] SetErrorMode (uMode=0x0) returned 0x1 [0083.986] GetFileType (hFile=0x230) returned 0x1 [0083.986] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.987] SetErrorMode (uMode=0x1) returned 0x0 [0083.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dd0de5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dd3408, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34833869, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1 [0083.987] SetErrorMode (uMode=0x0) returned 0x1 [0083.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.partially.cryptonar")) returned 1 [0083.988] SetErrorMode (uMode=0x1) returned 0x0 [0083.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.989] SetErrorMode (uMode=0x0) returned 0x1 [0083.989] GetFileType (hFile=0x230) returned 0x1 [0083.989] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.990] SetErrorMode (uMode=0x1) returned 0x0 [0083.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77de4652, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77de4578, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34833869, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0083.990] SetErrorMode (uMode=0x0) returned 0x1 [0083.991] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.partially.cryptonar")) returned 1 [0083.991] SetErrorMode (uMode=0x1) returned 0x0 [0083.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.992] SetErrorMode (uMode=0x0) returned 0x1 [0083.992] GetFileType (hFile=0x230) returned 0x1 [0083.992] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.993] SetErrorMode (uMode=0x1) returned 0x0 [0083.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dbd54d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77dbfb88, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34833869, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0083.993] SetErrorMode (uMode=0x0) returned 0x1 [0083.994] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.partially.cryptonar")) returned 1 [0083.995] SetErrorMode (uMode=0x1) returned 0x0 [0083.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.996] SetErrorMode (uMode=0x0) returned 0x1 [0083.996] GetFileType (hFile=0x230) returned 0x1 [0083.996] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0083.997] SetErrorMode (uMode=0x1) returned 0x0 [0083.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d1c305, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d1e968, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34833869, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0083.997] SetErrorMode (uMode=0x0) returned 0x1 [0083.997] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.partially.cryptonar")) returned 1 [0083.998] SetErrorMode (uMode=0x1) returned 0x0 [0083.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0083.999] SetErrorMode (uMode=0x0) returned 0x1 [0083.999] GetFileType (hFile=0x230) returned 0x1 [0083.999] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.000] SetErrorMode (uMode=0x1) returned 0x0 [0084.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d3bed2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d3be28, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34859275, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfd)) returned 1 [0084.000] SetErrorMode (uMode=0x0) returned 0x1 [0084.000] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.partially.cryptonar")) returned 1 [0084.001] SetErrorMode (uMode=0x1) returned 0x0 [0084.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.002] SetErrorMode (uMode=0x0) returned 0x1 [0084.002] GetFileType (hFile=0x230) returned 0x1 [0084.002] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.003] SetErrorMode (uMode=0x1) returned 0x0 [0084.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d2ad68, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d2acb8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34859275, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xee)) returned 1 [0084.003] SetErrorMode (uMode=0x0) returned 0x1 [0084.003] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.partially.cryptonar")) returned 1 [0084.004] SetErrorMode (uMode=0x1) returned 0x0 [0084.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.004] SetErrorMode (uMode=0x0) returned 0x1 [0084.004] GetFileType (hFile=0x230) returned 0x1 [0084.004] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.005] SetErrorMode (uMode=0x1) returned 0x0 [0084.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c98571, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c9ac08, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34859275, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0084.005] SetErrorMode (uMode=0x0) returned 0x1 [0084.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.partially.cryptonar")) returned 1 [0084.006] SetErrorMode (uMode=0x1) returned 0x0 [0084.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.007] SetErrorMode (uMode=0x0) returned 0x1 [0084.007] GetFileType (hFile=0x230) returned 0x1 [0084.007] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.008] SetErrorMode (uMode=0x1) returned 0x0 [0084.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d23830, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d23788, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34859275, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0084.008] SetErrorMode (uMode=0x0) returned 0x1 [0084.008] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.partially.cryptonar")) returned 1 [0084.010] SetErrorMode (uMode=0x1) returned 0x0 [0084.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.010] SetErrorMode (uMode=0x0) returned 0x1 [0084.010] GetFileType (hFile=0x230) returned 0x1 [0084.010] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.011] SetErrorMode (uMode=0x1) returned 0x0 [0084.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d322b0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d321e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34859275, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0084.012] SetErrorMode (uMode=0x0) returned 0x1 [0084.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.partially.cryptonar")) returned 1 [0084.013] SetErrorMode (uMode=0x1) returned 0x0 [0084.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.014] SetErrorMode (uMode=0x0) returned 0x1 [0084.014] GetFileType (hFile=0x230) returned 0x1 [0084.014] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.015] SetErrorMode (uMode=0x1) returned 0x0 [0084.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d56c90, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d592e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3487f533, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0084.016] SetErrorMode (uMode=0x0) returned 0x1 [0084.016] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json.partially.cryptonar")) returned 1 [0084.017] SetErrorMode (uMode=0x1) returned 0x0 [0084.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.018] SetErrorMode (uMode=0x0) returned 0x1 [0084.018] GetFileType (hFile=0x230) returned 0x1 [0084.018] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.019] SetErrorMode (uMode=0x1) returned 0x0 [0084.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cc1d9c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cc9238, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3487f533, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0084.019] SetErrorMode (uMode=0x0) returned 0x1 [0084.019] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json.partially.cryptonar")) returned 1 [0084.020] SetErrorMode (uMode=0x1) returned 0x0 [0084.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.021] SetErrorMode (uMode=0x0) returned 0x1 [0084.021] GetFileType (hFile=0x230) returned 0x1 [0084.021] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.022] SetErrorMode (uMode=0x1) returned 0x0 [0084.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cae510, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cae488, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3487f533, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1 [0084.022] SetErrorMode (uMode=0x0) returned 0x1 [0084.022] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.partially.cryptonar")) returned 1 [0084.023] SetErrorMode (uMode=0x1) returned 0x0 [0084.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.024] SetErrorMode (uMode=0x0) returned 0x1 [0084.024] GetFileType (hFile=0x230) returned 0x1 [0084.024] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.024] SetErrorMode (uMode=0x1) returned 0x0 [0084.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ce196d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ce18d8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3487f533, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1 [0084.025] SetErrorMode (uMode=0x0) returned 0x1 [0084.025] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.partially.cryptonar")) returned 1 [0084.026] SetErrorMode (uMode=0x1) returned 0x0 [0084.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.026] SetErrorMode (uMode=0x0) returned 0x1 [0084.026] GetFileType (hFile=0x230) returned 0x1 [0084.026] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.027] SetErrorMode (uMode=0x1) returned 0x0 [0084.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cd7d32, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cd7c98, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3487f533, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0084.027] SetErrorMode (uMode=0x0) returned 0x1 [0084.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.partially.cryptonar")) returned 1 [0084.028] SetErrorMode (uMode=0x1) returned 0x0 [0084.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.029] SetErrorMode (uMode=0x0) returned 0x1 [0084.029] GetFileType (hFile=0x230) returned 0x1 [0084.029] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.030] SetErrorMode (uMode=0x1) returned 0x0 [0084.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d126c3, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d17438, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x348a57ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0084.030] SetErrorMode (uMode=0x0) returned 0x1 [0084.030] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.partially.cryptonar")) returned 1 [0084.031] SetErrorMode (uMode=0x1) returned 0x0 [0084.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.031] SetErrorMode (uMode=0x0) returned 0x1 [0084.031] GetFileType (hFile=0x230) returned 0x1 [0084.031] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.033] SetErrorMode (uMode=0x1) returned 0x0 [0084.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c91052, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c936d8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x348a57ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0084.033] SetErrorMode (uMode=0x0) returned 0x1 [0084.033] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.partially.cryptonar")) returned 1 [0084.034] SetErrorMode (uMode=0x1) returned 0x0 [0084.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.034] SetErrorMode (uMode=0x0) returned 0x1 [0084.034] GetFileType (hFile=0x230) returned 0x1 [0084.034] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.035] SetErrorMode (uMode=0x1) returned 0x0 [0084.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77da2792, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77da4dd8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x348a57ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x127)) returned 1 [0084.036] SetErrorMode (uMode=0x0) returned 0x1 [0084.036] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.partially.cryptonar")) returned 1 [0084.037] SetErrorMode (uMode=0x1) returned 0x0 [0084.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.038] SetErrorMode (uMode=0x0) returned 0x1 [0084.038] GetFileType (hFile=0x230) returned 0x1 [0084.038] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.039] SetErrorMode (uMode=0x1) returned 0x0 [0084.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ddd127, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77ddd048, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x348a57ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x144)) returned 1 [0084.039] SetErrorMode (uMode=0x0) returned 0x1 [0084.039] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.partially.cryptonar")) returned 1 [0084.040] SetErrorMode (uMode=0x1) returned 0x0 [0084.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.041] SetErrorMode (uMode=0x0) returned 0x1 [0084.041] GetFileType (hFile=0x230) returned 0x1 [0084.041] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.042] SetErrorMode (uMode=0x1) returned 0x0 [0084.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c4ca7f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77c4ca08, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x348a57ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0084.043] SetErrorMode (uMode=0x0) returned 0x1 [0084.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.partially.cryptonar")) returned 1 [0084.044] SetErrorMode (uMode=0x1) returned 0x0 [0084.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.045] SetErrorMode (uMode=0x0) returned 0x1 [0084.045] GetFileType (hFile=0x230) returned 0x1 [0084.045] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.046] SetErrorMode (uMode=0x1) returned 0x0 [0084.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77cd0800, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77cd2e78, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x348cc145, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0084.046] SetErrorMode (uMode=0x0) returned 0x1 [0084.046] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.partially.cryptonar")) returned 1 [0084.047] SetErrorMode (uMode=0x1) returned 0x0 [0084.047] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.048] SetErrorMode (uMode=0x0) returned 0x1 [0084.048] GetFileType (hFile=0x230) returned 0x1 [0084.048] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.049] SetErrorMode (uMode=0x1) returned 0x0 [0084.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d51e71, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d51db8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x348cc145, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0084.049] SetErrorMode (uMode=0x0) returned 0x1 [0084.049] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.partially.cryptonar")) returned 1 [0084.050] SetErrorMode (uMode=0x1) returned 0x0 [0084.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.051] SetErrorMode (uMode=0x0) returned 0x1 [0084.051] GetFileType (hFile=0x230) returned 0x1 [0084.051] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.052] SetErrorMode (uMode=0x1) returned 0x0 [0084.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d4a93f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d4a888, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x348cc145, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1 [0084.052] SetErrorMode (uMode=0x0) returned 0x1 [0084.052] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json.partially.cryptonar")) returned 1 [0084.054] SetErrorMode (uMode=0x1) returned 0x0 [0084.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.054] SetErrorMode (uMode=0x0) returned 0x1 [0084.054] GetFileType (hFile=0x230) returned 0x1 [0084.054] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.056] SetErrorMode (uMode=0x1) returned 0x0 [0084.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d9d976, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77d9d8a8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x348cc145, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1 [0084.056] SetErrorMode (uMode=0x0) returned 0x1 [0084.056] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json.partially.cryptonar")) returned 1 [0084.060] SetErrorMode (uMode=0x1) returned 0x0 [0084.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.061] SetErrorMode (uMode=0x0) returned 0x1 [0084.061] GetFileType (hFile=0x230) returned 0x1 [0084.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.063] SetErrorMode (uMode=0x1) returned 0x0 [0084.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77df09ac, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x77df08c8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x348f1bd1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2686)) returned 1 [0084.064] SetErrorMode (uMode=0x0) returned 0x1 [0084.064] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.partially.cryptonar")) returned 1 [0084.065] SetErrorMode (uMode=0x1) returned 0x0 [0084.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.066] SetErrorMode (uMode=0x0) returned 0x1 [0084.066] GetFileType (hFile=0x230) returned 0x1 [0084.066] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.090] SetErrorMode (uMode=0x1) returned 0x0 [0084.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aad565d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aaf783a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34917e32, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf)) returned 1 [0084.090] SetErrorMode (uMode=0x0) returned 0x1 [0084.091] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.partially.cryptonar")) returned 1 [0084.092] SetErrorMode (uMode=0x1) returned 0x0 [0084.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.093] SetErrorMode (uMode=0x0) returned 0x1 [0084.093] GetFileType (hFile=0x230) returned 0x1 [0084.093] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.107] SetErrorMode (uMode=0x1) returned 0x0 [0084.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab01585, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac08f3a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34964202, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa89c)) returned 1 [0084.108] SetErrorMode (uMode=0x0) returned 0x1 [0084.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.partially.cryptonar")) returned 1 [0084.109] SetErrorMode (uMode=0x1) returned 0x0 [0084.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.110] SetErrorMode (uMode=0x0) returned 0x1 [0084.110] GetFileType (hFile=0x230) returned 0x1 [0084.110] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.112] SetErrorMode (uMode=0x1) returned 0x0 [0084.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac0dea6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac1046a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34964202, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x181aa)) returned 1 [0084.113] SetErrorMode (uMode=0x0) returned 0x1 [0084.113] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.partially.cryptonar")) returned 1 [0084.114] SetErrorMode (uMode=0x1) returned 0x0 [0084.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.114] SetErrorMode (uMode=0x0) returned 0x1 [0084.114] GetFileType (hFile=0x230) returned 0x1 [0084.114] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.169] SetErrorMode (uMode=0x1) returned 0x0 [0084.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac1a1fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac1eeca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x349d699f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x111e1)) returned 1 [0084.169] SetErrorMode (uMode=0x0) returned 0x1 [0084.170] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.partially.cryptonar")) returned 1 [0084.171] SetErrorMode (uMode=0x1) returned 0x0 [0084.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.171] SetErrorMode (uMode=0x0) returned 0x1 [0084.171] GetFileType (hFile=0x230) returned 0x1 [0084.171] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.186] SetErrorMode (uMode=0x1) returned 0x0 [0084.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac23e44, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac2b21a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34a22ff3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a258)) returned 1 [0084.187] SetErrorMode (uMode=0x0) returned 0x1 [0084.187] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.partially.cryptonar")) returned 1 [0084.188] SetErrorMode (uMode=0x1) returned 0x0 [0084.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.189] SetErrorMode (uMode=0x0) returned 0x1 [0084.189] GetFileType (hFile=0x230) returned 0x1 [0084.189] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.543] SetErrorMode (uMode=0x1) returned 0x0 [0084.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac3289f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac34e5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34d6a261, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xce17)) returned 1 [0084.544] SetErrorMode (uMode=0x0) returned 0x1 [0084.544] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.partially.cryptonar")) returned 1 [0084.545] SetErrorMode (uMode=0x1) returned 0x0 [0084.545] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.545] SetErrorMode (uMode=0x0) returned 0x1 [0084.545] GetFileType (hFile=0x230) returned 0x1 [0084.545] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.579] SetErrorMode (uMode=0x1) returned 0x0 [0084.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac9b86e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac9de0a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34ddc937, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc878)) returned 1 [0084.580] SetErrorMode (uMode=0x0) returned 0x1 [0084.580] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.partially.cryptonar")) returned 1 [0084.581] SetErrorMode (uMode=0x1) returned 0x0 [0084.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.582] SetErrorMode (uMode=0x0) returned 0x1 [0084.582] GetFileType (hFile=0x230) returned 0x1 [0084.582] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.583] SetErrorMode (uMode=0x1) returned 0x0 [0084.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aca54a9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aca533a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34ddc937, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc26)) returned 1 [0084.583] SetErrorMode (uMode=0x0) returned 0x1 [0084.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.partially.cryptonar")) returned 1 [0084.584] SetErrorMode (uMode=0x1) returned 0x0 [0084.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.584] SetErrorMode (uMode=0x0) returned 0x1 [0084.584] GetFileType (hFile=0x230) returned 0x1 [0084.584] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.653] SetErrorMode (uMode=0x1) returned 0x0 [0084.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acaa2c8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acaa15a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34e9791d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x38a8)) returned 1 [0084.654] SetErrorMode (uMode=0x0) returned 0x1 [0084.654] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.partially.cryptonar")) returned 1 [0084.655] SetErrorMode (uMode=0x1) returned 0x0 [0084.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.656] SetErrorMode (uMode=0x0) returned 0x1 [0084.656] GetFileType (hFile=0x230) returned 0x1 [0084.656] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.686] SetErrorMode (uMode=0x1) returned 0x0 [0084.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acaf0ea, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acb64aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34ee3e0c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2b20)) returned 1 [0084.686] SetErrorMode (uMode=0x0) returned 0x1 [0084.686] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.partially.cryptonar")) returned 1 [0084.687] SetErrorMode (uMode=0x1) returned 0x0 [0084.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.688] SetErrorMode (uMode=0x0) returned 0x1 [0084.688] GetFileType (hFile=0x230) returned 0x1 [0084.688] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.701] SetErrorMode (uMode=0x1) returned 0x0 [0084.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a6ca2d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acbd9da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34f0a085, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1 [0084.701] SetErrorMode (uMode=0x0) returned 0x1 [0084.701] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.partially.cryptonar")) returned 1 [0084.702] SetErrorMode (uMode=0x1) returned 0x0 [0084.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.703] SetErrorMode (uMode=0x0) returned 0x1 [0084.703] GetFileType (hFile=0x230) returned 0x1 [0084.703] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.751] SetErrorMode (uMode=0x1) returned 0x0 [0084.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acc2977, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acc9d2a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34f7c818, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46039)) returned 1 [0084.751] SetErrorMode (uMode=0x0) returned 0x1 [0084.751] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.partially.cryptonar")) returned 1 [0084.752] SetErrorMode (uMode=0x1) returned 0x0 [0084.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.755] SetErrorMode (uMode=0x0) returned 0x1 [0084.755] GetFileType (hFile=0x230) returned 0x1 [0084.755] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.779] SetErrorMode (uMode=0x1) returned 0x0 [0084.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7accecc7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acd125a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x34fc9d2e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7c33)) returned 1 [0084.779] SetErrorMode (uMode=0x0) returned 0x1 [0084.779] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.partially.cryptonar")) returned 1 [0084.781] SetErrorMode (uMode=0x1) returned 0x0 [0084.781] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.781] SetErrorMode (uMode=0x0) returned 0x1 [0084.781] GetFileType (hFile=0x230) returned 0x1 [0084.781] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.849] SetErrorMode (uMode=0x1) returned 0x0 [0084.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acd61f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acdd5aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x35061708, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb)) returned 1 [0084.850] SetErrorMode (uMode=0x0) returned 0x1 [0084.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.partially.cryptonar")) returned 1 [0084.851] SetErrorMode (uMode=0x1) returned 0x0 [0084.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.851] SetErrorMode (uMode=0x0) returned 0x1 [0084.851] GetFileType (hFile=0x230) returned 0x1 [0084.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.924] SetErrorMode (uMode=0x1) returned 0x0 [0084.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ace4c5a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acee71a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x35120236, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x794cf)) returned 1 [0084.924] SetErrorMode (uMode=0x0) returned 0x1 [0084.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.partially.cryptonar")) returned 1 [0084.926] SetErrorMode (uMode=0x1) returned 0x0 [0084.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.926] SetErrorMode (uMode=0x0) returned 0x1 [0084.926] GetFileType (hFile=0x230) returned 0x1 [0084.926] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.928] SetErrorMode (uMode=0x1) returned 0x0 [0084.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acf5dd6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7acf5c4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x35120236, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x941)) returned 1 [0084.928] SetErrorMode (uMode=0x0) returned 0x1 [0084.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.partially.cryptonar")) returned 1 [0084.929] SetErrorMode (uMode=0x1) returned 0x0 [0084.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.932] SetErrorMode (uMode=0x0) returned 0x1 [0084.932] GetFileType (hFile=0x230) returned 0x1 [0084.932] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0084.972] SetErrorMode (uMode=0x1) returned 0x0 [0084.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac41315, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac45fca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3519295c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d)) returned 1 [0084.972] SetErrorMode (uMode=0x0) returned 0x1 [0084.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.partially.cryptonar")) returned 1 [0084.973] SetErrorMode (uMode=0x1) returned 0x0 [0084.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0084.974] SetErrorMode (uMode=0x0) returned 0x1 [0084.974] GetFileType (hFile=0x230) returned 0x1 [0084.974] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0085.020] SetErrorMode (uMode=0x1) returned 0x0 [0085.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac4af4d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac4d4fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x35204ff3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x221da)) returned 1 [0085.021] SetErrorMode (uMode=0x0) returned 0x1 [0085.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.partially.cryptonar")) returned 1 [0085.022] SetErrorMode (uMode=0x1) returned 0x0 [0085.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0085.022] SetErrorMode (uMode=0x0) returned 0x1 [0085.022] GetFileType (hFile=0x230) returned 0x1 [0085.022] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0085.023] SetErrorMode (uMode=0x1) returned 0x0 [0085.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac54b7f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac54a2a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x35204ff3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1 [0085.023] SetErrorMode (uMode=0x0) returned 0x1 [0085.023] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.partially.cryptonar")) returned 1 [0085.024] SetErrorMode (uMode=0x1) returned 0x0 [0085.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0085.025] SetErrorMode (uMode=0x0) returned 0x1 [0085.025] GetFileType (hFile=0x230) returned 0x1 [0085.025] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0085.085] SetErrorMode (uMode=0x1) returned 0x0 [0085.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac599b1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac5bf5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3529d998, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1bef)) returned 1 [0085.085] SetErrorMode (uMode=0x0) returned 0x1 [0085.086] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.partially.cryptonar")) returned 1 [0085.086] SetErrorMode (uMode=0x1) returned 0x0 [0085.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0085.088] SetErrorMode (uMode=0x0) returned 0x1 [0085.088] GetFileType (hFile=0x230) returned 0x1 [0085.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0085.089] SetErrorMode (uMode=0x1) returned 0x0 [0085.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac60edf, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac60d7a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3529d998, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0085.089] SetErrorMode (uMode=0x0) returned 0x1 [0085.090] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.partially.cryptonar")) returned 1 [0085.091] SetErrorMode (uMode=0x1) returned 0x0 [0085.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0085.092] SetErrorMode (uMode=0x0) returned 0x1 [0085.092] GetFileType (hFile=0x230) returned 0x1 [0085.092] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0085.094] SetErrorMode (uMode=0x1) returned 0x0 [0085.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac6f946, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac6f7da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x352c3bea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x828)) returned 1 [0085.094] SetErrorMode (uMode=0x0) returned 0x1 [0085.094] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.partially.cryptonar")) returned 1 [0085.096] SetErrorMode (uMode=0x1) returned 0x0 [0085.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0085.097] SetErrorMode (uMode=0x0) returned 0x1 [0085.097] GetFileType (hFile=0x230) returned 0x1 [0085.097] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0085.098] SetErrorMode (uMode=0x1) returned 0x0 [0085.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac74772, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac745fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x352c3bea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0085.098] SetErrorMode (uMode=0x0) returned 0x1 [0085.098] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.partially.cryptonar")) returned 1 [0085.099] SetErrorMode (uMode=0x1) returned 0x0 [0085.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0085.100] SetErrorMode (uMode=0x0) returned 0x1 [0085.100] GetFileType (hFile=0x230) returned 0x1 [0085.100] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0085.101] SetErrorMode (uMode=0x1) returned 0x0 [0085.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac7bc91, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac7e23a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x352c3bea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1 [0085.102] SetErrorMode (uMode=0x0) returned 0x1 [0085.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.partially.cryptonar")) returned 1 [0085.103] SetErrorMode (uMode=0x1) returned 0x0 [0085.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0085.104] SetErrorMode (uMode=0x0) returned 0x1 [0085.104] GetFileType (hFile=0x230) returned 0x1 [0085.104] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0085.106] SetErrorMode (uMode=0x1) returned 0x0 [0085.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac858dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac8576a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x352e9d9d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x174c)) returned 1 [0085.106] SetErrorMode (uMode=0x0) returned 0x1 [0085.106] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.partially.cryptonar")) returned 1 [0085.108] SetErrorMode (uMode=0x1) returned 0x0 [0085.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0085.109] SetErrorMode (uMode=0x0) returned 0x1 [0085.109] GetFileType (hFile=0x230) returned 0x1 [0085.109] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0085.120] SetErrorMode (uMode=0x1) returned 0x0 [0085.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac96a4f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ac968da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x352e9d9d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x945)) returned 1 [0085.120] SetErrorMode (uMode=0x0) returned 0x1 [0085.120] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.partially.cryptonar")) returned 1 [0085.121] SetErrorMode (uMode=0x1) returned 0x0 [0085.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0085.122] SetErrorMode (uMode=0x0) returned 0x1 [0085.122] GetFileType (hFile=0x230) returned 0x1 [0085.122] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0085.128] SetErrorMode (uMode=0x1) returned 0x0 [0085.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a6f3af0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a6f61fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x35310081, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4827)) returned 1 [0085.128] SetErrorMode (uMode=0x0) returned 0x1 [0085.129] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.partially.cryptonar")) returned 1 [0085.129] SetErrorMode (uMode=0x1) returned 0x0 [0085.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0085.130] SetErrorMode (uMode=0x0) returned 0x1 [0085.130] GetFileType (hFile=0x230) returned 0x1 [0085.130] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0085.176] SetErrorMode (uMode=0x1) returned 0x0 [0085.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a702557, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a704c5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x353828ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45bf)) returned 1 [0085.176] SetErrorMode (uMode=0x0) returned 0x1 [0085.176] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.partially.cryptonar")) returned 1 [0085.177] SetErrorMode (uMode=0x1) returned 0x0 [0085.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0085.178] SetErrorMode (uMode=0x0) returned 0x1 [0085.178] GetFileType (hFile=0x230) returned 0x1 [0085.178] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.133] SetErrorMode (uMode=0x1) returned 0x0 [0087.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7136ca, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a715dca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36622d85, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b63)) returned 1 [0087.133] SetErrorMode (uMode=0x0) returned 0x1 [0087.133] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.partially.cryptonar")) returned 1 [0087.134] SetErrorMode (uMode=0x1) returned 0x0 [0087.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.135] SetErrorMode (uMode=0x0) returned 0x1 [0087.135] GetFileType (hFile=0x230) returned 0x1 [0087.135] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.274] SetErrorMode (uMode=0x1) returned 0x0 [0087.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a71fa1e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a71fa0a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3677a292, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52cb)) returned 1 [0087.275] SetErrorMode (uMode=0x0) returned 0x1 [0087.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.partially.cryptonar")) returned 1 [0087.276] SetErrorMode (uMode=0x1) returned 0x0 [0087.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.276] SetErrorMode (uMode=0x0) returned 0x1 [0087.277] GetFileType (hFile=0x230) returned 0x1 [0087.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.396] SetErrorMode (uMode=0x1) returned 0x0 [0087.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a72bd69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a72bd5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x368ab5d3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x405d)) returned 1 [0087.396] SetErrorMode (uMode=0x0) returned 0x1 [0087.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.partially.cryptonar")) returned 1 [0087.397] SetErrorMode (uMode=0x1) returned 0x0 [0087.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.398] SetErrorMode (uMode=0x0) returned 0x1 [0087.398] GetFileType (hFile=0x230) returned 0x1 [0087.398] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.491] SetErrorMode (uMode=0x1) returned 0x0 [0087.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a741cfe, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a741cea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3699036a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4029)) returned 1 [0087.491] SetErrorMode (uMode=0x0) returned 0x1 [0087.491] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.partially.cryptonar")) returned 1 [0087.493] SetErrorMode (uMode=0x1) returned 0x0 [0087.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.494] SetErrorMode (uMode=0x0) returned 0x1 [0087.494] GetFileType (hFile=0x230) returned 0x1 [0087.494] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.514] SetErrorMode (uMode=0x1) returned 0x0 [0087.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7889d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a78b0ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x369dc898, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f79)) returned 1 [0087.514] SetErrorMode (uMode=0x0) returned 0x1 [0087.514] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.partially.cryptonar")) returned 1 [0087.516] SetErrorMode (uMode=0x1) returned 0x0 [0087.516] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.517] SetErrorMode (uMode=0x0) returned 0x1 [0087.517] GetFileType (hFile=0x230) returned 0x1 [0087.517] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.618] SetErrorMode (uMode=0x1) returned 0x0 [0087.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a794d3b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a79741a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36ac1775, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x406f)) returned 1 [0087.619] SetErrorMode (uMode=0x0) returned 0x1 [0087.619] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.partially.cryptonar")) returned 1 [0087.620] SetErrorMode (uMode=0x1) returned 0x0 [0087.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.621] SetErrorMode (uMode=0x0) returned 0x1 [0087.621] GetFileType (hFile=0x230) returned 0x1 [0087.621] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.656] SetErrorMode (uMode=0x1) returned 0x0 [0087.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7a379c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7a5e7a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36b33f7a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4afe)) returned 1 [0087.656] SetErrorMode (uMode=0x0) returned 0x1 [0087.656] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.partially.cryptonar")) returned 1 [0087.657] SetErrorMode (uMode=0x1) returned 0x0 [0087.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.658] SetErrorMode (uMode=0x0) returned 0x1 [0087.658] GetFileType (hFile=0x230) returned 0x1 [0087.658] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.665] SetErrorMode (uMode=0x1) returned 0x0 [0087.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7b21f6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7b48da, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36b33f7a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a)) returned 1 [0087.666] SetErrorMode (uMode=0x0) returned 0x1 [0087.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.partially.cryptonar")) returned 1 [0087.667] SetErrorMode (uMode=0x1) returned 0x0 [0087.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.668] SetErrorMode (uMode=0x0) returned 0x1 [0087.668] GetFileType (hFile=0x230) returned 0x1 [0087.668] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.670] SetErrorMode (uMode=0x1) returned 0x0 [0087.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7be553, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7c0c2a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36b5a22c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x404b)) returned 1 [0087.671] SetErrorMode (uMode=0x0) returned 0x1 [0087.671] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.partially.cryptonar")) returned 1 [0087.672] SetErrorMode (uMode=0x1) returned 0x0 [0087.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.673] SetErrorMode (uMode=0x0) returned 0x1 [0087.673] GetFileType (hFile=0x230) returned 0x1 [0087.673] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.675] SetErrorMode (uMode=0x1) returned 0x0 [0087.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7ca8a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7ccf7a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36b5a22c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e85)) returned 1 [0087.675] SetErrorMode (uMode=0x0) returned 0x1 [0087.676] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.partially.cryptonar")) returned 1 [0087.678] SetErrorMode (uMode=0x1) returned 0x0 [0087.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.679] SetErrorMode (uMode=0x0) returned 0x1 [0087.679] GetFileType (hFile=0x230) returned 0x1 [0087.679] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.681] SetErrorMode (uMode=0x1) returned 0x0 [0087.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7de12d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7e07fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36b5a22c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46f5)) returned 1 [0087.681] SetErrorMode (uMode=0x0) returned 0x1 [0087.681] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.partially.cryptonar")) returned 1 [0087.683] SetErrorMode (uMode=0x1) returned 0x0 [0087.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.684] SetErrorMode (uMode=0x0) returned 0x1 [0087.684] GetFileType (hFile=0x230) returned 0x1 [0087.684] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.700] SetErrorMode (uMode=0x1) returned 0x0 [0087.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7ea47b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7ea43a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36ba6323, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c)) returned 1 [0087.700] SetErrorMode (uMode=0x0) returned 0x1 [0087.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.partially.cryptonar")) returned 1 [0087.701] SetErrorMode (uMode=0x1) returned 0x0 [0087.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.702] SetErrorMode (uMode=0x0) returned 0x1 [0087.702] GetFileType (hFile=0x230) returned 0x1 [0087.702] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.725] SetErrorMode (uMode=0x1) returned 0x0 [0087.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a7f67c9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a7fb5aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36bce5e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4082)) returned 1 [0087.725] SetErrorMode (uMode=0x0) returned 0x1 [0087.725] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.partially.cryptonar")) returned 1 [0087.726] SetErrorMode (uMode=0x1) returned 0x0 [0087.726] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.727] SetErrorMode (uMode=0x0) returned 0x1 [0087.727] GetFileType (hFile=0x230) returned 0x1 [0087.727] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.796] SetErrorMode (uMode=0x1) returned 0x0 [0087.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a807942, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8078fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36c6501b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x419f)) returned 1 [0087.796] SetErrorMode (uMode=0x0) returned 0x1 [0087.796] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.partially.cryptonar")) returned 1 [0087.797] SetErrorMode (uMode=0x1) returned 0x0 [0087.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.798] SetErrorMode (uMode=0x0) returned 0x1 [0087.798] GetFileType (hFile=0x230) returned 0x1 [0087.798] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.835] SetErrorMode (uMode=0x1) returned 0x0 [0087.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a811587, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a813c4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36cd78a4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5079)) returned 1 [0087.835] SetErrorMode (uMode=0x0) returned 0x1 [0087.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.partially.cryptonar")) returned 1 [0087.837] SetErrorMode (uMode=0x1) returned 0x0 [0087.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.837] SetErrorMode (uMode=0x0) returned 0x1 [0087.838] GetFileType (hFile=0x230) returned 0x1 [0087.838] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.867] SetErrorMode (uMode=0x1) returned 0x0 [0087.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a822716, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a824dba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36d23bc1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50f7)) returned 1 [0087.867] SetErrorMode (uMode=0x0) returned 0x1 [0087.867] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.partially.cryptonar")) returned 1 [0087.868] SetErrorMode (uMode=0x1) returned 0x0 [0087.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.869] SetErrorMode (uMode=0x0) returned 0x1 [0087.869] GetFileType (hFile=0x230) returned 0x1 [0087.869] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.888] SetErrorMode (uMode=0x1) returned 0x0 [0087.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a82c33f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a82e9fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36d7004c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2)) returned 1 [0087.888] SetErrorMode (uMode=0x0) returned 0x1 [0087.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.partially.cryptonar")) returned 1 [0087.889] SetErrorMode (uMode=0x1) returned 0x0 [0087.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.890] SetErrorMode (uMode=0x0) returned 0x1 [0087.890] GetFileType (hFile=0x230) returned 0x1 [0087.890] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.912] SetErrorMode (uMode=0x1) returned 0x0 [0087.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a83867a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a83863a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36d96382, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1 [0087.912] SetErrorMode (uMode=0x0) returned 0x1 [0087.912] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.partially.cryptonar")) returned 1 [0087.914] SetErrorMode (uMode=0x1) returned 0x0 [0087.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.915] SetErrorMode (uMode=0x0) returned 0x1 [0087.915] GetFileType (hFile=0x230) returned 0x1 [0087.915] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.965] SetErrorMode (uMode=0x1) returned 0x0 [0087.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a855b57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a85820a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36e2ecc3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d)) returned 1 [0087.966] SetErrorMode (uMode=0x0) returned 0x1 [0087.966] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.partially.cryptonar")) returned 1 [0087.967] SetErrorMode (uMode=0x1) returned 0x0 [0087.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.967] SetErrorMode (uMode=0x0) returned 0x1 [0087.967] GetFileType (hFile=0x230) returned 0x1 [0087.967] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.972] SetErrorMode (uMode=0x1) returned 0x0 [0087.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a861eab, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a861e4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36e2ecc3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c)) returned 1 [0087.972] SetErrorMode (uMode=0x0) returned 0x1 [0087.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.partially.cryptonar")) returned 1 [0087.973] SetErrorMode (uMode=0x1) returned 0x0 [0087.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.974] SetErrorMode (uMode=0x0) returned 0x1 [0087.974] GetFileType (hFile=0x230) returned 0x1 [0087.974] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.976] SetErrorMode (uMode=0x1) returned 0x0 [0087.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a870915, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a872fba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36e2ecc3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5074)) returned 1 [0087.976] SetErrorMode (uMode=0x0) returned 0x1 [0087.976] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.partially.cryptonar")) returned 1 [0087.978] SetErrorMode (uMode=0x1) returned 0x0 [0087.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0087.978] SetErrorMode (uMode=0x0) returned 0x1 [0087.978] GetFileType (hFile=0x230) returned 0x1 [0087.978] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0087.991] SetErrorMode (uMode=0x1) returned 0x0 [0087.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a87a553, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a87cbfa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36e54e6d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x447a)) returned 1 [0087.991] SetErrorMode (uMode=0x0) returned 0x1 [0087.991] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.partially.cryptonar")) returned 1 [0088.001] SetErrorMode (uMode=0x1) returned 0x0 [0088.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.002] SetErrorMode (uMode=0x0) returned 0x1 [0088.002] GetFileType (hFile=0x230) returned 0x1 [0088.002] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.024] SetErrorMode (uMode=0x1) returned 0x0 [0088.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8868a4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a888f4a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36ea13cc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x55a3)) returned 1 [0088.024] SetErrorMode (uMode=0x0) returned 0x1 [0088.025] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.partially.cryptonar")) returned 1 [0088.026] SetErrorMode (uMode=0x1) returned 0x0 [0088.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.026] SetErrorMode (uMode=0x0) returned 0x1 [0088.026] GetFileType (hFile=0x230) returned 0x1 [0088.026] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.082] SetErrorMode (uMode=0x1) returned 0x0 [0088.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a89530b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8979aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36f39d54, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x403a)) returned 1 [0088.083] SetErrorMode (uMode=0x0) returned 0x1 [0088.083] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.partially.cryptonar")) returned 1 [0088.084] SetErrorMode (uMode=0x1) returned 0x0 [0088.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.085] SetErrorMode (uMode=0x0) returned 0x1 [0088.085] GetFileType (hFile=0x230) returned 0x1 [0088.085] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.098] SetErrorMode (uMode=0x1) returned 0x0 [0088.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8a165f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8a640a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x36f5fe97, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x416b)) returned 1 [0088.098] SetErrorMode (uMode=0x0) returned 0x1 [0088.098] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.partially.cryptonar")) returned 1 [0088.099] SetErrorMode (uMode=0x1) returned 0x0 [0088.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.100] SetErrorMode (uMode=0x0) returned 0x1 [0088.100] GetFileType (hFile=0x230) returned 0x1 [0088.100] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.170] SetErrorMode (uMode=0x1) returned 0x0 [0088.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8b27d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8b275a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37020fb0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x41bf)) returned 1 [0088.170] SetErrorMode (uMode=0x0) returned 0x1 [0088.171] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.partially.cryptonar")) returned 1 [0088.172] SetErrorMode (uMode=0x1) returned 0x0 [0088.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.173] SetErrorMode (uMode=0x0) returned 0x1 [0088.173] GetFileType (hFile=0x230) returned 0x1 [0088.173] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.188] SetErrorMode (uMode=0x1) returned 0x0 [0088.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8beb26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8beaaa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37044db4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x583f)) returned 1 [0088.189] SetErrorMode (uMode=0x0) returned 0x1 [0088.189] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.partially.cryptonar")) returned 1 [0088.191] SetErrorMode (uMode=0x1) returned 0x0 [0088.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.192] SetErrorMode (uMode=0x0) returned 0x1 [0088.192] GetFileType (hFile=0x230) returned 0x1 [0088.192] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.312] SetErrorMode (uMode=0x1) returned 0x0 [0088.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8c8767, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8c86ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37176009, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5224)) returned 1 [0088.312] SetErrorMode (uMode=0x0) returned 0x1 [0088.312] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.partially.cryptonar")) returned 1 [0088.313] SetErrorMode (uMode=0x1) returned 0x0 [0088.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.313] SetErrorMode (uMode=0x0) returned 0x1 [0088.313] GetFileType (hFile=0x230) returned 0x1 [0088.313] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.317] SetErrorMode (uMode=0x1) returned 0x0 [0088.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8d23a6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8d232a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37176009, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b)) returned 1 [0088.318] SetErrorMode (uMode=0x0) returned 0x1 [0088.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.partially.cryptonar")) returned 1 [0088.319] SetErrorMode (uMode=0x1) returned 0x0 [0088.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.320] SetErrorMode (uMode=0x0) returned 0x1 [0088.320] GetFileType (hFile=0x230) returned 0x1 [0088.320] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.321] SetErrorMode (uMode=0x1) returned 0x0 [0088.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8dbfed, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8dbf6a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37176009, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc)) returned 1 [0088.322] SetErrorMode (uMode=0x0) returned 0x1 [0088.322] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.partially.cryptonar")) returned 1 [0088.323] SetErrorMode (uMode=0x1) returned 0x0 [0088.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.323] SetErrorMode (uMode=0x0) returned 0x1 [0088.323] GetFileType (hFile=0x230) returned 0x1 [0088.323] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.325] SetErrorMode (uMode=0x1) returned 0x0 [0088.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8e8332, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8ea9ca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3719c228, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f45)) returned 1 [0088.326] SetErrorMode (uMode=0x0) returned 0x1 [0088.326] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.partially.cryptonar")) returned 1 [0088.327] SetErrorMode (uMode=0x1) returned 0x0 [0088.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.328] SetErrorMode (uMode=0x0) returned 0x1 [0088.328] GetFileType (hFile=0x230) returned 0x1 [0088.328] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.374] SetErrorMode (uMode=0x1) returned 0x0 [0088.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8f1f79, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a8f460a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3720fb53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7)) returned 1 [0088.374] SetErrorMode (uMode=0x0) returned 0x1 [0088.374] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.partially.cryptonar")) returned 1 [0088.375] SetErrorMode (uMode=0x1) returned 0x0 [0088.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.376] SetErrorMode (uMode=0x0) returned 0x1 [0088.376] GetFileType (hFile=0x230) returned 0x1 [0088.376] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.582] SetErrorMode (uMode=0x1) returned 0x0 [0088.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a905802, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a90577a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3740513e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0088.582] SetErrorMode (uMode=0x0) returned 0x1 [0088.582] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.partially.cryptonar")) returned 1 [0088.583] SetErrorMode (uMode=0x1) returned 0x0 [0088.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.584] SetErrorMode (uMode=0x0) returned 0x1 [0088.584] GetFileType (hFile=0x230) returned 0x1 [0088.584] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.630] SetErrorMode (uMode=0x1) returned 0x0 [0088.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a90cd37, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a90ccaa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37470f62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0088.630] SetErrorMode (uMode=0x0) returned 0x1 [0088.630] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json.partially.cryptonar")) returned 1 [0088.631] SetErrorMode (uMode=0x1) returned 0x0 [0088.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.632] SetErrorMode (uMode=0x0) returned 0x1 [0088.632] GetFileType (hFile=0x230) returned 0x1 [0088.632] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.697] SetErrorMode (uMode=0x1) returned 0x0 [0088.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9142aa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a9168ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x375098a7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0088.698] SetErrorMode (uMode=0x0) returned 0x1 [0088.698] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json.partially.cryptonar")) returned 1 [0088.699] SetErrorMode (uMode=0x1) returned 0x0 [0088.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.700] SetErrorMode (uMode=0x0) returned 0x1 [0088.700] GetFileType (hFile=0x230) returned 0x1 [0088.700] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0088.817] SetErrorMode (uMode=0x1) returned 0x0 [0088.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a94c4dc, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a94eb5a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3763ab4a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40db)) returned 1 [0088.818] SetErrorMode (uMode=0x0) returned 0x1 [0088.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.partially.cryptonar")) returned 1 [0088.819] SetErrorMode (uMode=0x1) returned 0x0 [0088.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0088.820] SetErrorMode (uMode=0x0) returned 0x1 [0088.820] GetFileType (hFile=0x230) returned 0x1 [0088.820] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.004] SetErrorMode (uMode=0x1) returned 0x0 [0089.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a95d65e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a95fcca, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x378047de, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x490e)) returned 1 [0089.005] SetErrorMode (uMode=0x0) returned 0x1 [0089.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.partially.cryptonar")) returned 1 [0089.006] SetErrorMode (uMode=0x1) returned 0x0 [0089.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.007] SetErrorMode (uMode=0x0) returned 0x1 [0089.007] GetFileType (hFile=0x230) returned 0x1 [0089.007] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.204] SetErrorMode (uMode=0x1) returned 0x0 [0089.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9699b2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a96990a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x379a8069, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40fd)) returned 1 [0089.205] SetErrorMode (uMode=0x0) returned 0x1 [0089.205] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.partially.cryptonar")) returned 1 [0089.337] SetErrorMode (uMode=0x1) returned 0x0 [0089.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.341] SetErrorMode (uMode=0x0) returned 0x1 [0089.350] GetFileType (hFile=0x230) returned 0x1 [0089.350] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.387] SetErrorMode (uMode=0x1) returned 0x0 [0089.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a975d03, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a97836a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37bbe0aa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x407a)) returned 1 [0089.387] SetErrorMode (uMode=0x0) returned 0x1 [0089.387] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.partially.cryptonar")) returned 1 [0089.388] SetErrorMode (uMode=0x1) returned 0x0 [0089.388] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.389] SetErrorMode (uMode=0x0) returned 0x1 [0089.389] GetFileType (hFile=0x230) returned 0x1 [0089.389] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.407] SetErrorMode (uMode=0x1) returned 0x0 [0089.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9931bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7a99582a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37be4564, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49c1)) returned 1 [0089.408] SetErrorMode (uMode=0x0) returned 0x1 [0089.408] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.partially.cryptonar")) returned 1 [0089.409] SetErrorMode (uMode=0x1) returned 0x0 [0089.409] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.409] SetErrorMode (uMode=0x0) returned 0x1 [0089.409] GetFileType (hFile=0x230) returned 0x1 [0089.409] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.435] SetErrorMode (uMode=0x1) returned 0x0 [0089.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a99ce0c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa517fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37c30949, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e96)) returned 1 [0089.436] SetErrorMode (uMode=0x0) returned 0x1 [0089.436] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.partially.cryptonar")) returned 1 [0089.437] SetErrorMode (uMode=0x1) returned 0x0 [0089.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.437] SetErrorMode (uMode=0x0) returned 0x1 [0089.437] GetFileType (hFile=0x230) returned 0x1 [0089.437] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.529] SetErrorMode (uMode=0x1) returned 0x0 [0089.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa5dc2e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa6025a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37d1565e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b)) returned 1 [0089.529] SetErrorMode (uMode=0x0) returned 0x1 [0089.529] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.partially.cryptonar")) returned 1 [0089.530] SetErrorMode (uMode=0x1) returned 0x0 [0089.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.530] SetErrorMode (uMode=0x0) returned 0x1 [0089.530] GetFileType (hFile=0x230) returned 0x1 [0089.530] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.615] SetErrorMode (uMode=0x1) returned 0x0 [0089.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa6ed9b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa6ecba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37deb905, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x563d)) returned 1 [0089.616] SetErrorMode (uMode=0x0) returned 0x1 [0089.616] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.partially.cryptonar")) returned 1 [0089.617] SetErrorMode (uMode=0x1) returned 0x0 [0089.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.618] SetErrorMode (uMode=0x0) returned 0x1 [0089.618] GetFileType (hFile=0x230) returned 0x1 [0089.618] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.643] SetErrorMode (uMode=0x1) returned 0x0 [0089.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa789e2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa7b00a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37e2a535, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5593)) returned 1 [0089.643] SetErrorMode (uMode=0x0) returned 0x1 [0089.643] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.partially.cryptonar")) returned 1 [0089.644] SetErrorMode (uMode=0x1) returned 0x0 [0089.644] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.644] SetErrorMode (uMode=0x0) returned 0x1 [0089.644] GetFileType (hFile=0x230) returned 0x1 [0089.644] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.680] SetErrorMode (uMode=0x1) returned 0x0 [0089.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa87449, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa89a6a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37e76c58, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f64)) returned 1 [0089.680] SetErrorMode (uMode=0x0) returned 0x1 [0089.680] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.partially.cryptonar")) returned 1 [0089.681] SetErrorMode (uMode=0x1) returned 0x0 [0089.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.682] SetErrorMode (uMode=0x0) returned 0x1 [0089.682] GetFileType (hFile=0x230) returned 0x1 [0089.682] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.701] SetErrorMode (uMode=0x1) returned 0x0 [0089.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aa9acc6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aa9abda, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37e9ce5e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x404e)) returned 1 [0089.701] SetErrorMode (uMode=0x0) returned 0x1 [0089.701] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.partially.cryptonar")) returned 1 [0089.702] SetErrorMode (uMode=0x1) returned 0x0 [0089.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.702] SetErrorMode (uMode=0x0) returned 0x1 [0089.702] GetFileType (hFile=0x230) returned 0x1 [0089.702] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.767] SetErrorMode (uMode=0x1) returned 0x0 [0089.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aaa702c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aaa963a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37f35871, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48f1)) returned 1 [0089.769] SetErrorMode (uMode=0x0) returned 0x1 [0089.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.partially.cryptonar")) returned 1 [0089.770] SetErrorMode (uMode=0x1) returned 0x0 [0089.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.771] SetErrorMode (uMode=0x0) returned 0x1 [0089.771] GetFileType (hFile=0x230) returned 0x1 [0089.771] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.773] SetErrorMode (uMode=0x1) returned 0x0 [0089.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aab0c61, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aab327a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37f5b9a9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x426b)) returned 1 [0089.773] SetErrorMode (uMode=0x0) returned 0x1 [0089.773] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.partially.cryptonar")) returned 1 [0089.774] SetErrorMode (uMode=0x1) returned 0x0 [0089.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.774] SetErrorMode (uMode=0x0) returned 0x1 [0089.774] GetFileType (hFile=0x230) returned 0x1 [0089.774] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.776] SetErrorMode (uMode=0x1) returned 0x0 [0089.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aac1dd8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aac43ea, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37f5b9a9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d11)) returned 1 [0089.776] SetErrorMode (uMode=0x0) returned 0x1 [0089.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.partially.cryptonar")) returned 1 [0089.777] SetErrorMode (uMode=0x1) returned 0x0 [0089.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.777] SetErrorMode (uMode=0x0) returned 0x1 [0089.777] GetFileType (hFile=0x230) returned 0x1 [0089.777] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.801] SetErrorMode (uMode=0x1) returned 0x0 [0089.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aad0838, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7aad073a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x37fa7f67, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d72)) returned 1 [0089.801] SetErrorMode (uMode=0x0) returned 0x1 [0089.801] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json.partially.cryptonar")) returned 1 [0089.802] SetErrorMode (uMode=0x1) returned 0x0 [0089.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.803] SetErrorMode (uMode=0x0) returned 0x1 [0089.803] GetFileType (hFile=0x230) returned 0x1 [0089.803] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.894] SetErrorMode (uMode=0x1) returned 0x0 [0089.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bdade8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7bdade8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3808cd64, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7299)) returned 1 [0089.894] SetErrorMode (uMode=0x0) returned 0x1 [0089.894] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.partially.cryptonar")) returned 1 [0089.895] SetErrorMode (uMode=0x1) returned 0x0 [0089.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.896] SetErrorMode (uMode=0x0) returned 0x1 [0089.896] GetFileType (hFile=0x230) returned 0x1 [0089.896] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.910] SetErrorMode (uMode=0x1) returned 0x0 [0089.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acfd305, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7ad046aa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x380ba45d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e39)) returned 1 [0089.911] SetErrorMode (uMode=0x0) returned 0x1 [0089.911] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.partially.cryptonar")) returned 1 [0089.912] SetErrorMode (uMode=0x1) returned 0x0 [0089.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.914] SetErrorMode (uMode=0x0) returned 0x1 [0089.914] GetFileType (hFile=0x230) returned 0x1 [0089.914] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.915] SetErrorMode (uMode=0x1) returned 0x0 [0089.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76727b97, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76727b97, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x380ba45d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1 [0089.915] SetErrorMode (uMode=0x0) returned 0x1 [0089.915] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\000003.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\000003.log.partially.cryptonar")) returned 1 [0089.916] SetErrorMode (uMode=0x1) returned 0x0 [0089.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.917] SetErrorMode (uMode=0x0) returned 0x1 [0089.917] GetFileType (hFile=0x230) returned 0x1 [0089.917] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.918] SetErrorMode (uMode=0x1) returned 0x0 [0089.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765be5f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765be5f9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x380ba45d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0089.919] SetErrorMode (uMode=0x0) returned 0x1 [0089.919] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\CURRENT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\current.partially.cryptonar")) returned 1 [0089.920] SetErrorMode (uMode=0x1) returned 0x0 [0089.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.920] SetErrorMode (uMode=0x0) returned 0x1 [0089.920] GetFileType (hFile=0x230) returned 0x1 [0089.921] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.921] SetErrorMode (uMode=0x1) returned 0x0 [0089.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765bbee9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765bbee9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x765bbee9, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.921] SetErrorMode (uMode=0x0) returned 0x1 [0089.921] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOCK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\lock.partially.cryptonar")) returned 1 [0089.922] SetErrorMode (uMode=0x1) returned 0x0 [0089.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.923] SetErrorMode (uMode=0x0) returned 0x1 [0089.923] GetFileType (hFile=0x230) returned 0x1 [0089.923] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.924] SetErrorMode (uMode=0x1) returned 0x0 [0089.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765bbee9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765bbee9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x380d92ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb5)) returned 1 [0089.924] SetErrorMode (uMode=0x0) returned 0x1 [0089.924] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\LOG.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\log.partially.cryptonar")) returned 1 [0089.925] SetErrorMode (uMode=0x1) returned 0x0 [0089.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.926] SetErrorMode (uMode=0x0) returned 0x1 [0089.926] GetFileType (hFile=0x230) returned 0x1 [0089.926] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.927] SetErrorMode (uMode=0x1) returned 0x0 [0089.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765be5f9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x765be5f9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x380d92ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17)) returned 1 [0089.927] SetErrorMode (uMode=0x0) returned 0x1 [0089.927] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.com_0.indexeddb.leveldb\\MANIFEST-000001.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.com_0.indexeddb.leveldb\\manifest-000001.partially.cryptonar")) returned 1 [0089.928] SetErrorMode (uMode=0x1) returned 0x0 [0089.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.932] SetErrorMode (uMode=0x0) returned 0x1 [0089.932] GetFileType (hFile=0x230) returned 0x1 [0089.933] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.935] SetErrorMode (uMode=0x1) returned 0x0 [0089.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb774fc44, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb774fc44, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x380d92ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1dc)) returned 1 [0089.935] SetErrorMode (uMode=0x0) returned 0x1 [0089.935] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\000003.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\000003.log.partially.cryptonar")) returned 1 [0089.936] SetErrorMode (uMode=0x1) returned 0x0 [0089.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.938] SetErrorMode (uMode=0x0) returned 0x1 [0089.938] GetFileType (hFile=0x230) returned 0x1 [0089.938] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.939] SetErrorMode (uMode=0x1) returned 0x0 [0089.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76e1e56, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76e1e56, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x380ff4ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0089.939] SetErrorMode (uMode=0x0) returned 0x1 [0089.939] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\CURRENT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\current.partially.cryptonar")) returned 1 [0089.940] SetErrorMode (uMode=0x1) returned 0x0 [0089.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.941] SetErrorMode (uMode=0x0) returned 0x1 [0089.941] GetFileType (hFile=0x230) returned 0x1 [0089.941] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.941] SetErrorMode (uMode=0x1) returned 0x0 [0089.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76e1e56, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76e1e56, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xb76e1e56, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.941] SetErrorMode (uMode=0x0) returned 0x1 [0089.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOCK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\lock.partially.cryptonar")) returned 1 [0089.942] SetErrorMode (uMode=0x1) returned 0x0 [0089.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.944] SetErrorMode (uMode=0x0) returned 0x1 [0089.944] GetFileType (hFile=0x230) returned 0x1 [0089.944] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.946] SetErrorMode (uMode=0x1) returned 0x0 [0089.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76df73d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76245e85, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x380ff4ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0089.946] SetErrorMode (uMode=0x0) returned 0x1 [0089.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.partially.cryptonar")) returned 1 [0089.947] SetErrorMode (uMode=0x1) returned 0x0 [0089.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.old"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.948] SetErrorMode (uMode=0x0) returned 0x1 [0089.948] GetFileType (hFile=0x230) returned 0x1 [0089.948] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.949] SetErrorMode (uMode=0x1) returned 0x0 [0089.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76df73d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76df73d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x380ff4ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1 [0089.949] SetErrorMode (uMode=0x0) returned 0x1 [0089.950] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\LOG.old.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\log.old.partially.cryptonar")) returned 1 [0089.951] SetErrorMode (uMode=0x1) returned 0x0 [0089.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.951] SetErrorMode (uMode=0x0) returned 0x1 [0089.951] GetFileType (hFile=0x230) returned 0x1 [0089.951] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.953] SetErrorMode (uMode=0x1) returned 0x0 [0089.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76e1e56, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb76e1e56, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x380ff4ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17)) returned 1 [0089.953] SetErrorMode (uMode=0x0) returned 0x1 [0089.953] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\IndexedDB\\https_www.google.de_0.indexeddb.leveldb\\MANIFEST-000001.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\indexeddb\\https_www.google.de_0.indexeddb.leveldb\\manifest-000001.partially.cryptonar")) returned 1 [0089.954] SetErrorMode (uMode=0x1) returned 0x0 [0089.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\883.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.955] SetErrorMode (uMode=0x0) returned 0x1 [0089.955] GetFileType (hFile=0x230) returned 0x1 [0089.955] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.955] SetErrorMode (uMode=0x1) returned 0x0 [0089.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\883.tmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e224a9, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x77e224a9, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x77e224a9, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.956] SetErrorMode (uMode=0x0) returned 0x1 [0089.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\883.tmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\883.tmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\883.tmp.partially.cryptonar")) returned 1 [0089.957] SetErrorMode (uMode=0x1) returned 0x0 [0089.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\884.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.958] SetErrorMode (uMode=0x0) returned 0x1 [0089.958] GetFileType (hFile=0x230) returned 0x1 [0089.958] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.958] SetErrorMode (uMode=0x1) returned 0x0 [0089.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\884.tmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77e224a9, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x77e224a9, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x77e224a9, ftLastWriteTime.dwHighDateTime=0x1d2d59f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.958] SetErrorMode (uMode=0x0) returned 0x1 [0089.958] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\884.tmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\884.tmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\884.tmp.partially.cryptonar")) returned 1 [0089.959] SetErrorMode (uMode=0x1) returned 0x0 [0089.960] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d07.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.960] SetErrorMode (uMode=0x0) returned 0x1 [0089.960] GetFileType (hFile=0x230) returned 0x1 [0089.960] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.960] SetErrorMode (uMode=0x1) returned 0x0 [0089.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d07.tmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b8240a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x90b8240a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x90b8240a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.961] SetErrorMode (uMode=0x0) returned 0x1 [0089.961] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d07.tmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D07.tmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d07.tmp.partially.cryptonar")) returned 1 [0089.962] SetErrorMode (uMode=0x1) returned 0x0 [0089.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d08.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.963] SetErrorMode (uMode=0x0) returned 0x1 [0089.963] GetFileType (hFile=0x230) returned 0x1 [0089.963] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.963] SetErrorMode (uMode=0x1) returned 0x0 [0089.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d08.tmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b8240a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x90b8240a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x90b8240a, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.964] SetErrorMode (uMode=0x0) returned 0x1 [0089.964] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d08.tmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D08.tmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d08.tmp.partially.cryptonar")) returned 1 [0089.970] SetErrorMode (uMode=0x1) returned 0x0 [0089.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d19.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.971] SetErrorMode (uMode=0x0) returned 0x1 [0089.971] GetFileType (hFile=0x230) returned 0x1 [0089.971] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.971] SetErrorMode (uMode=0x1) returned 0x0 [0089.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d19.tmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b84b32, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x90b84b32, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x90b84b32, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.971] SetErrorMode (uMode=0x0) returned 0x1 [0089.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d19.tmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\5D19.tmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\5d19.tmp.partially.cryptonar")) returned 1 [0089.973] SetErrorMode (uMode=0x1) returned 0x0 [0089.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.976] SetErrorMode (uMode=0x0) returned 0x1 [0089.976] GetFileType (hFile=0x230) returned 0x1 [0089.976] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.976] SetErrorMode (uMode=0x1) returned 0x0 [0089.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78189124, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x78189124, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x78189124, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.977] SetErrorMode (uMode=0x0) returned 0x1 [0089.977] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.partially.cryptonar")) returned 1 [0089.978] SetErrorMode (uMode=0x1) returned 0x0 [0089.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.979] SetErrorMode (uMode=0x0) returned 0x1 [0089.979] GetFileType (hFile=0x230) returned 0x1 [0089.979] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.980] SetErrorMode (uMode=0x1) returned 0x0 [0089.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780be6bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780be6bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3814b8b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0089.981] SetErrorMode (uMode=0x0) returned 0x1 [0089.981] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current.partially.cryptonar")) returned 1 [0089.982] SetErrorMode (uMode=0x1) returned 0x0 [0089.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.983] SetErrorMode (uMode=0x0) returned 0x1 [0089.983] GetFileType (hFile=0x230) returned 0x1 [0089.983] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.983] SetErrorMode (uMode=0x1) returned 0x0 [0089.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780be6bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780be6bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x780be6bb, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.983] SetErrorMode (uMode=0x0) returned 0x1 [0089.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock.partially.cryptonar")) returned 1 [0089.984] SetErrorMode (uMode=0x1) returned 0x0 [0089.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.985] SetErrorMode (uMode=0x0) returned 0x1 [0089.985] GetFileType (hFile=0x230) returned 0x1 [0089.985] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.986] SetErrorMode (uMode=0x1) returned 0x0 [0089.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780bbfb2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb8bf0597, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38172a06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a2)) returned 1 [0089.987] SetErrorMode (uMode=0x0) returned 0x1 [0089.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.partially.cryptonar")) returned 1 [0089.989] SetErrorMode (uMode=0x1) returned 0x0 [0089.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.old"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.990] SetErrorMode (uMode=0x0) returned 0x1 [0089.990] GetFileType (hFile=0x230) returned 0x1 [0089.990] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.991] SetErrorMode (uMode=0x1) returned 0x0 [0089.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780bbfb2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780bbfb2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38172a06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbc)) returned 1 [0089.991] SetErrorMode (uMode=0x0) returned 0x1 [0089.991] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.old.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.old.partially.cryptonar")) returned 1 [0089.992] SetErrorMode (uMode=0x1) returned 0x0 [0089.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.993] SetErrorMode (uMode=0x0) returned 0x1 [0089.993] GetFileType (hFile=0x230) returned 0x1 [0089.993] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0089.994] SetErrorMode (uMode=0x1) returned 0x0 [0089.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780be6bb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x780be6bb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38172a06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0089.994] SetErrorMode (uMode=0x0) returned 0x1 [0089.994] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001.partially.cryptonar")) returned 1 [0089.995] SetErrorMode (uMode=0x1) returned 0x0 [0089.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0089.998] SetErrorMode (uMode=0x0) returned 0x1 [0089.998] GetFileType (hFile=0x230) returned 0x1 [0089.998] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.013] SetErrorMode (uMode=0x1) returned 0x0 [0090.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8868fbec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8868fbec, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38197e3b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0090.013] SetErrorMode (uMode=0x0) returned 0x1 [0090.013] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.partially.cryptonar")) returned 1 [0090.014] SetErrorMode (uMode=0x1) returned 0x0 [0090.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.015] SetErrorMode (uMode=0x0) returned 0x1 [0090.015] GetFileType (hFile=0x230) returned 0x1 [0090.015] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.015] SetErrorMode (uMode=0x1) returned 0x0 [0090.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8868fbec, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x8868fbec, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba43a7cc, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.015] SetErrorMode (uMode=0x0) returned 0x1 [0090.016] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal.partially.cryptonar")) returned 1 [0090.017] SetErrorMode (uMode=0x1) returned 0x0 [0090.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.018] SetErrorMode (uMode=0x0) returned 0x1 [0090.018] GetFileType (hFile=0x230) returned 0x1 [0090.018] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.030] SetErrorMode (uMode=0x1) returned 0x0 [0090.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ef7099, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x91ef7099, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x381be1b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0090.030] SetErrorMode (uMode=0x0) returned 0x1 [0090.030] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage.partially.cryptonar")) returned 1 [0090.031] SetErrorMode (uMode=0x1) returned 0x0 [0090.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.032] SetErrorMode (uMode=0x0) returned 0x1 [0090.032] GetFileType (hFile=0x230) returned 0x1 [0090.032] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.032] SetErrorMode (uMode=0x1) returned 0x0 [0090.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage-journal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ef97a8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x91ef97a8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0xba5457bd, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.033] SetErrorMode (uMode=0x0) returned 0x1 [0090.033] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage-journal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\https_www.google.de_0.localstorage-journal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\https_www.google.de_0.localstorage-journal.partially.cryptonar")) returned 1 [0090.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", nBufferLength=0x105, lpBuffer=0x5ae3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", lpFilePart=0x0) returned 0x92 [0090.157] SetErrorMode (uMode=0x1) returned 0x0 [0090.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.214] GetFileType (hFile=0x230) returned 0x1 [0090.215] SetErrorMode (uMode=0x0) returned 0x1 [0090.215] GetFileType (hFile=0x230) returned 0x1 [0090.215] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5a [0090.215] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0090.216] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5a [0090.216] ReadFile (in: hFile=0x230, lpBuffer=0x2733d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x2733d18*, lpNumberOfBytesRead=0x5ae898*=0x5a, lpOverlapped=0x0) returned 1 [0090.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0090.217] WriteFile (in: hFile=0x230, lpBuffer=0x2733d18*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x2733d18*, lpNumberOfBytesWritten=0x5ae888*=0x5a, lpOverlapped=0x0) returned 1 [0090.287] CloseHandle (hObject=0x230) returned 1 [0090.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", lpFilePart=0x0) returned 0x92 [0090.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt", lpFilePart=0x0) returned 0x92 [0090.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt.fully.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt.fully.cryptoNar", lpFilePart=0x0) returned 0xa2 [0090.291] SetErrorMode (uMode=0x1) returned 0x0 [0090.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d343208, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x805c0f94, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3844689d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1 [0090.291] SetErrorMode (uMode=0x0) returned 0x1 [0090.291] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\index.txt.fully.cryptonar")) returned 1 [0090.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", lpFilePart=0x0) returned 0xc0 [0090.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", lpFilePart=0x0) returned 0xc0 [0090.293] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", lpFilePart=0x0) returned 0xc0 [0090.293] SetErrorMode (uMode=0x1) returned 0x0 [0090.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.294] GetFileType (hFile=0x230) returned 0x1 [0090.294] SetErrorMode (uMode=0x0) returned 0x1 [0090.295] GetFileType (hFile=0x230) returned 0x1 [0090.295] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.295] ReadFile (in: hFile=0x230, lpBuffer=0x2737580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2737580*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.317] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.317] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.318] WriteFile (in: hFile=0x230, lpBuffer=0x2737580*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2737580*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.318] CloseHandle (hObject=0x230) returned 1 [0090.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", lpFilePart=0x0) returned 0xc0 [0090.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0", lpFilePart=0x0) returned 0xc0 [0090.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.356] SetErrorMode (uMode=0x1) returned 0x0 [0090.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5e01d0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5e01d0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x384df1ee, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ab9)) returned 1 [0090.357] SetErrorMode (uMode=0x0) returned 0x1 [0090.357] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\1dd0446e4b2b157b_0.partially.cryptonar")) returned 1 [0090.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", lpFilePart=0x0) returned 0xc0 [0090.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", lpFilePart=0x0) returned 0xc0 [0090.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", lpFilePart=0x0) returned 0xc0 [0090.358] SetErrorMode (uMode=0x1) returned 0x0 [0090.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.359] GetFileType (hFile=0x230) returned 0x1 [0090.359] SetErrorMode (uMode=0x0) returned 0x1 [0090.359] GetFileType (hFile=0x230) returned 0x1 [0090.359] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.359] ReadFile (in: hFile=0x230, lpBuffer=0x273b3d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273b3d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.361] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.361] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.361] WriteFile (in: hFile=0x230, lpBuffer=0x273b3d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273b3d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.361] CloseHandle (hObject=0x230) returned 1 [0090.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", lpFilePart=0x0) returned 0xc0 [0090.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0", lpFilePart=0x0) returned 0xc0 [0090.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.387] SetErrorMode (uMode=0x1) returned 0x0 [0090.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5f134f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5f134f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38531512, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x36fc9)) returned 1 [0090.387] SetErrorMode (uMode=0x0) returned 0x1 [0090.387] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\4c3d15a0a987ed15_0.partially.cryptonar")) returned 1 [0090.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", lpFilePart=0x0) returned 0xc0 [0090.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", lpFilePart=0x0) returned 0xc0 [0090.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", lpFilePart=0x0) returned 0xc0 [0090.389] SetErrorMode (uMode=0x1) returned 0x0 [0090.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.390] GetFileType (hFile=0x230) returned 0x1 [0090.390] SetErrorMode (uMode=0x0) returned 0x1 [0090.390] GetFileType (hFile=0x230) returned 0x1 [0090.390] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.390] ReadFile (in: hFile=0x230, lpBuffer=0x273f230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273f230*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.391] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.391] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.391] WriteFile (in: hFile=0x230, lpBuffer=0x273f230*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273f230*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.392] CloseHandle (hObject=0x230) returned 1 [0090.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", lpFilePart=0x0) returned 0xc0 [0090.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0", lpFilePart=0x0) returned 0xc0 [0090.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.393] SetErrorMode (uMode=0x1) returned 0x0 [0090.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5d65a1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5d65a1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3855185c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3460)) returned 1 [0090.393] SetErrorMode (uMode=0x0) returned 0x1 [0090.393] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\d4a1768080ecf56d_0.partially.cryptonar")) returned 1 [0090.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.395] SetErrorMode (uMode=0x1) returned 0x0 [0090.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.395] GetFileType (hFile=0x230) returned 0x1 [0090.396] SetErrorMode (uMode=0x0) returned 0x1 [0090.396] GetFileType (hFile=0x230) returned 0x1 [0090.396] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.396] ReadFile (in: hFile=0x230, lpBuffer=0x2743088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2743088*, lpNumberOfBytesRead=0x5ae8b8*=0xab4, lpOverlapped=0x0) returned 1 [0090.426] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1716, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.426] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.426] WriteFile (in: hFile=0x230, lpBuffer=0x2743088*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2743088*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.427] CloseHandle (hObject=0x230) returned 1 [0090.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.428] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.428] SetErrorMode (uMode=0x1) returned 0x0 [0090.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5e5005, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d5e5005, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3859dd9e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xab4)) returned 1 [0090.428] SetErrorMode (uMode=0x0) returned 0x1 [0090.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\fdf2cfeb8ad0eeac_0.partially.cryptonar")) returned 1 [0090.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", lpFilePart=0x0) returned 0xb3 [0090.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", lpFilePart=0x0) returned 0xb3 [0090.430] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", lpFilePart=0x0) returned 0xb3 [0090.430] SetErrorMode (uMode=0x1) returned 0x0 [0090.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.431] GetFileType (hFile=0x230) returned 0x1 [0090.431] SetErrorMode (uMode=0x0) returned 0x1 [0090.431] GetFileType (hFile=0x230) returned 0x1 [0090.431] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.431] ReadFile (in: hFile=0x230, lpBuffer=0x2746e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2746e50*, lpNumberOfBytesRead=0x5ae8b8*=0x18, lpOverlapped=0x0) returned 1 [0090.432] ReadFile (in: hFile=0x230, lpBuffer=0x2746e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2746e50*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.432] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.432] WriteFile (in: hFile=0x230, lpBuffer=0x2746e50*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2746e50*, lpNumberOfBytesWritten=0x5ae8a8*=0x18, lpOverlapped=0x0) returned 1 [0090.432] CloseHandle (hObject=0x230) returned 1 [0090.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", lpFilePart=0x0) returned 0xb3 [0090.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index", lpFilePart=0x0) returned 0xb3 [0090.433] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index.partially.cryptoNar", lpFilePart=0x0) returned 0xc7 [0090.433] SetErrorMode (uMode=0x1) returned 0x0 [0090.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d35b8bd, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d35b8bd, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x3859dd9e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0090.434] SetErrorMode (uMode=0x0) returned 0x1 [0090.434] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index.partially.cryptonar")) returned 1 [0090.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.435] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.435] SetErrorMode (uMode=0x1) returned 0x0 [0090.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.438] GetFileType (hFile=0x230) returned 0x1 [0090.438] SetErrorMode (uMode=0x0) returned 0x1 [0090.438] GetFileType (hFile=0x230) returned 0x1 [0090.438] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.438] ReadFile (in: hFile=0x230, lpBuffer=0x274a840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274a840*, lpNumberOfBytesRead=0x5ae8b8*=0x90, lpOverlapped=0x0) returned 1 [0090.439] ReadFile (in: hFile=0x230, lpBuffer=0x274a840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274a840*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.439] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.439] WriteFile (in: hFile=0x230, lpBuffer=0x274a840*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274a840*, lpNumberOfBytesWritten=0x5ae8a8*=0x90, lpOverlapped=0x0) returned 1 [0090.439] CloseHandle (hObject=0x230) returned 1 [0090.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index.partially.cryptoNar", lpFilePart=0x0) returned 0xda [0090.440] SetErrorMode (uMode=0x1) returned 0x0 [0090.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d35dfd6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x9acd0278, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x385c4167, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0090.440] SetErrorMode (uMode=0x0) returned 0x1 [0090.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\28da9c56fde4021055a681112c092453f74d8dd8\\8c4d7305-348c-4e49-a93a-83143a3b9025\\index-dir\\the-real-index.partially.cryptonar")) returned 1 [0090.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", lpFilePart=0x0) returned 0x92 [0090.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", lpFilePart=0x0) returned 0x92 [0090.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", nBufferLength=0x105, lpBuffer=0x5ae3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", lpFilePart=0x0) returned 0x92 [0090.442] SetErrorMode (uMode=0x1) returned 0x0 [0090.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.443] GetFileType (hFile=0x230) returned 0x1 [0090.443] SetErrorMode (uMode=0x0) returned 0x1 [0090.443] GetFileType (hFile=0x230) returned 0x1 [0090.443] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5a [0090.443] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0090.443] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5a [0090.443] ReadFile (in: hFile=0x230, lpBuffer=0x274dba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x274dba8*, lpNumberOfBytesRead=0x5ae898*=0x5a, lpOverlapped=0x0) returned 1 [0090.444] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0090.444] WriteFile (in: hFile=0x230, lpBuffer=0x274dba8*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x274dba8*, lpNumberOfBytesWritten=0x5ae888*=0x5a, lpOverlapped=0x0) returned 1 [0090.444] CloseHandle (hObject=0x230) returned 1 [0090.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", lpFilePart=0x0) returned 0x92 [0090.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt", lpFilePart=0x0) returned 0x92 [0090.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt.fully.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt.fully.cryptoNar", lpFilePart=0x0) returned 0xa2 [0090.445] SetErrorMode (uMode=0x1) returned 0x0 [0090.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7bb7abf8, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x385c4167, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1 [0090.445] SetErrorMode (uMode=0x0) returned 0x1 [0090.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\index.txt.fully.cryptonar")) returned 1 [0090.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0090.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0090.447] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0090.447] SetErrorMode (uMode=0x1) returned 0x0 [0090.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.447] GetFileType (hFile=0x230) returned 0x1 [0090.447] SetErrorMode (uMode=0x0) returned 0x1 [0090.447] GetFileType (hFile=0x230) returned 0x1 [0090.447] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.448] ReadFile (in: hFile=0x230, lpBuffer=0x2751410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2751410*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.450] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.450] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.450] WriteFile (in: hFile=0x230, lpBuffer=0x2751410*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2751410*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.450] CloseHandle (hObject=0x230) returned 1 [0090.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0090.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0090.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.452] SetErrorMode (uMode=0x1) returned 0x0 [0090.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae70c92, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae70c92, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x385c4167, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7)) returned 1 [0090.452] SetErrorMode (uMode=0x0) returned 0x1 [0090.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\608d13fb70947f94_0.partially.cryptonar")) returned 1 [0090.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0090.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0090.453] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0090.453] SetErrorMode (uMode=0x1) returned 0x0 [0090.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.454] GetFileType (hFile=0x230) returned 0x1 [0090.454] SetErrorMode (uMode=0x0) returned 0x1 [0090.454] GetFileType (hFile=0x230) returned 0x1 [0090.454] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.454] ReadFile (in: hFile=0x230, lpBuffer=0x2755268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2755268*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.462] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.463] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.463] WriteFile (in: hFile=0x230, lpBuffer=0x2755268*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2755268*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.463] CloseHandle (hObject=0x230) returned 1 [0090.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0090.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0090.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.511] SetErrorMode (uMode=0x1) returned 0x0 [0090.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae7cfff, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae7cfff, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x3865dc33, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3068e)) returned 1 [0090.511] SetErrorMode (uMode=0x0) returned 0x1 [0090.511] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\d2d7a4c029e7ff02_0.partially.cryptonar")) returned 1 [0090.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0090.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0090.512] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0090.513] SetErrorMode (uMode=0x1) returned 0x0 [0090.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.513] GetFileType (hFile=0x230) returned 0x1 [0090.513] SetErrorMode (uMode=0x0) returned 0x1 [0090.513] GetFileType (hFile=0x230) returned 0x1 [0090.513] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.514] ReadFile (in: hFile=0x230, lpBuffer=0x27590c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27590c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.526] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.526] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.526] WriteFile (in: hFile=0x230, lpBuffer=0x27590c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27590c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.527] CloseHandle (hObject=0x230) returned 1 [0090.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0090.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0090.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.542] SetErrorMode (uMode=0x1) returned 0x0 [0090.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae6976a, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae6976a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x386a8e1a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x345e)) returned 1 [0090.542] SetErrorMode (uMode=0x0) returned 0x1 [0090.542] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\e599dc5e24eb76d7_0.partially.cryptonar")) returned 1 [0090.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.543] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.543] SetErrorMode (uMode=0x1) returned 0x0 [0090.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.544] GetFileType (hFile=0x230) returned 0x1 [0090.544] SetErrorMode (uMode=0x0) returned 0x1 [0090.544] GetFileType (hFile=0x230) returned 0x1 [0090.544] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.544] ReadFile (in: hFile=0x230, lpBuffer=0x275cf18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275cf18*, lpNumberOfBytesRead=0x5ae8b8*=0xab7, lpOverlapped=0x0) returned 1 [0090.552] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1719, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.552] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.552] WriteFile (in: hFile=0x230, lpBuffer=0x275cf18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275cf18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.552] CloseHandle (hObject=0x230) returned 1 [0090.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.553] SetErrorMode (uMode=0x1) returned 0x0 [0090.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae781ce, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ae781ce, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x386cef75, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xab7)) returned 1 [0090.554] SetErrorMode (uMode=0x0) returned 0x1 [0090.554] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\fdf2cfeb8ad0eeac_0.partially.cryptonar")) returned 1 [0090.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", lpFilePart=0x0) returned 0xb3 [0090.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", lpFilePart=0x0) returned 0xb3 [0090.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", lpFilePart=0x0) returned 0xb3 [0090.555] SetErrorMode (uMode=0x1) returned 0x0 [0090.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.555] GetFileType (hFile=0x230) returned 0x1 [0090.555] SetErrorMode (uMode=0x0) returned 0x1 [0090.555] GetFileType (hFile=0x230) returned 0x1 [0090.555] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.555] ReadFile (in: hFile=0x230, lpBuffer=0x2760ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2760ce0*, lpNumberOfBytesRead=0x5ae8b8*=0x18, lpOverlapped=0x0) returned 1 [0090.556] ReadFile (in: hFile=0x230, lpBuffer=0x2760ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2760ce0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.556] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.556] WriteFile (in: hFile=0x230, lpBuffer=0x2760ce0*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2760ce0*, lpNumberOfBytesWritten=0x5ae8a8*=0x18, lpOverlapped=0x0) returned 1 [0090.557] CloseHandle (hObject=0x230) returned 1 [0090.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", lpFilePart=0x0) returned 0xb3 [0090.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index", lpFilePart=0x0) returned 0xb3 [0090.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index.partially.cryptoNar", lpFilePart=0x0) returned 0xc7 [0090.557] SetErrorMode (uMode=0x1) returned 0x0 [0090.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad2fa36, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ad2fa36, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x386cef75, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0090.557] SetErrorMode (uMode=0x0) returned 0x1 [0090.557] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index.partially.cryptonar")) returned 1 [0090.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.558] SetErrorMode (uMode=0x1) returned 0x0 [0090.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.560] GetFileType (hFile=0x230) returned 0x1 [0090.560] SetErrorMode (uMode=0x0) returned 0x1 [0090.560] GetFileType (hFile=0x230) returned 0x1 [0090.561] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.561] ReadFile (in: hFile=0x230, lpBuffer=0x27646d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27646d0*, lpNumberOfBytesRead=0x5ae8b8*=0x90, lpOverlapped=0x0) returned 1 [0090.561] ReadFile (in: hFile=0x230, lpBuffer=0x27646d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27646d0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.561] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.561] WriteFile (in: hFile=0x230, lpBuffer=0x27646d0*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27646d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x90, lpOverlapped=0x0) returned 1 [0090.562] CloseHandle (hObject=0x230) returned 1 [0090.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index.partially.cryptoNar", lpFilePart=0x0) returned 0xda [0090.563] SetErrorMode (uMode=0x1) returned 0x0 [0090.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad2fa36, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7d2690b2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x386cef75, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0090.563] SetErrorMode (uMode=0x0) returned 0x1 [0090.563] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\1eb73b7c-1f7e-4d77-acd3-5605781472f5\\index-dir\\the-real-index.partially.cryptonar")) returned 1 [0090.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", lpFilePart=0x0) returned 0xc0 [0090.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", lpFilePart=0x0) returned 0xc0 [0090.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", lpFilePart=0x0) returned 0xc0 [0090.564] SetErrorMode (uMode=0x1) returned 0x0 [0090.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.565] GetFileType (hFile=0x230) returned 0x1 [0090.565] SetErrorMode (uMode=0x0) returned 0x1 [0090.565] GetFileType (hFile=0x230) returned 0x1 [0090.565] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.565] ReadFile (in: hFile=0x230, lpBuffer=0x2768290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2768290*, lpNumberOfBytesRead=0x5ae8b8*=0xc08, lpOverlapped=0x0) returned 1 [0090.588] SetFilePointer (in: hFile=0x230, lDistanceToMove=-2056, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.588] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.588] WriteFile (in: hFile=0x230, lpBuffer=0x2768290*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2768290*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.588] CloseHandle (hObject=0x230) returned 1 [0090.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", lpFilePart=0x0) returned 0xc0 [0090.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0", lpFilePart=0x0) returned 0xc0 [0090.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.589] SetErrorMode (uMode=0x1) returned 0x0 [0090.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ead70e, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75ead70e, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x3871b4be, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc08)) returned 1 [0090.590] SetErrorMode (uMode=0x0) returned 0x1 [0090.590] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1157fee2e2dc1968_0.partially.cryptonar")) returned 1 [0090.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", lpFilePart=0x0) returned 0xc0 [0090.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", lpFilePart=0x0) returned 0xc0 [0090.591] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", lpFilePart=0x0) returned 0xc0 [0090.591] SetErrorMode (uMode=0x1) returned 0x0 [0090.591] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.591] GetFileType (hFile=0x230) returned 0x1 [0090.591] SetErrorMode (uMode=0x0) returned 0x1 [0090.591] GetFileType (hFile=0x230) returned 0x1 [0090.591] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.591] ReadFile (in: hFile=0x230, lpBuffer=0x276c0e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276c0e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.605] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.605] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.605] WriteFile (in: hFile=0x230, lpBuffer=0x276c0e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276c0e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.606] CloseHandle (hObject=0x230) returned 1 [0090.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", lpFilePart=0x0) returned 0xc0 [0090.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0", lpFilePart=0x0) returned 0xc0 [0090.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.607] SetErrorMode (uMode=0x1) returned 0x0 [0090.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768481a8, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768481a8, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x387416ff, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe608)) returned 1 [0090.608] SetErrorMode (uMode=0x0) returned 0x1 [0090.608] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\1e16adeb2b036d0a_0.partially.cryptonar")) returned 1 [0090.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", lpFilePart=0x0) returned 0xc0 [0090.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", lpFilePart=0x0) returned 0xc0 [0090.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", lpFilePart=0x0) returned 0xc0 [0090.609] SetErrorMode (uMode=0x1) returned 0x0 [0090.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.609] GetFileType (hFile=0x230) returned 0x1 [0090.609] SetErrorMode (uMode=0x0) returned 0x1 [0090.610] GetFileType (hFile=0x230) returned 0x1 [0090.610] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.610] ReadFile (in: hFile=0x230, lpBuffer=0x276ff40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276ff40*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.627] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.627] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.627] WriteFile (in: hFile=0x230, lpBuffer=0x276ff40*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276ff40*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.628] CloseHandle (hObject=0x230) returned 1 [0090.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", lpFilePart=0x0) returned 0xc0 [0090.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0", lpFilePart=0x0) returned 0xc0 [0090.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.647] SetErrorMode (uMode=0x1) returned 0x0 [0090.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7639e2aa, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7639e2aa, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x387b3fab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f3b)) returned 1 [0090.647] SetErrorMode (uMode=0x0) returned 0x1 [0090.647] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\40bba07c05914591_0.partially.cryptonar")) returned 1 [0090.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", lpFilePart=0x0) returned 0xc0 [0090.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", lpFilePart=0x0) returned 0xc0 [0090.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", lpFilePart=0x0) returned 0xc0 [0090.648] SetErrorMode (uMode=0x1) returned 0x0 [0090.648] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.649] GetFileType (hFile=0x230) returned 0x1 [0090.649] SetErrorMode (uMode=0x0) returned 0x1 [0090.649] GetFileType (hFile=0x230) returned 0x1 [0090.649] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.649] ReadFile (in: hFile=0x230, lpBuffer=0x2773d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2773d98*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.650] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.650] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.650] WriteFile (in: hFile=0x230, lpBuffer=0x2773d98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2773d98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.650] CloseHandle (hObject=0x230) returned 1 [0090.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", lpFilePart=0x0) returned 0xc0 [0090.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0", lpFilePart=0x0) returned 0xc0 [0090.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.652] SetErrorMode (uMode=0x1) returned 0x0 [0090.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75e0ebd1, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75e0ebd1, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x387b3fab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x382c)) returned 1 [0090.652] SetErrorMode (uMode=0x0) returned 0x1 [0090.652] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\50da1ec5d44a313d_0.partially.cryptonar")) returned 1 [0090.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", lpFilePart=0x0) returned 0xc0 [0090.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", lpFilePart=0x0) returned 0xc0 [0090.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", lpFilePart=0x0) returned 0xc0 [0090.653] SetErrorMode (uMode=0x1) returned 0x0 [0090.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.654] GetFileType (hFile=0x230) returned 0x1 [0090.654] SetErrorMode (uMode=0x0) returned 0x1 [0090.654] GetFileType (hFile=0x230) returned 0x1 [0090.654] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.654] ReadFile (in: hFile=0x230, lpBuffer=0x2777bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2777bf0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.655] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.655] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.655] WriteFile (in: hFile=0x230, lpBuffer=0x2777bf0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2777bf0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.656] CloseHandle (hObject=0x230) returned 1 [0090.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", lpFilePart=0x0) returned 0xc0 [0090.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0", lpFilePart=0x0) returned 0xc0 [0090.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.658] SetErrorMode (uMode=0x1) returned 0x0 [0090.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7632b699, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7632b699, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x387dced1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9ee0)) returned 1 [0090.658] SetErrorMode (uMode=0x0) returned 0x1 [0090.659] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\54e8e10975acb34c_0.partially.cryptonar")) returned 1 [0090.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", lpFilePart=0x0) returned 0xc0 [0090.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", lpFilePart=0x0) returned 0xc0 [0090.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", lpFilePart=0x0) returned 0xc0 [0090.660] SetErrorMode (uMode=0x1) returned 0x0 [0090.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.661] GetFileType (hFile=0x230) returned 0x1 [0090.661] SetErrorMode (uMode=0x0) returned 0x1 [0090.661] GetFileType (hFile=0x230) returned 0x1 [0090.661] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.661] ReadFile (in: hFile=0x230, lpBuffer=0x277ba48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277ba48*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.670] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.670] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.670] WriteFile (in: hFile=0x230, lpBuffer=0x277ba48*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x277ba48*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.671] CloseHandle (hObject=0x230) returned 1 [0090.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", lpFilePart=0x0) returned 0xc0 [0090.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0", lpFilePart=0x0) returned 0xc0 [0090.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.680] SetErrorMode (uMode=0x1) returned 0x0 [0090.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x768e1eac, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x768e1eac, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x388002ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20689)) returned 1 [0090.680] SetErrorMode (uMode=0x0) returned 0x1 [0090.680] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\58c0fee6b0dfd5c3_0.partially.cryptonar")) returned 1 [0090.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0090.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0090.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0090.681] SetErrorMode (uMode=0x1) returned 0x0 [0090.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.682] GetFileType (hFile=0x230) returned 0x1 [0090.682] SetErrorMode (uMode=0x0) returned 0x1 [0090.682] GetFileType (hFile=0x230) returned 0x1 [0090.682] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.682] ReadFile (in: hFile=0x230, lpBuffer=0x277f8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277f8a0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.721] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.721] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.721] WriteFile (in: hFile=0x230, lpBuffer=0x277f8a0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x277f8a0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.721] CloseHandle (hObject=0x230) returned 1 [0090.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0090.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0", lpFilePart=0x0) returned 0xc0 [0090.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.728] SetErrorMode (uMode=0x1) returned 0x0 [0090.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92d8b21, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92d8b21, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38872a7b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7)) returned 1 [0090.728] SetErrorMode (uMode=0x0) returned 0x1 [0090.728] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\608d13fb70947f94_0.partially.cryptonar")) returned 1 [0090.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", lpFilePart=0x0) returned 0xc0 [0090.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", lpFilePart=0x0) returned 0xc0 [0090.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", lpFilePart=0x0) returned 0xc0 [0090.730] SetErrorMode (uMode=0x1) returned 0x0 [0090.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.731] GetFileType (hFile=0x230) returned 0x1 [0090.731] SetErrorMode (uMode=0x0) returned 0x1 [0090.731] GetFileType (hFile=0x230) returned 0x1 [0090.731] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.732] ReadFile (in: hFile=0x230, lpBuffer=0x27836f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27836f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.752] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.752] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.752] WriteFile (in: hFile=0x230, lpBuffer=0x27836f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27836f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.753] CloseHandle (hObject=0x230) returned 1 [0090.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", lpFilePart=0x0) returned 0xc0 [0090.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0", lpFilePart=0x0) returned 0xc0 [0090.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.772] SetErrorMode (uMode=0x1) returned 0x0 [0090.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75d5ef63, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x75d5ef63, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x388e522b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xba50)) returned 1 [0090.773] SetErrorMode (uMode=0x0) returned 0x1 [0090.773] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\8020f636edb35252_0.partially.cryptonar")) returned 1 [0090.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", lpFilePart=0x0) returned 0xc0 [0090.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", lpFilePart=0x0) returned 0xc0 [0090.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", lpFilePart=0x0) returned 0xc0 [0090.774] SetErrorMode (uMode=0x1) returned 0x0 [0090.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.775] GetFileType (hFile=0x230) returned 0x1 [0090.775] SetErrorMode (uMode=0x0) returned 0x1 [0090.775] GetFileType (hFile=0x230) returned 0x1 [0090.775] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.775] ReadFile (in: hFile=0x230, lpBuffer=0x2787550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2787550*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.776] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.777] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.777] WriteFile (in: hFile=0x230, lpBuffer=0x2787550*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2787550*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.777] CloseHandle (hObject=0x230) returned 1 [0090.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", lpFilePart=0x0) returned 0xc0 [0090.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0", lpFilePart=0x0) returned 0xc0 [0090.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.802] SetErrorMode (uMode=0x1) returned 0x0 [0090.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a4b429, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x76a4b429, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x389316bd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e149)) returned 1 [0090.803] SetErrorMode (uMode=0x0) returned 0x1 [0090.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\99f80f27ba259469_0.partially.cryptonar")) returned 1 [0090.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0090.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0090.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0090.804] SetErrorMode (uMode=0x1) returned 0x0 [0090.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.806] GetFileType (hFile=0x230) returned 0x1 [0090.806] SetErrorMode (uMode=0x0) returned 0x1 [0090.806] GetFileType (hFile=0x230) returned 0x1 [0090.806] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.806] ReadFile (in: hFile=0x230, lpBuffer=0x278b3a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x278b3a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.824] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.824] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.824] WriteFile (in: hFile=0x230, lpBuffer=0x278b3a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x278b3a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.825] CloseHandle (hObject=0x230) returned 1 [0090.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0090.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0", lpFilePart=0x0) returned 0xc0 [0090.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.830] SetErrorMode (uMode=0x1) returned 0x0 [0090.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760898ac, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x760898ac, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x389806a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x30722)) returned 1 [0090.830] SetErrorMode (uMode=0x0) returned 0x1 [0090.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\d2d7a4c029e7ff02_0.partially.cryptonar")) returned 1 [0090.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0090.831] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0090.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0090.832] SetErrorMode (uMode=0x1) returned 0x0 [0090.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.832] GetFileType (hFile=0x230) returned 0x1 [0090.832] SetErrorMode (uMode=0x0) returned 0x1 [0090.832] GetFileType (hFile=0x230) returned 0x1 [0090.832] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.832] ReadFile (in: hFile=0x230, lpBuffer=0x278f200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x278f200*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.837] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.837] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.837] WriteFile (in: hFile=0x230, lpBuffer=0x278f200*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x278f200*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.837] CloseHandle (hObject=0x230) returned 1 [0090.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0090.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0", lpFilePart=0x0) returned 0xc0 [0090.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.844] SetErrorMode (uMode=0x1) returned 0x0 [0090.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92b8f41, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92b8f41, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x389a3ed1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x345e)) returned 1 [0090.845] SetErrorMode (uMode=0x0) returned 0x1 [0090.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e599dc5e24eb76d7_0.partially.cryptonar")) returned 1 [0090.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", lpFilePart=0x0) returned 0xc0 [0090.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", lpFilePart=0x0) returned 0xc0 [0090.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", lpFilePart=0x0) returned 0xc0 [0090.846] SetErrorMode (uMode=0x1) returned 0x0 [0090.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.847] GetFileType (hFile=0x230) returned 0x1 [0090.847] SetErrorMode (uMode=0x0) returned 0x1 [0090.847] GetFileType (hFile=0x230) returned 0x1 [0090.847] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.847] ReadFile (in: hFile=0x230, lpBuffer=0x2793058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2793058*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.849] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.849] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.849] WriteFile (in: hFile=0x230, lpBuffer=0x2793058*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2793058*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.849] CloseHandle (hObject=0x230) returned 1 [0090.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", lpFilePart=0x0) returned 0xc0 [0090.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0", lpFilePart=0x0) returned 0xc0 [0090.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.856] SetErrorMode (uMode=0x1) returned 0x0 [0090.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92e14d5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92e14d5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x389a3ed1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x36fc7)) returned 1 [0090.856] SetErrorMode (uMode=0x0) returned 0x1 [0090.856] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\e6fee29e34914471_0.partially.cryptonar")) returned 1 [0090.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.858] SetErrorMode (uMode=0x1) returned 0x0 [0090.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.859] GetFileType (hFile=0x230) returned 0x1 [0090.859] SetErrorMode (uMode=0x0) returned 0x1 [0090.859] GetFileType (hFile=0x230) returned 0x1 [0090.859] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.859] ReadFile (in: hFile=0x230, lpBuffer=0x2796eb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2796eb0*, lpNumberOfBytesRead=0x5ae8b8*=0xab4, lpOverlapped=0x0) returned 1 [0090.868] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1716, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.868] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.868] WriteFile (in: hFile=0x230, lpBuffer=0x2796eb0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2796eb0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.868] CloseHandle (hObject=0x230) returned 1 [0090.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0", lpFilePart=0x0) returned 0xc0 [0090.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0090.869] SetErrorMode (uMode=0x1) returned 0x0 [0090.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb92dd943, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb92dd943, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x389c9ffc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xab4)) returned 1 [0090.870] SetErrorMode (uMode=0x0) returned 0x1 [0090.870] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\fdf2cfeb8ad0eeac_0.partially.cryptonar")) returned 1 [0090.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", lpFilePart=0x0) returned 0xb3 [0090.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", lpFilePart=0x0) returned 0xb3 [0090.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", lpFilePart=0x0) returned 0xb3 [0090.871] SetErrorMode (uMode=0x1) returned 0x0 [0090.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.872] GetFileType (hFile=0x230) returned 0x1 [0090.872] SetErrorMode (uMode=0x0) returned 0x1 [0090.872] GetFileType (hFile=0x230) returned 0x1 [0090.872] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.872] ReadFile (in: hFile=0x230, lpBuffer=0x279ac78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x279ac78*, lpNumberOfBytesRead=0x5ae8b8*=0x18, lpOverlapped=0x0) returned 1 [0090.874] ReadFile (in: hFile=0x230, lpBuffer=0x279ac78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x279ac78*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.874] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.874] WriteFile (in: hFile=0x230, lpBuffer=0x279ac78*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x279ac78*, lpNumberOfBytesWritten=0x5ae8a8*=0x18, lpOverlapped=0x0) returned 1 [0090.874] CloseHandle (hObject=0x230) returned 1 [0090.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", lpFilePart=0x0) returned 0xb3 [0090.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index", lpFilePart=0x0) returned 0xb3 [0090.874] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index.partially.cryptoNar", lpFilePart=0x0) returned 0xc7 [0090.875] SetErrorMode (uMode=0x1) returned 0x0 [0090.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb91b878c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x389c9ffc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0090.875] SetErrorMode (uMode=0x0) returned 0x1 [0090.875] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index.partially.cryptonar")) returned 1 [0090.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.877] SetErrorMode (uMode=0x1) returned 0x0 [0090.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.879] GetFileType (hFile=0x230) returned 0x1 [0090.879] SetErrorMode (uMode=0x0) returned 0x1 [0090.879] GetFileType (hFile=0x230) returned 0x1 [0090.879] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.880] ReadFile (in: hFile=0x230, lpBuffer=0x279e668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x279e668*, lpNumberOfBytesRead=0x5ae8b8*=0x168, lpOverlapped=0x0) returned 1 [0090.880] ReadFile (in: hFile=0x230, lpBuffer=0x279e668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x279e668*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.881] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.881] WriteFile (in: hFile=0x230, lpBuffer=0x279e668*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x279e668*, lpNumberOfBytesWritten=0x5ae8a8*=0x168, lpOverlapped=0x0) returned 1 [0090.881] CloseHandle (hObject=0x230) returned 1 [0090.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index", lpFilePart=0x0) returned 0xc6 [0090.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index.partially.cryptoNar", lpFilePart=0x0) returned 0xda [0090.882] SetErrorMode (uMode=0x1) returned 0x0 [0090.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d2690b2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x389f0345, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x168)) returned 1 [0090.882] SetErrorMode (uMode=0x0) returned 0x1 [0090.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\CacheStorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\cachestorage\\e6622492fa163609ddd4212f54512baa07929ed3\\bf8f082f-6a47-47c8-a2cc-2761ce03ff32\\index-dir\\the-real-index.partially.cryptonar")) returned 1 [0090.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", lpFilePart=0x0) returned 0x66 [0090.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", lpFilePart=0x0) returned 0x66 [0090.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", lpFilePart=0x0) returned 0x66 [0090.886] SetErrorMode (uMode=0x1) returned 0x0 [0090.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.889] GetFileType (hFile=0x230) returned 0x1 [0090.889] SetErrorMode (uMode=0x0) returned 0x1 [0090.889] GetFileType (hFile=0x230) returned 0x1 [0090.889] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.889] ReadFile (in: hFile=0x230, lpBuffer=0x27a21e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a21e0*, lpNumberOfBytesRead=0x5ae8b8*=0x8b2, lpOverlapped=0x0) returned 1 [0090.890] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1202, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.890] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.890] WriteFile (in: hFile=0x230, lpBuffer=0x27a21e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27a21e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.890] CloseHandle (hObject=0x230) returned 1 [0090.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", lpFilePart=0x0) returned 0x66 [0090.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log", lpFilePart=0x0) returned 0x66 [0090.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0090.892] SetErrorMode (uMode=0x1) returned 0x0 [0090.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1e38ba, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d1e38ba, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38a1671a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8b2)) returned 1 [0090.892] SetErrorMode (uMode=0x0) returned 0x1 [0090.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\000003.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\000003.log.partially.cryptonar")) returned 1 [0090.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", lpFilePart=0x0) returned 0x63 [0090.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", lpFilePart=0x0) returned 0x63 [0090.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", lpFilePart=0x0) returned 0x63 [0090.894] SetErrorMode (uMode=0x1) returned 0x0 [0090.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.894] GetFileType (hFile=0x230) returned 0x1 [0090.894] SetErrorMode (uMode=0x0) returned 0x1 [0090.894] GetFileType (hFile=0x230) returned 0x1 [0090.894] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.895] ReadFile (in: hFile=0x230, lpBuffer=0x27a5978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a5978*, lpNumberOfBytesRead=0x5ae8b8*=0x10, lpOverlapped=0x0) returned 1 [0090.895] ReadFile (in: hFile=0x230, lpBuffer=0x27a5978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a5978*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.895] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.896] WriteFile (in: hFile=0x230, lpBuffer=0x27a5978*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27a5978*, lpNumberOfBytesWritten=0x5ae8a8*=0x10, lpOverlapped=0x0) returned 1 [0090.896] CloseHandle (hObject=0x230) returned 1 [0090.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", lpFilePart=0x0) returned 0x63 [0090.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT", lpFilePart=0x0) returned 0x63 [0090.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT.partially.cryptoNar", lpFilePart=0x0) returned 0x77 [0090.896] SetErrorMode (uMode=0x1) returned 0x0 [0090.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\current"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15ad21, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d15ad21, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38a1671a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0090.896] SetErrorMode (uMode=0x0) returned 0x1 [0090.897] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\CURRENT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\current.partially.cryptonar")) returned 1 [0090.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", lpFilePart=0x0) returned 0x60 [0090.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", lpFilePart=0x0) returned 0x60 [0090.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", lpFilePart=0x0) returned 0x60 [0090.898] SetErrorMode (uMode=0x1) returned 0x0 [0090.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.899] GetFileType (hFile=0x230) returned 0x1 [0090.899] SetErrorMode (uMode=0x0) returned 0x1 [0090.899] GetFileType (hFile=0x230) returned 0x1 [0090.899] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.899] ReadFile (in: hFile=0x230, lpBuffer=0x27a8d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a8d18*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.899] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.899] CloseHandle (hObject=0x230) returned 1 [0090.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", lpFilePart=0x0) returned 0x60 [0090.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK", lpFilePart=0x0) returned 0x60 [0090.899] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK.partially.cryptoNar", lpFilePart=0x0) returned 0x74 [0090.899] SetErrorMode (uMode=0x1) returned 0x0 [0090.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d15860b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7d15860b, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.900] SetErrorMode (uMode=0x0) returned 0x1 [0090.900] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOCK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\lock.partially.cryptonar")) returned 1 [0090.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", lpFilePart=0x0) returned 0x5f [0090.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", lpFilePart=0x0) returned 0x5f [0090.901] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", lpFilePart=0x0) returned 0x5f [0090.901] SetErrorMode (uMode=0x1) returned 0x0 [0090.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.902] GetFileType (hFile=0x230) returned 0x1 [0090.902] SetErrorMode (uMode=0x0) returned 0x1 [0090.902] GetFileType (hFile=0x230) returned 0x1 [0090.902] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.902] ReadFile (in: hFile=0x230, lpBuffer=0x27ac070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ac070*, lpNumberOfBytesRead=0x5ae8b8*=0x15e, lpOverlapped=0x0) returned 1 [0090.918] ReadFile (in: hFile=0x230, lpBuffer=0x27ac070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ac070*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.918] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.918] WriteFile (in: hFile=0x230, lpBuffer=0x27ac070*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ac070*, lpNumberOfBytesWritten=0x5ae8a8*=0x15e, lpOverlapped=0x0) returned 1 [0090.918] CloseHandle (hObject=0x230) returned 1 [0090.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", lpFilePart=0x0) returned 0x5f [0090.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG", lpFilePart=0x0) returned 0x5f [0090.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0090.925] SetErrorMode (uMode=0x1) returned 0x0 [0090.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x74ec75a7, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x38a67e50, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1 [0090.925] SetErrorMode (uMode=0x0) returned 0x1 [0090.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.partially.cryptonar")) returned 1 [0090.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", lpFilePart=0x0) returned 0x63 [0090.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", lpFilePart=0x0) returned 0x63 [0090.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", lpFilePart=0x0) returned 0x63 [0090.927] SetErrorMode (uMode=0x1) returned 0x0 [0090.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.old"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.927] GetFileType (hFile=0x230) returned 0x1 [0090.927] SetErrorMode (uMode=0x0) returned 0x1 [0090.927] GetFileType (hFile=0x230) returned 0x1 [0090.927] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.928] ReadFile (in: hFile=0x230, lpBuffer=0x27af6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27af6d0*, lpNumberOfBytesRead=0x5ae8b8*=0x15e, lpOverlapped=0x0) returned 1 [0090.928] ReadFile (in: hFile=0x230, lpBuffer=0x27af6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27af6d0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.928] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.929] WriteFile (in: hFile=0x230, lpBuffer=0x27af6d0*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27af6d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x15e, lpOverlapped=0x0) returned 1 [0090.929] CloseHandle (hObject=0x230) returned 1 [0090.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", lpFilePart=0x0) returned 0x63 [0090.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old", lpFilePart=0x0) returned 0x63 [0090.930] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old.partially.cryptoNar", lpFilePart=0x0) returned 0x77 [0090.930] SetErrorMode (uMode=0x1) returned 0x0 [0090.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xbf53095c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38a67e50, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1 [0090.930] SetErrorMode (uMode=0x0) returned 0x1 [0090.930] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\LOG.old.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\log.old.partially.cryptonar")) returned 1 [0090.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", lpFilePart=0x0) returned 0x6b [0090.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", lpFilePart=0x0) returned 0x6b [0090.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", lpFilePart=0x0) returned 0x6b [0090.931] SetErrorMode (uMode=0x1) returned 0x0 [0090.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.932] GetFileType (hFile=0x230) returned 0x1 [0090.932] SetErrorMode (uMode=0x0) returned 0x1 [0090.932] GetFileType (hFile=0x230) returned 0x1 [0090.932] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.932] ReadFile (in: hFile=0x230, lpBuffer=0x27b2d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b2d60*, lpNumberOfBytesRead=0x5ae8b8*=0x29, lpOverlapped=0x0) returned 1 [0090.934] ReadFile (in: hFile=0x230, lpBuffer=0x27b2d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b2d60*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.934] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.934] WriteFile (in: hFile=0x230, lpBuffer=0x27b2d60*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b2d60*, lpNumberOfBytesWritten=0x5ae8a8*=0x29, lpOverlapped=0x0) returned 1 [0090.934] CloseHandle (hObject=0x230) returned 1 [0090.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", lpFilePart=0x0) returned 0x6b [0090.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001", lpFilePart=0x0) returned 0x6b [0090.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001.partially.cryptoNar", lpFilePart=0x0) returned 0x7f [0090.937] SetErrorMode (uMode=0x1) returned 0x0 [0090.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d15860b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d15860b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38a67e50, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0090.937] SetErrorMode (uMode=0x0) returned 0x1 [0090.937] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\Database\\MANIFEST-000001.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\database\\manifest-000001.partially.cryptonar")) returned 1 [0090.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", lpFilePart=0x0) returned 0x71 [0090.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", lpFilePart=0x0) returned 0x71 [0090.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", lpFilePart=0x0) returned 0x71 [0090.939] SetErrorMode (uMode=0x1) returned 0x0 [0090.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.940] GetFileType (hFile=0x230) returned 0x1 [0090.940] SetErrorMode (uMode=0x0) returned 0x1 [0090.940] GetFileType (hFile=0x230) returned 0x1 [0090.940] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.943] ReadFile (in: hFile=0x230, lpBuffer=0x27b6230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b6230*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.945] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.945] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.945] WriteFile (in: hFile=0x230, lpBuffer=0x27b6230*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b6230*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.946] CloseHandle (hObject=0x230) returned 1 [0090.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", lpFilePart=0x0) returned 0x71 [0090.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0", lpFilePart=0x0) returned 0x71 [0090.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0090.947] SetErrorMode (uMode=0x1) returned 0x0 [0090.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d29838b, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d29838b, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38a88ca2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20c7)) returned 1 [0090.947] SetErrorMode (uMode=0x0) returned 0x1 [0090.947] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_0.partially.cryptonar")) returned 1 [0090.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", lpFilePart=0x0) returned 0x71 [0090.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", lpFilePart=0x0) returned 0x71 [0090.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", lpFilePart=0x0) returned 0x71 [0090.949] SetErrorMode (uMode=0x1) returned 0x0 [0090.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.950] GetFileType (hFile=0x230) returned 0x1 [0090.950] SetErrorMode (uMode=0x0) returned 0x1 [0090.950] GetFileType (hFile=0x230) returned 0x1 [0090.950] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.950] ReadFile (in: hFile=0x230, lpBuffer=0x27b9ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b9ae8*, lpNumberOfBytesRead=0x5ae8b8*=0x3d, lpOverlapped=0x0) returned 1 [0090.952] ReadFile (in: hFile=0x230, lpBuffer=0x27b9ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b9ae8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0090.952] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.952] WriteFile (in: hFile=0x230, lpBuffer=0x27b9ae8*, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b9ae8*, lpNumberOfBytesWritten=0x5ae8a8*=0x3d, lpOverlapped=0x0) returned 1 [0090.952] CloseHandle (hObject=0x230) returned 1 [0090.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", lpFilePart=0x0) returned 0x71 [0090.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1", lpFilePart=0x0) returned 0x71 [0090.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0090.953] SetErrorMode (uMode=0x1) returned 0x0 [0090.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d2f01e7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d2f01e7, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38a88ca2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d)) returned 1 [0090.954] SetErrorMode (uMode=0x0) returned 0x1 [0090.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\2cc80dabc69f58b6_1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\2cc80dabc69f58b6_1.partially.cryptonar")) returned 1 [0090.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", lpFilePart=0x0) returned 0x71 [0090.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", lpFilePart=0x0) returned 0x71 [0090.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", lpFilePart=0x0) returned 0x71 [0090.956] SetErrorMode (uMode=0x1) returned 0x0 [0090.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.957] GetFileType (hFile=0x230) returned 0x1 [0090.957] SetErrorMode (uMode=0x0) returned 0x1 [0090.957] GetFileType (hFile=0x230) returned 0x1 [0090.957] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.958] ReadFile (in: hFile=0x230, lpBuffer=0x27bd038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27bd038*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.960] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.960] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.960] WriteFile (in: hFile=0x230, lpBuffer=0x27bd038*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27bd038*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.962] CloseHandle (hObject=0x230) returned 1 [0090.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", lpFilePart=0x0) returned 0x71 [0090.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0", lpFilePart=0x0) returned 0x71 [0090.963] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0090.963] SetErrorMode (uMode=0x1) returned 0x0 [0090.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb919afb5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb919afb5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38aaefba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20c8)) returned 1 [0090.964] SetErrorMode (uMode=0x0) returned 0x1 [0090.964] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_0.partially.cryptonar")) returned 1 [0090.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", lpFilePart=0x0) returned 0x71 [0090.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", lpFilePart=0x0) returned 0x71 [0090.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", lpFilePart=0x0) returned 0x71 [0090.966] SetErrorMode (uMode=0x1) returned 0x0 [0090.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.967] GetFileType (hFile=0x230) returned 0x1 [0090.967] SetErrorMode (uMode=0x0) returned 0x1 [0090.967] GetFileType (hFile=0x230) returned 0x1 [0090.967] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.967] ReadFile (in: hFile=0x230, lpBuffer=0x27c08f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c08f0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.982] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.982] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.982] WriteFile (in: hFile=0x230, lpBuffer=0x27c08f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c08f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.983] CloseHandle (hObject=0x230) returned 1 [0090.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", lpFilePart=0x0) returned 0x71 [0090.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1", lpFilePart=0x0) returned 0x71 [0090.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0090.985] SetErrorMode (uMode=0x1) returned 0x0 [0090.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb91b878c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb91b878c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38ad4fc1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13d5)) returned 1 [0090.985] SetErrorMode (uMode=0x0) returned 0x1 [0090.985] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\4cb013792b196a35_1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\4cb013792b196a35_1.partially.cryptonar")) returned 1 [0090.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", lpFilePart=0x0) returned 0x71 [0090.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", lpFilePart=0x0) returned 0x71 [0090.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", lpFilePart=0x0) returned 0x71 [0090.987] SetErrorMode (uMode=0x1) returned 0x0 [0090.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0090.987] GetFileType (hFile=0x230) returned 0x1 [0090.987] SetErrorMode (uMode=0x0) returned 0x1 [0090.988] GetFileType (hFile=0x230) returned 0x1 [0090.988] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.988] ReadFile (in: hFile=0x230, lpBuffer=0x27c41a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c41a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0090.990] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0090.990] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0090.990] WriteFile (in: hFile=0x230, lpBuffer=0x27c41a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c41a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0090.990] CloseHandle (hObject=0x230) returned 1 [0091.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", lpFilePart=0x0) returned 0x71 [0091.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0", lpFilePart=0x0) returned 0x71 [0091.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0091.013] SetErrorMode (uMode=0x1) returned 0x0 [0091.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7acf04a2, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7acf04a2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x38b214fd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0091.013] SetErrorMode (uMode=0x0) returned 0x1 [0091.013] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_0.partially.cryptonar")) returned 1 [0091.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", lpFilePart=0x0) returned 0x71 [0091.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", lpFilePart=0x0) returned 0x71 [0091.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", lpFilePart=0x0) returned 0x71 [0091.015] SetErrorMode (uMode=0x1) returned 0x0 [0091.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.016] GetFileType (hFile=0x230) returned 0x1 [0091.016] SetErrorMode (uMode=0x0) returned 0x1 [0091.016] GetFileType (hFile=0x230) returned 0x1 [0091.016] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.016] ReadFile (in: hFile=0x230, lpBuffer=0x27c7a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c7a60*, lpNumberOfBytesRead=0x5ae8b8*=0x3d, lpOverlapped=0x0) returned 1 [0091.017] ReadFile (in: hFile=0x230, lpBuffer=0x27c7a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c7a60*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0091.017] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.018] WriteFile (in: hFile=0x230, lpBuffer=0x27c7a60*, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c7a60*, lpNumberOfBytesWritten=0x5ae8a8*=0x3d, lpOverlapped=0x0) returned 1 [0091.018] CloseHandle (hObject=0x230) returned 1 [0091.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", lpFilePart=0x0) returned 0x71 [0091.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1", lpFilePart=0x0) returned 0x71 [0091.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0091.032] SetErrorMode (uMode=0x1) returned 0x0 [0091.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad15d0d, ftCreationTime.dwHighDateTime=0x1d2d59f, ftLastAccessTime.dwLowDateTime=0x7ad15d0d, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x38b48233, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d)) returned 1 [0091.032] SetErrorMode (uMode=0x0) returned 0x1 [0091.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\f1cdccba37924bda_1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\f1cdccba37924bda_1.partially.cryptonar")) returned 1 [0091.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", lpFilePart=0x0) returned 0x64 [0091.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", lpFilePart=0x0) returned 0x64 [0091.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", lpFilePart=0x0) returned 0x64 [0091.034] SetErrorMode (uMode=0x1) returned 0x0 [0091.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.035] GetFileType (hFile=0x230) returned 0x1 [0091.035] SetErrorMode (uMode=0x0) returned 0x1 [0091.035] GetFileType (hFile=0x230) returned 0x1 [0091.035] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.035] ReadFile (in: hFile=0x230, lpBuffer=0x27caf38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27caf38*, lpNumberOfBytesRead=0x5ae8b8*=0x18, lpOverlapped=0x0) returned 1 [0091.037] ReadFile (in: hFile=0x230, lpBuffer=0x27caf38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27caf38*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0091.037] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.037] WriteFile (in: hFile=0x230, lpBuffer=0x27caf38*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27caf38*, lpNumberOfBytesWritten=0x5ae8a8*=0x18, lpOverlapped=0x0) returned 1 [0091.037] CloseHandle (hObject=0x230) returned 1 [0091.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", lpFilePart=0x0) returned 0x64 [0091.038] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index", lpFilePart=0x0) returned 0x64 [0091.038] SetErrorMode (uMode=0x1) returned 0x0 [0091.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1a8f2c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d1a8f2c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38b77b4f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0091.038] SetErrorMode (uMode=0x0) returned 0x1 [0091.038] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index.partially.cryptonar")) returned 1 [0091.040] SetErrorMode (uMode=0x1) returned 0x0 [0091.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index-dir\\the-real-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.044] SetErrorMode (uMode=0x0) returned 0x1 [0091.044] GetFileType (hFile=0x230) returned 0x1 [0091.044] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.048] SetErrorMode (uMode=0x1) returned 0x0 [0091.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index-dir\\the-real-index"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d223071, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7d2690b2, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x38b93e88, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x78)) returned 1 [0091.048] SetErrorMode (uMode=0x0) returned 0x1 [0091.049] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index-dir\\the-real-index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Service Worker\\ScriptCache\\index-dir\\the-real-index.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\service worker\\scriptcache\\index-dir\\the-real-index.partially.cryptonar")) returned 1 [0091.050] SetErrorMode (uMode=0x1) returned 0x0 [0091.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000003.ldb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.052] SetErrorMode (uMode=0x0) returned 0x1 [0091.052] GetFileType (hFile=0x230) returned 0x1 [0091.052] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.057] SetErrorMode (uMode=0x1) returned 0x0 [0091.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000003.ldb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb75ba77e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb75ba77e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38b93e88, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1303f)) returned 1 [0091.057] SetErrorMode (uMode=0x0) returned 0x1 [0091.057] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000003.ldb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000003.ldb.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000003.ldb.partially.cryptonar")) returned 1 [0091.059] SetErrorMode (uMode=0x1) returned 0x0 [0091.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000004.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.060] SetErrorMode (uMode=0x0) returned 0x1 [0091.060] GetFileType (hFile=0x230) returned 0x1 [0091.060] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.070] SetErrorMode (uMode=0x1) returned 0x0 [0091.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000004.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9af58bbb, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x9af58bbb, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38bb9de8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb08)) returned 1 [0091.070] SetErrorMode (uMode=0x0) returned 0x1 [0091.070] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000004.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\000004.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\000004.log.partially.cryptonar")) returned 1 [0091.072] SetErrorMode (uMode=0x1) returned 0x0 [0091.072] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.072] SetErrorMode (uMode=0x0) returned 0x1 [0091.072] GetFileType (hFile=0x230) returned 0x1 [0091.073] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.074] SetErrorMode (uMode=0x1) returned 0x0 [0091.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\current"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x80063ae2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38bb9de8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0091.074] SetErrorMode (uMode=0x0) returned 0x1 [0091.074] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\CURRENT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\current.partially.cryptonar")) returned 1 [0091.076] SetErrorMode (uMode=0x1) returned 0x0 [0091.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.077] SetErrorMode (uMode=0x0) returned 0x1 [0091.077] GetFileType (hFile=0x230) returned 0x1 [0091.077] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.077] SetErrorMode (uMode=0x1) returned 0x0 [0091.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x80063ae2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x80063ae2, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.077] SetErrorMode (uMode=0x0) returned 0x1 [0091.077] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOCK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\lock.partially.cryptonar")) returned 1 [0091.079] SetErrorMode (uMode=0x1) returned 0x0 [0091.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.079] SetErrorMode (uMode=0x0) returned 0x1 [0091.079] GetFileType (hFile=0x230) returned 0x1 [0091.079] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.080] SetErrorMode (uMode=0x1) returned 0x0 [0091.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x761ae877, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x38be0503, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0091.081] SetErrorMode (uMode=0x0) returned 0x1 [0091.081] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.partially.cryptonar")) returned 1 [0091.082] SetErrorMode (uMode=0x1) returned 0x0 [0091.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.old"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.082] SetErrorMode (uMode=0x0) returned 0x1 [0091.082] GetFileType (hFile=0x230) returned 0x1 [0091.082] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.083] SetErrorMode (uMode=0x1) returned 0x0 [0091.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xb75b0b9a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38be0503, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24e)) returned 1 [0091.083] SetErrorMode (uMode=0x0) returned 0x1 [0091.083] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\LOG.old.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\log.old.partially.cryptonar")) returned 1 [0091.106] SetErrorMode (uMode=0x1) returned 0x0 [0091.106] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.106] SetErrorMode (uMode=0x0) returned 0x1 [0091.106] GetFileType (hFile=0x230) returned 0x1 [0091.107] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.107] SetErrorMode (uMode=0x1) returned 0x0 [0091.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80063ae2, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x80063ae2, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38c0c4d8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x61)) returned 1 [0091.108] SetErrorMode (uMode=0x0) returned 0x1 [0091.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Session Storage\\MANIFEST-000001.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\session storage\\manifest-000001.partially.cryptonar")) returned 1 [0091.108] SetErrorMode (uMode=0x1) returned 0x0 [0091.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.111] SetErrorMode (uMode=0x0) returned 0x1 [0091.111] GetFileType (hFile=0x230) returned 0x1 [0091.111] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.111] SetErrorMode (uMode=0x1) returned 0x0 [0091.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c4dc615, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c4dc615, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c4dc615, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.111] SetErrorMode (uMode=0x0) returned 0x1 [0091.111] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.partially.cryptonar")) returned 1 [0091.112] SetErrorMode (uMode=0x1) returned 0x0 [0091.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.113] SetErrorMode (uMode=0x0) returned 0x1 [0091.113] GetFileType (hFile=0x230) returned 0x1 [0091.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.114] SetErrorMode (uMode=0x1) returned 0x0 [0091.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46e821, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c46e821, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38c2c489, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0091.114] SetErrorMode (uMode=0x0) returned 0x1 [0091.114] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current.partially.cryptonar")) returned 1 [0091.115] SetErrorMode (uMode=0x1) returned 0x0 [0091.115] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.116] SetErrorMode (uMode=0x0) returned 0x1 [0091.116] GetFileType (hFile=0x230) returned 0x1 [0091.116] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.116] SetErrorMode (uMode=0x1) returned 0x0 [0091.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46c117, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c46c117, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x7c46c117, ftLastWriteTime.dwHighDateTime=0x1d2d443, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.116] SetErrorMode (uMode=0x0) returned 0x1 [0091.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock.partially.cryptonar")) returned 1 [0091.117] SetErrorMode (uMode=0x1) returned 0x0 [0091.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.118] SetErrorMode (uMode=0x0) returned 0x1 [0091.118] GetFileType (hFile=0x230) returned 0x1 [0091.118] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.119] SetErrorMode (uMode=0x1) returned 0x0 [0091.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46c117, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7619d70a, ftLastAccessTime.dwHighDateTime=0x1d2d59f, ftLastWriteTime.dwLowDateTime=0x38c2c489, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0091.119] SetErrorMode (uMode=0x0) returned 0x1 [0091.119] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.partially.cryptonar")) returned 1 [0091.120] SetErrorMode (uMode=0x1) returned 0x0 [0091.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.old"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.121] SetErrorMode (uMode=0x0) returned 0x1 [0091.121] GetFileType (hFile=0x230) returned 0x1 [0091.121] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.122] SetErrorMode (uMode=0x1) returned 0x0 [0091.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.old"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46c117, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0xbfef1e11, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38c2c489, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0091.122] SetErrorMode (uMode=0x0) returned 0x1 [0091.122] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.old"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.old.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.old.partially.cryptonar")) returned 1 [0091.123] SetErrorMode (uMode=0x1) returned 0x0 [0091.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.124] SetErrorMode (uMode=0x0) returned 0x1 [0091.124] GetFileType (hFile=0x230) returned 0x1 [0091.124] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.125] SetErrorMode (uMode=0x1) returned 0x0 [0091.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c46e821, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x7c46e821, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38c2c489, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0091.125] SetErrorMode (uMode=0x0) returned 0x1 [0091.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001.partially.cryptonar")) returned 1 [0091.126] SetErrorMode (uMode=0x1) returned 0x0 [0091.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.127] SetErrorMode (uMode=0x0) returned 0x1 [0091.127] GetFileType (hFile=0x230) returned 0x1 [0091.127] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.146] SetErrorMode (uMode=0x1) returned 0x0 [0091.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e1b9d7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76e1b9d7, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38c80791, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x28df6)) returned 1 [0091.146] SetErrorMode (uMode=0x0) returned 0x1 [0091.146] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.partially.cryptonar")) returned 1 [0091.147] SetErrorMode (uMode=0x1) returned 0x0 [0091.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.148] SetErrorMode (uMode=0x0) returned 0x1 [0091.148] GetFileType (hFile=0x230) returned 0x1 [0091.148] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.149] SetErrorMode (uMode=0x1) returned 0x0 [0091.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e4c74f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x76e4c74f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x38c80791, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0091.149] SetErrorMode (uMode=0x0) returned 0x1 [0091.149] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5.partially.cryptonar")) returned 1 [0091.156] SetErrorMode (uMode=0x1) returned 0x0 [0091.156] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.159] SetErrorMode (uMode=0x0) returned 0x1 [0091.159] GetFileType (hFile=0x230) returned 0x1 [0091.159] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.160] SetErrorMode (uMode=0x1) returned 0x0 [0091.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa175e10b, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0xa175e10b, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x38ca36e7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1 [0091.160] SetErrorMode (uMode=0x0) returned 0x1 [0091.160] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log.partially.cryptonar")) returned 1 [0091.161] SetErrorMode (uMode=0x1) returned 0x0 [0091.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.162] SetErrorMode (uMode=0x0) returned 0x1 [0091.162] GetFileType (hFile=0x230) returned 0x1 [0091.162] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.168] SetErrorMode (uMode=0x1) returned 0x0 [0091.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf481c19a, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xf481c19a, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x38ca36e7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2f4)) returned 1 [0091.169] SetErrorMode (uMode=0x0) returned 0x1 [0091.169] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log.partially.cryptonar")) returned 1 [0091.170] SetErrorMode (uMode=0x1) returned 0x0 [0091.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.172] SetErrorMode (uMode=0x0) returned 0x1 [0091.173] GetFileType (hFile=0x230) returned 0x1 [0091.173] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.174] SetErrorMode (uMode=0x1) returned 0x0 [0091.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3068779, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xb3068779, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x38cc4e76, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x91e)) returned 1 [0091.174] SetErrorMode (uMode=0x0) returned 0x1 [0091.174] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log.partially.cryptonar")) returned 1 [0091.175] SetErrorMode (uMode=0x1) returned 0x0 [0091.175] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.177] SetErrorMode (uMode=0x0) returned 0x1 [0091.177] GetFileType (hFile=0x230) returned 0x1 [0091.177] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.182] SetErrorMode (uMode=0x1) returned 0x0 [0091.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4900fb5, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xed4dd20d, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x38cc4e76, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1 [0091.182] SetErrorMode (uMode=0x0) returned 0x1 [0091.183] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log.partially.cryptonar")) returned 1 [0091.184] SetErrorMode (uMode=0x1) returned 0x0 [0091.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.184] SetErrorMode (uMode=0x0) returned 0x1 [0091.184] GetFileType (hFile=0x230) returned 0x1 [0091.184] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.197] SetErrorMode (uMode=0x1) returned 0x0 [0091.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f4fa2ed, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x1f4fa2ed, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x38ceb024, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xea4)) returned 1 [0091.198] SetErrorMode (uMode=0x0) returned 0x1 [0091.198] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log.partially.cryptonar")) returned 1 [0091.199] SetErrorMode (uMode=0x1) returned 0x0 [0091.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.200] SetErrorMode (uMode=0x0) returned 0x1 [0091.200] GetFileType (hFile=0x230) returned 0x1 [0091.200] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.217] SetErrorMode (uMode=0x1) returned 0x0 [0091.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb902ac, ftCreationTime.dwHighDateTime=0x1d2d02b, ftLastAccessTime.dwLowDateTime=0xcb902ac, ftLastAccessTime.dwHighDateTime=0x1d2d02b, ftLastWriteTime.dwLowDateTime=0x38d11427, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x155a)) returned 1 [0091.217] SetErrorMode (uMode=0x0) returned 0x1 [0091.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log.partially.cryptonar")) returned 1 [0091.218] SetErrorMode (uMode=0x1) returned 0x0 [0091.218] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.219] SetErrorMode (uMode=0x0) returned 0x1 [0091.219] GetFileType (hFile=0x230) returned 0x1 [0091.219] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.238] SetErrorMode (uMode=0x1) returned 0x0 [0091.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf408296e, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xf408296e, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x38d5d8a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ef)) returned 1 [0091.238] SetErrorMode (uMode=0x0) returned 0x1 [0091.238] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log.partially.cryptonar")) returned 1 [0091.239] SetErrorMode (uMode=0x1) returned 0x0 [0091.240] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.241] SetErrorMode (uMode=0x0) returned 0x1 [0091.241] GetFileType (hFile=0x230) returned 0x1 [0091.241] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.242] SetErrorMode (uMode=0x1) returned 0x0 [0091.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd69998, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xecd69998, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x38d5d8a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0091.242] SetErrorMode (uMode=0x0) returned 0x1 [0091.242] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log.partially.cryptonar")) returned 1 [0091.243] SetErrorMode (uMode=0x1) returned 0x0 [0091.243] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.244] SetErrorMode (uMode=0x0) returned 0x1 [0091.244] GetFileType (hFile=0x230) returned 0x1 [0091.244] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.251] SetErrorMode (uMode=0x1) returned 0x0 [0091.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x132e589a, ftCreationTime.dwHighDateTime=0x1d41fe0, ftLastAccessTime.dwLowDateTime=0x132e589a, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x38d83ae2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa11)) returned 1 [0091.251] SetErrorMode (uMode=0x0) returned 0x1 [0091.251] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log.partially.cryptonar")) returned 1 [0091.252] SetErrorMode (uMode=0x1) returned 0x0 [0091.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.255] SetErrorMode (uMode=0x0) returned 0x1 [0091.255] GetFileType (hFile=0x230) returned 0x1 [0091.255] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.261] SetErrorMode (uMode=0x1) returned 0x0 [0091.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28b8b973, ftCreationTime.dwHighDateTime=0x1d39f0d, ftLastAccessTime.dwLowDateTime=0xeaec3259, ftLastAccessTime.dwHighDateTime=0x1d41fd9, ftLastWriteTime.dwLowDateTime=0x38d83ae2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c00)) returned 1 [0091.261] SetErrorMode (uMode=0x0) returned 0x1 [0091.261] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d.partially.cryptonar")) returned 1 [0091.262] SetErrorMode (uMode=0x1) returned 0x0 [0091.262] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.263] SetErrorMode (uMode=0x0) returned 0x1 [0091.263] GetFileType (hFile=0x230) returned 0x1 [0091.263] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.270] SetErrorMode (uMode=0x1) returned 0x0 [0091.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989bd657, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x989bd657, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x38da9be7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0091.270] SetErrorMode (uMode=0x0) returned 0x1 [0091.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms.partially.cryptonar")) returned 1 [0091.271] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x5ae6b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0091.272] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x5ae6b0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0091.273] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x5ae4a0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0091.276] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x5ae560, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0091.276] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x5ae560, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0091.277] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x5ae350, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0091.278] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x5ae350, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0091.279] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x5ae350, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0091.280] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x5ae140, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0091.282] SetErrorMode (uMode=0x1) returned 0x0 [0091.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.282] SetErrorMode (uMode=0x0) returned 0x1 [0091.282] GetFileType (hFile=0x230) returned 0x1 [0091.282] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.305] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x5ae560, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0091.306] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x5ae560, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0091.307] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x5ae350, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0091.308] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x5ae670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0091.309] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x5ae670, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0091.311] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x5ae660, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0091.312] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x5ae660, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0091.313] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms", lpszLongPath=0x5ae450, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms") returned 0x86 [0091.315] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\", lpszLongPath=0x5ae660, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\") returned 0x5c [0091.316] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms.partially.cryptoNar", lpszLongPath=0x5ae660, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0091.316] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms.partially.cryptoNar", lpszLongPath=0x5ae450, cchBuffer=0x104 | out: lpszLongPath="") returned 0x0 [0091.316] GetLongPathNameW (in: lpszShortPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", lpszLongPath=0x5ae3d0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~") returned 0x5b [0091.318] SetErrorMode (uMode=0x1) returned 0x0 [0091.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98805f1c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98805f1c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x38df7144, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0091.318] SetErrorMode (uMode=0x0) returned 0x1 [0091.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\Internet Explorer Suggested Sites~.feed-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\internet explorer suggested sites~.feed-ms.partially.cryptonar")) returned 1 [0091.319] SetErrorMode (uMode=0x1) returned 0x0 [0091.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.321] SetErrorMode (uMode=0x0) returned 0x1 [0091.321] GetFileType (hFile=0x230) returned 0x1 [0091.321] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.321] SetErrorMode (uMode=0x1) returned 0x0 [0091.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x987e8a6d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x987e8a6d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x987e8a6d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.321] SetErrorMode (uMode=0x0) returned 0x1 [0091.321] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\container.dat.partially.cryptonar")) returned 1 [0091.322] SetErrorMode (uMode=0x1) returned 0x0 [0091.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ieonlinews.microsoft[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.323] SetErrorMode (uMode=0x0) returned 0x1 [0091.323] GetFileType (hFile=0x230) returned 0x1 [0091.323] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.323] SetErrorMode (uMode=0x1) returned 0x0 [0091.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ieonlinews.microsoft[1]"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x990a00e3, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x990a00e3, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x990a00e3, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.323] SetErrorMode (uMode=0x0) returned 0x1 [0091.323] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1]" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ieonlinews.microsoft[1]"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Feeds Cache\\O593F7EE\\ieonlinews.microsoft[1].partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\feeds cache\\o593f7ee\\ieonlinews.microsoft[1].partially.cryptonar")) returned 1 [0091.324] SetErrorMode (uMode=0x1) returned 0x0 [0091.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.324] SetErrorMode (uMode=0x0) returned 0x1 [0091.324] GetFileType (hFile=0x230) returned 0x1 [0091.324] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.340] SetErrorMode (uMode=0x1) returned 0x0 [0091.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8b029d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5e8b029d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x38e44d7d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e3b4)) returned 1 [0091.341] SetErrorMode (uMode=0x0) returned 0x1 [0091.341] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\FORMS\\FRMDATA64.DAT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\forms\\frmdata64.dat.partially.cryptonar")) returned 1 [0091.343] SetErrorMode (uMode=0x1) returned 0x0 [0091.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0091.351] SetErrorMode (uMode=0x0) returned 0x1 [0091.353] SetErrorMode (uMode=0x1) returned 0x0 [0091.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.354] SetErrorMode (uMode=0x0) returned 0x1 [0091.354] GetFileType (hFile=0x230) returned 0x1 [0091.354] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x19b7 [0091.356] WriteFile (in: hFile=0x230, lpBuffer=0x283c658*, nNumberOfBytesToWrite=0x19b7, lpNumberOfBytesWritten=0x5ae928, lpOverlapped=0x0 | out: lpBuffer=0x283c658*, lpNumberOfBytesWritten=0x5ae928*=0x19b7, lpOverlapped=0x0) returned 1 [0091.356] CloseHandle (hObject=0x230) returned 1 [0091.357] SetErrorMode (uMode=0x1) returned 0x0 [0091.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadada42f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadada42f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x38e6884c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19b7)) returned 1 [0091.358] SetErrorMode (uMode=0x0) returned 0x1 [0091.358] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.fully.cryptonar")) returned 1 [0091.359] SetErrorMode (uMode=0x1) returned 0x0 [0091.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.368] SetErrorMode (uMode=0x0) returned 0x1 [0091.368] GetFileType (hFile=0x230) returned 0x1 [0091.368] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.379] ReadFile (in: hFile=0x230, lpBuffer=0x2840218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2840218*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0091.379] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.379] WriteFile (in: hFile=0x230, lpBuffer=0x2840218*, nNumberOfBytesToWrite=0x3aa, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2840218*, lpNumberOfBytesWritten=0x5ae8a8*=0x3aa, lpOverlapped=0x0) returned 1 [0091.380] CloseHandle (hObject=0x230) returned 1 [0091.381] SetErrorMode (uMode=0x1) returned 0x0 [0091.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad8c4346, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad8c4346, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x38eb4d22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3aa)) returned 1 [0091.381] SetErrorMode (uMode=0x0) returned 0x1 [0091.381] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-ClearIconCache.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-cleariconcache.log.partially.cryptonar")) returned 1 [0091.382] SetErrorMode (uMode=0x1) returned 0x0 [0091.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.382] GetFileType (hFile=0x230) returned 0x1 [0091.382] SetErrorMode (uMode=0x0) returned 0x1 [0091.382] GetFileType (hFile=0x230) returned 0x1 [0091.382] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.383] ReadFile (in: hFile=0x230, lpBuffer=0x2843ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2843ce0*, lpNumberOfBytesRead=0x5ae8b8*=0x514, lpOverlapped=0x0) returned 1 [0091.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=-276, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.402] WriteFile (in: hFile=0x230, lpBuffer=0x2843ce0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2843ce0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.402] CloseHandle (hObject=0x230) returned 1 [0091.405] SetErrorMode (uMode=0x1) returned 0x0 [0091.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacf149ee, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacf149ee, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x38edaee5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1 [0091.405] SetErrorMode (uMode=0x0) returned 0x1 [0091.405] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\ie4uinit-UserConfig.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ie4uinit-userconfig.log.partially.cryptonar")) returned 1 [0091.407] SetErrorMode (uMode=0x1) returned 0x0 [0091.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.408] GetFileType (hFile=0x230) returned 0x1 [0091.408] SetErrorMode (uMode=0x0) returned 0x1 [0091.408] GetFileType (hFile=0x230) returned 0x1 [0091.408] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.408] ReadFile (in: hFile=0x230, lpBuffer=0x28473b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28473b0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0091.410] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.410] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.410] WriteFile (in: hFile=0x230, lpBuffer=0x28473b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28473b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.411] CloseHandle (hObject=0x230) returned 1 [0091.413] SetErrorMode (uMode=0x1) returned 0x0 [0091.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d1cec53, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4d1cec53, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x38f035fd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0091.413] SetErrorMode (uMode=0x0) returned 0x1 [0091.413] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat.partially.cryptonar")) returned 1 [0091.416] SetErrorMode (uMode=0x1) returned 0x0 [0091.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.416] GetFileType (hFile=0x230) returned 0x1 [0091.416] SetErrorMode (uMode=0x0) returned 0x1 [0091.416] GetFileType (hFile=0x230) returned 0x1 [0091.417] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.417] ReadFile (in: hFile=0x230, lpBuffer=0x284aa38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x284aa38*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0091.437] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.437] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.437] WriteFile (in: hFile=0x230, lpBuffer=0x284aa38*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x284aa38*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.437] CloseHandle (hObject=0x230) returned 1 [0091.440] SetErrorMode (uMode=0x1) returned 0x0 [0091.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7498cb6, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb7498cb6, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x38f4d7eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4700)) returned 1 [0091.441] SetErrorMode (uMode=0x0) returned 0x1 [0091.441] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domainsuggestions\\en-us.1.partially.cryptonar")) returned 1 [0091.443] SetErrorMode (uMode=0x1) returned 0x0 [0091.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.444] GetFileType (hFile=0x230) returned 0x1 [0091.444] SetErrorMode (uMode=0x0) returned 0x1 [0091.444] GetFileType (hFile=0x230) returned 0x1 [0091.444] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.444] ReadFile (in: hFile=0x230, lpBuffer=0x284e168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x284e168*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0091.444] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.445] CloseHandle (hObject=0x230) returned 1 [0091.445] SetErrorMode (uMode=0x1) returned 0x0 [0091.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6e51cfa7, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x6e51cfa7, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x6e51cfa7, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.445] SetErrorMode (uMode=0x0) returned 0x1 [0091.445] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\container.dat.partially.cryptonar")) returned 1 [0091.449] SetErrorMode (uMode=0x1) returned 0x0 [0091.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.452] GetFileType (hFile=0x230) returned 0x1 [0091.452] SetErrorMode (uMode=0x0) returned 0x1 [0091.452] GetFileType (hFile=0x230) returned 0x1 [0091.452] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.452] ReadFile (in: hFile=0x230, lpBuffer=0x28514e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28514e0*, lpNumberOfBytesRead=0x5ae8b8*=0xd, lpOverlapped=0x0) returned 1 [0091.453] ReadFile (in: hFile=0x230, lpBuffer=0x28514e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28514e0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0091.453] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.454] WriteFile (in: hFile=0x230, lpBuffer=0x28514e0*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28514e0*, lpNumberOfBytesWritten=0x5ae8a8*=0xd, lpOverlapped=0x0) returned 1 [0091.454] CloseHandle (hObject=0x230) returned 1 [0091.455] SetErrorMode (uMode=0x1) returned 0x0 [0091.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\www.google[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e530817, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x6e530817, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x38f7384f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1 [0091.455] SetErrorMode (uMode=0x0) returned 0x1 [0091.455] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\www.google[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\52UK17NV\\www.google[1].xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\52uk17nv\\www.google[1].xml.partially.cryptonar")) returned 1 [0091.456] SetErrorMode (uMode=0x1) returned 0x0 [0091.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\consent.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.457] GetFileType (hFile=0x230) returned 0x1 [0091.457] SetErrorMode (uMode=0x0) returned 0x1 [0091.457] GetFileType (hFile=0x230) returned 0x1 [0091.457] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.457] ReadFile (in: hFile=0x230, lpBuffer=0x2854930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2854930*, lpNumberOfBytesRead=0x5ae8b8*=0xd, lpOverlapped=0x0) returned 1 [0091.458] ReadFile (in: hFile=0x230, lpBuffer=0x2854930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2854930*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0091.458] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.459] WriteFile (in: hFile=0x230, lpBuffer=0x2854930*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2854930*, lpNumberOfBytesWritten=0x5ae8a8*=0xd, lpOverlapped=0x0) returned 1 [0091.459] CloseHandle (hObject=0x230) returned 1 [0091.459] SetErrorMode (uMode=0x1) returned 0x0 [0091.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\consent.google[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x537e3208, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x537e3208, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x38f7384f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1 [0091.460] SetErrorMode (uMode=0x0) returned 0x1 [0091.460] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\consent.google[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\L8OQST1L\\consent.google[1].xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\domstore\\l8oqst1l\\consent.google[1].xml.partially.cryptonar")) returned 1 [0091.462] SetErrorMode (uMode=0x1) returned 0x0 [0091.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.463] GetFileType (hFile=0x230) returned 0x1 [0091.463] SetErrorMode (uMode=0x0) returned 0x1 [0091.463] GetFileType (hFile=0x230) returned 0x1 [0091.463] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.463] ReadFile (in: hFile=0x230, lpBuffer=0x2857d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2857d78*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0091.463] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.463] CloseHandle (hObject=0x230) returned 1 [0091.464] SetErrorMode (uMode=0x1) returned 0x0 [0091.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92986be4, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x92986be4, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x92986be4, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.464] SetErrorMode (uMode=0x0) returned 0x1 [0091.464] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat.partially.cryptonar")) returned 1 [0091.465] SetErrorMode (uMode=0x1) returned 0x0 [0091.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.466] GetFileType (hFile=0x230) returned 0x1 [0091.466] SetErrorMode (uMode=0x0) returned 0x1 [0091.466] GetFileType (hFile=0x230) returned 0x1 [0091.466] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.466] ReadFile (in: hFile=0x230, lpBuffer=0x285b138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285b138*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0091.466] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.466] CloseHandle (hObject=0x230) returned 1 [0091.466] SetErrorMode (uMode=0x1) returned 0x0 [0091.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9292edc2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9292edc2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x9292edc2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.467] SetErrorMode (uMode=0x0) returned 0x1 [0091.467] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emiesitelist\\container.dat.partially.cryptonar")) returned 1 [0091.468] SetErrorMode (uMode=0x1) returned 0x0 [0091.468] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.468] GetFileType (hFile=0x230) returned 0x1 [0091.468] SetErrorMode (uMode=0x0) returned 0x1 [0091.469] GetFileType (hFile=0x230) returned 0x1 [0091.469] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.469] ReadFile (in: hFile=0x230, lpBuffer=0x285e4a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285e4a0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0091.469] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.469] CloseHandle (hObject=0x230) returned 1 [0091.470] SetErrorMode (uMode=0x1) returned 0x0 [0091.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92938a00, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x92938a00, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x92938a00, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.470] SetErrorMode (uMode=0x0) returned 0x1 [0091.470] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\emieuserlist\\container.dat.partially.cryptonar")) returned 1 [0091.471] SetErrorMode (uMode=0x1) returned 0x0 [0091.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\iecompatdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.472] GetFileType (hFile=0x230) returned 0x1 [0091.472] SetErrorMode (uMode=0x0) returned 0x1 [0091.472] GetFileType (hFile=0x230) returned 0x1 [0091.472] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.472] ReadFile (in: hFile=0x230, lpBuffer=0x2861830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2861830*, lpNumberOfBytesRead=0x5ae8b8*=0xc10, lpOverlapped=0x0) returned 1 [0091.473] SetFilePointer (in: hFile=0x230, lDistanceToMove=-2064, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.473] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.474] WriteFile (in: hFile=0x230, lpBuffer=0x2861830*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2861830*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.474] CloseHandle (hObject=0x230) returned 1 [0091.475] SetErrorMode (uMode=0x1) returned 0x0 [0091.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\iecompatdata.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad76cdfa, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad76cdfa, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x38f99bca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc10)) returned 1 [0091.475] SetErrorMode (uMode=0x0) returned 0x1 [0091.475] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\iecompatdata.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\iecompatdata.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\iecompatdata\\iecompatdata.xml.partially.cryptonar")) returned 1 [0091.477] SetErrorMode (uMode=0x1) returned 0x0 [0091.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.477] GetFileType (hFile=0x230) returned 0x1 [0091.477] SetErrorMode (uMode=0x0) returned 0x1 [0091.477] GetFileType (hFile=0x230) returned 0x1 [0091.477] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.477] ReadFile (in: hFile=0x230, lpBuffer=0x2864fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2864fc8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0091.477] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.478] CloseHandle (hObject=0x230) returned 1 [0091.478] SetErrorMode (uMode=0x1) returned 0x0 [0091.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xb7924e99, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb7924e99, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0xb7924e99, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.478] SetErrorMode (uMode=0x0) returned 0x1 [0091.478] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\IEFlipAheadCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\ieflipaheadcache\\container.dat.partially.cryptonar")) returned 1 [0091.480] SetErrorMode (uMode=0x1) returned 0x0 [0091.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.480] GetFileType (hFile=0x230) returned 0x1 [0091.480] SetErrorMode (uMode=0x0) returned 0x1 [0091.480] GetFileType (hFile=0x230) returned 0x1 [0091.480] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.480] ReadFile (in: hFile=0x230, lpBuffer=0x2868390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2868390*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0091.505] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.505] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.506] WriteFile (in: hFile=0x230, lpBuffer=0x2868390*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2868390*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.506] CloseHandle (hObject=0x230) returned 1 [0091.523] SetErrorMode (uMode=0x1) returned 0x0 [0091.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x934c79cd, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x934c79cd, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x3900c204, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1614)) returned 1 [0091.523] SetErrorMode (uMode=0x0) returned 0x1 [0091.523] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\sl72e5n\\imagestore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\imagestore\\sl72e5n\\imagestore.dat.partially.cryptonar")) returned 1 [0091.525] SetErrorMode (uMode=0x1) returned 0x0 [0091.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.527] GetFileType (hFile=0x230) returned 0x1 [0091.527] SetErrorMode (uMode=0x0) returned 0x1 [0091.527] GetFileType (hFile=0x230) returned 0x1 [0091.527] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.527] ReadFile (in: hFile=0x230, lpBuffer=0x286bd20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x286bd20*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0091.551] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.551] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.551] WriteFile (in: hFile=0x230, lpBuffer=0x286bd20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x286bd20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.551] CloseHandle (hObject=0x230) returned 1 [0091.560] SetErrorMode (uMode=0x1) returned 0x0 [0091.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26af7b0c, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26af7b0c, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x390587a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1 [0091.560] SetErrorMode (uMode=0x0) returned 0x1 [0091.560] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{63E26EB7-6816-11E7-9BD2-C40142ECDE47}.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{63e26eb7-6816-11e7-9bd2-c40142ecde47}.dat.partially.cryptonar")) returned 1 [0091.562] SetErrorMode (uMode=0x1) returned 0x0 [0091.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.562] GetFileType (hFile=0x230) returned 0x1 [0091.563] SetErrorMode (uMode=0x0) returned 0x1 [0091.563] GetFileType (hFile=0x230) returned 0x1 [0091.563] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.563] ReadFile (in: hFile=0x230, lpBuffer=0x286f828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x286f828*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0091.565] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.565] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.565] WriteFile (in: hFile=0x230, lpBuffer=0x286f828*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x286f828*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.565] CloseHandle (hObject=0x230) returned 1 [0091.567] SetErrorMode (uMode=0x1) returned 0x0 [0091.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c782278, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x5c782278, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x3907ea47, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3200)) returned 1 [0091.567] SetErrorMode (uMode=0x0) returned 0x1 [0091.567] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{94C50253-C9AC-11E7-9BDD-C40142ECDE47}.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{94c50253-c9ac-11e7-9bdd-c40142ecde47}.dat.partially.cryptonar")) returned 1 [0091.568] SetErrorMode (uMode=0x1) returned 0x0 [0091.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\msapplication.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.569] GetFileType (hFile=0x230) returned 0x1 [0091.569] SetErrorMode (uMode=0x0) returned 0x1 [0091.569] GetFileType (hFile=0x230) returned 0x1 [0091.569] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.569] ReadFile (in: hFile=0x230, lpBuffer=0x2873180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2873180*, lpNumberOfBytesRead=0x5ae8b8*=0x1a1, lpOverlapped=0x0) returned 1 [0091.570] ReadFile (in: hFile=0x230, lpBuffer=0x2873180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2873180*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0091.570] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.570] WriteFile (in: hFile=0x230, lpBuffer=0x2873180*, nNumberOfBytesToWrite=0x1a1, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2873180*, lpNumberOfBytesWritten=0x5ae8a8*=0x1a1, lpOverlapped=0x0) returned 1 [0091.570] CloseHandle (hObject=0x230) returned 1 [0091.572] SetErrorMode (uMode=0x1) returned 0x0 [0091.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\msapplication.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b47cb7c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9b47cb7c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x3907ea47, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a1)) returned 1 [0091.572] SetErrorMode (uMode=0x0) returned 0x1 [0091.572] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\msapplication.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\msapplication.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\tiles\\pin-314712940\\msapplication.xml.partially.cryptonar")) returned 1 [0091.574] SetErrorMode (uMode=0x1) returned 0x0 [0091.574] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.575] GetFileType (hFile=0x230) returned 0x1 [0091.575] SetErrorMode (uMode=0x0) returned 0x1 [0091.575] GetFileType (hFile=0x230) returned 0x1 [0091.575] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.575] ReadFile (in: hFile=0x230, lpBuffer=0x28768d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28768d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0091.579] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.579] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.579] WriteFile (in: hFile=0x230, lpBuffer=0x28768d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28768d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.579] CloseHandle (hObject=0x230) returned 1 [0091.581] SetErrorMode (uMode=0x1) returned 0x0 [0091.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62ea748a, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x62ea748a, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x390a4ae2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3866)) returned 1 [0091.581] SetErrorMode (uMode=0x0) returned 0x1 [0091.581] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\versionlist.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\internet explorer\\versionmanager\\versionlist.xml.partially.cryptonar")) returned 1 [0091.582] SetErrorMode (uMode=0x1) returned 0x0 [0091.582] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.585] GetFileType (hFile=0x230) returned 0x1 [0091.585] SetErrorMode (uMode=0x0) returned 0x1 [0091.585] GetFileType (hFile=0x230) returned 0x1 [0091.585] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.585] ReadFile (in: hFile=0x230, lpBuffer=0x287a160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x287a160*, lpNumberOfBytesRead=0x5ae8b8*=0x414, lpOverlapped=0x0) returned 1 [0091.592] SetFilePointer (in: hFile=0x230, lDistanceToMove=-20, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.592] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.592] WriteFile (in: hFile=0x230, lpBuffer=0x287a160*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x287a160*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.593] CloseHandle (hObject=0x230) returned 1 [0091.594] SetErrorMode (uMode=0x1) returned 0x0 [0091.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x390cb15c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0091.595] SetErrorMode (uMode=0x0) returned 0x1 [0091.595] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\01_music_auto_rated_at_5_stars.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\01_Music_auto_rated_at_5_stars.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\01_music_auto_rated_at_5_stars.wpl.partially.cryptonar")) returned 1 [0091.596] SetErrorMode (uMode=0x1) returned 0x0 [0091.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.597] SetErrorMode (uMode=0x0) returned 0x1 [0091.597] GetFileType (hFile=0x230) returned 0x1 [0091.597] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.600] SetErrorMode (uMode=0x1) returned 0x0 [0091.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x390cb15c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0091.601] SetErrorMode (uMode=0x0) returned 0x1 [0091.601] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\02_music_added_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\02_Music_added_in_the_last_month.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\02_music_added_in_the_last_month.wpl.partially.cryptonar")) returned 1 [0091.602] SetErrorMode (uMode=0x1) returned 0x0 [0091.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.604] SetErrorMode (uMode=0x0) returned 0x1 [0091.604] GetFileType (hFile=0x230) returned 0x1 [0091.604] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.631] SetErrorMode (uMode=0x1) returned 0x0 [0091.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x39117454, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0091.632] SetErrorMode (uMode=0x0) returned 0x1 [0091.632] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\03_music_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\03_Music_rated_at_4_or_5_stars.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\03_music_rated_at_4_or_5_stars.wpl.partially.cryptonar")) returned 1 [0091.633] SetErrorMode (uMode=0x1) returned 0x0 [0091.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.633] SetErrorMode (uMode=0x0) returned 0x1 [0091.633] GetFileType (hFile=0x230) returned 0x1 [0091.633] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.635] SetErrorMode (uMode=0x1) returned 0x0 [0091.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x39117454, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1 [0091.635] SetErrorMode (uMode=0x0) returned 0x1 [0091.635] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\04_music_played_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\04_Music_played_in_the_last_month.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\04_music_played_in_the_last_month.wpl.partially.cryptonar")) returned 1 [0091.636] SetErrorMode (uMode=0x1) returned 0x0 [0091.636] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.637] SetErrorMode (uMode=0x0) returned 0x1 [0091.637] GetFileType (hFile=0x230) returned 0x1 [0091.637] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.638] SetErrorMode (uMode=0x1) returned 0x0 [0091.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x39117454, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1 [0091.639] SetErrorMode (uMode=0x0) returned 0x1 [0091.639] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\05_pictures_taken_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\05_Pictures_taken_in_the_last_month.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\05_pictures_taken_in_the_last_month.wpl.partially.cryptonar")) returned 1 [0091.640] SetErrorMode (uMode=0x1) returned 0x0 [0091.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.641] SetErrorMode (uMode=0x0) returned 0x1 [0091.641] GetFileType (hFile=0x230) returned 0x1 [0091.641] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.665] SetErrorMode (uMode=0x1) returned 0x0 [0091.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc19ac7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc19ac7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x391637b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1 [0091.665] SetErrorMode (uMode=0x0) returned 0x1 [0091.665] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\06_pictures_rated_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\06_Pictures_rated_4_or_5_stars.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\06_pictures_rated_4_or_5_stars.wpl.partially.cryptonar")) returned 1 [0091.667] SetErrorMode (uMode=0x1) returned 0x0 [0091.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.668] SetErrorMode (uMode=0x0) returned 0x1 [0091.668] GetFileType (hFile=0x230) returned 0x1 [0091.668] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.670] SetErrorMode (uMode=0x1) returned 0x0 [0091.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x391637b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0091.670] SetErrorMode (uMode=0x0) returned 0x1 [0091.670] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\07_tv_recorded_in_the_last_week.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\07_TV_recorded_in_the_last_week.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\07_tv_recorded_in_the_last_week.wpl.partially.cryptonar")) returned 1 [0091.672] SetErrorMode (uMode=0x1) returned 0x0 [0091.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.673] SetErrorMode (uMode=0x0) returned 0x1 [0091.673] GetFileType (hFile=0x230) returned 0x1 [0091.673] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.675] SetErrorMode (uMode=0x1) returned 0x0 [0091.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x391899e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0091.675] SetErrorMode (uMode=0x0) returned 0x1 [0091.675] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\08_video_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\08_Video_rated_at_4_or_5_stars.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\08_video_rated_at_4_or_5_stars.wpl.partially.cryptonar")) returned 1 [0091.676] SetErrorMode (uMode=0x1) returned 0x0 [0091.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\09_music_played_the_most.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.677] SetErrorMode (uMode=0x0) returned 0x1 [0091.677] GetFileType (hFile=0x230) returned 0x1 [0091.677] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.679] SetErrorMode (uMode=0x1) returned 0x0 [0091.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x391899e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1 [0091.679] SetErrorMode (uMode=0x0) returned 0x1 [0091.679] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\09_music_played_the_most.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\09_Music_played_the_most.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\09_music_played_the_most.wpl.partially.cryptonar")) returned 1 [0091.680] SetErrorMode (uMode=0x1) returned 0x0 [0091.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\10_all_music.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.681] SetErrorMode (uMode=0x0) returned 0x1 [0091.681] GetFileType (hFile=0x230) returned 0x1 [0091.681] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.683] SetErrorMode (uMode=0x1) returned 0x0 [0091.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x391899e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1 [0091.683] SetErrorMode (uMode=0x0) returned 0x1 [0091.683] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\10_all_music.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\10_All_Music.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\10_all_music.wpl.partially.cryptonar")) returned 1 [0091.685] SetErrorMode (uMode=0x1) returned 0x0 [0091.685] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\11_all_pictures.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.685] SetErrorMode (uMode=0x0) returned 0x1 [0091.685] GetFileType (hFile=0x230) returned 0x1 [0091.685] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.686] SetErrorMode (uMode=0x1) returned 0x0 [0091.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x391899e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1 [0091.687] SetErrorMode (uMode=0x0) returned 0x1 [0091.687] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\11_all_pictures.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\11_All_Pictures.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\11_all_pictures.wpl.partially.cryptonar")) returned 1 [0091.715] SetErrorMode (uMode=0x1) returned 0x0 [0091.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\12_all_video.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.716] SetErrorMode (uMode=0x0) returned 0x1 [0091.716] GetFileType (hFile=0x230) returned 0x1 [0091.716] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.726] SetErrorMode (uMode=0x1) returned 0x0 [0091.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacc3fd55, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacc3fd55, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x391fc226, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1 [0091.727] SetErrorMode (uMode=0x0) returned 0x1 [0091.727] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\12_all_video.wpl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00009376\\12_All_Video.wpl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00009376\\12_all_video.wpl.partially.cryptonar")) returned 1 [0091.728] SetErrorMode (uMode=0x1) returned 0x0 [0091.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\powerp16.customui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.729] SetErrorMode (uMode=0x0) returned 0x1 [0091.729] GetFileType (hFile=0x230) returned 0x1 [0091.729] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.738] SetErrorMode (uMode=0x1) returned 0x0 [0091.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\powerp16.customui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc72dba4b, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xc72dba4b, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x39222381, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0091.739] SetErrorMode (uMode=0x0) returned 0x1 [0091.739] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\powerp16.customui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\PowerP16.customUI.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\powerp16.customui.partially.cryptonar")) returned 1 [0091.741] SetErrorMode (uMode=0x1) returned 0x0 [0091.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\word16.customui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.742] SetErrorMode (uMode=0x0) returned 0x1 [0091.742] GetFileType (hFile=0x230) returned 0x1 [0091.742] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.763] SetErrorMode (uMode=0x1) returned 0x0 [0091.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\word16.customui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2764ab4, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0xd2764ab4, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x39250a0f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdba)) returned 1 [0091.763] SetErrorMode (uMode=0x0) returned 0x1 [0091.763] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\word16.customui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\Word16.customUI.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\word16.customui.partially.cryptonar")) returned 1 [0091.765] SetErrorMode (uMode=0x1) returned 0x0 [0091.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.766] SetErrorMode (uMode=0x0) returned 0x1 [0091.766] GetFileType (hFile=0x230) returned 0x1 [0091.766] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.798] SetErrorMode (uMode=0x1) returned 0x0 [0091.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ac1ad5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x70ac1ad5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x392bac74, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43e8b)) returned 1 [0091.798] SetErrorMode (uMode=0x0) returned 0x1 [0091.798] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml.partially.cryptonar")) returned 1 [0091.799] SetErrorMode (uMode=0x1) returned 0x0 [0091.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.799] SetErrorMode (uMode=0x0) returned 0x1 [0091.799] GetFileType (hFile=0x230) returned 0x1 [0091.800] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.827] SetErrorMode (uMode=0x1) returned 0x0 [0091.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf54bdb08, ftCreationTime.dwHighDateTime=0x1d3aaae, ftLastAccessTime.dwLowDateTime=0xf54bdb08, ftLastAccessTime.dwHighDateTime=0x1d3aaae, ftLastWriteTime.dwLowDateTime=0x392e3492, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x30d11)) returned 1 [0091.828] SetErrorMode (uMode=0x0) returned 0x1 [0091.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml.partially.cryptonar")) returned 1 [0091.830] SetErrorMode (uMode=0x1) returned 0x0 [0091.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.830] SetErrorMode (uMode=0x0) returned 0x1 [0091.830] GetFileType (hFile=0x230) returned 0x1 [0091.830] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.831] SetErrorMode (uMode=0x1) returned 0x0 [0091.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96723353, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x96723353, ftLastAccessTime.dwHighDateTime=0x1d336e4, ftLastWriteTime.dwLowDateTime=0x39307121, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x429)) returned 1 [0091.832] SetErrorMode (uMode=0x0) returned 0x1 [0091.832] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml.partially.cryptonar")) returned 1 [0091.833] SetErrorMode (uMode=0x1) returned 0x0 [0091.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.835] SetErrorMode (uMode=0x0) returned 0x1 [0091.835] GetFileType (hFile=0x230) returned 0x1 [0091.835] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.848] SetErrorMode (uMode=0x1) returned 0x0 [0091.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7991bc71, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x7991bc71, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x3932d3ac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2abd8)) returned 1 [0091.849] SetErrorMode (uMode=0x0) returned 0x1 [0091.849] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml.partially.cryptonar")) returned 1 [0091.851] SetErrorMode (uMode=0x1) returned 0x0 [0091.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.852] SetErrorMode (uMode=0x0) returned 0x1 [0091.852] GetFileType (hFile=0x230) returned 0x1 [0091.852] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.864] SetErrorMode (uMode=0x1) returned 0x0 [0091.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8575d0, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x6a8575d0, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x393536b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x61bb)) returned 1 [0091.864] SetErrorMode (uMode=0x0) returned 0x1 [0091.864] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml.partially.cryptonar")) returned 1 [0091.866] SetErrorMode (uMode=0x1) returned 0x0 [0091.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.866] SetErrorMode (uMode=0x0) returned 0x1 [0091.866] GetFileType (hFile=0x230) returned 0x1 [0091.866] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x58 [0091.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0091.873] SetErrorMode (uMode=0x1) returned 0x0 [0091.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6513f054, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x6513f054, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x393536b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12821)) returned 1 [0091.874] SetErrorMode (uMode=0x0) returned 0x1 [0091.874] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml.partially.cryptonar")) returned 1 [0091.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0091.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0091.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0091.875] SetErrorMode (uMode=0x1) returned 0x0 [0091.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\onenote.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.876] GetFileType (hFile=0x230) returned 0x1 [0091.876] SetErrorMode (uMode=0x0) returned 0x1 [0091.876] GetFileType (hFile=0x230) returned 0x1 [0091.876] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.876] ReadFile (in: hFile=0x230, lpBuffer=0x26c1928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c1928*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0091.898] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.898] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.898] WriteFile (in: hFile=0x230, lpBuffer=0x26c1928*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c1928*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.899] CloseHandle (hObject=0x230) returned 1 [0091.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0091.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0091.905] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0091.905] SetErrorMode (uMode=0x1) returned 0x0 [0091.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\onenote.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f99a5f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65f99a5f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3939fb1b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2cd1c)) returned 1 [0091.905] SetErrorMode (uMode=0x0) returned 0x1 [0091.905] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\onenote.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\onenote.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\onenote.exe_rules.xml.partially.cryptonar")) returned 1 [0091.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0091.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0091.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0091.916] SetErrorMode (uMode=0x1) returned 0x0 [0091.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\osfinstaller.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.917] GetFileType (hFile=0x230) returned 0x1 [0091.917] SetErrorMode (uMode=0x0) returned 0x1 [0091.917] GetFileType (hFile=0x230) returned 0x1 [0091.917] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.917] ReadFile (in: hFile=0x230, lpBuffer=0x26c5000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c5000*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0091.935] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.935] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.935] WriteFile (in: hFile=0x230, lpBuffer=0x26c5000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c5000*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.936] CloseHandle (hObject=0x230) returned 1 [0091.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0091.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml", lpFilePart=0x0) returned 0x54 [0091.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x68 [0091.938] SetErrorMode (uMode=0x1) returned 0x0 [0091.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\osfinstaller.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x509abc95, ftCreationTime.dwHighDateTime=0x1d41fda, ftLastAccessTime.dwLowDateTime=0x509abc95, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x39412f76, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x148a2)) returned 1 [0091.939] SetErrorMode (uMode=0x0) returned 0x1 [0091.939] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\osfinstaller.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\osfinstaller.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\osfinstaller.exe_rules.xml.partially.cryptonar")) returned 1 [0091.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0091.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0091.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0091.941] SetErrorMode (uMode=0x1) returned 0x0 [0091.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.941] GetFileType (hFile=0x230) returned 0x1 [0091.941] SetErrorMode (uMode=0x0) returned 0x1 [0091.941] GetFileType (hFile=0x230) returned 0x1 [0091.941] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.941] ReadFile (in: hFile=0x230, lpBuffer=0x26c86f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c86f0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0091.950] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.950] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.950] WriteFile (in: hFile=0x230, lpBuffer=0x26c86f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c86f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.951] CloseHandle (hObject=0x230) returned 1 [0091.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0091.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0091.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0091.957] SetErrorMode (uMode=0x1) returned 0x0 [0091.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e9e1587, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5e9e1587, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39438356, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x38843)) returned 1 [0091.957] SetErrorMode (uMode=0x0) returned 0x1 [0091.957] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml.partially.cryptonar")) returned 1 [0091.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0091.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0091.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0091.958] SetErrorMode (uMode=0x1) returned 0x0 [0091.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0091.959] GetFileType (hFile=0x230) returned 0x1 [0091.959] SetErrorMode (uMode=0x0) returned 0x1 [0091.959] GetFileType (hFile=0x230) returned 0x1 [0091.959] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.959] ReadFile (in: hFile=0x230, lpBuffer=0x26cbda0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cbda0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0091.985] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0091.985] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0091.985] WriteFile (in: hFile=0x230, lpBuffer=0x26cbda0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cbda0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0091.986] CloseHandle (hObject=0x230) returned 1 [0092.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0092.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x50 [0092.016] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0092.016] SetErrorMode (uMode=0x1) returned 0x0 [0092.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x575e1cc8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x575e1cc8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x394aabfa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x32b10)) returned 1 [0092.016] SetErrorMode (uMode=0x0) returned 0x1 [0092.016] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml.partially.cryptonar")) returned 1 [0092.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0092.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0092.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0092.018] SetErrorMode (uMode=0x1) returned 0x0 [0092.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.018] GetFileType (hFile=0x230) returned 0x1 [0092.018] SetErrorMode (uMode=0x0) returned 0x1 [0092.018] GetFileType (hFile=0x230) returned 0x1 [0092.018] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.018] ReadFile (in: hFile=0x230, lpBuffer=0x26cf450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cf450*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.034] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.034] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.034] WriteFile (in: hFile=0x230, lpBuffer=0x26cf450*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cf450*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.034] CloseHandle (hObject=0x230) returned 1 [0092.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0092.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0092.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0092.069] SetErrorMode (uMode=0x1) returned 0x0 [0092.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x318562b6, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x318562b6, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x39543587, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfd13)) returned 1 [0092.069] SetErrorMode (uMode=0x0) returned 0x1 [0092.069] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup.exe_rules.xml.partially.cryptonar")) returned 1 [0092.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.070] SetErrorMode (uMode=0x1) returned 0x0 [0092.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.071] GetFileType (hFile=0x230) returned 0x1 [0092.071] SetErrorMode (uMode=0x0) returned 0x1 [0092.071] GetFileType (hFile=0x230) returned 0x1 [0092.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.071] ReadFile (in: hFile=0x230, lpBuffer=0x26d2ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d2ae0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.073] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.073] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.073] WriteFile (in: hFile=0x230, lpBuffer=0x26d2ae0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d2ae0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.073] CloseHandle (hObject=0x230) returned 1 [0092.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0092.074] SetErrorMode (uMode=0x1) returned 0x0 [0092.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf27a9dbd, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xf27a9dbd, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x39543587, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x61bb)) returned 1 [0092.075] SetErrorMode (uMode=0x0) returned 0x1 [0092.075] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml.partially.cryptonar")) returned 1 [0092.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0092.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0092.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0092.076] SetErrorMode (uMode=0x1) returned 0x0 [0092.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.076] GetFileType (hFile=0x230) returned 0x1 [0092.076] SetErrorMode (uMode=0x0) returned 0x1 [0092.077] GetFileType (hFile=0x230) returned 0x1 [0092.077] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.077] ReadFile (in: hFile=0x230, lpBuffer=0x26d6168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d6168*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.097] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.098] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.098] WriteFile (in: hFile=0x230, lpBuffer=0x26d6168*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d6168*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.098] CloseHandle (hObject=0x230) returned 1 [0092.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0092.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x4d [0092.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0092.124] SetErrorMode (uMode=0x1) returned 0x0 [0092.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60188f08, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x60188f08, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x395d6824, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x36e1b)) returned 1 [0092.124] SetErrorMode (uMode=0x0) returned 0x1 [0092.124] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml.partially.cryptonar")) returned 1 [0092.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.126] SetErrorMode (uMode=0x1) returned 0x0 [0092.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.128] GetFileType (hFile=0x230) returned 0x1 [0092.128] SetErrorMode (uMode=0x0) returned 0x1 [0092.128] GetFileType (hFile=0x230) returned 0x1 [0092.129] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.129] ReadFile (in: hFile=0x230, lpBuffer=0x26d97f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d97f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.145] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.146] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.146] WriteFile (in: hFile=0x230, lpBuffer=0x26d97f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d97f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.146] CloseHandle (hObject=0x230) returned 1 [0092.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.156] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0092.156] SetErrorMode (uMode=0x1) returned 0x0 [0092.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64994be0, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x64994be0, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39604e25, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2324c)) returned 1 [0092.156] SetErrorMode (uMode=0x0) returned 0x1 [0092.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml.partially.cryptonar")) returned 1 [0092.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.159] SetErrorMode (uMode=0x1) returned 0x0 [0092.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.159] GetFileType (hFile=0x230) returned 0x1 [0092.159] SetErrorMode (uMode=0x0) returned 0x1 [0092.159] GetFileType (hFile=0x230) returned 0x1 [0092.159] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.159] ReadFile (in: hFile=0x230, lpBuffer=0x26dce90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26dce90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.195] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.196] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.196] WriteFile (in: hFile=0x230, lpBuffer=0x26dce90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26dce90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.196] CloseHandle (hObject=0x230) returned 1 [0092.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x4f [0092.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0092.260] SetErrorMode (uMode=0x1) returned 0x0 [0092.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x497e7df5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x497e7df5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39721992, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b3d2)) returned 1 [0092.260] SetErrorMode (uMode=0x0) returned 0x1 [0092.260] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml.partially.cryptonar")) returned 1 [0092.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", lpFilePart=0x0) returned 0x93 [0092.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", lpFilePart=0x0) returned 0x93 [0092.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", lpFilePart=0x0) returned 0x93 [0092.263] SetErrorMode (uMode=0x1) returned 0x0 [0092.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\29598952-6912-4b4e-8754-d3e714f498c3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.265] GetFileType (hFile=0x230) returned 0x1 [0092.265] SetErrorMode (uMode=0x0) returned 0x1 [0092.265] GetFileType (hFile=0x230) returned 0x1 [0092.265] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.265] ReadFile (in: hFile=0x230, lpBuffer=0x26e06b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e06b0*, lpNumberOfBytesRead=0x5ae8b8*=0x2c1, lpOverlapped=0x0) returned 1 [0092.293] ReadFile (in: hFile=0x230, lpBuffer=0x26e06b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e06b0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0092.293] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.293] WriteFile (in: hFile=0x230, lpBuffer=0x26e06b0*, nNumberOfBytesToWrite=0x2c1, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e06b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x2c1, lpOverlapped=0x0) returned 1 [0092.294] CloseHandle (hObject=0x230) returned 1 [0092.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", lpFilePart=0x0) returned 0x93 [0092.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3", lpFilePart=0x0) returned 0x93 [0092.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3.partially.cryptoNar", lpFilePart=0x0) returned 0xa7 [0092.295] SetErrorMode (uMode=0x1) returned 0x0 [0092.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\29598952-6912-4b4e-8754-d3e714f498c3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aecdd9a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x5aecdd9a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x39769758, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c1)) returned 1 [0092.295] SetErrorMode (uMode=0x0) returned 0x1 [0092.295] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\29598952-6912-4b4e-8754-d3e714f498c3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\cdn.odc.officeapps.live.com\\29598952-6912-4B4E-8754-D3E714F498C3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\cdn.odc.officeapps.live.com\\29598952-6912-4b4e-8754-d3e714f498c3.partially.cryptonar")) returned 1 [0092.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", lpFilePart=0x0) returned 0x9a [0092.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", lpFilePart=0x0) returned 0x9a [0092.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", lpFilePart=0x0) returned 0x9a [0092.296] SetErrorMode (uMode=0x1) returned 0x0 [0092.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.300] GetFileType (hFile=0x230) returned 0x1 [0092.300] SetErrorMode (uMode=0x0) returned 0x1 [0092.300] GetFileType (hFile=0x230) returned 0x1 [0092.300] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.300] ReadFile (in: hFile=0x230, lpBuffer=0x26e43d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e43d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.357] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.358] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.358] WriteFile (in: hFile=0x230, lpBuffer=0x26e43d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e43d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.358] CloseHandle (hObject=0x230) returned 1 [0092.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", lpFilePart=0x0) returned 0x9a [0092.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24", lpFilePart=0x0) returned 0x9a [0092.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.359] SetErrorMode (uMode=0x1) returned 0x0 [0092.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7323dbd6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7323dbd6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3980333e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c01)) returned 1 [0092.359] SetErrorMode (uMode=0x0) returned 0x1 [0092.360] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\01A0C0A0-84FB-4EB4-A9A1-4BCABE4EFC24.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\01a0c0a0-84fb-4eb4-a9a1-4bcabe4efc24.partially.cryptonar")) returned 1 [0092.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", lpFilePart=0x0) returned 0x9a [0092.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", lpFilePart=0x0) returned 0x9a [0092.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", lpFilePart=0x0) returned 0x9a [0092.361] SetErrorMode (uMode=0x1) returned 0x0 [0092.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.361] GetFileType (hFile=0x230) returned 0x1 [0092.361] SetErrorMode (uMode=0x0) returned 0x1 [0092.361] GetFileType (hFile=0x230) returned 0x1 [0092.362] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.362] ReadFile (in: hFile=0x230, lpBuffer=0x26e7fb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e7fb8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.371] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.371] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.371] WriteFile (in: hFile=0x230, lpBuffer=0x26e7fb8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e7fb8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.371] CloseHandle (hObject=0x230) returned 1 [0092.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", lpFilePart=0x0) returned 0x9a [0092.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7", lpFilePart=0x0) returned 0x9a [0092.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.388] SetErrorMode (uMode=0x1) returned 0x0 [0092.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7378960a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7378960a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3984f806, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11da)) returned 1 [0092.388] SetErrorMode (uMode=0x0) returned 0x1 [0092.388] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\04A54DF6-2C68-43B6-89EB-3B7958597AC7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\04a54df6-2c68-43b6-89eb-3b7958597ac7.partially.cryptonar")) returned 1 [0092.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", lpFilePart=0x0) returned 0x9a [0092.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", lpFilePart=0x0) returned 0x9a [0092.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", lpFilePart=0x0) returned 0x9a [0092.390] SetErrorMode (uMode=0x1) returned 0x0 [0092.390] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.391] GetFileType (hFile=0x230) returned 0x1 [0092.391] SetErrorMode (uMode=0x0) returned 0x1 [0092.391] GetFileType (hFile=0x230) returned 0x1 [0092.391] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.391] ReadFile (in: hFile=0x230, lpBuffer=0x26ebb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ebb98*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.402] WriteFile (in: hFile=0x230, lpBuffer=0x26ebb98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ebb98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.403] CloseHandle (hObject=0x230) returned 1 [0092.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", lpFilePart=0x0) returned 0x9a [0092.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2", lpFilePart=0x0) returned 0x9a [0092.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.404] SetErrorMode (uMode=0x1) returned 0x0 [0092.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884aebe5, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884aebe5, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x3987790f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3765)) returned 1 [0092.405] SetErrorMode (uMode=0x0) returned 0x1 [0092.405] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\0552393D-14EB-4F89-8C21-8959A49968D2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\0552393d-14eb-4f89-8c21-8959a49968d2.partially.cryptonar")) returned 1 [0092.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", lpFilePart=0x0) returned 0x9a [0092.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", lpFilePart=0x0) returned 0x9a [0092.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", lpFilePart=0x0) returned 0x9a [0092.406] SetErrorMode (uMode=0x1) returned 0x0 [0092.406] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.407] GetFileType (hFile=0x230) returned 0x1 [0092.407] SetErrorMode (uMode=0x0) returned 0x1 [0092.407] GetFileType (hFile=0x230) returned 0x1 [0092.407] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.407] ReadFile (in: hFile=0x230, lpBuffer=0x26ef778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ef778*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.433] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.433] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.433] WriteFile (in: hFile=0x230, lpBuffer=0x26ef778*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ef778*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.433] CloseHandle (hObject=0x230) returned 1 [0092.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", lpFilePart=0x0) returned 0x9a [0092.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838", lpFilePart=0x0) returned 0x9a [0092.450] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.450] SetErrorMode (uMode=0x1) returned 0x0 [0092.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73163316, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73163316, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x398edf56, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3449)) returned 1 [0092.451] SetErrorMode (uMode=0x0) returned 0x1 [0092.451] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\07EC9290-11A1-4B7B-8542-424076F02838.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\07ec9290-11a1-4b7b-8542-424076f02838.partially.cryptonar")) returned 1 [0092.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", lpFilePart=0x0) returned 0x9a [0092.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", lpFilePart=0x0) returned 0x9a [0092.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", lpFilePart=0x0) returned 0x9a [0092.452] SetErrorMode (uMode=0x1) returned 0x0 [0092.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.453] GetFileType (hFile=0x230) returned 0x1 [0092.453] SetErrorMode (uMode=0x0) returned 0x1 [0092.453] GetFileType (hFile=0x230) returned 0x1 [0092.453] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.453] ReadFile (in: hFile=0x230, lpBuffer=0x26f3358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f3358*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.474] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.474] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.474] WriteFile (in: hFile=0x230, lpBuffer=0x26f3358*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f3358*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.475] CloseHandle (hObject=0x230) returned 1 [0092.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", lpFilePart=0x0) returned 0x9a [0092.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D", lpFilePart=0x0) returned 0x9a [0092.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.477] SetErrorMode (uMode=0x1) returned 0x0 [0092.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880c321e, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880c321e, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39934ef8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6454)) returned 1 [0092.477] SetErrorMode (uMode=0x0) returned 0x1 [0092.477] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\18E43682-B084-475D-AA0F-B94BD8888B3D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\18e43682-b084-475d-aa0f-b94bd8888b3d.partially.cryptonar")) returned 1 [0092.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", lpFilePart=0x0) returned 0x9a [0092.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", lpFilePart=0x0) returned 0x9a [0092.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", lpFilePart=0x0) returned 0x9a [0092.478] SetErrorMode (uMode=0x1) returned 0x0 [0092.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.479] GetFileType (hFile=0x230) returned 0x1 [0092.479] SetErrorMode (uMode=0x0) returned 0x1 [0092.479] GetFileType (hFile=0x230) returned 0x1 [0092.479] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.479] ReadFile (in: hFile=0x230, lpBuffer=0x26f6f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f6f38*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.493] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.494] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.494] WriteFile (in: hFile=0x230, lpBuffer=0x26f6f38*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f6f38*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.501] CloseHandle (hObject=0x230) returned 1 [0092.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", lpFilePart=0x0) returned 0x9a [0092.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A", lpFilePart=0x0) returned 0x9a [0092.503] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.503] SetErrorMode (uMode=0x1) returned 0x0 [0092.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738ccec4, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738ccec4, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3995a8b2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4a40)) returned 1 [0092.503] SetErrorMode (uMode=0x0) returned 0x1 [0092.503] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2378B1B3-B054-41CE-B565-01C50DF64F3A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2378b1b3-b054-41ce-b565-01c50df64f3a.partially.cryptonar")) returned 1 [0092.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", lpFilePart=0x0) returned 0x9a [0092.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", lpFilePart=0x0) returned 0x9a [0092.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", lpFilePart=0x0) returned 0x9a [0092.504] SetErrorMode (uMode=0x1) returned 0x0 [0092.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.505] GetFileType (hFile=0x230) returned 0x1 [0092.505] SetErrorMode (uMode=0x0) returned 0x1 [0092.505] GetFileType (hFile=0x230) returned 0x1 [0092.505] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.505] ReadFile (in: hFile=0x230, lpBuffer=0x26fab18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fab18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.531] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.531] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.532] WriteFile (in: hFile=0x230, lpBuffer=0x26fab18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26fab18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.532] CloseHandle (hObject=0x230) returned 1 [0092.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", lpFilePart=0x0) returned 0x9a [0092.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336", lpFilePart=0x0) returned 0x9a [0092.548] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.548] SetErrorMode (uMode=0x1) returned 0x0 [0092.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73505f1a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73505f1a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x399e3281, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6754)) returned 1 [0092.548] SetErrorMode (uMode=0x0) returned 0x1 [0092.548] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\24E98DA1-B779-4FAC-9144-3233D1979336.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\24e98da1-b779-4fac-9144-3233d1979336.partially.cryptonar")) returned 1 [0092.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", lpFilePart=0x0) returned 0x9a [0092.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", lpFilePart=0x0) returned 0x9a [0092.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", lpFilePart=0x0) returned 0x9a [0092.550] SetErrorMode (uMode=0x1) returned 0x0 [0092.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.551] GetFileType (hFile=0x230) returned 0x1 [0092.551] SetErrorMode (uMode=0x0) returned 0x1 [0092.551] GetFileType (hFile=0x230) returned 0x1 [0092.551] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.552] ReadFile (in: hFile=0x230, lpBuffer=0x26fe6f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fe6f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.565] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.565] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.565] WriteFile (in: hFile=0x230, lpBuffer=0x26fe6f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26fe6f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.566] CloseHandle (hObject=0x230) returned 1 [0092.567] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", lpFilePart=0x0) returned 0x9a [0092.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137", lpFilePart=0x0) returned 0x9a [0092.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.568] SetErrorMode (uMode=0x1) returned 0x0 [0092.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734d9fcd, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734d9fcd, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x399f3275, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f81)) returned 1 [0092.568] SetErrorMode (uMode=0x0) returned 0x1 [0092.568] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\2A9BD5FC-A11E-42DF-A867-B07EE85C6137.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\2a9bd5fc-a11e-42df-a867-b07ee85c6137.partially.cryptonar")) returned 1 [0092.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", lpFilePart=0x0) returned 0x9a [0092.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", lpFilePart=0x0) returned 0x9a [0092.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", lpFilePart=0x0) returned 0x9a [0092.570] SetErrorMode (uMode=0x1) returned 0x0 [0092.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.571] GetFileType (hFile=0x230) returned 0x1 [0092.571] SetErrorMode (uMode=0x0) returned 0x1 [0092.571] GetFileType (hFile=0x230) returned 0x1 [0092.571] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.571] ReadFile (in: hFile=0x230, lpBuffer=0x27022d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27022d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.576] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.576] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.576] WriteFile (in: hFile=0x230, lpBuffer=0x27022d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27022d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.576] CloseHandle (hObject=0x230) returned 1 [0092.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", lpFilePart=0x0) returned 0x9a [0092.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34", lpFilePart=0x0) returned 0x9a [0092.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.578] SetErrorMode (uMode=0x1) returned 0x0 [0092.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x731150db, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x731150db, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39a19633, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d49)) returned 1 [0092.578] SetErrorMode (uMode=0x0) returned 0x1 [0092.578] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\3ECE84BD-CF61-4B84-85B4-BB9C029B1D34.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\3ece84bd-cf61-4b84-85b4-bb9c029b1d34.partially.cryptonar")) returned 1 [0092.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", lpFilePart=0x0) returned 0x9a [0092.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", lpFilePart=0x0) returned 0x9a [0092.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", lpFilePart=0x0) returned 0x9a [0092.579] SetErrorMode (uMode=0x1) returned 0x0 [0092.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.580] GetFileType (hFile=0x230) returned 0x1 [0092.580] SetErrorMode (uMode=0x0) returned 0x1 [0092.580] GetFileType (hFile=0x230) returned 0x1 [0092.580] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.580] ReadFile (in: hFile=0x230, lpBuffer=0x2705eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2705eb8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.586] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.587] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.587] WriteFile (in: hFile=0x230, lpBuffer=0x2705eb8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2705eb8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.587] CloseHandle (hObject=0x230) returned 1 [0092.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", lpFilePart=0x0) returned 0x9a [0092.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019", lpFilePart=0x0) returned 0x9a [0092.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.592] SetErrorMode (uMode=0x1) returned 0x0 [0092.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880ad29b, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880ad29b, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39a40174, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4faa)) returned 1 [0092.592] SetErrorMode (uMode=0x0) returned 0x1 [0092.592] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\41D65FE9-AE28-4485-82A5-B9D59D0A0019.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\41d65fe9-ae28-4485-82a5-b9d59d0a0019.partially.cryptonar")) returned 1 [0092.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", lpFilePart=0x0) returned 0x9a [0092.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", lpFilePart=0x0) returned 0x9a [0092.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", lpFilePart=0x0) returned 0x9a [0092.594] SetErrorMode (uMode=0x1) returned 0x0 [0092.594] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\4558ee3b-be9e-4dda-a9e5-d74aa0d2d069"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.594] GetFileType (hFile=0x230) returned 0x1 [0092.594] SetErrorMode (uMode=0x0) returned 0x1 [0092.594] GetFileType (hFile=0x230) returned 0x1 [0092.595] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.595] ReadFile (in: hFile=0x230, lpBuffer=0x2709a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2709a98*, lpNumberOfBytesRead=0x5ae8b8*=0x96f, lpOverlapped=0x0) returned 1 [0092.618] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1391, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.618] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.618] WriteFile (in: hFile=0x230, lpBuffer=0x2709a98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2709a98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.618] CloseHandle (hObject=0x230) returned 1 [0092.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", lpFilePart=0x0) returned 0x9a [0092.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069", lpFilePart=0x0) returned 0x9a [0092.620] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.620] SetErrorMode (uMode=0x1) returned 0x0 [0092.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\4558ee3b-be9e-4dda-a9e5-d74aa0d2d069"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7362ea16, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7362ea16, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39a8bc38, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x96f)) returned 1 [0092.620] SetErrorMode (uMode=0x0) returned 0x1 [0092.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\4558ee3b-be9e-4dda-a9e5-d74aa0d2d069"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\4558EE3B-BE9E-4DDA-A9E5-D74AA0D2D069.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\4558ee3b-be9e-4dda-a9e5-d74aa0d2d069.partially.cryptonar")) returned 1 [0092.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", lpFilePart=0x0) returned 0x9a [0092.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", lpFilePart=0x0) returned 0x9a [0092.621] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", lpFilePart=0x0) returned 0x9a [0092.621] SetErrorMode (uMode=0x1) returned 0x0 [0092.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.622] GetFileType (hFile=0x230) returned 0x1 [0092.622] SetErrorMode (uMode=0x0) returned 0x1 [0092.622] GetFileType (hFile=0x230) returned 0x1 [0092.623] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.623] ReadFile (in: hFile=0x230, lpBuffer=0x270d678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270d678*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.625] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.625] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.625] WriteFile (in: hFile=0x230, lpBuffer=0x270d678*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270d678*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.625] CloseHandle (hObject=0x230) returned 1 [0092.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", lpFilePart=0x0) returned 0x9a [0092.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156", lpFilePart=0x0) returned 0x9a [0092.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.627] SetErrorMode (uMode=0x1) returned 0x0 [0092.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73173100, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73173100, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39a8bc38, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5294)) returned 1 [0092.627] SetErrorMode (uMode=0x0) returned 0x1 [0092.627] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\46DE614E-0C9B-46EB-84F0-89F985E8C156.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\46de614e-0c9b-46eb-84f0-89f985e8c156.partially.cryptonar")) returned 1 [0092.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", lpFilePart=0x0) returned 0x9a [0092.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", lpFilePart=0x0) returned 0x9a [0092.629] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", lpFilePart=0x0) returned 0x9a [0092.629] SetErrorMode (uMode=0x1) returned 0x0 [0092.629] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.629] GetFileType (hFile=0x230) returned 0x1 [0092.629] SetErrorMode (uMode=0x0) returned 0x1 [0092.629] GetFileType (hFile=0x230) returned 0x1 [0092.630] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.630] ReadFile (in: hFile=0x230, lpBuffer=0x2711258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2711258*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.644] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.644] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.644] WriteFile (in: hFile=0x230, lpBuffer=0x2711258*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2711258*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.645] CloseHandle (hObject=0x230) returned 1 [0092.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", lpFilePart=0x0) returned 0x9a [0092.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D", lpFilePart=0x0) returned 0x9a [0092.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.646] SetErrorMode (uMode=0x1) returned 0x0 [0092.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7340a076, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7340a076, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39ab1d94, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5edd)) returned 1 [0092.647] SetErrorMode (uMode=0x0) returned 0x1 [0092.647] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\488F2960-8DBA-42A5-A6F9-DF66073E536D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\488f2960-8dba-42a5-a6f9-df66073e536d.partially.cryptonar")) returned 1 [0092.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", lpFilePart=0x0) returned 0x9a [0092.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", lpFilePart=0x0) returned 0x9a [0092.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", lpFilePart=0x0) returned 0x9a [0092.649] SetErrorMode (uMode=0x1) returned 0x0 [0092.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.649] GetFileType (hFile=0x230) returned 0x1 [0092.649] SetErrorMode (uMode=0x0) returned 0x1 [0092.649] GetFileType (hFile=0x230) returned 0x1 [0092.649] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.650] ReadFile (in: hFile=0x230, lpBuffer=0x2714e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2714e38*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.657] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.657] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.657] WriteFile (in: hFile=0x230, lpBuffer=0x2714e38*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2714e38*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.658] CloseHandle (hObject=0x230) returned 1 [0092.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", lpFilePart=0x0) returned 0x9a [0092.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365", lpFilePart=0x0) returned 0x9a [0092.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.659] SetErrorMode (uMode=0x1) returned 0x0 [0092.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739483d6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x739483d6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39ad8925, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1505)) returned 1 [0092.659] SetErrorMode (uMode=0x0) returned 0x1 [0092.659] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\542AE9EC-2AAB-4A8D-86CE-BF36E018A365.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\542ae9ec-2aab-4a8d-86ce-bf36e018a365.partially.cryptonar")) returned 1 [0092.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", lpFilePart=0x0) returned 0x9a [0092.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", lpFilePart=0x0) returned 0x9a [0092.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", lpFilePart=0x0) returned 0x9a [0092.661] SetErrorMode (uMode=0x1) returned 0x0 [0092.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.662] GetFileType (hFile=0x230) returned 0x1 [0092.662] SetErrorMode (uMode=0x0) returned 0x1 [0092.662] GetFileType (hFile=0x230) returned 0x1 [0092.662] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.662] ReadFile (in: hFile=0x230, lpBuffer=0x2718a18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2718a18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.674] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.674] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.674] WriteFile (in: hFile=0x230, lpBuffer=0x2718a18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2718a18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.675] CloseHandle (hObject=0x230) returned 1 [0092.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", lpFilePart=0x0) returned 0x9a [0092.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02", lpFilePart=0x0) returned 0x9a [0092.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.676] SetErrorMode (uMode=0x1) returned 0x0 [0092.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8815f6b0, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8815f6b0, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39afe20f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5dba)) returned 1 [0092.677] SetErrorMode (uMode=0x0) returned 0x1 [0092.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5B8C44D4-2A63-481E-A1AB-5E6CF4501F02.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5b8c44d4-2a63-481e-a1ab-5e6cf4501f02.partially.cryptonar")) returned 1 [0092.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", lpFilePart=0x0) returned 0x9a [0092.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", lpFilePart=0x0) returned 0x9a [0092.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", lpFilePart=0x0) returned 0x9a [0092.678] SetErrorMode (uMode=0x1) returned 0x0 [0092.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.679] GetFileType (hFile=0x230) returned 0x1 [0092.679] SetErrorMode (uMode=0x0) returned 0x1 [0092.679] GetFileType (hFile=0x230) returned 0x1 [0092.679] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.679] ReadFile (in: hFile=0x230, lpBuffer=0x271c5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271c5f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.681] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.681] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.681] WriteFile (in: hFile=0x230, lpBuffer=0x271c5f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271c5f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.682] CloseHandle (hObject=0x230) returned 1 [0092.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", lpFilePart=0x0) returned 0x9a [0092.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93", lpFilePart=0x0) returned 0x9a [0092.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.683] SetErrorMode (uMode=0x1) returned 0x0 [0092.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733e42f0, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x733e42f0, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39b24613, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x44a9)) returned 1 [0092.684] SetErrorMode (uMode=0x0) returned 0x1 [0092.684] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\5EABD895-1369-4673-B65E-C121C8F05C93.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\5eabd895-1369-4673-b65e-c121c8f05c93.partially.cryptonar")) returned 1 [0092.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", lpFilePart=0x0) returned 0x9a [0092.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", lpFilePart=0x0) returned 0x9a [0092.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", lpFilePart=0x0) returned 0x9a [0092.685] SetErrorMode (uMode=0x1) returned 0x0 [0092.685] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.686] GetFileType (hFile=0x230) returned 0x1 [0092.686] SetErrorMode (uMode=0x0) returned 0x1 [0092.686] GetFileType (hFile=0x230) returned 0x1 [0092.686] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.686] ReadFile (in: hFile=0x230, lpBuffer=0x27201d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27201d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.695] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.696] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.696] WriteFile (in: hFile=0x230, lpBuffer=0x27201d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27201d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.696] CloseHandle (hObject=0x230) returned 1 [0092.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", lpFilePart=0x0) returned 0x9a [0092.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062", lpFilePart=0x0) returned 0x9a [0092.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.698] SetErrorMode (uMode=0x1) returned 0x0 [0092.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73288378, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73288378, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39b4a6bb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x848d)) returned 1 [0092.698] SetErrorMode (uMode=0x0) returned 0x1 [0092.698] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66172C59-AA66-47DE-BD2B-1B908C570062.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66172c59-aa66-47de-bd2b-1b908c570062.partially.cryptonar")) returned 1 [0092.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", lpFilePart=0x0) returned 0x9a [0092.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", lpFilePart=0x0) returned 0x9a [0092.699] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", lpFilePart=0x0) returned 0x9a [0092.700] SetErrorMode (uMode=0x1) returned 0x0 [0092.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.700] GetFileType (hFile=0x230) returned 0x1 [0092.700] SetErrorMode (uMode=0x0) returned 0x1 [0092.700] GetFileType (hFile=0x230) returned 0x1 [0092.701] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.701] ReadFile (in: hFile=0x230, lpBuffer=0x2723db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2723db8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.719] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.719] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.719] WriteFile (in: hFile=0x230, lpBuffer=0x2723db8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2723db8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.719] CloseHandle (hObject=0x230) returned 1 [0092.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", lpFilePart=0x0) returned 0x9a [0092.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463", lpFilePart=0x0) returned 0x9a [0092.721] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.721] SetErrorMode (uMode=0x1) returned 0x0 [0092.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733d3176, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x733d3176, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39b70a64, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x465b)) returned 1 [0092.721] SetErrorMode (uMode=0x0) returned 0x1 [0092.721] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\66408A6E-F696-44FA-B896-9073D83C9463.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\66408a6e-f696-44fa-b896-9073d83c9463.partially.cryptonar")) returned 1 [0092.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", lpFilePart=0x0) returned 0x9a [0092.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", lpFilePart=0x0) returned 0x9a [0092.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", lpFilePart=0x0) returned 0x9a [0092.722] SetErrorMode (uMode=0x1) returned 0x0 [0092.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.723] GetFileType (hFile=0x230) returned 0x1 [0092.724] SetErrorMode (uMode=0x0) returned 0x1 [0092.724] GetFileType (hFile=0x230) returned 0x1 [0092.724] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.724] ReadFile (in: hFile=0x230, lpBuffer=0x2727998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2727998*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.736] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.736] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.736] WriteFile (in: hFile=0x230, lpBuffer=0x2727998*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2727998*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.737] CloseHandle (hObject=0x230) returned 1 [0092.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", lpFilePart=0x0) returned 0x9a [0092.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76", lpFilePart=0x0) returned 0x9a [0092.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.738] SetErrorMode (uMode=0x1) returned 0x0 [0092.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7315bda3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7315bda3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39b9823d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5ac9)) returned 1 [0092.738] SetErrorMode (uMode=0x0) returned 0x1 [0092.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\683C6C51-6FBE-4F12-8495-5B218743CC76.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\683c6c51-6fbe-4f12-8495-5b218743cc76.partially.cryptonar")) returned 1 [0092.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", lpFilePart=0x0) returned 0x9a [0092.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", lpFilePart=0x0) returned 0x9a [0092.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", lpFilePart=0x0) returned 0x9a [0092.740] SetErrorMode (uMode=0x1) returned 0x0 [0092.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.740] GetFileType (hFile=0x230) returned 0x1 [0092.740] SetErrorMode (uMode=0x0) returned 0x1 [0092.740] GetFileType (hFile=0x230) returned 0x1 [0092.740] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.741] ReadFile (in: hFile=0x230, lpBuffer=0x272b578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272b578*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.753] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.753] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.753] WriteFile (in: hFile=0x230, lpBuffer=0x272b578*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272b578*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.753] CloseHandle (hObject=0x230) returned 1 [0092.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", lpFilePart=0x0) returned 0x9a [0092.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F", lpFilePart=0x0) returned 0x9a [0092.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.761] SetErrorMode (uMode=0x1) returned 0x0 [0092.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7349947c, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7349947c, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39be3060, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49f7)) returned 1 [0092.761] SetErrorMode (uMode=0x0) returned 0x1 [0092.761] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\77FD6918-29A5-4F0B-B1A7-EDEADD0A695F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\77fd6918-29a5-4f0b-b1a7-edeadd0a695f.partially.cryptonar")) returned 1 [0092.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", lpFilePart=0x0) returned 0x9a [0092.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", lpFilePart=0x0) returned 0x9a [0092.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", lpFilePart=0x0) returned 0x9a [0092.762] SetErrorMode (uMode=0x1) returned 0x0 [0092.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.763] GetFileType (hFile=0x230) returned 0x1 [0092.763] SetErrorMode (uMode=0x0) returned 0x1 [0092.763] GetFileType (hFile=0x230) returned 0x1 [0092.763] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.763] ReadFile (in: hFile=0x230, lpBuffer=0x272f158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272f158*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.767] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.768] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.768] WriteFile (in: hFile=0x230, lpBuffer=0x272f158*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272f158*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.768] CloseHandle (hObject=0x230) returned 1 [0092.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", lpFilePart=0x0) returned 0x9a [0092.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6", lpFilePart=0x0) returned 0x9a [0092.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.769] SetErrorMode (uMode=0x1) returned 0x0 [0092.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734d78cd, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734d78cd, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39be3060, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x133b)) returned 1 [0092.770] SetErrorMode (uMode=0x0) returned 0x1 [0092.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\797D396D-AC42-4AB5-A395-D4C7890DB4E6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\797d396d-ac42-4ab5-a395-d4c7890db4e6.partially.cryptonar")) returned 1 [0092.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", lpFilePart=0x0) returned 0x9a [0092.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", lpFilePart=0x0) returned 0x9a [0092.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", lpFilePart=0x0) returned 0x9a [0092.771] SetErrorMode (uMode=0x1) returned 0x0 [0092.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.774] GetFileType (hFile=0x230) returned 0x1 [0092.774] SetErrorMode (uMode=0x0) returned 0x1 [0092.774] GetFileType (hFile=0x230) returned 0x1 [0092.774] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.774] ReadFile (in: hFile=0x230, lpBuffer=0x2732d38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2732d38*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.780] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.780] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.781] WriteFile (in: hFile=0x230, lpBuffer=0x2732d38*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2732d38*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.781] CloseHandle (hObject=0x230) returned 1 [0092.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", lpFilePart=0x0) returned 0x9a [0092.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E", lpFilePart=0x0) returned 0x9a [0092.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.789] SetErrorMode (uMode=0x1) returned 0x0 [0092.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x882e61e3, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x882e61e3, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39c303b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39f2b)) returned 1 [0092.789] SetErrorMode (uMode=0x0) returned 0x1 [0092.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7A123EA5-56EE-4596-A54E-8E612EE6B11E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7a123ea5-56ee-4596-a54e-8e612ee6b11e.partially.cryptonar")) returned 1 [0092.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", lpFilePart=0x0) returned 0x9a [0092.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", lpFilePart=0x0) returned 0x9a [0092.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", lpFilePart=0x0) returned 0x9a [0092.791] SetErrorMode (uMode=0x1) returned 0x0 [0092.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.791] GetFileType (hFile=0x230) returned 0x1 [0092.791] SetErrorMode (uMode=0x0) returned 0x1 [0092.791] GetFileType (hFile=0x230) returned 0x1 [0092.791] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.791] ReadFile (in: hFile=0x230, lpBuffer=0x2736918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2736918*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.793] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.793] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.793] WriteFile (in: hFile=0x230, lpBuffer=0x2736918*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2736918*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.793] CloseHandle (hObject=0x230) returned 1 [0092.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", lpFilePart=0x0) returned 0x9a [0092.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42", lpFilePart=0x0) returned 0x9a [0092.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.795] SetErrorMode (uMode=0x1) returned 0x0 [0092.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738121fa, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738121fa, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39c303b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5e8f)) returned 1 [0092.795] SetErrorMode (uMode=0x0) returned 0x1 [0092.795] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7CDC9D9C-BADA-4EA1-8A7A-91189CBCBB42.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7cdc9d9c-bada-4ea1-8a7a-91189cbcbb42.partially.cryptonar")) returned 1 [0092.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", lpFilePart=0x0) returned 0x9a [0092.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", lpFilePart=0x0) returned 0x9a [0092.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", lpFilePart=0x0) returned 0x9a [0092.796] SetErrorMode (uMode=0x1) returned 0x0 [0092.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.797] GetFileType (hFile=0x230) returned 0x1 [0092.797] SetErrorMode (uMode=0x0) returned 0x1 [0092.797] GetFileType (hFile=0x230) returned 0x1 [0092.797] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.797] ReadFile (in: hFile=0x230, lpBuffer=0x273a4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273a4f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.799] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.799] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.799] WriteFile (in: hFile=0x230, lpBuffer=0x273a4f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273a4f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.799] CloseHandle (hObject=0x230) returned 1 [0092.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", lpFilePart=0x0) returned 0x9a [0092.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131", lpFilePart=0x0) returned 0x9a [0092.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.804] SetErrorMode (uMode=0x1) returned 0x0 [0092.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x880b5b35, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x880b5b35, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39c303b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x376e)) returned 1 [0092.804] SetErrorMode (uMode=0x0) returned 0x1 [0092.804] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E661E9F-0FFD-4BF6-A6A9-A33E185C9131.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e661e9f-0ffd-4bf6-a6a9-a33e185c9131.partially.cryptonar")) returned 1 [0092.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", lpFilePart=0x0) returned 0x9a [0092.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", lpFilePart=0x0) returned 0x9a [0092.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", lpFilePart=0x0) returned 0x9a [0092.806] SetErrorMode (uMode=0x1) returned 0x0 [0092.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.806] GetFileType (hFile=0x230) returned 0x1 [0092.806] SetErrorMode (uMode=0x0) returned 0x1 [0092.806] GetFileType (hFile=0x230) returned 0x1 [0092.806] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.806] ReadFile (in: hFile=0x230, lpBuffer=0x273e0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273e0d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.833] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.834] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.834] WriteFile (in: hFile=0x230, lpBuffer=0x273e0d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273e0d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.834] CloseHandle (hObject=0x230) returned 1 [0092.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", lpFilePart=0x0) returned 0x9a [0092.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E", lpFilePart=0x0) returned 0x9a [0092.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.836] SetErrorMode (uMode=0x1) returned 0x0 [0092.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7340796d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7340796d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39c7ee50, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2f9a)) returned 1 [0092.836] SetErrorMode (uMode=0x0) returned 0x1 [0092.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\7E7F2D4D-7FEC-45D5-9242-391C5BBDCE7E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\7e7f2d4d-7fec-45d5-9242-391c5bbdce7e.partially.cryptonar")) returned 1 [0092.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", lpFilePart=0x0) returned 0x9a [0092.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", lpFilePart=0x0) returned 0x9a [0092.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", lpFilePart=0x0) returned 0x9a [0092.837] SetErrorMode (uMode=0x1) returned 0x0 [0092.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.838] GetFileType (hFile=0x230) returned 0x1 [0092.838] SetErrorMode (uMode=0x0) returned 0x1 [0092.838] GetFileType (hFile=0x230) returned 0x1 [0092.838] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.838] ReadFile (in: hFile=0x230, lpBuffer=0x2741cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2741cb8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.858] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.858] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.858] WriteFile (in: hFile=0x230, lpBuffer=0x2741cb8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2741cb8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.859] CloseHandle (hObject=0x230) returned 1 [0092.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", lpFilePart=0x0) returned 0x9a [0092.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B", lpFilePart=0x0) returned 0x9a [0092.862] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.862] SetErrorMode (uMode=0x1) returned 0x0 [0092.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8814d1a4, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8814d1a4, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39cc93bf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x189b4)) returned 1 [0092.863] SetErrorMode (uMode=0x0) returned 0x1 [0092.863] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\804C4A29-C626-4EB0-9A5A-CEC3A687FD1B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\804c4a29-c626-4eb0-9a5a-cec3a687fd1b.partially.cryptonar")) returned 1 [0092.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", lpFilePart=0x0) returned 0x9a [0092.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", lpFilePart=0x0) returned 0x9a [0092.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", lpFilePart=0x0) returned 0x9a [0092.864] SetErrorMode (uMode=0x1) returned 0x0 [0092.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.865] GetFileType (hFile=0x230) returned 0x1 [0092.865] SetErrorMode (uMode=0x0) returned 0x1 [0092.865] GetFileType (hFile=0x230) returned 0x1 [0092.865] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.865] ReadFile (in: hFile=0x230, lpBuffer=0x2745898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2745898*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.917] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.917] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.918] WriteFile (in: hFile=0x230, lpBuffer=0x2745898*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2745898*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.918] CloseHandle (hObject=0x230) returned 1 [0092.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", lpFilePart=0x0) returned 0x9a [0092.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41", lpFilePart=0x0) returned 0x9a [0092.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.920] SetErrorMode (uMode=0x1) returned 0x0 [0092.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883c4535, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883c4535, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39d68a6c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6c49)) returned 1 [0092.920] SetErrorMode (uMode=0x0) returned 0x1 [0092.920] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8377A58B-6BB9-496C-A6DF-9A7A076B4B41.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8377a58b-6bb9-496c-a6df-9a7a076b4b41.partially.cryptonar")) returned 1 [0092.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", lpFilePart=0x0) returned 0x9a [0092.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", lpFilePart=0x0) returned 0x9a [0092.921] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", lpFilePart=0x0) returned 0x9a [0092.921] SetErrorMode (uMode=0x1) returned 0x0 [0092.921] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.922] GetFileType (hFile=0x230) returned 0x1 [0092.922] SetErrorMode (uMode=0x0) returned 0x1 [0092.922] GetFileType (hFile=0x230) returned 0x1 [0092.922] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.922] ReadFile (in: hFile=0x230, lpBuffer=0x2749478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2749478*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.924] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.924] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.924] WriteFile (in: hFile=0x230, lpBuffer=0x2749478*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2749478*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.924] CloseHandle (hObject=0x230) returned 1 [0092.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", lpFilePart=0x0) returned 0x9a [0092.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D", lpFilePart=0x0) returned 0x9a [0092.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.926] SetErrorMode (uMode=0x1) returned 0x0 [0092.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735c5a07, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x735c5a07, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39d68a6c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4cd5)) returned 1 [0092.926] SetErrorMode (uMode=0x0) returned 0x1 [0092.926] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8BE6D37C-5753-4A96-817E-B3C94B03A82D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8be6d37c-5753-4a96-817e-b3c94b03a82d.partially.cryptonar")) returned 1 [0092.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", lpFilePart=0x0) returned 0x9a [0092.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", lpFilePart=0x0) returned 0x9a [0092.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", lpFilePart=0x0) returned 0x9a [0092.927] SetErrorMode (uMode=0x1) returned 0x0 [0092.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.927] GetFileType (hFile=0x230) returned 0x1 [0092.927] SetErrorMode (uMode=0x0) returned 0x1 [0092.928] GetFileType (hFile=0x230) returned 0x1 [0092.928] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.928] ReadFile (in: hFile=0x230, lpBuffer=0x274d058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274d058*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.970] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.970] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.970] WriteFile (in: hFile=0x230, lpBuffer=0x274d058*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274d058*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.970] CloseHandle (hObject=0x230) returned 1 [0092.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", lpFilePart=0x0) returned 0x9a [0092.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9", lpFilePart=0x0) returned 0x9a [0092.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.974] SetErrorMode (uMode=0x1) returned 0x0 [0092.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7317581f, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7317581f, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39dd2f23, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fab)) returned 1 [0092.974] SetErrorMode (uMode=0x0) returned 0x1 [0092.974] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C065BBF-7AD9-42C4-9735-9EEE5F756EA9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c065bbf-7ad9-42c4-9735-9eee5f756ea9.partially.cryptonar")) returned 1 [0092.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", lpFilePart=0x0) returned 0x9a [0092.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", lpFilePart=0x0) returned 0x9a [0092.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", lpFilePart=0x0) returned 0x9a [0092.976] SetErrorMode (uMode=0x1) returned 0x0 [0092.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.977] GetFileType (hFile=0x230) returned 0x1 [0092.977] SetErrorMode (uMode=0x0) returned 0x1 [0092.977] GetFileType (hFile=0x230) returned 0x1 [0092.977] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.977] ReadFile (in: hFile=0x230, lpBuffer=0x2750c38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2750c38*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0092.985] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0092.985] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.985] WriteFile (in: hFile=0x230, lpBuffer=0x2750c38*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2750c38*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0092.985] CloseHandle (hObject=0x230) returned 1 [0092.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", lpFilePart=0x0) returned 0x9a [0092.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B", lpFilePart=0x0) returned 0x9a [0092.987] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0092.987] SetErrorMode (uMode=0x1) returned 0x0 [0092.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734dc6e6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x734dc6e6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39df91b2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x32c1)) returned 1 [0092.987] SetErrorMode (uMode=0x0) returned 0x1 [0092.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\8C607B24-1BCC-4C57-8CE9-EC64CDD7114B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\8c607b24-1bcc-4c57-8ce9-ec64cdd7114b.partially.cryptonar")) returned 1 [0092.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", lpFilePart=0x0) returned 0x9a [0092.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", lpFilePart=0x0) returned 0x9a [0092.988] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", lpFilePart=0x0) returned 0x9a [0092.989] SetErrorMode (uMode=0x1) returned 0x0 [0092.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0092.990] GetFileType (hFile=0x230) returned 0x1 [0092.990] SetErrorMode (uMode=0x0) returned 0x1 [0092.990] GetFileType (hFile=0x230) returned 0x1 [0092.990] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0092.990] ReadFile (in: hFile=0x230, lpBuffer=0x2754818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2754818*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.007] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.007] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.007] WriteFile (in: hFile=0x230, lpBuffer=0x2754818*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2754818*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.008] CloseHandle (hObject=0x230) returned 1 [0093.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", lpFilePart=0x0) returned 0x9a [0093.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272", lpFilePart=0x0) returned 0x9a [0093.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.016] SetErrorMode (uMode=0x1) returned 0x0 [0093.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8822efb2, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8822efb2, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39e455a1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4150)) returned 1 [0093.016] SetErrorMode (uMode=0x0) returned 0x1 [0093.016] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9403D050-B4D3-428F-920D-D3B5F01FD272.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9403d050-b4d3-428f-920d-d3b5f01fd272.partially.cryptonar")) returned 1 [0093.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", lpFilePart=0x0) returned 0x9a [0093.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", lpFilePart=0x0) returned 0x9a [0093.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", lpFilePart=0x0) returned 0x9a [0093.017] SetErrorMode (uMode=0x1) returned 0x0 [0093.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.018] GetFileType (hFile=0x230) returned 0x1 [0093.018] SetErrorMode (uMode=0x0) returned 0x1 [0093.018] GetFileType (hFile=0x230) returned 0x1 [0093.018] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.018] ReadFile (in: hFile=0x230, lpBuffer=0x27583f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27583f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.033] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.033] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.033] WriteFile (in: hFile=0x230, lpBuffer=0x27583f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27583f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.033] CloseHandle (hObject=0x230) returned 1 [0093.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", lpFilePart=0x0) returned 0x9a [0093.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89", lpFilePart=0x0) returned 0x9a [0093.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.041] SetErrorMode (uMode=0x1) returned 0x0 [0093.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88198cce, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88198cce, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39e91ac3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18008)) returned 1 [0093.042] SetErrorMode (uMode=0x0) returned 0x1 [0093.042] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\94D14502-E144-414C-89AE-0998D2709D89.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\94d14502-e144-414c-89ae-0998d2709d89.partially.cryptonar")) returned 1 [0093.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", lpFilePart=0x0) returned 0x9a [0093.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", lpFilePart=0x0) returned 0x9a [0093.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", lpFilePart=0x0) returned 0x9a [0093.043] SetErrorMode (uMode=0x1) returned 0x0 [0093.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.044] GetFileType (hFile=0x230) returned 0x1 [0093.044] SetErrorMode (uMode=0x0) returned 0x1 [0093.044] GetFileType (hFile=0x230) returned 0x1 [0093.044] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.045] ReadFile (in: hFile=0x230, lpBuffer=0x275bfd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275bfd8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.062] WriteFile (in: hFile=0x230, lpBuffer=0x275bfd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275bfd8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.062] CloseHandle (hObject=0x230) returned 1 [0093.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", lpFilePart=0x0) returned 0x9a [0093.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D", lpFilePart=0x0) returned 0x9a [0093.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.062] SetErrorMode (uMode=0x1) returned 0x0 [0093.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7313c1f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7313c1f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x39eb7daa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22a8)) returned 1 [0093.062] SetErrorMode (uMode=0x0) returned 0x1 [0093.063] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9854EE7B-727A-4189-BCA8-C1A2F7C3ED6D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9854ee7b-727a-4189-bca8-c1a2f7c3ed6d.partially.cryptonar")) returned 1 [0093.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", lpFilePart=0x0) returned 0x9a [0093.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", lpFilePart=0x0) returned 0x9a [0093.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", lpFilePart=0x0) returned 0x9a [0093.064] SetErrorMode (uMode=0x1) returned 0x0 [0093.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.065] GetFileType (hFile=0x230) returned 0x1 [0093.065] SetErrorMode (uMode=0x0) returned 0x1 [0093.065] GetFileType (hFile=0x230) returned 0x1 [0093.065] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.065] ReadFile (in: hFile=0x230, lpBuffer=0x275fbb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275fbb8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.067] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.067] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.067] WriteFile (in: hFile=0x230, lpBuffer=0x275fbb8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275fbb8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.067] CloseHandle (hObject=0x230) returned 1 [0093.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", lpFilePart=0x0) returned 0x9a [0093.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5", lpFilePart=0x0) returned 0x9a [0093.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.072] SetErrorMode (uMode=0x1) returned 0x0 [0093.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88129b1b, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88129b1b, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39eddf63, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3dd2)) returned 1 [0093.072] SetErrorMode (uMode=0x0) returned 0x1 [0093.072] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9B5E72BE-B516-4DBE-8414-EC40CCF98DF5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9b5e72be-b516-4dbe-8414-ec40ccf98df5.partially.cryptonar")) returned 1 [0093.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", lpFilePart=0x0) returned 0x9a [0093.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", lpFilePart=0x0) returned 0x9a [0093.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", lpFilePart=0x0) returned 0x9a [0093.074] SetErrorMode (uMode=0x1) returned 0x0 [0093.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.075] GetFileType (hFile=0x230) returned 0x1 [0093.075] SetErrorMode (uMode=0x0) returned 0x1 [0093.075] GetFileType (hFile=0x230) returned 0x1 [0093.075] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.075] ReadFile (in: hFile=0x230, lpBuffer=0x2763798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2763798*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.089] WriteFile (in: hFile=0x230, lpBuffer=0x2763798*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2763798*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.089] CloseHandle (hObject=0x230) returned 1 [0093.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", lpFilePart=0x0) returned 0x9a [0093.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195", lpFilePart=0x0) returned 0x9a [0093.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.089] SetErrorMode (uMode=0x1) returned 0x0 [0093.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88512ddf, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88512ddf, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39f0423a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd5c9)) returned 1 [0093.090] SetErrorMode (uMode=0x0) returned 0x1 [0093.090] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\9CDDC916-A2AC-41E6-B1B9-CA1B9971F195.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\9cddc916-a2ac-41e6-b1b9-ca1b9971f195.partially.cryptonar")) returned 1 [0093.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", lpFilePart=0x0) returned 0x9a [0093.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", lpFilePart=0x0) returned 0x9a [0093.092] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", lpFilePart=0x0) returned 0x9a [0093.092] SetErrorMode (uMode=0x1) returned 0x0 [0093.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.093] GetFileType (hFile=0x230) returned 0x1 [0093.093] SetErrorMode (uMode=0x0) returned 0x1 [0093.093] GetFileType (hFile=0x230) returned 0x1 [0093.093] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.093] ReadFile (in: hFile=0x230, lpBuffer=0x2767378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2767378*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.108] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.108] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.109] WriteFile (in: hFile=0x230, lpBuffer=0x2767378*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2767378*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.109] CloseHandle (hObject=0x230) returned 1 [0093.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", lpFilePart=0x0) returned 0x9a [0093.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0", lpFilePart=0x0) returned 0x9a [0093.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.110] SetErrorMode (uMode=0x1) returned 0x0 [0093.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8827be59, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8827be59, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39f2a4c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e096)) returned 1 [0093.110] SetErrorMode (uMode=0x0) returned 0x1 [0093.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A20B85A3-C624-401C-946D-7F2C8C9E0EB0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a20b85a3-c624-401c-946d-7f2c8c9e0eb0.partially.cryptonar")) returned 1 [0093.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", lpFilePart=0x0) returned 0x9a [0093.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", lpFilePart=0x0) returned 0x9a [0093.112] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", lpFilePart=0x0) returned 0x9a [0093.112] SetErrorMode (uMode=0x1) returned 0x0 [0093.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.113] GetFileType (hFile=0x230) returned 0x1 [0093.113] SetErrorMode (uMode=0x0) returned 0x1 [0093.113] GetFileType (hFile=0x230) returned 0x1 [0093.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.113] ReadFile (in: hFile=0x230, lpBuffer=0x276af58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276af58*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.124] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.124] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.124] WriteFile (in: hFile=0x230, lpBuffer=0x276af58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276af58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.125] CloseHandle (hObject=0x230) returned 1 [0093.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", lpFilePart=0x0) returned 0x9a [0093.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6", lpFilePart=0x0) returned 0x9a [0093.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.125] SetErrorMode (uMode=0x1) returned 0x0 [0093.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885008de, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x885008de, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39f50631, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe6eb)) returned 1 [0093.125] SetErrorMode (uMode=0x0) returned 0x1 [0093.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A3899EB7-943F-45BF-9B62-7976C872C7D6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a3899eb7-943f-45bf-9b62-7976c872c7d6.partially.cryptonar")) returned 1 [0093.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", lpFilePart=0x0) returned 0x9a [0093.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", lpFilePart=0x0) returned 0x9a [0093.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", lpFilePart=0x0) returned 0x9a [0093.126] SetErrorMode (uMode=0x1) returned 0x0 [0093.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.127] GetFileType (hFile=0x230) returned 0x1 [0093.127] SetErrorMode (uMode=0x0) returned 0x1 [0093.127] GetFileType (hFile=0x230) returned 0x1 [0093.127] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.127] ReadFile (in: hFile=0x230, lpBuffer=0x276eb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276eb38*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.134] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.134] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.134] WriteFile (in: hFile=0x230, lpBuffer=0x276eb38*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276eb38*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.135] CloseHandle (hObject=0x230) returned 1 [0093.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", lpFilePart=0x0) returned 0x9a [0093.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6", lpFilePart=0x0) returned 0x9a [0093.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.135] SetErrorMode (uMode=0x1) returned 0x0 [0093.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88140e32, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88140e32, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39f76942, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19c7)) returned 1 [0093.135] SetErrorMode (uMode=0x0) returned 0x1 [0093.135] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A590259A-C20F-4378-9A6C-F9556FC0CBA6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a590259a-c20f-4378-9a6c-f9556fc0cba6.partially.cryptonar")) returned 1 [0093.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", lpFilePart=0x0) returned 0x9a [0093.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", lpFilePart=0x0) returned 0x9a [0093.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", lpFilePart=0x0) returned 0x9a [0093.137] SetErrorMode (uMode=0x1) returned 0x0 [0093.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.137] GetFileType (hFile=0x230) returned 0x1 [0093.137] SetErrorMode (uMode=0x0) returned 0x1 [0093.138] GetFileType (hFile=0x230) returned 0x1 [0093.138] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.138] ReadFile (in: hFile=0x230, lpBuffer=0x2772718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2772718*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.154] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.154] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.154] WriteFile (in: hFile=0x230, lpBuffer=0x2772718*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2772718*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.154] CloseHandle (hObject=0x230) returned 1 [0093.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", lpFilePart=0x0) returned 0x9a [0093.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071", lpFilePart=0x0) returned 0x9a [0093.161] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.161] SetErrorMode (uMode=0x1) returned 0x0 [0093.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883bd013, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883bd013, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39fa0ae1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd055)) returned 1 [0093.161] SetErrorMode (uMode=0x0) returned 0x1 [0093.161] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\A6B97942-B79F-460B-AEB5-87B754D40071.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\a6b97942-b79f-460b-aeb5-87b754d40071.partially.cryptonar")) returned 1 [0093.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", lpFilePart=0x0) returned 0x9a [0093.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", lpFilePart=0x0) returned 0x9a [0093.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", lpFilePart=0x0) returned 0x9a [0093.163] SetErrorMode (uMode=0x1) returned 0x0 [0093.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.164] GetFileType (hFile=0x230) returned 0x1 [0093.164] SetErrorMode (uMode=0x0) returned 0x1 [0093.164] GetFileType (hFile=0x230) returned 0x1 [0093.164] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.164] ReadFile (in: hFile=0x230, lpBuffer=0x27762f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27762f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.171] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.172] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.172] WriteFile (in: hFile=0x230, lpBuffer=0x27762f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27762f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.172] CloseHandle (hObject=0x230) returned 1 [0093.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", lpFilePart=0x0) returned 0x9a [0093.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507", lpFilePart=0x0) returned 0x9a [0093.172] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.172] SetErrorMode (uMode=0x1) returned 0x0 [0093.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881398e5, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x881398e5, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x39fc2ec2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x500c)) returned 1 [0093.172] SetErrorMode (uMode=0x0) returned 0x1 [0093.173] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\AD0C61F1-C301-4A56-8793-549CFDE8A507.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ad0c61f1-c301-4a56-8793-549cfde8a507.partially.cryptonar")) returned 1 [0093.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", lpFilePart=0x0) returned 0x9a [0093.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", lpFilePart=0x0) returned 0x9a [0093.174] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", lpFilePart=0x0) returned 0x9a [0093.174] SetErrorMode (uMode=0x1) returned 0x0 [0093.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.175] GetFileType (hFile=0x230) returned 0x1 [0093.175] SetErrorMode (uMode=0x0) returned 0x1 [0093.175] GetFileType (hFile=0x230) returned 0x1 [0093.175] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.175] ReadFile (in: hFile=0x230, lpBuffer=0x2779ed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2779ed8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.177] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.177] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.177] WriteFile (in: hFile=0x230, lpBuffer=0x2779ed8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2779ed8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.177] CloseHandle (hObject=0x230) returned 1 [0093.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", lpFilePart=0x0) returned 0x9a [0093.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E", lpFilePart=0x0) returned 0x9a [0093.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.202] SetErrorMode (uMode=0x1) returned 0x0 [0093.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8819b3f6, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8819b3f6, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x3a00f320, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6a60)) returned 1 [0093.202] SetErrorMode (uMode=0x0) returned 0x1 [0093.203] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\B8FFF45C-0C8F-4785-B42F-24711207C09E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\b8fff45c-0c8f-4785-b42f-24711207c09e.partially.cryptonar")) returned 1 [0093.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", lpFilePart=0x0) returned 0x9a [0093.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", lpFilePart=0x0) returned 0x9a [0093.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", lpFilePart=0x0) returned 0x9a [0093.204] SetErrorMode (uMode=0x1) returned 0x0 [0093.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.205] GetFileType (hFile=0x230) returned 0x1 [0093.205] SetErrorMode (uMode=0x0) returned 0x1 [0093.205] GetFileType (hFile=0x230) returned 0x1 [0093.205] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.205] ReadFile (in: hFile=0x230, lpBuffer=0x277dab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277dab8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.220] WriteFile (in: hFile=0x230, lpBuffer=0x277dab8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x277dab8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.220] CloseHandle (hObject=0x230) returned 1 [0093.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", lpFilePart=0x0) returned 0x9a [0093.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93", lpFilePart=0x0) returned 0x9a [0093.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.222] SetErrorMode (uMode=0x1) returned 0x0 [0093.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8819c77e, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8819c77e, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x3a0355a1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2a173)) returned 1 [0093.222] SetErrorMode (uMode=0x0) returned 0x1 [0093.222] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BA1A7D9C-8B77-4E7D-97E6-EFCC062E7F93.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ba1a7d9c-8b77-4e7d-97e6-efcc062e7f93.partially.cryptonar")) returned 1 [0093.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", lpFilePart=0x0) returned 0x9a [0093.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", lpFilePart=0x0) returned 0x9a [0093.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", lpFilePart=0x0) returned 0x9a [0093.225] SetErrorMode (uMode=0x1) returned 0x0 [0093.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.227] GetFileType (hFile=0x230) returned 0x1 [0093.227] SetErrorMode (uMode=0x0) returned 0x1 [0093.227] GetFileType (hFile=0x230) returned 0x1 [0093.228] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.228] ReadFile (in: hFile=0x230, lpBuffer=0x2781698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2781698*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.245] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.245] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.245] WriteFile (in: hFile=0x230, lpBuffer=0x2781698*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2781698*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.246] CloseHandle (hObject=0x230) returned 1 [0093.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", lpFilePart=0x0) returned 0x9a [0093.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D", lpFilePart=0x0) returned 0x9a [0093.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.246] SetErrorMode (uMode=0x1) returned 0x0 [0093.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884fa739, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884fa739, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x3a081c19, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x131d3)) returned 1 [0093.246] SetErrorMode (uMode=0x0) returned 0x1 [0093.246] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BAB84B72-0292-47C4-A0B3-39B2FB0A440D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bab84b72-0292-47c4-a0b3-39b2fb0a440d.partially.cryptonar")) returned 1 [0093.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", lpFilePart=0x0) returned 0x9a [0093.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", lpFilePart=0x0) returned 0x9a [0093.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", lpFilePart=0x0) returned 0x9a [0093.248] SetErrorMode (uMode=0x1) returned 0x0 [0093.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.250] GetFileType (hFile=0x230) returned 0x1 [0093.250] SetErrorMode (uMode=0x0) returned 0x1 [0093.250] GetFileType (hFile=0x230) returned 0x1 [0093.250] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.250] ReadFile (in: hFile=0x230, lpBuffer=0x2785278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2785278*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.268] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.268] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.268] WriteFile (in: hFile=0x230, lpBuffer=0x2785278*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2785278*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.268] CloseHandle (hObject=0x230) returned 1 [0093.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", lpFilePart=0x0) returned 0x9a [0093.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E", lpFilePart=0x0) returned 0x9a [0093.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.269] SetErrorMode (uMode=0x1) returned 0x0 [0093.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8809e829, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x8809e829, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x3a0a7d04, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ae9)) returned 1 [0093.269] SetErrorMode (uMode=0x0) returned 0x1 [0093.269] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\BCBCE985-2A13-4141-A7A2-2395FC5BAD3E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\bcbce985-2a13-4141-a7a2-2395fc5bad3e.partially.cryptonar")) returned 1 [0093.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", lpFilePart=0x0) returned 0x9a [0093.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", lpFilePart=0x0) returned 0x9a [0093.270] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", lpFilePart=0x0) returned 0x9a [0093.270] SetErrorMode (uMode=0x1) returned 0x0 [0093.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.271] GetFileType (hFile=0x230) returned 0x1 [0093.271] SetErrorMode (uMode=0x0) returned 0x1 [0093.271] GetFileType (hFile=0x230) returned 0x1 [0093.271] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.271] ReadFile (in: hFile=0x230, lpBuffer=0x2788e58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2788e58*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.279] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.280] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.280] WriteFile (in: hFile=0x230, lpBuffer=0x2788e58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2788e58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.280] CloseHandle (hObject=0x230) returned 1 [0093.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", lpFilePart=0x0) returned 0x9a [0093.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF", lpFilePart=0x0) returned 0x9a [0093.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.281] SetErrorMode (uMode=0x1) returned 0x0 [0093.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7314fa99, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7314fa99, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a0cddc2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x534f)) returned 1 [0093.281] SetErrorMode (uMode=0x0) returned 0x1 [0093.281] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\C8E2BE08-3214-419E-98CF-7DB7BAFDF7AF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\c8e2be08-3214-419e-98cf-7db7bafdf7af.partially.cryptonar")) returned 1 [0093.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", lpFilePart=0x0) returned 0x9a [0093.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", lpFilePart=0x0) returned 0x9a [0093.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", lpFilePart=0x0) returned 0x9a [0093.282] SetErrorMode (uMode=0x1) returned 0x0 [0093.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.283] GetFileType (hFile=0x230) returned 0x1 [0093.283] SetErrorMode (uMode=0x0) returned 0x1 [0093.283] GetFileType (hFile=0x230) returned 0x1 [0093.283] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.283] ReadFile (in: hFile=0x230, lpBuffer=0x278ca38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x278ca38*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.294] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.294] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.294] WriteFile (in: hFile=0x230, lpBuffer=0x278ca38*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x278ca38*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.294] CloseHandle (hObject=0x230) returned 1 [0093.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", lpFilePart=0x0) returned 0x9a [0093.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F", lpFilePart=0x0) returned 0x9a [0093.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.295] SetErrorMode (uMode=0x1) returned 0x0 [0093.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73753a7b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x73753a7b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a0f40bc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a6f)) returned 1 [0093.295] SetErrorMode (uMode=0x0) returned 0x1 [0093.295] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CA21D7B1-0D7B-41BF-A409-4B77C898A44F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\ca21d7b1-0d7b-41bf-a409-4b77c898a44f.partially.cryptonar")) returned 1 [0093.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", lpFilePart=0x0) returned 0x9a [0093.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", lpFilePart=0x0) returned 0x9a [0093.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", lpFilePart=0x0) returned 0x9a [0093.296] SetErrorMode (uMode=0x1) returned 0x0 [0093.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\cf1cc7bf-a425-4541-8a36-51bff9f38cbf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.297] GetFileType (hFile=0x230) returned 0x1 [0093.297] SetErrorMode (uMode=0x0) returned 0x1 [0093.297] GetFileType (hFile=0x230) returned 0x1 [0093.297] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.297] ReadFile (in: hFile=0x230, lpBuffer=0x2790618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2790618*, lpNumberOfBytesRead=0x5ae8b8*=0x851, lpOverlapped=0x0) returned 1 [0093.298] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1105, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.298] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.298] WriteFile (in: hFile=0x230, lpBuffer=0x2790618*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2790618*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.299] CloseHandle (hObject=0x230) returned 1 [0093.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", lpFilePart=0x0) returned 0x9a [0093.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF", lpFilePart=0x0) returned 0x9a [0093.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.299] SetErrorMode (uMode=0x1) returned 0x0 [0093.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\cf1cc7bf-a425-4541-8a36-51bff9f38cbf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737a43c6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x737a43c6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a0f40bc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x851)) returned 1 [0093.299] SetErrorMode (uMode=0x0) returned 0x1 [0093.299] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\cf1cc7bf-a425-4541-8a36-51bff9f38cbf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\CF1CC7BF-A425-4541-8A36-51BFF9F38CBF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\cf1cc7bf-a425-4541-8a36-51bff9f38cbf.partially.cryptonar")) returned 1 [0093.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", lpFilePart=0x0) returned 0x9a [0093.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", lpFilePart=0x0) returned 0x9a [0093.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", lpFilePart=0x0) returned 0x9a [0093.300] SetErrorMode (uMode=0x1) returned 0x0 [0093.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.301] GetFileType (hFile=0x230) returned 0x1 [0093.301] SetErrorMode (uMode=0x0) returned 0x1 [0093.301] GetFileType (hFile=0x230) returned 0x1 [0093.301] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.301] ReadFile (in: hFile=0x230, lpBuffer=0x27941f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27941f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.303] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.303] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.303] WriteFile (in: hFile=0x230, lpBuffer=0x27941f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27941f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.303] CloseHandle (hObject=0x230) returned 1 [0093.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", lpFilePart=0x0) returned 0x9a [0093.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD", lpFilePart=0x0) returned 0x9a [0093.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.305] SetErrorMode (uMode=0x1) returned 0x0 [0093.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738c80b7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738c80b7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a11a2f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2260)) returned 1 [0093.306] SetErrorMode (uMode=0x0) returned 0x1 [0093.306] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D377C338-B3B0-4E63-9CD5-EE0A4AFF13CD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d377c338-b3b0-4e63-9cd5-ee0a4aff13cd.partially.cryptonar")) returned 1 [0093.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", lpFilePart=0x0) returned 0x9a [0093.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", lpFilePart=0x0) returned 0x9a [0093.307] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", lpFilePart=0x0) returned 0x9a [0093.307] SetErrorMode (uMode=0x1) returned 0x0 [0093.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.308] GetFileType (hFile=0x230) returned 0x1 [0093.308] SetErrorMode (uMode=0x0) returned 0x1 [0093.308] GetFileType (hFile=0x230) returned 0x1 [0093.308] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.308] ReadFile (in: hFile=0x230, lpBuffer=0x2797dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2797dd8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.326] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.327] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.327] WriteFile (in: hFile=0x230, lpBuffer=0x2797dd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2797dd8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.327] CloseHandle (hObject=0x230) returned 1 [0093.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", lpFilePart=0x0) returned 0x9a [0093.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD", lpFilePart=0x0) returned 0x9a [0093.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.327] SetErrorMode (uMode=0x1) returned 0x0 [0093.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x883f79c7, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x883f79c7, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x3a140594, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8e3d)) returned 1 [0093.328] SetErrorMode (uMode=0x0) returned 0x1 [0093.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D99D1198-2688-447D-9BF2-F9F9C1375AFD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d99d1198-2688-447d-9bf2-f9f9c1375afd.partially.cryptonar")) returned 1 [0093.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", lpFilePart=0x0) returned 0x9a [0093.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", lpFilePart=0x0) returned 0x9a [0093.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", lpFilePart=0x0) returned 0x9a [0093.329] SetErrorMode (uMode=0x1) returned 0x0 [0093.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.330] GetFileType (hFile=0x230) returned 0x1 [0093.330] SetErrorMode (uMode=0x0) returned 0x1 [0093.330] GetFileType (hFile=0x230) returned 0x1 [0093.330] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.330] ReadFile (in: hFile=0x230, lpBuffer=0x279b9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x279b9b8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.332] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.332] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.332] WriteFile (in: hFile=0x230, lpBuffer=0x279b9b8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x279b9b8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.332] CloseHandle (hObject=0x230) returned 1 [0093.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", lpFilePart=0x0) returned 0x9a [0093.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13", lpFilePart=0x0) returned 0x9a [0093.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.333] SetErrorMode (uMode=0x1) returned 0x0 [0093.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884fce31, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x884fce31, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x3a140594, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa8d4)) returned 1 [0093.333] SetErrorMode (uMode=0x0) returned 0x1 [0093.333] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\D9C1BAAC-9EDD-4EBD-BD8A-5B53E9904C13.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\d9c1baac-9edd-4ebd-bd8a-5b53e9904c13.partially.cryptonar")) returned 1 [0093.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", lpFilePart=0x0) returned 0x9a [0093.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", lpFilePart=0x0) returned 0x9a [0093.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", lpFilePart=0x0) returned 0x9a [0093.334] SetErrorMode (uMode=0x1) returned 0x0 [0093.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.335] GetFileType (hFile=0x230) returned 0x1 [0093.335] SetErrorMode (uMode=0x0) returned 0x1 [0093.336] GetFileType (hFile=0x230) returned 0x1 [0093.336] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.336] ReadFile (in: hFile=0x230, lpBuffer=0x279f598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x279f598*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.348] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.348] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.348] WriteFile (in: hFile=0x230, lpBuffer=0x279f598*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x279f598*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.348] CloseHandle (hObject=0x230) returned 1 [0093.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", lpFilePart=0x0) returned 0x9a [0093.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A", lpFilePart=0x0) returned 0x9a [0093.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.349] SetErrorMode (uMode=0x1) returned 0x0 [0093.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739533a7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x739533a7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a166889, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4eb4)) returned 1 [0093.349] SetErrorMode (uMode=0x0) returned 0x1 [0093.349] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E00BE78D-CFF7-47B9-8E8C-37ADF516B28A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e00be78d-cff7-47b9-8e8c-37adf516b28a.partially.cryptonar")) returned 1 [0093.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", lpFilePart=0x0) returned 0x9a [0093.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", lpFilePart=0x0) returned 0x9a [0093.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", lpFilePart=0x0) returned 0x9a [0093.350] SetErrorMode (uMode=0x1) returned 0x0 [0093.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.351] GetFileType (hFile=0x230) returned 0x1 [0093.351] SetErrorMode (uMode=0x0) returned 0x1 [0093.351] GetFileType (hFile=0x230) returned 0x1 [0093.351] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.352] ReadFile (in: hFile=0x230, lpBuffer=0x27a3178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a3178*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.359] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.359] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.359] WriteFile (in: hFile=0x230, lpBuffer=0x27a3178*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27a3178*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.359] CloseHandle (hObject=0x230) returned 1 [0093.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", lpFilePart=0x0) returned 0x9a [0093.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A", lpFilePart=0x0) returned 0x9a [0093.360] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.360] SetErrorMode (uMode=0x1) returned 0x0 [0093.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881965ba, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x881965ba, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x3a18c9b9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5491)) returned 1 [0093.360] SetErrorMode (uMode=0x0) returned 0x1 [0093.360] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E164F0A7-B014-475B-BC5C-1C1285127D5A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e164f0a7-b014-475b-bc5c-1c1285127d5a.partially.cryptonar")) returned 1 [0093.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", lpFilePart=0x0) returned 0x9a [0093.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", lpFilePart=0x0) returned 0x9a [0093.361] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", lpFilePart=0x0) returned 0x9a [0093.361] SetErrorMode (uMode=0x1) returned 0x0 [0093.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.362] GetFileType (hFile=0x230) returned 0x1 [0093.362] SetErrorMode (uMode=0x0) returned 0x1 [0093.362] GetFileType (hFile=0x230) returned 0x1 [0093.362] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.362] ReadFile (in: hFile=0x230, lpBuffer=0x27a6d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a6d58*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.384] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.384] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.384] WriteFile (in: hFile=0x230, lpBuffer=0x27a6d58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27a6d58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.385] CloseHandle (hObject=0x230) returned 1 [0093.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", lpFilePart=0x0) returned 0x9a [0093.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0", lpFilePart=0x0) returned 0x9a [0093.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.386] SetErrorMode (uMode=0x1) returned 0x0 [0093.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7380fade, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7380fade, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a1d8f47, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d5d)) returned 1 [0093.386] SetErrorMode (uMode=0x0) returned 0x1 [0093.386] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E277E429-138B-4461-B716-C03D493C22D0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e277e429-138b-4461-b716-c03d493c22d0.partially.cryptonar")) returned 1 [0093.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", lpFilePart=0x0) returned 0x9a [0093.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", lpFilePart=0x0) returned 0x9a [0093.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", lpFilePart=0x0) returned 0x9a [0093.387] SetErrorMode (uMode=0x1) returned 0x0 [0093.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.388] GetFileType (hFile=0x230) returned 0x1 [0093.388] SetErrorMode (uMode=0x0) returned 0x1 [0093.388] GetFileType (hFile=0x230) returned 0x1 [0093.388] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.388] ReadFile (in: hFile=0x230, lpBuffer=0x27aa938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27aa938*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.390] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.390] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.390] WriteFile (in: hFile=0x230, lpBuffer=0x27aa938*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27aa938*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.390] CloseHandle (hObject=0x230) returned 1 [0093.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", lpFilePart=0x0) returned 0x9a [0093.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A", lpFilePart=0x0) returned 0x9a [0093.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.391] SetErrorMode (uMode=0x1) returned 0x0 [0093.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7314bfe1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7314bfe1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a1d8f47, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2cf6)) returned 1 [0093.391] SetErrorMode (uMode=0x0) returned 0x1 [0093.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\E4FDC49F-730A-46D4-9B3E-AE4CD4D8873A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\e4fdc49f-730a-46d4-9b3e-ae4cd4d8873a.partially.cryptonar")) returned 1 [0093.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", lpFilePart=0x0) returned 0x9a [0093.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", lpFilePart=0x0) returned 0x9a [0093.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", lpFilePart=0x0) returned 0x9a [0093.392] SetErrorMode (uMode=0x1) returned 0x0 [0093.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.393] GetFileType (hFile=0x230) returned 0x1 [0093.393] SetErrorMode (uMode=0x0) returned 0x1 [0093.393] GetFileType (hFile=0x230) returned 0x1 [0093.393] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.393] ReadFile (in: hFile=0x230, lpBuffer=0x27ae518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ae518*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.658] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.658] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.658] WriteFile (in: hFile=0x230, lpBuffer=0x27ae518*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ae518*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.658] CloseHandle (hObject=0x230) returned 1 [0093.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", lpFilePart=0x0) returned 0x9a [0093.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA", lpFilePart=0x0) returned 0x9a [0093.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.686] SetErrorMode (uMode=0x1) returned 0x0 [0093.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88193ea9, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0x88193ea9, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x3a4adb51, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52ce)) returned 1 [0093.687] SetErrorMode (uMode=0x0) returned 0x1 [0093.687] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F1AC218A-8D02-402C-876E-4B0E2A662BFA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f1ac218a-8d02-402c-876e-4b0e2a662bfa.partially.cryptonar")) returned 1 [0093.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", lpFilePart=0x0) returned 0x9a [0093.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", lpFilePart=0x0) returned 0x9a [0093.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", lpFilePart=0x0) returned 0x9a [0093.688] SetErrorMode (uMode=0x1) returned 0x0 [0093.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.688] GetFileType (hFile=0x230) returned 0x1 [0093.688] SetErrorMode (uMode=0x0) returned 0x1 [0093.688] GetFileType (hFile=0x230) returned 0x1 [0093.688] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.689] ReadFile (in: hFile=0x230, lpBuffer=0x27b20f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b20f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.749] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.749] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.749] WriteFile (in: hFile=0x230, lpBuffer=0x27b20f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b20f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.749] CloseHandle (hObject=0x230) returned 1 [0093.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", lpFilePart=0x0) returned 0x9a [0093.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72", lpFilePart=0x0) returned 0x9a [0093.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.766] SetErrorMode (uMode=0x1) returned 0x0 [0093.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7315e4e7, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x7315e4e7, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a56c644, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ef5)) returned 1 [0093.766] SetErrorMode (uMode=0x0) returned 0x1 [0093.766] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F442332F-BE2E-45C6-B52A-9FA2F82F4F72.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f442332f-be2e-45c6-b52a-9fa2f82f4f72.partially.cryptonar")) returned 1 [0093.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", lpFilePart=0x0) returned 0x9a [0093.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", lpFilePart=0x0) returned 0x9a [0093.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", lpFilePart=0x0) returned 0x9a [0093.767] SetErrorMode (uMode=0x1) returned 0x0 [0093.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.768] GetFileType (hFile=0x230) returned 0x1 [0093.768] SetErrorMode (uMode=0x0) returned 0x1 [0093.768] GetFileType (hFile=0x230) returned 0x1 [0093.768] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.768] ReadFile (in: hFile=0x230, lpBuffer=0x27b5cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b5cd8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.770] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.770] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.770] WriteFile (in: hFile=0x230, lpBuffer=0x27b5cd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b5cd8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.770] CloseHandle (hObject=0x230) returned 1 [0093.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", lpFilePart=0x0) returned 0x9a [0093.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F", lpFilePart=0x0) returned 0x9a [0093.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.770] SetErrorMode (uMode=0x1) returned 0x0 [0093.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x738d4402, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x738d4402, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a56c644, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7776)) returned 1 [0093.770] SetErrorMode (uMode=0x0) returned 0x1 [0093.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\F85AB5DD-848A-4CA1-A9F0-ECCF7052094F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\f85ab5dd-848a-4ca1-a9f0-eccf7052094f.partially.cryptonar")) returned 1 [0093.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", lpFilePart=0x0) returned 0x9a [0093.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", lpFilePart=0x0) returned 0x9a [0093.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", lpFilePart=0x0) returned 0x9a [0093.771] SetErrorMode (uMode=0x1) returned 0x0 [0093.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.772] GetFileType (hFile=0x230) returned 0x1 [0093.772] SetErrorMode (uMode=0x0) returned 0x1 [0093.772] GetFileType (hFile=0x230) returned 0x1 [0093.772] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.772] ReadFile (in: hFile=0x230, lpBuffer=0x27b98b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b98b8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.798] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.798] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.799] WriteFile (in: hFile=0x230, lpBuffer=0x27b98b8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b98b8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.799] CloseHandle (hObject=0x230) returned 1 [0093.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", lpFilePart=0x0) returned 0x9a [0093.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90", lpFilePart=0x0) returned 0x9a [0093.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0093.816] SetErrorMode (uMode=0x1) returned 0x0 [0093.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8afb3a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x5b8afb3a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x3a5dee2d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa92c)) returned 1 [0093.816] SetErrorMode (uMode=0x0) returned 0x1 [0093.816] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\clienttemplates.content.office.net\\FA975BDF-A96C-4D1C-A93C-60FD5D97AC90.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\clienttemplates.content.office.net\\fa975bdf-a96c-4d1c-a93c-60fd5d97ac90.partially.cryptonar")) returned 1 [0093.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", lpFilePart=0x0) returned 0x92 [0093.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", lpFilePart=0x0) returned 0x92 [0093.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", lpFilePart=0x0) returned 0x92 [0093.818] SetErrorMode (uMode=0x1) returned 0x0 [0093.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.820] GetFileType (hFile=0x230) returned 0x1 [0093.820] SetErrorMode (uMode=0x0) returned 0x1 [0093.820] GetFileType (hFile=0x230) returned 0x1 [0093.820] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.820] ReadFile (in: hFile=0x230, lpBuffer=0x27bd468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27bd468*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.835] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.835] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.835] WriteFile (in: hFile=0x230, lpBuffer=0x27bd468*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27bd468*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.836] CloseHandle (hObject=0x230) returned 1 [0093.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", lpFilePart=0x0) returned 0x92 [0093.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D", lpFilePart=0x0) returned 0x92 [0093.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D.partially.cryptoNar", lpFilePart=0x0) returned 0xa6 [0093.836] SetErrorMode (uMode=0x1) returned 0x0 [0093.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f76b494, ftCreationTime.dwHighDateTime=0x1d336e2, ftLastAccessTime.dwLowDateTime=0x8f76b494, ftLastAccessTime.dwHighDateTime=0x1d336e2, ftLastWriteTime.dwLowDateTime=0x3a62b13a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xff6d)) returned 1 [0093.836] SetErrorMode (uMode=0x0) returned 0x1 [0093.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\03E95D48-EBA7-4D0E-895B-1582FC40EC0D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\03e95d48-eba7-4d0e-895b-1582fc40ec0d.partially.cryptonar")) returned 1 [0093.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", lpFilePart=0x0) returned 0x92 [0093.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", lpFilePart=0x0) returned 0x92 [0093.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", lpFilePart=0x0) returned 0x92 [0093.837] SetErrorMode (uMode=0x1) returned 0x0 [0093.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.838] GetFileType (hFile=0x230) returned 0x1 [0093.838] SetErrorMode (uMode=0x0) returned 0x1 [0093.838] GetFileType (hFile=0x230) returned 0x1 [0093.838] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.838] ReadFile (in: hFile=0x230, lpBuffer=0x27c0fb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c0fb8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.852] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.852] WriteFile (in: hFile=0x230, lpBuffer=0x27c0fb8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c0fb8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.852] CloseHandle (hObject=0x230) returned 1 [0093.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", lpFilePart=0x0) returned 0x92 [0093.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B", lpFilePart=0x0) returned 0x92 [0093.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B.partially.cryptoNar", lpFilePart=0x0) returned 0xa6 [0093.857] SetErrorMode (uMode=0x1) returned 0x0 [0093.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64361dda, ftCreationTime.dwHighDateTime=0x1d301c7, ftLastAccessTime.dwLowDateTime=0x64361dda, ftLastAccessTime.dwHighDateTime=0x1d301c7, ftLastWriteTime.dwLowDateTime=0x3a651855, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfac5)) returned 1 [0093.858] SetErrorMode (uMode=0x0) returned 0x1 [0093.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\82BD62FD-974C-42F4-866A-5C738238984B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\82bd62fd-974c-42f4-866a-5c738238984b.partially.cryptonar")) returned 1 [0093.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", lpFilePart=0x0) returned 0x92 [0093.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", lpFilePart=0x0) returned 0x92 [0093.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", lpFilePart=0x0) returned 0x92 [0093.859] SetErrorMode (uMode=0x1) returned 0x0 [0093.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.860] GetFileType (hFile=0x230) returned 0x1 [0093.860] SetErrorMode (uMode=0x0) returned 0x1 [0093.860] GetFileType (hFile=0x230) returned 0x1 [0093.860] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.860] ReadFile (in: hFile=0x230, lpBuffer=0x27c4b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c4b08*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.861] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.861] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.861] WriteFile (in: hFile=0x230, lpBuffer=0x27c4b08*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c4b08*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.862] CloseHandle (hObject=0x230) returned 1 [0093.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", lpFilePart=0x0) returned 0x92 [0093.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B", lpFilePart=0x0) returned 0x92 [0093.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B.partially.cryptoNar", lpFilePart=0x0) returned 0xa6 [0093.868] SetErrorMode (uMode=0x1) returned 0x0 [0093.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae6eef07, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0xae6eef07, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x3a67773a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1000b)) returned 1 [0093.868] SetErrorMode (uMode=0x0) returned 0x1 [0093.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\8BD876A5-9C43-4F45-9565-3FAF3AC71A0B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\8bd876a5-9c43-4f45-9565-3faf3ac71a0b.partially.cryptonar")) returned 1 [0093.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", lpFilePart=0x0) returned 0x92 [0093.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", lpFilePart=0x0) returned 0x92 [0093.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", lpFilePart=0x0) returned 0x92 [0093.870] SetErrorMode (uMode=0x1) returned 0x0 [0093.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.870] GetFileType (hFile=0x230) returned 0x1 [0093.870] SetErrorMode (uMode=0x0) returned 0x1 [0093.870] GetFileType (hFile=0x230) returned 0x1 [0093.870] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.870] ReadFile (in: hFile=0x230, lpBuffer=0x27c8658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c8658*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.872] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.872] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.872] WriteFile (in: hFile=0x230, lpBuffer=0x27c8658*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c8658*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.872] CloseHandle (hObject=0x230) returned 1 [0093.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", lpFilePart=0x0) returned 0x92 [0093.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C", lpFilePart=0x0) returned 0x92 [0093.881] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C.partially.cryptoNar", lpFilePart=0x0) returned 0xa6 [0093.881] SetErrorMode (uMode=0x1) returned 0x0 [0093.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2b7007, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x4a2b7007, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x3a67773a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1000b)) returned 1 [0093.881] SetErrorMode (uMode=0x0) returned 0x1 [0093.881] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\9097A298-E9C2-4AFF-8C46-428E8A30E31C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\9097a298-e9c2-4aff-8c46-428e8a30e31c.partially.cryptonar")) returned 1 [0093.882] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", lpFilePart=0x0) returned 0x92 [0093.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", lpFilePart=0x0) returned 0x92 [0093.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", lpFilePart=0x0) returned 0x92 [0093.883] SetErrorMode (uMode=0x1) returned 0x0 [0093.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.883] GetFileType (hFile=0x230) returned 0x1 [0093.884] SetErrorMode (uMode=0x0) returned 0x1 [0093.884] GetFileType (hFile=0x230) returned 0x1 [0093.884] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.884] ReadFile (in: hFile=0x230, lpBuffer=0x27cc1a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27cc1a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.885] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.885] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.885] WriteFile (in: hFile=0x230, lpBuffer=0x27cc1a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27cc1a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.886] CloseHandle (hObject=0x230) returned 1 [0093.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", lpFilePart=0x0) returned 0x92 [0093.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67", lpFilePart=0x0) returned 0x92 [0093.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67.partially.cryptoNar", lpFilePart=0x0) returned 0xa6 [0093.895] SetErrorMode (uMode=0x1) returned 0x0 [0093.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4754713, ftCreationTime.dwHighDateTime=0x1d3aaae, ftLastAccessTime.dwLowDateTime=0xf4754713, ftLastAccessTime.dwHighDateTime=0x1d3aaae, ftLastWriteTime.dwLowDateTime=0x3a69dfcf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11db2)) returned 1 [0093.895] SetErrorMode (uMode=0x0) returned 0x1 [0093.895] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Office\\16.0\\WebServiceCache\\AllUsers\\officeclient.microsoft.com\\C246F9AB-D3D8-41D6-AD9F-FDA8F3368F67.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\office\\16.0\\webservicecache\\allusers\\officeclient.microsoft.com\\c246f9ab-d3d8-41d6-ad9f-fda8f3368f67.partially.cryptonar")) returned 1 [0093.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", lpFilePart=0x0) returned 0x43 [0093.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", lpFilePart=0x0) returned 0x43 [0093.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", lpFilePart=0x0) returned 0x43 [0093.896] SetErrorMode (uMode=0x1) returned 0x0 [0093.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrive.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.897] GetFileType (hFile=0x230) returned 0x1 [0093.897] SetErrorMode (uMode=0x0) returned 0x1 [0093.897] GetFileType (hFile=0x230) returned 0x1 [0093.897] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.897] ReadFile (in: hFile=0x230, lpBuffer=0x27cfb08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27cfb08*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.905] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.905] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.905] WriteFile (in: hFile=0x230, lpBuffer=0x27cfb08*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27cfb08*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.905] CloseHandle (hObject=0x230) returned 1 [0093.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", lpFilePart=0x0) returned 0x43 [0093.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe", lpFilePart=0x0) returned 0x43 [0093.907] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe.partially.cryptoNar", lpFilePart=0x0) returned 0x57 [0093.907] SetErrorMode (uMode=0x1) returned 0x0 [0093.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrive.exe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x321003c4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x5f7bfd67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3a6c3b7e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19bcd0)) returned 1 [0093.907] SetErrorMode (uMode=0x0) returned 0x1 [0093.907] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrive.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrive.exe.partially.cryptonar")) returned 1 [0093.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", lpFilePart=0x0) returned 0x4b [0093.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", lpFilePart=0x0) returned 0x4b [0093.908] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", lpFilePart=0x0) returned 0x4b [0093.908] SetErrorMode (uMode=0x1) returned 0x0 [0093.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.909] GetFileType (hFile=0x230) returned 0x1 [0093.909] SetErrorMode (uMode=0x0) returned 0x1 [0093.909] GetFileType (hFile=0x230) returned 0x1 [0093.909] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.909] ReadFile (in: hFile=0x230, lpBuffer=0x27d30f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d30f8*, lpNumberOfBytesRead=0x5ae8b8*=0x4d, lpOverlapped=0x0) returned 1 [0093.910] ReadFile (in: hFile=0x230, lpBuffer=0x27d30f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d30f8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0093.910] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.910] WriteFile (in: hFile=0x230, lpBuffer=0x27d30f8*, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27d30f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x4d, lpOverlapped=0x0) returned 1 [0093.910] CloseHandle (hObject=0x230) returned 1 [0093.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", lpFilePart=0x0) returned 0x4b [0093.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd", lpFilePart=0x0) returned 0x4b [0093.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd.partially.cryptoNar", lpFilePart=0x0) returned 0x5f [0093.910] SetErrorMode (uMode=0x1) returned 0x0 [0093.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c51810a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x3c51810a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x3a6c3b7e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d)) returned 1 [0093.911] SetErrorMode (uMode=0x0) returned 0x1 [0093.911] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDrivePersonal.cmd.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivepersonal.cmd.partially.cryptonar")) returned 1 [0093.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", lpFilePart=0x0) returned 0x54 [0093.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", lpFilePart=0x0) returned 0x54 [0093.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", lpFilePart=0x0) returned 0x54 [0093.912] SetErrorMode (uMode=0x1) returned 0x0 [0093.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivestandaloneupdater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.912] GetFileType (hFile=0x230) returned 0x1 [0093.912] SetErrorMode (uMode=0x0) returned 0x1 [0093.912] GetFileType (hFile=0x230) returned 0x1 [0093.912] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.912] ReadFile (in: hFile=0x230, lpBuffer=0x27d6468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d6468*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.933] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.933] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.935] WriteFile (in: hFile=0x230, lpBuffer=0x27d6468*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27d6468*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.935] CloseHandle (hObject=0x230) returned 1 [0093.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", lpFilePart=0x0) returned 0x54 [0093.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe", lpFilePart=0x0) returned 0x54 [0093.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe.partially.cryptoNar", lpFilePart=0x0) returned 0x68 [0093.935] SetErrorMode (uMode=0x1) returned 0x0 [0093.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivestandaloneupdater.exe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c51810a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x5f7bfd67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3a7100c4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ae4d0)) returned 1 [0093.935] SetErrorMode (uMode=0x0) returned 0x1 [0093.935] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivestandaloneupdater.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\OneDriveStandaloneUpdater.exe.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\onedrivestandaloneupdater.exe.partially.cryptonar")) returned 1 [0093.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x56 [0093.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x56 [0093.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x56 [0093.937] SetErrorMode (uMode=0x1) returned 0x0 [0093.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.939] GetFileType (hFile=0x230) returned 0x1 [0093.939] SetErrorMode (uMode=0x0) returned 0x1 [0093.939] GetFileType (hFile=0x230) returned 0x1 [0093.939] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.939] ReadFile (in: hFile=0x230, lpBuffer=0x27d9b78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d9b78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.946] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.946] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.946] WriteFile (in: hFile=0x230, lpBuffer=0x27d9b78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27d9b78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.946] CloseHandle (hObject=0x230) returned 1 [0093.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x56 [0093.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x56 [0093.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0093.947] SetErrorMode (uMode=0x1) returned 0x0 [0093.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63aa9fbc, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x63aa9fbc, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3a7363c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x123c)) returned 1 [0093.947] SetErrorMode (uMode=0x0) returned 0x1 [0093.947] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayLogo.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplaylogo.png.partially.cryptonar")) returned 1 [0093.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0093.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0093.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0093.948] SetErrorMode (uMode=0x1) returned 0x0 [0093.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.949] GetFileType (hFile=0x230) returned 0x1 [0093.949] SetErrorMode (uMode=0x0) returned 0x1 [0093.949] GetFileType (hFile=0x230) returned 0x1 [0093.949] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.949] ReadFile (in: hFile=0x230, lpBuffer=0x27dd290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27dd290*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.969] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.969] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.970] WriteFile (in: hFile=0x230, lpBuffer=0x27dd290*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27dd290*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.970] CloseHandle (hObject=0x230) returned 1 [0093.970] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0093.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0093.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0093.971] SetErrorMode (uMode=0x1) returned 0x0 [0093.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3a75c631, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0093.971] SetErrorMode (uMode=0x0) returned 0x1 [0093.971] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.gif.partially.cryptonar")) returned 1 [0093.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0093.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0093.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0093.972] SetErrorMode (uMode=0x1) returned 0x0 [0093.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.973] GetFileType (hFile=0x230) returned 0x1 [0093.973] SetErrorMode (uMode=0x0) returned 0x1 [0093.973] GetFileType (hFile=0x230) returned 0x1 [0093.973] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.973] ReadFile (in: hFile=0x230, lpBuffer=0x27e09a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e09a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.982] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.982] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.982] WriteFile (in: hFile=0x230, lpBuffer=0x27e09a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e09a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.982] CloseHandle (hObject=0x230) returned 1 [0093.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0093.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0093.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0093.983] SetErrorMode (uMode=0x1) returned 0x0 [0093.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69923516, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69923516, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3a782764, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0093.983] SetErrorMode (uMode=0x0) returned 0x1 [0093.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\AutoPlayOptIn.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\autoplayoptin.png.partially.cryptonar")) returned 1 [0093.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5d [0093.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5d [0093.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5d [0093.984] SetErrorMode (uMode=0x1) returned 0x0 [0093.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.985] GetFileType (hFile=0x230) returned 0x1 [0093.985] SetErrorMode (uMode=0x0) returned 0x1 [0093.985] GetFileType (hFile=0x230) returned 0x1 [0093.985] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.985] ReadFile (in: hFile=0x230, lpBuffer=0x27e4100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e4100*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.995] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.996] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.996] WriteFile (in: hFile=0x230, lpBuffer=0x27e4100*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e4100*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0093.996] CloseHandle (hObject=0x230) returned 1 [0093.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5d [0093.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5d [0093.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat.partially.cryptoNar", lpFilePart=0x0) returned 0x71 [0093.996] SetErrorMode (uMode=0x1) returned 0x0 [0093.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db39c83, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6db39c83, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3a7a8a6b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16da)) returned 1 [0093.996] SetErrorMode (uMode=0x0) returned 0x1 [0093.996] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\CollectOneDriveLogs.bat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\collectonedrivelogs.bat.partially.cryptonar")) returned 1 [0093.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0093.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0093.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0093.997] SetErrorMode (uMode=0x1) returned 0x0 [0093.997] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0093.998] GetFileType (hFile=0x230) returned 0x1 [0093.998] SetErrorMode (uMode=0x0) returned 0x1 [0093.998] GetFileType (hFile=0x230) returned 0x1 [0093.998] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.998] ReadFile (in: hFile=0x230, lpBuffer=0x27e7838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e7838*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0093.999] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0093.999] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0093.999] WriteFile (in: hFile=0x230, lpBuffer=0x27e7838*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e7838*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.000] CloseHandle (hObject=0x230) returned 1 [0094.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0094.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0094.000] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0094.000] SetErrorMode (uMode=0x1) returned 0x0 [0094.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715efc49, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715efc49, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3a7a8a6b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x72c0)) returned 1 [0094.000] SetErrorMode (uMode=0x0) returned 0x1 [0094.000] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ETWlog.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\etwlog.dll.partially.cryptonar")) returned 1 [0094.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", lpFilePart=0x0) returned 0x57 [0094.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", lpFilePart=0x0) returned 0x57 [0094.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", lpFilePart=0x0) returned 0x57 [0094.008] SetErrorMode (uMode=0x1) returned 0x0 [0094.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.009] GetFileType (hFile=0x230) returned 0x1 [0094.009] SetErrorMode (uMode=0x0) returned 0x1 [0094.009] GetFileType (hFile=0x230) returned 0x1 [0094.009] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.009] ReadFile (in: hFile=0x230, lpBuffer=0x27eaf18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27eaf18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.010] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.010] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.010] WriteFile (in: hFile=0x230, lpBuffer=0x27eaf18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27eaf18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.010] CloseHandle (hObject=0x230) returned 1 [0094.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", lpFilePart=0x0) returned 0x57 [0094.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml", lpFilePart=0x0) returned 0x57 [0094.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0094.010] SetErrorMode (uMode=0x1) returned 0x0 [0094.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3a7cf128, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f)) returned 1 [0094.011] SetErrorMode (uMode=0x0) returned 0x1 [0094.011] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\ExclusionList.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\exclusionlist.xml.partially.cryptonar")) returned 1 [0094.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0094.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0094.011] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0094.011] SetErrorMode (uMode=0x1) returned 0x0 [0094.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.012] GetFileType (hFile=0x230) returned 0x1 [0094.012] SetErrorMode (uMode=0x0) returned 0x1 [0094.012] GetFileType (hFile=0x230) returned 0x1 [0094.012] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.012] ReadFile (in: hFile=0x230, lpBuffer=0x27ee700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ee700*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.014] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.014] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.014] WriteFile (in: hFile=0x230, lpBuffer=0x27ee700*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ee700*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.014] CloseHandle (hObject=0x230) returned 1 [0094.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0094.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0094.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0094.014] SetErrorMode (uMode=0x1) returned 0x0 [0094.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x686369d6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x686369d6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3a7cf128, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x152c0)) returned 1 [0094.014] SetErrorMode (uMode=0x0) returned 0x1 [0094.014] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\is\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\is\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0094.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0094.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0094.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0094.015] SetErrorMode (uMode=0x1) returned 0x0 [0094.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.016] GetFileType (hFile=0x230) returned 0x1 [0094.016] SetErrorMode (uMode=0x0) returned 0x1 [0094.016] GetFileType (hFile=0x230) returned 0x1 [0094.016] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.016] ReadFile (in: hFile=0x230, lpBuffer=0x27f2000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f2000*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.017] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.017] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.017] WriteFile (in: hFile=0x230, lpBuffer=0x27f2000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f2000*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.017] CloseHandle (hObject=0x230) returned 1 [0094.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0094.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0094.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0094.031] SetErrorMode (uMode=0x1) returned 0x0 [0094.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ab8aba9, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6ab8aba9, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x3a7f4ed5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0094.032] SetErrorMode (uMode=0x0) returned 0x1 [0094.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626\\it\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626\\it\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0094.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x58 [0094.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x58 [0094.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x58 [0094.033] SetErrorMode (uMode=0x1) returned 0x0 [0094.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.034] GetFileType (hFile=0x230) returned 0x1 [0094.034] SetErrorMode (uMode=0x0) returned 0x1 [0094.035] GetFileType (hFile=0x230) returned 0x1 [0094.035] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.035] ReadFile (in: hFile=0x230, lpBuffer=0x27f5848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f5848*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.044] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.045] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.045] WriteFile (in: hFile=0x230, lpBuffer=0x27f5848*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f5848*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.045] CloseHandle (hObject=0x230) returned 1 [0094.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x58 [0094.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png", lpFilePart=0x0) returned 0x58 [0094.045] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0094.045] SetErrorMode (uMode=0x1) returned 0x0 [0094.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bce98b0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2bce98b0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a81b0fa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x123c)) returned 1 [0094.045] SetErrorMode (uMode=0x0) returned 0x1 [0094.045] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayLogo.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplaylogo.png.partially.cryptonar")) returned 1 [0094.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x59 [0094.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x59 [0094.046] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x59 [0094.046] SetErrorMode (uMode=0x1) returned 0x0 [0094.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.047] GetFileType (hFile=0x230) returned 0x1 [0094.047] SetErrorMode (uMode=0x0) returned 0x1 [0094.047] GetFileType (hFile=0x230) returned 0x1 [0094.047] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.047] ReadFile (in: hFile=0x230, lpBuffer=0x27f8fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f8fa0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.056] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.056] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.056] WriteFile (in: hFile=0x230, lpBuffer=0x27f8fa0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f8fa0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.057] CloseHandle (hObject=0x230) returned 1 [0094.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x59 [0094.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x59 [0094.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0094.057] SetErrorMode (uMode=0x1) returned 0x0 [0094.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ec5b0b5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2ec5b0b5, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a84131b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0094.057] SetErrorMode (uMode=0x0) returned 0x1 [0094.058] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.gif.partially.cryptonar")) returned 1 [0094.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x59 [0094.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x59 [0094.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x59 [0094.058] SetErrorMode (uMode=0x1) returned 0x0 [0094.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.059] GetFileType (hFile=0x230) returned 0x1 [0094.059] SetErrorMode (uMode=0x0) returned 0x1 [0094.059] GetFileType (hFile=0x230) returned 0x1 [0094.059] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.059] ReadFile (in: hFile=0x230, lpBuffer=0x27fc6f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27fc6f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.061] WriteFile (in: hFile=0x230, lpBuffer=0x27fc6f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27fc6f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.062] CloseHandle (hObject=0x230) returned 1 [0094.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x59 [0094.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x59 [0094.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0094.062] SetErrorMode (uMode=0x1) returned 0x0 [0094.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x325bb05c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x325bb05c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a84131b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0094.062] SetErrorMode (uMode=0x0) returned 0x1 [0094.062] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\AutoPlayOptIn.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\autoplayoptin.png.partially.cryptonar")) returned 1 [0094.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5f [0094.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5f [0094.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5f [0094.063] SetErrorMode (uMode=0x1) returned 0x0 [0094.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.064] GetFileType (hFile=0x230) returned 0x1 [0094.064] SetErrorMode (uMode=0x0) returned 0x1 [0094.064] GetFileType (hFile=0x230) returned 0x1 [0094.064] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.064] ReadFile (in: hFile=0x230, lpBuffer=0x27ffe78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ffe78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.065] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.065] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.066] WriteFile (in: hFile=0x230, lpBuffer=0x27ffe78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ffe78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.066] CloseHandle (hObject=0x230) returned 1 [0094.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5f [0094.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat", lpFilePart=0x0) returned 0x5f [0094.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0094.066] SetErrorMode (uMode=0x1) returned 0x0 [0094.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35e5af50, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x35e5af50, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a84131b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16da)) returned 1 [0094.066] SetErrorMode (uMode=0x0) returned 0x1 [0094.066] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\CollectOneDriveLogs.bat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\collectonedrivelogs.bat.partially.cryptonar")) returned 1 [0094.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", lpFilePart=0x0) returned 0x52 [0094.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", lpFilePart=0x0) returned 0x52 [0094.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", lpFilePart=0x0) returned 0x52 [0094.067] SetErrorMode (uMode=0x1) returned 0x0 [0094.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.068] GetFileType (hFile=0x230) returned 0x1 [0094.068] SetErrorMode (uMode=0x0) returned 0x1 [0094.068] GetFileType (hFile=0x230) returned 0x1 [0094.068] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.068] ReadFile (in: hFile=0x230, lpBuffer=0x28035b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28035b0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.078] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.079] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.079] WriteFile (in: hFile=0x230, lpBuffer=0x28035b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28035b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.079] CloseHandle (hObject=0x230) returned 1 [0094.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", lpFilePart=0x0) returned 0x52 [0094.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll", lpFilePart=0x0) returned 0x52 [0094.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0094.080] SetErrorMode (uMode=0x1) returned 0x0 [0094.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39765f09, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x39765f09, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a86758f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x72c0)) returned 1 [0094.080] SetErrorMode (uMode=0x0) returned 0x1 [0094.080] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ETWlog.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\etwlog.dll.partially.cryptonar")) returned 1 [0094.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", lpFilePart=0x0) returned 0x59 [0094.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", lpFilePart=0x0) returned 0x59 [0094.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", lpFilePart=0x0) returned 0x59 [0094.081] SetErrorMode (uMode=0x1) returned 0x0 [0094.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.081] GetFileType (hFile=0x230) returned 0x1 [0094.082] SetErrorMode (uMode=0x0) returned 0x1 [0094.082] GetFileType (hFile=0x230) returned 0x1 [0094.082] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.082] ReadFile (in: hFile=0x230, lpBuffer=0x2806ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2806ca8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.088] WriteFile (in: hFile=0x230, lpBuffer=0x2806ca8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2806ca8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.088] CloseHandle (hObject=0x230) returned 1 [0094.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", lpFilePart=0x0) returned 0x59 [0094.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml", lpFilePart=0x0) returned 0x59 [0094.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0094.089] SetErrorMode (uMode=0x1) returned 0x0 [0094.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478b90e7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x478b90e7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a88d7b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e5f)) returned 1 [0094.089] SetErrorMode (uMode=0x0) returned 0x1 [0094.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ExclusionList.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\exclusionlist.xml.partially.cryptonar")) returned 1 [0094.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x67 [0094.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x67 [0094.090] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x67 [0094.090] SetErrorMode (uMode=0x1) returned 0x0 [0094.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.091] GetFileType (hFile=0x230) returned 0x1 [0094.091] SetErrorMode (uMode=0x0) returned 0x1 [0094.091] GetFileType (hFile=0x230) returned 0x1 [0094.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.091] ReadFile (in: hFile=0x230, lpBuffer=0x280a478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x280a478*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.109] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.110] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.110] WriteFile (in: hFile=0x230, lpBuffer=0x280a478*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x280a478*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.110] CloseHandle (hObject=0x230) returned 1 [0094.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x67 [0094.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x67 [0094.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0094.118] SetErrorMode (uMode=0x1) returned 0x0 [0094.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b393a97, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4b393a97, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a8d9c65, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x140c0)) returned 1 [0094.119] SetErrorMode (uMode=0x0) returned 0x1 [0094.119] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.LocalizedResources.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.localizedresources.dll.partially.cryptonar")) returned 1 [0094.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5e [0094.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5e [0094.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5e [0094.120] SetErrorMode (uMode=0x1) returned 0x0 [0094.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.120] GetFileType (hFile=0x230) returned 0x1 [0094.120] SetErrorMode (uMode=0x0) returned 0x1 [0094.120] GetFileType (hFile=0x230) returned 0x1 [0094.121] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.121] ReadFile (in: hFile=0x230, lpBuffer=0x280dc88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x280dc88*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.132] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.132] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.132] WriteFile (in: hFile=0x230, lpBuffer=0x280dc88*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x280dc88*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.133] CloseHandle (hObject=0x230) returned 1 [0094.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5e [0094.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5e [0094.133] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x72 [0094.133] SetErrorMode (uMode=0x1) returned 0x0 [0094.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb02f85, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4eb02f85, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a8ffffa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x28d8c0)) returned 1 [0094.133] SetErrorMode (uMode=0x0) returned 0x1 [0094.134] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSync.Resources.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesync.resources.dll.partially.cryptonar")) returned 1 [0094.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", lpFilePart=0x0) returned 0x57 [0094.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", lpFilePart=0x0) returned 0x57 [0094.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", lpFilePart=0x0) returned 0x57 [0094.136] SetErrorMode (uMode=0x1) returned 0x0 [0094.136] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.136] GetFileType (hFile=0x230) returned 0x1 [0094.136] SetErrorMode (uMode=0x0) returned 0x1 [0094.136] GetFileType (hFile=0x230) returned 0x1 [0094.136] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.136] ReadFile (in: hFile=0x230, lpBuffer=0x28113e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28113e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.149] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.149] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.150] WriteFile (in: hFile=0x230, lpBuffer=0x28113e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28113e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.150] CloseHandle (hObject=0x230) returned 1 [0094.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", lpFilePart=0x0) returned 0x57 [0094.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll", lpFilePart=0x0) returned 0x57 [0094.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0094.165] SetErrorMode (uMode=0x1) returned 0x0 [0094.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5507d320, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5507d320, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a94c385, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x362c0)) returned 1 [0094.165] SetErrorMode (uMode=0x0) returned 0x1 [0094.165] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncApi.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncapi.dll.partially.cryptonar")) returned 1 [0094.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", lpFilePart=0x0) returned 0x5a [0094.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", lpFilePart=0x0) returned 0x5a [0094.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", lpFilePart=0x0) returned 0x5a [0094.167] SetErrorMode (uMode=0x1) returned 0x0 [0094.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.168] GetFileType (hFile=0x230) returned 0x1 [0094.168] SetErrorMode (uMode=0x0) returned 0x1 [0094.168] GetFileType (hFile=0x230) returned 0x1 [0094.168] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.168] ReadFile (in: hFile=0x230, lpBuffer=0x2814b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2814b10*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.186] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.186] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.186] WriteFile (in: hFile=0x230, lpBuffer=0x2814b10*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2814b10*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.186] CloseHandle (hObject=0x230) returned 1 [0094.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", lpFilePart=0x0) returned 0x5a [0094.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll", lpFilePart=0x0) returned 0x5a [0094.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0094.214] SetErrorMode (uMode=0x1) returned 0x0 [0094.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x588ade05, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x588ade05, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a9beb97, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d9ec0)) returned 1 [0094.214] SetErrorMode (uMode=0x0) returned 0x1 [0094.214] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncClient.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncclient.dll.partially.cryptonar")) returned 1 [0094.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x5a [0094.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x5a [0094.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x5a [0094.215] SetErrorMode (uMode=0x1) returned 0x0 [0094.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.216] GetFileType (hFile=0x230) returned 0x1 [0094.216] SetErrorMode (uMode=0x0) returned 0x1 [0094.216] GetFileType (hFile=0x230) returned 0x1 [0094.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.216] ReadFile (in: hFile=0x230, lpBuffer=0x2818268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2818268*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.237] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.237] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.237] WriteFile (in: hFile=0x230, lpBuffer=0x2818268*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2818268*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.238] CloseHandle (hObject=0x230) returned 1 [0094.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x5a [0094.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x5a [0094.238] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0094.238] SetErrorMode (uMode=0x1) returned 0x0 [0094.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncconfig.exe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f015ea7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f015ea7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3a9e4d7a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x238c0)) returned 1 [0094.239] SetErrorMode (uMode=0x0) returned 0x1 [0094.239] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncconfig.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncConfig.exe.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncconfig.exe.partially.cryptonar")) returned 1 [0094.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5c [0094.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5c [0094.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5c [0094.240] SetErrorMode (uMode=0x1) returned 0x0 [0094.240] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncsessions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.240] GetFileType (hFile=0x230) returned 0x1 [0094.241] SetErrorMode (uMode=0x0) returned 0x1 [0094.241] GetFileType (hFile=0x230) returned 0x1 [0094.241] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.241] ReadFile (in: hFile=0x230, lpBuffer=0x281b9e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x281b9e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.246] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.246] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.246] WriteFile (in: hFile=0x230, lpBuffer=0x281b9e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x281b9e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.246] CloseHandle (hObject=0x230) returned 1 [0094.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5c [0094.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5c [0094.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x70 [0094.247] SetErrorMode (uMode=0x1) returned 0x0 [0094.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncsessions.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628698f9, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x628698f9, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3aa0b08e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1464c0)) returned 1 [0094.247] SetErrorMode (uMode=0x0) returned 0x1 [0094.247] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncsessions.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\FileSyncSessions.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\filesyncsessions.dll.partially.cryptonar")) returned 1 [0094.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.249] SetErrorMode (uMode=0x1) returned 0x0 [0094.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.249] GetFileType (hFile=0x230) returned 0x1 [0094.249] SetErrorMode (uMode=0x0) returned 0x1 [0094.249] GetFileType (hFile=0x230) returned 0x1 [0094.249] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.249] ReadFile (in: hFile=0x230, lpBuffer=0x281f228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x281f228*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.257] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.257] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.257] WriteFile (in: hFile=0x230, lpBuffer=0x281f228*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x281f228*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.257] CloseHandle (hObject=0x230) returned 1 [0094.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0094.264] SetErrorMode (uMode=0x1) returned 0x0 [0094.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32522700, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x32522700, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3aa313e9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x152c0)) returned 1 [0094.264] SetErrorMode (uMode=0x0) returned 0x1 [0094.265] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\is\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\is\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0094.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.266] SetErrorMode (uMode=0x1) returned 0x0 [0094.266] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.268] GetFileType (hFile=0x230) returned 0x1 [0094.268] SetErrorMode (uMode=0x0) returned 0x1 [0094.268] GetFileType (hFile=0x230) returned 0x1 [0094.268] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.268] ReadFile (in: hFile=0x230, lpBuffer=0x2822b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2822b28*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.273] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.273] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.273] WriteFile (in: hFile=0x230, lpBuffer=0x2822b28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2822b28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.273] CloseHandle (hObject=0x230) returned 1 [0094.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0094.282] SetErrorMode (uMode=0x1) returned 0x0 [0094.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4077621c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4077621c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3aa57370, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0094.283] SetErrorMode (uMode=0x0) returned 0x1 [0094.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\it\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\it\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0094.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.285] SetErrorMode (uMode=0x1) returned 0x0 [0094.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.286] GetFileType (hFile=0x230) returned 0x1 [0094.286] SetErrorMode (uMode=0x0) returned 0x1 [0094.286] GetFileType (hFile=0x230) returned 0x1 [0094.286] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.286] ReadFile (in: hFile=0x230, lpBuffer=0x2826428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2826428*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.289] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.289] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.289] WriteFile (in: hFile=0x230, lpBuffer=0x2826428*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2826428*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.290] CloseHandle (hObject=0x230) returned 1 [0094.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0094.290] SetErrorMode (uMode=0x1) returned 0x0 [0094.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d351916, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4d351916, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3aa7d5a6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfcc0)) returned 1 [0094.290] SetErrorMode (uMode=0x0) returned 0x1 [0094.290] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ja\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ja\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0094.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.292] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.292] SetErrorMode (uMode=0x1) returned 0x0 [0094.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.293] GetFileType (hFile=0x230) returned 0x1 [0094.293] SetErrorMode (uMode=0x0) returned 0x1 [0094.293] GetFileType (hFile=0x230) returned 0x1 [0094.293] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.293] ReadFile (in: hFile=0x230, lpBuffer=0x2829d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2829d28*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.294] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.294] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.294] WriteFile (in: hFile=0x230, lpBuffer=0x2829d28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2829d28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.295] CloseHandle (hObject=0x230) returned 1 [0094.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.295] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0094.295] SetErrorMode (uMode=0x1) returned 0x0 [0094.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d761ee, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x57d761ee, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3aa7d5a6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x164c0)) returned 1 [0094.296] SetErrorMode (uMode=0x0) returned 0x1 [0094.296] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\ka\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\ka\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0094.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.297] SetErrorMode (uMode=0x1) returned 0x0 [0094.297] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.298] GetFileType (hFile=0x230) returned 0x1 [0094.298] SetErrorMode (uMode=0x0) returned 0x1 [0094.298] GetFileType (hFile=0x230) returned 0x1 [0094.298] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.298] ReadFile (in: hFile=0x230, lpBuffer=0x282d628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x282d628*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.305] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.305] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.305] WriteFile (in: hFile=0x230, lpBuffer=0x282d628*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x282d628*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.305] CloseHandle (hObject=0x230) returned 1 [0094.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6e [0094.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0094.332] SetErrorMode (uMode=0x1) returned 0x0 [0094.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f310dd1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f310dd1, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x3aac9b84, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x160c0)) returned 1 [0094.333] SetErrorMode (uMode=0x0) returned 0x1 [0094.333] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_1\\kk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_1\\kk\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0094.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll", lpFilePart=0x0) returned 0x4e [0094.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll", lpFilePart=0x0) returned 0x4e [0094.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll", lpFilePart=0x0) returned 0x4e [0094.334] SetErrorMode (uMode=0x1) returned 0x0 [0094.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.334] GetFileType (hFile=0x230) returned 0x1 [0094.334] SetErrorMode (uMode=0x0) returned 0x1 [0094.334] GetFileType (hFile=0x230) returned 0x1 [0094.334] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.334] ReadFile (in: hFile=0x230, lpBuffer=0x2830e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2830e08*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.491] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.491] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.491] WriteFile (in: hFile=0x230, lpBuffer=0x2830e08*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2830e08*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.491] CloseHandle (hObject=0x230) returned 1 [0094.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll", lpFilePart=0x0) returned 0x4e [0094.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll", lpFilePart=0x0) returned 0x4e [0094.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x62 [0094.492] SetErrorMode (uMode=0x1) returned 0x0 [0094.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adal.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d9f5868, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2d9f5868, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ac4b3f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd5ed0)) returned 1 [0094.492] SetErrorMode (uMode=0x0) returned 0x1 [0094.492] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adal.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adal.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adal.dll.partially.cryptonar")) returned 1 [0094.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png", lpFilePart=0x0) returned 0x53 [0094.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png", lpFilePart=0x0) returned 0x53 [0094.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png", lpFilePart=0x0) returned 0x53 [0094.493] SetErrorMode (uMode=0x1) returned 0x0 [0094.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\alerticon.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.494] GetFileType (hFile=0x230) returned 0x1 [0094.494] SetErrorMode (uMode=0x0) returned 0x1 [0094.494] GetFileType (hFile=0x230) returned 0x1 [0094.494] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.494] ReadFile (in: hFile=0x230, lpBuffer=0x2834498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2834498*, lpNumberOfBytesRead=0x5ae8b8*=0x2ce, lpOverlapped=0x0) returned 1 [0094.523] ReadFile (in: hFile=0x230, lpBuffer=0x2834498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2834498*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0094.523] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.523] WriteFile (in: hFile=0x230, lpBuffer=0x2834498*, nNumberOfBytesToWrite=0x2ce, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2834498*, lpNumberOfBytesWritten=0x5ae8a8*=0x2ce, lpOverlapped=0x0) returned 1 [0094.523] CloseHandle (hObject=0x230) returned 1 [0094.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png", lpFilePart=0x0) returned 0x53 [0094.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png", lpFilePart=0x0) returned 0x53 [0094.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png.partially.cryptoNar", lpFilePart=0x0) returned 0x67 [0094.524] SetErrorMode (uMode=0x1) returned 0x0 [0094.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\alerticon.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da21782, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2da21782, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3acb9a9e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ce)) returned 1 [0094.524] SetErrorMode (uMode=0x0) returned 0x1 [0094.524] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\alerticon.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\alertIcon.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\alerticon.png.partially.cryptonar")) returned 1 [0094.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0094.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0094.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0094.525] SetErrorMode (uMode=0x1) returned 0x0 [0094.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.526] GetFileType (hFile=0x230) returned 0x1 [0094.526] SetErrorMode (uMode=0x0) returned 0x1 [0094.526] GetFileType (hFile=0x230) returned 0x1 [0094.526] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.526] ReadFile (in: hFile=0x230, lpBuffer=0x2837df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2837df0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.541] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.541] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.541] WriteFile (in: hFile=0x230, lpBuffer=0x2837df0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2837df0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.542] CloseHandle (hObject=0x230) returned 1 [0094.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0094.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0094.559] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7c [0094.559] SetErrorMode (uMode=0x1) returned 0x0 [0094.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da37715, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2da37715, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ad05f08, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0094.559] SetErrorMode (uMode=0x0) returned 0x1 [0094.559] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-console-l1-1-0.dll.partially.cryptonar")) returned 1 [0094.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0094.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0094.560] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0094.560] SetErrorMode (uMode=0x1) returned 0x0 [0094.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.561] GetFileType (hFile=0x230) returned 0x1 [0094.561] SetErrorMode (uMode=0x0) returned 0x1 [0094.561] GetFileType (hFile=0x230) returned 0x1 [0094.561] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.561] ReadFile (in: hFile=0x230, lpBuffer=0x283b6a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x283b6a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.601] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.601] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.601] WriteFile (in: hFile=0x230, lpBuffer=0x283b6a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x283b6a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.601] CloseHandle (hObject=0x230) returned 1 [0094.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0094.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0094.607] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7d [0094.607] SetErrorMode (uMode=0x1) returned 0x0 [0094.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da5e828, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2da5e828, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ad7862e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0094.607] SetErrorMode (uMode=0x0) returned 0x1 [0094.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-datetime-l1-1-0.dll.partially.cryptonar")) returned 1 [0094.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0094.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0094.608] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0094.608] SetErrorMode (uMode=0x1) returned 0x0 [0094.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.609] GetFileType (hFile=0x230) returned 0x1 [0094.609] SetErrorMode (uMode=0x0) returned 0x1 [0094.609] GetFileType (hFile=0x230) returned 0x1 [0094.609] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.609] ReadFile (in: hFile=0x230, lpBuffer=0x283ef48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x283ef48*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.614] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.614] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.614] WriteFile (in: hFile=0x230, lpBuffer=0x283ef48*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x283ef48*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.614] CloseHandle (hObject=0x230) returned 1 [0094.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0094.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0094.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0094.615] SetErrorMode (uMode=0x1) returned 0x0 [0094.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da76ee7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2da76ee7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ad7862e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0094.615] SetErrorMode (uMode=0x0) returned 0x1 [0094.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-debug-l1-1-0.dll.partially.cryptonar")) returned 1 [0094.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0094.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0094.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0094.616] SetErrorMode (uMode=0x1) returned 0x0 [0094.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.617] GetFileType (hFile=0x230) returned 0x1 [0094.617] SetErrorMode (uMode=0x0) returned 0x1 [0094.617] GetFileType (hFile=0x230) returned 0x1 [0094.617] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.617] ReadFile (in: hFile=0x230, lpBuffer=0x2842810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2842810*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.651] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.651] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.651] WriteFile (in: hFile=0x230, lpBuffer=0x2842810*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2842810*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.652] CloseHandle (hObject=0x230) returned 1 [0094.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0094.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0094.685] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0094.685] SetErrorMode (uMode=0x1) returned 0x0 [0094.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da8ce5a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2da8ce5a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ae2eca4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0094.685] SetErrorMode (uMode=0x0) returned 0x1 [0094.685] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-errorhandling-l1-1-0.dll.partially.cryptonar")) returned 1 [0094.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.686] SetErrorMode (uMode=0x1) returned 0x0 [0094.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.687] GetFileType (hFile=0x230) returned 0x1 [0094.687] SetErrorMode (uMode=0x0) returned 0x1 [0094.687] GetFileType (hFile=0x230) returned 0x1 [0094.687] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.687] ReadFile (in: hFile=0x230, lpBuffer=0x28460d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28460d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.707] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.707] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.708] WriteFile (in: hFile=0x230, lpBuffer=0x28460d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28460d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.708] CloseHandle (hObject=0x230) returned 1 [0094.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.708] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x79 [0094.709] SetErrorMode (uMode=0x1) returned 0x0 [0094.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2daa5501, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2daa5501, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ae7b4c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x54d0)) returned 1 [0094.709] SetErrorMode (uMode=0x0) returned 0x1 [0094.709] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-1-0.dll.partially.cryptonar")) returned 1 [0094.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll", lpFilePart=0x0) returned 0x65 [0094.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll", lpFilePart=0x0) returned 0x65 [0094.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll", lpFilePart=0x0) returned 0x65 [0094.710] SetErrorMode (uMode=0x1) returned 0x0 [0094.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.710] GetFileType (hFile=0x230) returned 0x1 [0094.710] SetErrorMode (uMode=0x0) returned 0x1 [0094.711] GetFileType (hFile=0x230) returned 0x1 [0094.711] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.711] ReadFile (in: hFile=0x230, lpBuffer=0x2849938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2849938*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.779] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.779] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.779] WriteFile (in: hFile=0x230, lpBuffer=0x2849938*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2849938*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.780] CloseHandle (hObject=0x230) returned 1 [0094.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll", lpFilePart=0x0) returned 0x65 [0094.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll", lpFilePart=0x0) returned 0x65 [0094.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x79 [0094.780] SetErrorMode (uMode=0x1) returned 0x0 [0094.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dabdbbf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dabdbbf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3af13ce6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0094.780] SetErrorMode (uMode=0x0) returned 0x1 [0094.780] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l1-2-0.dll.partially.cryptonar")) returned 1 [0094.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.781] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.781] SetErrorMode (uMode=0x1) returned 0x0 [0094.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.783] GetFileType (hFile=0x230) returned 0x1 [0094.783] SetErrorMode (uMode=0x0) returned 0x1 [0094.783] GetFileType (hFile=0x230) returned 0x1 [0094.783] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.783] ReadFile (in: hFile=0x230, lpBuffer=0x284d198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x284d198*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.785] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.785] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.785] WriteFile (in: hFile=0x230, lpBuffer=0x284d198*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x284d198*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.786] CloseHandle (hObject=0x230) returned 1 [0094.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x79 [0094.786] SetErrorMode (uMode=0x1) returned 0x0 [0094.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dad625f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dad625f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3af39ec7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0094.786] SetErrorMode (uMode=0x0) returned 0x1 [0094.786] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-file-l2-1-0.dll.partially.cryptonar")) returned 1 [0094.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0094.787] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0094.788] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0094.788] SetErrorMode (uMode=0x1) returned 0x0 [0094.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.788] GetFileType (hFile=0x230) returned 0x1 [0094.788] SetErrorMode (uMode=0x0) returned 0x1 [0094.788] GetFileType (hFile=0x230) returned 0x1 [0094.788] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.788] ReadFile (in: hFile=0x230, lpBuffer=0x2850a08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2850a08*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.820] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.820] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.820] WriteFile (in: hFile=0x230, lpBuffer=0x2850a08*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2850a08*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.820] CloseHandle (hObject=0x230) returned 1 [0094.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0094.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0094.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0094.853] SetErrorMode (uMode=0x1) returned 0x0 [0094.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2daf5e28, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2daf5e28, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3afd2988, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0094.853] SetErrorMode (uMode=0x0) returned 0x1 [0094.853] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-handle-l1-1-0.dll.partially.cryptonar")) returned 1 [0094.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.855] SetErrorMode (uMode=0x1) returned 0x0 [0094.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.856] GetFileType (hFile=0x230) returned 0x1 [0094.856] SetErrorMode (uMode=0x0) returned 0x1 [0094.856] GetFileType (hFile=0x230) returned 0x1 [0094.856] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.856] ReadFile (in: hFile=0x230, lpBuffer=0x2854270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2854270*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.875] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.875] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.875] WriteFile (in: hFile=0x230, lpBuffer=0x2854270*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2854270*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.876] CloseHandle (hObject=0x230) returned 1 [0094.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0094.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x79 [0094.876] SetErrorMode (uMode=0x1) returned 0x0 [0094.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db52ab2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db52ab2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3aff8bb1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0094.876] SetErrorMode (uMode=0x0) returned 0x1 [0094.876] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-heap-l1-1-0.dll.partially.cryptonar")) returned 1 [0094.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", lpFilePart=0x0) returned 0x6c [0094.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", lpFilePart=0x0) returned 0x6c [0094.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", lpFilePart=0x0) returned 0x6c [0094.878] SetErrorMode (uMode=0x1) returned 0x0 [0094.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.878] GetFileType (hFile=0x230) returned 0x1 [0094.878] SetErrorMode (uMode=0x0) returned 0x1 [0094.878] GetFileType (hFile=0x230) returned 0x1 [0094.878] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.878] ReadFile (in: hFile=0x230, lpBuffer=0x2857b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2857b20*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.899] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.899] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.899] WriteFile (in: hFile=0x230, lpBuffer=0x2857b20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2857b20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.899] CloseHandle (hObject=0x230) returned 1 [0094.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", lpFilePart=0x0) returned 0x6c [0094.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll", lpFilePart=0x0) returned 0x6c [0094.927] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0094.927] SetErrorMode (uMode=0x1) returned 0x0 [0094.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db6b144, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db6b144, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b092b57, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0094.928] SetErrorMode (uMode=0x0) returned 0x1 [0094.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-interlocked-l1-1-0.dll.partially.cryptonar")) returned 1 [0094.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0094.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0094.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0094.929] SetErrorMode (uMode=0x1) returned 0x0 [0094.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.930] GetFileType (hFile=0x230) returned 0x1 [0094.930] SetErrorMode (uMode=0x0) returned 0x1 [0094.930] GetFileType (hFile=0x230) returned 0x1 [0094.930] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.930] ReadFile (in: hFile=0x230, lpBuffer=0x285b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285b440*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.940] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.940] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.940] WriteFile (in: hFile=0x230, lpBuffer=0x285b440*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x285b440*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.940] CloseHandle (hObject=0x230) returned 1 [0094.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0094.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll", lpFilePart=0x0) returned 0x6e [0094.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0094.973] SetErrorMode (uMode=0x1) returned 0x0 [0094.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2db837eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2db837eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b0dda47, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0094.973] SetErrorMode (uMode=0x0) returned 0x1 [0094.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-libraryloader-l1-1-0.dll.partially.cryptonar")) returned 1 [0094.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x0) returned 0x6d [0094.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x0) returned 0x6d [0094.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x0) returned 0x6d [0094.975] SetErrorMode (uMode=0x1) returned 0x0 [0094.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0094.976] GetFileType (hFile=0x230) returned 0x1 [0094.976] SetErrorMode (uMode=0x0) returned 0x1 [0094.976] GetFileType (hFile=0x230) returned 0x1 [0094.976] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.976] ReadFile (in: hFile=0x230, lpBuffer=0x285ed58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285ed58*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0094.998] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0094.998] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0094.998] WriteFile (in: hFile=0x230, lpBuffer=0x285ed58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x285ed58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0094.998] CloseHandle (hObject=0x230) returned 1 [0095.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x0) returned 0x6d [0095.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll", lpFilePart=0x0) returned 0x6d [0095.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x81 [0095.015] SetErrorMode (uMode=0x1) returned 0x0 [0095.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dba0cbe, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dba0cbe, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b150055, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50d0)) returned 1 [0095.016] SetErrorMode (uMode=0x0) returned 0x1 [0095.016] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-localization-l1-2-0.dll.partially.cryptonar")) returned 1 [0095.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.017] SetErrorMode (uMode=0x1) returned 0x0 [0095.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.018] GetFileType (hFile=0x230) returned 0x1 [0095.018] SetErrorMode (uMode=0x0) returned 0x1 [0095.018] GetFileType (hFile=0x230) returned 0x1 [0095.018] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.018] ReadFile (in: hFile=0x230, lpBuffer=0x2862628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2862628*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.061] WriteFile (in: hFile=0x230, lpBuffer=0x2862628*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2862628*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.061] CloseHandle (hObject=0x230) returned 1 [0095.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0095.062] SetErrorMode (uMode=0x1) returned 0x0 [0095.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbbba61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dbbba61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b1c276b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0095.062] SetErrorMode (uMode=0x0) returned 0x1 [0095.062] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-memory-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0095.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0095.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0095.063] SetErrorMode (uMode=0x1) returned 0x0 [0095.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.064] GetFileType (hFile=0x230) returned 0x1 [0095.064] SetErrorMode (uMode=0x0) returned 0x1 [0095.064] GetFileType (hFile=0x230) returned 0x1 [0095.064] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.064] ReadFile (in: hFile=0x230, lpBuffer=0x2865ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2865ec8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.086] WriteFile (in: hFile=0x230, lpBuffer=0x2865ec8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2865ec8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.086] CloseHandle (hObject=0x230) returned 1 [0095.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0095.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0095.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7e [0095.120] SetErrorMode (uMode=0x1) returned 0x0 [0095.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbf15e8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dbf15e8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b25b18e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0095.120] SetErrorMode (uMode=0x0) returned 0x1 [0095.120] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-namedpipe-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", lpFilePart=0x0) returned 0x73 [0095.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", lpFilePart=0x0) returned 0x73 [0095.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", lpFilePart=0x0) returned 0x73 [0095.121] SetErrorMode (uMode=0x1) returned 0x0 [0095.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.122] GetFileType (hFile=0x230) returned 0x1 [0095.122] SetErrorMode (uMode=0x0) returned 0x1 [0095.122] GetFileType (hFile=0x230) returned 0x1 [0095.122] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.122] ReadFile (in: hFile=0x230, lpBuffer=0x28697e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28697e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.123] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.124] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.124] WriteFile (in: hFile=0x230, lpBuffer=0x28697e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28697e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.124] CloseHandle (hObject=0x230) returned 1 [0095.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", lpFilePart=0x0) returned 0x73 [0095.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll", lpFilePart=0x0) returned 0x73 [0095.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x87 [0095.137] SetErrorMode (uMode=0x1) returned 0x0 [0095.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc90e63, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dc90e63, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b281345, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0095.137] SetErrorMode (uMode=0x0) returned 0x1 [0095.137] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processenvironment-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", lpFilePart=0x0) returned 0x6f [0095.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", lpFilePart=0x0) returned 0x6f [0095.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", lpFilePart=0x0) returned 0x6f [0095.139] SetErrorMode (uMode=0x1) returned 0x0 [0095.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.139] GetFileType (hFile=0x230) returned 0x1 [0095.139] SetErrorMode (uMode=0x0) returned 0x1 [0095.139] GetFileType (hFile=0x230) returned 0x1 [0095.139] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.139] ReadFile (in: hFile=0x230, lpBuffer=0x286d140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x286d140*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.157] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.158] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.158] WriteFile (in: hFile=0x230, lpBuffer=0x286d140*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x286d140*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.159] CloseHandle (hObject=0x230) returned 1 [0095.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", lpFilePart=0x0) returned 0x6f [0095.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll", lpFilePart=0x0) returned 0x6f [0095.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0095.168] SetErrorMode (uMode=0x1) returned 0x0 [0095.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dcdd319, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dcdd319, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b2cd7e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ed0)) returned 1 [0095.168] SetErrorMode (uMode=0x0) returned 0x1 [0095.168] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x0) returned 0x6f [0095.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x0) returned 0x6f [0095.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x0) returned 0x6f [0095.170] SetErrorMode (uMode=0x1) returned 0x0 [0095.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.170] GetFileType (hFile=0x230) returned 0x1 [0095.170] SetErrorMode (uMode=0x0) returned 0x1 [0095.170] GetFileType (hFile=0x230) returned 0x1 [0095.170] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.171] ReadFile (in: hFile=0x230, lpBuffer=0x2870a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2870a68*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.172] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.172] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.172] WriteFile (in: hFile=0x230, lpBuffer=0x2870a68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2870a68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.172] CloseHandle (hObject=0x230) returned 1 [0095.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x0) returned 0x6f [0095.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll", lpFilePart=0x0) returned 0x6f [0095.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0095.208] SetErrorMode (uMode=0x1) returned 0x0 [0095.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd0356e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dd0356e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b33ffbd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0095.208] SetErrorMode (uMode=0x0) returned 0x1 [0095.208] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-processthreads-l1-1-1.dll.partially.cryptonar")) returned 1 [0095.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0095.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0095.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0095.210] SetErrorMode (uMode=0x1) returned 0x0 [0095.210] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.210] GetFileType (hFile=0x230) returned 0x1 [0095.210] SetErrorMode (uMode=0x0) returned 0x1 [0095.210] GetFileType (hFile=0x230) returned 0x1 [0095.211] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.211] ReadFile (in: hFile=0x230, lpBuffer=0x2874358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2874358*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.230] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.230] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.230] WriteFile (in: hFile=0x230, lpBuffer=0x2874358*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2874358*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.230] CloseHandle (hObject=0x230) returned 1 [0095.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0095.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0095.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7c [0095.242] SetErrorMode (uMode=0x1) returned 0x0 [0095.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dde841d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dde841d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b38c4ec, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x44d0)) returned 1 [0095.243] SetErrorMode (uMode=0x0) returned 0x1 [0095.243] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-profile-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0095.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0095.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0095.244] SetErrorMode (uMode=0x1) returned 0x0 [0095.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.245] GetFileType (hFile=0x230) returned 0x1 [0095.245] SetErrorMode (uMode=0x0) returned 0x1 [0095.245] GetFileType (hFile=0x230) returned 0x1 [0095.245] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.246] ReadFile (in: hFile=0x230, lpBuffer=0x2877c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2877c20*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.320] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.320] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.320] WriteFile (in: hFile=0x230, lpBuffer=0x2877c20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2877c20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.321] CloseHandle (hObject=0x230) returned 1 [0095.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0095.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0095.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7f [0095.321] SetErrorMode (uMode=0x1) returned 0x0 [0095.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de0e5df, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2de0e5df, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b44afe8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x44c8)) returned 1 [0095.321] SetErrorMode (uMode=0x0) returned 0x1 [0095.321] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-rtlsupport-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.322] SetErrorMode (uMode=0x1) returned 0x0 [0095.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.324] GetFileType (hFile=0x230) returned 0x1 [0095.324] SetErrorMode (uMode=0x0) returned 0x1 [0095.324] GetFileType (hFile=0x230) returned 0x1 [0095.324] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.324] ReadFile (in: hFile=0x230, lpBuffer=0x287b4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x287b4c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.394] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.394] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.394] WriteFile (in: hFile=0x230, lpBuffer=0x287b4c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x287b4c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.394] CloseHandle (hObject=0x230) returned 1 [0095.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0095.395] SetErrorMode (uMode=0x1) returned 0x0 [0095.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dea419e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2dea419e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b509b6b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0095.395] SetErrorMode (uMode=0x0) returned 0x1 [0095.395] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-string-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0095.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0095.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0095.396] SetErrorMode (uMode=0x1) returned 0x0 [0095.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.397] GetFileType (hFile=0x230) returned 0x1 [0095.397] SetErrorMode (uMode=0x0) returned 0x1 [0095.397] GetFileType (hFile=0x230) returned 0x1 [0095.397] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.397] ReadFile (in: hFile=0x230, lpBuffer=0x287ed40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x287ed40*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.399] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.399] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.399] WriteFile (in: hFile=0x230, lpBuffer=0x287ed40*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x287ed40*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.399] CloseHandle (hObject=0x230) returned 1 [0095.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0095.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0095.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0095.399] SetErrorMode (uMode=0x1) returned 0x0 [0095.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df405b9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2df405b9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b509b6b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ec8)) returned 1 [0095.399] SetErrorMode (uMode=0x0) returned 0x1 [0095.399] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x0) returned 0x66 [0095.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x0) returned 0x66 [0095.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x0) returned 0x66 [0095.400] SetErrorMode (uMode=0x1) returned 0x0 [0095.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.401] GetFileType (hFile=0x230) returned 0x1 [0095.401] SetErrorMode (uMode=0x0) returned 0x1 [0095.401] GetFileType (hFile=0x230) returned 0x1 [0095.401] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.401] ReadFile (in: hFile=0x230, lpBuffer=0x28825b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28825b8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.402] WriteFile (in: hFile=0x230, lpBuffer=0x28825b8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28825b8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.402] CloseHandle (hObject=0x230) returned 1 [0095.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x0) returned 0x66 [0095.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll", lpFilePart=0x0) returned 0x66 [0095.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0095.402] SetErrorMode (uMode=0x1) returned 0x0 [0095.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df90ed6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2df90ed6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b509b6b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0095.403] SetErrorMode (uMode=0x0) returned 0x1 [0095.403] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-synch-l1-2-0.dll.partially.cryptonar")) returned 1 [0095.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0095.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0095.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0095.403] SetErrorMode (uMode=0x1) returned 0x0 [0095.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.404] GetFileType (hFile=0x230) returned 0x1 [0095.404] SetErrorMode (uMode=0x0) returned 0x1 [0095.404] GetFileType (hFile=0x230) returned 0x1 [0095.404] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.404] ReadFile (in: hFile=0x230, lpBuffer=0x2885e48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2885e48*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.419] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.419] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.419] WriteFile (in: hFile=0x230, lpBuffer=0x2885e48*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2885e48*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.420] CloseHandle (hObject=0x230) returned 1 [0095.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0095.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll", lpFilePart=0x0) returned 0x68 [0095.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7c [0095.478] SetErrorMode (uMode=0x1) returned 0x0 [0095.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e032124, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e032124, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b5c9e1b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ac8)) returned 1 [0095.478] SetErrorMode (uMode=0x0) returned 0x1 [0095.478] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-sysinfo-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0095.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0095.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0095.480] SetErrorMode (uMode=0x1) returned 0x0 [0095.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.481] GetFileType (hFile=0x230) returned 0x1 [0095.481] SetErrorMode (uMode=0x0) returned 0x1 [0095.481] GetFileType (hFile=0x230) returned 0x1 [0095.481] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.481] ReadFile (in: hFile=0x230, lpBuffer=0x2889700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2889700*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.530] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.530] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.530] WriteFile (in: hFile=0x230, lpBuffer=0x2889700*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2889700*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.531] CloseHandle (hObject=0x230) returned 1 [0095.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0095.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0095.531] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7d [0095.531] SetErrorMode (uMode=0x1) returned 0x0 [0095.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e073ff0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e073ff0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b63af15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0095.531] SetErrorMode (uMode=0x0) returned 0x1 [0095.531] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-timezone-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0095.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0095.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0095.532] SetErrorMode (uMode=0x1) returned 0x0 [0095.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.533] GetFileType (hFile=0x230) returned 0x1 [0095.533] SetErrorMode (uMode=0x0) returned 0x1 [0095.533] GetFileType (hFile=0x230) returned 0x1 [0095.533] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.533] ReadFile (in: hFile=0x230, lpBuffer=0x288cf90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x288cf90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.548] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.548] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.548] WriteFile (in: hFile=0x230, lpBuffer=0x288cf90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x288cf90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.549] CloseHandle (hObject=0x230) returned 1 [0095.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0095.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0095.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x79 [0095.549] SetErrorMode (uMode=0x1) returned 0x0 [0095.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0a9b36, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e0a9b36, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b661076, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46d0)) returned 1 [0095.550] SetErrorMode (uMode=0x0) returned 0x1 [0095.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-core-util-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0095.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0095.551] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0095.551] SetErrorMode (uMode=0x1) returned 0x0 [0095.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.552] GetFileType (hFile=0x230) returned 0x1 [0095.552] SetErrorMode (uMode=0x0) returned 0x1 [0095.552] GetFileType (hFile=0x230) returned 0x1 [0095.552] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.552] ReadFile (in: hFile=0x230, lpBuffer=0x28907f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28907f0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.560] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.560] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.560] WriteFile (in: hFile=0x230, lpBuffer=0x28907f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28907f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.560] CloseHandle (hObject=0x230) returned 1 [0095.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0095.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0095.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x79 [0095.568] SetErrorMode (uMode=0x1) returned 0x0 [0095.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e0f563b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e0f563b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b6ad5f5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0095.569] SetErrorMode (uMode=0x0) returned 0x1 [0095.569] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-conio-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.570] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.570] SetErrorMode (uMode=0x1) returned 0x0 [0095.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.571] GetFileType (hFile=0x230) returned 0x1 [0095.571] SetErrorMode (uMode=0x0) returned 0x1 [0095.571] GetFileType (hFile=0x230) returned 0x1 [0095.571] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.571] ReadFile (in: hFile=0x230, lpBuffer=0x2894060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2894060*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.625] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.626] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.626] WriteFile (in: hFile=0x230, lpBuffer=0x2894060*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2894060*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.626] CloseHandle (hObject=0x230) returned 1 [0095.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0095.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0095.626] SetErrorMode (uMode=0x1) returned 0x0 [0095.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e148670, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e148670, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b71fce8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x56d0)) returned 1 [0095.627] SetErrorMode (uMode=0x0) returned 0x1 [0095.627] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-convert-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0095.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0095.628] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0095.628] SetErrorMode (uMode=0x1) returned 0x0 [0095.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.629] GetFileType (hFile=0x230) returned 0x1 [0095.630] SetErrorMode (uMode=0x0) returned 0x1 [0095.630] GetFileType (hFile=0x230) returned 0x1 [0095.630] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.630] ReadFile (in: hFile=0x230, lpBuffer=0x2897900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2897900*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.659] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.659] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.660] WriteFile (in: hFile=0x230, lpBuffer=0x2897900*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2897900*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.660] CloseHandle (hObject=0x230) returned 1 [0095.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0095.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll", lpFilePart=0x0) returned 0x6b [0095.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7f [0095.666] SetErrorMode (uMode=0x1) returned 0x0 [0095.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e16f779, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e16f779, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b792291, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0095.666] SetErrorMode (uMode=0x0) returned 0x1 [0095.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-environment-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0095.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0095.667] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0095.667] SetErrorMode (uMode=0x1) returned 0x0 [0095.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.668] GetFileType (hFile=0x230) returned 0x1 [0095.668] SetErrorMode (uMode=0x0) returned 0x1 [0095.668] GetFileType (hFile=0x230) returned 0x1 [0095.668] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.668] ReadFile (in: hFile=0x230, lpBuffer=0x289b1d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x289b1d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.687] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.687] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.687] WriteFile (in: hFile=0x230, lpBuffer=0x289b1d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x289b1d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.688] CloseHandle (hObject=0x230) returned 1 [0095.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0095.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll", lpFilePart=0x0) returned 0x6a [0095.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7e [0095.798] SetErrorMode (uMode=0x1) returned 0x0 [0095.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1ceb1b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e1ceb1b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b8c365e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ed0)) returned 1 [0095.798] SetErrorMode (uMode=0x0) returned 0x1 [0095.798] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-filesystem-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0095.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0095.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0095.800] SetErrorMode (uMode=0x1) returned 0x0 [0095.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.800] GetFileType (hFile=0x230) returned 0x1 [0095.800] SetErrorMode (uMode=0x0) returned 0x1 [0095.800] GetFileType (hFile=0x230) returned 0x1 [0095.800] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.801] ReadFile (in: hFile=0x230, lpBuffer=0x289ea68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x289ea68*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.838] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.838] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.838] WriteFile (in: hFile=0x230, lpBuffer=0x289ea68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x289ea68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.838] CloseHandle (hObject=0x230) returned 1 [0095.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0095.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0095.840] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x78 [0095.840] SetErrorMode (uMode=0x1) returned 0x0 [0095.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e232cab, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e232cab, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b93e610, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0095.840] SetErrorMode (uMode=0x0) returned 0x1 [0095.841] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-heap-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0095.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0095.842] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0095.842] SetErrorMode (uMode=0x1) returned 0x0 [0095.842] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.842] GetFileType (hFile=0x230) returned 0x1 [0095.842] SetErrorMode (uMode=0x0) returned 0x1 [0095.842] GetFileType (hFile=0x230) returned 0x1 [0095.842] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.842] ReadFile (in: hFile=0x230, lpBuffer=0x28a22d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a22d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.868] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.868] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.868] WriteFile (in: hFile=0x230, lpBuffer=0x28a22d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a22d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.869] CloseHandle (hObject=0x230) returned 1 [0095.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0095.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0095.869] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0095.869] SetErrorMode (uMode=0x1) returned 0x0 [0095.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2d3f0b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e2d3f0b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3b9855dd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0095.869] SetErrorMode (uMode=0x0) returned 0x1 [0095.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-locale-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0095.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0095.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0095.871] SetErrorMode (uMode=0x1) returned 0x0 [0095.871] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.872] GetFileType (hFile=0x230) returned 0x1 [0095.872] SetErrorMode (uMode=0x0) returned 0x1 [0095.872] GetFileType (hFile=0x230) returned 0x1 [0095.872] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.872] ReadFile (in: hFile=0x230, lpBuffer=0x28a5b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a5b40*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0095.928] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0095.928] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.928] WriteFile (in: hFile=0x230, lpBuffer=0x28a5b40*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a5b40*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0095.929] CloseHandle (hObject=0x230) returned 1 [0095.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0095.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0095.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x78 [0095.964] SetErrorMode (uMode=0x1) returned 0x0 [0095.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2f3ac6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e2f3ac6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ba67050, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x70d0)) returned 1 [0095.964] SetErrorMode (uMode=0x0) returned 0x1 [0095.964] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-math-l1-1-0.dll.partially.cryptonar")) returned 1 [0095.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0095.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0095.965] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0095.965] SetErrorMode (uMode=0x1) returned 0x0 [0095.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0095.966] GetFileType (hFile=0x230) returned 0x1 [0095.966] SetErrorMode (uMode=0x0) returned 0x1 [0095.966] GetFileType (hFile=0x230) returned 0x1 [0095.966] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0095.966] ReadFile (in: hFile=0x230, lpBuffer=0x28a93c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a93c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.020] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.020] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.020] WriteFile (in: hFile=0x230, lpBuffer=0x28a93c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a93c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.020] CloseHandle (hObject=0x230) returned 1 [0096.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0096.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll", lpFilePart=0x0) returned 0x69 [0096.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7d [0096.130] SetErrorMode (uMode=0x1) returned 0x0 [0096.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e326f21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e326f21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bc0a930, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x66d0)) returned 1 [0096.130] SetErrorMode (uMode=0x0) returned 0x1 [0096.130] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-multibyte-l1-1-0.dll.partially.cryptonar")) returned 1 [0096.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.131] SetErrorMode (uMode=0x1) returned 0x0 [0096.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.131] GetFileType (hFile=0x230) returned 0x1 [0096.131] SetErrorMode (uMode=0x0) returned 0x1 [0096.131] GetFileType (hFile=0x230) returned 0x1 [0096.131] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.131] ReadFile (in: hFile=0x230, lpBuffer=0x28acc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28acc68*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.208] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.208] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.208] WriteFile (in: hFile=0x230, lpBuffer=0x28acc68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28acc68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.208] CloseHandle (hObject=0x230) returned 1 [0096.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0096.284] SetErrorMode (uMode=0x1) returned 0x0 [0096.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e349219, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e349219, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bd61f7f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11cc8)) returned 1 [0096.284] SetErrorMode (uMode=0x0) returned 0x1 [0096.284] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-private-l1-1-0.dll.partially.cryptonar")) returned 1 [0096.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.285] SetErrorMode (uMode=0x1) returned 0x0 [0096.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.286] GetFileType (hFile=0x230) returned 0x1 [0096.286] SetErrorMode (uMode=0x0) returned 0x1 [0096.286] GetFileType (hFile=0x230) returned 0x1 [0096.286] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.286] ReadFile (in: hFile=0x230, lpBuffer=0x28b04e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b04e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.314] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.314] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.314] WriteFile (in: hFile=0x230, lpBuffer=0x28b04e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b04e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.315] CloseHandle (hObject=0x230) returned 1 [0096.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0096.315] SetErrorMode (uMode=0x1) returned 0x0 [0096.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3666cd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3666cd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bdae4ee, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0096.315] SetErrorMode (uMode=0x0) returned 0x1 [0096.315] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-process-l1-1-0.dll.partially.cryptonar")) returned 1 [0096.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.317] SetErrorMode (uMode=0x1) returned 0x0 [0096.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.319] GetFileType (hFile=0x230) returned 0x1 [0096.319] SetErrorMode (uMode=0x0) returned 0x1 [0096.319] GetFileType (hFile=0x230) returned 0x1 [0096.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.319] ReadFile (in: hFile=0x230, lpBuffer=0x28b3d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b3d58*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.334] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.335] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.335] WriteFile (in: hFile=0x230, lpBuffer=0x28b3d58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b3d58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.335] CloseHandle (hObject=0x230) returned 1 [0096.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0096.336] SetErrorMode (uMode=0x1) returned 0x0 [0096.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e388a00, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e388a00, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bdfa8f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x58d0)) returned 1 [0096.336] SetErrorMode (uMode=0x0) returned 0x1 [0096.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-runtime-l1-1-0.dll.partially.cryptonar")) returned 1 [0096.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0096.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0096.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0096.337] SetErrorMode (uMode=0x1) returned 0x0 [0096.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.338] GetFileType (hFile=0x230) returned 0x1 [0096.338] SetErrorMode (uMode=0x0) returned 0x1 [0096.338] GetFileType (hFile=0x230) returned 0x1 [0096.338] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.338] ReadFile (in: hFile=0x230, lpBuffer=0x28b75c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b75c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.346] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.347] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.347] WriteFile (in: hFile=0x230, lpBuffer=0x28b75c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b75c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.347] CloseHandle (hObject=0x230) returned 1 [0096.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0096.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll", lpFilePart=0x0) returned 0x65 [0096.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x79 [0096.348] SetErrorMode (uMode=0x1) returned 0x0 [0096.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3aacad, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3aacad, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3be20aba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5ed0)) returned 1 [0096.348] SetErrorMode (uMode=0x0) returned 0x1 [0096.348] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-stdio-l1-1-0.dll.partially.cryptonar")) returned 1 [0096.349] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0096.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0096.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0096.350] SetErrorMode (uMode=0x1) returned 0x0 [0096.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.350] GetFileType (hFile=0x230) returned 0x1 [0096.350] SetErrorMode (uMode=0x0) returned 0x1 [0096.351] GetFileType (hFile=0x230) returned 0x1 [0096.351] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.351] ReadFile (in: hFile=0x230, lpBuffer=0x28bae30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28bae30*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.363] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.364] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.364] WriteFile (in: hFile=0x230, lpBuffer=0x28bae30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28bae30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.364] CloseHandle (hObject=0x230) returned 1 [0096.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0096.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll", lpFilePart=0x0) returned 0x66 [0096.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0096.397] SetErrorMode (uMode=0x1) returned 0x0 [0096.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3ccf94, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3ccf94, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3be932fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5ed0)) returned 1 [0096.397] SetErrorMode (uMode=0x0) returned 0x1 [0096.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-string-l1-1-0.dll.partially.cryptonar")) returned 1 [0096.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0096.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0096.399] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0096.399] SetErrorMode (uMode=0x1) returned 0x0 [0096.399] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.399] GetFileType (hFile=0x230) returned 0x1 [0096.399] SetErrorMode (uMode=0x0) returned 0x1 [0096.399] GetFileType (hFile=0x230) returned 0x1 [0096.400] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.400] ReadFile (in: hFile=0x230, lpBuffer=0x28be698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28be698*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.401] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.401] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.401] WriteFile (in: hFile=0x230, lpBuffer=0x28be698*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28be698*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.402] CloseHandle (hObject=0x230) returned 1 [0096.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0096.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll", lpFilePart=0x0) returned 0x64 [0096.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x78 [0096.404] SetErrorMode (uMode=0x1) returned 0x0 [0096.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3ef267, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e3ef267, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3be932fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50d0)) returned 1 [0096.404] SetErrorMode (uMode=0x0) returned 0x1 [0096.404] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-time-l1-1-0.dll.partially.cryptonar")) returned 1 [0096.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.406] SetErrorMode (uMode=0x1) returned 0x0 [0096.406] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.407] GetFileType (hFile=0x230) returned 0x1 [0096.407] SetErrorMode (uMode=0x0) returned 0x1 [0096.407] GetFileType (hFile=0x230) returned 0x1 [0096.407] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.407] ReadFile (in: hFile=0x230, lpBuffer=0x26c1d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c1d60*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.409] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.409] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.409] WriteFile (in: hFile=0x230, lpBuffer=0x26c1d60*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c1d60*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.409] CloseHandle (hObject=0x230) returned 1 [0096.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll", lpFilePart=0x0) returned 0x67 [0096.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0096.410] SetErrorMode (uMode=0x1) returned 0x0 [0096.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e427503, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e427503, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3be932fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0096.410] SetErrorMode (uMode=0x0) returned 0x1 [0096.410] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\api-ms-win-crt-utility-l1-1-0.dll.partially.cryptonar")) returned 1 [0096.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", lpFilePart=0x0) returned 0x51 [0096.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", lpFilePart=0x0) returned 0x51 [0096.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", lpFilePart=0x0) returned 0x51 [0096.412] SetErrorMode (uMode=0x1) returned 0x0 [0096.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.413] GetFileType (hFile=0x230) returned 0x1 [0096.413] SetErrorMode (uMode=0x0) returned 0x1 [0096.413] GetFileType (hFile=0x230) returned 0x1 [0096.413] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.413] ReadFile (in: hFile=0x230, lpBuffer=0x26c5500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c5500*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.415] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.415] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.415] WriteFile (in: hFile=0x230, lpBuffer=0x26c5500*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c5500*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.415] CloseHandle (hObject=0x230) returned 1 [0096.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", lpFilePart=0x0) returned 0x51 [0096.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png", lpFilePart=0x0) returned 0x51 [0096.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png.partially.cryptoNar", lpFilePart=0x0) returned 0x65 [0096.415] SetErrorMode (uMode=0x1) returned 0x0 [0096.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4b9ce4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e4b9ce4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3beb9462, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x157b)) returned 1 [0096.416] SetErrorMode (uMode=0x0) returned 0x1 [0096.416] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppBlue.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appblue.png.partially.cryptonar")) returned 1 [0096.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", lpFilePart=0x0) returned 0x56 [0096.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", lpFilePart=0x0) returned 0x56 [0096.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", lpFilePart=0x0) returned 0x56 [0096.417] SetErrorMode (uMode=0x1) returned 0x0 [0096.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.418] GetFileType (hFile=0x230) returned 0x1 [0096.418] SetErrorMode (uMode=0x0) returned 0x1 [0096.418] GetFileType (hFile=0x230) returned 0x1 [0096.418] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.418] ReadFile (in: hFile=0x230, lpBuffer=0x26c8be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c8be0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.419] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.420] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.420] WriteFile (in: hFile=0x230, lpBuffer=0x26c8be0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c8be0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.420] CloseHandle (hObject=0x230) returned 1 [0096.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", lpFilePart=0x0) returned 0x56 [0096.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png", lpFilePart=0x0) returned 0x56 [0096.420] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0096.420] SetErrorMode (uMode=0x1) returned 0x0 [0096.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e51424f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e51424f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3beb9462, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d96)) returned 1 [0096.420] SetErrorMode (uMode=0x0) returned 0x1 [0096.420] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorBlue.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorblue.png.partially.cryptonar")) returned 1 [0096.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", lpFilePart=0x0) returned 0x57 [0096.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", lpFilePart=0x0) returned 0x57 [0096.422] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", lpFilePart=0x0) returned 0x57 [0096.422] SetErrorMode (uMode=0x1) returned 0x0 [0096.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.422] GetFileType (hFile=0x230) returned 0x1 [0096.422] SetErrorMode (uMode=0x0) returned 0x1 [0096.422] GetFileType (hFile=0x230) returned 0x1 [0096.422] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.422] ReadFile (in: hFile=0x230, lpBuffer=0x26cc2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cc2f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.424] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.424] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.424] WriteFile (in: hFile=0x230, lpBuffer=0x26cc2f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cc2f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.424] CloseHandle (hObject=0x230) returned 1 [0096.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", lpFilePart=0x0) returned 0x57 [0096.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png", lpFilePart=0x0) returned 0x57 [0096.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0096.425] SetErrorMode (uMode=0x1) returned 0x0 [0096.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e631d78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e631d78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3beb9462, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2062)) returned 1 [0096.425] SetErrorMode (uMode=0x0) returned 0x1 [0096.425] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppErrorWhite.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\apperrorwhite.png.partially.cryptonar")) returned 1 [0096.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", lpFilePart=0x0) returned 0x52 [0096.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", lpFilePart=0x0) returned 0x52 [0096.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", lpFilePart=0x0) returned 0x52 [0096.426] SetErrorMode (uMode=0x1) returned 0x0 [0096.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.429] GetFileType (hFile=0x230) returned 0x1 [0096.429] SetErrorMode (uMode=0x0) returned 0x1 [0096.429] GetFileType (hFile=0x230) returned 0x1 [0096.429] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.429] ReadFile (in: hFile=0x230, lpBuffer=0x26cf9e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cf9e8*, lpNumberOfBytesRead=0x5ae8b8*=0xbeb, lpOverlapped=0x0) returned 1 [0096.439] SetFilePointer (in: hFile=0x230, lDistanceToMove=-2027, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.439] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.439] WriteFile (in: hFile=0x230, lpBuffer=0x26cf9e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cf9e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.440] CloseHandle (hObject=0x230) returned 1 [0096.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", lpFilePart=0x0) returned 0x52 [0096.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png", lpFilePart=0x0) returned 0x52 [0096.440] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0096.440] SetErrorMode (uMode=0x1) returned 0x0 [0096.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6b333f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e6b333f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bee4d3f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbeb)) returned 1 [0096.440] SetErrorMode (uMode=0x0) returned 0x1 [0096.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AppWhite.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\appwhite.png.partially.cryptonar")) returned 1 [0096.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0096.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0096.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0096.445] SetErrorMode (uMode=0x1) returned 0x0 [0096.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.446] GetFileType (hFile=0x230) returned 0x1 [0096.446] SetErrorMode (uMode=0x0) returned 0x1 [0096.446] GetFileType (hFile=0x230) returned 0x1 [0096.446] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.446] ReadFile (in: hFile=0x230, lpBuffer=0x26d30d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d30d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.470] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.470] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.470] WriteFile (in: hFile=0x230, lpBuffer=0x26d30d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d30d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.470] CloseHandle (hObject=0x230) returned 1 [0096.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0096.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif", lpFilePart=0x0) returned 0x57 [0096.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0096.471] SetErrorMode (uMode=0x1) returned 0x0 [0096.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6df26e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e6df26e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bf2bc92, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d8f6)) returned 1 [0096.471] SetErrorMode (uMode=0x0) returned 0x1 [0096.471] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.gif.partially.cryptonar")) returned 1 [0096.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0096.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0096.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0096.473] SetErrorMode (uMode=0x1) returned 0x0 [0096.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.474] GetFileType (hFile=0x230) returned 0x1 [0096.474] SetErrorMode (uMode=0x0) returned 0x1 [0096.474] GetFileType (hFile=0x230) returned 0x1 [0096.474] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.474] ReadFile (in: hFile=0x230, lpBuffer=0x26d67e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d67e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.475] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.476] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.476] WriteFile (in: hFile=0x230, lpBuffer=0x26d67e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d67e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.476] CloseHandle (hObject=0x230) returned 1 [0096.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0096.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png", lpFilePart=0x0) returned 0x57 [0096.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0096.476] SetErrorMode (uMode=0x1) returned 0x0 [0096.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e706362, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e706362, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bf51dc7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x27f2)) returned 1 [0096.476] SetErrorMode (uMode=0x0) returned 0x1 [0096.476] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\AutoPlayOptIn.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\autoplayoptin.png.partially.cryptonar")) returned 1 [0096.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", lpFilePart=0x0) returned 0x59 [0096.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", lpFilePart=0x0) returned 0x59 [0096.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", lpFilePart=0x0) returned 0x59 [0096.477] SetErrorMode (uMode=0x1) returned 0x0 [0096.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.478] GetFileType (hFile=0x230) returned 0x1 [0096.478] SetErrorMode (uMode=0x0) returned 0x1 [0096.478] GetFileType (hFile=0x230) returned 0x1 [0096.478] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.478] ReadFile (in: hFile=0x230, lpBuffer=0x26d9f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d9f18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.496] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.496] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.496] WriteFile (in: hFile=0x230, lpBuffer=0x26d9f18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d9f18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.497] CloseHandle (hObject=0x230) returned 1 [0096.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", lpFilePart=0x0) returned 0x59 [0096.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat", lpFilePart=0x0) returned 0x59 [0096.497] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0096.497] SetErrorMode (uMode=0x1) returned 0x0 [0096.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e72ad5b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e72ad5b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bf77f5f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1914)) returned 1 [0096.497] SetErrorMode (uMode=0x0) returned 0x1 [0096.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\CollectSyncLogs.bat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\collectsynclogs.bat.partially.cryptonar")) returned 1 [0096.498] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", lpFilePart=0x0) returned 0x59 [0096.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", lpFilePart=0x0) returned 0x59 [0096.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", lpFilePart=0x0) returned 0x59 [0096.499] SetErrorMode (uMode=0x1) returned 0x0 [0096.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.500] GetFileType (hFile=0x230) returned 0x1 [0096.500] SetErrorMode (uMode=0x0) returned 0x1 [0096.500] GetFileType (hFile=0x230) returned 0x1 [0096.500] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.500] ReadFile (in: hFile=0x230, lpBuffer=0x26dd670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26dd670*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.509] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.509] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.509] WriteFile (in: hFile=0x230, lpBuffer=0x26dd670*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26dd670*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.509] CloseHandle (hObject=0x230) returned 1 [0096.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", lpFilePart=0x0) returned 0x59 [0096.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png", lpFilePart=0x0) returned 0x59 [0096.510] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0096.510] SetErrorMode (uMode=0x1) returned 0x0 [0096.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7bfc6f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e7bfc6f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bf9e2a4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7)) returned 1 [0096.510] SetErrorMode (uMode=0x0) returned 0x1 [0096.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppBlue.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappblue.png.partially.cryptonar")) returned 1 [0096.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", lpFilePart=0x0) returned 0x5a [0096.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", lpFilePart=0x0) returned 0x5a [0096.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", lpFilePart=0x0) returned 0x5a [0096.511] SetErrorMode (uMode=0x1) returned 0x0 [0096.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.512] GetFileType (hFile=0x230) returned 0x1 [0096.512] SetErrorMode (uMode=0x0) returned 0x1 [0096.512] GetFileType (hFile=0x230) returned 0x1 [0096.512] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.512] ReadFile (in: hFile=0x230, lpBuffer=0x26e0dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e0dd8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.519] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.519] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.520] WriteFile (in: hFile=0x230, lpBuffer=0x26e0dd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e0dd8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.520] CloseHandle (hObject=0x230) returned 1 [0096.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", lpFilePart=0x0) returned 0x5a [0096.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png", lpFilePart=0x0) returned 0x5a [0096.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0096.520] SetErrorMode (uMode=0x1) returned 0x0 [0096.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e7e6d56, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e7e6d56, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bfc44c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13cc)) returned 1 [0096.520] SetErrorMode (uMode=0x0) returned 0x1 [0096.520] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ElevatedAppWhite.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\elevatedappwhite.png.partially.cryptonar")) returned 1 [0096.521] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", lpFilePart=0x0) returned 0x4f [0096.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", lpFilePart=0x0) returned 0x4f [0096.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", lpFilePart=0x0) returned 0x4f [0096.522] SetErrorMode (uMode=0x1) returned 0x0 [0096.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.522] GetFileType (hFile=0x230) returned 0x1 [0096.522] SetErrorMode (uMode=0x0) returned 0x1 [0096.523] GetFileType (hFile=0x230) returned 0x1 [0096.523] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.523] ReadFile (in: hFile=0x230, lpBuffer=0x26e44d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e44d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.534] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.534] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.534] WriteFile (in: hFile=0x230, lpBuffer=0x26e44d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e44d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.534] CloseHandle (hObject=0x230) returned 1 [0096.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", lpFilePart=0x0) returned 0x4f [0096.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png", lpFilePart=0x0) returned 0x4f [0096.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0096.535] SetErrorMode (uMode=0x1) returned 0x0 [0096.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e80de7b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e80de7b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bfc44c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e64)) returned 1 [0096.536] SetErrorMode (uMode=0x0) returned 0x1 [0096.536] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Error.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\error.png.partially.cryptonar")) returned 1 [0096.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", lpFilePart=0x0) returned 0x54 [0096.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", lpFilePart=0x0) returned 0x54 [0096.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", lpFilePart=0x0) returned 0x54 [0096.537] SetErrorMode (uMode=0x1) returned 0x0 [0096.537] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.537] GetFileType (hFile=0x230) returned 0x1 [0096.537] SetErrorMode (uMode=0x0) returned 0x1 [0096.537] GetFileType (hFile=0x230) returned 0x1 [0096.538] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.538] ReadFile (in: hFile=0x230, lpBuffer=0x26e7b78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e7b78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.540] WriteFile (in: hFile=0x230, lpBuffer=0x26e7b78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e7b78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.540] CloseHandle (hObject=0x230) returned 1 [0096.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", lpFilePart=0x0) returned 0x54 [0096.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html", lpFilePart=0x0) returned 0x54 [0096.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html.partially.cryptoNar", lpFilePart=0x0) returned 0x68 [0096.540] SetErrorMode (uMode=0x1) returned 0x0 [0096.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e832858, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e832858, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bfea688, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13c4)) returned 1 [0096.540] SetErrorMode (uMode=0x0) returned 0x1 [0096.541] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ErrorPage.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\errorpage.html.partially.cryptonar")) returned 1 [0096.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0096.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0096.542] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0096.542] SetErrorMode (uMode=0x1) returned 0x0 [0096.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\etwlog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.543] GetFileType (hFile=0x230) returned 0x1 [0096.543] SetErrorMode (uMode=0x0) returned 0x1 [0096.543] GetFileType (hFile=0x230) returned 0x1 [0096.543] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.543] ReadFile (in: hFile=0x230, lpBuffer=0x26eb250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26eb250*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.545] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.545] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.545] WriteFile (in: hFile=0x230, lpBuffer=0x26eb250*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26eb250*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.545] CloseHandle (hObject=0x230) returned 1 [0096.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0096.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll", lpFilePart=0x0) returned 0x50 [0096.545] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0096.545] SetErrorMode (uMode=0x1) returned 0x0 [0096.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\etwlog.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8af0b8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e8af0b8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3bfea688, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x78d0)) returned 1 [0096.546] SetErrorMode (uMode=0x0) returned 0x1 [0096.546] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\etwlog.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ETWlog.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\etwlog.dll.partially.cryptonar")) returned 1 [0096.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", lpFilePart=0x0) returned 0x54 [0096.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", lpFilePart=0x0) returned 0x54 [0096.547] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", lpFilePart=0x0) returned 0x54 [0096.547] SetErrorMode (uMode=0x1) returned 0x0 [0096.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauth.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.547] GetFileType (hFile=0x230) returned 0x1 [0096.547] SetErrorMode (uMode=0x0) returned 0x1 [0096.547] GetFileType (hFile=0x230) returned 0x1 [0096.547] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.547] ReadFile (in: hFile=0x230, lpBuffer=0x26ee920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ee920*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.567] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.567] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.567] WriteFile (in: hFile=0x230, lpBuffer=0x26ee920*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ee920*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.568] CloseHandle (hObject=0x230) returned 1 [0096.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", lpFilePart=0x0) returned 0x54 [0096.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe", lpFilePart=0x0) returned 0x54 [0096.569] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe.partially.cryptoNar", lpFilePart=0x0) returned 0x68 [0096.569] SetErrorMode (uMode=0x1) returned 0x0 [0096.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauth.exe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e8dfdfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e8dfdfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c036c65, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x424c8)) returned 1 [0096.569] SetErrorMode (uMode=0x0) returned 0x1 [0096.569] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauth.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuth.exe.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauth.exe.partially.cryptonar")) returned 1 [0096.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", lpFilePart=0x0) returned 0x57 [0096.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", lpFilePart=0x0) returned 0x57 [0096.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", lpFilePart=0x0) returned 0x57 [0096.572] SetErrorMode (uMode=0x1) returned 0x0 [0096.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauthlib.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.573] GetFileType (hFile=0x230) returned 0x1 [0096.573] SetErrorMode (uMode=0x0) returned 0x1 [0096.573] GetFileType (hFile=0x230) returned 0x1 [0096.573] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.573] ReadFile (in: hFile=0x230, lpBuffer=0x26f2030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f2030*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.575] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.575] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.575] WriteFile (in: hFile=0x230, lpBuffer=0x26f2030*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f2030*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.575] CloseHandle (hObject=0x230) returned 1 [0096.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", lpFilePart=0x0) returned 0x57 [0096.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll", lpFilePart=0x0) returned 0x57 [0096.576] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0096.576] SetErrorMode (uMode=0x1) returned 0x0 [0096.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauthlib.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e9f1551, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2e9f1551, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c036c65, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x262d0)) returned 1 [0096.576] SetErrorMode (uMode=0x0) returned 0x1 [0096.576] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauthlib.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileCoAuthLib.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filecoauthlib.dll.partially.cryptonar")) returned 1 [0096.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x65 [0096.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x65 [0096.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x65 [0096.578] SetErrorMode (uMode=0x1) returned 0x0 [0096.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.localizedresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.579] GetFileType (hFile=0x230) returned 0x1 [0096.579] SetErrorMode (uMode=0x0) returned 0x1 [0096.579] GetFileType (hFile=0x230) returned 0x1 [0096.579] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.579] ReadFile (in: hFile=0x230, lpBuffer=0x26f57d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f57d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.586] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.586] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.586] WriteFile (in: hFile=0x230, lpBuffer=0x26f57d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f57d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.587] CloseHandle (hObject=0x230) returned 1 [0096.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x65 [0096.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll", lpFilePart=0x0) returned 0x65 [0096.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x79 [0096.587] SetErrorMode (uMode=0x1) returned 0x0 [0096.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.localizedresources.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea2227c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ea2227c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c05cf31, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0096.587] SetErrorMode (uMode=0x0) returned 0x1 [0096.587] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.localizedresources.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.LocalizedResources.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.localizedresources.dll.partially.cryptonar")) returned 1 [0096.588] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5c [0096.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5c [0096.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5c [0096.589] SetErrorMode (uMode=0x1) returned 0x0 [0096.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.resources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.589] GetFileType (hFile=0x230) returned 0x1 [0096.589] SetErrorMode (uMode=0x0) returned 0x1 [0096.589] GetFileType (hFile=0x230) returned 0x1 [0096.590] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.590] ReadFile (in: hFile=0x230, lpBuffer=0x26f8fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f8fe8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.614] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.614] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.614] WriteFile (in: hFile=0x230, lpBuffer=0x26f8fe8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f8fe8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.614] CloseHandle (hObject=0x230) returned 1 [0096.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5c [0096.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll", lpFilePart=0x0) returned 0x5c [0096.624] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x70 [0096.624] SetErrorMode (uMode=0x1) returned 0x0 [0096.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.resources.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eafb748, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2eafb748, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c0a9277, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xab4d0)) returned 1 [0096.625] SetErrorMode (uMode=0x0) returned 0x1 [0096.625] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.resources.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSync.Resources.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesync.resources.dll.partially.cryptonar")) returned 1 [0096.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", lpFilePart=0x0) returned 0x55 [0096.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", lpFilePart=0x0) returned 0x55 [0096.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", lpFilePart=0x0) returned 0x55 [0096.626] SetErrorMode (uMode=0x1) returned 0x0 [0096.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.626] GetFileType (hFile=0x230) returned 0x1 [0096.626] SetErrorMode (uMode=0x0) returned 0x1 [0096.626] GetFileType (hFile=0x230) returned 0x1 [0096.626] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.626] ReadFile (in: hFile=0x230, lpBuffer=0x26fc748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fc748*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.641] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.641] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.641] WriteFile (in: hFile=0x230, lpBuffer=0x26fc748*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26fc748*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.641] CloseHandle (hObject=0x230) returned 1 [0096.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", lpFilePart=0x0) returned 0x55 [0096.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll", lpFilePart=0x0) returned 0x55 [0096.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x69 [0096.643] SetErrorMode (uMode=0x1) returned 0x0 [0096.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ebd9a43, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ebd9a43, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c0cf500, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xba0d0)) returned 1 [0096.644] SetErrorMode (uMode=0x0) returned 0x1 [0096.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncapi.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncApi.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncapi.dll.partially.cryptonar")) returned 1 [0096.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", lpFilePart=0x0) returned 0x58 [0096.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", lpFilePart=0x0) returned 0x58 [0096.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", lpFilePart=0x0) returned 0x58 [0096.646] SetErrorMode (uMode=0x1) returned 0x0 [0096.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.647] GetFileType (hFile=0x230) returned 0x1 [0096.647] SetErrorMode (uMode=0x0) returned 0x1 [0096.647] GetFileType (hFile=0x230) returned 0x1 [0096.647] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.647] ReadFile (in: hFile=0x230, lpBuffer=0x26ffe70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ffe70*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.700] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.701] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.701] WriteFile (in: hFile=0x230, lpBuffer=0x26ffe70*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ffe70*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.701] CloseHandle (hObject=0x230) returned 1 [0096.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", lpFilePart=0x0) returned 0x58 [0096.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll", lpFilePart=0x0) returned 0x58 [0096.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0096.719] SetErrorMode (uMode=0x1) returned 0x0 [0096.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncclient.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ed8c3b0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ed8c3b0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c18e199, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2f6ad0)) returned 1 [0096.719] SetErrorMode (uMode=0x0) returned 0x1 [0096.719] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncclient.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncClient.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncclient.dll.partially.cryptonar")) returned 1 [0096.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x58 [0096.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x58 [0096.720] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x58 [0096.720] SetErrorMode (uMode=0x1) returned 0x0 [0096.720] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncconfig.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.721] GetFileType (hFile=0x230) returned 0x1 [0096.721] SetErrorMode (uMode=0x0) returned 0x1 [0096.721] GetFileType (hFile=0x230) returned 0x1 [0096.721] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.721] ReadFile (in: hFile=0x230, lpBuffer=0x27035c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27035c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.764] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.764] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.765] WriteFile (in: hFile=0x230, lpBuffer=0x27035c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27035c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.765] CloseHandle (hObject=0x230) returned 1 [0096.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x58 [0096.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe", lpFilePart=0x0) returned 0x58 [0096.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0096.766] SetErrorMode (uMode=0x1) returned 0x0 [0096.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncconfig.exe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2efffb61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2efffb61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c2008d3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e2d0)) returned 1 [0096.766] SetErrorMode (uMode=0x0) returned 0x1 [0096.766] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncconfig.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncConfig.exe.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncconfig.exe.partially.cryptonar")) returned 1 [0096.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", lpFilePart=0x0) returned 0x55 [0096.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", lpFilePart=0x0) returned 0x55 [0096.767] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", lpFilePart=0x0) returned 0x55 [0096.767] SetErrorMode (uMode=0x1) returned 0x0 [0096.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfal.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.768] GetFileType (hFile=0x230) returned 0x1 [0096.768] SetErrorMode (uMode=0x0) returned 0x1 [0096.768] GetFileType (hFile=0x230) returned 0x1 [0096.768] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.768] ReadFile (in: hFile=0x230, lpBuffer=0x2706cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2706cf8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.789] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.789] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.789] WriteFile (in: hFile=0x230, lpBuffer=0x2706cf8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2706cf8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.790] CloseHandle (hObject=0x230) returned 1 [0096.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", lpFilePart=0x0) returned 0x55 [0096.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll", lpFilePart=0x0) returned 0x55 [0096.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x69 [0096.815] SetErrorMode (uMode=0x1) returned 0x0 [0096.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfal.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0fb37d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f0fb37d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c275b41, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x120d0)) returned 1 [0096.815] SetErrorMode (uMode=0x0) returned 0x1 [0096.815] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfal.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFAL.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfal.dll.partially.cryptonar")) returned 1 [0096.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", lpFilePart=0x0) returned 0x57 [0096.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", lpFilePart=0x0) returned 0x57 [0096.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", lpFilePart=0x0) returned 0x57 [0096.817] SetErrorMode (uMode=0x1) returned 0x0 [0096.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfalwb.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.817] GetFileType (hFile=0x230) returned 0x1 [0096.817] SetErrorMode (uMode=0x0) returned 0x1 [0096.817] GetFileType (hFile=0x230) returned 0x1 [0096.817] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.817] ReadFile (in: hFile=0x230, lpBuffer=0x270a408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270a408*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.842] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.842] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.842] WriteFile (in: hFile=0x230, lpBuffer=0x270a408*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270a408*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.843] CloseHandle (hObject=0x230) returned 1 [0096.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", lpFilePart=0x0) returned 0x57 [0096.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll", lpFilePart=0x0) returned 0x57 [0096.843] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0096.843] SetErrorMode (uMode=0x1) returned 0x0 [0096.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfalwb.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f199e32, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f199e32, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c2bf46c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x33ad0)) returned 1 [0096.843] SetErrorMode (uMode=0x0) returned 0x1 [0096.843] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfalwb.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncFALWB.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncfalwb.dll.partially.cryptonar")) returned 1 [0096.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5a [0096.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5a [0096.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5a [0096.845] SetErrorMode (uMode=0x1) returned 0x0 [0096.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncsessions.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.846] GetFileType (hFile=0x230) returned 0x1 [0096.846] SetErrorMode (uMode=0x0) returned 0x1 [0096.846] GetFileType (hFile=0x230) returned 0x1 [0096.846] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.846] ReadFile (in: hFile=0x230, lpBuffer=0x270db48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270db48*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.885] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.885] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.885] WriteFile (in: hFile=0x230, lpBuffer=0x270db48*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270db48*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.885] CloseHandle (hObject=0x230) returned 1 [0096.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5a [0096.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll", lpFilePart=0x0) returned 0x5a [0096.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0096.894] SetErrorMode (uMode=0x1) returned 0x0 [0096.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncsessions.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f462d21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f462d21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c333333, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x176ed0)) returned 1 [0096.894] SetErrorMode (uMode=0x0) returned 0x1 [0096.894] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncsessions.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncSessions.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncsessions.dll.partially.cryptonar")) returned 1 [0096.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", lpFilePart=0x0) returned 0x57 [0096.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", lpFilePart=0x0) returned 0x57 [0096.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", lpFilePart=0x0) returned 0x57 [0096.895] SetErrorMode (uMode=0x1) returned 0x0 [0096.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncshell.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.896] GetFileType (hFile=0x230) returned 0x1 [0096.896] SetErrorMode (uMode=0x0) returned 0x1 [0096.896] GetFileType (hFile=0x230) returned 0x1 [0096.896] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.896] ReadFile (in: hFile=0x230, lpBuffer=0x2711290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2711290*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.933] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.933] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.933] WriteFile (in: hFile=0x230, lpBuffer=0x2711290*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2711290*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.933] CloseHandle (hObject=0x230) returned 1 [0096.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", lpFilePart=0x0) returned 0x57 [0096.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll", lpFilePart=0x0) returned 0x57 [0096.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0096.951] SetErrorMode (uMode=0x1) returned 0x0 [0096.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncshell.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f768c8e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f768c8e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c3ca4be, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x27b6d0)) returned 1 [0096.951] SetErrorMode (uMode=0x0) returned 0x1 [0096.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncshell.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncShell.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncshell.dll.partially.cryptonar")) returned 1 [0096.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", lpFilePart=0x0) returned 0x57 [0096.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", lpFilePart=0x0) returned 0x57 [0096.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", lpFilePart=0x0) returned 0x57 [0096.953] SetErrorMode (uMode=0x1) returned 0x0 [0096.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncviews.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.954] GetFileType (hFile=0x230) returned 0x1 [0096.954] SetErrorMode (uMode=0x0) returned 0x1 [0096.954] GetFileType (hFile=0x230) returned 0x1 [0096.954] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.954] ReadFile (in: hFile=0x230, lpBuffer=0x27149a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27149a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.967] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.967] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.967] WriteFile (in: hFile=0x230, lpBuffer=0x27149a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27149a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.968] CloseHandle (hObject=0x230) returned 1 [0096.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", lpFilePart=0x0) returned 0x57 [0096.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll", lpFilePart=0x0) returned 0x57 [0096.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0096.968] SetErrorMode (uMode=0x1) returned 0x0 [0096.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncviews.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa7132a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fa7132a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c3f068b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc36c8)) returned 1 [0096.968] SetErrorMode (uMode=0x0) returned 0x1 [0096.968] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncviews.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\FileSyncViews.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\filesyncviews.dll.partially.cryptonar")) returned 1 [0096.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", lpFilePart=0x0) returned 0x52 [0096.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", lpFilePart=0x0) returned 0x52 [0096.969] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", lpFilePart=0x0) returned 0x52 [0096.970] SetErrorMode (uMode=0x1) returned 0x0 [0096.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libeay32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0096.970] GetFileType (hFile=0x230) returned 0x1 [0096.970] SetErrorMode (uMode=0x0) returned 0x1 [0096.970] GetFileType (hFile=0x230) returned 0x1 [0096.970] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.970] ReadFile (in: hFile=0x230, lpBuffer=0x2718098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2718098*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0096.974] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0096.974] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0096.974] WriteFile (in: hFile=0x230, lpBuffer=0x2718098*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2718098*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0096.974] CloseHandle (hObject=0x230) returned 1 [0097.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", lpFilePart=0x0) returned 0x52 [0097.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll", lpFilePart=0x0) returned 0x52 [0097.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0097.003] SetErrorMode (uMode=0x1) returned 0x0 [0097.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libeay32.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc3ea78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fc3ea78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c43cbed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13a0d0)) returned 1 [0097.003] SetErrorMode (uMode=0x0) returned 0x1 [0097.003] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libeay32.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libeay32.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libeay32.dll.partially.cryptonar")) returned 1 [0097.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", lpFilePart=0x0) returned 0x50 [0097.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", lpFilePart=0x0) returned 0x50 [0097.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", lpFilePart=0x0) returned 0x50 [0097.005] SetErrorMode (uMode=0x1) returned 0x0 [0097.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libegl.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.005] GetFileType (hFile=0x230) returned 0x1 [0097.005] SetErrorMode (uMode=0x0) returned 0x1 [0097.006] GetFileType (hFile=0x230) returned 0x1 [0097.006] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.006] ReadFile (in: hFile=0x230, lpBuffer=0x271b748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271b748*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.011] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.012] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.012] WriteFile (in: hFile=0x230, lpBuffer=0x271b748*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271b748*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.012] CloseHandle (hObject=0x230) returned 1 [0097.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", lpFilePart=0x0) returned 0x50 [0097.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll", lpFilePart=0x0) returned 0x50 [0097.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0097.013] SetErrorMode (uMode=0x1) returned 0x0 [0097.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libegl.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fe2bd7e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2fe2bd7e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c4635e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x74d0)) returned 1 [0097.013] SetErrorMode (uMode=0x0) returned 0x1 [0097.013] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libegl.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libEGL.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libegl.dll.partially.cryptonar")) returned 1 [0097.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", lpFilePart=0x0) returned 0x53 [0097.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", lpFilePart=0x0) returned 0x53 [0097.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", lpFilePart=0x0) returned 0x53 [0097.014] SetErrorMode (uMode=0x1) returned 0x0 [0097.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libglesv2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.015] GetFileType (hFile=0x230) returned 0x1 [0097.015] SetErrorMode (uMode=0x0) returned 0x1 [0097.015] GetFileType (hFile=0x230) returned 0x1 [0097.015] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.015] ReadFile (in: hFile=0x230, lpBuffer=0x271ee00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271ee00*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.023] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.023] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.023] WriteFile (in: hFile=0x230, lpBuffer=0x271ee00*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271ee00*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.024] CloseHandle (hObject=0x230) returned 1 [0097.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", lpFilePart=0x0) returned 0x53 [0097.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll", lpFilePart=0x0) returned 0x53 [0097.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x67 [0097.024] SetErrorMode (uMode=0x1) returned 0x0 [0097.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libglesv2.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ffbeb1c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ffbeb1c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c48908b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e06d0)) returned 1 [0097.024] SetErrorMode (uMode=0x0) returned 0x1 [0097.025] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libglesv2.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\libGLESv2.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\libglesv2.dll.partially.cryptonar")) returned 1 [0097.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", lpFilePart=0x0) returned 0x56 [0097.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", lpFilePart=0x0) returned 0x56 [0097.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", lpFilePart=0x0) returned 0x56 [0097.026] SetErrorMode (uMode=0x1) returned 0x0 [0097.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.027] GetFileType (hFile=0x230) returned 0x1 [0097.027] SetErrorMode (uMode=0x0) returned 0x1 [0097.027] GetFileType (hFile=0x230) returned 0x1 [0097.027] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.027] ReadFile (in: hFile=0x230, lpBuffer=0x27224e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27224e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.067] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.067] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.067] WriteFile (in: hFile=0x230, lpBuffer=0x27224e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27224e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.067] CloseHandle (hObject=0x230) returned 1 [0097.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", lpFilePart=0x0) returned 0x56 [0097.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html", lpFilePart=0x0) returned 0x56 [0097.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0097.073] SetErrorMode (uMode=0x1) returned 0x0 [0097.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3017b0d7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3017b0d7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c4fd907, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1900)) returned 1 [0097.073] SetErrorMode (uMode=0x0) returned 0x1 [0097.073] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoadingPage.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loadingpage.html.partially.cryptonar")) returned 1 [0097.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", lpFilePart=0x0) returned 0x59 [0097.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", lpFilePart=0x0) returned 0x59 [0097.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", lpFilePart=0x0) returned 0x59 [0097.075] SetErrorMode (uMode=0x1) returned 0x0 [0097.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loggingplatform.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.076] GetFileType (hFile=0x230) returned 0x1 [0097.076] SetErrorMode (uMode=0x0) returned 0x1 [0097.076] GetFileType (hFile=0x230) returned 0x1 [0097.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.076] ReadFile (in: hFile=0x230, lpBuffer=0x2725c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2725c18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.117] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.117] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.118] WriteFile (in: hFile=0x230, lpBuffer=0x2725c18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2725c18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.118] CloseHandle (hObject=0x230) returned 1 [0097.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", lpFilePart=0x0) returned 0x59 [0097.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll", lpFilePart=0x0) returned 0x59 [0097.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0097.125] SetErrorMode (uMode=0x1) returned 0x0 [0097.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loggingplatform.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3058b904, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3058b904, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c56def0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14e6d0)) returned 1 [0097.125] SetErrorMode (uMode=0x0) returned 0x1 [0097.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loggingplatform.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\LoggingPlatform.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\loggingplatform.dll.partially.cryptonar")) returned 1 [0097.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", lpFilePart=0x0) returned 0x52 [0097.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", lpFilePart=0x0) returned 0x52 [0097.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", lpFilePart=0x0) returned 0x52 [0097.126] SetErrorMode (uMode=0x1) returned 0x0 [0097.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.127] GetFileType (hFile=0x230) returned 0x1 [0097.127] SetErrorMode (uMode=0x0) returned 0x1 [0097.127] GetFileType (hFile=0x230) returned 0x1 [0097.127] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.127] ReadFile (in: hFile=0x230, lpBuffer=0x2729330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2729330*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.141] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.141] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.141] WriteFile (in: hFile=0x230, lpBuffer=0x2729330*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2729330*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.141] CloseHandle (hObject=0x230) returned 1 [0097.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", lpFilePart=0x0) returned 0x52 [0097.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll", lpFilePart=0x0) returned 0x52 [0097.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0097.149] SetErrorMode (uMode=0x1) returned 0x0 [0097.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\msvcp140.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3081418e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3081418e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c5ba2ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6acd0)) returned 1 [0097.149] SetErrorMode (uMode=0x0) returned 0x1 [0097.149] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\msvcp140.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\msvcp140.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\msvcp140.dll.partially.cryptonar")) returned 1 [0097.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", lpFilePart=0x0) returned 0x56 [0097.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", lpFilePart=0x0) returned 0x56 [0097.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", lpFilePart=0x0) returned 0x56 [0097.151] SetErrorMode (uMode=0x1) returned 0x0 [0097.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.152] GetFileType (hFile=0x230) returned 0x1 [0097.152] SetErrorMode (uMode=0x0) returned 0x1 [0097.152] GetFileType (hFile=0x230) returned 0x1 [0097.153] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.153] ReadFile (in: hFile=0x230, lpBuffer=0x272ca18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272ca18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.154] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.155] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.155] WriteFile (in: hFile=0x230, lpBuffer=0x272ca18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272ca18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.155] CloseHandle (hObject=0x230) returned 1 [0097.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", lpFilePart=0x0) returned 0x56 [0097.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png", lpFilePart=0x0) returned 0x56 [0097.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0097.155] SetErrorMode (uMode=0x1) returned 0x0 [0097.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d4bf06, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x30d4bf06, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c5ba2ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x123c)) returned 1 [0097.156] SetErrorMode (uMode=0x0) returned 0x1 [0097.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveLogo.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivelogo.png.partially.cryptonar")) returned 1 [0097.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x57 [0097.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x57 [0097.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x57 [0097.157] SetErrorMode (uMode=0x1) returned 0x0 [0097.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.158] GetFileType (hFile=0x230) returned 0x1 [0097.158] SetErrorMode (uMode=0x0) returned 0x1 [0097.158] GetFileType (hFile=0x230) returned 0x1 [0097.158] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.158] ReadFile (in: hFile=0x230, lpBuffer=0x2730130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2730130*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.161] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.161] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.161] WriteFile (in: hFile=0x230, lpBuffer=0x2730130*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2730130*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.161] CloseHandle (hObject=0x230) returned 1 [0097.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x57 [0097.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x57 [0097.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0097.179] SetErrorMode (uMode=0x1) returned 0x0 [0097.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6688ba, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5f6688ba, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c6068a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x174a4d0)) returned 1 [0097.179] SetErrorMode (uMode=0x0) returned 0x1 [0097.179] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivesetup.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\OneDriveSetup.exe.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\onedrivesetup.exe.partially.cryptonar")) returned 1 [0097.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", lpFilePart=0x0) returned 0x51 [0097.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", lpFilePart=0x0) returned 0x51 [0097.180] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", lpFilePart=0x0) returned 0x51 [0097.180] SetErrorMode (uMode=0x1) returned 0x0 [0097.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5core.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.181] GetFileType (hFile=0x230) returned 0x1 [0097.181] SetErrorMode (uMode=0x0) returned 0x1 [0097.181] GetFileType (hFile=0x230) returned 0x1 [0097.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.181] ReadFile (in: hFile=0x230, lpBuffer=0x2733810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2733810*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.185] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.186] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.186] WriteFile (in: hFile=0x230, lpBuffer=0x2733810*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2733810*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.186] CloseHandle (hObject=0x230) returned 1 [0097.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", lpFilePart=0x0) returned 0x51 [0097.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll", lpFilePart=0x0) returned 0x51 [0097.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x65 [0097.218] SetErrorMode (uMode=0x1) returned 0x0 [0097.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5core.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x312f98f5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x312f98f5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c652d04, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48ead0)) returned 1 [0097.218] SetErrorMode (uMode=0x0) returned 0x1 [0097.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5core.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Core.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5core.dll.partially.cryptonar")) returned 1 [0097.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", lpFilePart=0x0) returned 0x51 [0097.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", lpFilePart=0x0) returned 0x51 [0097.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", lpFilePart=0x0) returned 0x51 [0097.219] SetErrorMode (uMode=0x1) returned 0x0 [0097.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5dbus.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.220] GetFileType (hFile=0x230) returned 0x1 [0097.220] SetErrorMode (uMode=0x0) returned 0x1 [0097.220] GetFileType (hFile=0x230) returned 0x1 [0097.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.220] ReadFile (in: hFile=0x230, lpBuffer=0x2736eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2736eb8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.230] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.230] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.230] WriteFile (in: hFile=0x230, lpBuffer=0x2736eb8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2736eb8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.230] CloseHandle (hObject=0x230) returned 1 [0097.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", lpFilePart=0x0) returned 0x51 [0097.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll", lpFilePart=0x0) returned 0x51 [0097.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x65 [0097.242] SetErrorMode (uMode=0x1) returned 0x0 [0097.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5dbus.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3181881b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3181881b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c69f137, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x53ed0)) returned 1 [0097.242] SetErrorMode (uMode=0x0) returned 0x1 [0097.242] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5dbus.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5DBus.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5dbus.dll.partially.cryptonar")) returned 1 [0097.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", lpFilePart=0x0) returned 0x50 [0097.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", lpFilePart=0x0) returned 0x50 [0097.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", lpFilePart=0x0) returned 0x50 [0097.244] SetErrorMode (uMode=0x1) returned 0x0 [0097.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5gui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.245] GetFileType (hFile=0x230) returned 0x1 [0097.245] SetErrorMode (uMode=0x0) returned 0x1 [0097.245] GetFileType (hFile=0x230) returned 0x1 [0097.245] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.245] ReadFile (in: hFile=0x230, lpBuffer=0x273a560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273a560*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.261] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.261] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.262] WriteFile (in: hFile=0x230, lpBuffer=0x273a560*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273a560*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.262] CloseHandle (hObject=0x230) returned 1 [0097.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", lpFilePart=0x0) returned 0x50 [0097.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll", lpFilePart=0x0) returned 0x50 [0097.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0097.277] SetErrorMode (uMode=0x1) returned 0x0 [0097.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5gui.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32038f96, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32038f96, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c6eb660, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4becd0)) returned 1 [0097.277] SetErrorMode (uMode=0x0) returned 0x1 [0097.277] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5gui.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Gui.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5gui.dll.partially.cryptonar")) returned 1 [0097.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", lpFilePart=0x0) returned 0x54 [0097.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", lpFilePart=0x0) returned 0x54 [0097.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", lpFilePart=0x0) returned 0x54 [0097.278] SetErrorMode (uMode=0x1) returned 0x0 [0097.278] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5network.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.279] GetFileType (hFile=0x230) returned 0x1 [0097.279] SetErrorMode (uMode=0x0) returned 0x1 [0097.279] GetFileType (hFile=0x230) returned 0x1 [0097.279] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.279] ReadFile (in: hFile=0x230, lpBuffer=0x273dc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273dc30*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.296] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.296] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.297] WriteFile (in: hFile=0x230, lpBuffer=0x273dc30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273dc30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.297] CloseHandle (hObject=0x230) returned 1 [0097.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", lpFilePart=0x0) returned 0x54 [0097.297] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll", lpFilePart=0x0) returned 0x54 [0097.298] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x68 [0097.298] SetErrorMode (uMode=0x1) returned 0x0 [0097.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5network.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3259b173, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3259b173, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c715040, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe4ad0)) returned 1 [0097.298] SetErrorMode (uMode=0x0) returned 0x1 [0097.298] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5network.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Network.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5network.dll.partially.cryptonar")) returned 1 [0097.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", lpFilePart=0x0) returned 0x59 [0097.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", lpFilePart=0x0) returned 0x59 [0097.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", lpFilePart=0x0) returned 0x59 [0097.299] SetErrorMode (uMode=0x1) returned 0x0 [0097.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5printsupport.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.300] GetFileType (hFile=0x230) returned 0x1 [0097.300] SetErrorMode (uMode=0x0) returned 0x1 [0097.300] GetFileType (hFile=0x230) returned 0x1 [0097.300] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.300] ReadFile (in: hFile=0x230, lpBuffer=0x2741358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2741358*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.326] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.327] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.327] WriteFile (in: hFile=0x230, lpBuffer=0x2741358*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2741358*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.327] CloseHandle (hObject=0x230) returned 1 [0097.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", lpFilePart=0x0) returned 0x59 [0097.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll", lpFilePart=0x0) returned 0x59 [0097.327] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0097.327] SetErrorMode (uMode=0x1) returned 0x0 [0097.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5printsupport.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32a8dd9a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32a8dd9a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c762130, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x450d0)) returned 1 [0097.328] SetErrorMode (uMode=0x0) returned 0x1 [0097.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5printsupport.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5PrintSupport.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5printsupport.dll.partially.cryptonar")) returned 1 [0097.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", lpFilePart=0x0) returned 0x50 [0097.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", lpFilePart=0x0) returned 0x50 [0097.329] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", lpFilePart=0x0) returned 0x50 [0097.329] SetErrorMode (uMode=0x1) returned 0x0 [0097.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5qml.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.329] GetFileType (hFile=0x230) returned 0x1 [0097.329] SetErrorMode (uMode=0x0) returned 0x1 [0097.330] GetFileType (hFile=0x230) returned 0x1 [0097.330] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.330] ReadFile (in: hFile=0x230, lpBuffer=0x2744a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2744a60*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.342] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.342] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.342] WriteFile (in: hFile=0x230, lpBuffer=0x2744a60*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2744a60*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.343] CloseHandle (hObject=0x230) returned 1 [0097.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", lpFilePart=0x0) returned 0x50 [0097.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll", lpFilePart=0x0) returned 0x50 [0097.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0097.350] SetErrorMode (uMode=0x1) returned 0x0 [0097.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5qml.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f031b3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32f031b3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c7aa1cd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x280cd0)) returned 1 [0097.350] SetErrorMode (uMode=0x0) returned 0x1 [0097.350] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5qml.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Qml.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5qml.dll.partially.cryptonar")) returned 1 [0097.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", lpFilePart=0x0) returned 0x52 [0097.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", lpFilePart=0x0) returned 0x52 [0097.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", lpFilePart=0x0) returned 0x52 [0097.352] SetErrorMode (uMode=0x1) returned 0x0 [0097.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quick.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.352] GetFileType (hFile=0x230) returned 0x1 [0097.352] SetErrorMode (uMode=0x0) returned 0x1 [0097.352] GetFileType (hFile=0x230) returned 0x1 [0097.352] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.352] ReadFile (in: hFile=0x230, lpBuffer=0x2748118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2748118*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.370] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.370] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.370] WriteFile (in: hFile=0x230, lpBuffer=0x2748118*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2748118*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.370] CloseHandle (hObject=0x230) returned 1 [0097.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", lpFilePart=0x0) returned 0x52 [0097.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll", lpFilePart=0x0) returned 0x52 [0097.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0097.392] SetErrorMode (uMode=0x1) returned 0x0 [0097.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quick.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333c7ce8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x333c7ce8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c7f89cf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2b9ad0)) returned 1 [0097.392] SetErrorMode (uMode=0x0) returned 0x1 [0097.392] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quick.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Quick.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quick.dll.partially.cryptonar")) returned 1 [0097.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", lpFilePart=0x0) returned 0x5b [0097.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", lpFilePart=0x0) returned 0x5b [0097.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", lpFilePart=0x0) returned 0x5b [0097.393] SetErrorMode (uMode=0x1) returned 0x0 [0097.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quickcontrols2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.394] GetFileType (hFile=0x230) returned 0x1 [0097.394] SetErrorMode (uMode=0x0) returned 0x1 [0097.394] GetFileType (hFile=0x230) returned 0x1 [0097.394] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.394] ReadFile (in: hFile=0x230, lpBuffer=0x274b828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274b828*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.402] WriteFile (in: hFile=0x230, lpBuffer=0x274b828*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274b828*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.403] CloseHandle (hObject=0x230) returned 1 [0097.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", lpFilePart=0x0) returned 0x5b [0097.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll", lpFilePart=0x0) returned 0x5b [0097.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6f [0097.403] SetErrorMode (uMode=0x1) returned 0x0 [0097.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quickcontrols2.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33925232, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33925232, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c81c8ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x192d0)) returned 1 [0097.403] SetErrorMode (uMode=0x0) returned 0x1 [0097.403] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quickcontrols2.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickControls2.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quickcontrols2.dll.partially.cryptonar")) returned 1 [0097.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", lpFilePart=0x0) returned 0x5c [0097.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", lpFilePart=0x0) returned 0x5c [0097.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", lpFilePart=0x0) returned 0x5c [0097.405] SetErrorMode (uMode=0x1) returned 0x0 [0097.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quicktemplates2.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.405] GetFileType (hFile=0x230) returned 0x1 [0097.405] SetErrorMode (uMode=0x0) returned 0x1 [0097.405] GetFileType (hFile=0x230) returned 0x1 [0097.406] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.406] ReadFile (in: hFile=0x230, lpBuffer=0x274efb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274efb0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.414] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.414] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.414] WriteFile (in: hFile=0x230, lpBuffer=0x274efb0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274efb0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.414] CloseHandle (hObject=0x230) returned 1 [0097.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", lpFilePart=0x0) returned 0x5c [0097.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll", lpFilePart=0x0) returned 0x5c [0097.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x70 [0097.424] SetErrorMode (uMode=0x1) returned 0x0 [0097.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quicktemplates2.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ef4d40, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33ef4d40, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c842b6c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9b2d0)) returned 1 [0097.425] SetErrorMode (uMode=0x0) returned 0x1 [0097.425] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quicktemplates2.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5QuickTemplates2.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5quicktemplates2.dll.partially.cryptonar")) returned 1 [0097.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", lpFilePart=0x0) returned 0x50 [0097.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", lpFilePart=0x0) returned 0x50 [0097.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", lpFilePart=0x0) returned 0x50 [0097.426] SetErrorMode (uMode=0x1) returned 0x0 [0097.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5svg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.427] GetFileType (hFile=0x230) returned 0x1 [0097.427] SetErrorMode (uMode=0x0) returned 0x1 [0097.427] GetFileType (hFile=0x230) returned 0x1 [0097.427] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.427] ReadFile (in: hFile=0x230, lpBuffer=0x27526e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27526e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.444] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.444] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.444] WriteFile (in: hFile=0x230, lpBuffer=0x27526e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27526e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.444] CloseHandle (hObject=0x230) returned 1 [0097.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", lpFilePart=0x0) returned 0x50 [0097.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll", lpFilePart=0x0) returned 0x50 [0097.445] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0097.445] SetErrorMode (uMode=0x1) returned 0x0 [0097.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5svg.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344c48d9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x344c48d9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c88f08e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x44ad0)) returned 1 [0097.445] SetErrorMode (uMode=0x0) returned 0x1 [0097.445] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5svg.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Svg.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5svg.dll.partially.cryptonar")) returned 1 [0097.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", lpFilePart=0x0) returned 0x54 [0097.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", lpFilePart=0x0) returned 0x54 [0097.446] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", lpFilePart=0x0) returned 0x54 [0097.446] SetErrorMode (uMode=0x1) returned 0x0 [0097.446] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5widgets.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.447] GetFileType (hFile=0x230) returned 0x1 [0097.447] SetErrorMode (uMode=0x0) returned 0x1 [0097.447] GetFileType (hFile=0x230) returned 0x1 [0097.447] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.447] ReadFile (in: hFile=0x230, lpBuffer=0x2755db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2755db8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.468] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.468] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.469] WriteFile (in: hFile=0x230, lpBuffer=0x2755db8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2755db8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.469] CloseHandle (hObject=0x230) returned 1 [0097.469] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", lpFilePart=0x0) returned 0x54 [0097.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll", lpFilePart=0x0) returned 0x54 [0097.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x68 [0097.470] SetErrorMode (uMode=0x1) returned 0x0 [0097.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5widgets.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349fbb1a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x349fbb1a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c8b50f3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x442cd0)) returned 1 [0097.470] SetErrorMode (uMode=0x0) returned 0x1 [0097.470] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5widgets.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5Widgets.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5widgets.dll.partially.cryptonar")) returned 1 [0097.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", lpFilePart=0x0) returned 0x56 [0097.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", lpFilePart=0x0) returned 0x56 [0097.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", lpFilePart=0x0) returned 0x56 [0097.471] SetErrorMode (uMode=0x1) returned 0x0 [0097.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5winextras.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.475] GetFileType (hFile=0x230) returned 0x1 [0097.475] SetErrorMode (uMode=0x0) returned 0x1 [0097.475] GetFileType (hFile=0x230) returned 0x1 [0097.475] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.475] ReadFile (in: hFile=0x230, lpBuffer=0x27594c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27594c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.485] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.485] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.485] WriteFile (in: hFile=0x230, lpBuffer=0x27594c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27594c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.486] CloseHandle (hObject=0x230) returned 1 [0097.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", lpFilePart=0x0) returned 0x56 [0097.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll", lpFilePart=0x0) returned 0x56 [0097.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0097.486] SetErrorMode (uMode=0x1) returned 0x0 [0097.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5winextras.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3546a01d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3546a01d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c8debf5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d0d0)) returned 1 [0097.486] SetErrorMode (uMode=0x0) returned 0x1 [0097.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5winextras.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Qt5WinExtras.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qt5winextras.dll.partially.cryptonar")) returned 1 [0097.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", lpFilePart=0x0) returned 0x57 [0097.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", lpFilePart=0x0) returned 0x57 [0097.488] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", lpFilePart=0x0) returned 0x57 [0097.488] SetErrorMode (uMode=0x1) returned 0x0 [0097.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.488] GetFileType (hFile=0x230) returned 0x1 [0097.489] SetErrorMode (uMode=0x0) returned 0x1 [0097.489] GetFileType (hFile=0x230) returned 0x1 [0097.489] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.489] ReadFile (in: hFile=0x230, lpBuffer=0x275cbe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275cbe0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.499] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.499] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.499] WriteFile (in: hFile=0x230, lpBuffer=0x275cbe0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275cbe0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.500] CloseHandle (hObject=0x230) returned 1 [0097.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", lpFilePart=0x0) returned 0x57 [0097.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png", lpFilePart=0x0) returned 0x57 [0097.500] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0097.500] SetErrorMode (uMode=0x1) returned 0x0 [0097.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da714a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x35da714a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c90290b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2266)) returned 1 [0097.500] SetErrorMode (uMode=0x0) returned 0x1 [0097.500] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaCritical.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotacritical.png.partially.cryptonar")) returned 1 [0097.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", lpFilePart=0x0) returned 0x54 [0097.501] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", lpFilePart=0x0) returned 0x54 [0097.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", lpFilePart=0x0) returned 0x54 [0097.502] SetErrorMode (uMode=0x1) returned 0x0 [0097.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.503] GetFileType (hFile=0x230) returned 0x1 [0097.503] SetErrorMode (uMode=0x0) returned 0x1 [0097.503] GetFileType (hFile=0x230) returned 0x1 [0097.503] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.503] ReadFile (in: hFile=0x230, lpBuffer=0x27602e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27602e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.505] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.505] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.505] WriteFile (in: hFile=0x230, lpBuffer=0x27602e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27602e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.505] CloseHandle (hObject=0x230) returned 1 [0097.505] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", lpFilePart=0x0) returned 0x54 [0097.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png", lpFilePart=0x0) returned 0x54 [0097.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png.partially.cryptoNar", lpFilePart=0x0) returned 0x68 [0097.506] SetErrorMode (uMode=0x1) returned 0x0 [0097.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36291edb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x36291edb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c9279a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x244a)) returned 1 [0097.506] SetErrorMode (uMode=0x0) returned 0x1 [0097.506] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaError.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotaerror.png.partially.cryptonar")) returned 1 [0097.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", lpFilePart=0x0) returned 0x56 [0097.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", lpFilePart=0x0) returned 0x56 [0097.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", lpFilePart=0x0) returned 0x56 [0097.507] SetErrorMode (uMode=0x1) returned 0x0 [0097.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.508] GetFileType (hFile=0x230) returned 0x1 [0097.508] SetErrorMode (uMode=0x0) returned 0x1 [0097.508] GetFileType (hFile=0x230) returned 0x1 [0097.508] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.508] ReadFile (in: hFile=0x230, lpBuffer=0x27639f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27639f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.510] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.510] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.510] WriteFile (in: hFile=0x230, lpBuffer=0x27639f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27639f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.511] CloseHandle (hObject=0x230) returned 1 [0097.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", lpFilePart=0x0) returned 0x56 [0097.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png", lpFilePart=0x0) returned 0x56 [0097.511] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0097.511] SetErrorMode (uMode=0x1) returned 0x0 [0097.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3696cb0b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3696cb0b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c9279a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d59)) returned 1 [0097.511] SetErrorMode (uMode=0x0) returned 0x1 [0097.511] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\QuotaNearing.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quotanearing.png.partially.cryptonar")) returned 1 [0097.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", lpFilePart=0x0) returned 0x56 [0097.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", lpFilePart=0x0) returned 0x56 [0097.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", lpFilePart=0x0) returned 0x56 [0097.513] SetErrorMode (uMode=0x1) returned 0x0 [0097.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\remoteaccess.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.514] GetFileType (hFile=0x230) returned 0x1 [0097.514] SetErrorMode (uMode=0x0) returned 0x1 [0097.514] GetFileType (hFile=0x230) returned 0x1 [0097.514] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.514] ReadFile (in: hFile=0x230, lpBuffer=0x2767110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2767110*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.516] WriteFile (in: hFile=0x230, lpBuffer=0x2767110*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2767110*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.516] CloseHandle (hObject=0x230) returned 1 [0097.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", lpFilePart=0x0) returned 0x56 [0097.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll", lpFilePart=0x0) returned 0x56 [0097.517] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0097.517] SetErrorMode (uMode=0x1) returned 0x0 [0097.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\remoteaccess.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ef01ee, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x36ef01ee, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c9279a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9e4d0)) returned 1 [0097.518] SetErrorMode (uMode=0x0) returned 0x1 [0097.518] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\remoteaccess.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\RemoteAccess.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\remoteaccess.dll.partially.cryptonar")) returned 1 [0097.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", lpFilePart=0x0) returned 0x62 [0097.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", lpFilePart=0x0) returned 0x62 [0097.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", lpFilePart=0x0) returned 0x62 [0097.520] SetErrorMode (uMode=0x1) returned 0x0 [0097.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\saveapplicationeventlogs.wsf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.522] GetFileType (hFile=0x230) returned 0x1 [0097.522] SetErrorMode (uMode=0x0) returned 0x1 [0097.522] GetFileType (hFile=0x230) returned 0x1 [0097.522] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.523] ReadFile (in: hFile=0x230, lpBuffer=0x276a8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276a8a0*, lpNumberOfBytesRead=0x5ae8b8*=0x5d5, lpOverlapped=0x0) returned 1 [0097.534] SetFilePointer (in: hFile=0x230, lDistanceToMove=-469, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.534] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.534] WriteFile (in: hFile=0x230, lpBuffer=0x276a8a0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276a8a0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.535] CloseHandle (hObject=0x230) returned 1 [0097.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", lpFilePart=0x0) returned 0x62 [0097.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf", lpFilePart=0x0) returned 0x62 [0097.535] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf.partially.cryptoNar", lpFilePart=0x0) returned 0x76 [0097.535] SetErrorMode (uMode=0x1) returned 0x0 [0097.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\saveapplicationeventlogs.wsf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3734261c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3734261c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c952484, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d5)) returned 1 [0097.536] SetErrorMode (uMode=0x0) returned 0x1 [0097.536] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\saveapplicationeventlogs.wsf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SaveApplicationEventLogs.wsf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\saveapplicationeventlogs.wsf.partially.cryptonar")) returned 1 [0097.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", lpFilePart=0x0) returned 0x59 [0097.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", lpFilePart=0x0) returned 0x59 [0097.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", lpFilePart=0x0) returned 0x59 [0097.537] SetErrorMode (uMode=0x1) returned 0x0 [0097.537] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.539] GetFileType (hFile=0x230) returned 0x1 [0097.539] SetErrorMode (uMode=0x0) returned 0x1 [0097.539] GetFileType (hFile=0x230) returned 0x1 [0097.539] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.539] ReadFile (in: hFile=0x230, lpBuffer=0x276e060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276e060*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.559] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.559] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.560] WriteFile (in: hFile=0x230, lpBuffer=0x276e060*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276e060*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.560] CloseHandle (hObject=0x230) returned 1 [0097.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", lpFilePart=0x0) returned 0x59 [0097.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif", lpFilePart=0x0) returned 0x59 [0097.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0097.580] SetErrorMode (uMode=0x1) returned 0x0 [0097.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x378535fe, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x378535fe, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3c9c03af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b721)) returned 1 [0097.580] SetErrorMode (uMode=0x0) returned 0x1 [0097.580] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ScreenshotOptIn.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\screenshotoptin.gif.partially.cryptonar")) returned 1 [0097.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", lpFilePart=0x0) returned 0x50 [0097.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", lpFilePart=0x0) returned 0x50 [0097.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", lpFilePart=0x0) returned 0x50 [0097.581] SetErrorMode (uMode=0x1) returned 0x0 [0097.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.582] GetFileType (hFile=0x230) returned 0x1 [0097.582] SetErrorMode (uMode=0x0) returned 0x1 [0097.582] GetFileType (hFile=0x230) returned 0x1 [0097.582] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.583] ReadFile (in: hFile=0x230, lpBuffer=0x2771768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2771768*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.599] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.599] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.599] WriteFile (in: hFile=0x230, lpBuffer=0x2771768*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2771768*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.600] CloseHandle (hObject=0x230) returned 1 [0097.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", lpFilePart=0x0) returned 0x50 [0097.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll", lpFilePart=0x0) returned 0x50 [0097.634] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0097.634] SetErrorMode (uMode=0x1) returned 0x0 [0097.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sqmapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cf1ed5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x37cf1ed5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ca5c4f2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x320d0)) returned 1 [0097.634] SetErrorMode (uMode=0x0) returned 0x1 [0097.634] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sqmapi.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sqmapi.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sqmapi.dll.partially.cryptonar")) returned 1 [0097.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", lpFilePart=0x0) returned 0x52 [0097.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", lpFilePart=0x0) returned 0x52 [0097.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", lpFilePart=0x0) returned 0x52 [0097.635] SetErrorMode (uMode=0x1) returned 0x0 [0097.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ssleay32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.636] GetFileType (hFile=0x230) returned 0x1 [0097.636] SetErrorMode (uMode=0x0) returned 0x1 [0097.636] GetFileType (hFile=0x230) returned 0x1 [0097.636] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.636] ReadFile (in: hFile=0x230, lpBuffer=0x2774e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2774e20*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.661] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.661] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.661] WriteFile (in: hFile=0x230, lpBuffer=0x2774e20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2774e20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.661] CloseHandle (hObject=0x230) returned 1 [0097.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", lpFilePart=0x0) returned 0x52 [0097.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll", lpFilePart=0x0) returned 0x52 [0097.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0097.695] SetErrorMode (uMode=0x1) returned 0x0 [0097.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ssleay32.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38229164, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38229164, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3caf167f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x478d0)) returned 1 [0097.696] SetErrorMode (uMode=0x0) returned 0x1 [0097.696] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ssleay32.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ssleay32.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ssleay32.dll.partially.cryptonar")) returned 1 [0097.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", lpFilePart=0x0) returned 0x54 [0097.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", lpFilePart=0x0) returned 0x54 [0097.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", lpFilePart=0x0) returned 0x54 [0097.698] SetErrorMode (uMode=0x1) returned 0x0 [0097.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\syncengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.700] GetFileType (hFile=0x230) returned 0x1 [0097.700] SetErrorMode (uMode=0x0) returned 0x1 [0097.700] GetFileType (hFile=0x230) returned 0x1 [0097.700] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.700] ReadFile (in: hFile=0x230, lpBuffer=0x27784f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27784f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.716] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.716] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.716] WriteFile (in: hFile=0x230, lpBuffer=0x27784f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27784f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.717] CloseHandle (hObject=0x230) returned 1 [0097.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", lpFilePart=0x0) returned 0x54 [0097.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll", lpFilePart=0x0) returned 0x54 [0097.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x68 [0097.734] SetErrorMode (uMode=0x1) returned 0x0 [0097.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\syncengine.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38845163, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38845163, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cb3da2d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51b0d0)) returned 1 [0097.735] SetErrorMode (uMode=0x0) returned 0x1 [0097.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\syncengine.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\SyncEngine.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\syncengine.dll.partially.cryptonar")) returned 1 [0097.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", lpFilePart=0x0) returned 0x53 [0097.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", lpFilePart=0x0) returned 0x53 [0097.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", lpFilePart=0x0) returned 0x53 [0097.736] SetErrorMode (uMode=0x1) returned 0x0 [0097.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\telemetry.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.737] GetFileType (hFile=0x230) returned 0x1 [0097.737] SetErrorMode (uMode=0x0) returned 0x1 [0097.737] GetFileType (hFile=0x230) returned 0x1 [0097.737] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.737] ReadFile (in: hFile=0x230, lpBuffer=0x277bbe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277bbe0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.751] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.751] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.752] WriteFile (in: hFile=0x230, lpBuffer=0x277bbe0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x277bbe0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.752] CloseHandle (hObject=0x230) returned 1 [0097.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", lpFilePart=0x0) returned 0x53 [0097.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll", lpFilePart=0x0) returned 0x53 [0097.808] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x67 [0097.808] SetErrorMode (uMode=0x1) returned 0x0 [0097.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\telemetry.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38e87422, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38e87422, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cc0514a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x560d0)) returned 1 [0097.808] SetErrorMode (uMode=0x0) returned 0x1 [0097.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\telemetry.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Telemetry.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\telemetry.dll.partially.cryptonar")) returned 1 [0097.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", lpFilePart=0x0) returned 0x58 [0097.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", lpFilePart=0x0) returned 0x58 [0097.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", lpFilePart=0x0) returned 0x58 [0097.810] SetErrorMode (uMode=0x1) returned 0x0 [0097.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\testsharepage.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.813] GetFileType (hFile=0x230) returned 0x1 [0097.813] SetErrorMode (uMode=0x0) returned 0x1 [0097.813] GetFileType (hFile=0x230) returned 0x1 [0097.813] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.813] ReadFile (in: hFile=0x230, lpBuffer=0x277f2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277f2e0*, lpNumberOfBytesRead=0x5ae8b8*=0x484, lpOverlapped=0x0) returned 1 [0097.829] SetFilePointer (in: hFile=0x230, lDistanceToMove=-132, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.829] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.830] WriteFile (in: hFile=0x230, lpBuffer=0x277f2e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x277f2e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.830] CloseHandle (hObject=0x230) returned 1 [0097.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", lpFilePart=0x0) returned 0x58 [0097.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html", lpFilePart=0x0) returned 0x58 [0097.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0097.830] SetErrorMode (uMode=0x1) returned 0x0 [0097.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\testsharepage.html"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39456fd7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39456fd7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cc22843, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0097.831] SetErrorMode (uMode=0x0) returned 0x1 [0097.831] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\testsharepage.html"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\TestSharePage.html.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\testsharepage.html.partially.cryptonar")) returned 1 [0097.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x5b [0097.832] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x5b [0097.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x5ae3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x5b [0097.833] SetErrorMode (uMode=0x1) returned 0x0 [0097.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.833] GetFileType (hFile=0x230) returned 0x1 [0097.833] SetErrorMode (uMode=0x0) returned 0x1 [0097.834] GetFileType (hFile=0x230) returned 0x1 [0097.834] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xbfe9 [0097.834] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0097.834] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xbfe9 [0097.834] ReadFile (in: hFile=0x230, lpBuffer=0x278e1f8, nNumberOfBytesToRead=0xbfe9, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x278e1f8*, lpNumberOfBytesRead=0x5ae898*=0xbfe9, lpOverlapped=0x0) returned 1 [0097.835] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0097.836] WriteFile (in: hFile=0x230, lpBuffer=0x279a280*, nNumberOfBytesToWrite=0xbfe9, lpNumberOfBytesWritten=0x5ae928, lpOverlapped=0x0 | out: lpBuffer=0x279a280*, lpNumberOfBytesWritten=0x5ae928*=0xbfe9, lpOverlapped=0x0) returned 1 [0097.837] CloseHandle (hObject=0x230) returned 1 [0097.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x5b [0097.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt", lpFilePart=0x0) returned 0x5b [0097.837] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt.fully.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt.fully.cryptoNar", lpFilePart=0x0) returned 0x6b [0097.837] SetErrorMode (uMode=0x1) returned 0x0 [0097.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39a0095d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39a0095d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cc4902d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbfe9)) returned 1 [0097.837] SetErrorMode (uMode=0x0) returned 0x1 [0097.837] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ThirdPartyNotices.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\thirdpartynotices.txt.fully.cryptonar")) returned 1 [0097.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", lpFilePart=0x0) returned 0x52 [0097.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", lpFilePart=0x0) returned 0x52 [0097.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", lpFilePart=0x0) returned 0x52 [0097.839] SetErrorMode (uMode=0x1) returned 0x0 [0097.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.840] GetFileType (hFile=0x230) returned 0x1 [0097.840] SetErrorMode (uMode=0x0) returned 0x1 [0097.840] GetFileType (hFile=0x230) returned 0x1 [0097.840] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.840] ReadFile (in: hFile=0x230, lpBuffer=0x27a84e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a84e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.853] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.853] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.853] WriteFile (in: hFile=0x230, lpBuffer=0x27a84e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27a84e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.853] CloseHandle (hObject=0x230) returned 1 [0097.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", lpFilePart=0x0) returned 0x52 [0097.854] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll", lpFilePart=0x0) returned 0x52 [0097.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x66 [0097.855] SetErrorMode (uMode=0x1) returned 0x0 [0097.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ucrtbase.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a042c72, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3a042c72, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cc79797, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11ccc8)) returned 1 [0097.855] SetErrorMode (uMode=0x0) returned 0x1 [0097.855] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ucrtbase.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ucrtbase.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ucrtbase.dll.partially.cryptonar")) returned 1 [0097.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", lpFilePart=0x0) returned 0x56 [0097.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", lpFilePart=0x0) returned 0x56 [0097.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", lpFilePart=0x0) returned 0x56 [0097.857] SetErrorMode (uMode=0x1) returned 0x0 [0097.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.858] GetFileType (hFile=0x230) returned 0x1 [0097.858] SetErrorMode (uMode=0x0) returned 0x1 [0097.858] GetFileType (hFile=0x230) returned 0x1 [0097.858] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.858] ReadFile (in: hFile=0x230, lpBuffer=0x27abbc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27abbc8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.877] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.877] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.877] WriteFile (in: hFile=0x230, lpBuffer=0x27abbc8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27abbc8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.878] CloseHandle (hObject=0x230) returned 1 [0097.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", lpFilePart=0x0) returned 0x56 [0097.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll", lpFilePart=0x0) returned 0x56 [0097.878] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0097.878] SetErrorMode (uMode=0x1) returned 0x0 [0097.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vcruntime140.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a612790, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3a612790, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cc95c7a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x144d0)) returned 1 [0097.878] SetErrorMode (uMode=0x0) returned 0x1 [0097.878] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vcruntime140.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vcruntime140.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vcruntime140.dll.partially.cryptonar")) returned 1 [0097.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", lpFilePart=0x0) returned 0x51 [0097.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", lpFilePart=0x0) returned 0x51 [0097.880] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", lpFilePart=0x0) returned 0x51 [0097.880] SetErrorMode (uMode=0x1) returned 0x0 [0097.880] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.880] GetFileType (hFile=0x230) returned 0x1 [0097.880] SetErrorMode (uMode=0x0) returned 0x1 [0097.881] GetFileType (hFile=0x230) returned 0x1 [0097.881] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.881] ReadFile (in: hFile=0x230, lpBuffer=0x27af2a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27af2a8*, lpNumberOfBytesRead=0x5ae8b8*=0xa21, lpOverlapped=0x0) returned 1 [0097.937] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1569, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.937] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.937] WriteFile (in: hFile=0x230, lpBuffer=0x27af2a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27af2a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.938] CloseHandle (hObject=0x230) returned 1 [0097.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", lpFilePart=0x0) returned 0x51 [0097.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png", lpFilePart=0x0) returned 0x51 [0097.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png.partially.cryptoNar", lpFilePart=0x0) returned 0x65 [0097.938] SetErrorMode (uMode=0x1) returned 0x0 [0097.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab6fc11, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3ab6fc11, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cd2d99a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa21)) returned 1 [0097.938] SetErrorMode (uMode=0x0) returned 0x1 [0097.938] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\Warning.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\warning.png.partially.cryptonar")) returned 1 [0097.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", lpFilePart=0x0) returned 0x56 [0097.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", lpFilePart=0x0) returned 0x56 [0097.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", lpFilePart=0x0) returned 0x56 [0097.940] SetErrorMode (uMode=0x1) returned 0x0 [0097.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wnsclientapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.941] GetFileType (hFile=0x230) returned 0x1 [0097.941] SetErrorMode (uMode=0x0) returned 0x1 [0097.941] GetFileType (hFile=0x230) returned 0x1 [0097.941] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.941] ReadFile (in: hFile=0x230, lpBuffer=0x27b2988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b2988*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.950] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.950] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.951] WriteFile (in: hFile=0x230, lpBuffer=0x27b2988*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b2988*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.951] CloseHandle (hObject=0x230) returned 1 [0097.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", lpFilePart=0x0) returned 0x56 [0097.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll", lpFilePart=0x0) returned 0x56 [0097.952] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0097.952] SetErrorMode (uMode=0x1) returned 0x0 [0097.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wnsclientapi.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b1b1ec3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b1b1ec3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cd53b9a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5fcd0)) returned 1 [0097.952] SetErrorMode (uMode=0x0) returned 0x1 [0097.952] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wnsclientapi.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\WnsClientApi.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wnsclientapi.dll.partially.cryptonar")) returned 1 [0097.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", lpFilePart=0x0) returned 0x57 [0097.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", lpFilePart=0x0) returned 0x57 [0097.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", lpFilePart=0x0) returned 0x57 [0097.954] SetErrorMode (uMode=0x1) returned 0x0 [0097.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0097.955] GetFileType (hFile=0x230) returned 0x1 [0097.955] SetErrorMode (uMode=0x0) returned 0x1 [0097.955] GetFileType (hFile=0x230) returned 0x1 [0097.955] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.955] ReadFile (in: hFile=0x230, lpBuffer=0x27b6090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b6090*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0097.983] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0097.983] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0097.983] WriteFile (in: hFile=0x230, lpBuffer=0x27b6090*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b6090*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0097.983] CloseHandle (hObject=0x230) returned 1 [0097.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", lpFilePart=0x0) returned 0x57 [0097.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml", lpFilePart=0x0) returned 0x57 [0097.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0097.997] SetErrorMode (uMode=0x1) returned 0x0 [0097.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b7a7cc9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b7a7cc9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cdc6261, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c9e)) returned 1 [0097.998] SetErrorMode (uMode=0x0) returned 0x1 [0097.998] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.adml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.adml.partially.cryptonar")) returned 1 [0097.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", lpFilePart=0x0) returned 0x57 [0097.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", lpFilePart=0x0) returned 0x57 [0097.999] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", lpFilePart=0x0) returned 0x57 [0097.999] SetErrorMode (uMode=0x1) returned 0x0 [0097.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.000] GetFileType (hFile=0x230) returned 0x1 [0098.000] SetErrorMode (uMode=0x0) returned 0x1 [0098.000] GetFileType (hFile=0x230) returned 0x1 [0098.000] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.000] ReadFile (in: hFile=0x230, lpBuffer=0x27b9798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b9798*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.027] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.027] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.027] WriteFile (in: hFile=0x230, lpBuffer=0x27b9798*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b9798*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.028] CloseHandle (hObject=0x230) returned 1 [0098.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", lpFilePart=0x0) returned 0x57 [0098.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx", lpFilePart=0x0) returned 0x57 [0098.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0098.028] SetErrorMode (uMode=0x1) returned 0x0 [0098.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd5161f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3bd5161f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ce127f5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x266c)) returned 1 [0098.028] SetErrorMode (uMode=0x0) returned 0x1 [0098.028] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\adm\\OneDrive.admx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\adm\\onedrive.admx.partially.cryptonar")) returned 1 [0098.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.030] SetErrorMode (uMode=0x1) returned 0x0 [0098.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.030] GetFileType (hFile=0x230) returned 0x1 [0098.031] SetErrorMode (uMode=0x0) returned 0x1 [0098.031] GetFileType (hFile=0x230) returned 0x1 [0098.031] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.031] ReadFile (in: hFile=0x230, lpBuffer=0x27bcf80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27bcf80*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.041] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.041] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.042] WriteFile (in: hFile=0x230, lpBuffer=0x27bcf80*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27bcf80*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.042] CloseHandle (hObject=0x230) returned 1 [0098.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0098.043] SetErrorMode (uMode=0x1) returned 0x0 [0098.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4786eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3c4786eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ce3892b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x226d0)) returned 1 [0098.043] SetErrorMode (uMode=0x0) returned 0x1 [0098.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\af\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\af\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0098.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.048] SetErrorMode (uMode=0x1) returned 0x0 [0098.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.049] GetFileType (hFile=0x230) returned 0x1 [0098.049] SetErrorMode (uMode=0x0) returned 0x1 [0098.049] GetFileType (hFile=0x230) returned 0x1 [0098.049] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.049] ReadFile (in: hFile=0x230, lpBuffer=0x27c0880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c0880*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.051] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.051] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.051] WriteFile (in: hFile=0x230, lpBuffer=0x27c0880*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c0880*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.052] CloseHandle (hObject=0x230) returned 1 [0098.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0098.107] SetErrorMode (uMode=0x1) returned 0x0 [0098.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cbebc69, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3cbebc69, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ced13d5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x198d0)) returned 1 [0098.108] SetErrorMode (uMode=0x0) returned 0x1 [0098.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\am-et\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\am-et\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0098.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", lpFilePart=0x0) returned 0x5f [0098.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", lpFilePart=0x0) returned 0x5f [0098.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", lpFilePart=0x0) returned 0x5f [0098.109] SetErrorMode (uMode=0x1) returned 0x0 [0098.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filecoauthlib64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.113] GetFileType (hFile=0x230) returned 0x1 [0098.113] SetErrorMode (uMode=0x0) returned 0x1 [0098.113] GetFileType (hFile=0x230) returned 0x1 [0098.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.113] ReadFile (in: hFile=0x230, lpBuffer=0x27c40e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c40e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.145] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.145] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.145] WriteFile (in: hFile=0x230, lpBuffer=0x27c40e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c40e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.145] CloseHandle (hObject=0x230) returned 1 [0098.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", lpFilePart=0x0) returned 0x5f [0098.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll", lpFilePart=0x0) returned 0x5f [0098.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0098.216] SetErrorMode (uMode=0x1) returned 0x0 [0098.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filecoauthlib64.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d35f1eb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d35f1eb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3cfdc843, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x296c8)) returned 1 [0098.217] SetErrorMode (uMode=0x0) returned 0x1 [0098.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filecoauthlib64.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileCoAuthLib64.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filecoauthlib64.dll.partially.cryptonar")) returned 1 [0098.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", lpFilePart=0x0) returned 0x5d [0098.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", lpFilePart=0x0) returned 0x5d [0098.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", lpFilePart=0x0) returned 0x5d [0098.219] SetErrorMode (uMode=0x1) returned 0x0 [0098.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncapi64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.225] GetFileType (hFile=0x230) returned 0x1 [0098.225] SetErrorMode (uMode=0x0) returned 0x1 [0098.225] GetFileType (hFile=0x230) returned 0x1 [0098.225] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.226] ReadFile (in: hFile=0x230, lpBuffer=0x27c7880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c7880*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.235] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.235] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.235] WriteFile (in: hFile=0x230, lpBuffer=0x27c7880*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c7880*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.236] CloseHandle (hObject=0x230) returned 1 [0098.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", lpFilePart=0x0) returned 0x5d [0098.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll", lpFilePart=0x0) returned 0x5d [0098.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x71 [0098.262] SetErrorMode (uMode=0x1) returned 0x0 [0098.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncapi64.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d954fe0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d954fe0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d04ea9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfeec8)) returned 1 [0098.262] SetErrorMode (uMode=0x0) returned 0x1 [0098.262] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncapi64.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncApi64.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncapi64.dll.partially.cryptonar")) returned 1 [0098.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", lpFilePart=0x0) returned 0x5f [0098.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", lpFilePart=0x0) returned 0x5f [0098.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll", lpFilePart=0x0) returned 0x5f [0098.263] SetErrorMode (uMode=0x1) returned 0x0 [0098.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\amd64\\filesyncshell64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.272] SetErrorMode (uMode=0x0) returned 0x1 [0098.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.274] SetErrorMode (uMode=0x1) returned 0x0 [0098.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.275] GetFileType (hFile=0x230) returned 0x1 [0098.275] SetErrorMode (uMode=0x0) returned 0x1 [0098.275] GetFileType (hFile=0x230) returned 0x1 [0098.275] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.275] ReadFile (in: hFile=0x230, lpBuffer=0x27cc6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27cc6d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.276] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.276] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.277] WriteFile (in: hFile=0x230, lpBuffer=0x27cc6d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27cc6d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.277] CloseHandle (hObject=0x230) returned 1 [0098.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0098.289] SetErrorMode (uMode=0x1) returned 0x0 [0098.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e5ff7ad, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3e5ff7ad, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d09af1b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e6d0)) returned 1 [0098.289] SetErrorMode (uMode=0x0) returned 0x1 [0098.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ar\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ar\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0098.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.290] SetErrorMode (uMode=0x1) returned 0x0 [0098.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.291] GetFileType (hFile=0x230) returned 0x1 [0098.291] SetErrorMode (uMode=0x0) returned 0x1 [0098.291] GetFileType (hFile=0x230) returned 0x1 [0098.291] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.291] ReadFile (in: hFile=0x230, lpBuffer=0x27cffd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27cffd0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.319] WriteFile (in: hFile=0x230, lpBuffer=0x27cffd0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27cffd0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.320] CloseHandle (hObject=0x230) returned 1 [0098.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0098.338] SetErrorMode (uMode=0x1) returned 0x0 [0098.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ec1b7fd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3ec1b7fd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d10e100, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0098.338] SetErrorMode (uMode=0x0) returned 0x1 [0098.338] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\as-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\as-in\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0098.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0098.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0098.340] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0098.340] SetErrorMode (uMode=0x1) returned 0x0 [0098.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.341] GetFileType (hFile=0x230) returned 0x1 [0098.341] SetErrorMode (uMode=0x0) returned 0x1 [0098.341] GetFileType (hFile=0x230) returned 0x1 [0098.341] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.341] ReadFile (in: hFile=0x230, lpBuffer=0x27d3900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d3900*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.361] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.362] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.362] WriteFile (in: hFile=0x230, lpBuffer=0x27d3900*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27d3900*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.362] CloseHandle (hObject=0x230) returned 1 [0098.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0098.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0098.403] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0098.404] SetErrorMode (uMode=0x1) returned 0x0 [0098.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f2115ff, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f2115ff, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d1a6006, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22cd0)) returned 1 [0098.404] SetErrorMode (uMode=0x0) returned 0x1 [0098.404] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\az-latn-az\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\az-latn-az\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0098.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.405] SetErrorMode (uMode=0x1) returned 0x0 [0098.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.406] GetFileType (hFile=0x230) returned 0x1 [0098.406] SetErrorMode (uMode=0x0) returned 0x1 [0098.406] GetFileType (hFile=0x230) returned 0x1 [0098.406] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.406] ReadFile (in: hFile=0x230, lpBuffer=0x27d7260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d7260*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.409] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.409] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.409] WriteFile (in: hFile=0x230, lpBuffer=0x27d7260*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27d7260*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.409] CloseHandle (hObject=0x230) returned 1 [0098.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0098.410] SetErrorMode (uMode=0x1) returned 0x0 [0098.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7e119c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f7e119c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d1a6006, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x21ec8)) returned 1 [0098.410] SetErrorMode (uMode=0x0) returned 0x1 [0098.410] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\be\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\be\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0098.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.412] SetErrorMode (uMode=0x1) returned 0x0 [0098.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.413] GetFileType (hFile=0x230) returned 0x1 [0098.413] SetErrorMode (uMode=0x0) returned 0x1 [0098.413] GetFileType (hFile=0x230) returned 0x1 [0098.413] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.413] ReadFile (in: hFile=0x230, lpBuffer=0x27dab60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27dab60*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.788] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.788] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.788] WriteFile (in: hFile=0x230, lpBuffer=0x27dab60*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27dab60*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.789] CloseHandle (hObject=0x230) returned 1 [0098.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0098.806] SetErrorMode (uMode=0x1) returned 0x0 [0098.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdfd1fa, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3fdfd1fa, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d58983b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0098.806] SetErrorMode (uMode=0x0) returned 0x1 [0098.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bg\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bg\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0098.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.807] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.808] SetErrorMode (uMode=0x1) returned 0x0 [0098.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.808] GetFileType (hFile=0x230) returned 0x1 [0098.808] SetErrorMode (uMode=0x0) returned 0x1 [0098.808] GetFileType (hFile=0x230) returned 0x1 [0098.809] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.809] ReadFile (in: hFile=0x230, lpBuffer=0x27de460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27de460*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.845] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.845] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.845] WriteFile (in: hFile=0x230, lpBuffer=0x27de460*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27de460*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.846] CloseHandle (hObject=0x230) returned 1 [0098.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.863] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0098.863] SetErrorMode (uMode=0x1) returned 0x0 [0098.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x403a6b49, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x403a6b49, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d5f82f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0098.864] SetErrorMode (uMode=0x0) returned 0x1 [0098.864] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-bd\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-bd\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0098.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.865] SetErrorMode (uMode=0x1) returned 0x0 [0098.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.866] GetFileType (hFile=0x230) returned 0x1 [0098.866] SetErrorMode (uMode=0x0) returned 0x1 [0098.866] GetFileType (hFile=0x230) returned 0x1 [0098.866] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.866] ReadFile (in: hFile=0x230, lpBuffer=0x27e1d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e1d60*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.933] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.933] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.933] WriteFile (in: hFile=0x230, lpBuffer=0x27e1d60*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e1d60*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.933] CloseHandle (hObject=0x230) returned 1 [0098.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0098.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0098.945] SetErrorMode (uMode=0x1) returned 0x0 [0098.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x409e8dfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x409e8dfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d6dd204, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22ed0)) returned 1 [0098.945] SetErrorMode (uMode=0x0) returned 0x1 [0098.945] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bn-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bn-in\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0098.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0098.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0098.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0098.946] SetErrorMode (uMode=0x1) returned 0x0 [0098.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.947] GetFileType (hFile=0x230) returned 0x1 [0098.947] SetErrorMode (uMode=0x0) returned 0x1 [0098.947] GetFileType (hFile=0x230) returned 0x1 [0098.947] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.947] ReadFile (in: hFile=0x230, lpBuffer=0x27e5690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e5690*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.964] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.965] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.965] WriteFile (in: hFile=0x230, lpBuffer=0x27e5690*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e5690*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.965] CloseHandle (hObject=0x230) returned 1 [0098.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0098.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0098.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0098.966] SetErrorMode (uMode=0x1) returned 0x0 [0098.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x410c3a21, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x410c3a21, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d709413, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0098.966] SetErrorMode (uMode=0x0) returned 0x1 [0098.966] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\bs-latn-ba\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\bs-latn-ba\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0098.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.968] SetErrorMode (uMode=0x1) returned 0x0 [0098.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.968] GetFileType (hFile=0x230) returned 0x1 [0098.968] SetErrorMode (uMode=0x0) returned 0x1 [0098.968] GetFileType (hFile=0x230) returned 0x1 [0098.969] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.969] ReadFile (in: hFile=0x230, lpBuffer=0x27e8ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e8ff0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0098.994] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0098.995] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.995] WriteFile (in: hFile=0x230, lpBuffer=0x27e8ff0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e8ff0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0098.995] CloseHandle (hObject=0x230) returned 1 [0098.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0098.996] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0098.996] SetErrorMode (uMode=0x1) returned 0x0 [0098.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4172bf28, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4172bf28, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d74f9f4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24ed0)) returned 1 [0098.996] SetErrorMode (uMode=0x0) returned 0x1 [0098.996] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0098.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x78 [0098.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x78 [0098.997] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x78 [0098.998] SetErrorMode (uMode=0x1) returned 0x0 [0098.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0098.998] GetFileType (hFile=0x230) returned 0x1 [0098.998] SetErrorMode (uMode=0x0) returned 0x1 [0098.999] GetFileType (hFile=0x230) returned 0x1 [0098.999] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0098.999] ReadFile (in: hFile=0x230, lpBuffer=0x27ec938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ec938*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.016] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.016] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.016] WriteFile (in: hFile=0x230, lpBuffer=0x27ec938*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ec938*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.016] CloseHandle (hObject=0x230) returned 1 [0099.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x78 [0099.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x78 [0099.057] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x8c [0099.057] SetErrorMode (uMode=0x1) returned 0x0 [0099.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d47f78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41d47f78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d7e831b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24ac8)) returned 1 [0099.057] SetErrorMode (uMode=0x0) returned 0x1 [0099.057] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ca-es-valencia\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ca-es-valencia\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.059] SetErrorMode (uMode=0x1) returned 0x0 [0099.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.060] GetFileType (hFile=0x230) returned 0x1 [0099.060] SetErrorMode (uMode=0x0) returned 0x1 [0099.060] GetFileType (hFile=0x230) returned 0x1 [0099.060] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.060] ReadFile (in: hFile=0x230, lpBuffer=0x27f02c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f02c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.086] WriteFile (in: hFile=0x230, lpBuffer=0x27f02c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f02c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.086] CloseHandle (hObject=0x230) returned 1 [0099.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.097] SetErrorMode (uMode=0x1) returned 0x0 [0099.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42363fd2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42363fd2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d834759, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0099.098] SetErrorMode (uMode=0x0) returned 0x1 [0099.098] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cs\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cs\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.099] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.099] SetErrorMode (uMode=0x1) returned 0x0 [0099.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.100] GetFileType (hFile=0x230) returned 0x1 [0099.100] SetErrorMode (uMode=0x0) returned 0x1 [0099.100] GetFileType (hFile=0x230) returned 0x1 [0099.100] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.100] ReadFile (in: hFile=0x230, lpBuffer=0x27f3bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f3bc8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.140] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.141] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.141] WriteFile (in: hFile=0x230, lpBuffer=0x27f3bc8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f3bc8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.142] CloseHandle (hObject=0x230) returned 1 [0099.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0099.142] SetErrorMode (uMode=0x1) returned 0x0 [0099.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a64e49, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42a64e49, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d8a7caa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0099.142] SetErrorMode (uMode=0x0) returned 0x1 [0099.142] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\cy-gb\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\cy-gb\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.144] SetErrorMode (uMode=0x1) returned 0x0 [0099.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.145] GetFileType (hFile=0x230) returned 0x1 [0099.145] SetErrorMode (uMode=0x0) returned 0x1 [0099.145] GetFileType (hFile=0x230) returned 0x1 [0099.145] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.145] ReadFile (in: hFile=0x230, lpBuffer=0x27f74c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f74c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.147] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.147] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.147] WriteFile (in: hFile=0x230, lpBuffer=0x27f74c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f74c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.147] CloseHandle (hObject=0x230) returned 1 [0099.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.157] SetErrorMode (uMode=0x1) returned 0x0 [0099.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4318bf30, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4318bf30, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d8cd08e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x21ed0)) returned 1 [0099.157] SetErrorMode (uMode=0x0) returned 0x1 [0099.158] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\da\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\da\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.159] SetErrorMode (uMode=0x1) returned 0x0 [0099.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.160] GetFileType (hFile=0x230) returned 0x1 [0099.160] SetErrorMode (uMode=0x0) returned 0x1 [0099.160] GetFileType (hFile=0x230) returned 0x1 [0099.160] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.160] ReadFile (in: hFile=0x230, lpBuffer=0x27fadc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27fadc8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.162] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.163] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.163] WriteFile (in: hFile=0x230, lpBuffer=0x27fadc8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27fadc8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.163] CloseHandle (hObject=0x230) returned 1 [0099.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.176] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.176] SetErrorMode (uMode=0x1) returned 0x0 [0099.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43997e00, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x43997e00, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d91979a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x278d0)) returned 1 [0099.177] SetErrorMode (uMode=0x0) returned 0x1 [0099.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\de\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\de\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.178] SetErrorMode (uMode=0x1) returned 0x0 [0099.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.179] GetFileType (hFile=0x230) returned 0x1 [0099.179] SetErrorMode (uMode=0x0) returned 0x1 [0099.179] GetFileType (hFile=0x230) returned 0x1 [0099.179] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.179] ReadFile (in: hFile=0x230, lpBuffer=0x27fe6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27fe6c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.208] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.208] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.208] WriteFile (in: hFile=0x230, lpBuffer=0x27fe6c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27fe6c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.209] CloseHandle (hObject=0x230) returned 1 [0099.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.220] SetErrorMode (uMode=0x1) returned 0x0 [0099.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x445f60ff, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x445f60ff, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d965a9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x278d0)) returned 1 [0099.221] SetErrorMode (uMode=0x0) returned 0x1 [0099.221] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\el\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\el\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.222] SetErrorMode (uMode=0x1) returned 0x0 [0099.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.223] GetFileType (hFile=0x230) returned 0x1 [0099.223] SetErrorMode (uMode=0x0) returned 0x1 [0099.224] GetFileType (hFile=0x230) returned 0x1 [0099.224] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.224] ReadFile (in: hFile=0x230, lpBuffer=0x2801fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2801fc8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.246] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.246] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.246] WriteFile (in: hFile=0x230, lpBuffer=0x2801fc8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2801fc8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.247] CloseHandle (hObject=0x230) returned 1 [0099.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.247] SetErrorMode (uMode=0x1) returned 0x0 [0099.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d43429, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x44d43429, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3d9b1fb8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f6c8)) returned 1 [0099.247] SetErrorMode (uMode=0x0) returned 0x1 [0099.247] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.249] SetErrorMode (uMode=0x1) returned 0x0 [0099.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.249] GetFileType (hFile=0x230) returned 0x1 [0099.249] SetErrorMode (uMode=0x0) returned 0x1 [0099.249] GetFileType (hFile=0x230) returned 0x1 [0099.249] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.249] ReadFile (in: hFile=0x230, lpBuffer=0x28058c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28058c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.316] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.316] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.317] WriteFile (in: hFile=0x230, lpBuffer=0x28058c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28058c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.317] CloseHandle (hObject=0x230) returned 1 [0099.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0099.343] SetErrorMode (uMode=0x1) returned 0x0 [0099.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453856d1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x453856d1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3da96d04, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0099.343] SetErrorMode (uMode=0x0) returned 0x1 [0099.343] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\en-gb\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\en-gb\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.344] SetErrorMode (uMode=0x1) returned 0x0 [0099.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.345] GetFileType (hFile=0x230) returned 0x1 [0099.345] SetErrorMode (uMode=0x0) returned 0x1 [0099.345] GetFileType (hFile=0x230) returned 0x1 [0099.345] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.345] ReadFile (in: hFile=0x230, lpBuffer=0x28091c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28091c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.415] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.415] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.416] WriteFile (in: hFile=0x230, lpBuffer=0x28091c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28091c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.416] CloseHandle (hObject=0x230) returned 1 [0099.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.449] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.449] SetErrorMode (uMode=0x1) returned 0x0 [0099.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459edbde, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x459edbde, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3dba1dc5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x246d0)) returned 1 [0099.449] SetErrorMode (uMode=0x0) returned 0x1 [0099.449] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\es\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\es\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.451] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.451] SetErrorMode (uMode=0x1) returned 0x0 [0099.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.452] GetFileType (hFile=0x230) returned 0x1 [0099.452] SetErrorMode (uMode=0x0) returned 0x1 [0099.452] GetFileType (hFile=0x230) returned 0x1 [0099.452] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.452] ReadFile (in: hFile=0x230, lpBuffer=0x280cac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x280cac8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.469] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.470] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.471] WriteFile (in: hFile=0x230, lpBuffer=0x280cac8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x280cac8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.471] CloseHandle (hObject=0x230) returned 1 [0099.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.493] SetErrorMode (uMode=0x1) returned 0x0 [0099.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464ce76b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x464ce76b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3dc143ae, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0099.493] SetErrorMode (uMode=0x0) returned 0x1 [0099.493] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\et\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\et\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.495] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.495] SetErrorMode (uMode=0x1) returned 0x0 [0099.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.495] GetFileType (hFile=0x230) returned 0x1 [0099.495] SetErrorMode (uMode=0x0) returned 0x1 [0099.496] GetFileType (hFile=0x230) returned 0x1 [0099.496] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.496] ReadFile (in: hFile=0x230, lpBuffer=0x28103c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28103c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.505] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.506] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.506] WriteFile (in: hFile=0x230, lpBuffer=0x28103c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28103c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.507] CloseHandle (hObject=0x230) returned 1 [0099.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.507] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.507] SetErrorMode (uMode=0x1) returned 0x0 [0099.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46c1ba95, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x46c1ba95, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3dc3a631, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0099.507] SetErrorMode (uMode=0x0) returned 0x1 [0099.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\eu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\eu\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.509] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.509] SetErrorMode (uMode=0x1) returned 0x0 [0099.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.510] GetFileType (hFile=0x230) returned 0x1 [0099.510] SetErrorMode (uMode=0x0) returned 0x1 [0099.510] GetFileType (hFile=0x230) returned 0x1 [0099.510] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.510] ReadFile (in: hFile=0x230, lpBuffer=0x2813cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2813cc8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.528] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.529] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.529] WriteFile (in: hFile=0x230, lpBuffer=0x2813cc8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2813cc8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.529] CloseHandle (hObject=0x230) returned 1 [0099.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.530] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.530] SetErrorMode (uMode=0x1) returned 0x0 [0099.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47342b61, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47342b61, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3dc6087a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x222c8)) returned 1 [0099.531] SetErrorMode (uMode=0x0) returned 0x1 [0099.531] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fa\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fa\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.532] SetErrorMode (uMode=0x1) returned 0x0 [0099.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.533] GetFileType (hFile=0x230) returned 0x1 [0099.533] SetErrorMode (uMode=0x0) returned 0x1 [0099.533] GetFileType (hFile=0x230) returned 0x1 [0099.533] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.533] ReadFile (in: hFile=0x230, lpBuffer=0x28175c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28175c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.541] WriteFile (in: hFile=0x230, lpBuffer=0x28175c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28175c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.541] CloseHandle (hObject=0x230) returned 1 [0099.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.626] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.626] SetErrorMode (uMode=0x1) returned 0x0 [0099.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ab60d8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47ab60d8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3dcf92f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0099.626] SetErrorMode (uMode=0x0) returned 0x1 [0099.626] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fi\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fi\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0099.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0099.627] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0099.627] SetErrorMode (uMode=0x1) returned 0x0 [0099.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.628] GetFileType (hFile=0x230) returned 0x1 [0099.628] SetErrorMode (uMode=0x0) returned 0x1 [0099.628] GetFileType (hFile=0x230) returned 0x1 [0099.628] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.628] ReadFile (in: hFile=0x230, lpBuffer=0x281aee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x281aee0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.650] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.650] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.650] WriteFile (in: hFile=0x230, lpBuffer=0x281aee0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x281aee0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.651] CloseHandle (hObject=0x230) returned 1 [0099.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0099.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0099.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0099.678] SetErrorMode (uMode=0x1) returned 0x0 [0099.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48326db4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48326db4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3dde1004, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x25cd0)) returned 1 [0099.678] SetErrorMode (uMode=0x0) returned 0x1 [0099.678] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fil-ph\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fil-ph\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.680] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.680] SetErrorMode (uMode=0x1) returned 0x0 [0099.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.681] GetFileType (hFile=0x230) returned 0x1 [0099.681] SetErrorMode (uMode=0x0) returned 0x1 [0099.682] GetFileType (hFile=0x230) returned 0x1 [0099.682] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.682] ReadFile (in: hFile=0x230, lpBuffer=0x281e810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x281e810*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.688] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.689] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.689] WriteFile (in: hFile=0x230, lpBuffer=0x281e810*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x281e810*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.690] CloseHandle (hObject=0x230) returned 1 [0099.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.690] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.690] SetErrorMode (uMode=0x1) returned 0x0 [0099.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48992a36, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48992a36, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3de00e17, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x26ed0)) returned 1 [0099.691] SetErrorMode (uMode=0x0) returned 0x1 [0099.691] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\fr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\fr\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.693] SetErrorMode (uMode=0x1) returned 0x0 [0099.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.693] GetFileType (hFile=0x230) returned 0x1 [0099.693] SetErrorMode (uMode=0x0) returned 0x1 [0099.693] GetFileType (hFile=0x230) returned 0x1 [0099.694] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.694] ReadFile (in: hFile=0x230, lpBuffer=0x2822110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2822110*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.714] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.714] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.714] WriteFile (in: hFile=0x230, lpBuffer=0x2822110*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2822110*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.714] CloseHandle (hObject=0x230) returned 1 [0099.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0099.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0099.732] SetErrorMode (uMode=0x1) returned 0x0 [0099.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48ffaf43, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48ffaf43, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3de52894, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24ad0)) returned 1 [0099.732] SetErrorMode (uMode=0x0) returned 0x1 [0099.732] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ga-ie\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ga-ie\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0099.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0099.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0099.733] SetErrorMode (uMode=0x1) returned 0x0 [0099.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.734] GetFileType (hFile=0x230) returned 0x1 [0099.734] SetErrorMode (uMode=0x0) returned 0x1 [0099.734] GetFileType (hFile=0x230) returned 0x1 [0099.734] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.734] ReadFile (in: hFile=0x230, lpBuffer=0x2825a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2825a28*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.753] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.753] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.753] WriteFile (in: hFile=0x230, lpBuffer=0x2825a28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2825a28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.754] CloseHandle (hObject=0x230) returned 1 [0099.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0099.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0099.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0099.771] SetErrorMode (uMode=0x1) returned 0x0 [0099.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4963d1f5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4963d1f5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3dec51b2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x27ed0)) returned 1 [0099.771] SetErrorMode (uMode=0x0) returned 0x1 [0099.772] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gd-latn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gd-latn\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.773] SetErrorMode (uMode=0x1) returned 0x0 [0099.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.774] GetFileType (hFile=0x230) returned 0x1 [0099.774] SetErrorMode (uMode=0x0) returned 0x1 [0099.774] GetFileType (hFile=0x230) returned 0x1 [0099.774] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.774] ReadFile (in: hFile=0x230, lpBuffer=0x2829358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2829358*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.793] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.793] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.793] WriteFile (in: hFile=0x230, lpBuffer=0x2829358*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2829358*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.794] CloseHandle (hObject=0x230) returned 1 [0099.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.818] SetErrorMode (uMode=0x1) returned 0x0 [0099.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49d3e065, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49d3e065, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3df378d9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0099.819] SetErrorMode (uMode=0x0) returned 0x1 [0099.819] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gl\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.820] SetErrorMode (uMode=0x1) returned 0x0 [0099.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.821] GetFileType (hFile=0x230) returned 0x1 [0099.821] SetErrorMode (uMode=0x0) returned 0x1 [0099.821] GetFileType (hFile=0x230) returned 0x1 [0099.821] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.821] ReadFile (in: hFile=0x230, lpBuffer=0x282cc58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x282cc58*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.834] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.835] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.836] WriteFile (in: hFile=0x230, lpBuffer=0x282cc58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x282cc58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.836] CloseHandle (hObject=0x230) returned 1 [0099.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.836] SetErrorMode (uMode=0x1) returned 0x0 [0099.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ee4f8e6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2ee4f8e6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3df5dbf7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0099.837] SetErrorMode (uMode=0x0) returned 0x1 [0099.837] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\gu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\gu\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0099.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0099.838] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0099.838] SetErrorMode (uMode=0x1) returned 0x0 [0099.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.839] GetFileType (hFile=0x230) returned 0x1 [0099.839] SetErrorMode (uMode=0x0) returned 0x1 [0099.839] GetFileType (hFile=0x230) returned 0x1 [0099.839] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.839] ReadFile (in: hFile=0x230, lpBuffer=0x2830588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2830588*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.863] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.864] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.864] WriteFile (in: hFile=0x230, lpBuffer=0x2830588*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2830588*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.865] CloseHandle (hObject=0x230) returned 1 [0099.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0099.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0099.866] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0099.866] SetErrorMode (uMode=0x1) returned 0x0 [0099.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f95117c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2f95117c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3dfaa054, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x226c8)) returned 1 [0099.866] SetErrorMode (uMode=0x0) returned 0x1 [0099.867] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ha-latn-ng\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ha-latn-ng\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.871] SetErrorMode (uMode=0x1) returned 0x0 [0099.872] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.872] GetFileType (hFile=0x230) returned 0x1 [0099.872] SetErrorMode (uMode=0x0) returned 0x1 [0099.872] GetFileType (hFile=0x230) returned 0x1 [0099.872] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.873] ReadFile (in: hFile=0x230, lpBuffer=0x2833ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2833ee8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.906] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.906] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.906] WriteFile (in: hFile=0x230, lpBuffer=0x2833ee8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2833ee8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.907] CloseHandle (hObject=0x230) returned 1 [0099.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.925] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.926] SetErrorMode (uMode=0x1) returned 0x0 [0099.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x300672a7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x300672a7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e01ca32, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c2d0)) returned 1 [0099.926] SetErrorMode (uMode=0x0) returned 0x1 [0099.926] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\he\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\he\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.937] SetErrorMode (uMode=0x1) returned 0x0 [0099.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.938] GetFileType (hFile=0x230) returned 0x1 [0099.939] SetErrorMode (uMode=0x0) returned 0x1 [0099.939] GetFileType (hFile=0x230) returned 0x1 [0099.939] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.939] ReadFile (in: hFile=0x230, lpBuffer=0x28377e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28377e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.940] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.940] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.940] WriteFile (in: hFile=0x230, lpBuffer=0x28377e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28377e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.941] CloseHandle (hObject=0x230) returned 1 [0099.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0099.958] SetErrorMode (uMode=0x1) returned 0x0 [0099.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30a55bcf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x30a55bcf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e068c3f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0099.958] SetErrorMode (uMode=0x0) returned 0x1 [0099.958] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hi\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hi\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0099.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0099.960] SetErrorMode (uMode=0x1) returned 0x0 [0099.960] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0099.960] GetFileType (hFile=0x230) returned 0x1 [0099.960] SetErrorMode (uMode=0x0) returned 0x1 [0099.960] GetFileType (hFile=0x230) returned 0x1 [0099.960] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.960] ReadFile (in: hFile=0x230, lpBuffer=0x283b0e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x283b0e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0099.969] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0099.969] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0099.969] WriteFile (in: hFile=0x230, lpBuffer=0x283b0e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x283b0e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0099.969] CloseHandle (hObject=0x230) returned 1 [0100.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0100.003] SetErrorMode (uMode=0x1) returned 0x0 [0100.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31109a56, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x31109a56, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e0db4e0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22ec8)) returned 1 [0100.003] SetErrorMode (uMode=0x0) returned 0x1 [0100.003] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hr\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.004] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.005] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.005] SetErrorMode (uMode=0x1) returned 0x0 [0100.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.006] GetFileType (hFile=0x230) returned 0x1 [0100.006] SetErrorMode (uMode=0x0) returned 0x1 [0100.006] GetFileType (hFile=0x230) returned 0x1 [0100.006] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.006] ReadFile (in: hFile=0x230, lpBuffer=0x283e9e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x283e9e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.024] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.024] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.024] WriteFile (in: hFile=0x230, lpBuffer=0x283e9e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x283e9e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.025] CloseHandle (hObject=0x230) returned 1 [0100.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.025] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0100.025] SetErrorMode (uMode=0x1) returned 0x0 [0100.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3199a50f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3199a50f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e1279a1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0100.025] SetErrorMode (uMode=0x0) returned 0x1 [0100.025] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hu\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.027] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.027] SetErrorMode (uMode=0x1) returned 0x0 [0100.027] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.028] GetFileType (hFile=0x230) returned 0x1 [0100.028] SetErrorMode (uMode=0x0) returned 0x1 [0100.028] GetFileType (hFile=0x230) returned 0x1 [0100.028] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.028] ReadFile (in: hFile=0x230, lpBuffer=0x28422e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28422e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.045] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.045] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.045] WriteFile (in: hFile=0x230, lpBuffer=0x28422e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28422e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.045] CloseHandle (hObject=0x230) returned 1 [0100.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0100.063] SetErrorMode (uMode=0x1) returned 0x0 [0100.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32528a5a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32528a5a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e173d1b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x21ed0)) returned 1 [0100.063] SetErrorMode (uMode=0x0) returned 0x1 [0100.063] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\hy\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\hy\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.065] SetErrorMode (uMode=0x1) returned 0x0 [0100.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.067] GetFileType (hFile=0x230) returned 0x1 [0100.067] SetErrorMode (uMode=0x0) returned 0x1 [0100.067] GetFileType (hFile=0x230) returned 0x1 [0100.067] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.067] ReadFile (in: hFile=0x230, lpBuffer=0x2845be8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2845be8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.085] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.085] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.085] WriteFile (in: hFile=0x230, lpBuffer=0x2845be8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2845be8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.085] CloseHandle (hObject=0x230) returned 1 [0100.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0100.103] SetErrorMode (uMode=0x1) returned 0x0 [0100.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32d6f4ae, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x32d6f4ae, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e1e6544, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x21cd0)) returned 1 [0100.103] SetErrorMode (uMode=0x0) returned 0x1 [0100.103] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\id\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\id\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0100.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0100.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0100.104] SetErrorMode (uMode=0x1) returned 0x0 [0100.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.105] GetFileType (hFile=0x230) returned 0x1 [0100.105] SetErrorMode (uMode=0x0) returned 0x1 [0100.105] GetFileType (hFile=0x230) returned 0x1 [0100.105] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.105] ReadFile (in: hFile=0x230, lpBuffer=0x28494e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28494e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.123] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.124] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.124] WriteFile (in: hFile=0x230, lpBuffer=0x28494e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28494e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.124] CloseHandle (hObject=0x230) returned 1 [0100.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0100.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0100.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0100.125] SetErrorMode (uMode=0x1) returned 0x0 [0100.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3346064b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3346064b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e20c75e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e8d0)) returned 1 [0100.125] SetErrorMode (uMode=0x0) returned 0x1 [0100.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ig-ng\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ig-ng\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", lpFilePart=0x0) returned 0x5c [0100.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", lpFilePart=0x0) returned 0x5c [0100.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", lpFilePart=0x0) returned 0x5c [0100.126] SetErrorMode (uMode=0x1) returned 0x0 [0100.126] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qjpeg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.127] GetFileType (hFile=0x230) returned 0x1 [0100.127] SetErrorMode (uMode=0x0) returned 0x1 [0100.127] GetFileType (hFile=0x230) returned 0x1 [0100.127] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.127] ReadFile (in: hFile=0x230, lpBuffer=0x284cd28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x284cd28*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.129] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.129] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.129] WriteFile (in: hFile=0x230, lpBuffer=0x284cd28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x284cd28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.129] CloseHandle (hObject=0x230) returned 1 [0100.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", lpFilePart=0x0) returned 0x5c [0100.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll", lpFilePart=0x0) returned 0x5c [0100.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x70 [0100.137] SetErrorMode (uMode=0x1) returned 0x0 [0100.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qjpeg.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d513cb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x33d513cb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e23282f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f4d0)) returned 1 [0100.137] SetErrorMode (uMode=0x0) returned 0x1 [0100.137] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qjpeg.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qjpeg.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qjpeg.dll.partially.cryptonar")) returned 1 [0100.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", lpFilePart=0x0) returned 0x5b [0100.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", lpFilePart=0x0) returned 0x5b [0100.139] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", lpFilePart=0x0) returned 0x5b [0100.139] SetErrorMode (uMode=0x1) returned 0x0 [0100.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qsvg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.140] GetFileType (hFile=0x230) returned 0x1 [0100.140] SetErrorMode (uMode=0x0) returned 0x1 [0100.140] GetFileType (hFile=0x230) returned 0x1 [0100.140] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.140] ReadFile (in: hFile=0x230, lpBuffer=0x2850490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2850490*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.159] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.159] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.159] WriteFile (in: hFile=0x230, lpBuffer=0x2850490*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2850490*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.160] CloseHandle (hObject=0x230) returned 1 [0100.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", lpFilePart=0x0) returned 0x5b [0100.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll", lpFilePart=0x0) returned 0x5b [0100.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x6f [0100.177] SetErrorMode (uMode=0x1) returned 0x0 [0100.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qsvg.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34536fe1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x34536fe1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e27eca3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8ed0)) returned 1 [0100.177] SetErrorMode (uMode=0x0) returned 0x1 [0100.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qsvg.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\imageformats\\qsvg.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\imageformats\\qsvg.dll.partially.cryptonar")) returned 1 [0100.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", lpFilePart=0x0) returned 0x5f [0100.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", lpFilePart=0x0) returned 0x5f [0100.179] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", lpFilePart=0x0) returned 0x5f [0100.179] SetErrorMode (uMode=0x1) returned 0x0 [0100.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.181] GetFileType (hFile=0x230) returned 0x1 [0100.181] SetErrorMode (uMode=0x0) returned 0x1 [0100.181] GetFileType (hFile=0x230) returned 0x1 [0100.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.181] ReadFile (in: hFile=0x230, lpBuffer=0x2853c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2853c08*, lpNumberOfBytesRead=0x5ae8b8*=0x8f1, lpOverlapped=0x0) returned 1 [0100.183] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1265, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.183] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.183] WriteFile (in: hFile=0x230, lpBuffer=0x2853c08*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2853c08*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.184] CloseHandle (hObject=0x230) returned 1 [0100.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", lpFilePart=0x0) returned 0x5f [0100.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg", lpFilePart=0x0) returned 0x5f [0100.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0100.184] SetErrorMode (uMode=0x1) returned 0x0 [0100.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x351e17ab, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x351e17ab, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e2a50ad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8f1)) returned 1 [0100.185] SetErrorMode (uMode=0x0) returned 0x1 [0100.185] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\acmDismissIcon.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\acmdismissicon.svg.partially.cryptonar")) returned 1 [0100.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", lpFilePart=0x0) returned 0x59 [0100.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", lpFilePart=0x0) returned 0x59 [0100.186] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", lpFilePart=0x0) returned 0x59 [0100.186] SetErrorMode (uMode=0x1) returned 0x0 [0100.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.187] GetFileType (hFile=0x230) returned 0x1 [0100.187] SetErrorMode (uMode=0x0) returned 0x1 [0100.187] GetFileType (hFile=0x230) returned 0x1 [0100.187] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.187] ReadFile (in: hFile=0x230, lpBuffer=0x2857388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2857388*, lpNumberOfBytesRead=0x5ae8b8*=0x321, lpOverlapped=0x0) returned 1 [0100.198] ReadFile (in: hFile=0x230, lpBuffer=0x2857388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2857388*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.198] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.198] WriteFile (in: hFile=0x230, lpBuffer=0x2857388*, nNumberOfBytesToWrite=0x321, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2857388*, lpNumberOfBytesWritten=0x5ae8a8*=0x321, lpOverlapped=0x0) returned 1 [0100.198] CloseHandle (hObject=0x230) returned 1 [0100.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", lpFilePart=0x0) returned 0x59 [0100.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png", lpFilePart=0x0) returned 0x59 [0100.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0100.198] SetErrorMode (uMode=0x1) returned 0x0 [0100.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3607bdf1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3607bdf1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e2cb2fc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x321)) returned 1 [0100.199] SetErrorMode (uMode=0x0) returned 0x1 [0100.199] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\blurrect.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\blurrect.png.partially.cryptonar")) returned 1 [0100.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", lpFilePart=0x0) returned 0x63 [0100.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", lpFilePart=0x0) returned 0x63 [0100.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", lpFilePart=0x0) returned 0x63 [0100.204] SetErrorMode (uMode=0x1) returned 0x0 [0100.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.205] GetFileType (hFile=0x230) returned 0x1 [0100.205] SetErrorMode (uMode=0x0) returned 0x1 [0100.205] GetFileType (hFile=0x230) returned 0x1 [0100.205] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.205] ReadFile (in: hFile=0x230, lpBuffer=0x285ad90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285ad90*, lpNumberOfBytesRead=0x5ae8b8*=0xd3, lpOverlapped=0x0) returned 1 [0100.206] ReadFile (in: hFile=0x230, lpBuffer=0x285ad90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285ad90*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.206] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.206] WriteFile (in: hFile=0x230, lpBuffer=0x285ad90*, nNumberOfBytesToWrite=0xd3, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x285ad90*, lpNumberOfBytesWritten=0x5ae8a8*=0xd3, lpOverlapped=0x0) returned 1 [0100.206] CloseHandle (hObject=0x230) returned 1 [0100.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", lpFilePart=0x0) returned 0x63 [0100.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg", lpFilePart=0x0) returned 0x63 [0100.207] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x77 [0100.207] SetErrorMode (uMode=0x1) returned 0x0 [0100.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x368d4234, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x368d4234, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e2cb2fc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd3)) returned 1 [0100.207] SetErrorMode (uMode=0x0) returned 0x1 [0100.207] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_finished.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_finished.svg.partially.cryptonar")) returned 1 [0100.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", lpFilePart=0x0) returned 0x62 [0100.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", lpFilePart=0x0) returned 0x62 [0100.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", lpFilePart=0x0) returned 0x62 [0100.208] SetErrorMode (uMode=0x1) returned 0x0 [0100.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.209] GetFileType (hFile=0x230) returned 0x1 [0100.209] SetErrorMode (uMode=0x0) returned 0x1 [0100.209] GetFileType (hFile=0x230) returned 0x1 [0100.209] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.209] ReadFile (in: hFile=0x230, lpBuffer=0x285e358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285e358*, lpNumberOfBytesRead=0x5ae8b8*=0x186, lpOverlapped=0x0) returned 1 [0100.209] ReadFile (in: hFile=0x230, lpBuffer=0x285e358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285e358*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.209] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.209] WriteFile (in: hFile=0x230, lpBuffer=0x285e358*, nNumberOfBytesToWrite=0x186, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x285e358*, lpNumberOfBytesWritten=0x5ae8a8*=0x186, lpOverlapped=0x0) returned 1 [0100.210] CloseHandle (hObject=0x230) returned 1 [0100.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", lpFilePart=0x0) returned 0x62 [0100.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg", lpFilePart=0x0) returned 0x62 [0100.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x76 [0100.210] SetErrorMode (uMode=0x1) returned 0x0 [0100.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36f88b5b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x36f88b5b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e2f1493, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1 [0100.210] SetErrorMode (uMode=0x0) returned 0x1 [0100.210] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_hovered.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_hovered.svg.partially.cryptonar")) returned 1 [0100.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x66 [0100.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x66 [0100.211] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x66 [0100.211] SetErrorMode (uMode=0x1) returned 0x0 [0100.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.212] GetFileType (hFile=0x230) returned 0x1 [0100.212] SetErrorMode (uMode=0x0) returned 0x1 [0100.212] GetFileType (hFile=0x230) returned 0x1 [0100.212] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.212] ReadFile (in: hFile=0x230, lpBuffer=0x2861aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2861aa8*, lpNumberOfBytesRead=0x5ae8b8*=0x187, lpOverlapped=0x0) returned 1 [0100.213] ReadFile (in: hFile=0x230, lpBuffer=0x2861aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2861aa8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.213] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.213] WriteFile (in: hFile=0x230, lpBuffer=0x2861aa8*, nNumberOfBytesToWrite=0x187, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2861aa8*, lpNumberOfBytesWritten=0x5ae8a8*=0x187, lpOverlapped=0x0) returned 1 [0100.213] CloseHandle (hObject=0x230) returned 1 [0100.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x66 [0100.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg", lpFilePart=0x0) returned 0x66 [0100.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0100.214] SetErrorMode (uMode=0x1) returned 0x0 [0100.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x376d5e82, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x376d5e82, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e2f1493, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0100.214] SetErrorMode (uMode=0x0) returned 0x1 [0100.214] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_in_progress.svg.partially.cryptonar")) returned 1 [0100.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", lpFilePart=0x0) returned 0x63 [0100.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", lpFilePart=0x0) returned 0x63 [0100.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", lpFilePart=0x0) returned 0x63 [0100.215] SetErrorMode (uMode=0x1) returned 0x0 [0100.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.216] GetFileType (hFile=0x230) returned 0x1 [0100.216] SetErrorMode (uMode=0x0) returned 0x1 [0100.216] GetFileType (hFile=0x230) returned 0x1 [0100.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.216] ReadFile (in: hFile=0x230, lpBuffer=0x2865200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2865200*, lpNumberOfBytesRead=0x5ae8b8*=0x184, lpOverlapped=0x0) returned 1 [0100.217] ReadFile (in: hFile=0x230, lpBuffer=0x2865200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2865200*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.217] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.217] WriteFile (in: hFile=0x230, lpBuffer=0x2865200*, nNumberOfBytesToWrite=0x184, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2865200*, lpNumberOfBytesWritten=0x5ae8a8*=0x184, lpOverlapped=0x0) returned 1 [0100.218] CloseHandle (hObject=0x230) returned 1 [0100.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", lpFilePart=0x0) returned 0x63 [0100.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg", lpFilePart=0x0) returned 0x63 [0100.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x77 [0100.218] SetErrorMode (uMode=0x1) returned 0x0 [0100.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d3e388, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x37d3e388, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e2f1493, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x184)) returned 1 [0100.218] SetErrorMode (uMode=0x0) returned 0x1 [0100.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\checkmark_selected.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\checkmark_selected.svg.partially.cryptonar")) returned 1 [0100.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", lpFilePart=0x0) returned 0x58 [0100.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", lpFilePart=0x0) returned 0x58 [0100.220] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", lpFilePart=0x0) returned 0x58 [0100.220] SetErrorMode (uMode=0x1) returned 0x0 [0100.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.220] GetFileType (hFile=0x230) returned 0x1 [0100.221] SetErrorMode (uMode=0x0) returned 0x1 [0100.221] GetFileType (hFile=0x230) returned 0x1 [0100.221] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.221] ReadFile (in: hFile=0x230, lpBuffer=0x28688c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28688c8*, lpNumberOfBytesRead=0x5ae8b8*=0x127, lpOverlapped=0x0) returned 1 [0100.222] ReadFile (in: hFile=0x230, lpBuffer=0x28688c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28688c8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.223] WriteFile (in: hFile=0x230, lpBuffer=0x28688c8*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28688c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x127, lpOverlapped=0x0) returned 1 [0100.223] CloseHandle (hObject=0x230) returned 1 [0100.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", lpFilePart=0x0) returned 0x58 [0100.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg", lpFilePart=0x0) returned 0x58 [0100.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0100.223] SetErrorMode (uMode=0x1) returned 0x0 [0100.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3843f20a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3843f20a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e2f1493, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x127)) returned 1 [0100.224] SetErrorMode (uMode=0x0) returned 0x1 [0100.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevron.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevron.svg.partially.cryptonar")) returned 1 [0100.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", lpFilePart=0x0) returned 0x5a [0100.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", lpFilePart=0x0) returned 0x5a [0100.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", lpFilePart=0x0) returned 0x5a [0100.225] SetErrorMode (uMode=0x1) returned 0x0 [0100.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.226] GetFileType (hFile=0x230) returned 0x1 [0100.226] SetErrorMode (uMode=0x0) returned 0x1 [0100.226] GetFileType (hFile=0x230) returned 0x1 [0100.226] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.226] ReadFile (in: hFile=0x230, lpBuffer=0x286be78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x286be78*, lpNumberOfBytesRead=0x5ae8b8*=0x108, lpOverlapped=0x0) returned 1 [0100.227] ReadFile (in: hFile=0x230, lpBuffer=0x286be78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x286be78*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.227] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.227] WriteFile (in: hFile=0x230, lpBuffer=0x286be78*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x286be78*, lpNumberOfBytesWritten=0x5ae8a8*=0x108, lpOverlapped=0x0) returned 1 [0100.227] CloseHandle (hObject=0x230) returned 1 [0100.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", lpFilePart=0x0) returned 0x5a [0100.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg", lpFilePart=0x0) returned 0x5a [0100.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0100.227] SetErrorMode (uMode=0x1) returned 0x0 [0100.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38b4008e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x38b4008e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e317767, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0100.228] SetErrorMode (uMode=0x0) returned 0x1 [0100.228] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\chevronUp.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\chevronup.svg.partially.cryptonar")) returned 1 [0100.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", lpFilePart=0x0) returned 0x56 [0100.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", lpFilePart=0x0) returned 0x56 [0100.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", lpFilePart=0x0) returned 0x56 [0100.229] SetErrorMode (uMode=0x1) returned 0x0 [0100.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.229] GetFileType (hFile=0x230) returned 0x1 [0100.229] SetErrorMode (uMode=0x0) returned 0x1 [0100.229] GetFileType (hFile=0x230) returned 0x1 [0100.230] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.230] ReadFile (in: hFile=0x230, lpBuffer=0x286f3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x286f3c8*, lpNumberOfBytesRead=0x5ae8b8*=0x6c7, lpOverlapped=0x0) returned 1 [0100.247] SetFilePointer (in: hFile=0x230, lDistanceToMove=-711, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.247] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.247] WriteFile (in: hFile=0x230, lpBuffer=0x286f3c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x286f3c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.247] CloseHandle (hObject=0x230) returned 1 [0100.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", lpFilePart=0x0) returned 0x56 [0100.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg", lpFilePart=0x0) returned 0x56 [0100.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0100.248] SetErrorMode (uMode=0x1) returned 0x0 [0100.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39240ef4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39240ef4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e33da3c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6c7)) returned 1 [0100.248] SetErrorMode (uMode=0x0) returned 0x1 [0100.248] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\cloud.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\cloud.svg.partially.cryptonar")) returned 1 [0100.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", lpFilePart=0x0) returned 0x5d [0100.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", lpFilePart=0x0) returned 0x5d [0100.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", lpFilePart=0x0) returned 0x5d [0100.249] SetErrorMode (uMode=0x1) returned 0x0 [0100.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.250] GetFileType (hFile=0x230) returned 0x1 [0100.250] SetErrorMode (uMode=0x0) returned 0x1 [0100.250] GetFileType (hFile=0x230) returned 0x1 [0100.250] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.250] ReadFile (in: hFile=0x230, lpBuffer=0x2872b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2872b10*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.272] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.272] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.272] WriteFile (in: hFile=0x230, lpBuffer=0x2872b10*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2872b10*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.272] CloseHandle (hObject=0x230) returned 1 [0100.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", lpFilePart=0x0) returned 0x5d [0100.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg", lpFilePart=0x0) returned 0x5d [0100.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x71 [0100.273] SetErrorMode (uMode=0x1) returned 0x0 [0100.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x398a93f4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x398a93f4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e389e9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7e75)) returned 1 [0100.273] SetErrorMode (uMode=0x0) returned 0x1 [0100.273] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\done_graphic.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\done_graphic.svg.partially.cryptonar")) returned 1 [0100.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", lpFilePart=0x0) returned 0x5a [0100.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", lpFilePart=0x0) returned 0x5a [0100.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", lpFilePart=0x0) returned 0x5a [0100.274] SetErrorMode (uMode=0x1) returned 0x0 [0100.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.274] GetFileType (hFile=0x230) returned 0x1 [0100.274] SetErrorMode (uMode=0x0) returned 0x1 [0100.274] GetFileType (hFile=0x230) returned 0x1 [0100.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.275] ReadFile (in: hFile=0x230, lpBuffer=0x2876290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2876290*, lpNumberOfBytesRead=0x5ae8b8*=0x31d, lpOverlapped=0x0) returned 1 [0100.299] ReadFile (in: hFile=0x230, lpBuffer=0x2876290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2876290*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.299] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.299] WriteFile (in: hFile=0x230, lpBuffer=0x2876290*, nNumberOfBytesToWrite=0x31d, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2876290*, lpNumberOfBytesWritten=0x5ae8a8*=0x31d, lpOverlapped=0x0) returned 1 [0100.300] CloseHandle (hObject=0x230) returned 1 [0100.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", lpFilePart=0x0) returned 0x5a [0100.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg", lpFilePart=0x0) returned 0x5a [0100.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0100.300] SetErrorMode (uMode=0x1) returned 0x0 [0100.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39eeb6b0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x39eeb6b0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e3b000d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1 [0100.300] SetErrorMode (uMode=0x0) returned 0x1 [0100.300] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\errorIcon.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\erroricon.svg.partially.cryptonar")) returned 1 [0100.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", lpFilePart=0x0) returned 0x57 [0100.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", lpFilePart=0x0) returned 0x57 [0100.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", lpFilePart=0x0) returned 0x57 [0100.301] SetErrorMode (uMode=0x1) returned 0x0 [0100.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.302] GetFileType (hFile=0x230) returned 0x1 [0100.302] SetErrorMode (uMode=0x0) returned 0x1 [0100.302] GetFileType (hFile=0x230) returned 0x1 [0100.302] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.302] ReadFile (in: hFile=0x230, lpBuffer=0x2879c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2879c10*, lpNumberOfBytesRead=0x5ae8b8*=0x123, lpOverlapped=0x0) returned 1 [0100.303] ReadFile (in: hFile=0x230, lpBuffer=0x2879c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2879c10*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.303] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.303] WriteFile (in: hFile=0x230, lpBuffer=0x2879c10*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2879c10*, lpNumberOfBytesWritten=0x5ae8a8*=0x123, lpOverlapped=0x0) returned 1 [0100.303] CloseHandle (hObject=0x230) returned 1 [0100.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", lpFilePart=0x0) returned 0x57 [0100.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg", lpFilePart=0x0) returned 0x57 [0100.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0100.303] SetErrorMode (uMode=0x1) returned 0x0 [0100.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a579e12, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3a579e12, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e3d6e76, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x123)) returned 1 [0100.303] SetErrorMode (uMode=0x0) returned 0x1 [0100.303] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder.svg.partially.cryptonar")) returned 1 [0100.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", lpFilePart=0x0) returned 0x65 [0100.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", lpFilePart=0x0) returned 0x65 [0100.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", lpFilePart=0x0) returned 0x65 [0100.305] SetErrorMode (uMode=0x1) returned 0x0 [0100.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.306] GetFileType (hFile=0x230) returned 0x1 [0100.306] SetErrorMode (uMode=0x0) returned 0x1 [0100.306] GetFileType (hFile=0x230) returned 0x1 [0100.306] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.306] ReadFile (in: hFile=0x230, lpBuffer=0x287d210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x287d210*, lpNumberOfBytesRead=0x5ae8b8*=0x79b, lpOverlapped=0x0) returned 1 [0100.323] SetFilePointer (in: hFile=0x230, lDistanceToMove=-923, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.323] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.323] WriteFile (in: hFile=0x230, lpBuffer=0x287d210*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x287d210*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.324] CloseHandle (hObject=0x230) returned 1 [0100.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", lpFilePart=0x0) returned 0x65 [0100.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg", lpFilePart=0x0) returned 0x65 [0100.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x79 [0100.324] SetErrorMode (uMode=0x1) returned 0x0 [0100.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3abbc0cf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3abbc0cf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e3fc5e0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x79b)) returned 1 [0100.324] SetErrorMode (uMode=0x0) returned 0x1 [0100.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_desktop.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_desktop.svg.partially.cryptonar")) returned 1 [0100.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", lpFilePart=0x0) returned 0x67 [0100.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", lpFilePart=0x0) returned 0x67 [0100.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", lpFilePart=0x0) returned 0x67 [0100.326] SetErrorMode (uMode=0x1) returned 0x0 [0100.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.327] GetFileType (hFile=0x230) returned 0x1 [0100.327] SetErrorMode (uMode=0x0) returned 0x1 [0100.327] GetFileType (hFile=0x230) returned 0x1 [0100.327] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.327] ReadFile (in: hFile=0x230, lpBuffer=0x2880a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2880a68*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.368] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.368] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.368] WriteFile (in: hFile=0x230, lpBuffer=0x2880a68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2880a68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.369] CloseHandle (hObject=0x230) returned 1 [0100.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", lpFilePart=0x0) returned 0x67 [0100.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg", lpFilePart=0x0) returned 0x67 [0100.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0100.383] SetErrorMode (uMode=0x1) returned 0x0 [0100.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b24a830, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b24a830, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e494f1c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5031)) returned 1 [0100.383] SetErrorMode (uMode=0x0) returned 0x1 [0100.383] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_documents.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_documents.svg.partially.cryptonar")) returned 1 [0100.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", lpFilePart=0x0) returned 0x66 [0100.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", lpFilePart=0x0) returned 0x66 [0100.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", lpFilePart=0x0) returned 0x66 [0100.385] SetErrorMode (uMode=0x1) returned 0x0 [0100.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.386] GetFileType (hFile=0x230) returned 0x1 [0100.386] SetErrorMode (uMode=0x0) returned 0x1 [0100.386] GetFileType (hFile=0x230) returned 0x1 [0100.386] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.386] ReadFile (in: hFile=0x230, lpBuffer=0x28842c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28842c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.388] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.388] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.388] WriteFile (in: hFile=0x230, lpBuffer=0x28842c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28842c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.388] CloseHandle (hObject=0x230) returned 1 [0100.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", lpFilePart=0x0) returned 0x66 [0100.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg", lpFilePart=0x0) returned 0x66 [0100.388] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0100.388] SetErrorMode (uMode=0x1) returned 0x0 [0100.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b8ff1f8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3b8ff1f8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e494f1c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3100)) returned 1 [0100.388] SetErrorMode (uMode=0x0) returned 0x1 [0100.388] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\folder_image_pictures.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\folder_image_pictures.svg.partially.cryptonar")) returned 1 [0100.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", lpFilePart=0x0) returned 0x5a [0100.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", lpFilePart=0x0) returned 0x5a [0100.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", lpFilePart=0x0) returned 0x5a [0100.389] SetErrorMode (uMode=0x1) returned 0x0 [0100.389] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.390] GetFileType (hFile=0x230) returned 0x1 [0100.390] SetErrorMode (uMode=0x0) returned 0x1 [0100.390] GetFileType (hFile=0x230) returned 0x1 [0100.390] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.390] ReadFile (in: hFile=0x230, lpBuffer=0x2887aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2887aa0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.410] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.410] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.410] WriteFile (in: hFile=0x230, lpBuffer=0x2887aa0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2887aa0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.410] CloseHandle (hObject=0x230) returned 1 [0100.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", lpFilePart=0x0) returned 0x5a [0100.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg", lpFilePart=0x0) returned 0x5a [0100.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0100.411] SetErrorMode (uMode=0x1) returned 0x0 [0100.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfd9e02, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3bfd9e02, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e4bf8e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x172e)) returned 1 [0100.411] SetErrorMode (uMode=0x0) returned 0x1 [0100.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\iceBucket.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\icebucket.svg.partially.cryptonar")) returned 1 [0100.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", lpFilePart=0x0) returned 0x58 [0100.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", lpFilePart=0x0) returned 0x58 [0100.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", lpFilePart=0x0) returned 0x58 [0100.413] SetErrorMode (uMode=0x1) returned 0x0 [0100.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.413] GetFileType (hFile=0x230) returned 0x1 [0100.413] SetErrorMode (uMode=0x0) returned 0x1 [0100.413] GetFileType (hFile=0x230) returned 0x1 [0100.414] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.414] ReadFile (in: hFile=0x230, lpBuffer=0x288b1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x288b1e0*, lpNumberOfBytesRead=0x5ae8b8*=0x2ce, lpOverlapped=0x0) returned 1 [0100.414] ReadFile (in: hFile=0x230, lpBuffer=0x288b1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x288b1e0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.414] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.415] WriteFile (in: hFile=0x230, lpBuffer=0x288b1e0*, nNumberOfBytesToWrite=0x2ce, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x288b1e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x2ce, lpOverlapped=0x0) returned 1 [0100.415] CloseHandle (hObject=0x230) returned 1 [0100.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", lpFilePart=0x0) returned 0x58 [0100.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg", lpFilePart=0x0) returned 0x58 [0100.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0100.415] SetErrorMode (uMode=0x1) returned 0x0 [0100.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c68e7db, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3c68e7db, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e4e1324, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ce)) returned 1 [0100.415] SetErrorMode (uMode=0x0) returned 0x1 [0100.415] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading.svg.partially.cryptonar")) returned 1 [0100.444] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", lpFilePart=0x0) returned 0x60 [0100.473] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", lpFilePart=0x0) returned 0x60 [0100.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", lpFilePart=0x0) returned 0x60 [0100.474] SetErrorMode (uMode=0x1) returned 0x0 [0100.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.475] GetFileType (hFile=0x230) returned 0x1 [0100.475] SetErrorMode (uMode=0x0) returned 0x1 [0100.475] GetFileType (hFile=0x230) returned 0x1 [0100.475] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.475] ReadFile (in: hFile=0x230, lpBuffer=0x288eb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x288eb20*, lpNumberOfBytesRead=0x5ae8b8*=0x1b0, lpOverlapped=0x0) returned 1 [0100.477] ReadFile (in: hFile=0x230, lpBuffer=0x288eb20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x288eb20*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.477] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.477] WriteFile (in: hFile=0x230, lpBuffer=0x288eb20*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x288eb20*, lpNumberOfBytesWritten=0x5ae8a8*=0x1b0, lpOverlapped=0x0) returned 1 [0100.477] CloseHandle (hObject=0x230) returned 1 [0100.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", lpFilePart=0x0) returned 0x60 [0100.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg", lpFilePart=0x0) returned 0x60 [0100.477] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x74 [0100.477] SetErrorMode (uMode=0x1) returned 0x0 [0100.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdb58a6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3cdb58a6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e579f29, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0100.478] SetErrorMode (uMode=0x0) returned 0x1 [0100.478] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\loading_spinner.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\loading_spinner.svg.partially.cryptonar")) returned 1 [0100.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", lpFilePart=0x0) returned 0x5e [0100.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", lpFilePart=0x0) returned 0x5e [0100.479] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", lpFilePart=0x0) returned 0x5e [0100.479] SetErrorMode (uMode=0x1) returned 0x0 [0100.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.480] GetFileType (hFile=0x230) returned 0x1 [0100.480] SetErrorMode (uMode=0x0) returned 0x1 [0100.480] GetFileType (hFile=0x230) returned 0x1 [0100.480] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.480] ReadFile (in: hFile=0x230, lpBuffer=0x2892268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2892268*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.490] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.490] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.490] WriteFile (in: hFile=0x230, lpBuffer=0x2892268*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2892268*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.490] CloseHandle (hObject=0x230) returned 1 [0100.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", lpFilePart=0x0) returned 0x5e [0100.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg", lpFilePart=0x0) returned 0x5e [0100.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x72 [0100.493] SetErrorMode (uMode=0x1) returned 0x0 [0100.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d54f06c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3d54f06c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e59fd7f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d50)) returned 1 [0100.493] SetErrorMode (uMode=0x0) returned 0x1 [0100.493] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandFiles.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandfiles.svg.partially.cryptonar")) returned 1 [0100.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", lpFilePart=0x0) returned 0x66 [0100.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", lpFilePart=0x0) returned 0x66 [0100.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", lpFilePart=0x0) returned 0x66 [0100.495] SetErrorMode (uMode=0x1) returned 0x0 [0100.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.495] GetFileType (hFile=0x230) returned 0x1 [0100.495] SetErrorMode (uMode=0x0) returned 0x1 [0100.495] GetFileType (hFile=0x230) returned 0x1 [0100.495] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.496] ReadFile (in: hFile=0x230, lpBuffer=0x2895a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2895a60*, lpNumberOfBytesRead=0x5ae8b8*=0xa54, lpOverlapped=0x0) returned 1 [0100.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1620, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.516] WriteFile (in: hFile=0x230, lpBuffer=0x2895a60*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2895a60*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.516] CloseHandle (hObject=0x230) returned 1 [0100.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", lpFilePart=0x0) returned 0x66 [0100.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg", lpFilePart=0x0) returned 0x66 [0100.516] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0100.516] SetErrorMode (uMode=0x1) returned 0x0 [0100.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dbdd7ce, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3dbdd7ce, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e5c6214, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0100.517] SetErrorMode (uMode=0x0) returned 0x1 [0100.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onDemandSelectiveSync.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\ondemandselectivesync.svg.partially.cryptonar")) returned 1 [0100.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", lpFilePart=0x0) returned 0x60 [0100.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", lpFilePart=0x0) returned 0x60 [0100.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", lpFilePart=0x0) returned 0x60 [0100.518] SetErrorMode (uMode=0x1) returned 0x0 [0100.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.519] GetFileType (hFile=0x230) returned 0x1 [0100.519] SetErrorMode (uMode=0x0) returned 0x1 [0100.519] GetFileType (hFile=0x230) returned 0x1 [0100.519] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.519] ReadFile (in: hFile=0x230, lpBuffer=0x2899280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2899280*, lpNumberOfBytesRead=0x5ae8b8*=0x46c, lpOverlapped=0x0) returned 1 [0100.552] SetFilePointer (in: hFile=0x230, lDistanceToMove=-108, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.552] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.552] WriteFile (in: hFile=0x230, lpBuffer=0x2899280*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2899280*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.552] CloseHandle (hObject=0x230) returned 1 [0100.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", lpFilePart=0x0) returned 0x60 [0100.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg", lpFilePart=0x0) returned 0x60 [0100.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x74 [0100.553] SetErrorMode (uMode=0x1) returned 0x0 [0100.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3c3473, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3e3c3473, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e6390b7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46c)) returned 1 [0100.553] SetErrorMode (uMode=0x0) returned 0x1 [0100.553] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\onedrivePremium.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\onedrivepremium.svg.partially.cryptonar")) returned 1 [0100.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", lpFilePart=0x0) returned 0x5d [0100.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", lpFilePart=0x0) returned 0x5d [0100.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", lpFilePart=0x0) returned 0x5d [0100.554] SetErrorMode (uMode=0x1) returned 0x0 [0100.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.555] GetFileType (hFile=0x230) returned 0x1 [0100.555] SetErrorMode (uMode=0x0) returned 0x1 [0100.555] GetFileType (hFile=0x230) returned 0x1 [0100.555] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.555] ReadFile (in: hFile=0x230, lpBuffer=0x289ca50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x289ca50*, lpNumberOfBytesRead=0x5ae8b8*=0x3db, lpOverlapped=0x0) returned 1 [0100.582] ReadFile (in: hFile=0x230, lpBuffer=0x289ca50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x289ca50*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.582] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.582] WriteFile (in: hFile=0x230, lpBuffer=0x289ca50*, nNumberOfBytesToWrite=0x3db, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x289ca50*, lpNumberOfBytesWritten=0x5ae8a8*=0x3db, lpOverlapped=0x0) returned 1 [0100.583] CloseHandle (hObject=0x230) returned 1 [0100.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", lpFilePart=0x0) returned 0x5d [0100.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg", lpFilePart=0x0) returned 0x5d [0100.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x71 [0100.583] SetErrorMode (uMode=0x1) returned 0x0 [0100.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea9e081, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3ea9e081, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e684c89, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3db)) returned 1 [0100.583] SetErrorMode (uMode=0x0) returned 0x1 [0100.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIcon.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowicon.svg.partially.cryptonar")) returned 1 [0100.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", lpFilePart=0x0) returned 0x62 [0100.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", lpFilePart=0x0) returned 0x62 [0100.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", lpFilePart=0x0) returned 0x62 [0100.584] SetErrorMode (uMode=0x1) returned 0x0 [0100.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.585] GetFileType (hFile=0x230) returned 0x1 [0100.585] SetErrorMode (uMode=0x0) returned 0x1 [0100.585] GetFileType (hFile=0x230) returned 0x1 [0100.585] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.585] ReadFile (in: hFile=0x230, lpBuffer=0x28a05f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a05f8*, lpNumberOfBytesRead=0x5ae8b8*=0x390, lpOverlapped=0x0) returned 1 [0100.612] ReadFile (in: hFile=0x230, lpBuffer=0x28a05f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a05f8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0100.612] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.612] WriteFile (in: hFile=0x230, lpBuffer=0x28a05f8*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a05f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x390, lpOverlapped=0x0) returned 1 [0100.612] CloseHandle (hObject=0x230) returned 1 [0100.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", lpFilePart=0x0) returned 0x62 [0100.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg", lpFilePart=0x0) returned 0x62 [0100.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x76 [0100.612] SetErrorMode (uMode=0x1) returned 0x0 [0100.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f152a3e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f152a3e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e6aafbe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x390)) returned 1 [0100.612] SetErrorMode (uMode=0x0) returned 0x1 [0100.613] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\overflowIconWhite.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\overflowiconwhite.svg.partially.cryptonar")) returned 1 [0100.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", lpFilePart=0x0) returned 0x62 [0100.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", lpFilePart=0x0) returned 0x62 [0100.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", lpFilePart=0x0) returned 0x62 [0100.614] SetErrorMode (uMode=0x1) returned 0x0 [0100.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.617] GetFileType (hFile=0x230) returned 0x1 [0100.617] SetErrorMode (uMode=0x0) returned 0x1 [0100.617] GetFileType (hFile=0x230) returned 0x1 [0100.617] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.617] ReadFile (in: hFile=0x230, lpBuffer=0x28a4130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a4130*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.621] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.621] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.621] WriteFile (in: hFile=0x230, lpBuffer=0x28a4130*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a4130*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.622] CloseHandle (hObject=0x230) returned 1 [0100.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", lpFilePart=0x0) returned 0x62 [0100.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg", lpFilePart=0x0) returned 0x62 [0100.622] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x76 [0100.622] SetErrorMode (uMode=0x1) returned 0x0 [0100.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7e119c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3f7e119c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e6d1138, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0100.622] SetErrorMode (uMode=0x0) returned 0x1 [0100.622] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\partiallyFreezing.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\partiallyfreezing.svg.partially.cryptonar")) returned 1 [0100.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", lpFilePart=0x0) returned 0x59 [0100.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", lpFilePart=0x0) returned 0x59 [0100.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", lpFilePart=0x0) returned 0x59 [0100.623] SetErrorMode (uMode=0x1) returned 0x0 [0100.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.624] GetFileType (hFile=0x230) returned 0x1 [0100.624] SetErrorMode (uMode=0x0) returned 0x1 [0100.624] GetFileType (hFile=0x230) returned 0x1 [0100.625] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.625] ReadFile (in: hFile=0x230, lpBuffer=0x28a78e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a78e0*, lpNumberOfBytesRead=0x5ae8b8*=0x56d, lpOverlapped=0x0) returned 1 [0100.633] SetFilePointer (in: hFile=0x230, lDistanceToMove=-365, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.633] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.633] WriteFile (in: hFile=0x230, lpBuffer=0x28a78e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a78e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.633] CloseHandle (hObject=0x230) returned 1 [0100.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", lpFilePart=0x0) returned 0x59 [0100.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg", lpFilePart=0x0) returned 0x59 [0100.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0100.634] SetErrorMode (uMode=0x1) returned 0x0 [0100.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe95b60, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x3fe95b60, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e6f745a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x56d)) returned 1 [0100.634] SetErrorMode (uMode=0x0) returned 0x1 [0100.634] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settings.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settings.svg.partially.cryptonar")) returned 1 [0100.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", lpFilePart=0x0) returned 0x61 [0100.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", lpFilePart=0x0) returned 0x61 [0100.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", lpFilePart=0x0) returned 0x61 [0100.635] SetErrorMode (uMode=0x1) returned 0x0 [0100.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.636] GetFileType (hFile=0x230) returned 0x1 [0100.636] SetErrorMode (uMode=0x0) returned 0x1 [0100.636] GetFileType (hFile=0x230) returned 0x1 [0100.636] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.636] ReadFile (in: hFile=0x230, lpBuffer=0x28ab080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28ab080*, lpNumberOfBytesRead=0x5ae8b8*=0x56f, lpOverlapped=0x0) returned 1 [0100.638] SetFilePointer (in: hFile=0x230, lDistanceToMove=-367, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.638] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.638] WriteFile (in: hFile=0x230, lpBuffer=0x28ab080*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28ab080*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.638] CloseHandle (hObject=0x230) returned 1 [0100.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", lpFilePart=0x0) returned 0x61 [0100.638] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg", lpFilePart=0x0) returned 0x61 [0100.639] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x75 [0100.639] SetErrorMode (uMode=0x1) returned 0x0 [0100.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4054a579, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4054a579, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e6f745a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x56f)) returned 1 [0100.639] SetErrorMode (uMode=0x0) returned 0x1 [0100.639] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\settingsdisabled.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\settingsdisabled.svg.partially.cryptonar")) returned 1 [0100.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", lpFilePart=0x0) returned 0x57 [0100.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", lpFilePart=0x0) returned 0x57 [0100.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", lpFilePart=0x0) returned 0x57 [0100.640] SetErrorMode (uMode=0x1) returned 0x0 [0100.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.641] GetFileType (hFile=0x230) returned 0x1 [0100.641] SetErrorMode (uMode=0x0) returned 0x1 [0100.641] GetFileType (hFile=0x230) returned 0x1 [0100.641] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.641] ReadFile (in: hFile=0x230, lpBuffer=0x28ae808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28ae808*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.642] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.642] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.643] WriteFile (in: hFile=0x230, lpBuffer=0x28ae808*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28ae808*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.643] CloseHandle (hObject=0x230) returned 1 [0100.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", lpFilePart=0x0) returned 0x57 [0100.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg", lpFilePart=0x0) returned 0x57 [0100.643] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0100.643] SetErrorMode (uMode=0x1) returned 0x0 [0100.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bb2a3c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x40bb2a3c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e6f745a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4)) returned 1 [0100.644] SetErrorMode (uMode=0x0) returned 0x1 [0100.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\signIn.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\signin.svg.partially.cryptonar")) returned 1 [0100.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", lpFilePart=0x0) returned 0x60 [0100.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", lpFilePart=0x0) returned 0x60 [0100.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", lpFilePart=0x0) returned 0x60 [0100.645] SetErrorMode (uMode=0x1) returned 0x0 [0100.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.646] GetFileType (hFile=0x230) returned 0x1 [0100.646] SetErrorMode (uMode=0x0) returned 0x1 [0100.646] GetFileType (hFile=0x230) returned 0x1 [0100.646] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.646] ReadFile (in: hFile=0x230, lpBuffer=0x28b1f68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b1f68*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.648] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.648] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.648] WriteFile (in: hFile=0x230, lpBuffer=0x28b1f68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b1f68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.648] CloseHandle (hObject=0x230) returned 1 [0100.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", lpFilePart=0x0) returned 0x60 [0100.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg", lpFilePart=0x0) returned 0x60 [0100.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x74 [0100.677] SetErrorMode (uMode=0x1) returned 0x0 [0100.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41325fa9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41325fa9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e76997c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12c7)) returned 1 [0100.677] SetErrorMode (uMode=0x0) returned 0x1 [0100.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\stackedIceCubes.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\stackedicecubes.svg.partially.cryptonar")) returned 1 [0100.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", lpFilePart=0x0) returned 0x5b [0100.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", lpFilePart=0x0) returned 0x5b [0100.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", lpFilePart=0x0) returned 0x5b [0100.678] SetErrorMode (uMode=0x1) returned 0x0 [0100.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.679] GetFileType (hFile=0x230) returned 0x1 [0100.679] SetErrorMode (uMode=0x0) returned 0x1 [0100.679] GetFileType (hFile=0x230) returned 0x1 [0100.679] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.679] ReadFile (in: hFile=0x230, lpBuffer=0x28b5710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b5710*, lpNumberOfBytesRead=0x5ae8b8*=0x72d, lpOverlapped=0x0) returned 1 [0100.701] SetFilePointer (in: hFile=0x230, lDistanceToMove=-813, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.701] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.701] WriteFile (in: hFile=0x230, lpBuffer=0x28b5710*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b5710*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.701] CloseHandle (hObject=0x230) returned 1 [0100.701] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", lpFilePart=0x0) returned 0x5b [0100.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg", lpFilePart=0x0) returned 0x5b [0100.702] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg.partially.cryptoNar", lpFilePart=0x0) returned 0x6f [0100.702] SetErrorMode (uMode=0x1) returned 0x0 [0100.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41a00bc2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41a00bc2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e78fdf6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x72d)) returned 1 [0100.702] SetErrorMode (uMode=0x0) returned 0x1 [0100.702] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\images\\waterGlass.svg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\images\\waterglass.svg.partially.cryptonar")) returned 1 [0100.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.703] SetErrorMode (uMode=0x1) returned 0x0 [0100.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.704] GetFileType (hFile=0x230) returned 0x1 [0100.704] SetErrorMode (uMode=0x0) returned 0x1 [0100.704] GetFileType (hFile=0x230) returned 0x1 [0100.704] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.704] ReadFile (in: hFile=0x230, lpBuffer=0x28b8f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b8f28*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.723] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.723] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.723] WriteFile (in: hFile=0x230, lpBuffer=0x28b8f28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b8f28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.723] CloseHandle (hObject=0x230) returned 1 [0100.740] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0100.741] SetErrorMode (uMode=0x1) returned 0x0 [0100.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41faa50a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x41faa50a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e80252b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0100.741] SetErrorMode (uMode=0x0) returned 0x1 [0100.741] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\is\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\is\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.742] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.742] SetErrorMode (uMode=0x1) returned 0x0 [0100.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.743] GetFileType (hFile=0x230) returned 0x1 [0100.743] SetErrorMode (uMode=0x0) returned 0x1 [0100.743] GetFileType (hFile=0x230) returned 0x1 [0100.743] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.743] ReadFile (in: hFile=0x230, lpBuffer=0x28bc828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28bc828*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.762] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.762] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.762] WriteFile (in: hFile=0x230, lpBuffer=0x28bc828*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28bc828*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.763] CloseHandle (hObject=0x230) returned 1 [0100.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0100.764] SetErrorMode (uMode=0x1) returned 0x0 [0100.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42612a1e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42612a1e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e82c0f6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23cd0)) returned 1 [0100.764] SetErrorMode (uMode=0x0) returned 0x1 [0100.764] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\it\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\it\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.765] SetErrorMode (uMode=0x1) returned 0x0 [0100.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.766] GetFileType (hFile=0x230) returned 0x1 [0100.766] SetErrorMode (uMode=0x0) returned 0x1 [0100.766] GetFileType (hFile=0x230) returned 0x1 [0100.795] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.795] ReadFile (in: hFile=0x230, lpBuffer=0x26c0f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c0f30*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.797] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.797] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.797] WriteFile (in: hFile=0x230, lpBuffer=0x26c0f30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c0f30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.797] CloseHandle (hObject=0x230) returned 1 [0100.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.816] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0100.816] SetErrorMode (uMode=0x1) returned 0x0 [0100.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d39b76, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x42d39b76, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e8a06fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x168c8)) returned 1 [0100.816] SetErrorMode (uMode=0x0) returned 0x1 [0100.816] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ja\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ja\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.819] SetErrorMode (uMode=0x1) returned 0x0 [0100.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.822] GetFileType (hFile=0x230) returned 0x1 [0100.822] SetErrorMode (uMode=0x0) returned 0x1 [0100.822] GetFileType (hFile=0x230) returned 0x1 [0100.822] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.822] ReadFile (in: hFile=0x230, lpBuffer=0x26c4830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c4830*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.833] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.833] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.833] WriteFile (in: hFile=0x230, lpBuffer=0x26c4830*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c4830*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.834] CloseHandle (hObject=0x230) returned 1 [0100.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.859] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0100.859] SetErrorMode (uMode=0x1) returned 0x0 [0100.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4343a950, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4343a950, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e925dd1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0100.860] SetErrorMode (uMode=0x0) returned 0x1 [0100.860] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ka\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ka\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.861] SetErrorMode (uMode=0x1) returned 0x0 [0100.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.863] GetFileType (hFile=0x230) returned 0x1 [0100.863] SetErrorMode (uMode=0x0) returned 0x1 [0100.863] GetFileType (hFile=0x230) returned 0x1 [0100.863] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.863] ReadFile (in: hFile=0x230, lpBuffer=0x26c8130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c8130*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.893] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.893] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.893] WriteFile (in: hFile=0x230, lpBuffer=0x26c8130*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c8130*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.893] CloseHandle (hObject=0x230) returned 1 [0100.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0100.910] SetErrorMode (uMode=0x1) returned 0x0 [0100.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442d4fb5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x442d4fb5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e99c3e7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23ed0)) returned 1 [0100.910] SetErrorMode (uMode=0x0) returned 0x1 [0100.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kk\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0100.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0100.911] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0100.911] SetErrorMode (uMode=0x1) returned 0x0 [0100.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.912] GetFileType (hFile=0x230) returned 0x1 [0100.912] SetErrorMode (uMode=0x0) returned 0x1 [0100.912] GetFileType (hFile=0x230) returned 0x1 [0100.912] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.912] ReadFile (in: hFile=0x230, lpBuffer=0x26cba30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cba30*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.933] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.934] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.934] WriteFile (in: hFile=0x230, lpBuffer=0x26cba30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cba30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.934] CloseHandle (hObject=0x230) returned 1 [0100.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0100.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0100.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0100.948] SetErrorMode (uMode=0x1) returned 0x0 [0100.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449afbc7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x449afbc7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3e9e8eab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x21cd0)) returned 1 [0100.949] SetErrorMode (uMode=0x0) returned 0x1 [0100.949] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\km-kh\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\km-kh\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.950] SetErrorMode (uMode=0x1) returned 0x0 [0100.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.951] GetFileType (hFile=0x230) returned 0x1 [0100.951] SetErrorMode (uMode=0x0) returned 0x1 [0100.951] GetFileType (hFile=0x230) returned 0x1 [0100.951] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.951] ReadFile (in: hFile=0x230, lpBuffer=0x26cf330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cf330*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.973] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.973] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.973] WriteFile (in: hFile=0x230, lpBuffer=0x26cf330*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cf330*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.974] CloseHandle (hObject=0x230) returned 1 [0100.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0100.974] SetErrorMode (uMode=0x1) returned 0x0 [0100.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x450fcedc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x450fcedc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ea34d78, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x252d0)) returned 1 [0100.974] SetErrorMode (uMode=0x0) returned 0x1 [0100.974] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kn\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.976] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.976] SetErrorMode (uMode=0x1) returned 0x0 [0100.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0100.977] GetFileType (hFile=0x230) returned 0x1 [0100.977] SetErrorMode (uMode=0x0) returned 0x1 [0100.977] GetFileType (hFile=0x230) returned 0x1 [0100.977] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.977] ReadFile (in: hFile=0x230, lpBuffer=0x26d2c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d2c30*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0100.990] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0100.991] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0100.993] WriteFile (in: hFile=0x230, lpBuffer=0x26d2c30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d2c30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0100.994] CloseHandle (hObject=0x230) returned 1 [0100.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0100.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0100.994] SetErrorMode (uMode=0x1) returned 0x0 [0100.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4578b64c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4578b64c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ea70311, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x158d0)) returned 1 [0100.995] SetErrorMode (uMode=0x0) returned 0x1 [0100.995] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ko\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ko\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0100.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6d [0100.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6d [0100.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6d [0100.998] SetErrorMode (uMode=0x1) returned 0x0 [0100.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.003] GetFileType (hFile=0x230) returned 0x1 [0101.003] SetErrorMode (uMode=0x0) returned 0x1 [0101.003] GetFileType (hFile=0x230) returned 0x1 [0101.003] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.003] ReadFile (in: hFile=0x230, lpBuffer=0x26d6530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d6530*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.043] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.043] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.043] WriteFile (in: hFile=0x230, lpBuffer=0x26d6530*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d6530*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.043] CloseHandle (hObject=0x230) returned 1 [0101.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6d [0101.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6d [0101.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x81 [0101.067] SetErrorMode (uMode=0x1) returned 0x0 [0101.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4629242a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4629242a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3eb039f5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0101.068] SetErrorMode (uMode=0x0) returned 0x1 [0101.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\kok\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\kok\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0101.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0101.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0101.069] SetErrorMode (uMode=0x1) returned 0x0 [0101.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.071] GetFileType (hFile=0x230) returned 0x1 [0101.071] SetErrorMode (uMode=0x0) returned 0x1 [0101.071] GetFileType (hFile=0x230) returned 0x1 [0101.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.071] ReadFile (in: hFile=0x230, lpBuffer=0x26d9e48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d9e48*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.086] WriteFile (in: hFile=0x230, lpBuffer=0x26d9e48*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d9e48*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.087] CloseHandle (hObject=0x230) returned 1 [0101.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0101.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0101.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0101.088] SetErrorMode (uMode=0x1) returned 0x0 [0101.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46946de7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x46946de7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3eb4fd7e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22cc8)) returned 1 [0101.088] SetErrorMode (uMode=0x0) returned 0x1 [0101.088] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ku-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ku-arab\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.090] SetErrorMode (uMode=0x1) returned 0x0 [0101.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.090] GetFileType (hFile=0x230) returned 0x1 [0101.090] SetErrorMode (uMode=0x0) returned 0x1 [0101.091] GetFileType (hFile=0x230) returned 0x1 [0101.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.091] ReadFile (in: hFile=0x230, lpBuffer=0x26dd778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26dd778*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.105] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.106] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.106] WriteFile (in: hFile=0x230, lpBuffer=0x26dd778*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26dd778*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.106] CloseHandle (hObject=0x230) returned 1 [0101.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.124] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0101.124] SetErrorMode (uMode=0x1) returned 0x0 [0101.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4706deb9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4706deb9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3eb9c433, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x226d0)) returned 1 [0101.125] SetErrorMode (uMode=0x0) returned 0x1 [0101.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ky\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ky\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.127] SetErrorMode (uMode=0x1) returned 0x0 [0101.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.128] GetFileType (hFile=0x230) returned 0x1 [0101.128] SetErrorMode (uMode=0x0) returned 0x1 [0101.128] GetFileType (hFile=0x230) returned 0x1 [0101.128] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.128] ReadFile (in: hFile=0x230, lpBuffer=0x26e1078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e1078*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.131] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.131] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.131] WriteFile (in: hFile=0x230, lpBuffer=0x26e1078*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e1078*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.132] CloseHandle (hObject=0x230) returned 1 [0101.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.149] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0101.150] SetErrorMode (uMode=0x1) returned 0x0 [0101.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4779501b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4779501b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ebe8936, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x25ad0)) returned 1 [0101.150] SetErrorMode (uMode=0x0) returned 0x1 [0101.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lb-lu\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lb-lu\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.152] SetErrorMode (uMode=0x1) returned 0x0 [0101.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.154] GetFileType (hFile=0x230) returned 0x1 [0101.154] SetErrorMode (uMode=0x0) returned 0x1 [0101.154] GetFileType (hFile=0x230) returned 0x1 [0101.154] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.154] ReadFile (in: hFile=0x230, lpBuffer=0x26e4978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e4978*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.161] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.161] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.162] WriteFile (in: hFile=0x230, lpBuffer=0x26e4978*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e4978*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.163] CloseHandle (hObject=0x230) returned 1 [0101.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0101.165] SetErrorMode (uMode=0x1) returned 0x0 [0101.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47fffd34, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x47fffd34, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ebe8936, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0101.166] SetErrorMode (uMode=0x0) returned 0x1 [0101.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lt\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.168] SetErrorMode (uMode=0x1) returned 0x0 [0101.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.178] GetFileType (hFile=0x230) returned 0x1 [0101.179] SetErrorMode (uMode=0x0) returned 0x1 [0101.179] GetFileType (hFile=0x230) returned 0x1 [0101.179] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.180] ReadFile (in: hFile=0x230, lpBuffer=0x26e8278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e8278*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.197] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.197] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.197] WriteFile (in: hFile=0x230, lpBuffer=0x26e8278*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e8278*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.197] CloseHandle (hObject=0x230) returned 1 [0101.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0101.209] SetErrorMode (uMode=0x1) returned 0x0 [0101.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4870a24b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4870a24b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ec5b11b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22ed0)) returned 1 [0101.209] SetErrorMode (uMode=0x0) returned 0x1 [0101.209] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\lv\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\lv\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.211] SetErrorMode (uMode=0x1) returned 0x0 [0101.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.212] GetFileType (hFile=0x230) returned 0x1 [0101.212] SetErrorMode (uMode=0x0) returned 0x1 [0101.212] GetFileType (hFile=0x230) returned 0x1 [0101.212] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.212] ReadFile (in: hFile=0x230, lpBuffer=0x26ebb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ebb78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.274] WriteFile (in: hFile=0x230, lpBuffer=0x26ebb78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ebb78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.274] CloseHandle (hObject=0x230) returned 1 [0101.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0101.290] SetErrorMode (uMode=0x1) returned 0x0 [0101.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48dbebfb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x48dbebfb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ed3fe28, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0101.290] SetErrorMode (uMode=0x0) returned 0x1 [0101.290] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mi-nz\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mi-nz\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.292] SetErrorMode (uMode=0x1) returned 0x0 [0101.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.292] GetFileType (hFile=0x230) returned 0x1 [0101.292] SetErrorMode (uMode=0x0) returned 0x1 [0101.292] GetFileType (hFile=0x230) returned 0x1 [0101.292] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.292] ReadFile (in: hFile=0x230, lpBuffer=0x26ef478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ef478*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.313] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.313] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.314] WriteFile (in: hFile=0x230, lpBuffer=0x26ef478*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ef478*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.314] CloseHandle (hObject=0x230) returned 1 [0101.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0101.331] SetErrorMode (uMode=0x1) returned 0x0 [0101.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4944d363, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4944d363, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ed8c1ae, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0101.331] SetErrorMode (uMode=0x0) returned 0x1 [0101.331] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mk\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.332] SetErrorMode (uMode=0x1) returned 0x0 [0101.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.333] GetFileType (hFile=0x230) returned 0x1 [0101.333] SetErrorMode (uMode=0x0) returned 0x1 [0101.333] GetFileType (hFile=0x230) returned 0x1 [0101.333] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.333] ReadFile (in: hFile=0x230, lpBuffer=0x26f2d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f2d78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.353] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.353] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.353] WriteFile (in: hFile=0x230, lpBuffer=0x26f2d78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f2d78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.353] CloseHandle (hObject=0x230) returned 1 [0101.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0101.396] SetErrorMode (uMode=0x1) returned 0x0 [0101.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b4e266, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49b4e266, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ee24c78, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x268d0)) returned 1 [0101.397] SetErrorMode (uMode=0x0) returned 0x1 [0101.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ml-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ml-in\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.398] SetErrorMode (uMode=0x1) returned 0x0 [0101.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.399] GetFileType (hFile=0x230) returned 0x1 [0101.399] SetErrorMode (uMode=0x0) returned 0x1 [0101.399] GetFileType (hFile=0x230) returned 0x1 [0101.399] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.399] ReadFile (in: hFile=0x230, lpBuffer=0x26f6678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f6678*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.401] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.401] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.401] WriteFile (in: hFile=0x230, lpBuffer=0x26f6678*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f6678*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.401] CloseHandle (hObject=0x230) returned 1 [0101.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.401] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0101.401] SetErrorMode (uMode=0x1) returned 0x0 [0101.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49fecab5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x49fecab5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ee4b937, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0101.401] SetErrorMode (uMode=0x0) returned 0x1 [0101.401] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mn\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.402] SetErrorMode (uMode=0x1) returned 0x0 [0101.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.403] GetFileType (hFile=0x230) returned 0x1 [0101.403] SetErrorMode (uMode=0x0) returned 0x1 [0101.403] GetFileType (hFile=0x230) returned 0x1 [0101.403] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.403] ReadFile (in: hFile=0x230, lpBuffer=0x26f9f78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f9f78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.423] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.423] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.423] WriteFile (in: hFile=0x230, lpBuffer=0x26f9f78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f9f78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.424] CloseHandle (hObject=0x230) returned 1 [0101.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0101.424] SetErrorMode (uMode=0x1) returned 0x0 [0101.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a35a0bc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4a35a0bc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ee84e79, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0101.424] SetErrorMode (uMode=0x0) returned 0x1 [0101.424] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mr\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.425] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.426] SetErrorMode (uMode=0x1) returned 0x0 [0101.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.426] GetFileType (hFile=0x230) returned 0x1 [0101.426] SetErrorMode (uMode=0x0) returned 0x1 [0101.426] GetFileType (hFile=0x230) returned 0x1 [0101.426] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.427] ReadFile (in: hFile=0x230, lpBuffer=0x26fd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fd878*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.433] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.433] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.433] WriteFile (in: hFile=0x230, lpBuffer=0x26fd878*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26fd878*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.434] CloseHandle (hObject=0x230) returned 1 [0101.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.441] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0101.441] SetErrorMode (uMode=0x1) returned 0x0 [0101.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b1f43d0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b1f43d0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ee97313, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0101.441] SetErrorMode (uMode=0x0) returned 0x1 [0101.441] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ms\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ms\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.442] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.443] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.443] SetErrorMode (uMode=0x1) returned 0x0 [0101.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.444] GetFileType (hFile=0x230) returned 0x1 [0101.444] SetErrorMode (uMode=0x0) returned 0x1 [0101.444] GetFileType (hFile=0x230) returned 0x1 [0101.444] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.444] ReadFile (in: hFile=0x230, lpBuffer=0x2701178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2701178*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.517] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.517] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.517] WriteFile (in: hFile=0x230, lpBuffer=0x2701178*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2701178*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.518] CloseHandle (hObject=0x230) returned 1 [0101.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0101.518] SetErrorMode (uMode=0x1) returned 0x0 [0101.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b631a5e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b631a5e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ef55ea6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0101.519] SetErrorMode (uMode=0x0) returned 0x1 [0101.519] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\mt-mt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\mt-mt\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.520] SetErrorMode (uMode=0x1) returned 0x0 [0101.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.521] GetFileType (hFile=0x230) returned 0x1 [0101.521] SetErrorMode (uMode=0x0) returned 0x1 [0101.521] GetFileType (hFile=0x230) returned 0x1 [0101.521] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.521] ReadFile (in: hFile=0x230, lpBuffer=0x2704a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2704a78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.528] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.528] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.528] WriteFile (in: hFile=0x230, lpBuffer=0x2704a78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2704a78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.528] CloseHandle (hObject=0x230) returned 1 [0101.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0101.539] SetErrorMode (uMode=0x1) returned 0x0 [0101.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b9c537f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4b9c537f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ef7bfbd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x212d0)) returned 1 [0101.539] SetErrorMode (uMode=0x0) returned 0x1 [0101.539] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nb-no\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nb-no\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.541] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.542] SetErrorMode (uMode=0x1) returned 0x0 [0101.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.542] GetFileType (hFile=0x230) returned 0x1 [0101.542] SetErrorMode (uMode=0x0) returned 0x1 [0101.542] GetFileType (hFile=0x230) returned 0x1 [0101.542] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.542] ReadFile (in: hFile=0x230, lpBuffer=0x2708378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2708378*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.566] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.566] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.566] WriteFile (in: hFile=0x230, lpBuffer=0x2708378*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2708378*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.567] CloseHandle (hObject=0x230) returned 1 [0101.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.590] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0101.591] SetErrorMode (uMode=0x1) returned 0x0 [0101.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4beafea3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4beafea3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f014966, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0101.591] SetErrorMode (uMode=0x0) returned 0x1 [0101.591] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ne-np\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ne-np\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.592] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.592] SetErrorMode (uMode=0x1) returned 0x0 [0101.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.593] GetFileType (hFile=0x230) returned 0x1 [0101.593] SetErrorMode (uMode=0x0) returned 0x1 [0101.593] GetFileType (hFile=0x230) returned 0x1 [0101.593] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.593] ReadFile (in: hFile=0x230, lpBuffer=0x270bc78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270bc78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.664] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.664] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.664] WriteFile (in: hFile=0x230, lpBuffer=0x270bc78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270bc78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.664] CloseHandle (hObject=0x230) returned 1 [0101.676] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.677] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0101.677] SetErrorMode (uMode=0x1) returned 0x0 [0101.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c28fbc3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c28fbc3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f0d3481, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x240d0)) returned 1 [0101.677] SetErrorMode (uMode=0x0) returned 0x1 [0101.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nl\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.678] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.678] SetErrorMode (uMode=0x1) returned 0x0 [0101.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.678] GetFileType (hFile=0x230) returned 0x1 [0101.679] SetErrorMode (uMode=0x0) returned 0x1 [0101.679] GetFileType (hFile=0x230) returned 0x1 [0101.679] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.679] ReadFile (in: hFile=0x230, lpBuffer=0x270f578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270f578*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.696] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.696] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.696] WriteFile (in: hFile=0x230, lpBuffer=0x270f578*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270f578*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.696] CloseHandle (hObject=0x230) returned 1 [0101.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0101.772] SetErrorMode (uMode=0x1) returned 0x0 [0101.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c649684, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c649684, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f1b8340, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x210d0)) returned 1 [0101.772] SetErrorMode (uMode=0x0) returned 0x1 [0101.773] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nn-no\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nn-no\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0101.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0101.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0101.774] SetErrorMode (uMode=0x1) returned 0x0 [0101.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.774] GetFileType (hFile=0x230) returned 0x1 [0101.775] SetErrorMode (uMode=0x0) returned 0x1 [0101.775] GetFileType (hFile=0x230) returned 0x1 [0101.775] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.775] ReadFile (in: hFile=0x230, lpBuffer=0x2712e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2712e90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.797] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.797] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.797] WriteFile (in: hFile=0x230, lpBuffer=0x2712e90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2712e90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.797] CloseHandle (hObject=0x230) returned 1 [0101.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0101.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0101.799] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0101.799] SetErrorMode (uMode=0x1) returned 0x0 [0101.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9b6c84, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4c9b6c84, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f2048d9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x246c8)) returned 1 [0101.799] SetErrorMode (uMode=0x0) returned 0x1 [0101.800] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\nso-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\nso-za\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.801] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.801] SetErrorMode (uMode=0x1) returned 0x0 [0101.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.802] GetFileType (hFile=0x230) returned 0x1 [0101.802] SetErrorMode (uMode=0x0) returned 0x1 [0101.802] GetFileType (hFile=0x230) returned 0x1 [0101.802] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.802] ReadFile (in: hFile=0x230, lpBuffer=0x27167c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27167c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.804] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.804] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.804] WriteFile (in: hFile=0x230, lpBuffer=0x27167c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27167c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.804] CloseHandle (hObject=0x230) returned 1 [0101.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0101.805] SetErrorMode (uMode=0x1) returned 0x0 [0101.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cff8f40, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4cff8f40, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f22aa02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x25ec8)) returned 1 [0101.805] SetErrorMode (uMode=0x0) returned 0x1 [0101.805] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\or-in\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\or-in\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.806] SetErrorMode (uMode=0x1) returned 0x0 [0101.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.807] GetFileType (hFile=0x230) returned 0x1 [0101.807] SetErrorMode (uMode=0x0) returned 0x1 [0101.808] GetFileType (hFile=0x230) returned 0x1 [0101.808] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.808] ReadFile (in: hFile=0x230, lpBuffer=0x271a0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271a0c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.816] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.817] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.817] WriteFile (in: hFile=0x230, lpBuffer=0x271a0c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271a0c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.817] CloseHandle (hObject=0x230) returned 1 [0101.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0101.817] SetErrorMode (uMode=0x1) returned 0x0 [0101.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d4715af, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4d4715af, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f22aa02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x232d0)) returned 1 [0101.818] SetErrorMode (uMode=0x0) returned 0x1 [0101.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0101.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0101.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0101.819] SetErrorMode (uMode=0x1) returned 0x0 [0101.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.820] GetFileType (hFile=0x230) returned 0x1 [0101.820] SetErrorMode (uMode=0x0) returned 0x1 [0101.820] GetFileType (hFile=0x230) returned 0x1 [0101.821] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.821] ReadFile (in: hFile=0x230, lpBuffer=0x271d9d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271d9d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.822] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.822] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.823] WriteFile (in: hFile=0x230, lpBuffer=0x271d9d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271d9d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.823] CloseHandle (hObject=0x230) returned 1 [0101.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0101.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0101.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0101.823] SetErrorMode (uMode=0x1) returned 0x0 [0101.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d7b8961, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4d7b8961, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f2515f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22ac8)) returned 1 [0101.824] SetErrorMode (uMode=0x0) returned 0x1 [0101.824] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pa-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pa-arab\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.825] SetErrorMode (uMode=0x1) returned 0x0 [0101.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.826] GetFileType (hFile=0x230) returned 0x1 [0101.826] SetErrorMode (uMode=0x0) returned 0x1 [0101.826] GetFileType (hFile=0x230) returned 0x1 [0101.826] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.826] ReadFile (in: hFile=0x230, lpBuffer=0x2721308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2721308*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.827] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.827] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.827] WriteFile (in: hFile=0x230, lpBuffer=0x2721308*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2721308*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.828] CloseHandle (hObject=0x230) returned 1 [0101.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0101.828] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0101.829] SetErrorMode (uMode=0x1) returned 0x0 [0101.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4db4c1d5, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4db4c1d5, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f2515f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24ed0)) returned 1 [0101.829] SetErrorMode (uMode=0x0) returned 0x1 [0101.829] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pl\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", lpFilePart=0x0) returned 0x5c [0101.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", lpFilePart=0x0) returned 0x5c [0101.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", lpFilePart=0x0) returned 0x5c [0101.830] SetErrorMode (uMode=0x1) returned 0x0 [0101.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\qwindows.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.831] GetFileType (hFile=0x230) returned 0x1 [0101.831] SetErrorMode (uMode=0x0) returned 0x1 [0101.831] GetFileType (hFile=0x230) returned 0x1 [0101.831] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.832] ReadFile (in: hFile=0x230, lpBuffer=0x2724b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2724b58*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.844] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.844] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.844] WriteFile (in: hFile=0x230, lpBuffer=0x2724b58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2724b58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.844] CloseHandle (hObject=0x230) returned 1 [0101.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", lpFilePart=0x0) returned 0x5c [0101.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll", lpFilePart=0x0) returned 0x5c [0101.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x70 [0101.847] SetErrorMode (uMode=0x1) returned 0x0 [0101.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\qwindows.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4deb97ce, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4deb97ce, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f277000, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10c4d0)) returned 1 [0101.848] SetErrorMode (uMode=0x0) returned 0x1 [0101.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\qwindows.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\platforms\\qwindows.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\platforms\\qwindows.dll.partially.cryptonar")) returned 1 [0101.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0101.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0101.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0101.849] SetErrorMode (uMode=0x1) returned 0x0 [0101.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.852] GetFileType (hFile=0x230) returned 0x1 [0101.852] SetErrorMode (uMode=0x0) returned 0x1 [0101.852] GetFileType (hFile=0x230) returned 0x1 [0101.852] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.852] ReadFile (in: hFile=0x230, lpBuffer=0x27283b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27283b0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.872] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.872] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.872] WriteFile (in: hFile=0x230, lpBuffer=0x27283b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27283b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.872] CloseHandle (hObject=0x230) returned 1 [0101.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0101.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0101.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0101.873] SetErrorMode (uMode=0x1) returned 0x0 [0101.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e273296, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e273296, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f2c34c4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x220d0)) returned 1 [0101.873] SetErrorMode (uMode=0x0) returned 0x1 [0101.873] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\prs-af\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\prs-af\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.875] SetErrorMode (uMode=0x1) returned 0x0 [0101.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.876] GetFileType (hFile=0x230) returned 0x1 [0101.877] SetErrorMode (uMode=0x0) returned 0x1 [0101.877] GetFileType (hFile=0x230) returned 0x1 [0101.877] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.877] ReadFile (in: hFile=0x230, lpBuffer=0x272bce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272bce0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.886] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.886] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.886] WriteFile (in: hFile=0x230, lpBuffer=0x272bce0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272bce0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.886] CloseHandle (hObject=0x230) returned 1 [0101.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0101.887] SetErrorMode (uMode=0x1) returned 0x0 [0101.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e62cd57, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e62cd57, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f2e9612, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x236d0)) returned 1 [0101.887] SetErrorMode (uMode=0x0) returned 0x1 [0101.887] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-br\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-br\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.889] SetErrorMode (uMode=0x1) returned 0x0 [0101.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.890] GetFileType (hFile=0x230) returned 0x1 [0101.890] SetErrorMode (uMode=0x0) returned 0x1 [0101.890] GetFileType (hFile=0x230) returned 0x1 [0101.890] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.890] ReadFile (in: hFile=0x230, lpBuffer=0x272f5e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272f5e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.891] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.891] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.891] WriteFile (in: hFile=0x230, lpBuffer=0x272f5e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272f5e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.892] CloseHandle (hObject=0x230) returned 1 [0101.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0101.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0101.892] SetErrorMode (uMode=0x1) returned 0x0 [0101.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9e680e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4e9e680e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f2e9612, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x242d0)) returned 1 [0101.893] SetErrorMode (uMode=0x0) returned 0x1 [0101.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\pt-pt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\pt-pt\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0101.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", lpFilePart=0x0) returned 0x58 [0101.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", lpFilePart=0x0) returned 0x58 [0101.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", lpFilePart=0x0) returned 0x58 [0101.894] SetErrorMode (uMode=0x1) returned 0x0 [0101.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.895] GetFileType (hFile=0x230) returned 0x1 [0101.895] SetErrorMode (uMode=0x0) returned 0x1 [0101.895] GetFileType (hFile=0x230) returned 0x1 [0101.895] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.895] ReadFile (in: hFile=0x230, lpBuffer=0x2732e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2732e18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0101.914] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.914] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.914] WriteFile (in: hFile=0x230, lpBuffer=0x2732e18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2732e18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.915] CloseHandle (hObject=0x230) returned 1 [0101.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", lpFilePart=0x0) returned 0x58 [0101.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf", lpFilePart=0x0) returned 0x58 [0101.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0101.940] SetErrorMode (uMode=0x1) returned 0x0 [0101.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eda03b7, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4eda03b7, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f35be09, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a05c)) returned 1 [0101.940] SetErrorMode (uMode=0x0) returned 0x1 [0101.940] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\fabricmdl2.ttf.partially.cryptonar")) returned 1 [0101.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", lpFilePart=0x0) returned 0x68 [0101.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", lpFilePart=0x0) returned 0x68 [0101.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", lpFilePart=0x0) returned 0x68 [0101.942] SetErrorMode (uMode=0x1) returned 0x0 [0101.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.943] GetFileType (hFile=0x230) returned 0x1 [0101.943] SetErrorMode (uMode=0x0) returned 0x1 [0101.943] GetFileType (hFile=0x230) returned 0x1 [0101.943] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.943] ReadFile (in: hFile=0x230, lpBuffer=0x2736550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2736550*, lpNumberOfBytesRead=0x5ae8b8*=0x627, lpOverlapped=0x0) returned 1 [0101.944] SetFilePointer (in: hFile=0x230, lDistanceToMove=-551, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0101.945] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.945] WriteFile (in: hFile=0x230, lpBuffer=0x2736550*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2736550*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0101.945] CloseHandle (hObject=0x230) returned 1 [0101.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", lpFilePart=0x0) returned 0x68 [0101.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir", lpFilePart=0x0) returned 0x68 [0101.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir.partially.cryptoNar", lpFilePart=0x0) returned 0x7c [0101.945] SetErrorMode (uMode=0x1) returned 0x0 [0101.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e2181fb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5e2181fb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f381f7b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x627)) returned 1 [0101.946] SetErrorMode (uMode=0x0) returned 0x1 [0101.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\qmldir.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\qmldir.partially.cryptonar")) returned 1 [0101.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", lpFilePart=0x0) returned 0x6d [0101.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", lpFilePart=0x0) returned 0x6d [0101.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", lpFilePart=0x0) returned 0x6d [0101.947] SetErrorMode (uMode=0x1) returned 0x0 [0101.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.948] GetFileType (hFile=0x230) returned 0x1 [0101.948] SetErrorMode (uMode=0x0) returned 0x1 [0101.948] GetFileType (hFile=0x230) returned 0x1 [0101.948] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.948] ReadFile (in: hFile=0x230, lpBuffer=0x2739d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2739d60*, lpNumberOfBytesRead=0x5ae8b8*=0x6a, lpOverlapped=0x0) returned 1 [0101.949] ReadFile (in: hFile=0x230, lpBuffer=0x2739d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2739d60*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0101.949] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.949] WriteFile (in: hFile=0x230, lpBuffer=0x2739d60*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2739d60*, lpNumberOfBytesWritten=0x5ae8a8*=0x6a, lpOverlapped=0x0) returned 1 [0101.949] CloseHandle (hObject=0x230) returned 1 [0101.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", lpFilePart=0x0) returned 0x6d [0101.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir", lpFilePart=0x0) returned 0x6d [0101.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir.partially.cryptoNar", lpFilePart=0x0) returned 0x81 [0101.949] SetErrorMode (uMode=0x1) returned 0x0 [0101.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e5aba6b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5e5aba6b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f381f7b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6a)) returned 1 [0101.949] SetErrorMode (uMode=0x0) returned 0x1 [0101.950] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qmldir.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qmldir.partially.cryptonar")) returned 1 [0101.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", lpFilePart=0x0) returned 0x82 [0101.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", lpFilePart=0x0) returned 0x82 [0101.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", lpFilePart=0x0) returned 0x82 [0101.951] SetErrorMode (uMode=0x1) returned 0x0 [0101.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qtquickextrasflatplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0101.951] GetFileType (hFile=0x230) returned 0x1 [0101.951] SetErrorMode (uMode=0x0) returned 0x1 [0101.951] GetFileType (hFile=0x230) returned 0x1 [0101.951] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0101.951] ReadFile (in: hFile=0x230, lpBuffer=0x273d3b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273d3b0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.019] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.020] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.020] WriteFile (in: hFile=0x230, lpBuffer=0x273d3b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273d3b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.020] CloseHandle (hObject=0x230) returned 1 [0102.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", lpFilePart=0x0) returned 0x82 [0102.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll", lpFilePart=0x0) returned 0x82 [0102.026] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x96 [0102.026] SetErrorMode (uMode=0x1) returned 0x0 [0102.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qtquickextrasflatplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e965522, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5e965522, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f440b62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcb6d0)) returned 1 [0102.026] SetErrorMode (uMode=0x0) returned 0x1 [0102.026] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qtquickextrasflatplugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls\\Styles\\Flat\\qtquickextrasflatplugin.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls\\styles\\flat\\qtquickextrasflatplugin.dll.partially.cryptonar")) returned 1 [0102.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", lpFilePart=0x0) returned 0x67 [0102.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", lpFilePart=0x0) returned 0x67 [0102.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", lpFilePart=0x0) returned 0x67 [0102.028] SetErrorMode (uMode=0x1) returned 0x0 [0102.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\button.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.031] GetFileType (hFile=0x230) returned 0x1 [0102.031] SetErrorMode (uMode=0x0) returned 0x1 [0102.031] GetFileType (hFile=0x230) returned 0x1 [0102.031] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.031] ReadFile (in: hFile=0x230, lpBuffer=0x2740d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2740d10*, lpNumberOfBytesRead=0x5ae8b8*=0xe00, lpOverlapped=0x0) returned 1 [0102.049] SetFilePointer (in: hFile=0x230, lDistanceToMove=-2560, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.049] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.050] WriteFile (in: hFile=0x230, lpBuffer=0x2740d10*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2740d10*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.050] CloseHandle (hObject=0x230) returned 1 [0102.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", lpFilePart=0x0) returned 0x67 [0102.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml", lpFilePart=0x0) returned 0x67 [0102.050] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0102.050] SetErrorMode (uMode=0x1) returned 0x0 [0102.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\button.qml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594032f1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x594032f1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f466e56, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0102.050] SetErrorMode (uMode=0x0) returned 0x1 [0102.050] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\button.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Button.qml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\button.qml.partially.cryptonar")) returned 1 [0102.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", lpFilePart=0x0) returned 0x65 [0102.051] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", lpFilePart=0x0) returned 0x65 [0102.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", lpFilePart=0x0) returned 0x65 [0102.052] SetErrorMode (uMode=0x1) returned 0x0 [0102.052] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menu.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.052] GetFileType (hFile=0x230) returned 0x1 [0102.052] SetErrorMode (uMode=0x0) returned 0x1 [0102.052] GetFileType (hFile=0x230) returned 0x1 [0102.052] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.052] ReadFile (in: hFile=0x230, lpBuffer=0x2744528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2744528*, lpNumberOfBytesRead=0x5ae8b8*=0xb31, lpOverlapped=0x0) returned 1 [0102.054] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1841, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.054] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.054] WriteFile (in: hFile=0x230, lpBuffer=0x2744528*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2744528*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.054] CloseHandle (hObject=0x230) returned 1 [0102.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", lpFilePart=0x0) returned 0x65 [0102.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml", lpFilePart=0x0) returned 0x65 [0102.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml.partially.cryptoNar", lpFilePart=0x0) returned 0x79 [0102.054] SetErrorMode (uMode=0x1) returned 0x0 [0102.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menu.qml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597bcdac, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x597bcdac, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f48cf44, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb31)) returned 1 [0102.055] SetErrorMode (uMode=0x0) returned 0x1 [0102.055] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menu.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\Menu.qml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menu.qml.partially.cryptonar")) returned 1 [0102.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", lpFilePart=0x0) returned 0x69 [0102.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", lpFilePart=0x0) returned 0x69 [0102.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", lpFilePart=0x0) returned 0x69 [0102.056] SetErrorMode (uMode=0x1) returned 0x0 [0102.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menuitem.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.057] GetFileType (hFile=0x230) returned 0x1 [0102.057] SetErrorMode (uMode=0x0) returned 0x1 [0102.057] GetFileType (hFile=0x230) returned 0x1 [0102.057] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.057] ReadFile (in: hFile=0x230, lpBuffer=0x2747d68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2747d68*, lpNumberOfBytesRead=0x5ae8b8*=0xe3e, lpOverlapped=0x0) returned 1 [0102.078] SetFilePointer (in: hFile=0x230, lDistanceToMove=-2622, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.078] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.078] WriteFile (in: hFile=0x230, lpBuffer=0x2747d68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2747d68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.078] CloseHandle (hObject=0x230) returned 1 [0102.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", lpFilePart=0x0) returned 0x69 [0102.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml", lpFilePart=0x0) returned 0x69 [0102.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml.partially.cryptoNar", lpFilePart=0x0) returned 0x7d [0102.079] SetErrorMode (uMode=0x1) returned 0x0 [0102.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menuitem.qml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59b76870, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x59b76870, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f4b3321, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe3e)) returned 1 [0102.079] SetErrorMode (uMode=0x0) returned 0x1 [0102.079] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menuitem.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\MenuItem.qml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\menuitem.qml.partially.cryptonar")) returned 1 [0102.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6d [0102.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6d [0102.080] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6d [0102.080] SetErrorMode (uMode=0x1) returned 0x0 [0102.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.081] GetFileType (hFile=0x230) returned 0x1 [0102.081] SetErrorMode (uMode=0x0) returned 0x1 [0102.081] GetFileType (hFile=0x230) returned 0x1 [0102.081] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.081] ReadFile (in: hFile=0x230, lpBuffer=0x274b610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274b610*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.098] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.098] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.098] WriteFile (in: hFile=0x230, lpBuffer=0x274b610*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274b610*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.099] CloseHandle (hObject=0x230) returned 1 [0102.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6d [0102.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6d [0102.116] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes.partially.cryptoNar", lpFilePart=0x0) returned 0x81 [0102.116] SetErrorMode (uMode=0x1) returned 0x0 [0102.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59fa2a39, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x59fa2a39, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f4ff695, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11437)) returned 1 [0102.116] SetErrorMode (uMode=0x0) returned 0x1 [0102.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\plugins.qmltypes.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\plugins.qmltypes.partially.cryptonar")) returned 1 [0102.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", lpFilePart=0x0) returned 0x6c [0102.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", lpFilePart=0x0) returned 0x6c [0102.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", lpFilePart=0x0) returned 0x6c [0102.117] SetErrorMode (uMode=0x1) returned 0x0 [0102.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\progressbar.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.118] GetFileType (hFile=0x230) returned 0x1 [0102.118] SetErrorMode (uMode=0x0) returned 0x1 [0102.118] GetFileType (hFile=0x230) returned 0x1 [0102.118] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.118] ReadFile (in: hFile=0x230, lpBuffer=0x274eec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274eec8*, lpNumberOfBytesRead=0x5ae8b8*=0xae7, lpOverlapped=0x0) returned 1 [0102.136] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1767, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.136] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.136] WriteFile (in: hFile=0x230, lpBuffer=0x274eec8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274eec8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.136] CloseHandle (hObject=0x230) returned 1 [0102.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", lpFilePart=0x0) returned 0x6c [0102.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml", lpFilePart=0x0) returned 0x6c [0102.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0102.137] SetErrorMode (uMode=0x1) returned 0x0 [0102.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\progressbar.qml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a310043, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5a310043, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f54bc80, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xae7)) returned 1 [0102.137] SetErrorMode (uMode=0x0) returned 0x1 [0102.137] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\progressbar.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ProgressBar.qml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\progressbar.qml.partially.cryptonar")) returned 1 [0102.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", lpFilePart=0x0) returned 0x63 [0102.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", lpFilePart=0x0) returned 0x63 [0102.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", lpFilePart=0x0) returned 0x63 [0102.138] SetErrorMode (uMode=0x1) returned 0x0 [0102.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.139] GetFileType (hFile=0x230) returned 0x1 [0102.139] SetErrorMode (uMode=0x0) returned 0x1 [0102.139] GetFileType (hFile=0x230) returned 0x1 [0102.139] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.139] ReadFile (in: hFile=0x230, lpBuffer=0x27526c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27526c0*, lpNumberOfBytesRead=0x5ae8b8*=0x8c, lpOverlapped=0x0) returned 1 [0102.140] ReadFile (in: hFile=0x230, lpBuffer=0x27526c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27526c0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0102.140] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.140] WriteFile (in: hFile=0x230, lpBuffer=0x27526c0*, nNumberOfBytesToWrite=0x8c, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27526c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x8c, lpOverlapped=0x0) returned 1 [0102.140] CloseHandle (hObject=0x230) returned 1 [0102.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", lpFilePart=0x0) returned 0x63 [0102.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir", lpFilePart=0x0) returned 0x63 [0102.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir.partially.cryptoNar", lpFilePart=0x0) returned 0x77 [0102.140] SetErrorMode (uMode=0x1) returned 0x0 [0102.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a6efd59, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5a6efd59, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f54bc80, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8c)) returned 1 [0102.140] SetErrorMode (uMode=0x0) returned 0x1 [0102.140] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qmldir.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qmldir.partially.cryptonar")) returned 1 [0102.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", lpFilePart=0x0) returned 0x77 [0102.141] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", lpFilePart=0x0) returned 0x77 [0102.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", lpFilePart=0x0) returned 0x77 [0102.142] SetErrorMode (uMode=0x1) returned 0x0 [0102.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qtquickcontrols2plugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.142] GetFileType (hFile=0x230) returned 0x1 [0102.142] SetErrorMode (uMode=0x0) returned 0x1 [0102.143] GetFileType (hFile=0x230) returned 0x1 [0102.143] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.143] ReadFile (in: hFile=0x230, lpBuffer=0x2755c80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2755c80*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.171] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.172] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.172] WriteFile (in: hFile=0x230, lpBuffer=0x2755c80*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2755c80*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.172] CloseHandle (hObject=0x230) returned 1 [0102.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", lpFilePart=0x0) returned 0x77 [0102.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll", lpFilePart=0x0) returned 0x77 [0102.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x8b [0102.203] SetErrorMode (uMode=0x1) returned 0x0 [0102.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qtquickcontrols2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aacfa67, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5aacfa67, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f5e4556, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x162d0)) returned 1 [0102.203] SetErrorMode (uMode=0x0) returned 0x1 [0102.203] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qtquickcontrols2plugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\qtquickcontrols2plugin.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\qtquickcontrols2plugin.dll.partially.cryptonar")) returned 1 [0102.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", lpFilePart=0x0) returned 0x6a [0102.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", lpFilePart=0x0) returned 0x6a [0102.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", lpFilePart=0x0) returned 0x6a [0102.204] SetErrorMode (uMode=0x1) returned 0x0 [0102.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollbar.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.205] GetFileType (hFile=0x230) returned 0x1 [0102.205] SetErrorMode (uMode=0x0) returned 0x1 [0102.205] GetFileType (hFile=0x230) returned 0x1 [0102.205] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.206] ReadFile (in: hFile=0x230, lpBuffer=0x2759580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2759580*, lpNumberOfBytesRead=0x5ae8b8*=0xc3a, lpOverlapped=0x0) returned 1 [0102.348] SetFilePointer (in: hFile=0x230, lDistanceToMove=-2106, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.348] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.348] WriteFile (in: hFile=0x230, lpBuffer=0x2759580*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2759580*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.348] CloseHandle (hObject=0x230) returned 1 [0102.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", lpFilePart=0x0) returned 0x6a [0102.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml", lpFilePart=0x0) returned 0x6a [0102.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml.partially.cryptoNar", lpFilePart=0x0) returned 0x7e [0102.348] SetErrorMode (uMode=0x1) returned 0x0 [0102.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollbar.qml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ae895cc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5ae895cc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f73bbc0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc3a)) returned 1 [0102.348] SetErrorMode (uMode=0x0) returned 0x1 [0102.348] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollbar.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollBar.qml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollbar.qml.partially.cryptonar")) returned 1 [0102.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", lpFilePart=0x0) returned 0x70 [0102.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", lpFilePart=0x0) returned 0x70 [0102.350] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", lpFilePart=0x0) returned 0x70 [0102.350] SetErrorMode (uMode=0x1) returned 0x0 [0102.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollindicator.qml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.351] GetFileType (hFile=0x230) returned 0x1 [0102.351] SetErrorMode (uMode=0x0) returned 0x1 [0102.351] GetFileType (hFile=0x230) returned 0x1 [0102.351] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.351] ReadFile (in: hFile=0x230, lpBuffer=0x275ce30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275ce30*, lpNumberOfBytesRead=0x5ae8b8*=0xba5, lpOverlapped=0x0) returned 1 [0102.405] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1957, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.405] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.405] WriteFile (in: hFile=0x230, lpBuffer=0x275ce30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275ce30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.405] CloseHandle (hObject=0x230) returned 1 [0102.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", lpFilePart=0x0) returned 0x70 [0102.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml", lpFilePart=0x0) returned 0x70 [0102.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0102.406] SetErrorMode (uMode=0x1) returned 0x0 [0102.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollindicator.qml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b26923e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5b26923e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f7d458b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xba5)) returned 1 [0102.406] SetErrorMode (uMode=0x0) returned 0x1 [0102.406] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollindicator.qml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Controls.2\\ScrollIndicator.qml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\controls.2\\scrollindicator.qml.partially.cryptonar")) returned 1 [0102.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", lpFilePart=0x0) returned 0x69 [0102.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", lpFilePart=0x0) returned 0x69 [0102.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", lpFilePart=0x0) returned 0x69 [0102.407] SetErrorMode (uMode=0x1) returned 0x0 [0102.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.408] GetFileType (hFile=0x230) returned 0x1 [0102.408] SetErrorMode (uMode=0x0) returned 0x1 [0102.408] GetFileType (hFile=0x230) returned 0x1 [0102.408] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.408] ReadFile (in: hFile=0x230, lpBuffer=0x2760718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2760718*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.424] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.424] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.424] WriteFile (in: hFile=0x230, lpBuffer=0x2760718*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2760718*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.424] CloseHandle (hObject=0x230) returned 1 [0102.491] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", lpFilePart=0x0) returned 0x69 [0102.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes", lpFilePart=0x0) returned 0x69 [0102.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes.partially.cryptoNar", lpFilePart=0x0) returned 0x7d [0102.492] SetErrorMode (uMode=0x1) returned 0x0 [0102.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b66f1a1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5b66f1a1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f892fa4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x74b7)) returned 1 [0102.492] SetErrorMode (uMode=0x0) returned 0x1 [0102.492] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\plugins.qmltypes.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\plugins.qmltypes.partially.cryptonar")) returned 1 [0102.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", lpFilePart=0x0) returned 0x5f [0102.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", lpFilePart=0x0) returned 0x5f [0102.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", lpFilePart=0x0) returned 0x5f [0102.494] SetErrorMode (uMode=0x1) returned 0x0 [0102.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.495] GetFileType (hFile=0x230) returned 0x1 [0102.495] SetErrorMode (uMode=0x0) returned 0x1 [0102.495] GetFileType (hFile=0x230) returned 0x1 [0102.495] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.495] ReadFile (in: hFile=0x230, lpBuffer=0x2763ed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2763ed0*, lpNumberOfBytesRead=0x5ae8b8*=0x90, lpOverlapped=0x0) returned 1 [0102.496] ReadFile (in: hFile=0x230, lpBuffer=0x2763ed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2763ed0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0102.496] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.496] WriteFile (in: hFile=0x230, lpBuffer=0x2763ed0*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2763ed0*, lpNumberOfBytesWritten=0x5ae8a8*=0x90, lpOverlapped=0x0) returned 1 [0102.496] CloseHandle (hObject=0x230) returned 1 [0102.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", lpFilePart=0x0) returned 0x5f [0102.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir", lpFilePart=0x0) returned 0x5f [0102.496] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0102.496] SetErrorMode (uMode=0x1) returned 0x0 [0102.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9dc7b2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5b9dc7b2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f8b923d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0102.497] SetErrorMode (uMode=0x0) returned 0x1 [0102.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qmldir.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qmldir.partially.cryptonar")) returned 1 [0102.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", lpFilePart=0x0) returned 0x70 [0102.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", lpFilePart=0x0) returned 0x70 [0102.499] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", lpFilePart=0x0) returned 0x70 [0102.499] SetErrorMode (uMode=0x1) returned 0x0 [0102.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qtquickextrasplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.500] GetFileType (hFile=0x230) returned 0x1 [0102.500] SetErrorMode (uMode=0x0) returned 0x1 [0102.500] GetFileType (hFile=0x230) returned 0x1 [0102.500] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.500] ReadFile (in: hFile=0x230, lpBuffer=0x2767438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2767438*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.514] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.514] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.514] WriteFile (in: hFile=0x230, lpBuffer=0x2767438*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2767438*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.515] CloseHandle (hObject=0x230) returned 1 [0102.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", lpFilePart=0x0) returned 0x70 [0102.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll", lpFilePart=0x0) returned 0x70 [0102.532] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0102.532] SetErrorMode (uMode=0x1) returned 0x0 [0102.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qtquickextrasplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bd49db9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5bd49db9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f905739, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122d0)) returned 1 [0102.532] SetErrorMode (uMode=0x0) returned 0x1 [0102.532] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qtquickextrasplugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Extras\\qtquickextrasplugin.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\extras\\qtquickextrasplugin.dll.partially.cryptonar")) returned 1 [0102.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", lpFilePart=0x0) returned 0x6a [0102.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", lpFilePart=0x0) returned 0x6a [0102.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", lpFilePart=0x0) returned 0x6a [0102.534] SetErrorMode (uMode=0x1) returned 0x0 [0102.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.535] GetFileType (hFile=0x230) returned 0x1 [0102.535] SetErrorMode (uMode=0x0) returned 0x1 [0102.535] GetFileType (hFile=0x230) returned 0x1 [0102.535] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.535] ReadFile (in: hFile=0x230, lpBuffer=0x276ad20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276ad20*, lpNumberOfBytesRead=0x5ae8b8*=0xece, lpOverlapped=0x0) returned 1 [0102.563] SetFilePointer (in: hFile=0x230, lDistanceToMove=-2766, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.563] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.563] WriteFile (in: hFile=0x230, lpBuffer=0x276ad20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276ad20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.563] CloseHandle (hObject=0x230) returned 1 [0102.563] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", lpFilePart=0x0) returned 0x6a [0102.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes", lpFilePart=0x0) returned 0x6a [0102.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes.partially.cryptoNar", lpFilePart=0x0) returned 0x7e [0102.564] SetErrorMode (uMode=0x1) returned 0x0 [0102.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c0dd615, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5c0dd615, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f951d12, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xece)) returned 1 [0102.564] SetErrorMode (uMode=0x0) returned 0x1 [0102.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\plugins.qmltypes.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\plugins.qmltypes.partially.cryptonar")) returned 1 [0102.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", lpFilePart=0x0) returned 0x60 [0102.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", lpFilePart=0x0) returned 0x60 [0102.565] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", lpFilePart=0x0) returned 0x60 [0102.565] SetErrorMode (uMode=0x1) returned 0x0 [0102.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.566] GetFileType (hFile=0x230) returned 0x1 [0102.566] SetErrorMode (uMode=0x0) returned 0x1 [0102.566] GetFileType (hFile=0x230) returned 0x1 [0102.566] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.566] ReadFile (in: hFile=0x230, lpBuffer=0x276e4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276e4f0*, lpNumberOfBytesRead=0x5ae8b8*=0x82, lpOverlapped=0x0) returned 1 [0102.567] ReadFile (in: hFile=0x230, lpBuffer=0x276e4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276e4f0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0102.567] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.567] WriteFile (in: hFile=0x230, lpBuffer=0x276e4f0*, nNumberOfBytesToWrite=0x82, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276e4f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x82, lpOverlapped=0x0) returned 1 [0102.568] CloseHandle (hObject=0x230) returned 1 [0102.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", lpFilePart=0x0) returned 0x60 [0102.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir", lpFilePart=0x0) returned 0x60 [0102.568] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir.partially.cryptoNar", lpFilePart=0x0) returned 0x74 [0102.568] SetErrorMode (uMode=0x1) returned 0x0 [0102.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c470e77, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5c470e77, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f951d12, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x82)) returned 1 [0102.568] SetErrorMode (uMode=0x0) returned 0x1 [0102.568] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qmldir.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qmldir.partially.cryptonar")) returned 1 [0102.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", lpFilePart=0x0) returned 0x71 [0102.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", lpFilePart=0x0) returned 0x71 [0102.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", lpFilePart=0x0) returned 0x71 [0102.572] SetErrorMode (uMode=0x1) returned 0x0 [0102.572] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qquicklayoutsplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.573] GetFileType (hFile=0x230) returned 0x1 [0102.573] SetErrorMode (uMode=0x0) returned 0x1 [0102.573] GetFileType (hFile=0x230) returned 0x1 [0102.573] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.573] ReadFile (in: hFile=0x230, lpBuffer=0x2771a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2771a70*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.598] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.598] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.598] WriteFile (in: hFile=0x230, lpBuffer=0x2771a70*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2771a70*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.599] CloseHandle (hObject=0x230) returned 1 [0102.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", lpFilePart=0x0) returned 0x71 [0102.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll", lpFilePart=0x0) returned 0x71 [0102.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0102.616] SetErrorMode (uMode=0x1) returned 0x0 [0102.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qquicklayoutsplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8046d6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5c8046d6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3f9c41cd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x154d0)) returned 1 [0102.616] SetErrorMode (uMode=0x0) returned 0x1 [0102.616] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qquicklayoutsplugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Layouts\\qquicklayoutsplugin.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\layouts\\qquicklayoutsplugin.dll.partially.cryptonar")) returned 1 [0102.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6e [0102.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6e [0102.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6e [0102.617] SetErrorMode (uMode=0x1) returned 0x0 [0102.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.620] GetFileType (hFile=0x230) returned 0x1 [0102.620] SetErrorMode (uMode=0x0) returned 0x1 [0102.620] GetFileType (hFile=0x230) returned 0x1 [0102.620] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.620] ReadFile (in: hFile=0x230, lpBuffer=0x2775370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2775370*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.646] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.647] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.647] WriteFile (in: hFile=0x230, lpBuffer=0x2775370*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2775370*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.647] CloseHandle (hObject=0x230) returned 1 [0102.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6e [0102.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6e [0102.648] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0102.648] SetErrorMode (uMode=0x1) returned 0x0 [0102.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb97f46, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5cb97f46, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fa1089f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc82a)) returned 1 [0102.648] SetErrorMode (uMode=0x0) returned 0x1 [0102.648] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\plugins.qmltypes.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\plugins.qmltypes.partially.cryptonar")) returned 1 [0102.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", lpFilePart=0x0) returned 0x64 [0102.649] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", lpFilePart=0x0) returned 0x64 [0102.650] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", lpFilePart=0x0) returned 0x64 [0102.650] SetErrorMode (uMode=0x1) returned 0x0 [0102.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.650] GetFileType (hFile=0x230) returned 0x1 [0102.651] SetErrorMode (uMode=0x0) returned 0x1 [0102.651] GetFileType (hFile=0x230) returned 0x1 [0102.651] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.651] ReadFile (in: hFile=0x230, lpBuffer=0x2778b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2778b88*, lpNumberOfBytesRead=0x5ae8b8*=0x79, lpOverlapped=0x0) returned 1 [0102.652] ReadFile (in: hFile=0x230, lpBuffer=0x2778b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2778b88*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0102.652] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.652] WriteFile (in: hFile=0x230, lpBuffer=0x2778b88*, nNumberOfBytesToWrite=0x79, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2778b88*, lpNumberOfBytesWritten=0x5ae8a8*=0x79, lpOverlapped=0x0) returned 1 [0102.652] CloseHandle (hObject=0x230) returned 1 [0102.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", lpFilePart=0x0) returned 0x64 [0102.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir", lpFilePart=0x0) returned 0x64 [0102.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir.partially.cryptoNar", lpFilePart=0x0) returned 0x78 [0102.652] SetErrorMode (uMode=0x1) returned 0x0 [0102.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cf2b7a2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5cf2b7a2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fa36936, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x79)) returned 1 [0102.652] SetErrorMode (uMode=0x0) returned 0x1 [0102.652] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qmldir.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qmldir.partially.cryptonar")) returned 1 [0102.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", lpFilePart=0x0) returned 0x79 [0102.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", lpFilePart=0x0) returned 0x79 [0102.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", lpFilePart=0x0) returned 0x79 [0102.654] SetErrorMode (uMode=0x1) returned 0x0 [0102.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qtquicktemplates2plugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.654] GetFileType (hFile=0x230) returned 0x1 [0102.654] SetErrorMode (uMode=0x0) returned 0x1 [0102.654] GetFileType (hFile=0x230) returned 0x1 [0102.654] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.655] ReadFile (in: hFile=0x230, lpBuffer=0x277c168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277c168*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.687] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.687] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.687] WriteFile (in: hFile=0x230, lpBuffer=0x277c168*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x277c168*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.687] CloseHandle (hObject=0x230) returned 1 [0102.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", lpFilePart=0x0) returned 0x79 [0102.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll", lpFilePart=0x0) returned 0x79 [0102.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x8d [0102.705] SetErrorMode (uMode=0x1) returned 0x0 [0102.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qtquicktemplates2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d30b4aa, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5d30b4aa, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3faa915a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a8d0)) returned 1 [0102.705] SetErrorMode (uMode=0x0) returned 0x1 [0102.705] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qtquicktemplates2plugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Templates.2\\qtquicktemplates2plugin.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\templates.2\\qtquicktemplates2plugin.dll.partially.cryptonar")) returned 1 [0102.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6b [0102.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6b [0102.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6b [0102.707] SetErrorMode (uMode=0x1) returned 0x0 [0102.707] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.710] GetFileType (hFile=0x230) returned 0x1 [0102.710] SetErrorMode (uMode=0x0) returned 0x1 [0102.710] GetFileType (hFile=0x230) returned 0x1 [0102.710] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.710] ReadFile (in: hFile=0x230, lpBuffer=0x277fab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277fab0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.715] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.715] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.715] WriteFile (in: hFile=0x230, lpBuffer=0x277fab0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x277fab0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.716] CloseHandle (hObject=0x230) returned 1 [0102.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6b [0102.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x6b [0102.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes.partially.cryptoNar", lpFilePart=0x0) returned 0x7f [0102.716] SetErrorMode (uMode=0x1) returned 0x0 [0102.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6eb1c6, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5d6eb1c6, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3facf4e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2dfc)) returned 1 [0102.716] SetErrorMode (uMode=0x0) returned 0x1 [0102.717] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\plugins.qmltypes.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\plugins.qmltypes.partially.cryptonar")) returned 1 [0102.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", lpFilePart=0x0) returned 0x61 [0102.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", lpFilePart=0x0) returned 0x61 [0102.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", lpFilePart=0x0) returned 0x61 [0102.719] SetErrorMode (uMode=0x1) returned 0x0 [0102.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.720] GetFileType (hFile=0x230) returned 0x1 [0102.720] SetErrorMode (uMode=0x0) returned 0x1 [0102.720] GetFileType (hFile=0x230) returned 0x1 [0102.720] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.720] ReadFile (in: hFile=0x230, lpBuffer=0x2783280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2783280*, lpNumberOfBytesRead=0x5ae8b8*=0x7a, lpOverlapped=0x0) returned 1 [0102.721] ReadFile (in: hFile=0x230, lpBuffer=0x2783280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2783280*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0102.721] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.721] WriteFile (in: hFile=0x230, lpBuffer=0x2783280*, nNumberOfBytesToWrite=0x7a, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2783280*, lpNumberOfBytesWritten=0x5ae8a8*=0x7a, lpOverlapped=0x0) returned 1 [0102.721] CloseHandle (hObject=0x230) returned 1 [0102.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", lpFilePart=0x0) returned 0x61 [0102.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir", lpFilePart=0x0) returned 0x61 [0102.722] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir.partially.cryptoNar", lpFilePart=0x0) returned 0x75 [0102.722] SetErrorMode (uMode=0x1) returned 0x0 [0102.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5daa4c8a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5daa4c8a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3facf4e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7a)) returned 1 [0102.722] SetErrorMode (uMode=0x0) returned 0x1 [0102.722] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\qmldir.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\qmldir.partially.cryptonar")) returned 1 [0102.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", lpFilePart=0x0) returned 0x6b [0102.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", lpFilePart=0x0) returned 0x6b [0102.729] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", lpFilePart=0x0) returned 0x6b [0102.729] SetErrorMode (uMode=0x1) returned 0x0 [0102.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\windowplugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.730] GetFileType (hFile=0x230) returned 0x1 [0102.730] SetErrorMode (uMode=0x0) returned 0x1 [0102.730] GetFileType (hFile=0x230) returned 0x1 [0102.730] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.730] ReadFile (in: hFile=0x230, lpBuffer=0x27867b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27867b0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.732] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.732] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.732] WriteFile (in: hFile=0x230, lpBuffer=0x27867b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27867b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.732] CloseHandle (hObject=0x230) returned 1 [0102.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", lpFilePart=0x0) returned 0x6b [0102.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll", lpFilePart=0x0) returned 0x6b [0102.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7f [0102.733] SetErrorMode (uMode=0x1) returned 0x0 [0102.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\windowplugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5de5e778, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5de5e778, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3faf88c6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7ad0)) returned 1 [0102.733] SetErrorMode (uMode=0x0) returned 0x1 [0102.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\windowplugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick\\Window.2\\windowplugin.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick\\window.2\\windowplugin.dll.partially.cryptonar")) returned 1 [0102.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x64 [0102.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x64 [0102.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x64 [0102.736] SetErrorMode (uMode=0x1) returned 0x0 [0102.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.737] GetFileType (hFile=0x230) returned 0x1 [0102.737] SetErrorMode (uMode=0x0) returned 0x1 [0102.737] GetFileType (hFile=0x230) returned 0x1 [0102.737] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.737] ReadFile (in: hFile=0x230, lpBuffer=0x278a028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x278a028*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.765] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.765] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.765] WriteFile (in: hFile=0x230, lpBuffer=0x278a028*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x278a028*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.766] CloseHandle (hObject=0x230) returned 1 [0102.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x64 [0102.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes", lpFilePart=0x0) returned 0x64 [0102.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes.partially.cryptoNar", lpFilePart=0x0) returned 0x78 [0102.791] SetErrorMode (uMode=0x1) returned 0x0 [0102.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58889e13, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x58889e13, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fb8df18, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2d552)) returned 1 [0102.792] SetErrorMode (uMode=0x0) returned 0x1 [0102.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\plugins.qmltypes.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\plugins.qmltypes.partially.cryptonar")) returned 1 [0102.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", lpFilePart=0x0) returned 0x5a [0102.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", lpFilePart=0x0) returned 0x5a [0102.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", lpFilePart=0x0) returned 0x5a [0102.793] SetErrorMode (uMode=0x1) returned 0x0 [0102.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qmldir"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.794] GetFileType (hFile=0x230) returned 0x1 [0102.794] SetErrorMode (uMode=0x0) returned 0x1 [0102.794] GetFileType (hFile=0x230) returned 0x1 [0102.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.794] ReadFile (in: hFile=0x230, lpBuffer=0x278d790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x278d790*, lpNumberOfBytesRead=0x5ae8b8*=0x6f, lpOverlapped=0x0) returned 1 [0102.795] ReadFile (in: hFile=0x230, lpBuffer=0x278d790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x278d790*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0102.795] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.795] WriteFile (in: hFile=0x230, lpBuffer=0x278d790*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x278d790*, lpNumberOfBytesWritten=0x5ae8a8*=0x6f, lpOverlapped=0x0) returned 1 [0102.795] CloseHandle (hObject=0x230) returned 1 [0102.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", lpFilePart=0x0) returned 0x5a [0102.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir", lpFilePart=0x0) returned 0x5a [0102.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0102.795] SetErrorMode (uMode=0x1) returned 0x0 [0102.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qmldir"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58c438ca, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x58c438ca, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fb8df18, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0102.795] SetErrorMode (uMode=0x0) returned 0x1 [0102.795] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qmldir"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qmldir.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qmldir.partially.cryptonar")) returned 1 [0102.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", lpFilePart=0x0) returned 0x66 [0102.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", lpFilePart=0x0) returned 0x66 [0102.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", lpFilePart=0x0) returned 0x66 [0102.797] SetErrorMode (uMode=0x1) returned 0x0 [0102.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qtquick2plugin.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.798] GetFileType (hFile=0x230) returned 0x1 [0102.798] SetErrorMode (uMode=0x0) returned 0x1 [0102.798] GetFileType (hFile=0x230) returned 0x1 [0102.798] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.798] ReadFile (in: hFile=0x230, lpBuffer=0x2790c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2790c28*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.809] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.809] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.809] WriteFile (in: hFile=0x230, lpBuffer=0x2790c28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2790c28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.810] CloseHandle (hObject=0x230) returned 1 [0102.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", lpFilePart=0x0) returned 0x66 [0102.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll", lpFilePart=0x0) returned 0x66 [0102.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0102.810] SetErrorMode (uMode=0x1) returned 0x0 [0102.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qtquick2plugin.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x590235e3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x590235e3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fbb4131, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7ad0)) returned 1 [0102.810] SetErrorMode (uMode=0x0) returned 0x1 [0102.810] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qtquick2plugin.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qml\\QtQuick.2\\qtquick2plugin.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qml\\qtquick.2\\qtquick2plugin.dll.partially.cryptonar")) returned 1 [0102.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x72 [0102.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x72 [0102.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x72 [0102.811] SetErrorMode (uMode=0x1) returned 0x0 [0102.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.812] GetFileType (hFile=0x230) returned 0x1 [0102.812] SetErrorMode (uMode=0x0) returned 0x1 [0102.812] GetFileType (hFile=0x230) returned 0x1 [0102.812] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.812] ReadFile (in: hFile=0x230, lpBuffer=0x27944e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27944e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.833] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.833] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.833] WriteFile (in: hFile=0x230, lpBuffer=0x27944e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27944e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.833] CloseHandle (hObject=0x230) returned 1 [0102.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x72 [0102.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x72 [0102.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0102.851] SetErrorMode (uMode=0x1) returned 0x0 [0102.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f10d8cc, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f10d8cc, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fc004fa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0102.851] SetErrorMode (uMode=0x0) returned 0x1 [0102.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\qut-latn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\qut-latn\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0102.852] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0102.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0102.853] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0102.853] SetErrorMode (uMode=0x1) returned 0x0 [0102.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.853] GetFileType (hFile=0x230) returned 0x1 [0102.853] SetErrorMode (uMode=0x0) returned 0x1 [0102.853] GetFileType (hFile=0x230) returned 0x1 [0102.853] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.853] ReadFile (in: hFile=0x230, lpBuffer=0x2797e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2797e28*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.874] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.874] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.874] WriteFile (in: hFile=0x230, lpBuffer=0x2797e28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2797e28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.874] CloseHandle (hObject=0x230) returned 1 [0102.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0102.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x70 [0102.875] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0102.875] SetErrorMode (uMode=0x1) returned 0x0 [0102.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f454c7b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f454c7b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fc4fa44, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x246d0)) returned 1 [0102.875] SetErrorMode (uMode=0x0) returned 0x1 [0102.875] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\quz-pe\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\quz-pe\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0102.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.877] SetErrorMode (uMode=0x1) returned 0x0 [0102.877] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.878] GetFileType (hFile=0x230) returned 0x1 [0102.878] SetErrorMode (uMode=0x0) returned 0x1 [0102.878] GetFileType (hFile=0x230) returned 0x1 [0102.878] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.878] ReadFile (in: hFile=0x230, lpBuffer=0x279b758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x279b758*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.879] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.879] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.879] WriteFile (in: hFile=0x230, lpBuffer=0x279b758*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x279b758*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.880] CloseHandle (hObject=0x230) returned 1 [0102.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0102.912] SetErrorMode (uMode=0x1) returned 0x0 [0102.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f83499e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4f83499e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fc9903b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23ac8)) returned 1 [0102.913] SetErrorMode (uMode=0x0) returned 0x1 [0102.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ro\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ro\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0102.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.915] SetErrorMode (uMode=0x1) returned 0x0 [0102.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.916] GetFileType (hFile=0x230) returned 0x1 [0102.916] SetErrorMode (uMode=0x0) returned 0x1 [0102.917] GetFileType (hFile=0x230) returned 0x1 [0102.917] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.917] ReadFile (in: hFile=0x230, lpBuffer=0x279f058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x279f058*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.926] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.926] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.927] WriteFile (in: hFile=0x230, lpBuffer=0x279f058*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x279f058*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.927] CloseHandle (hObject=0x230) returned 1 [0102.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0102.928] SetErrorMode (uMode=0x1) returned 0x0 [0102.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbc8207, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4fbc8207, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fcc0427, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x230d0)) returned 1 [0102.929] SetErrorMode (uMode=0x0) returned 0x1 [0102.929] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ru\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ru\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0102.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.940] SetErrorMode (uMode=0x1) returned 0x0 [0102.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.941] GetFileType (hFile=0x230) returned 0x1 [0102.941] SetErrorMode (uMode=0x0) returned 0x1 [0102.941] GetFileType (hFile=0x230) returned 0x1 [0102.941] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.941] ReadFile (in: hFile=0x230, lpBuffer=0x27a2958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a2958*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.943] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.943] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.943] WriteFile (in: hFile=0x230, lpBuffer=0x27a2958*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27a2958*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.944] CloseHandle (hObject=0x230) returned 1 [0102.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0102.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0102.945] SetErrorMode (uMode=0x1) returned 0x0 [0102.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffce16e, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x4ffce16e, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fce53c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0102.946] SetErrorMode (uMode=0x0) returned 0x1 [0102.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\rw\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\rw\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0102.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0102.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0102.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0102.947] SetErrorMode (uMode=0x1) returned 0x0 [0102.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.948] GetFileType (hFile=0x230) returned 0x1 [0102.948] SetErrorMode (uMode=0x0) returned 0x1 [0102.948] GetFileType (hFile=0x230) returned 0x1 [0102.948] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.949] ReadFile (in: hFile=0x230, lpBuffer=0x27a6270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a6270*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0102.960] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0102.960] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.960] WriteFile (in: hFile=0x230, lpBuffer=0x27a6270*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27a6270*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0102.961] CloseHandle (hObject=0x230) returned 1 [0102.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0102.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0102.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0102.961] SetErrorMode (uMode=0x1) returned 0x0 [0102.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x503ade87, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x503ade87, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fd3175e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22cd0)) returned 1 [0102.961] SetErrorMode (uMode=0x0) returned 0x1 [0102.961] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sd-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sd-arab\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0102.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0102.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0102.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0102.962] SetErrorMode (uMode=0x1) returned 0x0 [0102.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0102.963] GetFileType (hFile=0x230) returned 0x1 [0102.963] SetErrorMode (uMode=0x0) returned 0x1 [0102.963] GetFileType (hFile=0x230) returned 0x1 [0102.963] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0102.963] ReadFile (in: hFile=0x230, lpBuffer=0x27a9ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27a9ba0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.006] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.006] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.006] WriteFile (in: hFile=0x230, lpBuffer=0x27a9ba0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27a9ba0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.007] CloseHandle (hObject=0x230) returned 1 [0103.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0103.041] SetErrorMode (uMode=0x1) returned 0x0 [0103.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50767948, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x50767948, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fdf06ac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0103.041] SetErrorMode (uMode=0x0) returned 0x1 [0103.041] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\si-lk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\si-lk\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.043] SetErrorMode (uMode=0x1) returned 0x0 [0103.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.043] GetFileType (hFile=0x230) returned 0x1 [0103.044] SetErrorMode (uMode=0x0) returned 0x1 [0103.044] GetFileType (hFile=0x230) returned 0x1 [0103.044] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.044] ReadFile (in: hFile=0x230, lpBuffer=0x27ad4a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ad4a0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.045] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.045] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.045] WriteFile (in: hFile=0x230, lpBuffer=0x27ad4a0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ad4a0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.045] CloseHandle (hObject=0x230) returned 1 [0103.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.047] SetErrorMode (uMode=0x1) returned 0x0 [0103.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50afb1b1, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x50afb1b1, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fdf06ac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0103.047] SetErrorMode (uMode=0x0) returned 0x1 [0103.047] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sk\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.048] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.048] SetErrorMode (uMode=0x1) returned 0x0 [0103.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.049] GetFileType (hFile=0x230) returned 0x1 [0103.049] SetErrorMode (uMode=0x0) returned 0x1 [0103.049] GetFileType (hFile=0x230) returned 0x1 [0103.049] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.049] ReadFile (in: hFile=0x230, lpBuffer=0x27b0da0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b0da0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.051] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.051] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.051] WriteFile (in: hFile=0x230, lpBuffer=0x27b0da0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b0da0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.052] CloseHandle (hObject=0x230) returned 1 [0103.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.052] SetErrorMode (uMode=0x1) returned 0x0 [0103.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5158f887, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5158f887, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fdf06ac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x234d0)) returned 1 [0103.052] SetErrorMode (uMode=0x0) returned 0x1 [0103.052] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sl\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.053] SetErrorMode (uMode=0x1) returned 0x0 [0103.053] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.054] GetFileType (hFile=0x230) returned 0x1 [0103.055] SetErrorMode (uMode=0x0) returned 0x1 [0103.055] GetFileType (hFile=0x230) returned 0x1 [0103.055] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.055] ReadFile (in: hFile=0x230, lpBuffer=0x27b46a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b46a0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.056] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.056] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.056] WriteFile (in: hFile=0x230, lpBuffer=0x27b46a0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b46a0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.057] CloseHandle (hObject=0x230) returned 1 [0103.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.061] SetErrorMode (uMode=0x1) returned 0x0 [0103.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5196f58f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5196f58f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fe16d05, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x242d0)) returned 1 [0103.061] SetErrorMode (uMode=0x0) returned 0x1 [0103.061] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sq\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sq\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.063] SetErrorMode (uMode=0x1) returned 0x0 [0103.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.064] GetFileType (hFile=0x230) returned 0x1 [0103.064] SetErrorMode (uMode=0x0) returned 0x1 [0103.064] GetFileType (hFile=0x230) returned 0x1 [0103.064] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.064] ReadFile (in: hFile=0x230, lpBuffer=0x27b7fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27b7fd0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.066] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.066] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.066] WriteFile (in: hFile=0x230, lpBuffer=0x27b7fd0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27b7fd0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.066] CloseHandle (hObject=0x230) returned 1 [0103.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0103.066] SetErrorMode (uMode=0x1) returned 0x0 [0103.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51d02df8, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x51d02df8, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fe16d05, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x236c8)) returned 1 [0103.067] SetErrorMode (uMode=0x0) returned 0x1 [0103.067] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-ba\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-ba\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.068] SetErrorMode (uMode=0x1) returned 0x0 [0103.068] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.069] GetFileType (hFile=0x230) returned 0x1 [0103.069] SetErrorMode (uMode=0x0) returned 0x1 [0103.069] GetFileType (hFile=0x230) returned 0x1 [0103.069] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.069] ReadFile (in: hFile=0x230, lpBuffer=0x27bb960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27bb960*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.071] WriteFile (in: hFile=0x230, lpBuffer=0x27bb960*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27bb960*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.071] CloseHandle (hObject=0x230) returned 1 [0103.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0103.072] SetErrorMode (uMode=0x1) returned 0x0 [0103.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x520703fb, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x520703fb, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fe3c8ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0103.072] SetErrorMode (uMode=0x0) returned 0x1 [0103.072] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-cyrl-rs\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-cyrl-rs\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.073] SetErrorMode (uMode=0x1) returned 0x0 [0103.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.074] GetFileType (hFile=0x230) returned 0x1 [0103.074] SetErrorMode (uMode=0x0) returned 0x1 [0103.074] GetFileType (hFile=0x230) returned 0x1 [0103.074] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.074] ReadFile (in: hFile=0x230, lpBuffer=0x27bf2f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27bf2f0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.076] WriteFile (in: hFile=0x230, lpBuffer=0x27bf2f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27bf2f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.076] CloseHandle (hObject=0x230) returned 1 [0103.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0103.138] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0103.138] SetErrorMode (uMode=0x1) returned 0x0 [0103.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5247637a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5247637a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3fed53ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0103.138] SetErrorMode (uMode=0x0) returned 0x1 [0103.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sr-latn-rs\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sr-latn-rs\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.140] SetErrorMode (uMode=0x1) returned 0x0 [0103.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.141] GetFileType (hFile=0x230) returned 0x1 [0103.141] SetErrorMode (uMode=0x0) returned 0x1 [0103.141] GetFileType (hFile=0x230) returned 0x1 [0103.141] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.141] ReadFile (in: hFile=0x230, lpBuffer=0x27c2c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c2c50*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.161] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.161] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.161] WriteFile (in: hFile=0x230, lpBuffer=0x27c2c50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c2c50*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.161] CloseHandle (hObject=0x230) returned 1 [0103.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.168] SetErrorMode (uMode=0x1) returned 0x0 [0103.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5285608f, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5285608f, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ff21731, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x21ac8)) returned 1 [0103.169] SetErrorMode (uMode=0x0) returned 0x1 [0103.169] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sv\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sv\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.170] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.170] SetErrorMode (uMode=0x1) returned 0x0 [0103.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.171] GetFileType (hFile=0x230) returned 0x1 [0103.171] SetErrorMode (uMode=0x0) returned 0x1 [0103.171] GetFileType (hFile=0x230) returned 0x1 [0103.171] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.171] ReadFile (in: hFile=0x230, lpBuffer=0x27c6550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c6550*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.173] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.173] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.173] WriteFile (in: hFile=0x230, lpBuffer=0x27c6550*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c6550*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.173] CloseHandle (hObject=0x230) returned 1 [0103.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.189] SetErrorMode (uMode=0x1) returned 0x0 [0103.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c5bff9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x52c5bff9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ff4796f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x218d0)) returned 1 [0103.189] SetErrorMode (uMode=0x0) returned 0x1 [0103.189] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\sw\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\sw\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.190] SetErrorMode (uMode=0x1) returned 0x0 [0103.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.191] GetFileType (hFile=0x230) returned 0x1 [0103.191] SetErrorMode (uMode=0x0) returned 0x1 [0103.192] GetFileType (hFile=0x230) returned 0x1 [0103.192] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.192] ReadFile (in: hFile=0x230, lpBuffer=0x27c9e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27c9e50*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.204] WriteFile (in: hFile=0x230, lpBuffer=0x27c9e50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27c9e50*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.205] CloseHandle (hObject=0x230) returned 1 [0103.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.247] SetErrorMode (uMode=0x1) returned 0x0 [0103.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x538d14f4, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x538d14f4, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ffe04c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x262d0)) returned 1 [0103.247] SetErrorMode (uMode=0x0) returned 0x1 [0103.247] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ta\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ta\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.248] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.249] SetErrorMode (uMode=0x1) returned 0x0 [0103.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.250] GetFileType (hFile=0x230) returned 0x1 [0103.250] SetErrorMode (uMode=0x0) returned 0x1 [0103.250] GetFileType (hFile=0x230) returned 0x1 [0103.250] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.250] ReadFile (in: hFile=0x230, lpBuffer=0x27cd750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27cd750*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.252] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.252] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.252] WriteFile (in: hFile=0x230, lpBuffer=0x27cd750*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27cd750*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.252] CloseHandle (hObject=0x230) returned 1 [0103.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.252] SetErrorMode (uMode=0x1) returned 0x0 [0103.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea10bd, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x53ea10bd, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x3ffe04c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23ad0)) returned 1 [0103.252] SetErrorMode (uMode=0x0) returned 0x1 [0103.253] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\te\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\te\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0103.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0103.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0103.254] SetErrorMode (uMode=0x1) returned 0x0 [0103.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.255] GetFileType (hFile=0x230) returned 0x1 [0103.255] SetErrorMode (uMode=0x0) returned 0x1 [0103.256] GetFileType (hFile=0x230) returned 0x1 [0103.256] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.256] ReadFile (in: hFile=0x230, lpBuffer=0x27d1068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d1068*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.281] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.281] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.282] WriteFile (in: hFile=0x230, lpBuffer=0x27d1068*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27d1068*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.282] CloseHandle (hObject=0x230) returned 1 [0103.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0103.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0103.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0103.282] SetErrorMode (uMode=0x1) returned 0x0 [0103.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54280dcf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x54280dcf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4002c8f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x254d0)) returned 1 [0103.283] SetErrorMode (uMode=0x0) returned 0x1 [0103.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tg-cyrl\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tg-cyrl\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.284] SetErrorMode (uMode=0x1) returned 0x0 [0103.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.286] GetFileType (hFile=0x230) returned 0x1 [0103.286] SetErrorMode (uMode=0x0) returned 0x1 [0103.286] GetFileType (hFile=0x230) returned 0x1 [0103.286] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.286] ReadFile (in: hFile=0x230, lpBuffer=0x27d4998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d4998*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.288] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.288] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.288] WriteFile (in: hFile=0x230, lpBuffer=0x27d4998*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27d4998*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.288] CloseHandle (hObject=0x230) returned 1 [0103.288] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.289] SetErrorMode (uMode=0x1) returned 0x0 [0103.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5463a88d, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5463a88d, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4002c8f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1fad0)) returned 1 [0103.289] SetErrorMode (uMode=0x0) returned 0x1 [0103.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\th\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\th\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.290] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.290] SetErrorMode (uMode=0x1) returned 0x0 [0103.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.292] GetFileType (hFile=0x230) returned 0x1 [0103.292] SetErrorMode (uMode=0x0) returned 0x1 [0103.292] GetFileType (hFile=0x230) returned 0x1 [0103.292] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.292] ReadFile (in: hFile=0x230, lpBuffer=0x27d8298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27d8298*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.302] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.302] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.302] WriteFile (in: hFile=0x230, lpBuffer=0x27d8298*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27d8298*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.303] CloseHandle (hObject=0x230) returned 1 [0103.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.303] SetErrorMode (uMode=0x1) returned 0x0 [0103.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549f4385, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x549f4385, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x40052acb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19ed0)) returned 1 [0103.304] SetErrorMode (uMode=0x0) returned 0x1 [0103.304] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ti\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ti\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.306] SetErrorMode (uMode=0x1) returned 0x0 [0103.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.307] GetFileType (hFile=0x230) returned 0x1 [0103.307] SetErrorMode (uMode=0x0) returned 0x1 [0103.307] GetFileType (hFile=0x230) returned 0x1 [0103.308] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.308] ReadFile (in: hFile=0x230, lpBuffer=0x27dbb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27dbb98*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.324] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.324] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.324] WriteFile (in: hFile=0x230, lpBuffer=0x27dbb98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27dbb98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.325] CloseHandle (hObject=0x230) returned 1 [0103.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0103.342] SetErrorMode (uMode=0x1) returned 0x0 [0103.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54eb8f10, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x54eb8f10, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x400c7565, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x210d0)) returned 1 [0103.342] SetErrorMode (uMode=0x0) returned 0x1 [0103.342] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tk-tm\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tk-tm\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.343] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.343] SetErrorMode (uMode=0x1) returned 0x0 [0103.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.344] GetFileType (hFile=0x230) returned 0x1 [0103.344] SetErrorMode (uMode=0x0) returned 0x1 [0103.344] GetFileType (hFile=0x230) returned 0x1 [0103.344] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.344] ReadFile (in: hFile=0x230, lpBuffer=0x27df498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27df498*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.363] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.363] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.363] WriteFile (in: hFile=0x230, lpBuffer=0x27df498*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27df498*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.364] CloseHandle (hObject=0x230) returned 1 [0103.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0103.364] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0103.364] SetErrorMode (uMode=0x1) returned 0x0 [0103.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55272929, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55272929, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x400eb63a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x26ed0)) returned 1 [0103.364] SetErrorMode (uMode=0x0) returned 0x1 [0103.364] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tn-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tn-za\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.366] SetErrorMode (uMode=0x1) returned 0x0 [0103.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.367] GetFileType (hFile=0x230) returned 0x1 [0103.367] SetErrorMode (uMode=0x0) returned 0x1 [0103.367] GetFileType (hFile=0x230) returned 0x1 [0103.367] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.367] ReadFile (in: hFile=0x230, lpBuffer=0x27e2d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e2d98*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.380] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.380] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.380] WriteFile (in: hFile=0x230, lpBuffer=0x27e2d98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e2d98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.380] CloseHandle (hObject=0x230) returned 1 [0103.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.383] SetErrorMode (uMode=0x1) returned 0x0 [0103.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x556526d2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x556526d2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x401123d5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x222d0)) returned 1 [0103.383] SetErrorMode (uMode=0x0) returned 0x1 [0103.383] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tr\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tr\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.385] SetErrorMode (uMode=0x1) returned 0x0 [0103.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.386] GetFileType (hFile=0x230) returned 0x1 [0103.386] SetErrorMode (uMode=0x0) returned 0x1 [0103.386] GetFileType (hFile=0x230) returned 0x1 [0103.386] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.386] ReadFile (in: hFile=0x230, lpBuffer=0x27e6698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e6698*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.388] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.388] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.388] WriteFile (in: hFile=0x230, lpBuffer=0x27e6698*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e6698*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.388] CloseHandle (hObject=0x230) returned 1 [0103.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.389] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.389] SetErrorMode (uMode=0x1) returned 0x0 [0103.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55aa4a71, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55aa4a71, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x40137721, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x228d0)) returned 1 [0103.389] SetErrorMode (uMode=0x0) returned 0x1 [0103.389] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\tt\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\tt\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0103.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0103.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0103.390] SetErrorMode (uMode=0x1) returned 0x0 [0103.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.391] GetFileType (hFile=0x230) returned 0x1 [0103.391] SetErrorMode (uMode=0x0) returned 0x1 [0103.391] GetFileType (hFile=0x230) returned 0x1 [0103.391] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.392] ReadFile (in: hFile=0x230, lpBuffer=0x27e9fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e9fb0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.401] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.401] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.401] WriteFile (in: hFile=0x230, lpBuffer=0x27e9fb0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e9fb0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.402] CloseHandle (hObject=0x230) returned 1 [0103.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0103.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x71 [0103.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0103.403] SetErrorMode (uMode=0x1) returned 0x0 [0103.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55eaaa74, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x55eaaa74, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4015da8d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x214d0)) returned 1 [0103.403] SetErrorMode (uMode=0x0) returned 0x1 [0103.403] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ug-arab\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ug-arab\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.404] SetErrorMode (uMode=0x1) returned 0x0 [0103.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.405] GetFileType (hFile=0x230) returned 0x1 [0103.405] SetErrorMode (uMode=0x0) returned 0x1 [0103.405] GetFileType (hFile=0x230) returned 0x1 [0103.405] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.405] ReadFile (in: hFile=0x230, lpBuffer=0x27ed8e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ed8e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.407] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.407] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.407] WriteFile (in: hFile=0x230, lpBuffer=0x27ed8e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ed8e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.407] CloseHandle (hObject=0x230) returned 1 [0103.681] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0103.682] SetErrorMode (uMode=0x1) returned 0x0 [0103.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x562d6ba3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x562d6ba3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4040c679, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23cd0)) returned 1 [0103.682] SetErrorMode (uMode=0x0) returned 0x1 [0103.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uk\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uk\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0103.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.683] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0103.683] SetErrorMode (uMode=0x1) returned 0x0 [0103.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0103.684] GetFileType (hFile=0x230) returned 0x1 [0103.684] SetErrorMode (uMode=0x0) returned 0x1 [0103.684] GetFileType (hFile=0x230) returned 0x1 [0103.684] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.684] ReadFile (in: hFile=0x230, lpBuffer=0x27f11e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f11e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0103.943] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0103.943] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0103.943] WriteFile (in: hFile=0x230, lpBuffer=0x27f11e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f11e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0103.943] CloseHandle (hObject=0x230) returned 1 [0104.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0104.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0104.549] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0104.549] SetErrorMode (uMode=0x1) returned 0x0 [0104.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566b68bf, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x566b68bf, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x40c3e5e9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x238d0)) returned 1 [0104.549] SetErrorMode (uMode=0x0) returned 0x1 [0104.549] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\ur\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\ur\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0104.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0104.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0104.550] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0104.550] SetErrorMode (uMode=0x1) returned 0x0 [0104.550] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0104.551] GetFileType (hFile=0x230) returned 0x1 [0104.551] SetErrorMode (uMode=0x0) returned 0x1 [0104.551] GetFileType (hFile=0x230) returned 0x1 [0104.551] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0104.551] ReadFile (in: hFile=0x230, lpBuffer=0x27f4b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f4b10*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0104.879] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0104.879] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0104.879] WriteFile (in: hFile=0x230, lpBuffer=0x27f4b10*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f4b10*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0104.879] CloseHandle (hObject=0x230) returned 1 [0105.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0105.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x74 [0105.847] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0105.847] SetErrorMode (uMode=0x1) returned 0x0 [0105.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a7037a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x56a7037a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41893613, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x244d0)) returned 1 [0105.848] SetErrorMode (uMode=0x0) returned 0x1 [0105.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\uz-latn-uz\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\uz-latn-uz\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0105.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0105.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0105.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0105.849] SetErrorMode (uMode=0x1) returned 0x0 [0105.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0105.850] GetFileType (hFile=0x230) returned 0x1 [0105.850] SetErrorMode (uMode=0x0) returned 0x1 [0105.850] GetFileType (hFile=0x230) returned 0x1 [0105.850] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0105.850] ReadFile (in: hFile=0x230, lpBuffer=0x27f8470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f8470*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0105.995] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0105.995] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0105.995] WriteFile (in: hFile=0x230, lpBuffer=0x27f8470*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f8470*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.204] CloseHandle (hObject=0x230) returned 1 [0106.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0106.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0106.205] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0106.205] SetErrorMode (uMode=0x1) returned 0x0 [0106.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56e03bd9, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x56e03bd9, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41c00d3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x224d0)) returned 1 [0106.205] SetErrorMode (uMode=0x0) returned 0x1 [0106.205] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\vi\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\vi\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0106.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0106.206] SetErrorMode (uMode=0x1) returned 0x0 [0106.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.207] GetFileType (hFile=0x230) returned 0x1 [0106.207] SetErrorMode (uMode=0x0) returned 0x1 [0106.207] GetFileType (hFile=0x230) returned 0x1 [0106.207] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.208] ReadFile (in: hFile=0x230, lpBuffer=0x27fbd70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27fbd70*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.348] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.348] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.348] WriteFile (in: hFile=0x230, lpBuffer=0x27fbd70*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27fbd70*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.349] CloseHandle (hObject=0x230) returned 1 [0106.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0106.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6c [0106.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0106.358] SetErrorMode (uMode=0x1) returned 0x0 [0106.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x571e38ee, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x571e38ee, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41d7e4ec, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f6d0)) returned 1 [0106.358] SetErrorMode (uMode=0x0) returned 0x1 [0106.358] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\wo\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\wo\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0106.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.359] SetErrorMode (uMode=0x1) returned 0x0 [0106.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.360] GetFileType (hFile=0x230) returned 0x1 [0106.360] SetErrorMode (uMode=0x0) returned 0x1 [0106.360] GetFileType (hFile=0x230) returned 0x1 [0106.360] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.360] ReadFile (in: hFile=0x230, lpBuffer=0x27ff670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ff670*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.407] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.407] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.407] WriteFile (in: hFile=0x230, lpBuffer=0x27ff670*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ff670*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.408] CloseHandle (hObject=0x230) returned 1 [0106.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0106.410] SetErrorMode (uMode=0x1) returned 0x0 [0106.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5759d401, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5759d401, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41df0ae0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22ad0)) returned 1 [0106.411] SetErrorMode (uMode=0x0) returned 0x1 [0106.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\xh-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\xh-za\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0106.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.412] SetErrorMode (uMode=0x1) returned 0x0 [0106.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.414] GetFileType (hFile=0x230) returned 0x1 [0106.414] SetErrorMode (uMode=0x0) returned 0x1 [0106.414] GetFileType (hFile=0x230) returned 0x1 [0106.414] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.414] ReadFile (in: hFile=0x230, lpBuffer=0x2802f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2802f70*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.428] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.428] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.428] WriteFile (in: hFile=0x230, lpBuffer=0x2802f70*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2802f70*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.428] CloseHandle (hObject=0x230) returned 1 [0106.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.452] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0106.452] SetErrorMode (uMode=0x1) returned 0x0 [0106.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5797d0d2, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5797d0d2, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41e631a6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x216d0)) returned 1 [0106.453] SetErrorMode (uMode=0x0) returned 0x1 [0106.453] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\yo-ng\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\yo-ng\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0106.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.454] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.454] SetErrorMode (uMode=0x1) returned 0x0 [0106.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.455] GetFileType (hFile=0x230) returned 0x1 [0106.455] SetErrorMode (uMode=0x0) returned 0x1 [0106.455] GetFileType (hFile=0x230) returned 0x1 [0106.455] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.455] ReadFile (in: hFile=0x230, lpBuffer=0x2806870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2806870*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.457] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.457] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.457] WriteFile (in: hFile=0x230, lpBuffer=0x2806870*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2806870*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.457] CloseHandle (hObject=0x230) returned 1 [0106.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.458] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0106.458] SetErrorMode (uMode=0x1) returned 0x0 [0106.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57d36b78, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x57d36b78, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41e8929b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x114c8)) returned 1 [0106.458] SetErrorMode (uMode=0x0) returned 0x1 [0106.458] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-cn\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-cn\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0106.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.465] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.465] SetErrorMode (uMode=0x1) returned 0x0 [0106.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.466] GetFileType (hFile=0x230) returned 0x1 [0106.466] SetErrorMode (uMode=0x0) returned 0x1 [0106.466] GetFileType (hFile=0x230) returned 0x1 [0106.466] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.466] ReadFile (in: hFile=0x230, lpBuffer=0x280a170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x280a170*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.503] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.503] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.503] WriteFile (in: hFile=0x230, lpBuffer=0x280a170*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x280a170*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.503] CloseHandle (hObject=0x230) returned 1 [0106.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0106.520] SetErrorMode (uMode=0x1) returned 0x0 [0106.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5811689b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x5811689b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41f21df2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8)) returned 1 [0106.521] SetErrorMode (uMode=0x0) returned 0x1 [0106.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zh-tw\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zh-tw\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0106.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.522] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.522] SetErrorMode (uMode=0x1) returned 0x0 [0106.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\filesync.localizedresources.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.523] GetFileType (hFile=0x230) returned 0x1 [0106.523] SetErrorMode (uMode=0x0) returned 0x1 [0106.523] GetFileType (hFile=0x230) returned 0x1 [0106.523] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.523] ReadFile (in: hFile=0x230, lpBuffer=0x280da70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x280da70*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.524] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.524] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.524] WriteFile (in: hFile=0x230, lpBuffer=0x280da70*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x280da70*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.525] CloseHandle (hObject=0x230) returned 1 [0106.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui", lpFilePart=0x0) returned 0x6f [0106.525] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0106.525] SetErrorMode (uMode=0x1) returned 0x0 [0106.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\filesync.localizedresources.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x584d034b, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x584d034b, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x41f21df2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24ad0)) returned 1 [0106.525] SetErrorMode (uMode=0x0) returned 0x1 [0106.526] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\filesync.localizedresources.dll.mui"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\17.3.6998.0830\\zu-za\\FileSync.LocalizedResources.dll.mui.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\17.3.6998.0830\\zu-za\\filesync.localizedresources.dll.mui.partially.cryptonar")) returned 1 [0106.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", lpFilePart=0x0) returned 0x6c [0106.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", lpFilePart=0x0) returned 0x6c [0106.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", lpFilePart=0x0) returned 0x6c [0106.527] SetErrorMode (uMode=0x1) returned 0x0 [0106.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.529] GetFileType (hFile=0x230) returned 0x1 [0106.529] SetErrorMode (uMode=0x0) returned 0x1 [0106.530] GetFileType (hFile=0x230) returned 0x1 [0106.530] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.530] ReadFile (in: hFile=0x230, lpBuffer=0x2811390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2811390*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.553] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.553] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.553] WriteFile (in: hFile=0x230, lpBuffer=0x2811390*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2811390*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.553] CloseHandle (hObject=0x230) returned 1 [0106.553] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", lpFilePart=0x0) returned 0x6c [0106.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl", lpFilePart=0x0) returned 0x6c [0106.554] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0106.554] SetErrorMode (uMode=0x1) returned 0x0 [0106.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe46218c7, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe46218c7, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x41f70875, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ba3)) returned 1 [0106.554] SetErrorMode (uMode=0x0) returned 0x1 [0106.554] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-12.641.736.1.odl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-12.641.736.1.odl.partially.cryptonar")) returned 1 [0106.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", lpFilePart=0x0) returned 0x6d [0106.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", lpFilePart=0x0) returned 0x6d [0106.555] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", lpFilePart=0x0) returned 0x6d [0106.555] SetErrorMode (uMode=0x1) returned 0x0 [0106.556] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.556] GetFileType (hFile=0x230) returned 0x1 [0106.556] SetErrorMode (uMode=0x0) returned 0x1 [0106.556] GetFileType (hFile=0x230) returned 0x1 [0106.556] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.556] ReadFile (in: hFile=0x230, lpBuffer=0x2814cb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2814cb0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.581] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.581] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.581] WriteFile (in: hFile=0x230, lpBuffer=0x2814cb0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2814cb0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.581] CloseHandle (hObject=0x230) returned 1 [0106.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", lpFilePart=0x0) returned 0x6d [0106.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl", lpFilePart=0x0) returned 0x6d [0106.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl.partially.cryptoNar", lpFilePart=0x0) returned 0x81 [0106.582] SetErrorMode (uMode=0x1) returned 0x0 [0106.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5d275a09, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5d275a09, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x41fba6a0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0106.582] SetErrorMode (uMode=0x0) returned 0x1 [0106.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.114.4068.1.odl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.114.4068.1.odl.partially.cryptonar")) returned 1 [0106.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", lpFilePart=0x0) returned 0x6e [0106.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", lpFilePart=0x0) returned 0x6e [0106.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", lpFilePart=0x0) returned 0x6e [0106.584] SetErrorMode (uMode=0x1) returned 0x0 [0106.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.585] GetFileType (hFile=0x230) returned 0x1 [0106.585] SetErrorMode (uMode=0x0) returned 0x1 [0106.585] GetFileType (hFile=0x230) returned 0x1 [0106.585] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.585] ReadFile (in: hFile=0x230, lpBuffer=0x28185d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28185d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.611] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.612] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.612] WriteFile (in: hFile=0x230, lpBuffer=0x28185d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28185d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.612] CloseHandle (hObject=0x230) returned 1 [0106.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", lpFilePart=0x0) returned 0x6e [0106.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl", lpFilePart=0x0) returned 0x6e [0106.612] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0106.612] SetErrorMode (uMode=0x1) returned 0x0 [0106.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xac307d57, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xac307d57, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x41fe09ad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0106.613] SetErrorMode (uMode=0x0) returned 0x1 [0106.613] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-13.2154.3480.1.odl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-13.2154.3480.1.odl.partially.cryptonar")) returned 1 [0106.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", lpFilePart=0x0) returned 0x6e [0106.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", lpFilePart=0x0) returned 0x6e [0106.614] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", lpFilePart=0x0) returned 0x6e [0106.614] SetErrorMode (uMode=0x1) returned 0x0 [0106.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.615] GetFileType (hFile=0x230) returned 0x1 [0106.615] SetErrorMode (uMode=0x0) returned 0x1 [0106.616] GetFileType (hFile=0x230) returned 0x1 [0106.616] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.616] ReadFile (in: hFile=0x230, lpBuffer=0x281bef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x281bef0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.639] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.639] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.639] WriteFile (in: hFile=0x230, lpBuffer=0x281bef0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x281bef0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.640] CloseHandle (hObject=0x230) returned 1 [0106.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", lpFilePart=0x0) returned 0x6e [0106.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl", lpFilePart=0x0) returned 0x6e [0106.640] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0106.640] SetErrorMode (uMode=0x1) returned 0x0 [0106.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xa5031e9, ftCreationTime.dwHighDateTime=0x1d3001d, ftLastAccessTime.dwLowDateTime=0xa5031e9, ftLastAccessTime.dwHighDateTime=0x1d3001d, ftLastWriteTime.dwLowDateTime=0x4202d7e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0106.641] SetErrorMode (uMode=0x0) returned 0x1 [0106.641] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-18.2324.2928.1.odl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-18.2324.2928.1.odl.partially.cryptonar")) returned 1 [0106.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", lpFilePart=0x0) returned 0x6d [0106.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", lpFilePart=0x0) returned 0x6d [0106.642] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", lpFilePart=0x0) returned 0x6d [0106.642] SetErrorMode (uMode=0x1) returned 0x0 [0106.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.644] GetFileType (hFile=0x230) returned 0x1 [0106.644] SetErrorMode (uMode=0x0) returned 0x1 [0106.644] GetFileType (hFile=0x230) returned 0x1 [0106.644] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.645] ReadFile (in: hFile=0x230, lpBuffer=0x281f810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x281f810*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.657] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.658] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.658] WriteFile (in: hFile=0x230, lpBuffer=0x281f810*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x281f810*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.658] CloseHandle (hObject=0x230) returned 1 [0106.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", lpFilePart=0x0) returned 0x6d [0106.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl", lpFilePart=0x0) returned 0x6d [0106.658] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl.partially.cryptoNar", lpFilePart=0x0) returned 0x81 [0106.658] SetErrorMode (uMode=0x1) returned 0x0 [0106.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x7cad81c7, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7cad81c7, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x420531c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0106.659] SetErrorMode (uMode=0x0) returned 0x1 [0106.659] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-7-21.155.3700.1.odl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-7-21.155.3700.1.odl.partially.cryptonar")) returned 1 [0106.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", lpFilePart=0x0) returned 0x6e [0106.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", lpFilePart=0x0) returned 0x6e [0106.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", lpFilePart=0x0) returned 0x6e [0106.661] SetErrorMode (uMode=0x1) returned 0x0 [0106.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.662] GetFileType (hFile=0x230) returned 0x1 [0106.662] SetErrorMode (uMode=0x0) returned 0x1 [0106.663] GetFileType (hFile=0x230) returned 0x1 [0106.663] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.663] ReadFile (in: hFile=0x230, lpBuffer=0x2823130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2823130*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.665] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.665] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.665] WriteFile (in: hFile=0x230, lpBuffer=0x2823130*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2823130*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.665] CloseHandle (hObject=0x230) returned 1 [0106.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", lpFilePart=0x0) returned 0x6e [0106.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl", lpFilePart=0x0) returned 0x6e [0106.666] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0106.666] SetErrorMode (uMode=0x1) returned 0x0 [0106.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xa9558ba8, ftCreationTime.dwHighDateTime=0x1d33718, ftLastAccessTime.dwLowDateTime=0xa9558ba8, ftLastAccessTime.dwHighDateTime=0x1d33718, ftLastWriteTime.dwLowDateTime=0x4207a6e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ad5)) returned 1 [0106.666] SetErrorMode (uMode=0x0) returned 0x1 [0106.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.2241.1252.1.odl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.2241.1252.1.odl.partially.cryptonar")) returned 1 [0106.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", lpFilePart=0x0) returned 0x6c [0106.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", lpFilePart=0x0) returned 0x6c [0106.668] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", lpFilePart=0x0) returned 0x6c [0106.668] SetErrorMode (uMode=0x1) returned 0x0 [0106.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.669] GetFileType (hFile=0x230) returned 0x1 [0106.669] SetErrorMode (uMode=0x0) returned 0x1 [0106.669] GetFileType (hFile=0x230) returned 0x1 [0106.669] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.669] ReadFile (in: hFile=0x230, lpBuffer=0x2826a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2826a50*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.671] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.671] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.671] WriteFile (in: hFile=0x230, lpBuffer=0x2826a50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2826a50*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.672] CloseHandle (hObject=0x230) returned 1 [0106.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", lpFilePart=0x0) returned 0x6c [0106.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl", lpFilePart=0x0) returned 0x6c [0106.672] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0106.672] SetErrorMode (uMode=0x1) returned 0x0 [0106.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x20afd31a, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x20afd31a, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4207a6e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3cee)) returned 1 [0106.672] SetErrorMode (uMode=0x0) returned 0x1 [0106.673] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\StandaloneUpdater-2017-9-26.63.3668.1.odl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdater-2017-9-26.63.3668.1.odl.partially.cryptonar")) returned 1 [0106.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", lpFilePart=0x0) returned 0x66 [0106.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", lpFilePart=0x0) returned 0x66 [0106.674] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", lpFilePart=0x0) returned 0x66 [0106.674] SetErrorMode (uMode=0x1) returned 0x0 [0106.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.675] GetFileType (hFile=0x230) returned 0x1 [0106.675] SetErrorMode (uMode=0x0) returned 0x1 [0106.676] GetFileType (hFile=0x230) returned 0x1 [0106.676] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.676] ReadFile (in: hFile=0x230, lpBuffer=0x282a320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x282a320*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.688] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.688] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.688] WriteFile (in: hFile=0x230, lpBuffer=0x282a320*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x282a320*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.689] CloseHandle (hObject=0x230) returned 1 [0106.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", lpFilePart=0x0) returned 0x66 [0106.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc", lpFilePart=0x0) returned 0x66 [0106.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0106.689] SetErrorMode (uMode=0x1) returned 0x0 [0106.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5de15648, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5de15648, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x4209f532, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0106.689] SetErrorMode (uMode=0x0) returned 0x1 [0106.689] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.partially.cryptonar")) returned 1 [0106.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", lpFilePart=0x0) returned 0x6e [0106.691] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", lpFilePart=0x0) returned 0x6e [0106.692] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", lpFilePart=0x0) returned 0x6e [0106.692] SetErrorMode (uMode=0x1) returned 0x0 [0106.692] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.693] GetFileType (hFile=0x230) returned 0x1 [0106.693] SetErrorMode (uMode=0x0) returned 0x1 [0106.693] GetFileType (hFile=0x230) returned 0x1 [0106.693] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.693] ReadFile (in: hFile=0x230, lpBuffer=0x282dbf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x282dbf0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.706] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.706] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.706] WriteFile (in: hFile=0x230, lpBuffer=0x282dbf0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x282dbf0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.706] CloseHandle (hObject=0x230) returned 1 [0106.706] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", lpFilePart=0x0) returned 0x6e [0106.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session", lpFilePart=0x0) returned 0x6e [0106.707] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0106.707] SetErrorMode (uMode=0x1) returned 0x0 [0106.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0x5d2c1f43, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5d2c1f43, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x420c59e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0106.707] SetErrorMode (uMode=0x0) returned 0x1 [0106.707] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\standaloneUpdaterTelemetryCache.otc.session.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\standaloneupdatertelemetrycache.otc.session.partially.cryptonar")) returned 1 [0106.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", lpFilePart=0x0) returned 0x55 [0106.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", lpFilePart=0x0) returned 0x55 [0106.709] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", lpFilePart=0x0) returned 0x55 [0106.709] SetErrorMode (uMode=0x1) returned 0x0 [0106.709] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.712] GetFileType (hFile=0x230) returned 0x1 [0106.712] SetErrorMode (uMode=0x0) returned 0x1 [0106.712] GetFileType (hFile=0x230) returned 0x1 [0106.712] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.712] ReadFile (in: hFile=0x230, lpBuffer=0x2831420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2831420*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.716] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.716] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.716] WriteFile (in: hFile=0x230, lpBuffer=0x2831420*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2831420*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.716] CloseHandle (hObject=0x230) returned 1 [0106.716] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", lpFilePart=0x0) returned 0x55 [0106.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc", lpFilePart=0x0) returned 0x55 [0106.717] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.partially.cryptoNar", lpFilePart=0x0) returned 0x69 [0106.717] SetErrorMode (uMode=0x1) returned 0x0 [0106.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe4ba51ac, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe4ba51ac, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x420eb9e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa079b8)) returned 1 [0106.717] SetErrorMode (uMode=0x0) returned 0x1 [0106.717] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.partially.cryptonar")) returned 1 [0106.718] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", lpFilePart=0x0) returned 0x5d [0106.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", lpFilePart=0x0) returned 0x5d [0106.719] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", lpFilePart=0x0) returned 0x5d [0106.719] SetErrorMode (uMode=0x1) returned 0x0 [0106.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.720] GetFileType (hFile=0x230) returned 0x1 [0106.720] SetErrorMode (uMode=0x0) returned 0x1 [0106.720] GetFileType (hFile=0x230) returned 0x1 [0106.720] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.720] ReadFile (in: hFile=0x230, lpBuffer=0x2834b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2834b90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.723] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.723] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.723] WriteFile (in: hFile=0x230, lpBuffer=0x2834b90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2834b90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.725] CloseHandle (hObject=0x230) returned 1 [0106.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", lpFilePart=0x0) returned 0x5d [0106.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session", lpFilePart=0x0) returned 0x5d [0106.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session.partially.cryptoNar", lpFilePart=0x0) returned 0x71 [0106.725] SetErrorMode (uMode=0x1) returned 0x0 [0106.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x820, ftCreationTime.dwLowDateTime=0xe4647ad7, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe4647ad7, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x42111ad5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10278)) returned 1 [0106.725] SetErrorMode (uMode=0x0) returned 0x1 [0106.725] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Common\\telemetryCache.otc.session.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\common\\telemetrycache.otc.session.partially.cryptonar")) returned 1 [0106.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", lpFilePart=0x0) returned 0x61 [0106.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", lpFilePart=0x0) returned 0x61 [0106.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", lpFilePart=0x0) returned 0x61 [0106.727] SetErrorMode (uMode=0x1) returned 0x0 [0106.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.730] GetFileType (hFile=0x230) returned 0x1 [0106.730] SetErrorMode (uMode=0x0) returned 0x1 [0106.730] GetFileType (hFile=0x230) returned 0x1 [0106.730] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.730] ReadFile (in: hFile=0x230, lpBuffer=0x2838378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2838378*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.746] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.746] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.747] WriteFile (in: hFile=0x230, lpBuffer=0x2838378*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2838378*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.747] CloseHandle (hObject=0x230) returned 1 [0106.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", lpFilePart=0x0) returned 0x61 [0106.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl", lpFilePart=0x0) returned 0x61 [0106.747] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl.partially.cryptoNar", lpFilePart=0x0) returned 0x75 [0106.747] SetErrorMode (uMode=0x1) returned 0x0 [0106.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x32447738, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32447738, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x42137f37, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0106.748] SetErrorMode (uMode=0x0) returned 0x1 [0106.748] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.5892.0626-0.etl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.5892.0626-0.etl.partially.cryptonar")) returned 1 [0106.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", lpFilePart=0x0) returned 0x61 [0106.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", lpFilePart=0x0) returned 0x61 [0106.749] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", lpFilePart=0x0) returned 0x61 [0106.749] SetErrorMode (uMode=0x1) returned 0x0 [0106.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.750] GetFileType (hFile=0x230) returned 0x1 [0106.750] SetErrorMode (uMode=0x0) returned 0x1 [0106.750] GetFileType (hFile=0x230) returned 0x1 [0106.750] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.751] ReadFile (in: hFile=0x230, lpBuffer=0x283bb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x283bb98*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.762] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.762] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.762] WriteFile (in: hFile=0x230, lpBuffer=0x283bb98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x283bb98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.763] CloseHandle (hObject=0x230) returned 1 [0106.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", lpFilePart=0x0) returned 0x61 [0106.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl", lpFilePart=0x0) returned 0x61 [0106.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl.partially.cryptoNar", lpFilePart=0x0) returned 0x75 [0106.763] SetErrorMode (uMode=0x1) returned 0x0 [0106.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x17f4329a, ftCreationTime.dwHighDateTime=0x1d2fada, ftLastAccessTime.dwLowDateTime=0x17f4329a, ftLastAccessTime.dwHighDateTime=0x1d2fada, ftLastWriteTime.dwLowDateTime=0x4215e0ff, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0106.763] SetErrorMode (uMode=0x0) returned 0x1 [0106.763] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceArchive.6917.0607-1.etl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracearchive.6917.0607-1.etl.partially.cryptonar")) returned 1 [0106.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", lpFilePart=0x0) returned 0x5f [0106.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", lpFilePart=0x0) returned 0x5f [0106.765] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", lpFilePart=0x0) returned 0x5f [0106.765] SetErrorMode (uMode=0x1) returned 0x0 [0106.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.766] GetFileType (hFile=0x230) returned 0x1 [0106.766] SetErrorMode (uMode=0x0) returned 0x1 [0106.766] GetFileType (hFile=0x230) returned 0x1 [0106.766] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.766] ReadFile (in: hFile=0x230, lpBuffer=0x283f390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x283f390*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.767] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.768] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.768] WriteFile (in: hFile=0x230, lpBuffer=0x283f390*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x283f390*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.768] CloseHandle (hObject=0x230) returned 1 [0106.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", lpFilePart=0x0) returned 0x5f [0106.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl", lpFilePart=0x0) returned 0x5f [0106.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0106.768] SetErrorMode (uMode=0x1) returned 0x0 [0106.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x632c211c, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x632c211c, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4215e0ff, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0106.769] SetErrorMode (uMode=0x0) returned 0x1 [0106.769] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\logs\\Personal\\TraceCurrent.6998.0830.etl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\logs\\personal\\tracecurrent.6998.0830.etl.partially.cryptonar")) returned 1 [0106.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", lpFilePart=0x0) returned 0x5f [0106.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", lpFilePart=0x0) returned 0x5f [0106.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", lpFilePart=0x0) returned 0x5f [0106.772] SetErrorMode (uMode=0x1) returned 0x0 [0106.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.775] GetFileType (hFile=0x230) returned 0x1 [0106.775] SetErrorMode (uMode=0x0) returned 0x1 [0106.775] GetFileType (hFile=0x230) returned 0x1 [0106.775] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.775] ReadFile (in: hFile=0x230, lpBuffer=0x2842b68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2842b68*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.794] WriteFile (in: hFile=0x230, lpBuffer=0x2842b68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2842b68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.795] CloseHandle (hObject=0x230) returned 1 [0106.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", lpFilePart=0x0) returned 0x5f [0106.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log", lpFilePart=0x0) returned 0x5f [0106.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0106.795] SetErrorMode (uMode=0x1) returned 0x0 [0106.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa504dbd7, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa504dbd7, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x421aa616, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2490)) returned 1 [0106.795] SetErrorMode (uMode=0x0) returned 0x1 [0106.795] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121120_934-848.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121120_934-848.log.partially.cryptonar")) returned 1 [0106.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", lpFilePart=0x0) returned 0x5f [0106.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", lpFilePart=0x0) returned 0x5f [0106.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", lpFilePart=0x0) returned 0x5f [0106.797] SetErrorMode (uMode=0x1) returned 0x0 [0106.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.797] GetFileType (hFile=0x230) returned 0x1 [0106.797] SetErrorMode (uMode=0x0) returned 0x1 [0106.797] GetFileType (hFile=0x230) returned 0x1 [0106.797] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.798] ReadFile (in: hFile=0x230, lpBuffer=0x2846340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2846340*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.799] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.799] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.799] WriteFile (in: hFile=0x230, lpBuffer=0x2846340*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2846340*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.799] CloseHandle (hObject=0x230) returned 1 [0106.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", lpFilePart=0x0) returned 0x5f [0106.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log", lpFilePart=0x0) returned 0x5f [0106.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0106.809] SetErrorMode (uMode=0x1) returned 0x0 [0106.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa58cbee9, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa58cbee9, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x421d0750, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x220a)) returned 1 [0106.809] SetErrorMode (uMode=0x0) returned 0x1 [0106.809] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_121121_d68-ddc.log.partially.cryptonar")) returned 1 [0106.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", lpFilePart=0x0) returned 0x5f [0106.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", lpFilePart=0x0) returned 0x5f [0106.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", lpFilePart=0x0) returned 0x5f [0106.810] SetErrorMode (uMode=0x1) returned 0x0 [0106.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.811] GetFileType (hFile=0x230) returned 0x1 [0106.811] SetErrorMode (uMode=0x0) returned 0x1 [0106.811] GetFileType (hFile=0x230) returned 0x1 [0106.811] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.811] ReadFile (in: hFile=0x230, lpBuffer=0x2849b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2849b18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.829] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.829] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.830] WriteFile (in: hFile=0x230, lpBuffer=0x2849b18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2849b18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.830] CloseHandle (hObject=0x230) returned 1 [0106.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", lpFilePart=0x0) returned 0x5f [0106.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log", lpFilePart=0x0) returned 0x5f [0106.830] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0106.830] SetErrorMode (uMode=0x1) returned 0x0 [0106.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e2fe3f, ftCreationTime.dwHighDateTime=0x1d301ca, ftLastAccessTime.dwLowDateTime=0x68e2fe3f, ftLastAccessTime.dwHighDateTime=0x1d301ca, ftLastWriteTime.dwLowDateTime=0x421f6a47, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2490)) returned 1 [0106.830] SetErrorMode (uMode=0x0) returned 0x1 [0106.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123817_760-808.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123817_760-808.log.partially.cryptonar")) returned 1 [0106.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", lpFilePart=0x0) returned 0x5f [0106.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", lpFilePart=0x0) returned 0x5f [0106.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", lpFilePart=0x0) returned 0x5f [0106.833] SetErrorMode (uMode=0x1) returned 0x0 [0106.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.834] GetFileType (hFile=0x230) returned 0x1 [0106.834] SetErrorMode (uMode=0x0) returned 0x1 [0106.834] GetFileType (hFile=0x230) returned 0x1 [0106.834] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.834] ReadFile (in: hFile=0x230, lpBuffer=0x284d2f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x284d2f0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.847] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.847] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.848] WriteFile (in: hFile=0x230, lpBuffer=0x284d2f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x284d2f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.848] CloseHandle (hObject=0x230) returned 1 [0106.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", lpFilePart=0x0) returned 0x5f [0106.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log", lpFilePart=0x0) returned 0x5f [0106.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0106.857] SetErrorMode (uMode=0x1) returned 0x0 [0106.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693d97e2, ftCreationTime.dwHighDateTime=0x1d301ca, ftLastAccessTime.dwLowDateTime=0x693d97e2, ftLastAccessTime.dwHighDateTime=0x1d301ca, ftLastWriteTime.dwLowDateTime=0x42242dfa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x220a)) returned 1 [0106.857] SetErrorMode (uMode=0x0) returned 0x1 [0106.857] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_123818_e38-824.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_123818_e38-824.log.partially.cryptonar")) returned 1 [0106.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", lpFilePart=0x0) returned 0x5f [0106.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", lpFilePart=0x0) returned 0x5f [0106.858] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", lpFilePart=0x0) returned 0x5f [0106.858] SetErrorMode (uMode=0x1) returned 0x0 [0106.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.860] GetFileType (hFile=0x230) returned 0x1 [0106.860] SetErrorMode (uMode=0x0) returned 0x1 [0106.860] GetFileType (hFile=0x230) returned 0x1 [0106.860] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.860] ReadFile (in: hFile=0x230, lpBuffer=0x2850ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2850ac8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.884] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.884] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.885] WriteFile (in: hFile=0x230, lpBuffer=0x2850ac8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2850ac8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.885] CloseHandle (hObject=0x230) returned 1 [0106.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", lpFilePart=0x0) returned 0x5f [0106.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log", lpFilePart=0x0) returned 0x5f [0106.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0106.886] SetErrorMode (uMode=0x1) returned 0x0 [0106.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf56edb56, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0xf56edb56, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x4228f393, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x249e)) returned 1 [0106.886] SetErrorMode (uMode=0x0) returned 0x1 [0106.886] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_864-704.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_864-704.log.partially.cryptonar")) returned 1 [0106.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", lpFilePart=0x0) returned 0x5f [0106.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", lpFilePart=0x0) returned 0x5f [0106.887] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", lpFilePart=0x0) returned 0x5f [0106.887] SetErrorMode (uMode=0x1) returned 0x0 [0106.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.889] GetFileType (hFile=0x230) returned 0x1 [0106.889] SetErrorMode (uMode=0x0) returned 0x1 [0106.889] GetFileType (hFile=0x230) returned 0x1 [0106.889] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.889] ReadFile (in: hFile=0x230, lpBuffer=0x28542a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28542a0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.891] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.891] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.891] WriteFile (in: hFile=0x230, lpBuffer=0x28542a0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28542a0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.891] CloseHandle (hObject=0x230) returned 1 [0106.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", lpFilePart=0x0) returned 0x5f [0106.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log", lpFilePart=0x0) returned 0x5f [0106.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log.partially.cryptoNar", lpFilePart=0x0) returned 0x73 [0106.902] SetErrorMode (uMode=0x1) returned 0x0 [0106.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c711b1, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0xf5c711b1, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x422b55ff, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x21f8)) returned 1 [0106.902] SetErrorMode (uMode=0x0) returned 0x1 [0106.902] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\2017-07-21_133220_ae0-29c.log.partially.cryptonar")) returned 1 [0106.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", lpFilePart=0x0) returned 0x6f [0106.903] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", lpFilePart=0x0) returned 0x6f [0106.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", lpFilePart=0x0) returned 0x6f [0106.904] SetErrorMode (uMode=0x1) returned 0x0 [0106.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.905] GetFileType (hFile=0x230) returned 0x1 [0106.905] SetErrorMode (uMode=0x0) returned 0x1 [0106.905] GetFileType (hFile=0x230) returned 0x1 [0106.905] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.905] ReadFile (in: hFile=0x230, lpBuffer=0x2857b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2857b18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.968] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0106.968] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.969] WriteFile (in: hFile=0x230, lpBuffer=0x2857b18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2857b18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0106.969] CloseHandle (hObject=0x230) returned 1 [0106.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", lpFilePart=0x0) returned 0x6f [0106.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log", lpFilePart=0x0) returned 0x6f [0106.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0106.982] SetErrorMode (uMode=0x1) returned 0x0 [0106.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da6fd59, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x1da6fd59, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x423740b9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7170c)) returned 1 [0106.983] SetErrorMode (uMode=0x0) returned 0x1 [0106.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-05-24_104601_b30-494.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-05-24_104601_b30-494.log.partially.cryptonar")) returned 1 [0106.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", lpFilePart=0x0) returned 0x6f [0106.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", lpFilePart=0x0) returned 0x6f [0106.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", lpFilePart=0x0) returned 0x6f [0106.984] SetErrorMode (uMode=0x1) returned 0x0 [0106.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0106.985] GetFileType (hFile=0x230) returned 0x1 [0106.985] SetErrorMode (uMode=0x0) returned 0x1 [0106.985] GetFileType (hFile=0x230) returned 0x1 [0106.985] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0106.985] ReadFile (in: hFile=0x230, lpBuffer=0x285b450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285b450*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.004] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.004] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.004] WriteFile (in: hFile=0x230, lpBuffer=0x285b450*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x285b450*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.004] CloseHandle (hObject=0x230) returned 1 [0107.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", lpFilePart=0x0) returned 0x6f [0107.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log", lpFilePart=0x0) returned 0x6f [0107.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0107.031] SetErrorMode (uMode=0x1) returned 0x0 [0107.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb92ddff, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xeb92ddff, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x423e6a8f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8d2d4)) returned 1 [0107.032] SetErrorMode (uMode=0x0) returned 0x1 [0107.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-07-12_164141_b14-7f0.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-07-12_164141_b14-7f0.log.partially.cryptonar")) returned 1 [0107.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", lpFilePart=0x0) returned 0x6f [0107.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", lpFilePart=0x0) returned 0x6f [0107.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", lpFilePart=0x0) returned 0x6f [0107.033] SetErrorMode (uMode=0x1) returned 0x0 [0107.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.036] GetFileType (hFile=0x230) returned 0x1 [0107.036] SetErrorMode (uMode=0x0) returned 0x1 [0107.036] GetFileType (hFile=0x230) returned 0x1 [0107.036] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.036] ReadFile (in: hFile=0x230, lpBuffer=0x285ed88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285ed88*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.055] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.055] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.055] WriteFile (in: hFile=0x230, lpBuffer=0x285ed88*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x285ed88*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.055] CloseHandle (hObject=0x230) returned 1 [0107.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", lpFilePart=0x0) returned 0x6f [0107.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log", lpFilePart=0x0) returned 0x6f [0107.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0107.089] SetErrorMode (uMode=0x1) returned 0x0 [0107.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b4b6e03, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2b4b6e03, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x4247f2ef, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x938cc)) returned 1 [0107.089] SetErrorMode (uMode=0x0) returned 0x1 [0107.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install-PerUser_2017-09-26_160326_bb4-8e8.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install-peruser_2017-09-26_160326_bb4-8e8.log.partially.cryptonar")) returned 1 [0107.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", lpFilePart=0x0) returned 0x67 [0107.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", lpFilePart=0x0) returned 0x67 [0107.091] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", lpFilePart=0x0) returned 0x67 [0107.091] SetErrorMode (uMode=0x1) returned 0x0 [0107.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.091] GetFileType (hFile=0x230) returned 0x1 [0107.091] SetErrorMode (uMode=0x0) returned 0x1 [0107.091] GetFileType (hFile=0x230) returned 0x1 [0107.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.091] ReadFile (in: hFile=0x230, lpBuffer=0x2862670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2862670*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.108] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.108] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.108] WriteFile (in: hFile=0x230, lpBuffer=0x2862670*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2862670*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.109] CloseHandle (hObject=0x230) returned 1 [0107.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", lpFilePart=0x0) returned 0x67 [0107.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log", lpFilePart=0x0) returned 0x67 [0107.134] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0107.135] SetErrorMode (uMode=0x1) returned 0x0 [0107.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d161897, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x1d161897, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x424f1b3c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16ee6)) returned 1 [0107.135] SetErrorMode (uMode=0x0) returned 0x1 [0107.135] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-05-24_104600_528-57c.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-05-24_104600_528-57c.log.partially.cryptonar")) returned 1 [0107.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", lpFilePart=0x0) returned 0x67 [0107.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", lpFilePart=0x0) returned 0x67 [0107.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", lpFilePart=0x0) returned 0x67 [0107.136] SetErrorMode (uMode=0x1) returned 0x0 [0107.136] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.137] GetFileType (hFile=0x230) returned 0x1 [0107.137] SetErrorMode (uMode=0x0) returned 0x1 [0107.137] GetFileType (hFile=0x230) returned 0x1 [0107.137] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.137] ReadFile (in: hFile=0x230, lpBuffer=0x2865ef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2865ef8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.143] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.143] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.143] WriteFile (in: hFile=0x230, lpBuffer=0x2865ef8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2865ef8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.145] CloseHandle (hObject=0x230) returned 1 [0107.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", lpFilePart=0x0) returned 0x67 [0107.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log", lpFilePart=0x0) returned 0x67 [0107.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0107.145] SetErrorMode (uMode=0x1) returned 0x0 [0107.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9c1f2ea, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe9c1f2ea, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x42517aaa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1b89a)) returned 1 [0107.145] SetErrorMode (uMode=0x0) returned 0x1 [0107.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-07-12_164138_904-4d0.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-07-12_164138_904-4d0.log.partially.cryptonar")) returned 1 [0107.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", lpFilePart=0x0) returned 0x67 [0107.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", lpFilePart=0x0) returned 0x67 [0107.147] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", lpFilePart=0x0) returned 0x67 [0107.147] SetErrorMode (uMode=0x1) returned 0x0 [0107.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.148] GetFileType (hFile=0x230) returned 0x1 [0107.148] SetErrorMode (uMode=0x0) returned 0x1 [0107.148] GetFileType (hFile=0x230) returned 0x1 [0107.148] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.149] ReadFile (in: hFile=0x230, lpBuffer=0x2869780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2869780*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.167] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.167] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.167] WriteFile (in: hFile=0x230, lpBuffer=0x2869780*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2869780*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.167] CloseHandle (hObject=0x230) returned 1 [0107.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", lpFilePart=0x0) returned 0x67 [0107.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log", lpFilePart=0x0) returned 0x67 [0107.256] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log.partially.cryptoNar", lpFilePart=0x0) returned 0x7b [0107.256] SetErrorMode (uMode=0x1) returned 0x0 [0107.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2950a8b0, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x2950a8b0, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x42622d5e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d2e0)) returned 1 [0107.256] SetErrorMode (uMode=0x0) returned 0x1 [0107.256] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\Install_2017-09-26_160323_3a0-354.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\install_2017-09-26_160323_3a0-354.log.partially.cryptonar")) returned 1 [0107.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", lpFilePart=0x0) returned 0x5a [0107.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", lpFilePart=0x0) returned 0x5a [0107.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", lpFilePart=0x0) returned 0x5a [0107.257] SetErrorMode (uMode=0x1) returned 0x0 [0107.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.258] GetFileType (hFile=0x230) returned 0x1 [0107.258] SetErrorMode (uMode=0x0) returned 0x1 [0107.258] GetFileType (hFile=0x230) returned 0x1 [0107.258] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.258] ReadFile (in: hFile=0x230, lpBuffer=0x286cf90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x286cf90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.260] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.260] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.260] WriteFile (in: hFile=0x230, lpBuffer=0x286cf90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x286cf90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.261] CloseHandle (hObject=0x230) returned 1 [0107.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", lpFilePart=0x0) returned 0x5a [0107.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc", lpFilePart=0x0) returned 0x5a [0107.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0107.261] SetErrorMode (uMode=0x1) returned 0x0 [0107.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb116c64, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xeb116c64, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x42622d5e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0107.261] SetErrorMode (uMode=0x0) returned 0x1 [0107.261] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.partially.cryptonar")) returned 1 [0107.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", lpFilePart=0x0) returned 0x62 [0107.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", lpFilePart=0x0) returned 0x62 [0107.262] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", lpFilePart=0x0) returned 0x62 [0107.262] SetErrorMode (uMode=0x1) returned 0x0 [0107.262] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.263] GetFileType (hFile=0x230) returned 0x1 [0107.263] SetErrorMode (uMode=0x0) returned 0x1 [0107.263] GetFileType (hFile=0x230) returned 0x1 [0107.263] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.263] ReadFile (in: hFile=0x230, lpBuffer=0x2870770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2870770*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.298] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.299] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.299] WriteFile (in: hFile=0x230, lpBuffer=0x2870770*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2870770*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.299] CloseHandle (hObject=0x230) returned 1 [0107.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", lpFilePart=0x0) returned 0x62 [0107.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session", lpFilePart=0x0) returned 0x62 [0107.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session.partially.cryptoNar", lpFilePart=0x0) returned 0x76 [0107.299] SetErrorMode (uMode=0x1) returned 0x0 [0107.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9ead03c, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe9ead03c, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x4266f120, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0107.300] SetErrorMode (uMode=0x0) returned 0x1 [0107.301] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\parentTelemetryCache.otc.session.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\parenttelemetrycache.otc.session.partially.cryptonar")) returned 1 [0107.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", lpFilePart=0x0) returned 0x70 [0107.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", lpFilePart=0x0) returned 0x70 [0107.303] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", lpFilePart=0x0) returned 0x70 [0107.303] SetErrorMode (uMode=0x1) returned 0x0 [0107.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.304] GetFileType (hFile=0x230) returned 0x1 [0107.304] SetErrorMode (uMode=0x0) returned 0x1 [0107.305] GetFileType (hFile=0x230) returned 0x1 [0107.305] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.305] ReadFile (in: hFile=0x230, lpBuffer=0x2874030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2874030*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.316] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.317] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.317] WriteFile (in: hFile=0x230, lpBuffer=0x2874030*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2874030*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.317] CloseHandle (hObject=0x230) returned 1 [0107.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", lpFilePart=0x0) returned 0x70 [0107.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log", lpFilePart=0x0) returned 0x70 [0107.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0107.317] SetErrorMode (uMode=0x1) returned 0x0 [0107.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe538b27e, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe538b27e, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x426bb547, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0107.317] SetErrorMode (uMode=0x0) returned 0x1 [0107.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-12_164130_2e0-2c8.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-12_164130_2e0-2c8.log.partially.cryptonar")) returned 1 [0107.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", lpFilePart=0x0) returned 0x70 [0107.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", lpFilePart=0x0) returned 0x70 [0107.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", lpFilePart=0x0) returned 0x70 [0107.319] SetErrorMode (uMode=0x1) returned 0x0 [0107.319] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-13_111425_fe4-f74.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.320] GetFileType (hFile=0x230) returned 0x1 [0107.320] SetErrorMode (uMode=0x0) returned 0x1 [0107.320] GetFileType (hFile=0x230) returned 0x1 [0107.320] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.320] ReadFile (in: hFile=0x230, lpBuffer=0x28779a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28779a8*, lpNumberOfBytesRead=0x5ae8b8*=0x7d4, lpOverlapped=0x0) returned 1 [0107.334] SetFilePointer (in: hFile=0x230, lDistanceToMove=-980, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.334] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.334] WriteFile (in: hFile=0x230, lpBuffer=0x28779a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28779a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.334] CloseHandle (hObject=0x230) returned 1 [0107.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", lpFilePart=0x0) returned 0x70 [0107.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log", lpFilePart=0x0) returned 0x70 [0107.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0107.335] SetErrorMode (uMode=0x1) returned 0x0 [0107.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-13_111425_fe4-f74.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e53ca2b, ftCreationTime.dwHighDateTime=0x1d2fb75, ftLastAccessTime.dwLowDateTime=0x5e53ca2b, ftLastAccessTime.dwHighDateTime=0x1d2fb75, ftLastWriteTime.dwLowDateTime=0x426e1784, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7d4)) returned 1 [0107.335] SetErrorMode (uMode=0x0) returned 0x1 [0107.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-13_111425_fe4-f74.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-13_111425_fe4-f74.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-13_111425_fe4-f74.log.partially.cryptonar")) returned 1 [0107.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", lpFilePart=0x0) returned 0x70 [0107.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", lpFilePart=0x0) returned 0x70 [0107.337] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", lpFilePart=0x0) returned 0x70 [0107.337] SetErrorMode (uMode=0x1) returned 0x0 [0107.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-14_075507_d98-d94.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.338] GetFileType (hFile=0x230) returned 0x1 [0107.338] SetErrorMode (uMode=0x0) returned 0x1 [0107.338] GetFileType (hFile=0x230) returned 0x1 [0107.339] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.339] ReadFile (in: hFile=0x230, lpBuffer=0x287b320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x287b320*, lpNumberOfBytesRead=0x5ae8b8*=0x7d6, lpOverlapped=0x0) returned 1 [0107.357] SetFilePointer (in: hFile=0x230, lDistanceToMove=-982, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.357] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.357] WriteFile (in: hFile=0x230, lpBuffer=0x287b320*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x287b320*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.357] CloseHandle (hObject=0x230) returned 1 [0107.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", lpFilePart=0x0) returned 0x70 [0107.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log", lpFilePart=0x0) returned 0x70 [0107.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0107.358] SetErrorMode (uMode=0x1) returned 0x0 [0107.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-14_075507_d98-d94.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ee0c79, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb0ee0c79, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x427079fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7d6)) returned 1 [0107.358] SetErrorMode (uMode=0x0) returned 0x1 [0107.358] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-14_075507_d98-d94.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-14_075507_d98-d94.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-14_075507_d98-d94.log.partially.cryptonar")) returned 1 [0107.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", lpFilePart=0x0) returned 0x70 [0107.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", lpFilePart=0x0) returned 0x70 [0107.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", lpFilePart=0x0) returned 0x70 [0107.359] SetErrorMode (uMode=0x1) returned 0x0 [0107.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-19_092447_b70-3a8.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.360] GetFileType (hFile=0x230) returned 0x1 [0107.360] SetErrorMode (uMode=0x0) returned 0x1 [0107.360] GetFileType (hFile=0x230) returned 0x1 [0107.360] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.360] ReadFile (in: hFile=0x230, lpBuffer=0x287ec98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x287ec98*, lpNumberOfBytesRead=0x5ae8b8*=0x7d6, lpOverlapped=0x0) returned 1 [0107.437] SetFilePointer (in: hFile=0x230, lDistanceToMove=-982, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.437] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.437] WriteFile (in: hFile=0x230, lpBuffer=0x287ec98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x287ec98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.437] CloseHandle (hObject=0x230) returned 1 [0107.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", lpFilePart=0x0) returned 0x70 [0107.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log", lpFilePart=0x0) returned 0x70 [0107.437] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0107.437] SetErrorMode (uMode=0x1) returned 0x0 [0107.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-19_092447_b70-3a8.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7818d8, ftCreationTime.dwHighDateTime=0x1d3001d, ftLastAccessTime.dwLowDateTime=0xb7818d8, ftLastAccessTime.dwHighDateTime=0x1d3001d, ftLastWriteTime.dwLowDateTime=0x427c6609, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7d6)) returned 1 [0107.437] SetErrorMode (uMode=0x0) returned 0x1 [0107.438] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-19_092447_b70-3a8.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-19_092447_b70-3a8.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-19_092447_b70-3a8.log.partially.cryptonar")) returned 1 [0107.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", lpFilePart=0x0) returned 0x70 [0107.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", lpFilePart=0x0) returned 0x70 [0107.439] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", lpFilePart=0x0) returned 0x70 [0107.439] SetErrorMode (uMode=0x1) returned 0x0 [0107.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-21_115555_e74-e78.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.440] GetFileType (hFile=0x230) returned 0x1 [0107.440] SetErrorMode (uMode=0x0) returned 0x1 [0107.440] GetFileType (hFile=0x230) returned 0x1 [0107.440] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.440] ReadFile (in: hFile=0x230, lpBuffer=0x2882610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2882610*, lpNumberOfBytesRead=0x5ae8b8*=0x7d6, lpOverlapped=0x0) returned 1 [0107.513] SetFilePointer (in: hFile=0x230, lDistanceToMove=-982, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.513] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.513] WriteFile (in: hFile=0x230, lpBuffer=0x2882610*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2882610*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.513] CloseHandle (hObject=0x230) returned 1 [0107.513] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", lpFilePart=0x0) returned 0x70 [0107.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log", lpFilePart=0x0) returned 0x70 [0107.514] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0107.514] SetErrorMode (uMode=0x1) returned 0x0 [0107.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-21_115555_e74-e78.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d894ca0, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7d894ca0, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x428851d8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7d6)) returned 1 [0107.514] SetErrorMode (uMode=0x0) returned 0x1 [0107.514] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-21_115555_e74-e78.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-07-21_115555_e74-e78.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-07-21_115555_e74-e78.log.partially.cryptonar")) returned 1 [0107.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", lpFilePart=0x0) returned 0x70 [0107.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", lpFilePart=0x0) returned 0x70 [0107.515] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", lpFilePart=0x0) returned 0x70 [0107.515] SetErrorMode (uMode=0x1) returned 0x0 [0107.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.516] GetFileType (hFile=0x230) returned 0x1 [0107.516] SetErrorMode (uMode=0x0) returned 0x1 [0107.516] GetFileType (hFile=0x230) returned 0x1 [0107.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.516] ReadFile (in: hFile=0x230, lpBuffer=0x2885f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2885f88*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.554] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.554] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.554] WriteFile (in: hFile=0x230, lpBuffer=0x2885f88*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2885f88*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.554] CloseHandle (hObject=0x230) returned 1 [0107.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", lpFilePart=0x0) returned 0x70 [0107.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log", lpFilePart=0x0) returned 0x70 [0107.562] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0107.562] SetErrorMode (uMode=0x1) returned 0x0 [0107.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21f213a3, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0x21f213a3, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x428f78f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10ce)) returned 1 [0107.563] SetErrorMode (uMode=0x0) returned 0x1 [0107.563] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-26_160311_e54-e58.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-26_160311_e54-e58.log.partially.cryptonar")) returned 1 [0107.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", lpFilePart=0x0) returned 0x70 [0107.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", lpFilePart=0x0) returned 0x70 [0107.564] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", lpFilePart=0x0) returned 0x70 [0107.564] SetErrorMode (uMode=0x1) returned 0x0 [0107.564] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-27_084159_4e4-594.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.565] GetFileType (hFile=0x230) returned 0x1 [0107.565] SetErrorMode (uMode=0x0) returned 0x1 [0107.565] GetFileType (hFile=0x230) returned 0x1 [0107.565] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.565] ReadFile (in: hFile=0x230, lpBuffer=0x2889900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2889900*, lpNumberOfBytesRead=0x5ae8b8*=0x7d8, lpOverlapped=0x0) returned 1 [0107.572] SetFilePointer (in: hFile=0x230, lDistanceToMove=-984, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.572] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.572] WriteFile (in: hFile=0x230, lpBuffer=0x2889900*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2889900*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.573] CloseHandle (hObject=0x230) returned 1 [0107.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", lpFilePart=0x0) returned 0x70 [0107.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log", lpFilePart=0x0) returned 0x70 [0107.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log.partially.cryptoNar", lpFilePart=0x0) returned 0x84 [0107.573] SetErrorMode (uMode=0x1) returned 0x0 [0107.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-27_084159_4e4-594.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9d18820, ftCreationTime.dwHighDateTime=0x1d33718, ftLastAccessTime.dwLowDateTime=0xa9d18820, ftLastAccessTime.dwHighDateTime=0x1d33718, ftLastWriteTime.dwLowDateTime=0x4291da36, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7d8)) returned 1 [0107.574] SetErrorMode (uMode=0x0) returned 0x1 [0107.574] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-27_084159_4e4-594.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\StandaloneUpdate_2017-09-27_084159_4e4-594.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\standaloneupdate_2017-09-27_084159_4e4-594.log.partially.cryptonar")) returned 1 [0107.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", lpFilePart=0x0) returned 0x58 [0107.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", lpFilePart=0x0) returned 0x58 [0107.575] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", lpFilePart=0x0) returned 0x58 [0107.575] SetErrorMode (uMode=0x1) returned 0x0 [0107.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.576] GetFileType (hFile=0x230) returned 0x1 [0107.576] SetErrorMode (uMode=0x0) returned 0x1 [0107.576] GetFileType (hFile=0x230) returned 0x1 [0107.576] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.576] ReadFile (in: hFile=0x230, lpBuffer=0x288d188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x288d188*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.580] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.581] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.581] WriteFile (in: hFile=0x230, lpBuffer=0x288d188*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x288d188*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.581] CloseHandle (hObject=0x230) returned 1 [0107.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", lpFilePart=0x0) returned 0x58 [0107.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc", lpFilePart=0x0) returned 0x58 [0107.581] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0107.581] SetErrorMode (uMode=0x1) returned 0x0 [0107.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c301fff, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x15f5ac9d, ftLastAccessTime.dwHighDateTime=0x1d2fada, ftLastWriteTime.dwLowDateTime=0x4291da36, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0107.581] SetErrorMode (uMode=0x0) returned 0x1 [0107.581] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.partially.cryptonar")) returned 1 [0107.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", lpFilePart=0x0) returned 0x60 [0107.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", lpFilePart=0x0) returned 0x60 [0107.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", lpFilePart=0x0) returned 0x60 [0107.583] SetErrorMode (uMode=0x1) returned 0x0 [0107.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.584] GetFileType (hFile=0x230) returned 0x1 [0107.584] SetErrorMode (uMode=0x0) returned 0x1 [0107.584] GetFileType (hFile=0x230) returned 0x1 [0107.584] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.584] ReadFile (in: hFile=0x230, lpBuffer=0x2890950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2890950*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.590] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.590] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.590] WriteFile (in: hFile=0x230, lpBuffer=0x2890950*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2890950*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.590] CloseHandle (hObject=0x230) returned 1 [0107.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", lpFilePart=0x0) returned 0x60 [0107.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session", lpFilePart=0x0) returned 0x60 [0107.615] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session.partially.cryptoNar", lpFilePart=0x0) returned 0x74 [0107.615] SetErrorMode (uMode=0x1) returned 0x0 [0107.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc13853, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0xebb9055f, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x4299022e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0107.615] SetErrorMode (uMode=0x0) returned 0x1 [0107.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\setup\\logs\\userTelemetryCache.otc.session.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\setup\\logs\\usertelemetrycache.otc.session.partially.cryptonar")) returned 1 [0107.616] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x5a [0107.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x5a [0107.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x5a [0107.617] SetErrorMode (uMode=0x1) returned 0x0 [0107.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\onedrivesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.617] GetFileType (hFile=0x230) returned 0x1 [0107.618] SetErrorMode (uMode=0x0) returned 0x1 [0107.618] GetFileType (hFile=0x230) returned 0x1 [0107.618] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.618] ReadFile (in: hFile=0x230, lpBuffer=0x2894108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2894108*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.632] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.632] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.632] WriteFile (in: hFile=0x230, lpBuffer=0x2894108*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2894108*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.632] CloseHandle (hObject=0x230) returned 1 [0107.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x5a [0107.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x5a [0107.655] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0107.655] SetErrorMode (uMode=0x1) returned 0x0 [0107.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\onedrivesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f668800, ftCreationTime.dwHighDateTime=0x1d3368d, ftLastAccessTime.dwLowDateTime=0xe91501f4, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x429dc76d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x174a4d0)) returned 1 [0107.655] SetErrorMode (uMode=0x0) returned 0x1 [0107.655] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\onedrivesetup.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\OneDriveSetup.exe.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\onedrivesetup.exe.partially.cryptonar")) returned 1 [0107.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", lpFilePart=0x0) returned 0x53 [0107.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", lpFilePart=0x0) returned 0x53 [0107.657] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", lpFilePart=0x0) returned 0x53 [0107.657] SetErrorMode (uMode=0x1) returned 0x0 [0107.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\update.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.658] GetFileType (hFile=0x230) returned 0x1 [0107.658] SetErrorMode (uMode=0x0) returned 0x1 [0107.658] GetFileType (hFile=0x230) returned 0x1 [0107.658] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.658] ReadFile (in: hFile=0x230, lpBuffer=0x2897818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2897818*, lpNumberOfBytesRead=0x5ae8b8*=0x183, lpOverlapped=0x0) returned 1 [0107.659] ReadFile (in: hFile=0x230, lpBuffer=0x2897818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2897818*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0107.659] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.659] WriteFile (in: hFile=0x230, lpBuffer=0x2897818*, nNumberOfBytesToWrite=0x183, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2897818*, lpNumberOfBytesWritten=0x5ae8a8*=0x183, lpOverlapped=0x0) returned 1 [0107.659] CloseHandle (hObject=0x230) returned 1 [0107.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", lpFilePart=0x0) returned 0x53 [0107.659] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml", lpFilePart=0x0) returned 0x53 [0107.660] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x67 [0107.660] SetErrorMode (uMode=0x1) returned 0x0 [0107.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\update.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe58c2553, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xe58c2553, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x429dc76d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x183)) returned 1 [0107.660] SetErrorMode (uMode=0x0) returned 0x1 [0107.660] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\update.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneDrive\\StandaloneUpdater\\Update.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onedrive\\standaloneupdater\\update.xml.partially.cryptonar")) returned 1 [0107.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", lpFilePart=0x0) returned 0x4d [0107.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", lpFilePart=0x0) returned 0x4d [0107.661] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", lpFilePart=0x0) returned 0x4d [0107.661] SetErrorMode (uMode=0x1) returned 0x0 [0107.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.664] GetFileType (hFile=0x230) returned 0x1 [0107.664] SetErrorMode (uMode=0x0) returned 0x1 [0107.664] GetFileType (hFile=0x230) returned 0x1 [0107.664] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.664] ReadFile (in: hFile=0x230, lpBuffer=0x289ade8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x289ade8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.693] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.693] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.693] WriteFile (in: hFile=0x230, lpBuffer=0x289ade8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x289ade8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.694] CloseHandle (hObject=0x230) returned 1 [0107.726] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", lpFilePart=0x0) returned 0x4d [0107.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin", lpFilePart=0x0) returned 0x4d [0107.727] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0107.727] SetErrorMode (uMode=0x1) returned 0x0 [0107.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e91167, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65e91167, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x42a9b30f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0107.727] SetErrorMode (uMode=0x0) returned 0x1 [0107.727] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000000.bin.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000000.bin.partially.cryptonar")) returned 1 [0107.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", lpFilePart=0x0) returned 0x4d [0107.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", lpFilePart=0x0) returned 0x4d [0107.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", lpFilePart=0x0) returned 0x4d [0107.728] SetErrorMode (uMode=0x1) returned 0x0 [0107.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.729] GetFileType (hFile=0x230) returned 0x1 [0107.729] SetErrorMode (uMode=0x0) returned 0x1 [0107.729] GetFileType (hFile=0x230) returned 0x1 [0107.729] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.729] ReadFile (in: hFile=0x230, lpBuffer=0x289e460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x289e460*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.730] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.730] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.730] WriteFile (in: hFile=0x230, lpBuffer=0x289e460*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x289e460*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.731] CloseHandle (hObject=0x230) returned 1 [0107.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", lpFilePart=0x0) returned 0x4d [0107.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin", lpFilePart=0x0) returned 0x4d [0107.731] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0107.731] SetErrorMode (uMode=0x1) returned 0x0 [0107.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65f0111e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65f0111e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x42a9b30f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0107.731] SetErrorMode (uMode=0x0) returned 0x1 [0107.731] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000001.bin.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000001.bin.partially.cryptonar")) returned 1 [0107.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0107.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0107.732] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin", lpFilePart=0x0) returned 0x4d [0107.732] SetErrorMode (uMode=0x1) returned 0x0 [0107.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000004.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000004.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.739] SetErrorMode (uMode=0x0) returned 0x1 [0107.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0107.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0107.741] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin", lpFilePart=0x0) returned 0x4d [0107.741] SetErrorMode (uMode=0x1) returned 0x0 [0107.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000005.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000005.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.748] SetErrorMode (uMode=0x0) returned 0x1 [0107.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0107.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0107.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin", lpFilePart=0x0) returned 0x4d [0107.750] SetErrorMode (uMode=0x1) returned 0x0 [0107.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000006.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000006.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.755] SetErrorMode (uMode=0x0) returned 0x1 [0107.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0107.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0107.756] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin", lpFilePart=0x0) returned 0x4d [0107.756] SetErrorMode (uMode=0x1) returned 0x0 [0107.756] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000007.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000007.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.758] SetErrorMode (uMode=0x0) returned 0x1 [0107.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0107.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0107.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin", lpFilePart=0x0) returned 0x4d [0107.759] SetErrorMode (uMode=0x1) returned 0x0 [0107.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000008.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000008.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.761] SetErrorMode (uMode=0x0) returned 0x1 [0107.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0107.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0107.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin", lpFilePart=0x0) returned 0x4d [0107.762] SetErrorMode (uMode=0x1) returned 0x0 [0107.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000009.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000009.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.763] SetErrorMode (uMode=0x0) returned 0x1 [0107.763] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0107.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0107.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin", lpFilePart=0x0) returned 0x4d [0107.764] SetErrorMode (uMode=0x1) returned 0x0 [0107.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000C.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000c.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.765] SetErrorMode (uMode=0x0) returned 0x1 [0107.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0107.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0107.766] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin", lpFilePart=0x0) returned 0x4d [0107.766] SetErrorMode (uMode=0x1) returned 0x0 [0107.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000D.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000d.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.767] SetErrorMode (uMode=0x0) returned 0x1 [0107.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0107.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0107.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin", lpFilePart=0x0) returned 0x4d [0107.768] SetErrorMode (uMode=0x1) returned 0x0 [0107.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000F.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000f.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.770] SetErrorMode (uMode=0x0) returned 0x1 [0107.770] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0107.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0107.771] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin", lpFilePart=0x0) returned 0x4d [0107.771] SetErrorMode (uMode=0x1) returned 0x0 [0107.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000G.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000g.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.772] SetErrorMode (uMode=0x0) returned 0x1 [0107.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0107.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0107.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin", lpFilePart=0x0) returned 0x4d [0107.773] SetErrorMode (uMode=0x1) returned 0x0 [0107.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000H.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000h.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.775] SetErrorMode (uMode=0x0) returned 0x1 [0107.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0107.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0107.776] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin", lpFilePart=0x0) returned 0x4d [0107.776] SetErrorMode (uMode=0x1) returned 0x0 [0107.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000I.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000i.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.777] SetErrorMode (uMode=0x0) returned 0x1 [0107.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0107.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0107.778] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin", lpFilePart=0x0) returned 0x4d [0107.778] SetErrorMode (uMode=0x1) returned 0x0 [0107.778] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000J.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000j.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.780] SetErrorMode (uMode=0x0) returned 0x1 [0107.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0107.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0107.780] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin", lpFilePart=0x0) returned 0x4d [0107.781] SetErrorMode (uMode=0x1) returned 0x0 [0107.781] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000l.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.782] SetErrorMode (uMode=0x0) returned 0x1 [0107.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0107.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0107.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin", lpFilePart=0x0) returned 0x4d [0107.783] SetErrorMode (uMode=0x1) returned 0x0 [0107.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000m.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.785] SetErrorMode (uMode=0x0) returned 0x1 [0107.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0107.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0107.786] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin", lpFilePart=0x0) returned 0x4d [0107.786] SetErrorMode (uMode=0x1) returned 0x0 [0107.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000n.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.788] SetErrorMode (uMode=0x0) returned 0x1 [0107.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0107.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0107.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin", lpFilePart=0x0) returned 0x4d [0107.789] SetErrorMode (uMode=0x1) returned 0x0 [0107.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000O.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000o.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.790] SetErrorMode (uMode=0x0) returned 0x1 [0107.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0107.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0107.791] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin", lpFilePart=0x0) returned 0x4d [0107.791] SetErrorMode (uMode=0x1) returned 0x0 [0107.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000P.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000p.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.792] SetErrorMode (uMode=0x0) returned 0x1 [0107.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0107.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0107.793] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin", lpFilePart=0x0) returned 0x4d [0107.793] SetErrorMode (uMode=0x1) returned 0x0 [0107.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000Q.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000q.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.794] SetErrorMode (uMode=0x0) returned 0x1 [0107.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0107.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0107.795] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin", lpFilePart=0x0) returned 0x4d [0107.795] SetErrorMode (uMode=0x1) returned 0x0 [0107.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000R.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000r.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.797] SetErrorMode (uMode=0x0) returned 0x1 [0107.797] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0107.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0107.798] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin", lpFilePart=0x0) returned 0x4d [0107.798] SetErrorMode (uMode=0x1) returned 0x0 [0107.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000S.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000s.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.799] SetErrorMode (uMode=0x0) returned 0x1 [0107.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0107.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0107.800] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin", lpFilePart=0x0) returned 0x4d [0107.800] SetErrorMode (uMode=0x1) returned 0x0 [0107.800] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000T.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000t.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.801] SetErrorMode (uMode=0x0) returned 0x1 [0107.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0107.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0107.802] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin", lpFilePart=0x0) returned 0x4d [0107.802] SetErrorMode (uMode=0x1) returned 0x0 [0107.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000u.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.803] SetErrorMode (uMode=0x0) returned 0x1 [0107.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0107.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0107.804] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin", lpFilePart=0x0) returned 0x4d [0107.804] SetErrorMode (uMode=0x1) returned 0x0 [0107.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000000V.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000000v.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.809] SetErrorMode (uMode=0x0) returned 0x1 [0107.809] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0107.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0107.810] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin", lpFilePart=0x0) returned 0x4d [0107.810] SetErrorMode (uMode=0x1) returned 0x0 [0107.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000010.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000010.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.811] SetErrorMode (uMode=0x0) returned 0x1 [0107.811] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0107.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0107.812] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin", lpFilePart=0x0) returned 0x4d [0107.812] SetErrorMode (uMode=0x1) returned 0x0 [0107.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000011.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000011.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.813] SetErrorMode (uMode=0x0) returned 0x1 [0107.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0107.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0107.813] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin", lpFilePart=0x0) returned 0x4d [0107.814] SetErrorMode (uMode=0x1) returned 0x0 [0107.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000012.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000012.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.815] SetErrorMode (uMode=0x0) returned 0x1 [0107.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0107.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0107.815] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin", lpFilePart=0x0) returned 0x4d [0107.816] SetErrorMode (uMode=0x1) returned 0x0 [0107.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000013.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000013.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.817] SetErrorMode (uMode=0x0) returned 0x1 [0107.817] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0107.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0107.818] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin", lpFilePart=0x0) returned 0x4d [0107.818] SetErrorMode (uMode=0x1) returned 0x0 [0107.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000014.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000014.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.819] SetErrorMode (uMode=0x0) returned 0x1 [0107.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0107.819] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0107.820] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin", lpFilePart=0x0) returned 0x4d [0107.820] SetErrorMode (uMode=0x1) returned 0x0 [0107.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000015.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000015.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.821] SetErrorMode (uMode=0x0) returned 0x1 [0107.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0107.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0107.821] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin", lpFilePart=0x0) returned 0x4d [0107.822] SetErrorMode (uMode=0x1) returned 0x0 [0107.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000016.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000016.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.823] SetErrorMode (uMode=0x0) returned 0x1 [0107.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0107.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0107.823] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin", lpFilePart=0x0) returned 0x4d [0107.823] SetErrorMode (uMode=0x1) returned 0x0 [0107.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000017.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000017.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.824] SetErrorMode (uMode=0x0) returned 0x1 [0107.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0107.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0107.825] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin", lpFilePart=0x0) returned 0x4d [0107.825] SetErrorMode (uMode=0x1) returned 0x0 [0107.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000018.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000018.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.827] SetErrorMode (uMode=0x0) returned 0x1 [0107.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", lpFilePart=0x0) returned 0x4d [0107.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", lpFilePart=0x0) returned 0x4d [0107.827] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", lpFilePart=0x0) returned 0x4d [0107.827] SetErrorMode (uMode=0x1) returned 0x0 [0107.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.828] GetFileType (hFile=0x230) returned 0x1 [0107.828] SetErrorMode (uMode=0x0) returned 0x1 [0107.828] GetFileType (hFile=0x230) returned 0x1 [0107.828] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.828] ReadFile (in: hFile=0x230, lpBuffer=0x26d1d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d1d48*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.883] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.883] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.883] WriteFile (in: hFile=0x230, lpBuffer=0x26d1d48*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d1d48*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.883] CloseHandle (hObject=0x230) returned 1 [0107.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", lpFilePart=0x0) returned 0x4d [0107.883] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin", lpFilePart=0x0) returned 0x4d [0107.884] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0107.884] SetErrorMode (uMode=0x1) returned 0x0 [0107.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x42c18a79, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0107.884] SetErrorMode (uMode=0x0) returned 0x1 [0107.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003K.bin.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003k.bin.partially.cryptonar")) returned 1 [0107.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", lpFilePart=0x0) returned 0x4d [0107.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", lpFilePart=0x0) returned 0x4d [0107.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", lpFilePart=0x0) returned 0x4d [0107.885] SetErrorMode (uMode=0x1) returned 0x0 [0107.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.886] GetFileType (hFile=0x230) returned 0x1 [0107.886] SetErrorMode (uMode=0x0) returned 0x1 [0107.886] GetFileType (hFile=0x230) returned 0x1 [0107.886] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.886] ReadFile (in: hFile=0x230, lpBuffer=0x26d53c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d53c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.888] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.888] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.888] WriteFile (in: hFile=0x230, lpBuffer=0x26d53c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d53c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.888] CloseHandle (hObject=0x230) returned 1 [0107.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", lpFilePart=0x0) returned 0x4d [0107.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin", lpFilePart=0x0) returned 0x4d [0107.888] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0107.888] SetErrorMode (uMode=0x1) returned 0x0 [0107.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x42c18a79, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0107.888] SetErrorMode (uMode=0x0) returned 0x1 [0107.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003L.bin.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003l.bin.partially.cryptonar")) returned 1 [0107.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", lpFilePart=0x0) returned 0x4d [0107.889] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", lpFilePart=0x0) returned 0x4d [0107.890] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", lpFilePart=0x0) returned 0x4d [0107.890] SetErrorMode (uMode=0x1) returned 0x0 [0107.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003m.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.890] GetFileType (hFile=0x230) returned 0x1 [0107.890] SetErrorMode (uMode=0x0) returned 0x1 [0107.890] GetFileType (hFile=0x230) returned 0x1 [0107.890] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.890] ReadFile (in: hFile=0x230, lpBuffer=0x26d8a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d8a38*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.892] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.892] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.892] WriteFile (in: hFile=0x230, lpBuffer=0x26d8a38*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d8a38*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.892] CloseHandle (hObject=0x230) returned 1 [0107.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", lpFilePart=0x0) returned 0x4d [0107.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin", lpFilePart=0x0) returned 0x4d [0107.892] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0107.892] SetErrorMode (uMode=0x1) returned 0x0 [0107.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003m.bin"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x42c18a79, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0107.893] SetErrorMode (uMode=0x0) returned 0x1 [0107.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003m.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003M.bin.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003m.bin.partially.cryptonar")) returned 1 [0107.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", lpFilePart=0x0) returned 0x4d [0107.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", lpFilePart=0x0) returned 0x4d [0107.894] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", lpFilePart=0x0) returned 0x4d [0107.894] SetErrorMode (uMode=0x1) returned 0x0 [0107.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.895] GetFileType (hFile=0x230) returned 0x1 [0107.895] SetErrorMode (uMode=0x0) returned 0x1 [0107.895] GetFileType (hFile=0x230) returned 0x1 [0107.895] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.895] ReadFile (in: hFile=0x230, lpBuffer=0x26dc0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26dc0b0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.897] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.897] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.897] WriteFile (in: hFile=0x230, lpBuffer=0x26dc0b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26dc0b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.898] CloseHandle (hObject=0x230) returned 1 [0107.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", lpFilePart=0x0) returned 0x4d [0107.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin", lpFilePart=0x0) returned 0x4d [0107.898] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0107.898] SetErrorMode (uMode=0x1) returned 0x0 [0107.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b222987, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b222987, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x42c3f70d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0107.898] SetErrorMode (uMode=0x0) returned 0x1 [0107.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000003N.bin.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000003n.bin.partially.cryptonar")) returned 1 [0107.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", lpFilePart=0x0) returned 0x4d [0107.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", lpFilePart=0x0) returned 0x4d [0107.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", lpFilePart=0x0) returned 0x4d [0107.900] SetErrorMode (uMode=0x1) returned 0x0 [0107.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.901] GetFileType (hFile=0x230) returned 0x1 [0107.901] SetErrorMode (uMode=0x0) returned 0x1 [0107.901] GetFileType (hFile=0x230) returned 0x1 [0107.901] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.901] ReadFile (in: hFile=0x230, lpBuffer=0x26df728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26df728*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.922] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.922] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.922] WriteFile (in: hFile=0x230, lpBuffer=0x26df728*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26df728*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.922] CloseHandle (hObject=0x230) returned 1 [0107.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", lpFilePart=0x0) returned 0x4d [0107.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin", lpFilePart=0x0) returned 0x4d [0107.926] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0107.926] SetErrorMode (uMode=0x1) returned 0x0 [0107.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3077a6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6b3077a6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x42c8b0ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0107.927] SetErrorMode (uMode=0x0) returned 0x1 [0107.927] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\00000048.bin.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\00000048.bin.partially.cryptonar")) returned 1 [0107.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", lpFilePart=0x0) returned 0x4d [0107.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", lpFilePart=0x0) returned 0x4d [0107.928] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", lpFilePart=0x0) returned 0x4d [0107.928] SetErrorMode (uMode=0x1) returned 0x0 [0107.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000004u.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.929] GetFileType (hFile=0x230) returned 0x1 [0107.929] SetErrorMode (uMode=0x0) returned 0x1 [0107.929] GetFileType (hFile=0x230) returned 0x1 [0107.929] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.929] ReadFile (in: hFile=0x230, lpBuffer=0x26e2da0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e2da0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.933] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.934] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.934] WriteFile (in: hFile=0x230, lpBuffer=0x26e2da0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e2da0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.934] CloseHandle (hObject=0x230) returned 1 [0107.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", lpFilePart=0x0) returned 0x4d [0107.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin", lpFilePart=0x0) returned 0x4d [0107.934] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0107.934] SetErrorMode (uMode=0x1) returned 0x0 [0107.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000004u.bin"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea6bb6c, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ea6bb6c, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x42c8b0ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0107.934] SetErrorMode (uMode=0x0) returned 0x1 [0107.934] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000004u.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\0000004U.bin.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\0000004u.bin.partially.cryptonar")) returned 1 [0107.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", lpFilePart=0x0) returned 0x47 [0107.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", lpFilePart=0x0) returned 0x47 [0107.935] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", lpFilePart=0x0) returned 0x47 [0107.935] SetErrorMode (uMode=0x1) returned 0x0 [0107.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\header"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.936] GetFileType (hFile=0x230) returned 0x1 [0107.936] SetErrorMode (uMode=0x0) returned 0x1 [0107.936] GetFileType (hFile=0x230) returned 0x1 [0107.936] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.936] ReadFile (in: hFile=0x230, lpBuffer=0x26e6378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e6378*, lpNumberOfBytesRead=0x5ae8b8*=0x48, lpOverlapped=0x0) returned 1 [0107.937] ReadFile (in: hFile=0x230, lpBuffer=0x26e6378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e6378*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0107.937] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.937] WriteFile (in: hFile=0x230, lpBuffer=0x26e6378*, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e6378*, lpNumberOfBytesWritten=0x5ae8a8*=0x48, lpOverlapped=0x0) returned 1 [0107.937] CloseHandle (hObject=0x230) returned 1 [0107.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", lpFilePart=0x0) returned 0x47 [0107.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header", lpFilePart=0x0) returned 0x47 [0107.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header.partially.cryptoNar", lpFilePart=0x0) returned 0x5b [0107.937] SetErrorMode (uMode=0x1) returned 0x0 [0107.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\header"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65e91167, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x65e91167, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x42c8b0ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48)) returned 1 [0107.938] SetErrorMode (uMode=0x0) returned 0x1 [0107.938] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\header"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\OneNote\\16.0\\cache\\header.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\onenote\\16.0\\cache\\header.partially.cryptonar")) returned 1 [0107.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0107.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0107.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0107.940] SetErrorMode (uMode=0x1) returned 0x0 [0107.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.941] GetFileType (hFile=0x230) returned 0x1 [0107.948] SetErrorMode (uMode=0x0) returned 0x1 [0107.948] GetFileType (hFile=0x230) returned 0x1 [0107.948] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.948] ReadFile (in: hFile=0x230, lpBuffer=0x26e9778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e9778*, lpNumberOfBytesRead=0x5ae8b8*=0x7a4, lpOverlapped=0x0) returned 1 [0107.949] SetFilePointer (in: hFile=0x230, lDistanceToMove=-932, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.949] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.949] WriteFile (in: hFile=0x230, lpBuffer=0x26e9778*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e9778*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.949] CloseHandle (hObject=0x230) returned 1 [0107.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0107.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres", lpFilePart=0x0) returned 0x6e [0107.949] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0107.950] SetErrorMode (uMode=0x1) returned 0x0 [0107.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x3742660b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3742660b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x42cb13ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7a4)) returned 1 [0107.950] SetErrorMode (uMode=0x0) returned 0x1 [0107.950] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\TokenBroker\\Cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\tokenbroker\\cache\\8d68c2e8263ce2da4efc5fc5f9a0c85c16c38ae4.tbres.partially.cryptonar")) returned 1 [0107.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", lpFilePart=0x0) returned 0x64 [0107.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", lpFilePart=0x0) returned 0x64 [0107.951] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", lpFilePart=0x0) returned 0x64 [0107.951] SetErrorMode (uMode=0x1) returned 0x0 [0107.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\policy.vpol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.952] GetFileType (hFile=0x230) returned 0x1 [0107.952] SetErrorMode (uMode=0x0) returned 0x1 [0107.952] GetFileType (hFile=0x230) returned 0x1 [0107.952] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.952] ReadFile (in: hFile=0x230, lpBuffer=0x26ecfe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ecfe8*, lpNumberOfBytesRead=0x5ae8b8*=0x1b4, lpOverlapped=0x0) returned 1 [0107.955] ReadFile (in: hFile=0x230, lpBuffer=0x26ecfe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ecfe8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0107.955] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.955] WriteFile (in: hFile=0x230, lpBuffer=0x26ecfe8*, nNumberOfBytesToWrite=0x1b4, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ecfe8*, lpNumberOfBytesWritten=0x5ae8a8*=0x1b4, lpOverlapped=0x0) returned 1 [0107.955] CloseHandle (hObject=0x230) returned 1 [0107.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", lpFilePart=0x0) returned 0x64 [0107.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol", lpFilePart=0x0) returned 0x64 [0107.956] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol.partially.cryptoNar", lpFilePart=0x0) returned 0x78 [0107.956] SetErrorMode (uMode=0x1) returned 0x0 [0107.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\policy.vpol"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab7f004, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfab7f004, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x42cb13ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1b4)) returned 1 [0107.956] SetErrorMode (uMode=0x0) returned 0x1 [0107.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\policy.vpol"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\4BF4C442-9B8A-41A0-B380-DD4A704DDB28\\Policy.vpol.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\\policy.vpol.partially.cryptonar")) returned 1 [0107.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", lpFilePart=0x0) returned 0x51 [0107.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", lpFilePart=0x0) returned 0x51 [0107.958] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", lpFilePart=0x0) returned 0x51 [0107.958] SetErrorMode (uMode=0x1) returned 0x0 [0107.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.959] GetFileType (hFile=0x230) returned 0x1 [0107.959] SetErrorMode (uMode=0x0) returned 0x1 [0107.959] GetFileType (hFile=0x230) returned 0x1 [0107.959] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.959] ReadFile (in: hFile=0x230, lpBuffer=0x26f0708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f0708*, lpNumberOfBytesRead=0x5ae8b8*=0x1, lpOverlapped=0x0) returned 1 [0107.960] ReadFile (in: hFile=0x230, lpBuffer=0x26f0708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f0708*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0107.960] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.960] WriteFile (in: hFile=0x230, lpBuffer=0x26f0708*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f0708*, lpNumberOfBytesWritten=0x5ae8a8*=0x1, lpOverlapped=0x0) returned 1 [0107.960] CloseHandle (hObject=0x230) returned 1 [0107.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", lpFilePart=0x0) returned 0x51 [0107.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat", lpFilePart=0x0) returned 0x51 [0107.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x65 [0107.961] SetErrorMode (uMode=0x1) returned 0x0 [0107.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfac3dd13, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfac3dd13, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x42cd75ea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0107.961] SetErrorMode (uMode=0x0) returned 0x1 [0107.961] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Vault\\UserProfileRoaming\\Latest.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\vault\\userprofileroaming\\latest.dat.partially.cryptonar")) returned 1 [0107.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", lpFilePart=0x0) returned 0x41 [0107.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", lpFilePart=0x0) returned 0x41 [0107.962] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", lpFilePart=0x0) returned 0x41 [0107.962] SetErrorMode (uMode=0x1) returned 0x0 [0107.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0107.963] GetFileType (hFile=0x230) returned 0x1 [0107.963] SetErrorMode (uMode=0x0) returned 0x1 [0107.963] GetFileType (hFile=0x230) returned 0x1 [0107.963] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.963] ReadFile (in: hFile=0x230, lpBuffer=0x26f3988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f3988*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.970] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0107.970] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0107.970] WriteFile (in: hFile=0x230, lpBuffer=0x26f3988*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f3988*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0107.970] CloseHandle (hObject=0x230) returned 1 [0107.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", lpFilePart=0x0) returned 0x41 [0107.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat", lpFilePart=0x0) returned 0x41 [0107.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x55 [0107.980] SetErrorMode (uMode=0x1) returned 0x0 [0107.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ca58556, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x9ca58556, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x42cfd70f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43580)) returned 1 [0107.980] SetErrorMode (uMode=0x0) returned 0x1 [0107.980] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Visio\\content16.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\visio\\content16.dat.partially.cryptonar")) returned 1 [0107.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", lpFilePart=0x0) returned 0x42 [0107.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", lpFilePart=0x0) returned 0x42 [0107.981] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", lpFilePart=0x0) returned 0x42 [0107.981] SetErrorMode (uMode=0x1) returned 0x0 [0107.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.987] SetErrorMode (uMode=0x0) returned 0x1 [0107.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", lpFilePart=0x0) returned 0x47 [0107.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", lpFilePart=0x0) returned 0x47 [0107.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", lpFilePart=0x0) returned 0x47 [0107.989] SetErrorMode (uMode=0x1) returned 0x0 [0107.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.996] SetErrorMode (uMode=0x0) returned 0x1 [0107.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", lpFilePart=0x0) returned 0x47 [0107.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", lpFilePart=0x0) returned 0x47 [0107.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", lpFilePart=0x0) returned 0x47 [0107.999] SetErrorMode (uMode=0x1) returned 0x0 [0107.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0108.005] SetErrorMode (uMode=0x0) returned 0x1 [0108.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", lpFilePart=0x0) returned 0x6f [0108.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", lpFilePart=0x0) returned 0x6f [0108.007] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf", lpFilePart=0x0) returned 0x6f [0108.007] SetErrorMode (uMode=0x1) returned 0x0 [0108.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TM.blf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0108.009] SetErrorMode (uMode=0x0) returned 0x1 [0108.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x94 [0108.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x94 [0108.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms", lpFilePart=0x0) returned 0x94 [0108.010] SetErrorMode (uMode=0x1) returned 0x0 [0108.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0108.012] SetErrorMode (uMode=0x0) returned 0x1 [0108.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x94 [0108.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x94 [0108.012] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms", lpFilePart=0x0) returned 0x94 [0108.012] SetErrorMode (uMode=0x1) returned 0x0 [0108.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\usrclass.dat{02173fa4-3c19-11e7-9bc4-c40142ecde47}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0108.013] SetErrorMode (uMode=0x0) returned 0x1 [0108.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", lpFilePart=0x0) returned 0x46 [0108.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", lpFilePart=0x0) returned 0x46 [0108.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat", lpFilePart=0x0) returned 0x46 [0108.013] SetErrorMode (uMode=0x1) returned 0x0 [0108.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCacheLock.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcachelock.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0108.014] SetErrorMode (uMode=0x0) returned 0x1 [0108.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", lpFilePart=0x0) returned 0x54 [0108.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", lpFilePart=0x0) returned 0x54 [0108.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", lpFilePart=0x0) returned 0x54 [0108.014] SetErrorMode (uMode=0x1) returned 0x0 [0108.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.015] GetFileType (hFile=0x230) returned 0x1 [0108.015] SetErrorMode (uMode=0x0) returned 0x1 [0108.015] GetFileType (hFile=0x230) returned 0x1 [0108.015] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.015] ReadFile (in: hFile=0x230, lpBuffer=0x2701728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2701728*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0108.064] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.064] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.064] WriteFile (in: hFile=0x230, lpBuffer=0x2701728*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2701728*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.065] CloseHandle (hObject=0x230) returned 1 [0108.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", lpFilePart=0x0) returned 0x54 [0108.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin", lpFilePart=0x0) returned 0x54 [0108.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.partially.cryptoNar", lpFilePart=0x0) returned 0x68 [0108.065] SetErrorMode (uMode=0x1) returned 0x0 [0108.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37789d2b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x37789d2b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x42dbc49e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x61068)) returned 1 [0108.065] SetErrorMode (uMode=0x0) returned 0x1 [0108.065] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\1033\\StructuredQuerySchema.bin.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\1033\\structuredqueryschema.bin.partially.cryptonar")) returned 1 [0108.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", lpFilePart=0x0) returned 0x72 [0108.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", lpFilePart=0x0) returned 0x72 [0108.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", lpFilePart=0x0) returned 0x72 [0108.067] SetErrorMode (uMode=0x1) returned 0x0 [0108.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.071] GetFileType (hFile=0x230) returned 0x1 [0108.071] SetErrorMode (uMode=0x0) returned 0x1 [0108.071] GetFileType (hFile=0x230) returned 0x1 [0108.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.071] ReadFile (in: hFile=0x230, lpBuffer=0x2704f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2704f40*, lpNumberOfBytesRead=0x5ae8b8*=0xa42, lpOverlapped=0x0) returned 1 [0108.072] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1602, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.072] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.073] WriteFile (in: hFile=0x230, lpBuffer=0x2704f40*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2704f40*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.073] CloseHandle (hObject=0x230) returned 1 [0108.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", lpFilePart=0x0) returned 0x72 [0108.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png", lpFilePart=0x0) returned 0x72 [0108.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.073] SetErrorMode (uMode=0x1) returned 0x0 [0108.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8601055c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x8601055c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x42de2c85, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0108.073] SetErrorMode (uMode=0x0) returned 0x1 [0108.073] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{219D4102-8477-4DA3-B68D-CBEB50436A31}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{219d4102-8477-4da3-b68d-cbeb50436a31}.png.partially.cryptonar")) returned 1 [0108.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", lpFilePart=0x0) returned 0x72 [0108.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", lpFilePart=0x0) returned 0x72 [0108.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", lpFilePart=0x0) returned 0x72 [0108.074] SetErrorMode (uMode=0x1) returned 0x0 [0108.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.075] GetFileType (hFile=0x230) returned 0x1 [0108.075] SetErrorMode (uMode=0x0) returned 0x1 [0108.075] GetFileType (hFile=0x230) returned 0x1 [0108.075] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.075] ReadFile (in: hFile=0x230, lpBuffer=0x27088a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27088a8*, lpNumberOfBytesRead=0x5ae8b8*=0xa42, lpOverlapped=0x0) returned 1 [0108.103] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1602, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.103] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.103] WriteFile (in: hFile=0x230, lpBuffer=0x27088a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27088a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.104] CloseHandle (hObject=0x230) returned 1 [0108.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", lpFilePart=0x0) returned 0x72 [0108.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png", lpFilePart=0x0) returned 0x72 [0108.104] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.104] SetErrorMode (uMode=0x1) returned 0x0 [0108.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa53b6b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x5fa53b6b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x42e2ec53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0108.104] SetErrorMode (uMode=0x0) returned 0x1 [0108.104] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{3142F004-AD96-48E4-B756-4D6F73D1B9C8}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{3142f004-ad96-48e4-b756-4d6f73d1b9c8}.png.partially.cryptonar")) returned 1 [0108.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", lpFilePart=0x0) returned 0x72 [0108.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", lpFilePart=0x0) returned 0x72 [0108.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", lpFilePart=0x0) returned 0x72 [0108.105] SetErrorMode (uMode=0x1) returned 0x0 [0108.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.106] GetFileType (hFile=0x230) returned 0x1 [0108.106] SetErrorMode (uMode=0x0) returned 0x1 [0108.106] GetFileType (hFile=0x230) returned 0x1 [0108.106] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.106] ReadFile (in: hFile=0x230, lpBuffer=0x270c210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270c210*, lpNumberOfBytesRead=0x5ae8b8*=0xa42, lpOverlapped=0x0) returned 1 [0108.109] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1602, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.109] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.109] WriteFile (in: hFile=0x230, lpBuffer=0x270c210*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270c210*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.109] CloseHandle (hObject=0x230) returned 1 [0108.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", lpFilePart=0x0) returned 0x72 [0108.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png", lpFilePart=0x0) returned 0x72 [0108.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.110] SetErrorMode (uMode=0x1) returned 0x0 [0108.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb2b9b4, ftCreationTime.dwHighDateTime=0x1d3001c, ftLastAccessTime.dwLowDateTime=0x5bb2b9b4, ftLastAccessTime.dwHighDateTime=0x1d3001c, ftLastWriteTime.dwLowDateTime=0x42e2ec53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0108.110] SetErrorMode (uMode=0x0) returned 0x1 [0108.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{46F14CBA-A8C3-4AB0-8748-F3A8C35622B4}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{46f14cba-a8c3-4ab0-8748-f3a8c35622b4}.png.partially.cryptonar")) returned 1 [0108.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", lpFilePart=0x0) returned 0x72 [0108.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", lpFilePart=0x0) returned 0x72 [0108.111] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", lpFilePart=0x0) returned 0x72 [0108.111] SetErrorMode (uMode=0x1) returned 0x0 [0108.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.112] GetFileType (hFile=0x230) returned 0x1 [0108.112] SetErrorMode (uMode=0x0) returned 0x1 [0108.112] GetFileType (hFile=0x230) returned 0x1 [0108.112] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.112] ReadFile (in: hFile=0x230, lpBuffer=0x270fb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270fb78*, lpNumberOfBytesRead=0x5ae8b8*=0xa42, lpOverlapped=0x0) returned 1 [0108.129] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1602, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.129] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.129] WriteFile (in: hFile=0x230, lpBuffer=0x270fb78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270fb78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.129] CloseHandle (hObject=0x230) returned 1 [0108.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", lpFilePart=0x0) returned 0x72 [0108.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png", lpFilePart=0x0) returned 0x72 [0108.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.130] SetErrorMode (uMode=0x1) returned 0x0 [0108.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5feb673c, ftCreationTime.dwHighDateTime=0x1d301d0, ftLastAccessTime.dwLowDateTime=0x5feb673c, ftLastAccessTime.dwHighDateTime=0x1d301d0, ftLastWriteTime.dwLowDateTime=0x42e7b0f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0108.130] SetErrorMode (uMode=0x0) returned 0x1 [0108.130] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{5C217167-4731-4AFD-B181-6274E3DFBF25}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{5c217167-4731-4afd-b181-6274e3dfbf25}.png.partially.cryptonar")) returned 1 [0108.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", lpFilePart=0x0) returned 0x72 [0108.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", lpFilePart=0x0) returned 0x72 [0108.131] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", lpFilePart=0x0) returned 0x72 [0108.131] SetErrorMode (uMode=0x1) returned 0x0 [0108.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.132] GetFileType (hFile=0x230) returned 0x1 [0108.132] SetErrorMode (uMode=0x0) returned 0x1 [0108.132] GetFileType (hFile=0x230) returned 0x1 [0108.132] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.132] ReadFile (in: hFile=0x230, lpBuffer=0x27134e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27134e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0108.141] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.141] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.142] WriteFile (in: hFile=0x230, lpBuffer=0x27134e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27134e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.142] CloseHandle (hObject=0x230) returned 1 [0108.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", lpFilePart=0x0) returned 0x72 [0108.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png", lpFilePart=0x0) returned 0x72 [0108.142] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.142] SetErrorMode (uMode=0x1) returned 0x0 [0108.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ace0677, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6ace0677, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x42e7b0f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6)) returned 1 [0108.142] SetErrorMode (uMode=0x0) returned 0x1 [0108.142] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{708686A3-2087-4B70-81FB-7F608AD7F5D4}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{708686a3-2087-4b70-81fb-7f608ad7f5d4}.png.partially.cryptonar")) returned 1 [0108.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", lpFilePart=0x0) returned 0x72 [0108.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", lpFilePart=0x0) returned 0x72 [0108.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", lpFilePart=0x0) returned 0x72 [0108.144] SetErrorMode (uMode=0x1) returned 0x0 [0108.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.145] GetFileType (hFile=0x230) returned 0x1 [0108.145] SetErrorMode (uMode=0x0) returned 0x1 [0108.146] GetFileType (hFile=0x230) returned 0x1 [0108.146] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.146] ReadFile (in: hFile=0x230, lpBuffer=0x2716e48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2716e48*, lpNumberOfBytesRead=0x5ae8b8*=0xa42, lpOverlapped=0x0) returned 1 [0108.189] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1602, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.189] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.189] WriteFile (in: hFile=0x230, lpBuffer=0x2716e48*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2716e48*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.189] CloseHandle (hObject=0x230) returned 1 [0108.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", lpFilePart=0x0) returned 0x72 [0108.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png", lpFilePart=0x0) returned 0x72 [0108.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.190] SetErrorMode (uMode=0x1) returned 0x0 [0108.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcebec96, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0xfcebec96, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x42eed5db, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0108.190] SetErrorMode (uMode=0x0) returned 0x1 [0108.190] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A90EDA99-693C-4259-AF53-D06F3BBAEEAB}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a90eda99-693c-4259-af53-d06f3bbaeeab}.png.partially.cryptonar")) returned 1 [0108.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", lpFilePart=0x0) returned 0x72 [0108.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", lpFilePart=0x0) returned 0x72 [0108.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", lpFilePart=0x0) returned 0x72 [0108.191] SetErrorMode (uMode=0x1) returned 0x0 [0108.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.192] GetFileType (hFile=0x230) returned 0x1 [0108.192] SetErrorMode (uMode=0x0) returned 0x1 [0108.192] GetFileType (hFile=0x230) returned 0x1 [0108.192] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.192] ReadFile (in: hFile=0x230, lpBuffer=0x271a7b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271a7b0*, lpNumberOfBytesRead=0x5ae8b8*=0xa42, lpOverlapped=0x0) returned 1 [0108.251] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1602, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.251] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.251] WriteFile (in: hFile=0x230, lpBuffer=0x271a7b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271a7b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.251] CloseHandle (hObject=0x230) returned 1 [0108.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", lpFilePart=0x0) returned 0x72 [0108.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png", lpFilePart=0x0) returned 0x72 [0108.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.251] SetErrorMode (uMode=0x1) returned 0x0 [0108.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78f6647, ftCreationTime.dwHighDateTime=0x1d2fad9, ftLastAccessTime.dwLowDateTime=0xc78f6647, ftLastAccessTime.dwHighDateTime=0x1d2fad9, ftLastWriteTime.dwLowDateTime=0x42f89ea4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0108.252] SetErrorMode (uMode=0x0) returned 0x1 [0108.252] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{A95B47FD-465D-4ACE-A006-DCCC9033E6DB}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{a95b47fd-465d-4ace-a006-dccc9033e6db}.png.partially.cryptonar")) returned 1 [0108.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", lpFilePart=0x0) returned 0x72 [0108.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", lpFilePart=0x0) returned 0x72 [0108.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", lpFilePart=0x0) returned 0x72 [0108.253] SetErrorMode (uMode=0x1) returned 0x0 [0108.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.253] GetFileType (hFile=0x230) returned 0x1 [0108.253] SetErrorMode (uMode=0x0) returned 0x1 [0108.253] GetFileType (hFile=0x230) returned 0x1 [0108.253] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.254] ReadFile (in: hFile=0x230, lpBuffer=0x271e118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271e118*, lpNumberOfBytesRead=0x5ae8b8*=0xa42, lpOverlapped=0x0) returned 1 [0108.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1602, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.274] WriteFile (in: hFile=0x230, lpBuffer=0x271e118*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271e118*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.275] CloseHandle (hObject=0x230) returned 1 [0108.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", lpFilePart=0x0) returned 0x72 [0108.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png", lpFilePart=0x0) returned 0x72 [0108.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.275] SetErrorMode (uMode=0x1) returned 0x0 [0108.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fe90541, ftCreationTime.dwHighDateTime=0x1d301d0, ftLastAccessTime.dwLowDateTime=0x5fe90541, ftLastAccessTime.dwHighDateTime=0x1d301d0, ftLastWriteTime.dwLowDateTime=0x42fd33bc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0108.275] SetErrorMode (uMode=0x0) returned 0x1 [0108.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{AE613841-F649-4CD7-AF4A-2E7B7D99E12E}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{ae613841-f649-4cd7-af4a-2e7b7d99e12e}.png.partially.cryptonar")) returned 1 [0108.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", lpFilePart=0x0) returned 0x72 [0108.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", lpFilePart=0x0) returned 0x72 [0108.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", lpFilePart=0x0) returned 0x72 [0108.276] SetErrorMode (uMode=0x1) returned 0x0 [0108.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.277] GetFileType (hFile=0x230) returned 0x1 [0108.277] SetErrorMode (uMode=0x0) returned 0x1 [0108.277] GetFileType (hFile=0x230) returned 0x1 [0108.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.277] ReadFile (in: hFile=0x230, lpBuffer=0x2721a80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2721a80*, lpNumberOfBytesRead=0x5ae8b8*=0xa42, lpOverlapped=0x0) returned 1 [0108.323] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1602, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.323] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.323] WriteFile (in: hFile=0x230, lpBuffer=0x2721a80*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2721a80*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.323] CloseHandle (hObject=0x230) returned 1 [0108.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", lpFilePart=0x0) returned 0x72 [0108.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png", lpFilePart=0x0) returned 0x72 [0108.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.324] SetErrorMode (uMode=0x1) returned 0x0 [0108.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d002af, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0xa1d002af, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x43044bc5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0108.324] SetErrorMode (uMode=0x0) returned 0x1 [0108.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B5D14E8C-339B-4360-B40C-A274F460B417}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b5d14e8c-339b-4360-b40c-a274f460b417}.png.partially.cryptonar")) returned 1 [0108.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", lpFilePart=0x0) returned 0x72 [0108.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", lpFilePart=0x0) returned 0x72 [0108.325] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", lpFilePart=0x0) returned 0x72 [0108.325] SetErrorMode (uMode=0x1) returned 0x0 [0108.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.325] GetFileType (hFile=0x230) returned 0x1 [0108.325] SetErrorMode (uMode=0x0) returned 0x1 [0108.325] GetFileType (hFile=0x230) returned 0x1 [0108.326] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.326] ReadFile (in: hFile=0x230, lpBuffer=0x27253e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27253e8*, lpNumberOfBytesRead=0x5ae8b8*=0xa42, lpOverlapped=0x0) returned 1 [0108.345] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1602, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.345] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.345] WriteFile (in: hFile=0x230, lpBuffer=0x27253e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27253e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.345] CloseHandle (hObject=0x230) returned 1 [0108.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", lpFilePart=0x0) returned 0x72 [0108.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png", lpFilePart=0x0) returned 0x72 [0108.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.345] SetErrorMode (uMode=0x1) returned 0x0 [0108.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15ebc63d, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x15ebc63d, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x4306b170, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0108.346] SetErrorMode (uMode=0x0) returned 0x1 [0108.346] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{B6815740-F01E-4E9E-AA05-D3CDE47C3DDC}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{b6815740-f01e-4e9e-aa05-d3cde47c3ddc}.png.partially.cryptonar")) returned 1 [0108.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", lpFilePart=0x0) returned 0x72 [0108.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", lpFilePart=0x0) returned 0x72 [0108.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", lpFilePart=0x0) returned 0x72 [0108.348] SetErrorMode (uMode=0x1) returned 0x0 [0108.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.349] GetFileType (hFile=0x230) returned 0x1 [0108.349] SetErrorMode (uMode=0x0) returned 0x1 [0108.349] GetFileType (hFile=0x230) returned 0x1 [0108.349] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.349] ReadFile (in: hFile=0x230, lpBuffer=0x2728d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2728d50*, lpNumberOfBytesRead=0x5ae8b8*=0xa42, lpOverlapped=0x0) returned 1 [0108.367] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1602, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.367] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.367] WriteFile (in: hFile=0x230, lpBuffer=0x2728d50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2728d50*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.367] CloseHandle (hObject=0x230) returned 1 [0108.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", lpFilePart=0x0) returned 0x72 [0108.367] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png", lpFilePart=0x0) returned 0x72 [0108.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.368] SetErrorMode (uMode=0x1) returned 0x0 [0108.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8268a7fa, ftCreationTime.dwHighDateTime=0x1d301c8, ftLastAccessTime.dwLowDateTime=0x8268a7fa, ftLastAccessTime.dwHighDateTime=0x1d301c8, ftLastWriteTime.dwLowDateTime=0x430b7356, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0108.368] SetErrorMode (uMode=0x0) returned 0x1 [0108.368] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{C20F58C1-CDD0-45F9-9954-BDF0782633CB}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{c20f58c1-cdd0-45f9-9954-bdf0782633cb}.png.partially.cryptonar")) returned 1 [0108.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", lpFilePart=0x0) returned 0x72 [0108.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", lpFilePart=0x0) returned 0x72 [0108.370] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", lpFilePart=0x0) returned 0x72 [0108.370] SetErrorMode (uMode=0x1) returned 0x0 [0108.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.371] GetFileType (hFile=0x230) returned 0x1 [0108.371] SetErrorMode (uMode=0x0) returned 0x1 [0108.371] GetFileType (hFile=0x230) returned 0x1 [0108.371] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.371] ReadFile (in: hFile=0x230, lpBuffer=0x272c6b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272c6b8*, lpNumberOfBytesRead=0x5ae8b8*=0xa42, lpOverlapped=0x0) returned 1 [0108.372] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1602, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.372] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.373] WriteFile (in: hFile=0x230, lpBuffer=0x272c6b8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272c6b8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.373] CloseHandle (hObject=0x230) returned 1 [0108.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", lpFilePart=0x0) returned 0x72 [0108.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png", lpFilePart=0x0) returned 0x72 [0108.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0108.373] SetErrorMode (uMode=0x1) returned 0x0 [0108.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfda493b2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfda493b2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x430b7356, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa42)) returned 1 [0108.373] SetErrorMode (uMode=0x0) returned 0x1 [0108.373] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\ActionCenterCache\\{D1CC3A2E-2BC2-4715-AD4C-90B4CA0868C0}.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\actioncentercache\\{d1cc3a2e-2bc2-4715-ad4c-90b4ca0868c0}.png.partially.cryptonar")) returned 1 [0108.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0108.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0108.375] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0108.375] SetErrorMode (uMode=0x1) returned 0x0 [0108.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.376] GetFileType (hFile=0x230) returned 0x1 [0108.376] SetErrorMode (uMode=0x0) returned 0x1 [0108.376] GetFileType (hFile=0x230) returned 0x1 [0108.376] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.376] ReadFile (in: hFile=0x230, lpBuffer=0x272fed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272fed8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0108.377] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.377] CloseHandle (hObject=0x230) returned 1 [0108.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0108.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4c [0108.377] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x60 [0108.377] SetErrorMode (uMode=0x1) returned 0x0 [0108.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4c83fe3a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4c83fe3a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4c83fe3a, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0108.377] SetErrorMode (uMode=0x0) returned 0x1 [0108.377] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\container.dat.partially.cryptonar")) returned 1 [0108.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0108.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0108.378] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0108.378] SetErrorMode (uMode=0x1) returned 0x0 [0108.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.380] GetFileType (hFile=0x230) returned 0x1 [0108.380] SetErrorMode (uMode=0x0) returned 0x1 [0108.380] GetFileType (hFile=0x230) returned 0x1 [0108.380] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.380] ReadFile (in: hFile=0x230, lpBuffer=0x2733190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2733190*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0108.380] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.380] CloseHandle (hObject=0x230) returned 1 [0108.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0108.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat", lpFilePart=0x0) returned 0x55 [0108.380] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x69 [0108.380] SetErrorMode (uMode=0x1) returned 0x0 [0108.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4c83fe3a, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4c83fe3a, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4c83fe3a, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0108.380] SetErrorMode (uMode=0x0) returned 0x1 [0108.380] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\AppCache\\YGIEUWA9\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\appcache\\ygieuwa9\\container.dat.partially.cryptonar")) returned 1 [0108.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0108.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0108.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0108.381] SetErrorMode (uMode=0x1) returned 0x0 [0108.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.382] GetFileType (hFile=0x230) returned 0x1 [0108.382] SetErrorMode (uMode=0x0) returned 0x1 [0108.382] GetFileType (hFile=0x230) returned 0x1 [0108.382] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.382] ReadFile (in: hFile=0x230, lpBuffer=0x2736498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2736498*, lpNumberOfBytesRead=0x5ae8b8*=0xae, lpOverlapped=0x0) returned 1 [0108.383] ReadFile (in: hFile=0x230, lpBuffer=0x2736498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2736498*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0108.383] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.383] WriteFile (in: hFile=0x230, lpBuffer=0x2736498*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2736498*, lpNumberOfBytesWritten=0x5ae8a8*=0xae, lpOverlapped=0x0) returned 1 [0108.383] CloseHandle (hObject=0x230) returned 1 [0108.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0108.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini", lpFilePart=0x0) returned 0x57 [0108.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0108.384] SetErrorMode (uMode=0x1) returned 0x0 [0108.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xab2d7ac4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xab2d7ac4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x430dd6ff, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0108.384] SetErrorMode (uMode=0x0) returned 0x1 [0108.384] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\desktop.ini.partially.cryptonar")) returned 1 [0108.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x75 [0108.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x75 [0108.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x75 [0108.385] SetErrorMode (uMode=0x1) returned 0x0 [0108.385] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.3dbuilder_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.386] GetFileType (hFile=0x230) returned 0x1 [0108.386] SetErrorMode (uMode=0x0) returned 0x1 [0108.386] GetFileType (hFile=0x230) returned 0x1 [0108.386] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.386] ReadFile (in: hFile=0x230, lpBuffer=0x27399b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27399b0*, lpNumberOfBytesRead=0x5ae8b8*=0x548, lpOverlapped=0x0) returned 1 [0108.403] SetFilePointer (in: hFile=0x230, lDistanceToMove=-328, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.403] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.403] WriteFile (in: hFile=0x230, lpBuffer=0x27399b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27399b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.404] CloseHandle (hObject=0x230) returned 1 [0108.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x75 [0108.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x75 [0108.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x89 [0108.404] SetErrorMode (uMode=0x1) returned 0x0 [0108.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.3dbuilder_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d6cae06, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d6cae06, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x4310385d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x548)) returned 1 [0108.404] SetErrorMode (uMode=0x0) returned 0x1 [0108.404] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.3dbuilder_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.3DBuilder_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.3dbuilder_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0108.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7c [0108.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7c [0108.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7c [0108.406] SetErrorMode (uMode=0x1) returned 0x0 [0108.406] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.407] GetFileType (hFile=0x230) returned 0x1 [0108.407] SetErrorMode (uMode=0x0) returned 0x1 [0108.407] GetFileType (hFile=0x230) returned 0x1 [0108.407] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.407] ReadFile (in: hFile=0x230, lpBuffer=0x273d300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273d300*, lpNumberOfBytesRead=0x5ae8b8*=0x481, lpOverlapped=0x0) returned 1 [0108.408] SetFilePointer (in: hFile=0x230, lDistanceToMove=-129, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.408] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.409] WriteFile (in: hFile=0x230, lpBuffer=0x273d300*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273d300*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.409] CloseHandle (hObject=0x230) returned 1 [0108.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7c [0108.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7c [0108.409] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x90 [0108.409] SetErrorMode (uMode=0x1) returned 0x0 [0108.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafddedda, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafddedda, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4310385d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x481)) returned 1 [0108.409] SetErrorMode (uMode=0x0) returned 0x1 [0108.409] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\app.lnk.partially.cryptonar")) returned 1 [0108.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0108.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0108.411] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0108.411] SetErrorMode (uMode=0x1) returned 0x0 [0108.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.accountscontrol_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.412] GetFileType (hFile=0x230) returned 0x1 [0108.412] SetErrorMode (uMode=0x0) returned 0x1 [0108.412] GetFileType (hFile=0x230) returned 0x1 [0108.412] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.412] ReadFile (in: hFile=0x230, lpBuffer=0x2740c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2740c98*, lpNumberOfBytesRead=0x5ae8b8*=0x441, lpOverlapped=0x0) returned 1 [0108.421] SetFilePointer (in: hFile=0x230, lDistanceToMove=-65, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.421] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.421] WriteFile (in: hFile=0x230, lpBuffer=0x2740c98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2740c98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.421] CloseHandle (hObject=0x230) returned 1 [0108.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0108.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x7b [0108.421] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x8f [0108.421] SetErrorMode (uMode=0x1) returned 0x0 [0108.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.accountscontrol_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0ad5a94, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0ad5a94, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x43129909, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x441)) returned 1 [0108.422] SetErrorMode (uMode=0x0) returned 0x1 [0108.422] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.accountscontrol_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.AccountsControl_cw5n1h2txyewy\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.accountscontrol_cw5n1h2txyewy\\app.lnk.partially.cryptonar")) returned 1 [0108.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0108.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0108.423] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0108.424] SetErrorMode (uMode=0x1) returned 0x0 [0108.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.appconnector_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.425] GetFileType (hFile=0x230) returned 0x1 [0108.425] SetErrorMode (uMode=0x0) returned 0x1 [0108.425] GetFileType (hFile=0x230) returned 0x1 [0108.425] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.425] ReadFile (in: hFile=0x230, lpBuffer=0x2744600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2744600*, lpNumberOfBytesRead=0x5ae8b8*=0x469, lpOverlapped=0x0) returned 1 [0108.426] SetFilePointer (in: hFile=0x230, lDistanceToMove=-105, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.427] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.427] WriteFile (in: hFile=0x230, lpBuffer=0x2744600*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2744600*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.427] CloseHandle (hObject=0x230) returned 1 [0108.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0108.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x78 [0108.427] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x8c [0108.427] SetErrorMode (uMode=0x1) returned 0x0 [0108.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.appconnector_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a931d2c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a931d2c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x4314fbe5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x469)) returned 1 [0108.427] SetErrorMode (uMode=0x0) returned 0x1 [0108.427] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.appconnector_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Appconnector_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.appconnector_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0108.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", lpFilePart=0x0) returned 0x80 [0108.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", lpFilePart=0x0) returned 0x80 [0108.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", lpFilePart=0x0) returned 0x80 [0108.429] SetErrorMode (uMode=0x1) returned 0x0 [0108.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingfinance_8wekyb3d8bbwe\\appexfinance.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.432] GetFileType (hFile=0x230) returned 0x1 [0108.432] SetErrorMode (uMode=0x0) returned 0x1 [0108.432] GetFileType (hFile=0x230) returned 0x1 [0108.432] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.432] ReadFile (in: hFile=0x230, lpBuffer=0x2747fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2747fc8*, lpNumberOfBytesRead=0x5ae8b8*=0x5c4, lpOverlapped=0x0) returned 1 [0108.485] SetFilePointer (in: hFile=0x230, lDistanceToMove=-452, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.485] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.485] WriteFile (in: hFile=0x230, lpBuffer=0x2747fc8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2747fc8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.485] CloseHandle (hObject=0x230) returned 1 [0108.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", lpFilePart=0x0) returned 0x80 [0108.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk", lpFilePart=0x0) returned 0x80 [0108.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x94 [0108.485] SetErrorMode (uMode=0x1) returned 0x0 [0108.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingfinance_8wekyb3d8bbwe\\appexfinance.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289c0d7d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x289c0d7d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x431c2398, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c4)) returned 1 [0108.486] SetErrorMode (uMode=0x0) returned 0x1 [0108.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingfinance_8wekyb3d8bbwe\\appexfinance.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingFinance_8wekyb3d8bbwe\\AppexFinance.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingfinance_8wekyb3d8bbwe\\appexfinance.lnk.partially.cryptonar")) returned 1 [0108.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", lpFilePart=0x0) returned 0x7a [0108.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", lpFilePart=0x0) returned 0x7a [0108.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", lpFilePart=0x0) returned 0x7a [0108.487] SetErrorMode (uMode=0x1) returned 0x0 [0108.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingnews_8wekyb3d8bbwe\\appexnews.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.490] GetFileType (hFile=0x230) returned 0x1 [0108.490] SetErrorMode (uMode=0x0) returned 0x1 [0108.490] GetFileType (hFile=0x230) returned 0x1 [0108.490] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.490] ReadFile (in: hFile=0x230, lpBuffer=0x274b9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274b9b0*, lpNumberOfBytesRead=0x5ae8b8*=0x5a0, lpOverlapped=0x0) returned 1 [0108.517] SetFilePointer (in: hFile=0x230, lDistanceToMove=-416, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.517] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.517] WriteFile (in: hFile=0x230, lpBuffer=0x274b9b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274b9b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.517] CloseHandle (hObject=0x230) returned 1 [0108.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", lpFilePart=0x0) returned 0x7a [0108.518] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk", lpFilePart=0x0) returned 0x7a [0108.519] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x8e [0108.519] SetErrorMode (uMode=0x1) returned 0x0 [0108.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingnews_8wekyb3d8bbwe\\appexnews.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x271c30e4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x271c30e4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x4320e761, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0108.519] SetErrorMode (uMode=0x0) returned 0x1 [0108.519] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingnews_8wekyb3d8bbwe\\appexnews.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingNews_8wekyb3d8bbwe\\AppexNews.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingnews_8wekyb3d8bbwe\\appexnews.lnk.partially.cryptonar")) returned 1 [0108.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", lpFilePart=0x0) returned 0x7e [0108.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", lpFilePart=0x0) returned 0x7e [0108.520] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", lpFilePart=0x0) returned 0x7e [0108.520] SetErrorMode (uMode=0x1) returned 0x0 [0108.521] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingsports_8wekyb3d8bbwe\\appexsports.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.523] GetFileType (hFile=0x230) returned 0x1 [0108.524] SetErrorMode (uMode=0x0) returned 0x1 [0108.524] GetFileType (hFile=0x230) returned 0x1 [0108.524] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.524] ReadFile (in: hFile=0x230, lpBuffer=0x274f358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274f358*, lpNumberOfBytesRead=0x5ae8b8*=0x5d8, lpOverlapped=0x0) returned 1 [0108.525] SetFilePointer (in: hFile=0x230, lDistanceToMove=-472, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.525] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.525] WriteFile (in: hFile=0x230, lpBuffer=0x274f358*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274f358*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.525] CloseHandle (hObject=0x230) returned 1 [0108.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", lpFilePart=0x0) returned 0x7e [0108.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk", lpFilePart=0x0) returned 0x7e [0108.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x92 [0108.526] SetErrorMode (uMode=0x1) returned 0x0 [0108.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingsports_8wekyb3d8bbwe\\appexsports.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23c907a3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x23c907a3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x432349c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d8)) returned 1 [0108.526] SetErrorMode (uMode=0x0) returned 0x1 [0108.526] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingsports_8wekyb3d8bbwe\\appexsports.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingSports_8wekyb3d8bbwe\\AppexSports.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingsports_8wekyb3d8bbwe\\appexsports.lnk.partially.cryptonar")) returned 1 [0108.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0108.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0108.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0108.527] SetErrorMode (uMode=0x1) returned 0x0 [0108.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingweather_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.528] GetFileType (hFile=0x230) returned 0x1 [0108.528] SetErrorMode (uMode=0x0) returned 0x1 [0108.528] GetFileType (hFile=0x230) returned 0x1 [0108.528] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.528] ReadFile (in: hFile=0x230, lpBuffer=0x2752cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2752cd8*, lpNumberOfBytesRead=0x5ae8b8*=0x5d4, lpOverlapped=0x0) returned 1 [0108.600] SetFilePointer (in: hFile=0x230, lDistanceToMove=-468, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.600] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.600] WriteFile (in: hFile=0x230, lpBuffer=0x2752cd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2752cd8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.601] CloseHandle (hObject=0x230) returned 1 [0108.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0108.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x77 [0108.601] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x8b [0108.601] SetErrorMode (uMode=0x1) returned 0x0 [0108.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingweather_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20f43cd0, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x20f43cd0, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x432f366f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d4)) returned 1 [0108.601] SetErrorMode (uMode=0x0) returned 0x1 [0108.601] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingweather_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BingWeather_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bingweather_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0108.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x79 [0108.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x79 [0108.603] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x79 [0108.603] SetErrorMode (uMode=0x1) returned 0x0 [0108.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bioenrollment_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.604] GetFileType (hFile=0x230) returned 0x1 [0108.604] SetErrorMode (uMode=0x0) returned 0x1 [0108.604] GetFileType (hFile=0x230) returned 0x1 [0108.604] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.604] ReadFile (in: hFile=0x230, lpBuffer=0x2756610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2756610*, lpNumberOfBytesRead=0x5ae8b8*=0x441, lpOverlapped=0x0) returned 1 [0108.617] SetFilePointer (in: hFile=0x230, lDistanceToMove=-65, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.617] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.617] WriteFile (in: hFile=0x230, lpBuffer=0x2756610*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2756610*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.617] CloseHandle (hObject=0x230) returned 1 [0108.617] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x79 [0108.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk", lpFilePart=0x0) returned 0x79 [0108.618] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x8d [0108.618] SetErrorMode (uMode=0x1) returned 0x0 [0108.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bioenrollment_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f9a60b, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0f9a60b, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4331997a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x441)) returned 1 [0108.618] SetErrorMode (uMode=0x0) returned 0x1 [0108.618] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bioenrollment_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.BioEnrollment_cw5n1h2txyewy\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.bioenrollment_cw5n1h2txyewy\\app.lnk.partially.cryptonar")) returned 1 [0108.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x76 [0108.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x76 [0108.619] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x76 [0108.619] SetErrorMode (uMode=0x1) returned 0x0 [0108.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.getstarted_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.620] GetFileType (hFile=0x230) returned 0x1 [0108.620] SetErrorMode (uMode=0x0) returned 0x1 [0108.620] GetFileType (hFile=0x230) returned 0x1 [0108.620] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.620] ReadFile (in: hFile=0x230, lpBuffer=0x2759f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2759f60*, lpNumberOfBytesRead=0x5ae8b8*=0x538, lpOverlapped=0x0) returned 1 [0108.632] SetFilePointer (in: hFile=0x230, lDistanceToMove=-312, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.632] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.633] WriteFile (in: hFile=0x230, lpBuffer=0x2759f60*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2759f60*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.633] CloseHandle (hObject=0x230) returned 1 [0108.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x76 [0108.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk", lpFilePart=0x0) returned 0x76 [0108.633] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x8a [0108.633] SetErrorMode (uMode=0x1) returned 0x0 [0108.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.getstarted_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f36647b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f36647b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x4333fb2e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x538)) returned 1 [0108.633] SetErrorMode (uMode=0x0) returned 0x1 [0108.633] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.getstarted_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Getstarted_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.getstarted_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0108.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", lpFilePart=0x0) returned 0x88 [0108.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", lpFilePart=0x0) returned 0x88 [0108.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", lpFilePart=0x0) returned 0x88 [0108.635] SetErrorMode (uMode=0x1) returned 0x0 [0108.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.lockapp_cw5n1h2txyewy\\windowsdefaultlockscreen.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.637] GetFileType (hFile=0x230) returned 0x1 [0108.637] SetErrorMode (uMode=0x0) returned 0x1 [0108.637] GetFileType (hFile=0x230) returned 0x1 [0108.637] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.637] ReadFile (in: hFile=0x230, lpBuffer=0x275d958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275d958*, lpNumberOfBytesRead=0x5ae8b8*=0x43d, lpOverlapped=0x0) returned 1 [0108.650] SetFilePointer (in: hFile=0x230, lDistanceToMove=-61, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.650] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.650] WriteFile (in: hFile=0x230, lpBuffer=0x275d958*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275d958*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.651] CloseHandle (hObject=0x230) returned 1 [0108.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", lpFilePart=0x0) returned 0x88 [0108.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk", lpFilePart=0x0) returned 0x88 [0108.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x9c [0108.651] SetErrorMode (uMode=0x1) returned 0x0 [0108.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.lockapp_cw5n1h2txyewy\\windowsdefaultlockscreen.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb151dd31, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb151dd31, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x43365e3a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43d)) returned 1 [0108.651] SetErrorMode (uMode=0x0) returned 0x1 [0108.651] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.lockapp_cw5n1h2txyewy\\windowsdefaultlockscreen.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.LockApp_cw5n1h2txyewy\\WindowsDefaultLockScreen.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.lockapp_cw5n1h2txyewy\\windowsdefaultlockscreen.lnk.partially.cryptonar")) returned 1 [0108.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", lpFilePart=0x0) returned 0x83 [0108.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", lpFilePart=0x0) returned 0x83 [0108.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk", lpFilePart=0x0) returned 0x83 [0108.653] SetErrorMode (uMode=0x1) returned 0x0 [0108.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoftedge.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.656] GetFileType (hFile=0x230) returned 0x1 [0108.656] SetErrorMode (uMode=0x0) returned 0x1 [0108.656] GetFileType (hFile=0x230) returned 0x1 [0108.656] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.656] ReadFile (in: hFile=0x230, lpBuffer=0x27613e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27613e0*, lpNumberOfBytesRead=0x5ae8b8*=0x574, lpOverlapped=0x0) returned 1 [0108.665] SetFilePointer (in: hFile=0x230, lDistanceToMove=-372, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0108.666] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.666] WriteFile (in: hFile=0x230, lpBuffer=0x27613e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27613e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0108.666] CloseHandle (hObject=0x230) returned 1 [0108.666] SetErrorMode (uMode=0x1) returned 0x0 [0108.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoftedge.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1c6b0b1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1c6b0b1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4338bf6e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x574)) returned 1 [0108.666] SetErrorMode (uMode=0x0) returned 0x1 [0108.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoftedge.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\MicrosoftEdge.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoftedge.lnk.partially.cryptonar")) returned 1 [0108.668] SetErrorMode (uMode=0x1) returned 0x0 [0108.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.670] SetErrorMode (uMode=0x0) returned 0x1 [0108.670] GetFileType (hFile=0x230) returned 0x1 [0108.670] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.688] SetErrorMode (uMode=0x1) returned 0x0 [0108.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d2c40c7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d2c40c7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x433b222c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1 [0108.688] SetErrorMode (uMode=0x0) returned 0x1 [0108.688] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub.lnk.partially.cryptonar")) returned 1 [0108.690] SetErrorMode (uMode=0x1) returned 0x0 [0108.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.691] SetErrorMode (uMode=0x0) returned 0x1 [0108.691] GetFileType (hFile=0x230) returned 0x1 [0108.691] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.779] SetErrorMode (uMode=0x1) returned 0x0 [0108.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19e2a0da, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19e2a0da, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x43497104, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x69c)) returned 1 [0108.779] SetErrorMode (uMode=0x0) returned 0x1 [0108.779] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0108.780] SetErrorMode (uMode=0x1) returned 0x0 [0108.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.782] SetErrorMode (uMode=0x0) returned 0x1 [0108.782] GetFileType (hFile=0x230) returned 0x1 [0108.782] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.801] SetErrorMode (uMode=0x1) returned 0x0 [0108.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17129970, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x17129970, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x434e3636, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x534)) returned 1 [0108.802] SetErrorMode (uMode=0x0) returned 0x1 [0108.802] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.onenoteim.lnk.partially.cryptonar")) returned 1 [0108.803] SetErrorMode (uMode=0x1) returned 0x0 [0108.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.people_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.805] SetErrorMode (uMode=0x0) returned 0x1 [0108.805] GetFileType (hFile=0x230) returned 0x1 [0108.805] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.850] SetErrorMode (uMode=0x1) returned 0x0 [0108.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.people_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1300b3a4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1300b3a4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x4355918f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c9)) returned 1 [0108.850] SetErrorMode (uMode=0x0) returned 0x1 [0108.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.people_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.People_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.people_8wekyb3d8bbwe\\x4c7a3b7dy2188y46d4ya362y19ac5a5805e5x.lnk.partially.cryptonar")) returned 1 [0108.851] SetErrorMode (uMode=0x1) returned 0x0 [0108.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.skypeapp_kzf8qxf38zg5c\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.852] SetErrorMode (uMode=0x0) returned 0x1 [0108.852] GetFileType (hFile=0x230) returned 0x1 [0108.852] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.936] SetErrorMode (uMode=0x1) returned 0x0 [0108.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.skypeapp_kzf8qxf38zg5c\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46192a2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe46192a2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x436148b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x524)) returned 1 [0108.936] SetErrorMode (uMode=0x0) returned 0x1 [0108.936] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.skypeapp_kzf8qxf38zg5c\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.SkypeApp_kzf8qxf38zg5c\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.skypeapp_kzf8qxf38zg5c\\app.lnk.partially.cryptonar")) returned 1 [0108.937] SetErrorMode (uMode=0x1) returned 0x0 [0108.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.938] SetErrorMode (uMode=0x0) returned 0x1 [0108.938] GetFileType (hFile=0x230) returned 0x1 [0108.938] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.951] SetErrorMode (uMode=0x1) returned 0x0 [0108.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3aaaef5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3aaaef5, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4363aa76, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e5)) returned 1 [0108.951] SetErrorMode (uMode=0x0) returned 0x1 [0108.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\app.lnk.partially.cryptonar")) returned 1 [0108.952] SetErrorMode (uMode=0x1) returned 0x0 [0108.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.953] SetErrorMode (uMode=0x0) returned 0x1 [0108.953] GetFileType (hFile=0x230) returned 0x1 [0108.953] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.959] SetErrorMode (uMode=0x1) returned 0x0 [0108.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0316033, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0316033, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x43661fd1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c1)) returned 1 [0108.959] SetErrorMode (uMode=0x0) returned 0x1 [0108.959] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\app.lnk.partially.cryptonar")) returned 1 [0108.960] SetErrorMode (uMode=0x1) returned 0x0 [0108.960] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.961] SetErrorMode (uMode=0x0) returned 0x1 [0108.961] GetFileType (hFile=0x230) returned 0x1 [0108.961] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.963] SetErrorMode (uMode=0x1) returned 0x0 [0108.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4cff099, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4cff099, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x43661fd1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51a)) returned 1 [0108.963] SetErrorMode (uMode=0x0) returned 0x1 [0108.963] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\app.lnk.partially.cryptonar")) returned 1 [0108.964] SetErrorMode (uMode=0x1) returned 0x0 [0108.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaui.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.967] SetErrorMode (uMode=0x0) returned 0x1 [0108.967] GetFileType (hFile=0x230) returned 0x1 [0108.967] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0108.975] SetErrorMode (uMode=0x1) returned 0x0 [0108.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaui.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb715af90, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb715af90, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x43661fd1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0108.975] SetErrorMode (uMode=0x0) returned 0x1 [0108.975] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaui.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\CortanaUI.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.cortana_cw5n1h2txyewy\\cortanaui.lnk.partially.cryptonar")) returned 1 [0108.978] SetErrorMode (uMode=0x1) returned 0x0 [0108.979] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0108.983] SetErrorMode (uMode=0x0) returned 0x1 [0108.983] GetFileType (hFile=0x230) returned 0x1 [0108.983] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.042] SetErrorMode (uMode=0x1) returned 0x0 [0109.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8199019, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb8199019, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4371f883, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47d)) returned 1 [0109.042] SetErrorMode (uMode=0x0) returned 0x1 [0109.042] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\app.lnk.partially.cryptonar")) returned 1 [0109.044] SetErrorMode (uMode=0x1) returned 0x0 [0109.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.photos_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.044] SetErrorMode (uMode=0x0) returned 0x1 [0109.045] GetFileType (hFile=0x230) returned 0x1 [0109.045] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.080] SetErrorMode (uMode=0x1) returned 0x0 [0109.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.photos_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1053af18, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1053af18, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x4376bd64, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x554)) returned 1 [0109.081] SetErrorMode (uMode=0x0) returned 0x1 [0109.081] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.photos_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.photos_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0109.082] SetErrorMode (uMode=0x1) returned 0x0 [0109.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.083] SetErrorMode (uMode=0x0) returned 0x1 [0109.083] GetFileType (hFile=0x230) returned 0x1 [0109.083] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.119] SetErrorMode (uMode=0x1) returned 0x0 [0109.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba831236, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xba831236, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x437de443, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x495)) returned 1 [0109.119] SetErrorMode (uMode=0x0) returned 0x1 [0109.120] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\app.lnk.partially.cryptonar")) returned 1 [0109.121] SetErrorMode (uMode=0x1) returned 0x0 [0109.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsalarms_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.122] SetErrorMode (uMode=0x0) returned 0x1 [0109.122] GetFileType (hFile=0x230) returned 0x1 [0109.122] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.159] SetErrorMode (uMode=0x1) returned 0x0 [0109.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsalarms_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6516ca6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd6516ca6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x4382ab51, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f8)) returned 1 [0109.160] SetErrorMode (uMode=0x0) returned 0x1 [0109.160] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsalarms_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsalarms_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0109.161] SetErrorMode (uMode=0x1) returned 0x0 [0109.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscalculator_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.162] SetErrorMode (uMode=0x0) returned 0x1 [0109.162] GetFileType (hFile=0x230) returned 0x1 [0109.162] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.164] SetErrorMode (uMode=0x1) returned 0x0 [0109.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscalculator_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfdcff, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xdfdcff, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x43850a81, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x574)) returned 1 [0109.165] SetErrorMode (uMode=0x0) returned 0x1 [0109.165] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscalculator_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscalculator_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0109.166] SetErrorMode (uMode=0x1) returned 0x0 [0109.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscamera_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.167] SetErrorMode (uMode=0x0) returned 0x1 [0109.167] GetFileType (hFile=0x230) returned 0x1 [0109.167] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.200] SetErrorMode (uMode=0x1) returned 0x0 [0109.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscamera_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe313f05, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe313f05, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x4389cffa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x61c)) returned 1 [0109.201] SetErrorMode (uMode=0x0) returned 0x1 [0109.201] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscamera_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscamera_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0109.202] SetErrorMode (uMode=0x1) returned 0x0 [0109.202] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.204] SetErrorMode (uMode=0x0) returned 0x1 [0109.204] GetFileType (hFile=0x230) returned 0x1 [0109.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.218] SetErrorMode (uMode=0x1) returned 0x0 [0109.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e994c5f, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e997375, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x438c315c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x781)) returned 1 [0109.218] SetErrorMode (uMode=0x0) returned 0x1 [0109.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.calendar.lnk.partially.cryptonar")) returned 1 [0109.219] SetErrorMode (uMode=0x1) returned 0x0 [0109.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.220] SetErrorMode (uMode=0x0) returned 0x1 [0109.220] GetFileType (hFile=0x230) returned 0x1 [0109.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.392] SetErrorMode (uMode=0x1) returned 0x0 [0109.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e98b01b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e98d72e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x43a66bc1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x739)) returned 1 [0109.392] SetErrorMode (uMode=0x0) returned 0x1 [0109.392] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowslive.mail.lnk.partially.cryptonar")) returned 1 [0109.393] SetErrorMode (uMode=0x1) returned 0x0 [0109.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsfeedback_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.394] SetErrorMode (uMode=0x0) returned 0x1 [0109.394] GetFileType (hFile=0x230) returned 0x1 [0109.394] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.396] SetErrorMode (uMode=0x1) returned 0x0 [0109.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsfeedback_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc83ac9e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc860f1d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x43a8cd99, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x584)) returned 1 [0109.396] SetErrorMode (uMode=0x0) returned 0x1 [0109.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsfeedback_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsfeedback_cw5n1h2txyewy\\app.lnk.partially.cryptonar")) returned 1 [0109.397] SetErrorMode (uMode=0x1) returned 0x0 [0109.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsmaps_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.397] SetErrorMode (uMode=0x0) returned 0x1 [0109.397] GetFileType (hFile=0x230) returned 0x1 [0109.398] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.425] SetErrorMode (uMode=0x1) returned 0x0 [0109.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsmaps_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfae53d4e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfae53d4e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x43ab53b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x554)) returned 1 [0109.425] SetErrorMode (uMode=0x0) returned 0x1 [0109.426] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsmaps_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsmaps_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0109.427] SetErrorMode (uMode=0x1) returned 0x0 [0109.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsphone_8wekyb3d8bbwe\\companionapp.app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.429] SetErrorMode (uMode=0x0) returned 0x1 [0109.429] GetFileType (hFile=0x230) returned 0x1 [0109.429] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.446] SetErrorMode (uMode=0x1) returned 0x0 [0109.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsphone_8wekyb3d8bbwe\\companionapp.app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf799cdb7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf799cdb7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x43aff551, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4bf)) returned 1 [0109.446] SetErrorMode (uMode=0x0) returned 0x1 [0109.447] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsphone_8wekyb3d8bbwe\\companionapp.app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\CompanionApp.App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsphone_8wekyb3d8bbwe\\companionapp.app.lnk.partially.cryptonar")) returned 1 [0109.448] SetErrorMode (uMode=0x1) returned 0x0 [0109.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.449] SetErrorMode (uMode=0x0) returned 0x1 [0109.449] GetFileType (hFile=0x230) returned 0x1 [0109.449] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.450] SetErrorMode (uMode=0x1) returned 0x0 [0109.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4a13ede, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf4a13ede, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x43aff551, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0109.451] SetErrorMode (uMode=0x0) returned 0x1 [0109.451] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0109.452] SetErrorMode (uMode=0x1) returned 0x0 [0109.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsstore_8wekyb3d8bbwe\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.453] SetErrorMode (uMode=0x0) returned 0x1 [0109.453] GetFileType (hFile=0x230) returned 0x1 [0109.453] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.472] SetErrorMode (uMode=0x1) returned 0x0 [0109.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsstore_8wekyb3d8bbwe\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25b7eab, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf25b7eab, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x43b2581c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x551)) returned 1 [0109.482] SetErrorMode (uMode=0x0) returned 0x1 [0109.482] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsstore_8wekyb3d8bbwe\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.WindowsStore_8wekyb3d8bbwe\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.windowsstore_8wekyb3d8bbwe\\app.lnk.partially.cryptonar")) returned 1 [0109.484] SetErrorMode (uMode=0x1) returned 0x0 [0109.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.486] SetErrorMode (uMode=0x0) returned 0x1 [0109.486] GetFileType (hFile=0x230) returned 0x1 [0109.486] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.512] SetErrorMode (uMode=0x1) returned 0x0 [0109.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf10be700, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf10be700, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x43b97f86, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x508)) returned 1 [0109.512] SetErrorMode (uMode=0x0) returned 0x1 [0109.512] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp.lnk.partially.cryptonar")) returned 1 [0109.513] SetErrorMode (uMode=0x1) returned 0x0 [0109.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.516] SetErrorMode (uMode=0x0) returned 0x1 [0109.518] GetFileType (hFile=0x230) returned 0x1 [0109.518] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.527] SetErrorMode (uMode=0x1) returned 0x0 [0109.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbeb15fc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbeb15fc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x43bbe183, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x479)) returned 1 [0109.528] SetErrorMode (uMode=0x0) returned 0x1 [0109.528] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui.lnk.partially.cryptonar")) returned 1 [0109.529] SetErrorMode (uMode=0x1) returned 0x0 [0109.529] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.531] SetErrorMode (uMode=0x0) returned 0x1 [0109.531] GetFileType (hFile=0x230) returned 0x1 [0109.531] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.560] SetErrorMode (uMode=0x1) returned 0x0 [0109.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd12ba2e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd12ba2e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x43c0a61b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b5)) returned 1 [0109.560] SetErrorMode (uMode=0x0) returned 0x1 [0109.560] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider.lnk.partially.cryptonar")) returned 1 [0109.562] SetErrorMode (uMode=0x1) returned 0x0 [0109.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.564] SetErrorMode (uMode=0x0) returned 0x1 [0109.564] GetFileType (hFile=0x230) returned 0x1 [0109.564] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.566] SetErrorMode (uMode=0x1) returned 0x0 [0109.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb77f2ef, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeb77f2ef, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x43c0a61b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d4)) returned 1 [0109.566] SetErrorMode (uMode=0x0) returned 0x1 [0109.566] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic.lnk.partially.cryptonar")) returned 1 [0109.568] SetErrorMode (uMode=0x1) returned 0x0 [0109.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.571] SetErrorMode (uMode=0x0) returned 0x1 [0109.571] GetFileType (hFile=0x230) returned 0x1 [0109.571] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.590] SetErrorMode (uMode=0x1) returned 0x0 [0109.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7edf540, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7edf540, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x43c66e5c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0109.590] SetErrorMode (uMode=0x0) returned 0x1 [0109.590] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo.lnk.partially.cryptonar")) returned 1 [0109.592] SetErrorMode (uMode=0x1) returned 0x0 [0109.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.contactsupport_cw5n1h2txyewy\\app.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.593] SetErrorMode (uMode=0x0) returned 0x1 [0109.593] GetFileType (hFile=0x230) returned 0x1 [0109.593] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.595] SetErrorMode (uMode=0x1) returned 0x0 [0109.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.contactsupport_cw5n1h2txyewy\\app.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb015aa, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdb015aa, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x43c66e5c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0109.596] SetErrorMode (uMode=0x0) returned 0x1 [0109.596] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.contactsupport_cw5n1h2txyewy\\app.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.ContactSupport_cw5n1h2txyewy\\App.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.contactsupport_cw5n1h2txyewy\\app.lnk.partially.cryptonar")) returned 1 [0109.597] SetErrorMode (uMode=0x1) returned 0x0 [0109.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.purchasedialog_cw5n1h2txyewy\\microsoft.windows.purchasedialog.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.601] SetErrorMode (uMode=0x0) returned 0x1 [0109.601] GetFileType (hFile=0x230) returned 0x1 [0109.601] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.603] SetErrorMode (uMode=0x1) returned 0x0 [0109.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.purchasedialog_cw5n1h2txyewy\\microsoft.windows.purchasedialog.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbee86a57, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbee86a57, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x43c7cc15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x435)) returned 1 [0109.605] SetErrorMode (uMode=0x0) returned 0x1 [0109.605] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.purchasedialog_cw5n1h2txyewy\\microsoft.windows.purchasedialog.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Application Shortcuts\\Windows.PurchaseDialog_cw5n1h2txyewy\\Microsoft.Windows.PurchaseDialog.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\application shortcuts\\windows.purchasedialog_cw5n1h2txyewy\\microsoft.windows.purchasedialog.lnk.partially.cryptonar")) returned 1 [0109.608] SetErrorMode (uMode=0x1) returned 0x0 [0109.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.609] SetErrorMode (uMode=0x0) returned 0x1 [0109.609] GetFileType (hFile=0x230) returned 0x1 [0109.609] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.610] SetErrorMode (uMode=0x1) returned 0x0 [0109.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x572120bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x572120bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x43c7cc15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0109.610] SetErrorMode (uMode=0x0) returned 0x1 [0109.610] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini.partially.cryptonar")) returned 1 [0109.611] SetErrorMode (uMode=0x1) returned 0x0 [0109.611] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.611] SetErrorMode (uMode=0x0) returned 0x1 [0109.611] GetFileType (hFile=0x230) returned 0x1 [0109.611] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.613] SetErrorMode (uMode=0x1) returned 0x0 [0109.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21fb1af2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x21fb1af2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x43c7cc15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0109.613] SetErrorMode (uMode=0x0) returned 0x1 [0109.613] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn1\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\burn\\burn1\\desktop.ini.partially.cryptonar")) returned 1 [0109.614] SetErrorMode (uMode=0x1) returned 0x0 [0109.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.615] SetErrorMode (uMode=0x0) returned 0x1 [0109.615] GetFileType (hFile=0x230) returned 0x1 [0109.615] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.616] SetErrorMode (uMode=0x1) returned 0x0 [0109.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacde373f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacde373f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x43ca2e33, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0109.616] SetErrorMode (uMode=0x0) returned 0x1 [0109.616] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db.partially.cryptonar")) returned 1 [0109.617] SetErrorMode (uMode=0x1) returned 0x0 [0109.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.617] SetErrorMode (uMode=0x0) returned 0x1 [0109.617] GetFileType (hFile=0x230) returned 0x1 [0109.617] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0109.619] SetErrorMode (uMode=0x1) returned 0x0 [0109.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377d61d0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x377d61d0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x43ca2e33, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0109.619] SetErrorMode (uMode=0x0) returned 0x1 [0109.619] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.3.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\cversions.3.db.partially.cryptonar")) returned 1 [0109.621] SetErrorMode (uMode=0x1) returned 0x0 [0109.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0109.621] SetErrorMode (uMode=0x0) returned 0x1 [0109.621] GetFileType (hFile=0x230) returned 0x1 [0109.621] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.563] SetErrorMode (uMode=0x1) returned 0x0 [0110.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d3d7331, ftCreationTime.dwHighDateTime=0x1d301c7, ftLastAccessTime.dwLowDateTime=0xb917748c, ftLastAccessTime.dwHighDateTime=0x1d336e4, ftLastWriteTime.dwLowDateTime=0x4458d1a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x61088)) returned 1 [0110.563] SetErrorMode (uMode=0x0) returned 0x1 [0110.563] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{2546D910-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{2546d910-b905-4d30-88c9-b63c603da134}.3.ver0x0000000000000001.db.partially.cryptonar")) returned 1 [0110.571] SetErrorMode (uMode=0x1) returned 0x0 [0110.571] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000033.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000033.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.572] SetErrorMode (uMode=0x0) returned 0x1 [0110.572] GetFileType (hFile=0x230) returned 0x1 [0110.572] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.573] SetErrorMode (uMode=0x1) returned 0x0 [0110.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000033.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000033.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x417148c0, ftCreationTime.dwHighDateTime=0x1d41fda, ftLastAccessTime.dwLowDateTime=0x417148c0, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x445b347e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c240)) returned 1 [0110.573] SetErrorMode (uMode=0x0) returned 0x1 [0110.573] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000033.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000033.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000033.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000033.db.partially.cryptonar")) returned 1 [0110.574] SetErrorMode (uMode=0x1) returned 0x0 [0110.574] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000034.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.575] SetErrorMode (uMode=0x0) returned 0x1 [0110.575] GetFileType (hFile=0x230) returned 0x1 [0110.575] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.577] SetErrorMode (uMode=0x1) returned 0x0 [0110.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000034.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef82b223, ftCreationTime.dwHighDateTime=0x1d41fe4, ftLastAccessTime.dwLowDateTime=0xef82b223, ftLastAccessTime.dwHighDateTime=0x1d41fe4, ftLastWriteTime.dwLowDateTime=0x445b347e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d338)) returned 1 [0110.577] SetErrorMode (uMode=0x0) returned 0x1 [0110.577] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000034.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000034.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000034.db.partially.cryptonar")) returned 1 [0110.578] SetErrorMode (uMode=0x1) returned 0x0 [0110.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000035.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.579] SetErrorMode (uMode=0x0) returned 0x1 [0110.579] GetFileType (hFile=0x230) returned 0x1 [0110.579] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.580] SetErrorMode (uMode=0x1) returned 0x0 [0110.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000035.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b1ab5, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0x85b1ab5, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x445d99e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1bfb0)) returned 1 [0110.580] SetErrorMode (uMode=0x0) returned 0x1 [0110.580] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000035.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000035.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000035.db.partially.cryptonar")) returned 1 [0110.581] SetErrorMode (uMode=0x1) returned 0x0 [0110.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000036.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.582] SetErrorMode (uMode=0x0) returned 0x1 [0110.582] GetFileType (hFile=0x230) returned 0x1 [0110.582] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.583] SetErrorMode (uMode=0x1) returned 0x0 [0110.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000036.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d6d9c6, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0x10d6d9c6, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x445d99e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1bc48)) returned 1 [0110.583] SetErrorMode (uMode=0x0) returned 0x1 [0110.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000036.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x0000000000000036.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x0000000000000036.db.partially.cryptonar")) returned 1 [0110.585] SetErrorMode (uMode=0x1) returned 0x0 [0110.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001a.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001a.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.585] SetErrorMode (uMode=0x0) returned 0x1 [0110.585] GetFileType (hFile=0x230) returned 0x1 [0110.585] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.645] SetErrorMode (uMode=0x1) returned 0x0 [0110.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001a.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001a.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c22aa9e, ftCreationTime.dwHighDateTime=0x1d3b04f, ftLastAccessTime.dwLowDateTime=0x9c22aa9e, ftLastAccessTime.dwHighDateTime=0x1d3b04f, ftLastWriteTime.dwLowDateTime=0x44671f73, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12c68)) returned 1 [0110.645] SetErrorMode (uMode=0x0) returned 0x1 [0110.645] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001a.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001a.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001a.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001a.db.partially.cryptonar")) returned 1 [0110.646] SetErrorMode (uMode=0x1) returned 0x0 [0110.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.647] SetErrorMode (uMode=0x0) returned 0x1 [0110.647] GetFileType (hFile=0x230) returned 0x1 [0110.647] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.648] SetErrorMode (uMode=0x1) returned 0x0 [0110.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff16f5ad, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xff16f5ad, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x44671f73, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12c68)) returned 1 [0110.649] SetErrorMode (uMode=0x0) returned 0x1 [0110.649] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000001b.db.partially.cryptonar")) returned 1 [0110.650] SetErrorMode (uMode=0x1) returned 0x0 [0110.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.651] SetErrorMode (uMode=0x0) returned 0x1 [0110.651] GetFileType (hFile=0x230) returned 0x1 [0110.652] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.678] SetErrorMode (uMode=0x1) returned 0x0 [0110.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xab04f2ab, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xab04f2ab, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x446be561, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6e000)) returned 1 [0110.678] SetErrorMode (uMode=0x0) returned 0x1 [0110.678] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl.partially.cryptonar")) returned 1 [0110.679] SetErrorMode (uMode=0x1) returned 0x0 [0110.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.680] SetErrorMode (uMode=0x0) returned 0x1 [0110.680] GetFileType (hFile=0x230) returned 0x1 [0110.680] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.682] SetErrorMode (uMode=0x1) returned 0x0 [0110.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacbf38ac, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacbf38ac, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x446be561, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0110.682] SetErrorMode (uMode=0x0) returned 0x1 [0110.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl.partially.cryptonar")) returned 1 [0110.683] SetErrorMode (uMode=0x1) returned 0x0 [0110.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.685] SetErrorMode (uMode=0x0) returned 0x1 [0110.685] GetFileType (hFile=0x230) returned 0x1 [0110.685] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.686] SetErrorMode (uMode=0x1) returned 0x0 [0110.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x446be561, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.686] SetErrorMode (uMode=0x0) returned 0x1 [0110.686] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1280.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1280.db.partially.cryptonar")) returned 1 [0110.689] SetErrorMode (uMode=0x1) returned 0x0 [0110.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_16.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0110.690] SetErrorMode (uMode=0x0) returned 0x1 [0110.690] SetErrorMode (uMode=0x1) returned 0x0 [0110.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.691] SetErrorMode (uMode=0x0) returned 0x1 [0110.691] GetFileType (hFile=0x230) returned 0x1 [0110.691] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.692] SetErrorMode (uMode=0x1) returned 0x0 [0110.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x446e4873, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.693] SetErrorMode (uMode=0x0) returned 0x1 [0110.693] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_1920.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_1920.db.partially.cryptonar")) returned 1 [0110.695] SetErrorMode (uMode=0x1) returned 0x0 [0110.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0110.696] SetErrorMode (uMode=0x0) returned 0x1 [0110.697] SetErrorMode (uMode=0x1) returned 0x0 [0110.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.699] SetErrorMode (uMode=0x0) returned 0x1 [0110.699] GetFileType (hFile=0x230) returned 0x1 [0110.699] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.700] SetErrorMode (uMode=0x1) returned 0x0 [0110.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x446e4873, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.700] SetErrorMode (uMode=0x0) returned 0x1 [0110.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_2560.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_2560.db.partially.cryptonar")) returned 1 [0110.702] SetErrorMode (uMode=0x1) returned 0x0 [0110.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_32.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0110.704] SetErrorMode (uMode=0x0) returned 0x1 [0110.704] SetErrorMode (uMode=0x1) returned 0x0 [0110.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0110.706] SetErrorMode (uMode=0x0) returned 0x1 [0110.707] SetErrorMode (uMode=0x1) returned 0x0 [0110.707] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.709] SetErrorMode (uMode=0x0) returned 0x1 [0110.709] GetFileType (hFile=0x230) returned 0x1 [0110.709] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.710] SetErrorMode (uMode=0x1) returned 0x0 [0110.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4470b71d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.710] SetErrorMode (uMode=0x0) returned 0x1 [0110.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_768.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_768.db.partially.cryptonar")) returned 1 [0110.713] SetErrorMode (uMode=0x1) returned 0x0 [0110.713] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.714] SetErrorMode (uMode=0x0) returned 0x1 [0110.714] GetFileType (hFile=0x230) returned 0x1 [0110.715] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.716] SetErrorMode (uMode=0x1) returned 0x0 [0110.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4470b71d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.717] SetErrorMode (uMode=0x0) returned 0x1 [0110.717] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_96.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_96.db.partially.cryptonar")) returned 1 [0110.719] SetErrorMode (uMode=0x1) returned 0x0 [0110.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.720] SetErrorMode (uMode=0x0) returned 0x1 [0110.720] GetFileType (hFile=0x230) returned 0x1 [0110.720] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.721] SetErrorMode (uMode=0x1) returned 0x0 [0110.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44730b10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.722] SetErrorMode (uMode=0x0) returned 0x1 [0110.722] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_custom_stream.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_custom_stream.db.partially.cryptonar")) returned 1 [0110.723] SetErrorMode (uMode=0x1) returned 0x0 [0110.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.723] SetErrorMode (uMode=0x0) returned 0x1 [0110.723] GetFileType (hFile=0x230) returned 0x1 [0110.723] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.724] SetErrorMode (uMode=0x1) returned 0x0 [0110.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44730b10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.724] SetErrorMode (uMode=0x0) returned 0x1 [0110.724] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_exif.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_exif.db.partially.cryptonar")) returned 1 [0110.725] SetErrorMode (uMode=0x1) returned 0x0 [0110.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0110.726] SetErrorMode (uMode=0x0) returned 0x1 [0110.726] SetErrorMode (uMode=0x1) returned 0x0 [0110.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.727] SetErrorMode (uMode=0x0) returned 0x1 [0110.727] GetFileType (hFile=0x230) returned 0x1 [0110.727] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.728] SetErrorMode (uMode=0x1) returned 0x0 [0110.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44730b10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.728] SetErrorMode (uMode=0x0) returned 0x1 [0110.728] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_sr.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_sr.db.partially.cryptonar")) returned 1 [0110.729] SetErrorMode (uMode=0x1) returned 0x0 [0110.729] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.730] SetErrorMode (uMode=0x0) returned 0x1 [0110.730] GetFileType (hFile=0x230) returned 0x1 [0110.730] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.731] SetErrorMode (uMode=0x1) returned 0x0 [0110.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44730b10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.731] SetErrorMode (uMode=0x0) returned 0x1 [0110.731] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide.db.partially.cryptonar")) returned 1 [0110.733] SetErrorMode (uMode=0x1) returned 0x0 [0110.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.733] SetErrorMode (uMode=0x0) returned 0x1 [0110.733] GetFileType (hFile=0x230) returned 0x1 [0110.733] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.734] SetErrorMode (uMode=0x1) returned 0x0 [0110.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad5a31c7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad5a31c7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x44730b10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.734] SetErrorMode (uMode=0x0) returned 0x1 [0110.734] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_wide_alternate.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_wide_alternate.db.partially.cryptonar")) returned 1 [0110.736] SetErrorMode (uMode=0x1) returned 0x0 [0110.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.737] SetErrorMode (uMode=0x0) returned 0x1 [0110.737] GetFileType (hFile=0x230) returned 0x1 [0110.737] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.738] SetErrorMode (uMode=0x1) returned 0x0 [0110.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9319a91a, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x4475766c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.738] SetErrorMode (uMode=0x0) returned 0x1 [0110.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1280.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1280.db.partially.cryptonar")) returned 1 [0110.739] SetErrorMode (uMode=0x1) returned 0x0 [0110.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.740] SetErrorMode (uMode=0x0) returned 0x1 [0110.740] GetFileType (hFile=0x230) returned 0x1 [0110.740] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.741] SetErrorMode (uMode=0x1) returned 0x0 [0110.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9319a91a, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x4475766c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.742] SetErrorMode (uMode=0x0) returned 0x1 [0110.742] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_16.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_16.db.partially.cryptonar")) returned 1 [0110.743] SetErrorMode (uMode=0x1) returned 0x0 [0110.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.744] SetErrorMode (uMode=0x0) returned 0x1 [0110.744] GetFileType (hFile=0x230) returned 0x1 [0110.744] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.745] SetErrorMode (uMode=0x1) returned 0x0 [0110.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9319a91a, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x4475766c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.745] SetErrorMode (uMode=0x0) returned 0x1 [0110.746] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1920.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1920.db.partially.cryptonar")) returned 1 [0110.747] SetErrorMode (uMode=0x1) returned 0x0 [0110.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0110.748] SetErrorMode (uMode=0x0) returned 0x1 [0110.749] SetErrorMode (uMode=0x1) returned 0x0 [0110.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.750] SetErrorMode (uMode=0x0) returned 0x1 [0110.750] GetFileType (hFile=0x230) returned 0x1 [0110.750] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.752] SetErrorMode (uMode=0x1) returned 0x0 [0110.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9319a91a, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x4477fc9d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.753] SetErrorMode (uMode=0x0) returned 0x1 [0110.753] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_2560.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_2560.db.partially.cryptonar")) returned 1 [0110.754] SetErrorMode (uMode=0x1) returned 0x0 [0110.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.756] SetErrorMode (uMode=0x0) returned 0x1 [0110.756] GetFileType (hFile=0x230) returned 0x1 [0110.756] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.757] SetErrorMode (uMode=0x1) returned 0x0 [0110.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9319a91a, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x4478b6f6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0110.757] SetErrorMode (uMode=0x0) returned 0x1 [0110.757] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.partially.cryptonar")) returned 1 [0110.759] SetErrorMode (uMode=0x1) returned 0x0 [0110.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0110.760] SetErrorMode (uMode=0x0) returned 0x1 [0110.760] SetErrorMode (uMode=0x1) returned 0x0 [0110.761] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.762] SetErrorMode (uMode=0x0) returned 0x1 [0110.762] GetFileType (hFile=0x230) returned 0x1 [0110.762] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.763] SetErrorMode (uMode=0x1) returned 0x0 [0110.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9319a91a, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x44798e09, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.763] SetErrorMode (uMode=0x0) returned 0x1 [0110.764] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_768.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_768.db.partially.cryptonar")) returned 1 [0110.766] SetErrorMode (uMode=0x1) returned 0x0 [0110.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.767] SetErrorMode (uMode=0x0) returned 0x1 [0110.768] GetFileType (hFile=0x230) returned 0x1 [0110.768] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.770] SetErrorMode (uMode=0x1) returned 0x0 [0110.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9319a91a, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x447a8195, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.770] SetErrorMode (uMode=0x0) returned 0x1 [0110.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.partially.cryptonar")) returned 1 [0110.772] SetErrorMode (uMode=0x1) returned 0x0 [0110.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.773] SetErrorMode (uMode=0x0) returned 0x1 [0110.773] GetFileType (hFile=0x230) returned 0x1 [0110.773] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.775] SetErrorMode (uMode=0x1) returned 0x0 [0110.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x931c0c0b, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x447b5f25, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.775] SetErrorMode (uMode=0x0) returned 0x1 [0110.775] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_custom_stream.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_custom_stream.db.partially.cryptonar")) returned 1 [0110.783] SetErrorMode (uMode=0x1) returned 0x0 [0110.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.784] SetErrorMode (uMode=0x0) returned 0x1 [0110.784] GetFileType (hFile=0x230) returned 0x1 [0110.784] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.785] SetErrorMode (uMode=0x1) returned 0x0 [0110.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x931c0c0b, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x447cab56, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.785] SetErrorMode (uMode=0x0) returned 0x1 [0110.785] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_exif.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_exif.db.partially.cryptonar")) returned 1 [0110.786] SetErrorMode (uMode=0x1) returned 0x0 [0110.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0110.787] SetErrorMode (uMode=0x0) returned 0x1 [0110.787] SetErrorMode (uMode=0x1) returned 0x0 [0110.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.788] SetErrorMode (uMode=0x0) returned 0x1 [0110.788] GetFileType (hFile=0x230) returned 0x1 [0110.788] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.789] SetErrorMode (uMode=0x1) returned 0x0 [0110.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x931c0c0b, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x447cab56, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.789] SetErrorMode (uMode=0x0) returned 0x1 [0110.789] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.partially.cryptonar")) returned 1 [0110.790] SetErrorMode (uMode=0x1) returned 0x0 [0110.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.791] SetErrorMode (uMode=0x0) returned 0x1 [0110.791] GetFileType (hFile=0x230) returned 0x1 [0110.791] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.793] SetErrorMode (uMode=0x1) returned 0x0 [0110.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x931c0c0b, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x447cab56, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.793] SetErrorMode (uMode=0x0) returned 0x1 [0110.793] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide.db.partially.cryptonar")) returned 1 [0110.794] SetErrorMode (uMode=0x1) returned 0x0 [0110.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.795] SetErrorMode (uMode=0x0) returned 0x1 [0110.795] GetFileType (hFile=0x230) returned 0x1 [0110.795] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.797] SetErrorMode (uMode=0x1) returned 0x0 [0110.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x931c0c0b, ftCreationTime.dwHighDateTime=0x1d336e4, ftLastAccessTime.dwLowDateTime=0x2e5440fa, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0x447cab56, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0110.797] SetErrorMode (uMode=0x0) returned 0x1 [0110.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_wide_alternate.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_wide_alternate.db.partially.cryptonar")) returned 1 [0110.799] SetErrorMode (uMode=0x1) returned 0x0 [0110.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.800] SetErrorMode (uMode=0x0) returned 0x1 [0110.800] GetFileType (hFile=0x230) returned 0x1 [0110.800] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.801] SetErrorMode (uMode=0x1) returned 0x0 [0110.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c2ed337, ftCreationTime.dwHighDateTime=0x1d2d426, ftLastAccessTime.dwLowDateTime=0x3c2ed337, ftLastAccessTime.dwHighDateTime=0x1d2d426, ftLastWriteTime.dwLowDateTime=0x447f17c1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x82)) returned 1 [0110.801] SetErrorMode (uMode=0x0) returned 0x1 [0110.801] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\desktop.ini.partially.cryptonar")) returned 1 [0110.802] SetErrorMode (uMode=0x1) returned 0x0 [0110.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.805] SetErrorMode (uMode=0x0) returned 0x1 [0110.805] GetFileType (hFile=0x230) returned 0x1 [0110.805] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.805] SetErrorMode (uMode=0x1) returned 0x0 [0110.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xae11c718, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0110.806] SetErrorMode (uMode=0x0) returned 0x1 [0110.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\container.dat.partially.cryptonar")) returned 1 [0110.807] SetErrorMode (uMode=0x1) returned 0x0 [0110.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018082920180830\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018082920180830\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.808] SetErrorMode (uMode=0x0) returned 0x1 [0110.808] GetFileType (hFile=0x230) returned 0x1 [0110.808] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.808] SetErrorMode (uMode=0x1) returned 0x0 [0110.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018082920180830\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018082920180830\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xa0a9de2, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xa0a9de2, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0xa0a9de2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0110.808] SetErrorMode (uMode=0x0) returned 0x1 [0110.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018082920180830\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018082920180830\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012018082920180830\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012018082920180830\\container.dat.partially.cryptonar")) returned 1 [0110.810] SetErrorMode (uMode=0x1) returned 0x0 [0110.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.811] SetErrorMode (uMode=0x0) returned 0x1 [0110.811] GetFileType (hFile=0x230) returned 0x1 [0110.811] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.811] SetErrorMode (uMode=0x1) returned 0x0 [0110.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90ebcf2f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90ebcf2f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90ebcf2f, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0110.811] SetErrorMode (uMode=0x0) returned 0x1 [0110.811] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\container.dat.partially.cryptonar")) returned 1 [0110.813] SetErrorMode (uMode=0x1) returned 0x0 [0110.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.814] SetErrorMode (uMode=0x0) returned 0x1 [0110.814] GetFileType (hFile=0x230) returned 0x1 [0110.814] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.815] SetErrorMode (uMode=0x1) returned 0x0 [0110.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4cefcd44, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4cefcd44, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4cefcd44, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0110.815] SetErrorMode (uMode=0x0) returned 0x1 [0110.815] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\container.dat.partially.cryptonar")) returned 1 [0110.816] SetErrorMode (uMode=0x1) returned 0x0 [0110.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.817] SetErrorMode (uMode=0x0) returned 0x1 [0110.817] GetFileType (hFile=0x230) returned 0x1 [0110.817] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.818] SetErrorMode (uMode=0x1) returned 0x0 [0110.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90b9bcea, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90b9bcea, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90b9bcea, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0110.818] SetErrorMode (uMode=0x0) returned 0x1 [0110.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatCache\\Low\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatcache\\low\\container.dat.partially.cryptonar")) returned 1 [0110.819] SetErrorMode (uMode=0x1) returned 0x0 [0110.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.820] SetErrorMode (uMode=0x0) returned 0x1 [0110.820] GetFileType (hFile=0x230) returned 0x1 [0110.820] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.820] SetErrorMode (uMode=0x1) returned 0x0 [0110.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4cf007f6, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4cf007f6, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x4cf007f6, ftLastWriteTime.dwHighDateTime=0x1d2d427, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0110.820] SetErrorMode (uMode=0x0) returned 0x1 [0110.820] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\container.dat.partially.cryptonar")) returned 1 [0110.822] SetErrorMode (uMode=0x1) returned 0x0 [0110.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.822] SetErrorMode (uMode=0x0) returned 0x1 [0110.823] GetFileType (hFile=0x230) returned 0x1 [0110.823] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.823] SetErrorMode (uMode=0x1) returned 0x0 [0110.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90b9bcea, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90b9bcea, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90b9bcea, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0110.823] SetErrorMode (uMode=0x0) returned 0x1 [0110.823] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IECompatUaCache\\Low\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iecompatuacache\\low\\container.dat.partially.cryptonar")) returned 1 [0110.824] SetErrorMode (uMode=0x1) returned 0x0 [0110.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.825] SetErrorMode (uMode=0x0) returned 0x1 [0110.825] GetFileType (hFile=0x230) returned 0x1 [0110.825] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.825] SetErrorMode (uMode=0x1) returned 0x0 [0110.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x29a52a61, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x29a52a61, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x29a52a61, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0110.826] SetErrorMode (uMode=0x0) returned 0x1 [0110.826] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\IEDownloadHistory\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\iedownloadhistory\\container.dat.partially.cryptonar")) returned 1 [0110.827] SetErrorMode (uMode=0x1) returned 0x0 [0110.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0110.828] SetErrorMode (uMode=0x0) returned 0x1 [0110.828] SetErrorMode (uMode=0x1) returned 0x0 [0110.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.829] SetErrorMode (uMode=0x0) returned 0x1 [0110.829] GetFileType (hFile=0x230) returned 0x1 [0110.829] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.830] SetErrorMode (uMode=0x1) returned 0x0 [0110.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xadcf0534, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadcf0534, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xadcf0534, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0110.830] SetErrorMode (uMode=0x0) returned 0x1 [0110.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\ie\\container.dat.partially.cryptonar")) returned 1 [0110.832] SetErrorMode (uMode=0x1) returned 0x0 [0110.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.835] SetErrorMode (uMode=0x0) returned 0x1 [0110.835] GetFileType (hFile=0x230) returned 0x1 [0110.835] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.837] SetErrorMode (uMode=0x1) returned 0x0 [0110.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x91af4f68, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x91af4f68, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4483d598, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0110.837] SetErrorMode (uMode=0x0) returned 0x1 [0110.837] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\msimgsiz.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\MSIMGSIZ.DAT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\msimgsiz.dat.partially.cryptonar")) returned 1 [0110.838] SetErrorMode (uMode=0x1) returned 0x0 [0110.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.839] SetErrorMode (uMode=0x0) returned 0x1 [0110.839] GetFileType (hFile=0x230) returned 0x1 [0110.839] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.881] SetErrorMode (uMode=0x1) returned 0x0 [0110.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x919c3c5e, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x919c3c5e, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x448b11eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e088)) returned 1 [0110.882] SetErrorMode (uMode=0x0) returned 0x1 [0110.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SmartScreenCache.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\smartscreencache.dat.partially.cryptonar")) returned 1 [0110.883] SetErrorMode (uMode=0x1) returned 0x0 [0110.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.884] SetErrorMode (uMode=0x0) returned 0x1 [0110.884] GetFileType (hFile=0x230) returned 0x1 [0110.884] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.953] SetErrorMode (uMode=0x1) returned 0x0 [0110.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc26ac0, ftCreationTime.dwHighDateTime=0x1d39f0e, ftLastAccessTime.dwLowDateTime=0xdc26ac0, ftLastAccessTime.dwHighDateTime=0x1d39f0e, ftLastWriteTime.dwLowDateTime=0x4495ad91, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x500084)) returned 1 [0110.953] SetErrorMode (uMode=0x0) returned 0x1 [0110.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\SuggestedSites.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\suggestedsites.dat.partially.cryptonar")) returned 1 [0110.955] SetErrorMode (uMode=0x1) returned 0x0 [0110.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.956] SetErrorMode (uMode=0x0) returned 0x1 [0110.956] GetFileType (hFile=0x230) returned 0x1 [0110.956] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.956] SetErrorMode (uMode=0x1) returned 0x0 [0110.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90f7ba13, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90f7ba13, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90f7ba13, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0110.956] SetErrorMode (uMode=0x0) returned 0x1 [0110.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\IE\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcache\\low\\ie\\container.dat.partially.cryptonar")) returned 1 [0110.957] SetErrorMode (uMode=0x1) returned 0x0 [0110.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.969] SetErrorMode (uMode=0x0) returned 0x1 [0110.969] GetFileType (hFile=0x230) returned 0x1 [0110.969] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xca [0110.971] SetErrorMode (uMode=0x1) returned 0x0 [0110.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x53fe710e, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x53fe710e, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x4498d9ed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xca)) returned 1 [0110.971] SetErrorMode (uMode=0x0) returned 0x1 [0110.971] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\2XBM2EDN.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\2xbm2edn.txt.fully.cryptonar")) returned 1 [0110.973] SetErrorMode (uMode=0x1) returned 0x0 [0110.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.973] SetErrorMode (uMode=0x0) returned 0x1 [0110.973] GetFileType (hFile=0x230) returned 0x1 [0110.973] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x69 [0110.975] SetErrorMode (uMode=0x1) returned 0x0 [0110.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9540a754, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x9540a754, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x4498d9ed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x69)) returned 1 [0110.975] SetErrorMode (uMode=0x0) returned 0x1 [0110.975] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\8489XH4E.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\8489xh4e.txt.fully.cryptonar")) returned 1 [0110.977] SetErrorMode (uMode=0x1) returned 0x0 [0110.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.978] SetErrorMode (uMode=0x0) returned 0x1 [0110.978] GetFileType (hFile=0x230) returned 0x1 [0110.978] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x169 [0110.979] SetErrorMode (uMode=0x1) returned 0x0 [0110.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52bca84a, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x52bca84a, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x449a729d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x169)) returned 1 [0110.980] SetErrorMode (uMode=0x0) returned 0x1 [0110.980] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B4K109K7.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b4k109k7.txt.fully.cryptonar")) returned 1 [0110.981] SetErrorMode (uMode=0x1) returned 0x0 [0110.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.982] SetErrorMode (uMode=0x0) returned 0x1 [0110.982] GetFileType (hFile=0x230) returned 0x1 [0110.982] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x65 [0110.983] SetErrorMode (uMode=0x1) returned 0x0 [0110.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5397a907, ftCreationTime.dwHighDateTime=0x1d35db9, ftLastAccessTime.dwLowDateTime=0x5397a907, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x449a729d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x65)) returned 1 [0110.983] SetErrorMode (uMode=0x0) returned 0x1 [0110.984] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\B67M68H4.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\b67m68h4.txt.fully.cryptonar")) returned 1 [0110.985] SetErrorMode (uMode=0x1) returned 0x0 [0110.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.986] SetErrorMode (uMode=0x0) returned 0x1 [0110.986] GetFileType (hFile=0x230) returned 0x1 [0110.986] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0110.986] SetErrorMode (uMode=0x1) returned 0x0 [0110.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x3e6d7cfc, ftCreationTime.dwHighDateTime=0x1d2d02b, ftLastAccessTime.dwLowDateTime=0x3e6d7cfc, ftLastAccessTime.dwHighDateTime=0x1d2d02b, ftLastWriteTime.dwLowDateTime=0x3e6d7cfc, ftLastWriteTime.dwHighDateTime=0x1d2d02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0110.986] SetErrorMode (uMode=0x0) returned 0x1 [0110.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\container.dat.partially.cryptonar")) returned 1 [0110.988] SetErrorMode (uMode=0x1) returned 0x0 [0110.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.989] SetErrorMode (uMode=0x0) returned 0x1 [0110.989] GetFileType (hFile=0x230) returned 0x1 [0110.989] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xa1 [0110.992] SetErrorMode (uMode=0x1) returned 0x0 [0110.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb744c667, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb744c667, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x449a729d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa1)) returned 1 [0110.992] SetErrorMode (uMode=0x0) returned 0x1 [0110.992] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\OOUVZSZN.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\oouvzszn.txt.fully.cryptonar")) returned 1 [0110.994] SetErrorMode (uMode=0x1) returned 0x0 [0110.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0110.996] SetErrorMode (uMode=0x0) returned 0x1 [0110.996] GetFileType (hFile=0x230) returned 0x1 [0110.996] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x7a [0111.000] SetErrorMode (uMode=0x1) returned 0x0 [0111.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb744c667, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb744c667, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x449cd678, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7a)) returned 1 [0111.000] SetErrorMode (uMode=0x0) returned 0x1 [0111.000] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\TIGZFGLM.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\tigzfglm.txt.fully.cryptonar")) returned 1 [0111.002] SetErrorMode (uMode=0x1) returned 0x0 [0111.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.003] SetErrorMode (uMode=0x0) returned 0x1 [0111.003] GetFileType (hFile=0x230) returned 0x1 [0111.003] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x75 [0111.004] SetErrorMode (uMode=0x1) returned 0x0 [0111.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x958f53b4, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x958f53b4, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x449cd678, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x75)) returned 1 [0111.004] SetErrorMode (uMode=0x0) returned 0x1 [0111.004] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\XNW1G0SM.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\xnw1g0sm.txt.fully.cryptonar")) returned 1 [0111.006] SetErrorMode (uMode=0x1) returned 0x0 [0111.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.007] SetErrorMode (uMode=0x0) returned 0x1 [0111.007] GetFileType (hFile=0x230) returned 0x1 [0111.007] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0111.008] SetErrorMode (uMode=0x1) returned 0x0 [0111.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x902f757d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x902f757d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x902f757d, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0111.008] SetErrorMode (uMode=0x0) returned 0x1 [0111.008] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\dntexception\\container.dat.partially.cryptonar")) returned 1 [0111.010] SetErrorMode (uMode=0x1) returned 0x0 [0111.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.014] SetErrorMode (uMode=0x0) returned 0x1 [0111.014] GetFileType (hFile=0x230) returned 0x1 [0111.014] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6b [0111.016] SetErrorMode (uMode=0x1) returned 0x0 [0111.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f326f8c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9f326f8c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x449f47d4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6b)) returned 1 [0111.016] SetErrorMode (uMode=0x0) returned 0x1 [0111.016] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0GHTMU6X.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0ghtmu6x.txt.fully.cryptonar")) returned 1 [0111.017] SetErrorMode (uMode=0x1) returned 0x0 [0111.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.018] SetErrorMode (uMode=0x0) returned 0x1 [0111.018] GetFileType (hFile=0x230) returned 0x1 [0111.018] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xa1 [0111.020] SetErrorMode (uMode=0x1) returned 0x0 [0111.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94bfa84a, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94bfa84a, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x449f47d4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa1)) returned 1 [0111.020] SetErrorMode (uMode=0x0) returned 0x1 [0111.020] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0MDKR34W.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0mdkr34w.txt.fully.cryptonar")) returned 1 [0111.022] SetErrorMode (uMode=0x1) returned 0x0 [0111.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.023] SetErrorMode (uMode=0x0) returned 0x1 [0111.023] GetFileType (hFile=0x230) returned 0x1 [0111.023] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xdf [0111.024] SetErrorMode (uMode=0x1) returned 0x0 [0111.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98e9f65e, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98e9f65e, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x449f47d4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0111.024] SetErrorMode (uMode=0x0) returned 0x1 [0111.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\0Z1JIEVI.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\0z1jievi.txt.fully.cryptonar")) returned 1 [0111.026] SetErrorMode (uMode=0x1) returned 0x0 [0111.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.027] SetErrorMode (uMode=0x0) returned 0x1 [0111.027] GetFileType (hFile=0x230) returned 0x1 [0111.027] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5d [0111.029] SetErrorMode (uMode=0x1) returned 0x0 [0111.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d49dc5f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d49dc5f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44a19902, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d)) returned 1 [0111.029] SetErrorMode (uMode=0x0) returned 0x1 [0111.029] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16DOE15M.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16doe15m.txt.fully.cryptonar")) returned 1 [0111.030] SetErrorMode (uMode=0x1) returned 0x0 [0111.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.032] SetErrorMode (uMode=0x0) returned 0x1 [0111.032] GetFileType (hFile=0x230) returned 0x1 [0111.032] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x19e [0111.034] SetErrorMode (uMode=0x1) returned 0x0 [0111.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94829f30, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94829f30, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44a19902, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19e)) returned 1 [0111.034] SetErrorMode (uMode=0x0) returned 0x1 [0111.034] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\16Y0X4V7.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\16y0x4v7.txt.fully.cryptonar")) returned 1 [0111.035] SetErrorMode (uMode=0x1) returned 0x0 [0111.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.036] SetErrorMode (uMode=0x0) returned 0x1 [0111.037] GetFileType (hFile=0x230) returned 0x1 [0111.037] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6f [0111.038] SetErrorMode (uMode=0x1) returned 0x0 [0111.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x965eb761, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x965eb761, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44a19902, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0111.038] SetErrorMode (uMode=0x0) returned 0x1 [0111.038] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1L3KU69N.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1l3ku69n.txt.fully.cryptonar")) returned 1 [0111.040] SetErrorMode (uMode=0x1) returned 0x0 [0111.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.042] SetErrorMode (uMode=0x0) returned 0x1 [0111.042] GetFileType (hFile=0x230) returned 0x1 [0111.042] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6f [0111.043] SetErrorMode (uMode=0x1) returned 0x0 [0111.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94962734, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94962734, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44a4256e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0111.043] SetErrorMode (uMode=0x0) returned 0x1 [0111.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LFQZEOH.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lfqzeoh.txt.fully.cryptonar")) returned 1 [0111.045] SetErrorMode (uMode=0x1) returned 0x0 [0111.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.046] SetErrorMode (uMode=0x0) returned 0x1 [0111.046] GetFileType (hFile=0x230) returned 0x1 [0111.046] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x77 [0111.047] SetErrorMode (uMode=0x1) returned 0x0 [0111.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96bc19b1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96bc19b1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44a4256e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x77)) returned 1 [0111.047] SetErrorMode (uMode=0x0) returned 0x1 [0111.047] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1LLUY7B7.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1lluy7b7.txt.fully.cryptonar")) returned 1 [0111.049] SetErrorMode (uMode=0x1) returned 0x0 [0111.049] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.050] SetErrorMode (uMode=0x0) returned 0x1 [0111.050] GetFileType (hFile=0x230) returned 0x1 [0111.050] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x112 [0111.051] SetErrorMode (uMode=0x1) returned 0x0 [0111.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9454aa47, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9454aa47, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44a4256e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1 [0111.051] SetErrorMode (uMode=0x0) returned 0x1 [0111.051] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\1UYN2RFY.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\1uyn2rfy.txt.fully.cryptonar")) returned 1 [0111.052] SetErrorMode (uMode=0x1) returned 0x0 [0111.053] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.053] SetErrorMode (uMode=0x0) returned 0x1 [0111.053] GetFileType (hFile=0x230) returned 0x1 [0111.054] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5c [0111.055] SetErrorMode (uMode=0x1) returned 0x0 [0111.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0db155a, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa0db155a, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44a4256e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0111.055] SetErrorMode (uMode=0x0) returned 0x1 [0111.055] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\23JC2UTD.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\23jc2utd.txt.fully.cryptonar")) returned 1 [0111.057] SetErrorMode (uMode=0x1) returned 0x0 [0111.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.059] SetErrorMode (uMode=0x0) returned 0x1 [0111.059] GetFileType (hFile=0x230) returned 0x1 [0111.059] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xa9 [0111.060] SetErrorMode (uMode=0x1) returned 0x0 [0111.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x989e475c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x989e475c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44a691c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa9)) returned 1 [0111.060] SetErrorMode (uMode=0x0) returned 0x1 [0111.060] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2EQ4E2OJ.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2eq4e2oj.txt.fully.cryptonar")) returned 1 [0111.065] SetErrorMode (uMode=0x1) returned 0x0 [0111.065] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.066] SetErrorMode (uMode=0x0) returned 0x1 [0111.066] GetFileType (hFile=0x230) returned 0x1 [0111.066] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x2f9 [0111.093] SetErrorMode (uMode=0x1) returned 0x0 [0111.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0423beb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa0423beb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44ab23d7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2f9)) returned 1 [0111.093] SetErrorMode (uMode=0x0) returned 0x1 [0111.093] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\2HYILE1O.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\2hyile1o.txt.fully.cryptonar")) returned 1 [0111.095] SetErrorMode (uMode=0x1) returned 0x0 [0111.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.096] SetErrorMode (uMode=0x0) returned 0x1 [0111.096] GetFileType (hFile=0x230) returned 0x1 [0111.096] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x51 [0111.098] SetErrorMode (uMode=0x1) returned 0x0 [0111.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c83f8fa, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9c83f8fa, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44ab23d7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51)) returned 1 [0111.098] SetErrorMode (uMode=0x0) returned 0x1 [0111.098] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3RW4K76X.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3rw4k76x.txt.fully.cryptonar")) returned 1 [0111.099] SetErrorMode (uMode=0x1) returned 0x0 [0111.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.100] SetErrorMode (uMode=0x0) returned 0x1 [0111.101] GetFileType (hFile=0x230) returned 0x1 [0111.101] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x81 [0111.102] SetErrorMode (uMode=0x1) returned 0x0 [0111.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaccb7677, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xaccb7677, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44ab23d7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x81)) returned 1 [0111.102] SetErrorMode (uMode=0x0) returned 0x1 [0111.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\3VVSZ2CO.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\3vvsz2co.txt.fully.cryptonar")) returned 1 [0111.105] SetErrorMode (uMode=0x1) returned 0x0 [0111.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.106] SetErrorMode (uMode=0x0) returned 0x1 [0111.106] GetFileType (hFile=0x230) returned 0x1 [0111.106] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xa2 [0111.107] SetErrorMode (uMode=0x1) returned 0x0 [0111.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xade26a3d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xade26a3d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44ad850d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa2)) returned 1 [0111.108] SetErrorMode (uMode=0x0) returned 0x1 [0111.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4MN240WN.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4mn240wn.txt.fully.cryptonar")) returned 1 [0111.109] SetErrorMode (uMode=0x1) returned 0x0 [0111.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.110] SetErrorMode (uMode=0x0) returned 0x1 [0111.110] GetFileType (hFile=0x230) returned 0x1 [0111.110] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x236 [0111.112] SetErrorMode (uMode=0x1) returned 0x0 [0111.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa52d2fc0, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa52d2fc0, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44ad850d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x236)) returned 1 [0111.112] SetErrorMode (uMode=0x0) returned 0x1 [0111.112] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4O6583I0.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4o6583i0.txt.fully.cryptonar")) returned 1 [0111.114] SetErrorMode (uMode=0x1) returned 0x0 [0111.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0111.116] SetErrorMode (uMode=0x0) returned 0x1 [0111.116] GetFileType (hFile=0x230) returned 0x1 [0111.116] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x1f3 [0112.363] SetErrorMode (uMode=0x1) returned 0x0 [0112.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa143fd06, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa143fd06, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x44ad850d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f3)) returned 1 [0112.364] SetErrorMode (uMode=0x0) returned 0x1 [0112.364] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4YWCPPXN.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4ywcppxn.txt.fully.cryptonar")) returned 1 [0112.366] SetErrorMode (uMode=0x1) returned 0x0 [0112.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.367] GetFileType (hFile=0x230) returned 0x1 [0112.367] SetErrorMode (uMode=0x0) returned 0x1 [0112.367] GetFileType (hFile=0x230) returned 0x1 [0112.367] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5a [0112.367] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.367] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5a [0112.367] ReadFile (in: hFile=0x230, lpBuffer=0x26c7c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26c7c98*, lpNumberOfBytesRead=0x5ae898*=0x5a, lpOverlapped=0x0) returned 1 [0112.369] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.369] WriteFile (in: hFile=0x230, lpBuffer=0x26c7c98*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26c7c98*, lpNumberOfBytesWritten=0x5ae888*=0x5a, lpOverlapped=0x0) returned 1 [0112.371] SetErrorMode (uMode=0x1) returned 0x0 [0112.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4e80b84, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4e80b84, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x456ea42a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1 [0112.371] SetErrorMode (uMode=0x0) returned 0x1 [0112.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\4Z6UDYLY.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\4z6udyly.txt.fully.cryptonar")) returned 1 [0112.374] SetErrorMode (uMode=0x1) returned 0x0 [0112.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.375] GetFileType (hFile=0x230) returned 0x1 [0112.375] SetErrorMode (uMode=0x0) returned 0x1 [0112.375] GetFileType (hFile=0x230) returned 0x1 [0112.375] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xc8 [0112.375] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.376] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xc8 [0112.376] ReadFile (in: hFile=0x230, lpBuffer=0x26ca908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26ca908*, lpNumberOfBytesRead=0x5ae898*=0xc8, lpOverlapped=0x0) returned 1 [0112.377] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.377] WriteFile (in: hFile=0x230, lpBuffer=0x26ca908*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26ca908*, lpNumberOfBytesWritten=0x5ae888*=0xc8, lpOverlapped=0x0) returned 1 [0112.377] SetErrorMode (uMode=0x1) returned 0x0 [0112.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa6906ebd, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa6906ebd, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x456ea42a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc8)) returned 1 [0112.378] SetErrorMode (uMode=0x0) returned 0x1 [0112.378] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AFMRGRY.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5afmrgry.txt.fully.cryptonar")) returned 1 [0112.379] SetErrorMode (uMode=0x1) returned 0x0 [0112.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.380] GetFileType (hFile=0x230) returned 0x1 [0112.380] SetErrorMode (uMode=0x0) returned 0x1 [0112.380] GetFileType (hFile=0x230) returned 0x1 [0112.380] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x329 [0112.381] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.381] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x329 [0112.381] ReadFile (in: hFile=0x230, lpBuffer=0x26cdab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26cdab0*, lpNumberOfBytesRead=0x5ae898*=0x329, lpOverlapped=0x0) returned 1 [0112.410] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.410] WriteFile (in: hFile=0x230, lpBuffer=0x26cdab0*, nNumberOfBytesToWrite=0x329, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26cdab0*, lpNumberOfBytesWritten=0x5ae888*=0x329, lpOverlapped=0x0) returned 1 [0112.411] SetErrorMode (uMode=0x1) returned 0x0 [0112.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a2d243d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a2d243d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x457372ed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x329)) returned 1 [0112.411] SetErrorMode (uMode=0x0) returned 0x1 [0112.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5ARQYMIV.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5arqymiv.txt.fully.cryptonar")) returned 1 [0112.413] SetErrorMode (uMode=0x1) returned 0x0 [0112.413] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.414] GetFileType (hFile=0x230) returned 0x1 [0112.414] SetErrorMode (uMode=0x0) returned 0x1 [0112.414] GetFileType (hFile=0x230) returned 0x1 [0112.414] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x154 [0112.414] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.414] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x154 [0112.414] ReadFile (in: hFile=0x230, lpBuffer=0x26d0b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26d0b10*, lpNumberOfBytesRead=0x5ae898*=0x154, lpOverlapped=0x0) returned 1 [0112.416] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.416] WriteFile (in: hFile=0x230, lpBuffer=0x26d0b10*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26d0b10*, lpNumberOfBytesWritten=0x5ae888*=0x154, lpOverlapped=0x0) returned 1 [0112.416] SetErrorMode (uMode=0x1) returned 0x0 [0112.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x991ff9f3, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x991ff9f3, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4575cc13, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0112.417] SetErrorMode (uMode=0x0) returned 0x1 [0112.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5AV8L20N.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5av8l20n.txt.fully.cryptonar")) returned 1 [0112.418] SetErrorMode (uMode=0x1) returned 0x0 [0112.418] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.419] GetFileType (hFile=0x230) returned 0x1 [0112.419] SetErrorMode (uMode=0x0) returned 0x1 [0112.419] GetFileType (hFile=0x230) returned 0x1 [0112.419] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x67 [0112.419] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.419] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x67 [0112.419] ReadFile (in: hFile=0x230, lpBuffer=0x26d37b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26d37b8*, lpNumberOfBytesRead=0x5ae898*=0x67, lpOverlapped=0x0) returned 1 [0112.420] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.420] WriteFile (in: hFile=0x230, lpBuffer=0x26d37b8*, nNumberOfBytesToWrite=0x67, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26d37b8*, lpNumberOfBytesWritten=0x5ae888*=0x67, lpOverlapped=0x0) returned 1 [0112.420] SetErrorMode (uMode=0x1) returned 0x0 [0112.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad450ebb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xad450ebb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4575cc13, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x67)) returned 1 [0112.420] SetErrorMode (uMode=0x0) returned 0x1 [0112.420] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5NWXN3UI.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5nwxn3ui.txt.fully.cryptonar")) returned 1 [0112.422] SetErrorMode (uMode=0x1) returned 0x0 [0112.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.422] GetFileType (hFile=0x230) returned 0x1 [0112.422] SetErrorMode (uMode=0x0) returned 0x1 [0112.423] GetFileType (hFile=0x230) returned 0x1 [0112.423] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x2dc [0112.423] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.423] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x2dc [0112.423] ReadFile (in: hFile=0x230, lpBuffer=0x26d6860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26d6860*, lpNumberOfBytesRead=0x5ae898*=0x2dc, lpOverlapped=0x0) returned 1 [0112.464] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.464] WriteFile (in: hFile=0x230, lpBuffer=0x26d6860*, nNumberOfBytesToWrite=0x2dc, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26d6860*, lpNumberOfBytesWritten=0x5ae888*=0x2dc, lpOverlapped=0x0) returned 1 [0112.465] SetErrorMode (uMode=0x1) returned 0x0 [0112.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x260af8c1, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x260af8c1, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x457cf2b5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2dc)) returned 1 [0112.466] SetErrorMode (uMode=0x0) returned 0x1 [0112.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5STJ6NZL.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5stj6nzl.txt.fully.cryptonar")) returned 1 [0112.468] SetErrorMode (uMode=0x1) returned 0x0 [0112.468] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.471] GetFileType (hFile=0x230) returned 0x1 [0112.471] SetErrorMode (uMode=0x0) returned 0x1 [0112.471] GetFileType (hFile=0x230) returned 0x1 [0112.471] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xaa [0112.471] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.471] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xaa [0112.471] ReadFile (in: hFile=0x230, lpBuffer=0x26d9720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26d9720*, lpNumberOfBytesRead=0x5ae898*=0xaa, lpOverlapped=0x0) returned 1 [0112.473] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.473] WriteFile (in: hFile=0x230, lpBuffer=0x26d9720*, nNumberOfBytesToWrite=0xaa, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26d9720*, lpNumberOfBytesWritten=0x5ae888*=0xaa, lpOverlapped=0x0) returned 1 [0112.474] SetErrorMode (uMode=0x1) returned 0x0 [0112.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9466f9c1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9466f9c1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x457cf2b5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaa)) returned 1 [0112.474] SetErrorMode (uMode=0x0) returned 0x1 [0112.474] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5TAY54V0.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5tay54v0.txt.fully.cryptonar")) returned 1 [0112.476] SetErrorMode (uMode=0x1) returned 0x0 [0112.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.477] GetFileType (hFile=0x230) returned 0x1 [0112.477] SetErrorMode (uMode=0x0) returned 0x1 [0112.477] GetFileType (hFile=0x230) returned 0x1 [0112.477] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xbf [0112.477] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.477] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xbf [0112.477] ReadFile (in: hFile=0x230, lpBuffer=0x26dc3d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26dc3d0*, lpNumberOfBytesRead=0x5ae898*=0xbf, lpOverlapped=0x0) returned 1 [0112.479] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.479] WriteFile (in: hFile=0x230, lpBuffer=0x26dc3d0*, nNumberOfBytesToWrite=0xbf, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26dc3d0*, lpNumberOfBytesWritten=0x5ae888*=0xbf, lpOverlapped=0x0) returned 1 [0112.480] SetErrorMode (uMode=0x1) returned 0x0 [0112.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94dd9075, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94dd9075, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x457f53c4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbf)) returned 1 [0112.480] SetErrorMode (uMode=0x0) returned 0x1 [0112.480] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\5WQEGNKI.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\5wqegnki.txt.fully.cryptonar")) returned 1 [0112.484] SetErrorMode (uMode=0x1) returned 0x0 [0112.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.485] GetFileType (hFile=0x230) returned 0x1 [0112.485] SetErrorMode (uMode=0x0) returned 0x1 [0112.485] GetFileType (hFile=0x230) returned 0x1 [0112.485] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x61 [0112.485] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.485] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x61 [0112.485] ReadFile (in: hFile=0x230, lpBuffer=0x26defe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26defe0*, lpNumberOfBytesRead=0x5ae898*=0x61, lpOverlapped=0x0) returned 1 [0112.486] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.486] WriteFile (in: hFile=0x230, lpBuffer=0x26defe0*, nNumberOfBytesToWrite=0x61, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26defe0*, lpNumberOfBytesWritten=0x5ae888*=0x61, lpOverlapped=0x0) returned 1 [0112.486] SetErrorMode (uMode=0x1) returned 0x0 [0112.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9eda386f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9eda386f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x457f53c4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x61)) returned 1 [0112.487] SetErrorMode (uMode=0x0) returned 0x1 [0112.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\66I0OJL8.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\66i0ojl8.txt.fully.cryptonar")) returned 1 [0112.488] SetErrorMode (uMode=0x1) returned 0x0 [0112.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.488] GetFileType (hFile=0x230) returned 0x1 [0112.488] SetErrorMode (uMode=0x0) returned 0x1 [0112.488] GetFileType (hFile=0x230) returned 0x1 [0112.488] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5c [0112.488] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.488] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5c [0112.488] ReadFile (in: hFile=0x230, lpBuffer=0x26e1b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26e1b88*, lpNumberOfBytesRead=0x5ae898*=0x5c, lpOverlapped=0x0) returned 1 [0112.489] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.489] WriteFile (in: hFile=0x230, lpBuffer=0x26e1b88*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26e1b88*, lpNumberOfBytesWritten=0x5ae888*=0x5c, lpOverlapped=0x0) returned 1 [0112.490] SetErrorMode (uMode=0x1) returned 0x0 [0112.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9df0c1eb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9df0c1eb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x457f53c4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0112.490] SetErrorMode (uMode=0x0) returned 0x1 [0112.490] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\80J4IH0Y.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\80j4ih0y.txt.fully.cryptonar")) returned 1 [0112.491] SetErrorMode (uMode=0x1) returned 0x0 [0112.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.491] GetFileType (hFile=0x230) returned 0x1 [0112.492] SetErrorMode (uMode=0x0) returned 0x1 [0112.492] GetFileType (hFile=0x230) returned 0x1 [0112.492] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x341 [0112.492] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.492] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x341 [0112.492] ReadFile (in: hFile=0x230, lpBuffer=0x26e4cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26e4cf8*, lpNumberOfBytesRead=0x5ae898*=0x341, lpOverlapped=0x0) returned 1 [0112.522] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.522] WriteFile (in: hFile=0x230, lpBuffer=0x26e4cf8*, nNumberOfBytesToWrite=0x341, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26e4cf8*, lpNumberOfBytesWritten=0x5ae888*=0x341, lpOverlapped=0x0) returned 1 [0112.523] SetErrorMode (uMode=0x1) returned 0x0 [0112.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9b926a54, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9b926a54, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45841b4c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x341)) returned 1 [0112.523] SetErrorMode (uMode=0x0) returned 0x1 [0112.523] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\8FFCGS26.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\8ffcgs26.txt.fully.cryptonar")) returned 1 [0112.528] SetErrorMode (uMode=0x1) returned 0x0 [0112.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.529] GetFileType (hFile=0x230) returned 0x1 [0112.529] SetErrorMode (uMode=0x0) returned 0x1 [0112.530] GetFileType (hFile=0x230) returned 0x1 [0112.530] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xea [0112.530] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.530] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xea [0112.530] ReadFile (in: hFile=0x230, lpBuffer=0x26e7ca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26e7ca0*, lpNumberOfBytesRead=0x5ae898*=0xea, lpOverlapped=0x0) returned 1 [0112.531] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.531] WriteFile (in: hFile=0x230, lpBuffer=0x26e7ca0*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26e7ca0*, lpNumberOfBytesWritten=0x5ae888*=0xea, lpOverlapped=0x0) returned 1 [0112.531] SetErrorMode (uMode=0x1) returned 0x0 [0112.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d6d9fc2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d6d9fc2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45867d49, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0112.532] SetErrorMode (uMode=0x0) returned 0x1 [0112.532] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9ABR37NL.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9abr37nl.txt.fully.cryptonar")) returned 1 [0112.533] SetErrorMode (uMode=0x1) returned 0x0 [0112.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.535] GetFileType (hFile=0x230) returned 0x1 [0112.535] SetErrorMode (uMode=0x0) returned 0x1 [0112.535] GetFileType (hFile=0x230) returned 0x1 [0112.535] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x16b [0112.535] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.535] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x16b [0112.536] ReadFile (in: hFile=0x230, lpBuffer=0x26eaaf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26eaaf0*, lpNumberOfBytesRead=0x5ae898*=0x16b, lpOverlapped=0x0) returned 1 [0112.551] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.551] WriteFile (in: hFile=0x230, lpBuffer=0x26eaaf0*, nNumberOfBytesToWrite=0x16b, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26eaaf0*, lpNumberOfBytesWritten=0x5ae888*=0x16b, lpOverlapped=0x0) returned 1 [0112.552] SetErrorMode (uMode=0x1) returned 0x0 [0112.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a8284c8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a8284c8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x4588ecb9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16b)) returned 1 [0112.552] SetErrorMode (uMode=0x0) returned 0x1 [0112.553] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9IJPMFHZ.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9ijpmfhz.txt.fully.cryptonar")) returned 1 [0112.554] SetErrorMode (uMode=0x1) returned 0x0 [0112.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.555] GetFileType (hFile=0x230) returned 0x1 [0112.556] SetErrorMode (uMode=0x0) returned 0x1 [0112.556] GetFileType (hFile=0x230) returned 0x1 [0112.556] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x1f7 [0112.556] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.556] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x1f7 [0112.556] ReadFile (in: hFile=0x230, lpBuffer=0x26edad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26edad0*, lpNumberOfBytesRead=0x5ae898*=0x1f7, lpOverlapped=0x0) returned 1 [0112.557] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.557] WriteFile (in: hFile=0x230, lpBuffer=0x26edad0*, nNumberOfBytesToWrite=0x1f7, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26edad0*, lpNumberOfBytesWritten=0x5ae888*=0x1f7, lpOverlapped=0x0) returned 1 [0112.558] SetErrorMode (uMode=0x1) returned 0x0 [0112.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4ef327e, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4ef327e, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x458b4304, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f7)) returned 1 [0112.558] SetErrorMode (uMode=0x0) returned 0x1 [0112.558] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9M7ZHW1Q.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9m7zhw1q.txt.fully.cryptonar")) returned 1 [0112.559] SetErrorMode (uMode=0x1) returned 0x0 [0112.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.560] GetFileType (hFile=0x230) returned 0x1 [0112.560] SetErrorMode (uMode=0x0) returned 0x1 [0112.560] GetFileType (hFile=0x230) returned 0x1 [0112.560] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x29a [0112.560] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.560] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x29a [0112.560] ReadFile (in: hFile=0x230, lpBuffer=0x26f0c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26f0c88*, lpNumberOfBytesRead=0x5ae898*=0x29a, lpOverlapped=0x0) returned 1 [0112.561] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.561] WriteFile (in: hFile=0x230, lpBuffer=0x26f0c88*, nNumberOfBytesToWrite=0x29a, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26f0c88*, lpNumberOfBytesWritten=0x5ae888*=0x29a, lpOverlapped=0x0) returned 1 [0112.562] SetErrorMode (uMode=0x1) returned 0x0 [0112.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ca2f7b2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ca2f7b2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x458b4304, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1 [0112.562] SetErrorMode (uMode=0x0) returned 0x1 [0112.562] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9XACNSYG.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9xacnsyg.txt.fully.cryptonar")) returned 1 [0112.727] SetErrorMode (uMode=0x1) returned 0x0 [0112.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.728] GetFileType (hFile=0x230) returned 0x1 [0112.728] SetErrorMode (uMode=0x0) returned 0x1 [0112.728] GetFileType (hFile=0x230) returned 0x1 [0112.729] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x72 [0112.729] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.729] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x72 [0112.729] ReadFile (in: hFile=0x230, lpBuffer=0x26f3a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x26f3a98*, lpNumberOfBytesRead=0x5ae898*=0x72, lpOverlapped=0x0) returned 1 [0112.730] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0112.730] WriteFile (in: hFile=0x230, lpBuffer=0x26f3a98*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x26f3a98*, lpNumberOfBytesWritten=0x5ae888*=0x72, lpOverlapped=0x0) returned 1 [0112.730] SetErrorMode (uMode=0x1) returned 0x0 [0112.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f7c5870, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9f7c5870, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45a586ac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x72)) returned 1 [0112.731] SetErrorMode (uMode=0x0) returned 0x1 [0112.731] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\9Z1Y5ICI.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\9z1y5ici.txt.fully.cryptonar")) returned 1 [0112.732] SetErrorMode (uMode=0x1) returned 0x0 [0112.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.733] SetErrorMode (uMode=0x0) returned 0x1 [0112.733] GetFileType (hFile=0x230) returned 0x1 [0112.733] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x80 [0112.735] SetErrorMode (uMode=0x1) returned 0x0 [0112.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x966f322d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x966f322d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45a586ac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1 [0112.736] SetErrorMode (uMode=0x0) returned 0x1 [0112.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\A0RK8A2H.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\a0rk8a2h.txt.fully.cryptonar")) returned 1 [0112.737] SetErrorMode (uMode=0x1) returned 0x0 [0112.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.738] SetErrorMode (uMode=0x0) returned 0x1 [0112.738] GetFileType (hFile=0x230) returned 0x1 [0112.738] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x121 [0112.739] SetErrorMode (uMode=0x1) returned 0x0 [0112.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94409da1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94409da1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45a586ac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x121)) returned 1 [0112.739] SetErrorMode (uMode=0x0) returned 0x1 [0112.739] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\AA2IJ7JU.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\aa2ij7ju.txt.fully.cryptonar")) returned 1 [0112.740] SetErrorMode (uMode=0x1) returned 0x0 [0112.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.741] SetErrorMode (uMode=0x0) returned 0x1 [0112.741] GetFileType (hFile=0x230) returned 0x1 [0112.741] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x200 [0112.742] SetErrorMode (uMode=0x1) returned 0x0 [0112.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a04dbb3, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a04dbb3, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45a586ac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0112.742] SetErrorMode (uMode=0x0) returned 0x1 [0112.742] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\B427TFXJ.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\b427tfxj.txt.fully.cryptonar")) returned 1 [0112.744] SetErrorMode (uMode=0x1) returned 0x0 [0112.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.745] SetErrorMode (uMode=0x0) returned 0x1 [0112.745] GetFileType (hFile=0x230) returned 0x1 [0112.745] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xce [0112.746] SetErrorMode (uMode=0x1) returned 0x0 [0112.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x920eada2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x920eada2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45a7dc75, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0112.746] SetErrorMode (uMode=0x0) returned 0x1 [0112.746] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\BK4HNAZ1.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\bk4hnaz1.txt.fully.cryptonar")) returned 1 [0112.747] SetErrorMode (uMode=0x1) returned 0x0 [0112.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.749] SetErrorMode (uMode=0x0) returned 0x1 [0112.749] GetFileType (hFile=0x230) returned 0x1 [0112.749] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x4f [0112.750] SetErrorMode (uMode=0x1) returned 0x0 [0112.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaddda57f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xaddda57f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45a7dc75, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f)) returned 1 [0112.750] SetErrorMode (uMode=0x0) returned 0x1 [0112.750] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CC7DS78R.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cc7ds78r.txt.fully.cryptonar")) returned 1 [0112.751] SetErrorMode (uMode=0x1) returned 0x0 [0112.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.752] SetErrorMode (uMode=0x0) returned 0x1 [0112.752] GetFileType (hFile=0x230) returned 0x1 [0112.752] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x8c [0112.753] SetErrorMode (uMode=0x1) returned 0x0 [0112.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x948473f5, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x948473f5, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45a7dc75, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8c)) returned 1 [0112.753] SetErrorMode (uMode=0x0) returned 0x1 [0112.753] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CDGOWO27.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cdgowo27.txt.fully.cryptonar")) returned 1 [0112.754] SetErrorMode (uMode=0x1) returned 0x0 [0112.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.755] SetErrorMode (uMode=0x0) returned 0x1 [0112.755] GetFileType (hFile=0x230) returned 0x1 [0112.755] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0112.756] SetErrorMode (uMode=0x1) returned 0x0 [0112.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90d3f717, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90d3f717, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90d3f717, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0112.756] SetErrorMode (uMode=0x0) returned 0x1 [0112.756] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\container.dat.partially.cryptonar")) returned 1 [0112.757] SetErrorMode (uMode=0x1) returned 0x0 [0112.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.758] SetErrorMode (uMode=0x0) returned 0x1 [0112.758] GetFileType (hFile=0x230) returned 0x1 [0112.758] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6e [0112.760] SetErrorMode (uMode=0x1) returned 0x0 [0112.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x969027be, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x969027be, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45aa3ee3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6e)) returned 1 [0112.760] SetErrorMode (uMode=0x0) returned 0x1 [0112.760] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\CYHYO8JD.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\cyhyo8jd.txt.fully.cryptonar")) returned 1 [0112.762] SetErrorMode (uMode=0x1) returned 0x0 [0112.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.764] SetErrorMode (uMode=0x0) returned 0x1 [0112.764] GetFileType (hFile=0x230) returned 0x1 [0112.764] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x108 [0112.765] SetErrorMode (uMode=0x1) returned 0x0 [0112.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d726467, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d726467, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45aa3ee3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0112.765] SetErrorMode (uMode=0x0) returned 0x1 [0112.766] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\D9QO3KHK.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\d9qo3khk.txt.fully.cryptonar")) returned 1 [0112.767] SetErrorMode (uMode=0x1) returned 0x0 [0112.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.768] SetErrorMode (uMode=0x0) returned 0x1 [0112.768] GetFileType (hFile=0x230) returned 0x1 [0112.768] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x561 [0112.802] SetErrorMode (uMode=0x1) returned 0x0 [0112.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac2491ab, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xac2491ab, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45af0378, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x561)) returned 1 [0112.802] SetErrorMode (uMode=0x0) returned 0x1 [0112.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DN8YUCVA.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dn8yucva.txt.fully.cryptonar")) returned 1 [0112.804] SetErrorMode (uMode=0x1) returned 0x0 [0112.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.805] SetErrorMode (uMode=0x0) returned 0x1 [0112.805] GetFileType (hFile=0x230) returned 0x1 [0112.805] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5a [0112.806] SetErrorMode (uMode=0x1) returned 0x0 [0112.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ea5c48c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ea5c48c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45af0378, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1 [0112.806] SetErrorMode (uMode=0x0) returned 0x1 [0112.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DQI7WAG8.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\dqi7wag8.txt.fully.cryptonar")) returned 1 [0112.807] SetErrorMode (uMode=0x1) returned 0x0 [0112.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.808] SetErrorMode (uMode=0x0) returned 0x1 [0112.808] GetFileType (hFile=0x230) returned 0x1 [0112.808] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5d [0112.809] SetErrorMode (uMode=0x1) returned 0x0 [0112.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9a78fb5d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9a78fb5d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b164b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d)) returned 1 [0112.809] SetErrorMode (uMode=0x0) returned 0x1 [0112.809] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\DRDF2EZX.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\drdf2ezx.txt.fully.cryptonar")) returned 1 [0112.810] SetErrorMode (uMode=0x1) returned 0x0 [0112.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.811] SetErrorMode (uMode=0x0) returned 0x1 [0112.811] GetFileType (hFile=0x230) returned 0x1 [0112.811] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x69 [0112.812] SetErrorMode (uMode=0x1) returned 0x0 [0112.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd67e7f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd67e7f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b164b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x69)) returned 1 [0112.812] SetErrorMode (uMode=0x0) returned 0x1 [0112.812] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E2KPI4ZI.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e2kpi4zi.txt.fully.cryptonar")) returned 1 [0112.813] SetErrorMode (uMode=0x1) returned 0x0 [0112.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.813] SetErrorMode (uMode=0x0) returned 0x1 [0112.813] GetFileType (hFile=0x230) returned 0x1 [0112.814] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x99 [0112.815] SetErrorMode (uMode=0x1) returned 0x0 [0112.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94f696c2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94f696c2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b164b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0112.815] SetErrorMode (uMode=0x0) returned 0x1 [0112.815] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\E978TFRK.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\e978tfrk.txt.fully.cryptonar")) returned 1 [0112.816] SetErrorMode (uMode=0x1) returned 0x0 [0112.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.816] SetErrorMode (uMode=0x0) returned 0x1 [0112.816] GetFileType (hFile=0x230) returned 0x1 [0112.817] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x68 [0112.818] SetErrorMode (uMode=0x1) returned 0x0 [0112.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9632c56d, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9632c56d, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b164b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x68)) returned 1 [0112.818] SetErrorMode (uMode=0x0) returned 0x1 [0112.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\F68MFAMN.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\f68mfamn.txt.fully.cryptonar")) returned 1 [0112.819] SetErrorMode (uMode=0x1) returned 0x0 [0112.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.819] SetErrorMode (uMode=0x0) returned 0x1 [0112.820] GetFileType (hFile=0x230) returned 0x1 [0112.820] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x12f [0112.821] SetErrorMode (uMode=0x1) returned 0x0 [0112.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd67e7f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd67e7f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b164b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12f)) returned 1 [0112.821] SetErrorMode (uMode=0x0) returned 0x1 [0112.821] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FCGXHIFT.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fcgxhift.txt.fully.cryptonar")) returned 1 [0112.822] SetErrorMode (uMode=0x1) returned 0x0 [0112.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.823] SetErrorMode (uMode=0x0) returned 0x1 [0112.823] GetFileType (hFile=0x230) returned 0x1 [0112.823] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x59 [0112.824] SetErrorMode (uMode=0x1) returned 0x0 [0112.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95e22f52, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x95e22f52, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b3c771, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x59)) returned 1 [0112.825] SetErrorMode (uMode=0x0) returned 0x1 [0112.825] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FGTTES1V.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fgttes1v.txt.fully.cryptonar")) returned 1 [0112.826] SetErrorMode (uMode=0x1) returned 0x0 [0112.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.827] SetErrorMode (uMode=0x0) returned 0x1 [0112.827] GetFileType (hFile=0x230) returned 0x1 [0112.827] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x21c [0112.828] SetErrorMode (uMode=0x1) returned 0x0 [0112.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x949a6cf8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x949a6cf8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b3c771, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x21c)) returned 1 [0112.828] SetErrorMode (uMode=0x0) returned 0x1 [0112.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FLTMVY1F.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\fltmvy1f.txt.fully.cryptonar")) returned 1 [0112.829] SetErrorMode (uMode=0x1) returned 0x0 [0112.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.830] SetErrorMode (uMode=0x0) returned 0x1 [0112.830] GetFileType (hFile=0x230) returned 0x1 [0112.830] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xb5 [0112.831] SetErrorMode (uMode=0x1) returned 0x0 [0112.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94a605c1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94a605c1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b3c771, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb5)) returned 1 [0112.831] SetErrorMode (uMode=0x0) returned 0x1 [0112.831] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\FOLSAQT6.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\folsaqt6.txt.fully.cryptonar")) returned 1 [0112.833] SetErrorMode (uMode=0x1) returned 0x0 [0112.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.834] SetErrorMode (uMode=0x0) returned 0x1 [0112.834] GetFileType (hFile=0x230) returned 0x1 [0112.834] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x13e [0112.841] SetErrorMode (uMode=0x1) returned 0x0 [0112.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9efdfce1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9efdfce1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b62950, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1 [0112.841] SetErrorMode (uMode=0x0) returned 0x1 [0112.841] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\GXB342YS.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\gxb342ys.txt.fully.cryptonar")) returned 1 [0112.842] SetErrorMode (uMode=0x1) returned 0x0 [0112.842] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.843] SetErrorMode (uMode=0x0) returned 0x1 [0112.843] GetFileType (hFile=0x230) returned 0x1 [0112.843] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x254 [0112.844] SetErrorMode (uMode=0x1) returned 0x0 [0112.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae442aec, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xae442aec, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b62950, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x254)) returned 1 [0112.844] SetErrorMode (uMode=0x0) returned 0x1 [0112.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\H5LCJX1B.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\h5lcjx1b.txt.fully.cryptonar")) returned 1 [0112.861] SetErrorMode (uMode=0x1) returned 0x0 [0112.861] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.862] SetErrorMode (uMode=0x0) returned 0x1 [0112.862] GetFileType (hFile=0x230) returned 0x1 [0112.862] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x24a [0112.863] SetErrorMode (uMode=0x1) returned 0x0 [0112.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26d0d4c3, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26d0d4c3, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x45b88abb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24a)) returned 1 [0112.864] SetErrorMode (uMode=0x0) returned 0x1 [0112.864] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HBPP9XXY.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hbpp9xxy.txt.fully.cryptonar")) returned 1 [0112.866] SetErrorMode (uMode=0x1) returned 0x0 [0112.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.867] SetErrorMode (uMode=0x0) returned 0x1 [0112.867] GetFileType (hFile=0x230) returned 0x1 [0112.867] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x11f [0112.869] SetErrorMode (uMode=0x1) returned 0x0 [0112.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96bae128, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96bae128, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b88abb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11f)) returned 1 [0112.869] SetErrorMode (uMode=0x0) returned 0x1 [0112.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HF8F6LU0.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\hf8f6lu0.txt.fully.cryptonar")) returned 1 [0112.870] SetErrorMode (uMode=0x1) returned 0x0 [0112.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.871] SetErrorMode (uMode=0x0) returned 0x1 [0112.871] GetFileType (hFile=0x230) returned 0x1 [0112.871] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x70 [0112.872] SetErrorMode (uMode=0x1) returned 0x0 [0112.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadfa41ad, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadfa41ad, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45b88abb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0112.873] SetErrorMode (uMode=0x0) returned 0x1 [0112.873] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\HTVL5WIW.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\htvl5wiw.txt.fully.cryptonar")) returned 1 [0112.874] SetErrorMode (uMode=0x1) returned 0x0 [0112.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.875] SetErrorMode (uMode=0x0) returned 0x1 [0112.875] GetFileType (hFile=0x230) returned 0x1 [0112.875] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x110 [0112.877] SetErrorMode (uMode=0x1) returned 0x0 [0112.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x989e475c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x989e475c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45bbc1fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0112.877] SetErrorMode (uMode=0x0) returned 0x1 [0112.877] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ILF13HLB.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ilf13hlb.txt.fully.cryptonar")) returned 1 [0112.878] SetErrorMode (uMode=0x1) returned 0x0 [0112.878] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.879] SetErrorMode (uMode=0x0) returned 0x1 [0112.879] GetFileType (hFile=0x230) returned 0x1 [0112.879] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x14a [0112.880] SetErrorMode (uMode=0x1) returned 0x0 [0112.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d5a8d3b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d5a8d3b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45bbc1fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0112.880] SetErrorMode (uMode=0x0) returned 0x1 [0112.880] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ISTFXHHR.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\istfxhhr.txt.fully.cryptonar")) returned 1 [0112.882] SetErrorMode (uMode=0x1) returned 0x0 [0112.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.883] SetErrorMode (uMode=0x0) returned 0x1 [0112.883] GetFileType (hFile=0x230) returned 0x1 [0112.883] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xbb [0112.884] SetErrorMode (uMode=0x1) returned 0x0 [0112.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96608c3b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96608c3b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45bbc1fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0112.884] SetErrorMode (uMode=0x0) returned 0x1 [0112.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\ITD4OUAR.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\itd4ouar.txt.fully.cryptonar")) returned 1 [0112.887] SetErrorMode (uMode=0x1) returned 0x0 [0112.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.887] SetErrorMode (uMode=0x0) returned 0x1 [0112.887] GetFileType (hFile=0x230) returned 0x1 [0112.888] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x2c8 [0112.889] SetErrorMode (uMode=0x1) returned 0x0 [0112.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9e7ba1b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb9e7ba1b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45bd5182, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c8)) returned 1 [0112.889] SetErrorMode (uMode=0x0) returned 0x1 [0112.889] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\J4JSQG9R.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\j4jsqg9r.txt.fully.cryptonar")) returned 1 [0112.903] SetErrorMode (uMode=0x1) returned 0x0 [0112.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.904] SetErrorMode (uMode=0x0) returned 0x1 [0112.904] GetFileType (hFile=0x230) returned 0x1 [0112.904] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x3f4 [0112.924] SetErrorMode (uMode=0x1) returned 0x0 [0112.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26c059fa, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26c059fa, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x45c217ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0112.924] SetErrorMode (uMode=0x0) returned 0x1 [0112.924] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JQOCYKOH.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jqocykoh.txt.fully.cryptonar")) returned 1 [0112.926] SetErrorMode (uMode=0x1) returned 0x0 [0112.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.927] SetErrorMode (uMode=0x0) returned 0x1 [0112.927] GetFileType (hFile=0x230) returned 0x1 [0112.927] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xb3 [0112.928] SetErrorMode (uMode=0x1) returned 0x0 [0112.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d6d9fc2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d6d9fc2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45c217ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0112.928] SetErrorMode (uMode=0x0) returned 0x1 [0112.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\JWFWLAYR.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\jwfwlayr.txt.fully.cryptonar")) returned 1 [0112.929] SetErrorMode (uMode=0x1) returned 0x0 [0112.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.930] SetErrorMode (uMode=0x0) returned 0x1 [0112.930] GetFileType (hFile=0x230) returned 0x1 [0112.930] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xeb [0112.931] SetErrorMode (uMode=0x1) returned 0x0 [0112.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d61b3f4, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d61b3f4, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45c217ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1 [0112.931] SetErrorMode (uMode=0x0) returned 0x1 [0112.931] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\K8249Y1G.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\k8249y1g.txt.fully.cryptonar")) returned 1 [0112.932] SetErrorMode (uMode=0x1) returned 0x0 [0112.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.933] SetErrorMode (uMode=0x0) returned 0x1 [0112.933] GetFileType (hFile=0x230) returned 0x1 [0112.933] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x203 [0112.934] SetErrorMode (uMode=0x1) returned 0x0 [0112.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9df0c1eb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9df0c1eb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45c477c9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x203)) returned 1 [0112.935] SetErrorMode (uMode=0x0) returned 0x1 [0112.935] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\KNJ4AJDH.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\knj4ajdh.txt.fully.cryptonar")) returned 1 [0112.936] SetErrorMode (uMode=0x1) returned 0x0 [0112.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.936] SetErrorMode (uMode=0x0) returned 0x1 [0112.936] GetFileType (hFile=0x230) returned 0x1 [0112.936] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6f [0112.937] SetErrorMode (uMode=0x1) returned 0x0 [0112.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadfa41ad, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadfa41ad, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45c477c9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0112.938] SetErrorMode (uMode=0x0) returned 0x1 [0112.938] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\L78EW25D.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\l78ew25d.txt.fully.cryptonar")) returned 1 [0112.939] SetErrorMode (uMode=0x1) returned 0x0 [0112.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.939] SetErrorMode (uMode=0x0) returned 0x1 [0112.939] GetFileType (hFile=0x230) returned 0x1 [0112.939] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x14b [0112.941] SetErrorMode (uMode=0x1) returned 0x0 [0112.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2d488a0, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa2d488a0, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45c477c9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14b)) returned 1 [0112.941] SetErrorMode (uMode=0x0) returned 0x1 [0112.941] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LC10XEWL.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lc10xewl.txt.fully.cryptonar")) returned 1 [0112.942] SetErrorMode (uMode=0x1) returned 0x0 [0112.942] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.943] SetErrorMode (uMode=0x0) returned 0x1 [0112.943] GetFileType (hFile=0x230) returned 0x1 [0112.943] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x105 [0112.944] SetErrorMode (uMode=0x1) returned 0x0 [0112.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98e95a19, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98e95a19, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45c477c9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x105)) returned 1 [0112.944] SetErrorMode (uMode=0x0) returned 0x1 [0112.944] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LVARU12Y.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\lvaru12y.txt.fully.cryptonar")) returned 1 [0112.946] SetErrorMode (uMode=0x1) returned 0x0 [0112.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.947] SetErrorMode (uMode=0x0) returned 0x1 [0112.947] GetFileType (hFile=0x230) returned 0x1 [0112.947] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x193 [0112.948] SetErrorMode (uMode=0x1) returned 0x0 [0112.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac6e7ac1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xac6e7ac1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45c6e5b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x193)) returned 1 [0112.948] SetErrorMode (uMode=0x0) returned 0x1 [0112.949] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY1NFEKN.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly1nfekn.txt.fully.cryptonar")) returned 1 [0112.950] SetErrorMode (uMode=0x1) returned 0x0 [0112.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.951] SetErrorMode (uMode=0x0) returned 0x1 [0112.951] GetFileType (hFile=0x230) returned 0x1 [0112.952] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x137 [0112.953] SetErrorMode (uMode=0x1) returned 0x0 [0112.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94bbfeca, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94bbfeca, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45c6e5b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x137)) returned 1 [0112.953] SetErrorMode (uMode=0x0) returned 0x1 [0112.953] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\LY3FDU65.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ly3fdu65.txt.fully.cryptonar")) returned 1 [0112.955] SetErrorMode (uMode=0x1) returned 0x0 [0112.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.956] SetErrorMode (uMode=0x0) returned 0x1 [0112.956] GetFileType (hFile=0x230) returned 0x1 [0112.956] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x121 [0112.957] SetErrorMode (uMode=0x1) returned 0x0 [0112.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x948a8e83, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x948a8e83, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45c6e5b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x121)) returned 1 [0112.958] SetErrorMode (uMode=0x0) returned 0x1 [0112.958] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\M19117WZ.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\m19117wz.txt.fully.cryptonar")) returned 1 [0112.959] SetErrorMode (uMode=0x1) returned 0x0 [0112.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.987] SetErrorMode (uMode=0x0) returned 0x1 [0112.987] GetFileType (hFile=0x230) returned 0x1 [0112.987] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x58 [0112.988] SetErrorMode (uMode=0x1) returned 0x0 [0112.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xade4cca2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xade4cca2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45cc4ec1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1 [0112.988] SetErrorMode (uMode=0x0) returned 0x1 [0112.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MA5WDFBR.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ma5wdfbr.txt.fully.cryptonar")) returned 1 [0112.990] SetErrorMode (uMode=0x1) returned 0x0 [0112.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.991] SetErrorMode (uMode=0x0) returned 0x1 [0112.991] GetFileType (hFile=0x230) returned 0x1 [0112.991] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xca [0112.993] SetErrorMode (uMode=0x1) returned 0x0 [0112.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94e44789, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94e44789, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45cc4ec1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xca)) returned 1 [0112.993] SetErrorMode (uMode=0x0) returned 0x1 [0112.993] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MBJX4MYA.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mbjx4mya.txt.fully.cryptonar")) returned 1 [0112.997] SetErrorMode (uMode=0x1) returned 0x0 [0112.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0112.999] SetErrorMode (uMode=0x0) returned 0x1 [0112.999] GetFileType (hFile=0x230) returned 0x1 [0112.999] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x66 [0113.000] SetErrorMode (uMode=0x1) returned 0x0 [0113.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92b34705, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x92b34705, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45ce0225, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x66)) returned 1 [0113.000] SetErrorMode (uMode=0x0) returned 0x1 [0113.000] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MCAKE788.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mcake788.txt.fully.cryptonar")) returned 1 [0113.002] SetErrorMode (uMode=0x1) returned 0x0 [0113.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.003] SetErrorMode (uMode=0x0) returned 0x1 [0113.003] GetFileType (hFile=0x230) returned 0x1 [0113.003] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xa3 [0113.004] SetErrorMode (uMode=0x1) returned 0x0 [0113.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9cf4ffc, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb9cf4ffc, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45ce0225, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa3)) returned 1 [0113.004] SetErrorMode (uMode=0x0) returned 0x1 [0113.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MIL4MU1S.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mil4mu1s.txt.fully.cryptonar")) returned 1 [0113.006] SetErrorMode (uMode=0x1) returned 0x0 [0113.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.007] SetErrorMode (uMode=0x0) returned 0x1 [0113.007] GetFileType (hFile=0x230) returned 0x1 [0113.007] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x1b2 [0113.009] SetErrorMode (uMode=0x1) returned 0x0 [0113.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26d03878, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x26d03878, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x45ce0225, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1 [0113.009] SetErrorMode (uMode=0x0) returned 0x1 [0113.009] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MM8KB9U2.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mm8kb9u2.txt.fully.cryptonar")) returned 1 [0113.021] SetErrorMode (uMode=0x1) returned 0x0 [0113.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.022] SetErrorMode (uMode=0x0) returned 0x1 [0113.022] GetFileType (hFile=0x230) returned 0x1 [0113.022] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x104 [0113.027] SetErrorMode (uMode=0x1) returned 0x0 [0113.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd8e0c8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd8e0c8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45d2c50f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0113.027] SetErrorMode (uMode=0x0) returned 0x1 [0113.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MMPF10F4.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\mmpf10f4.txt.fully.cryptonar")) returned 1 [0113.029] SetErrorMode (uMode=0x1) returned 0x0 [0113.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.030] SetErrorMode (uMode=0x0) returned 0x1 [0113.030] GetFileType (hFile=0x230) returned 0x1 [0113.030] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x76 [0113.031] SetErrorMode (uMode=0x1) returned 0x0 [0113.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4e80b84, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4e80b84, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45d2c50f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x76)) returned 1 [0113.031] SetErrorMode (uMode=0x0) returned 0x1 [0113.031] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\MOE7DCQU.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\moe7dcqu.txt.fully.cryptonar")) returned 1 [0113.032] SetErrorMode (uMode=0x1) returned 0x0 [0113.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.034] SetErrorMode (uMode=0x0) returned 0x1 [0113.034] GetFileType (hFile=0x230) returned 0x1 [0113.034] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x72 [0113.035] SetErrorMode (uMode=0x1) returned 0x0 [0113.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd41c17, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd41c17, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45d2c50f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x72)) returned 1 [0113.036] SetErrorMode (uMode=0x0) returned 0x1 [0113.036] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NEHE4KDB.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nehe4kdb.txt.fully.cryptonar")) returned 1 [0113.039] SetErrorMode (uMode=0x1) returned 0x0 [0113.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.040] SetErrorMode (uMode=0x0) returned 0x1 [0113.040] GetFileType (hFile=0x230) returned 0x1 [0113.040] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x89 [0113.041] SetErrorMode (uMode=0x1) returned 0x0 [0113.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d8c9f16, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d8c9f16, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45d2c50f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x89)) returned 1 [0113.041] SetErrorMode (uMode=0x0) returned 0x1 [0113.042] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NOCAHPZ6.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nocahpz6.txt.fully.cryptonar")) returned 1 [0113.046] SetErrorMode (uMode=0x1) returned 0x0 [0113.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.050] SetErrorMode (uMode=0x0) returned 0x1 [0113.050] GetFileType (hFile=0x230) returned 0x1 [0113.051] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x640 [0113.068] SetErrorMode (uMode=0x1) returned 0x0 [0113.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93b61102, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x93b61102, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45d78a85, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0113.068] SetErrorMode (uMode=0x0) returned 0x1 [0113.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\NYCCG1AV.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\nyccg1av.txt.fully.cryptonar")) returned 1 [0113.069] SetErrorMode (uMode=0x1) returned 0x0 [0113.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.070] SetErrorMode (uMode=0x0) returned 0x1 [0113.071] GetFileType (hFile=0x230) returned 0x1 [0113.071] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6e [0113.072] SetErrorMode (uMode=0x1) returned 0x0 [0113.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96aa6672, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96aa6672, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45d9ed42, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6e)) returned 1 [0113.072] SetErrorMode (uMode=0x0) returned 0x1 [0113.072] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\O8FFFI2K.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\o8fffi2k.txt.fully.cryptonar")) returned 1 [0113.074] SetErrorMode (uMode=0x1) returned 0x0 [0113.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.074] SetErrorMode (uMode=0x0) returned 0x1 [0113.075] GetFileType (hFile=0x230) returned 0x1 [0113.075] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x57 [0113.076] SetErrorMode (uMode=0x1) returned 0x0 [0113.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa4fb1e49, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa4fb1e49, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45d9ed42, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x57)) returned 1 [0113.076] SetErrorMode (uMode=0x0) returned 0x1 [0113.076] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\P778SMC9.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\p778smc9.txt.fully.cryptonar")) returned 1 [0113.080] SetErrorMode (uMode=0x1) returned 0x0 [0113.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.081] SetErrorMode (uMode=0x0) returned 0x1 [0113.081] GetFileType (hFile=0x230) returned 0x1 [0113.081] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xab [0113.082] SetErrorMode (uMode=0x1) returned 0x0 [0113.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d261902, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d261902, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45d9ed42, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xab)) returned 1 [0113.082] SetErrorMode (uMode=0x0) returned 0x1 [0113.082] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PF9HBAFQ.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pf9hbafq.txt.fully.cryptonar")) returned 1 [0113.083] SetErrorMode (uMode=0x1) returned 0x0 [0113.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.084] SetErrorMode (uMode=0x0) returned 0x1 [0113.084] GetFileType (hFile=0x230) returned 0x1 [0113.084] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xdf [0113.085] SetErrorMode (uMode=0x1) returned 0x0 [0113.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98e33fa4, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x98e33fa4, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45d9ed42, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0113.086] SetErrorMode (uMode=0x0) returned 0x1 [0113.086] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\PK3I34UV.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\pk3i34uv.txt.fully.cryptonar")) returned 1 [0113.087] SetErrorMode (uMode=0x1) returned 0x0 [0113.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.088] SetErrorMode (uMode=0x0) returned 0x1 [0113.088] GetFileType (hFile=0x230) returned 0x1 [0113.088] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x56 [0113.089] SetErrorMode (uMode=0x1) returned 0x0 [0113.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9667df27, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9667df27, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45dc4fe8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x56)) returned 1 [0113.089] SetErrorMode (uMode=0x0) returned 0x1 [0113.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\QUMCK8L4.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\qumck8l4.txt.fully.cryptonar")) returned 1 [0113.090] SetErrorMode (uMode=0x1) returned 0x0 [0113.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.091] SetErrorMode (uMode=0x0) returned 0x1 [0113.091] GetFileType (hFile=0x230) returned 0x1 [0113.091] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x1f9 [0113.092] SetErrorMode (uMode=0x1) returned 0x0 [0113.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa561a39f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa561a39f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45dc4fe8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f9)) returned 1 [0113.093] SetErrorMode (uMode=0x0) returned 0x1 [0113.093] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RAYRHE6Z.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rayrhe6z.txt.fully.cryptonar")) returned 1 [0113.094] SetErrorMode (uMode=0x1) returned 0x0 [0113.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.095] SetErrorMode (uMode=0x0) returned 0x1 [0113.095] GetFileType (hFile=0x230) returned 0x1 [0113.095] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x187 [0113.096] SetErrorMode (uMode=0x1) returned 0x0 [0113.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9fc64189, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9fc64189, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45dc4fe8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0113.096] SetErrorMode (uMode=0x0) returned 0x1 [0113.096] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RQK5QF4L.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rqk5qf4l.txt.fully.cryptonar")) returned 1 [0113.097] SetErrorMode (uMode=0x1) returned 0x0 [0113.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.098] SetErrorMode (uMode=0x0) returned 0x1 [0113.098] GetFileType (hFile=0x230) returned 0x1 [0113.098] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xed [0113.100] SetErrorMode (uMode=0x1) returned 0x0 [0113.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacb6016f, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xacb6016f, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45dc4fe8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0113.100] SetErrorMode (uMode=0x0) returned 0x1 [0113.100] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RTEPN67M.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\rtepn67m.txt.fully.cryptonar")) returned 1 [0113.101] SetErrorMode (uMode=0x1) returned 0x0 [0113.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.102] SetErrorMode (uMode=0x0) returned 0x1 [0113.102] GetFileType (hFile=0x230) returned 0x1 [0113.102] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x71 [0113.103] SetErrorMode (uMode=0x1) returned 0x0 [0113.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94b98da2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x94b98da2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45deb805, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x71)) returned 1 [0113.103] SetErrorMode (uMode=0x0) returned 0x1 [0113.103] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\RYK7X1K4.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ryk7x1k4.txt.fully.cryptonar")) returned 1 [0113.105] SetErrorMode (uMode=0x1) returned 0x0 [0113.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.106] SetErrorMode (uMode=0x0) returned 0x1 [0113.106] GetFileType (hFile=0x230) returned 0x1 [0113.106] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x7b [0113.107] SetErrorMode (uMode=0x1) returned 0x0 [0113.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9cf8cc3c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9cf8cc3c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45deb805, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7b)) returned 1 [0113.107] SetErrorMode (uMode=0x0) returned 0x1 [0113.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\S0EK69P5.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\s0ek69p5.txt.fully.cryptonar")) returned 1 [0113.108] SetErrorMode (uMode=0x1) returned 0x0 [0113.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.109] SetErrorMode (uMode=0x0) returned 0x1 [0113.109] GetFileType (hFile=0x230) returned 0x1 [0113.109] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x58 [0113.110] SetErrorMode (uMode=0x1) returned 0x0 [0113.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ea36240, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ea36240, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45deb805, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1 [0113.111] SetErrorMode (uMode=0x0) returned 0x1 [0113.111] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\SEVCUJM3.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\sevcujm3.txt.fully.cryptonar")) returned 1 [0113.112] SetErrorMode (uMode=0x1) returned 0x0 [0113.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.113] SetErrorMode (uMode=0x0) returned 0x1 [0113.113] GetFileType (hFile=0x230) returned 0x1 [0113.113] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6b [0113.114] SetErrorMode (uMode=0x1) returned 0x0 [0113.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d15688c, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d15688c, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45deb805, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6b)) returned 1 [0113.114] SetErrorMode (uMode=0x0) returned 0x1 [0113.114] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\STGOZ493.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\stgoz493.txt.fully.cryptonar")) returned 1 [0113.116] SetErrorMode (uMode=0x1) returned 0x0 [0113.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.117] SetErrorMode (uMode=0x0) returned 0x1 [0113.117] GetFileType (hFile=0x230) returned 0x1 [0113.117] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x50 [0113.120] SetErrorMode (uMode=0x1) returned 0x0 [0113.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9ee70f8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xb9ee70f8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e113e2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0113.121] SetErrorMode (uMode=0x0) returned 0x1 [0113.121] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\T1LCPPSA.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\t1lcppsa.txt.fully.cryptonar")) returned 1 [0113.122] SetErrorMode (uMode=0x1) returned 0x0 [0113.122] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.123] SetErrorMode (uMode=0x0) returned 0x1 [0113.123] GetFileType (hFile=0x230) returned 0x1 [0113.123] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6c [0113.124] SetErrorMode (uMode=0x1) returned 0x0 [0113.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x959fa804, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x959fa804, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e113e2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6c)) returned 1 [0113.124] SetErrorMode (uMode=0x0) returned 0x1 [0113.124] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TCXQPY9L.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tcxqpy9l.txt.fully.cryptonar")) returned 1 [0113.125] SetErrorMode (uMode=0x1) returned 0x0 [0113.125] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.126] SetErrorMode (uMode=0x0) returned 0x1 [0113.126] GetFileType (hFile=0x230) returned 0x1 [0113.126] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x91 [0113.127] SetErrorMode (uMode=0x1) returned 0x0 [0113.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ca2f7b2, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9ca2f7b2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e113e2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x91)) returned 1 [0113.127] SetErrorMode (uMode=0x0) returned 0x1 [0113.127] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TEW946CI.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tew946ci.txt.fully.cryptonar")) returned 1 [0113.128] SetErrorMode (uMode=0x1) returned 0x0 [0113.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.129] SetErrorMode (uMode=0x0) returned 0x1 [0113.129] GetFileType (hFile=0x230) returned 0x1 [0113.129] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xda [0113.131] SetErrorMode (uMode=0x1) returned 0x0 [0113.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa51a1ce5, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa51a1ce5, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e113e2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1 [0113.131] SetErrorMode (uMode=0x0) returned 0x1 [0113.131] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\TFCJHLEI.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\tfcjhlei.txt.fully.cryptonar")) returned 1 [0113.133] SetErrorMode (uMode=0x1) returned 0x0 [0113.133] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.135] SetErrorMode (uMode=0x0) returned 0x1 [0113.135] GetFileType (hFile=0x230) returned 0x1 [0113.135] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6f [0113.136] SetErrorMode (uMode=0x1) returned 0x0 [0113.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99d54027, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x99d54027, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e383a6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0113.136] SetErrorMode (uMode=0x0) returned 0x1 [0113.137] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U2OYIS47.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u2oyis47.txt.fully.cryptonar")) returned 1 [0113.138] SetErrorMode (uMode=0x1) returned 0x0 [0113.138] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.139] SetErrorMode (uMode=0x0) returned 0x1 [0113.139] GetFileType (hFile=0x230) returned 0x1 [0113.139] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6f [0113.140] SetErrorMode (uMode=0x1) returned 0x0 [0113.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa58a2ba7, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa58a2ba7, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e383a6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0113.141] SetErrorMode (uMode=0x0) returned 0x1 [0113.141] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\U8FCPAKJ.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\u8fcpakj.txt.fully.cryptonar")) returned 1 [0113.142] SetErrorMode (uMode=0x1) returned 0x0 [0113.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.143] SetErrorMode (uMode=0x0) returned 0x1 [0113.143] GetFileType (hFile=0x230) returned 0x1 [0113.143] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x54 [0113.144] SetErrorMode (uMode=0x1) returned 0x0 [0113.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1269be9d, ftCreationTime.dwHighDateTime=0x1d2fc23, ftLastAccessTime.dwLowDateTime=0x1269be9d, ftLastAccessTime.dwHighDateTime=0x1d2fc23, ftLastWriteTime.dwLowDateTime=0x45e383a6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x54)) returned 1 [0113.144] SetErrorMode (uMode=0x0) returned 0x1 [0113.144] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBUPNOZC.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubupnozc.txt.fully.cryptonar")) returned 1 [0113.146] SetErrorMode (uMode=0x1) returned 0x0 [0113.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.147] SetErrorMode (uMode=0x0) returned 0x1 [0113.147] GetFileType (hFile=0x230) returned 0x1 [0113.147] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x69 [0113.148] SetErrorMode (uMode=0x1) returned 0x0 [0113.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96acd871, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96acd871, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e383a6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x69)) returned 1 [0113.148] SetErrorMode (uMode=0x0) returned 0x1 [0113.148] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UBXQG39X.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ubxqg39x.txt.fully.cryptonar")) returned 1 [0113.150] SetErrorMode (uMode=0x1) returned 0x0 [0113.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.153] SetErrorMode (uMode=0x0) returned 0x1 [0113.153] GetFileType (hFile=0x230) returned 0x1 [0113.153] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x82 [0113.154] SetErrorMode (uMode=0x1) returned 0x0 [0113.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x923bfa74, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x923bfa74, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e5d963, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x82)) returned 1 [0113.155] SetErrorMode (uMode=0x0) returned 0x1 [0113.155] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UGL14QS0.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\ugl14qs0.txt.fully.cryptonar")) returned 1 [0113.157] SetErrorMode (uMode=0x1) returned 0x0 [0113.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.158] SetErrorMode (uMode=0x0) returned 0x1 [0113.158] GetFileType (hFile=0x230) returned 0x1 [0113.158] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x22b [0113.160] SetErrorMode (uMode=0x1) returned 0x0 [0113.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c51e760, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9c51e760, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e5d963, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22b)) returned 1 [0113.160] SetErrorMode (uMode=0x0) returned 0x1 [0113.160] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\UUEVXDWP.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\uuevxdwp.txt.fully.cryptonar")) returned 1 [0113.162] SetErrorMode (uMode=0x1) returned 0x0 [0113.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.163] SetErrorMode (uMode=0x0) returned 0x1 [0113.163] GetFileType (hFile=0x230) returned 0x1 [0113.163] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x90 [0113.164] SetErrorMode (uMode=0x1) returned 0x0 [0113.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9e86c612, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9e86c612, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e5d963, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0113.164] SetErrorMode (uMode=0x0) returned 0x1 [0113.164] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\V7NNCJHO.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\v7nncjho.txt.fully.cryptonar")) returned 1 [0113.166] SetErrorMode (uMode=0x1) returned 0x0 [0113.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.169] SetErrorMode (uMode=0x0) returned 0x1 [0113.169] GetFileType (hFile=0x230) returned 0x1 [0113.169] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xae [0113.170] SetErrorMode (uMode=0x1) returned 0x0 [0113.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa517ba83, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa517ba83, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e844ef, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1 [0113.170] SetErrorMode (uMode=0x0) returned 0x1 [0113.170] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\VD3GM2DA.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\vd3gm2da.txt.fully.cryptonar")) returned 1 [0113.171] SetErrorMode (uMode=0x1) returned 0x0 [0113.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.172] SetErrorMode (uMode=0x0) returned 0x1 [0113.172] GetFileType (hFile=0x230) returned 0x1 [0113.172] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x17c [0113.173] SetErrorMode (uMode=0x1) returned 0x0 [0113.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae16de54, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xae16de54, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e844ef, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1 [0113.174] SetErrorMode (uMode=0x0) returned 0x1 [0113.174] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WPEXKTDV.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wpexktdv.txt.fully.cryptonar")) returned 1 [0113.175] SetErrorMode (uMode=0x1) returned 0x0 [0113.175] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.176] SetErrorMode (uMode=0x0) returned 0x1 [0113.176] GetFileType (hFile=0x230) returned 0x1 [0113.176] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x16a [0113.177] SetErrorMode (uMode=0x1) returned 0x0 [0113.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xae5278d7, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xae5278d7, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e844ef, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1 [0113.177] SetErrorMode (uMode=0x0) returned 0x1 [0113.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WUT8M1Q8.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wut8m1q8.txt.fully.cryptonar")) returned 1 [0113.178] SetErrorMode (uMode=0x1) returned 0x0 [0113.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.179] SetErrorMode (uMode=0x0) returned 0x1 [0113.179] GetFileType (hFile=0x230) returned 0x1 [0113.179] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x11a [0113.180] SetErrorMode (uMode=0x1) returned 0x0 [0113.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadd8e0c8, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xadd8e0c8, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45e844ef, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0113.180] SetErrorMode (uMode=0x0) returned 0x1 [0113.180] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\WX75TEOR.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\wx75teor.txt.fully.cryptonar")) returned 1 [0113.181] SetErrorMode (uMode=0x1) returned 0x0 [0113.181] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.182] SetErrorMode (uMode=0x0) returned 0x1 [0113.182] GetFileType (hFile=0x230) returned 0x1 [0113.182] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x113 [0113.183] SetErrorMode (uMode=0x1) returned 0x0 [0113.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2ac009b, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0xa2ac009b, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45eaa190, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x113)) returned 1 [0113.183] SetErrorMode (uMode=0x0) returned 0x1 [0113.183] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XRS5D0N2.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xrs5d0n2.txt.fully.cryptonar")) returned 1 [0113.184] SetErrorMode (uMode=0x1) returned 0x0 [0113.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.186] SetErrorMode (uMode=0x0) returned 0x1 [0113.186] GetFileType (hFile=0x230) returned 0x1 [0113.186] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5e [0113.187] SetErrorMode (uMode=0x1) returned 0x0 [0113.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9d8a3bf6, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9d8a3bf6, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45eaa190, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5e)) returned 1 [0113.187] SetErrorMode (uMode=0x0) returned 0x1 [0113.187] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\XUAUK5R0.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\xuauk5r0.txt.fully.cryptonar")) returned 1 [0113.188] SetErrorMode (uMode=0x1) returned 0x0 [0113.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.189] SetErrorMode (uMode=0x0) returned 0x1 [0113.189] GetFileType (hFile=0x230) returned 0x1 [0113.189] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5d [0113.190] SetErrorMode (uMode=0x1) returned 0x0 [0113.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95a04443, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x95a04443, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45eaa190, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d)) returned 1 [0113.190] SetErrorMode (uMode=0x0) returned 0x1 [0113.190] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y1I415YS.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y1i415ys.txt.fully.cryptonar")) returned 1 [0113.191] SetErrorMode (uMode=0x1) returned 0x0 [0113.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.191] SetErrorMode (uMode=0x0) returned 0x1 [0113.191] GetFileType (hFile=0x230) returned 0x1 [0113.191] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5a [0113.192] SetErrorMode (uMode=0x1) returned 0x0 [0113.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96318ceb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96318ceb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x45eaa190, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5a)) returned 1 [0113.192] SetErrorMode (uMode=0x0) returned 0x1 [0113.192] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\Y3XU5OKR.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\inetcookies\\low\\y3xu5okr.txt.fully.cryptonar")) returned 1 [0113.193] SetErrorMode (uMode=0x1) returned 0x0 [0113.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.202] SetErrorMode (uMode=0x0) returned 0x1 [0113.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", lpFilePart=0x0) returned 0x50 [0113.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", lpFilePart=0x0) returned 0x50 [0113.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp", lpFilePart=0x0) returned 0x50 [0113.204] SetErrorMode (uMode=0x1) returned 0x0 [0113.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\WPNPRMRY.tmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnprmry.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0113.211] SetErrorMode (uMode=0x0) returned 0x1 [0113.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0113.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0113.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0113.213] SetErrorMode (uMode=0x1) returned 0x0 [0113.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.214] GetFileType (hFile=0x230) returned 0x1 [0113.214] SetErrorMode (uMode=0x0) returned 0x1 [0113.214] GetFileType (hFile=0x230) returned 0x1 [0113.214] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.214] ReadFile (in: hFile=0x230, lpBuffer=0x27db610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27db610*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0113.214] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.214] CloseHandle (hObject=0x230) returned 1 [0113.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0113.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg", lpFilePart=0x0) returned 0x57 [0113.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.214] SetErrorMode (uMode=0x1) returned 0x0 [0113.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x10aa59c5, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x10aa59c5, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x10aa59c5, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0113.214] SetErrorMode (uMode=0x0) returned 0x1 [0113.214] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\16f3f148.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\16f3f148.jpg.partially.cryptonar")) returned 1 [0113.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", lpFilePart=0x0) returned 0x57 [0113.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", lpFilePart=0x0) returned 0x57 [0113.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", lpFilePart=0x0) returned 0x57 [0113.215] SetErrorMode (uMode=0x1) returned 0x0 [0113.216] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.216] GetFileType (hFile=0x230) returned 0x1 [0113.216] SetErrorMode (uMode=0x0) returned 0x1 [0113.216] GetFileType (hFile=0x230) returned 0x1 [0113.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.216] ReadFile (in: hFile=0x230, lpBuffer=0x27de930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27de930*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.217] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.217] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.218] WriteFile (in: hFile=0x230, lpBuffer=0x27de930*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27de930*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.218] CloseHandle (hObject=0x230) returned 1 [0113.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", lpFilePart=0x0) returned 0x57 [0113.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg", lpFilePart=0x0) returned 0x57 [0113.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.218] SetErrorMode (uMode=0x1) returned 0x0 [0113.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa19ad400, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa19ad400, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x45ef6357, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10a9)) returned 1 [0113.218] SetErrorMode (uMode=0x0) returned 0x1 [0113.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\179e8db5.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\179e8db5.jpg.partially.cryptonar")) returned 1 [0113.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", lpFilePart=0x0) returned 0x57 [0113.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", lpFilePart=0x0) returned 0x57 [0113.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", lpFilePart=0x0) returned 0x57 [0113.219] SetErrorMode (uMode=0x1) returned 0x0 [0113.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.219] GetFileType (hFile=0x230) returned 0x1 [0113.219] SetErrorMode (uMode=0x0) returned 0x1 [0113.220] GetFileType (hFile=0x230) returned 0x1 [0113.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.220] ReadFile (in: hFile=0x230, lpBuffer=0x27e2038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e2038*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.242] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.242] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.242] WriteFile (in: hFile=0x230, lpBuffer=0x27e2038*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e2038*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.242] CloseHandle (hObject=0x230) returned 1 [0113.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", lpFilePart=0x0) returned 0x57 [0113.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg", lpFilePart=0x0) returned 0x57 [0113.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.250] SetErrorMode (uMode=0x1) returned 0x0 [0113.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aedf800, ftCreationTime.dwHighDateTime=0x1d39f63, ftLastAccessTime.dwLowDateTime=0x5aedf800, ftLastAccessTime.dwHighDateTime=0x1d39f63, ftLastWriteTime.dwLowDateTime=0x45f425be, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1bc5)) returned 1 [0113.251] SetErrorMode (uMode=0x0) returned 0x1 [0113.251] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ad75057.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ad75057.jpg.partially.cryptonar")) returned 1 [0113.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", lpFilePart=0x0) returned 0x57 [0113.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", lpFilePart=0x0) returned 0x57 [0113.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", lpFilePart=0x0) returned 0x57 [0113.253] SetErrorMode (uMode=0x1) returned 0x0 [0113.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.254] GetFileType (hFile=0x230) returned 0x1 [0113.254] SetErrorMode (uMode=0x0) returned 0x1 [0113.254] GetFileType (hFile=0x230) returned 0x1 [0113.254] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.254] ReadFile (in: hFile=0x230, lpBuffer=0x27e5740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e5740*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.275] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.275] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.276] WriteFile (in: hFile=0x230, lpBuffer=0x27e5740*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e5740*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.276] CloseHandle (hObject=0x230) returned 1 [0113.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", lpFilePart=0x0) returned 0x57 [0113.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg", lpFilePart=0x0) returned 0x57 [0113.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.276] SetErrorMode (uMode=0x1) returned 0x0 [0113.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x45f8ec3c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2045)) returned 1 [0113.276] SetErrorMode (uMode=0x0) returned 0x1 [0113.276] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1ba49cb8.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1ba49cb8.jpg.partially.cryptonar")) returned 1 [0113.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", lpFilePart=0x0) returned 0x57 [0113.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", lpFilePart=0x0) returned 0x57 [0113.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", lpFilePart=0x0) returned 0x57 [0113.277] SetErrorMode (uMode=0x1) returned 0x0 [0113.278] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.279] GetFileType (hFile=0x230) returned 0x1 [0113.279] SetErrorMode (uMode=0x0) returned 0x1 [0113.279] GetFileType (hFile=0x230) returned 0x1 [0113.279] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.280] ReadFile (in: hFile=0x230, lpBuffer=0x27e8e48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27e8e48*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.304] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.304] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.304] WriteFile (in: hFile=0x230, lpBuffer=0x27e8e48*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27e8e48*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.304] CloseHandle (hObject=0x230) returned 1 [0113.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", lpFilePart=0x0) returned 0x57 [0113.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg", lpFilePart=0x0) returned 0x57 [0113.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.314] SetErrorMode (uMode=0x1) returned 0x0 [0113.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec028d80, ftCreationTime.dwHighDateTime=0x1d3006a, ftLastAccessTime.dwLowDateTime=0xec028d80, ftLastAccessTime.dwHighDateTime=0x1d3006a, ftLastWriteTime.dwLowDateTime=0x45fdb6fc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18ac)) returned 1 [0113.314] SetErrorMode (uMode=0x0) returned 0x1 [0113.314] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\1f43fcc4.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\1f43fcc4.jpg.partially.cryptonar")) returned 1 [0113.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", lpFilePart=0x0) returned 0x57 [0113.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", lpFilePart=0x0) returned 0x57 [0113.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", lpFilePart=0x0) returned 0x57 [0113.316] SetErrorMode (uMode=0x1) returned 0x0 [0113.316] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.317] GetFileType (hFile=0x230) returned 0x1 [0113.317] SetErrorMode (uMode=0x0) returned 0x1 [0113.317] GetFileType (hFile=0x230) returned 0x1 [0113.317] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.317] ReadFile (in: hFile=0x230, lpBuffer=0x27ec550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27ec550*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.319] WriteFile (in: hFile=0x230, lpBuffer=0x27ec550*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27ec550*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.319] CloseHandle (hObject=0x230) returned 1 [0113.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", lpFilePart=0x0) returned 0x57 [0113.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg", lpFilePart=0x0) returned 0x57 [0113.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.320] SetErrorMode (uMode=0x1) returned 0x0 [0113.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b630400, ftCreationTime.dwHighDateTime=0x1d33758, ftLastAccessTime.dwLowDateTime=0x1b630400, ftLastAccessTime.dwHighDateTime=0x1d33758, ftLastWriteTime.dwLowDateTime=0x45fdb6fc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d8e)) returned 1 [0113.320] SetErrorMode (uMode=0x0) returned 0x1 [0113.320] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\23a8b33e.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\23a8b33e.jpg.partially.cryptonar")) returned 1 [0113.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", lpFilePart=0x0) returned 0x57 [0113.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", lpFilePart=0x0) returned 0x57 [0113.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", lpFilePart=0x0) returned 0x57 [0113.322] SetErrorMode (uMode=0x1) returned 0x0 [0113.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.323] GetFileType (hFile=0x230) returned 0x1 [0113.323] SetErrorMode (uMode=0x0) returned 0x1 [0113.323] GetFileType (hFile=0x230) returned 0x1 [0113.324] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.324] ReadFile (in: hFile=0x230, lpBuffer=0x27efc58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27efc58*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.354] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.355] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.355] WriteFile (in: hFile=0x230, lpBuffer=0x27efc58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27efc58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.355] CloseHandle (hObject=0x230) returned 1 [0113.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", lpFilePart=0x0) returned 0x57 [0113.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg", lpFilePart=0x0) returned 0x57 [0113.355] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.355] SetErrorMode (uMode=0x1) returned 0x0 [0113.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x320e2000, ftCreationTime.dwHighDateTime=0x1d30070, ftLastAccessTime.dwLowDateTime=0x320e2000, ftLastAccessTime.dwHighDateTime=0x1d30070, ftLastWriteTime.dwLowDateTime=0x4604d898, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x176f)) returned 1 [0113.356] SetErrorMode (uMode=0x0) returned 0x1 [0113.356] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\3d12749e.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\3d12749e.jpg.partially.cryptonar")) returned 1 [0113.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", lpFilePart=0x0) returned 0x57 [0113.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", lpFilePart=0x0) returned 0x57 [0113.357] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", lpFilePart=0x0) returned 0x57 [0113.358] SetErrorMode (uMode=0x1) returned 0x0 [0113.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.359] GetFileType (hFile=0x230) returned 0x1 [0113.359] SetErrorMode (uMode=0x0) returned 0x1 [0113.359] GetFileType (hFile=0x230) returned 0x1 [0113.359] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.359] ReadFile (in: hFile=0x230, lpBuffer=0x27f3360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f3360*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.387] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.390] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.390] WriteFile (in: hFile=0x230, lpBuffer=0x27f3360*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f3360*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.390] CloseHandle (hObject=0x230) returned 1 [0113.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", lpFilePart=0x0) returned 0x57 [0113.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg", lpFilePart=0x0) returned 0x57 [0113.390] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.391] SetErrorMode (uMode=0x1) returned 0x0 [0113.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5eff600, ftCreationTime.dwHighDateTime=0x1d3aafe, ftLastAccessTime.dwLowDateTime=0xe5eff600, ftLastAccessTime.dwHighDateTime=0x1d3aafe, ftLastWriteTime.dwLowDateTime=0x4609a72c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x194b)) returned 1 [0113.391] SetErrorMode (uMode=0x0) returned 0x1 [0113.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\434a4949.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\434a4949.jpg.partially.cryptonar")) returned 1 [0113.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", lpFilePart=0x0) returned 0x57 [0113.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", lpFilePart=0x0) returned 0x57 [0113.392] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", lpFilePart=0x0) returned 0x57 [0113.392] SetErrorMode (uMode=0x1) returned 0x0 [0113.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.393] GetFileType (hFile=0x230) returned 0x1 [0113.393] SetErrorMode (uMode=0x0) returned 0x1 [0113.393] GetFileType (hFile=0x230) returned 0x1 [0113.393] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.393] ReadFile (in: hFile=0x230, lpBuffer=0x27f6a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27f6a68*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.414] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.414] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.415] WriteFile (in: hFile=0x230, lpBuffer=0x27f6a68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27f6a68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.415] CloseHandle (hObject=0x230) returned 1 [0113.415] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", lpFilePart=0x0) returned 0x57 [0113.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg", lpFilePart=0x0) returned 0x57 [0113.416] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.416] SetErrorMode (uMode=0x1) returned 0x0 [0113.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x460bfef8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20cc)) returned 1 [0113.416] SetErrorMode (uMode=0x0) returned 0x1 [0113.416] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4929c482.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4929c482.jpg.partially.cryptonar")) returned 1 [0113.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", lpFilePart=0x0) returned 0x57 [0113.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", lpFilePart=0x0) returned 0x57 [0113.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", lpFilePart=0x0) returned 0x57 [0113.418] SetErrorMode (uMode=0x1) returned 0x0 [0113.418] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.419] GetFileType (hFile=0x230) returned 0x1 [0113.419] SetErrorMode (uMode=0x0) returned 0x1 [0113.419] GetFileType (hFile=0x230) returned 0x1 [0113.419] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.419] ReadFile (in: hFile=0x230, lpBuffer=0x27fa170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27fa170*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.435] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.435] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.435] WriteFile (in: hFile=0x230, lpBuffer=0x27fa170*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27fa170*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.436] CloseHandle (hObject=0x230) returned 1 [0113.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", lpFilePart=0x0) returned 0x57 [0113.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg", lpFilePart=0x0) returned 0x57 [0113.504] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.504] SetErrorMode (uMode=0x1) returned 0x0 [0113.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d63bf80, ftCreationTime.dwHighDateTime=0x1d42017, ftLastAccessTime.dwLowDateTime=0x1d63bf80, ftLastAccessTime.dwHighDateTime=0x1d42017, ftLastWriteTime.dwLowDateTime=0x46132673, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10ef)) returned 1 [0113.505] SetErrorMode (uMode=0x0) returned 0x1 [0113.505] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\4a7a41cb.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\4a7a41cb.jpg.partially.cryptonar")) returned 1 [0113.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", lpFilePart=0x0) returned 0x57 [0113.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", lpFilePart=0x0) returned 0x57 [0113.506] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", lpFilePart=0x0) returned 0x57 [0113.506] SetErrorMode (uMode=0x1) returned 0x0 [0113.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.507] GetFileType (hFile=0x230) returned 0x1 [0113.507] SetErrorMode (uMode=0x0) returned 0x1 [0113.507] GetFileType (hFile=0x230) returned 0x1 [0113.507] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.507] ReadFile (in: hFile=0x230, lpBuffer=0x27fd878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27fd878*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.524] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.524] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.524] WriteFile (in: hFile=0x230, lpBuffer=0x27fd878*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27fd878*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.525] CloseHandle (hObject=0x230) returned 1 [0113.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", lpFilePart=0x0) returned 0x57 [0113.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg", lpFilePart=0x0) returned 0x57 [0113.526] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.526] SetErrorMode (uMode=0x1) returned 0x0 [0113.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x461f3aac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15d1)) returned 1 [0113.526] SetErrorMode (uMode=0x0) returned 0x1 [0113.526] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\52572b1f.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\52572b1f.jpg.partially.cryptonar")) returned 1 [0113.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", lpFilePart=0x0) returned 0x57 [0113.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", lpFilePart=0x0) returned 0x57 [0113.527] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", lpFilePart=0x0) returned 0x57 [0113.528] SetErrorMode (uMode=0x1) returned 0x0 [0113.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.533] GetFileType (hFile=0x230) returned 0x1 [0113.533] SetErrorMode (uMode=0x0) returned 0x1 [0113.533] GetFileType (hFile=0x230) returned 0x1 [0113.534] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.534] ReadFile (in: hFile=0x230, lpBuffer=0x2800f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2800f80*, lpNumberOfBytesRead=0x5ae8b8*=0xf1a, lpOverlapped=0x0) returned 1 [0113.536] SetFilePointer (in: hFile=0x230, lDistanceToMove=-2842, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.536] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.536] WriteFile (in: hFile=0x230, lpBuffer=0x2800f80*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2800f80*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.536] CloseHandle (hObject=0x230) returned 1 [0113.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", lpFilePart=0x0) returned 0x57 [0113.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg", lpFilePart=0x0) returned 0x57 [0113.537] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.537] SetErrorMode (uMode=0x1) returned 0x0 [0113.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f06700, ftCreationTime.dwHighDateTime=0x1d2d5d4, ftLastAccessTime.dwLowDateTime=0x42f06700, ftLastAccessTime.dwHighDateTime=0x1d2d5d4, ftLastWriteTime.dwLowDateTime=0x461f3aac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf1a)) returned 1 [0113.537] SetErrorMode (uMode=0x0) returned 0x1 [0113.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\6b492b11.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\6b492b11.jpg.partially.cryptonar")) returned 1 [0113.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", lpFilePart=0x0) returned 0x57 [0113.539] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", lpFilePart=0x0) returned 0x57 [0113.540] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", lpFilePart=0x0) returned 0x57 [0113.540] SetErrorMode (uMode=0x1) returned 0x0 [0113.540] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.554] GetFileType (hFile=0x230) returned 0x1 [0113.554] SetErrorMode (uMode=0x0) returned 0x1 [0113.554] GetFileType (hFile=0x230) returned 0x1 [0113.554] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.554] ReadFile (in: hFile=0x230, lpBuffer=0x2804688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2804688*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.556] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.556] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.556] WriteFile (in: hFile=0x230, lpBuffer=0x2804688*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2804688*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.557] CloseHandle (hObject=0x230) returned 1 [0113.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", lpFilePart=0x0) returned 0x57 [0113.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg", lpFilePart=0x0) returned 0x57 [0113.557] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.557] SetErrorMode (uMode=0x1) returned 0x0 [0113.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f387a00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9f387a00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x4623d4ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17b8)) returned 1 [0113.557] SetErrorMode (uMode=0x0) returned 0x1 [0113.557] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7a7d9912.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7a7d9912.jpg.partially.cryptonar")) returned 1 [0113.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", lpFilePart=0x0) returned 0x57 [0113.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", lpFilePart=0x0) returned 0x57 [0113.558] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", lpFilePart=0x0) returned 0x57 [0113.558] SetErrorMode (uMode=0x1) returned 0x0 [0113.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.559] GetFileType (hFile=0x230) returned 0x1 [0113.560] SetErrorMode (uMode=0x0) returned 0x1 [0113.560] GetFileType (hFile=0x230) returned 0x1 [0113.560] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.560] ReadFile (in: hFile=0x230, lpBuffer=0x2807d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2807d90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.582] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.582] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.582] WriteFile (in: hFile=0x230, lpBuffer=0x2807d90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2807d90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.582] CloseHandle (hObject=0x230) returned 1 [0113.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", lpFilePart=0x0) returned 0x57 [0113.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg", lpFilePart=0x0) returned 0x57 [0113.583] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.583] SetErrorMode (uMode=0x1) returned 0x0 [0113.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5364cf00, ftCreationTime.dwHighDateTime=0x1d3b089, ftLastAccessTime.dwLowDateTime=0x5364cf00, ftLastAccessTime.dwHighDateTime=0x1d3b089, ftLastWriteTime.dwLowDateTime=0x4626392f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18d1)) returned 1 [0113.583] SetErrorMode (uMode=0x0) returned 0x1 [0113.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7b9a0c9a.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7b9a0c9a.jpg.partially.cryptonar")) returned 1 [0113.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", lpFilePart=0x0) returned 0x57 [0113.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", lpFilePart=0x0) returned 0x57 [0113.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", lpFilePart=0x0) returned 0x57 [0113.585] SetErrorMode (uMode=0x1) returned 0x0 [0113.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.586] GetFileType (hFile=0x230) returned 0x1 [0113.586] SetErrorMode (uMode=0x0) returned 0x1 [0113.586] GetFileType (hFile=0x230) returned 0x1 [0113.586] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.586] ReadFile (in: hFile=0x230, lpBuffer=0x280b498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x280b498*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.608] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.608] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.608] WriteFile (in: hFile=0x230, lpBuffer=0x280b498*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x280b498*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.608] CloseHandle (hObject=0x230) returned 1 [0113.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", lpFilePart=0x0) returned 0x57 [0113.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg", lpFilePart=0x0) returned 0x57 [0113.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.609] SetErrorMode (uMode=0x1) returned 0x0 [0113.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed8ec600, ftCreationTime.dwHighDateTime=0x1d38c47, ftLastAccessTime.dwLowDateTime=0xed8ec600, ftLastAccessTime.dwHighDateTime=0x1d38c47, ftLastWriteTime.dwLowDateTime=0x462afe85, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1949)) returned 1 [0113.609] SetErrorMode (uMode=0x0) returned 0x1 [0113.609] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7cbffa6f.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7cbffa6f.jpg.partially.cryptonar")) returned 1 [0113.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", lpFilePart=0x0) returned 0x57 [0113.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", lpFilePart=0x0) returned 0x57 [0113.610] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", lpFilePart=0x0) returned 0x57 [0113.610] SetErrorMode (uMode=0x1) returned 0x0 [0113.610] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.611] GetFileType (hFile=0x230) returned 0x1 [0113.611] SetErrorMode (uMode=0x0) returned 0x1 [0113.611] GetFileType (hFile=0x230) returned 0x1 [0113.611] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.611] ReadFile (in: hFile=0x230, lpBuffer=0x280eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x280eba0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.697] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.697] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.698] WriteFile (in: hFile=0x230, lpBuffer=0x280eba0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x280eba0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.698] CloseHandle (hObject=0x230) returned 1 [0113.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", lpFilePart=0x0) returned 0x57 [0113.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg", lpFilePart=0x0) returned 0x57 [0113.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.773] SetErrorMode (uMode=0x1) returned 0x0 [0113.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e074d00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9e074d00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x4642d579, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x194b)) returned 1 [0113.773] SetErrorMode (uMode=0x0) returned 0x1 [0113.773] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\7fe97f77.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\7fe97f77.jpg.partially.cryptonar")) returned 1 [0113.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", lpFilePart=0x0) returned 0x57 [0113.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", lpFilePart=0x0) returned 0x57 [0113.775] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", lpFilePart=0x0) returned 0x57 [0113.775] SetErrorMode (uMode=0x1) returned 0x0 [0113.775] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.792] GetFileType (hFile=0x230) returned 0x1 [0113.792] SetErrorMode (uMode=0x0) returned 0x1 [0113.793] GetFileType (hFile=0x230) returned 0x1 [0113.793] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.793] ReadFile (in: hFile=0x230, lpBuffer=0x28122a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28122a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.794] WriteFile (in: hFile=0x230, lpBuffer=0x28122a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28122a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.794] CloseHandle (hObject=0x230) returned 1 [0113.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", lpFilePart=0x0) returned 0x57 [0113.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg", lpFilePart=0x0) returned 0x57 [0113.794] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.794] SetErrorMode (uMode=0x1) returned 0x0 [0113.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f01c00, ftCreationTime.dwHighDateTime=0x1d2fc56, ftLastAccessTime.dwLowDateTime=0x76f01c00, ftLastAccessTime.dwHighDateTime=0x1d2fc56, ftLastWriteTime.dwLowDateTime=0x46479b4e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7e86)) returned 1 [0113.795] SetErrorMode (uMode=0x0) returned 0x1 [0113.795] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\9c14e2ad.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\9c14e2ad.jpg.partially.cryptonar")) returned 1 [0113.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", lpFilePart=0x0) returned 0x57 [0113.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", lpFilePart=0x0) returned 0x57 [0113.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", lpFilePart=0x0) returned 0x57 [0113.796] SetErrorMode (uMode=0x1) returned 0x0 [0113.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.796] GetFileType (hFile=0x230) returned 0x1 [0113.796] SetErrorMode (uMode=0x0) returned 0x1 [0113.796] GetFileType (hFile=0x230) returned 0x1 [0113.796] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.797] ReadFile (in: hFile=0x230, lpBuffer=0x28159b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28159b0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.831] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.831] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.832] WriteFile (in: hFile=0x230, lpBuffer=0x28159b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28159b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.832] CloseHandle (hObject=0x230) returned 1 [0113.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", lpFilePart=0x0) returned 0x57 [0113.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg", lpFilePart=0x0) returned 0x57 [0113.848] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.848] SetErrorMode (uMode=0x1) returned 0x0 [0113.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cceb580, ftCreationTime.dwHighDateTime=0x1d35e06, ftLastAccessTime.dwLowDateTime=0x1cceb580, ftLastAccessTime.dwHighDateTime=0x1d35e06, ftLastWriteTime.dwLowDateTime=0x464f41e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1236)) returned 1 [0113.848] SetErrorMode (uMode=0x0) returned 0x1 [0113.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a1444597.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a1444597.jpg.partially.cryptonar")) returned 1 [0113.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", lpFilePart=0x0) returned 0x57 [0113.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", lpFilePart=0x0) returned 0x57 [0113.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", lpFilePart=0x0) returned 0x57 [0113.849] SetErrorMode (uMode=0x1) returned 0x0 [0113.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.851] GetFileType (hFile=0x230) returned 0x1 [0113.851] SetErrorMode (uMode=0x0) returned 0x1 [0113.851] GetFileType (hFile=0x230) returned 0x1 [0113.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.851] ReadFile (in: hFile=0x230, lpBuffer=0x28190b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28190b8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.868] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.868] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.868] WriteFile (in: hFile=0x230, lpBuffer=0x28190b8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28190b8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.869] CloseHandle (hObject=0x230) returned 1 [0113.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", lpFilePart=0x0) returned 0x57 [0113.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg", lpFilePart=0x0) returned 0x57 [0113.885] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.885] SetErrorMode (uMode=0x1) returned 0x0 [0113.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf957c780, ftCreationTime.dwHighDateTime=0x1d2d07b, ftLastAccessTime.dwLowDateTime=0xf957c780, ftLastAccessTime.dwHighDateTime=0x1d2d07b, ftLastWriteTime.dwLowDateTime=0x4655e81a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10b4)) returned 1 [0113.885] SetErrorMode (uMode=0x0) returned 0x1 [0113.885] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a229ed41.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a229ed41.jpg.partially.cryptonar")) returned 1 [0113.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", lpFilePart=0x0) returned 0x57 [0113.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", lpFilePart=0x0) returned 0x57 [0113.886] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", lpFilePart=0x0) returned 0x57 [0113.886] SetErrorMode (uMode=0x1) returned 0x0 [0113.887] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.892] GetFileType (hFile=0x230) returned 0x1 [0113.892] SetErrorMode (uMode=0x0) returned 0x1 [0113.892] GetFileType (hFile=0x230) returned 0x1 [0113.892] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.892] ReadFile (in: hFile=0x230, lpBuffer=0x281c7c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x281c7c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.901] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.901] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.902] WriteFile (in: hFile=0x230, lpBuffer=0x281c7c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x281c7c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.902] CloseHandle (hObject=0x230) returned 1 [0113.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", lpFilePart=0x0) returned 0x57 [0113.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg", lpFilePart=0x0) returned 0x57 [0113.902] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0113.902] SetErrorMode (uMode=0x1) returned 0x0 [0113.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf930c00, ftCreationTime.dwHighDateTime=0x1d2d492, ftLastAccessTime.dwLowDateTime=0xcf930c00, ftLastAccessTime.dwHighDateTime=0x1d2d492, ftLastWriteTime.dwLowDateTime=0x46584a01, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12fd)) returned 1 [0113.902] SetErrorMode (uMode=0x0) returned 0x1 [0113.902] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a271c2fa.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a271c2fa.jpg.partially.cryptonar")) returned 1 [0113.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", lpFilePart=0x0) returned 0x57 [0113.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", lpFilePart=0x0) returned 0x57 [0113.904] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", lpFilePart=0x0) returned 0x57 [0113.904] SetErrorMode (uMode=0x1) returned 0x0 [0113.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0113.905] GetFileType (hFile=0x230) returned 0x1 [0113.905] SetErrorMode (uMode=0x0) returned 0x1 [0113.905] GetFileType (hFile=0x230) returned 0x1 [0113.905] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.905] ReadFile (in: hFile=0x230, lpBuffer=0x281fec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x281fec8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0113.943] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0113.943] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0113.943] WriteFile (in: hFile=0x230, lpBuffer=0x281fec8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x281fec8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0113.944] CloseHandle (hObject=0x230) returned 1 [0114.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", lpFilePart=0x0) returned 0x57 [0114.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg", lpFilePart=0x0) returned 0x57 [0114.021] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.021] SetErrorMode (uMode=0x1) returned 0x0 [0114.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x4668fac9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x260b)) returned 1 [0114.022] SetErrorMode (uMode=0x0) returned 0x1 [0114.022] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\a2e35824.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\a2e35824.jpg.partially.cryptonar")) returned 1 [0114.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", lpFilePart=0x0) returned 0x57 [0114.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", lpFilePart=0x0) returned 0x57 [0114.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", lpFilePart=0x0) returned 0x57 [0114.024] SetErrorMode (uMode=0x1) returned 0x0 [0114.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.026] GetFileType (hFile=0x230) returned 0x1 [0114.026] SetErrorMode (uMode=0x0) returned 0x1 [0114.026] GetFileType (hFile=0x230) returned 0x1 [0114.026] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.026] ReadFile (in: hFile=0x230, lpBuffer=0x28235d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28235d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.061] WriteFile (in: hFile=0x230, lpBuffer=0x28235d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28235d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.061] CloseHandle (hObject=0x230) returned 1 [0114.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", lpFilePart=0x0) returned 0x57 [0114.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg", lpFilePart=0x0) returned 0x57 [0114.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.069] SetErrorMode (uMode=0x1) returned 0x0 [0114.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fd11080, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9fd11080, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x467021a0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1bd7)) returned 1 [0114.070] SetErrorMode (uMode=0x0) returned 0x1 [0114.070] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\c00de09f.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\c00de09f.jpg.partially.cryptonar")) returned 1 [0114.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", lpFilePart=0x0) returned 0x57 [0114.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", lpFilePart=0x0) returned 0x57 [0114.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", lpFilePart=0x0) returned 0x57 [0114.073] SetErrorMode (uMode=0x1) returned 0x0 [0114.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.074] GetFileType (hFile=0x230) returned 0x1 [0114.074] SetErrorMode (uMode=0x0) returned 0x1 [0114.074] GetFileType (hFile=0x230) returned 0x1 [0114.074] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.074] ReadFile (in: hFile=0x230, lpBuffer=0x2826cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2826cd8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.076] WriteFile (in: hFile=0x230, lpBuffer=0x2826cd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2826cd8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.076] CloseHandle (hObject=0x230) returned 1 [0114.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", lpFilePart=0x0) returned 0x57 [0114.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg", lpFilePart=0x0) returned 0x57 [0114.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.117] SetErrorMode (uMode=0x1) returned 0x0 [0114.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1023d80, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa1023d80, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x4677708e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2035)) returned 1 [0114.118] SetErrorMode (uMode=0x0) returned 0x1 [0114.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cc2f5fc7.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cc2f5fc7.jpg.partially.cryptonar")) returned 1 [0114.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", lpFilePart=0x0) returned 0x56 [0114.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", lpFilePart=0x0) returned 0x56 [0114.119] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", lpFilePart=0x0) returned 0x56 [0114.119] SetErrorMode (uMode=0x1) returned 0x0 [0114.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.120] GetFileType (hFile=0x230) returned 0x1 [0114.120] SetErrorMode (uMode=0x0) returned 0x1 [0114.120] GetFileType (hFile=0x230) returned 0x1 [0114.120] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.120] ReadFile (in: hFile=0x230, lpBuffer=0x282a3d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x282a3d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.122] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.122] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.122] WriteFile (in: hFile=0x230, lpBuffer=0x282a3d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x282a3d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.123] CloseHandle (hObject=0x230) returned 1 [0114.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", lpFilePart=0x0) returned 0x56 [0114.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg", lpFilePart=0x0) returned 0x56 [0114.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0114.123] SetErrorMode (uMode=0x1) returned 0x0 [0114.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ac50880, ftCreationTime.dwHighDateTime=0x1d30065, ftLastAccessTime.dwLowDateTime=0x4ac50880, ftLastAccessTime.dwHighDateTime=0x1d30065, ftLastWriteTime.dwLowDateTime=0x4679aac8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1407)) returned 1 [0114.123] SetErrorMode (uMode=0x0) returned 0x1 [0114.123] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\cf6a15d.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\cf6a15d.jpg.partially.cryptonar")) returned 1 [0114.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", lpFilePart=0x0) returned 0x56 [0114.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", lpFilePart=0x0) returned 0x56 [0114.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", lpFilePart=0x0) returned 0x56 [0114.125] SetErrorMode (uMode=0x1) returned 0x0 [0114.125] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.126] GetFileType (hFile=0x230) returned 0x1 [0114.126] SetErrorMode (uMode=0x0) returned 0x1 [0114.126] GetFileType (hFile=0x230) returned 0x1 [0114.126] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.126] ReadFile (in: hFile=0x230, lpBuffer=0x282dac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x282dac0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.157] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.157] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.157] WriteFile (in: hFile=0x230, lpBuffer=0x282dac0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x282dac0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.158] CloseHandle (hObject=0x230) returned 1 [0114.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", lpFilePart=0x0) returned 0x56 [0114.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg", lpFilePart=0x0) returned 0x56 [0114.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0114.158] SetErrorMode (uMode=0x1) returned 0x0 [0114.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa199d180, ftCreationTime.dwHighDateTime=0x1d2d46a, ftLastAccessTime.dwLowDateTime=0xa199d180, ftLastAccessTime.dwHighDateTime=0x1d2d46a, ftLastWriteTime.dwLowDateTime=0x467e70dd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0114.159] SetErrorMode (uMode=0x0) returned 0x1 [0114.159] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\da8e59e.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\da8e59e.jpg.partially.cryptonar")) returned 1 [0114.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", lpFilePart=0x0) returned 0x57 [0114.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", lpFilePart=0x0) returned 0x57 [0114.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", lpFilePart=0x0) returned 0x57 [0114.160] SetErrorMode (uMode=0x1) returned 0x0 [0114.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.161] GetFileType (hFile=0x230) returned 0x1 [0114.161] SetErrorMode (uMode=0x0) returned 0x1 [0114.161] GetFileType (hFile=0x230) returned 0x1 [0114.161] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.161] ReadFile (in: hFile=0x230, lpBuffer=0x28311c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28311c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.280] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.280] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.281] WriteFile (in: hFile=0x230, lpBuffer=0x28311c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28311c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.281] CloseHandle (hObject=0x230) returned 1 [0114.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", lpFilePart=0x0) returned 0x57 [0114.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg", lpFilePart=0x0) returned 0x57 [0114.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.281] SetErrorMode (uMode=0x1) returned 0x0 [0114.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94ed880, ftCreationTime.dwHighDateTime=0x1d336df, ftLastAccessTime.dwLowDateTime=0xa94ed880, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0x46918488, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1adb)) returned 1 [0114.282] SetErrorMode (uMode=0x0) returned 0x1 [0114.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\dab752aa.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\dab752aa.jpg.partially.cryptonar")) returned 1 [0114.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg", lpFilePart=0x0) returned 0x57 [0114.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg", lpFilePart=0x0) returned 0x57 [0114.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg", lpFilePart=0x0) returned 0x57 [0114.283] SetErrorMode (uMode=0x1) returned 0x0 [0114.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f0b9fc4a.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.284] GetFileType (hFile=0x230) returned 0x1 [0114.284] SetErrorMode (uMode=0x0) returned 0x1 [0114.284] GetFileType (hFile=0x230) returned 0x1 [0114.284] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.284] ReadFile (in: hFile=0x230, lpBuffer=0x28348c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28348c8*, lpNumberOfBytesRead=0x5ae8b8*=0xfcc, lpOverlapped=0x0) returned 1 [0114.285] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3020, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.285] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.285] WriteFile (in: hFile=0x230, lpBuffer=0x28348c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28348c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.286] CloseHandle (hObject=0x230) returned 1 [0114.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg", lpFilePart=0x0) returned 0x57 [0114.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg", lpFilePart=0x0) returned 0x57 [0114.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.286] SetErrorMode (uMode=0x1) returned 0x0 [0114.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f0b9fc4a.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ef85a00, ftCreationTime.dwHighDateTime=0x1d41f86, ftLastAccessTime.dwLowDateTime=0x5ef85a00, ftLastAccessTime.dwHighDateTime=0x1d41f86, ftLastWriteTime.dwLowDateTime=0x46918488, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfcc)) returned 1 [0114.286] SetErrorMode (uMode=0x0) returned 0x1 [0114.286] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f0b9fc4a.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f0b9fc4a.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f0b9fc4a.jpg.partially.cryptonar")) returned 1 [0114.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", lpFilePart=0x0) returned 0x56 [0114.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", lpFilePart=0x0) returned 0x56 [0114.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", lpFilePart=0x0) returned 0x56 [0114.301] SetErrorMode (uMode=0x1) returned 0x0 [0114.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.305] GetFileType (hFile=0x230) returned 0x1 [0114.305] SetErrorMode (uMode=0x0) returned 0x1 [0114.305] GetFileType (hFile=0x230) returned 0x1 [0114.305] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.305] ReadFile (in: hFile=0x230, lpBuffer=0x2837fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2837fc0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.332] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.332] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.332] WriteFile (in: hFile=0x230, lpBuffer=0x2837fc0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2837fc0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.333] CloseHandle (hObject=0x230) returned 1 [0114.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", lpFilePart=0x0) returned 0x56 [0114.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg", lpFilePart=0x0) returned 0x56 [0114.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0114.333] SetErrorMode (uMode=0x1) returned 0x0 [0114.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dfe9200, ftCreationTime.dwHighDateTime=0x1d2d481, ftLastAccessTime.dwLowDateTime=0x5dfe9200, ftLastAccessTime.dwHighDateTime=0x1d2d481, ftLastWriteTime.dwLowDateTime=0x4698a9e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x163f)) returned 1 [0114.333] SetErrorMode (uMode=0x0) returned 0x1 [0114.333] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f466753.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f466753.jpg.partially.cryptonar")) returned 1 [0114.334] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", lpFilePart=0x0) returned 0x57 [0114.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", lpFilePart=0x0) returned 0x57 [0114.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", lpFilePart=0x0) returned 0x57 [0114.335] SetErrorMode (uMode=0x1) returned 0x0 [0114.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.336] GetFileType (hFile=0x230) returned 0x1 [0114.336] SetErrorMode (uMode=0x0) returned 0x1 [0114.336] GetFileType (hFile=0x230) returned 0x1 [0114.336] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.336] ReadFile (in: hFile=0x230, lpBuffer=0x283b6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x283b6c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.350] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.350] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.351] WriteFile (in: hFile=0x230, lpBuffer=0x283b6c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x283b6c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.351] CloseHandle (hObject=0x230) returned 1 [0114.351] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", lpFilePart=0x0) returned 0x57 [0114.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg", lpFilePart=0x0) returned 0x57 [0114.352] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.352] SetErrorMode (uMode=0x1) returned 0x0 [0114.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5919ee00, ftCreationTime.dwHighDateTime=0x1d2d441, ftLastAccessTime.dwLowDateTime=0x5919ee00, ftLastAccessTime.dwHighDateTime=0x1d2d441, ftLastWriteTime.dwLowDateTime=0x469b0bcc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x160f)) returned 1 [0114.352] SetErrorMode (uMode=0x0) returned 0x1 [0114.352] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f4b839c7.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f4b839c7.jpg.partially.cryptonar")) returned 1 [0114.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", lpFilePart=0x0) returned 0x57 [0114.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", lpFilePart=0x0) returned 0x57 [0114.358] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", lpFilePart=0x0) returned 0x57 [0114.358] SetErrorMode (uMode=0x1) returned 0x0 [0114.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.359] GetFileType (hFile=0x230) returned 0x1 [0114.359] SetErrorMode (uMode=0x0) returned 0x1 [0114.359] GetFileType (hFile=0x230) returned 0x1 [0114.359] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.359] ReadFile (in: hFile=0x230, lpBuffer=0x283edc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x283edc8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.367] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.367] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.367] WriteFile (in: hFile=0x230, lpBuffer=0x283edc8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x283edc8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.367] CloseHandle (hObject=0x230) returned 1 [0114.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", lpFilePart=0x0) returned 0x57 [0114.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg", lpFilePart=0x0) returned 0x57 [0114.368] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.368] SetErrorMode (uMode=0x1) returned 0x0 [0114.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8de12200, ftCreationTime.dwHighDateTime=0x1d2fb21, ftLastAccessTime.dwLowDateTime=0x8de12200, ftLastAccessTime.dwHighDateTime=0x1d2fb21, ftLastWriteTime.dwLowDateTime=0x469de66a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ad9)) returned 1 [0114.368] SetErrorMode (uMode=0x0) returned 0x1 [0114.369] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f67a62c3.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f67a62c3.jpg.partially.cryptonar")) returned 1 [0114.372] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", lpFilePart=0x0) returned 0x57 [0114.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", lpFilePart=0x0) returned 0x57 [0114.373] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", lpFilePart=0x0) returned 0x57 [0114.374] SetErrorMode (uMode=0x1) returned 0x0 [0114.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.376] GetFileType (hFile=0x230) returned 0x1 [0114.376] SetErrorMode (uMode=0x0) returned 0x1 [0114.377] GetFileType (hFile=0x230) returned 0x1 [0114.377] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.377] ReadFile (in: hFile=0x230, lpBuffer=0x28424d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28424d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.403] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.403] WriteFile (in: hFile=0x230, lpBuffer=0x28424d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28424d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.404] CloseHandle (hObject=0x230) returned 1 [0114.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", lpFilePart=0x0) returned 0x57 [0114.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg", lpFilePart=0x0) returned 0x57 [0114.405] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.405] SetErrorMode (uMode=0x1) returned 0x0 [0114.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1023d80, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0xa1023d80, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x46a4964e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1358)) returned 1 [0114.405] SetErrorMode (uMode=0x0) returned 0x1 [0114.405] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f76d6757.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f76d6757.jpg.partially.cryptonar")) returned 1 [0114.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", lpFilePart=0x0) returned 0x57 [0114.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", lpFilePart=0x0) returned 0x57 [0114.407] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", lpFilePart=0x0) returned 0x57 [0114.407] SetErrorMode (uMode=0x1) returned 0x0 [0114.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.408] GetFileType (hFile=0x230) returned 0x1 [0114.408] SetErrorMode (uMode=0x0) returned 0x1 [0114.408] GetFileType (hFile=0x230) returned 0x1 [0114.408] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.409] ReadFile (in: hFile=0x230, lpBuffer=0x2845bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2845bd8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.446] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.446] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.446] WriteFile (in: hFile=0x230, lpBuffer=0x2845bd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2845bd8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.446] CloseHandle (hObject=0x230) returned 1 [0114.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", lpFilePart=0x0) returned 0x57 [0114.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg", lpFilePart=0x0) returned 0x57 [0114.529] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.529] SetErrorMode (uMode=0x1) returned 0x0 [0114.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf209e00, ftCreationTime.dwHighDateTime=0x1d30212, ftLastAccessTime.dwLowDateTime=0xdf209e00, ftLastAccessTime.dwHighDateTime=0x1d30212, ftLastWriteTime.dwLowDateTime=0x46b7aeb6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b)) returned 1 [0114.529] SetErrorMode (uMode=0x0) returned 0x1 [0114.529] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\f7f275e5.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\f7f275e5.jpg.partially.cryptonar")) returned 1 [0114.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", lpFilePart=0x0) returned 0x57 [0114.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", lpFilePart=0x0) returned 0x57 [0114.538] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", lpFilePart=0x0) returned 0x57 [0114.538] SetErrorMode (uMode=0x1) returned 0x0 [0114.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.539] GetFileType (hFile=0x230) returned 0x1 [0114.539] SetErrorMode (uMode=0x0) returned 0x1 [0114.540] GetFileType (hFile=0x230) returned 0x1 [0114.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.540] ReadFile (in: hFile=0x230, lpBuffer=0x28492e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28492e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.571] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.571] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.571] WriteFile (in: hFile=0x230, lpBuffer=0x28492e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28492e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.572] CloseHandle (hObject=0x230) returned 1 [0114.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", lpFilePart=0x0) returned 0x57 [0114.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg", lpFilePart=0x0) returned 0x57 [0114.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.585] SetErrorMode (uMode=0x1) returned 0x0 [0114.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f387a00, ftCreationTime.dwHighDateTime=0x1d008f6, ftLastAccessTime.dwLowDateTime=0x9f387a00, ftLastAccessTime.dwHighDateTime=0x1d008f6, ftLastWriteTime.dwLowDateTime=0x46bece46, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24e3)) returned 1 [0114.586] SetErrorMode (uMode=0x0) returned 0x1 [0114.586] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\fb970b75.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\notifications\\wpnidm\\fb970b75.jpg.partially.cryptonar")) returned 1 [0114.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", lpFilePart=0x0) returned 0x93 [0114.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", lpFilePart=0x0) returned 0x93 [0114.587] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", lpFilePart=0x0) returned 0x93 [0114.588] SetErrorMode (uMode=0x1) returned 0x0 [0114.588] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_06f90924-1e5d-474b-ba1f-65c4b5caf36a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.591] GetFileType (hFile=0x230) returned 0x1 [0114.591] SetErrorMode (uMode=0x0) returned 0x1 [0114.592] GetFileType (hFile=0x230) returned 0x1 [0114.592] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.592] ReadFile (in: hFile=0x230, lpBuffer=0x284cbd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x284cbd0*, lpNumberOfBytesRead=0x5ae8b8*=0x155, lpOverlapped=0x0) returned 1 [0114.593] ReadFile (in: hFile=0x230, lpBuffer=0x284cbd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x284cbd0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0114.593] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.593] WriteFile (in: hFile=0x230, lpBuffer=0x284cbd0*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x284cbd0*, lpNumberOfBytesWritten=0x5ae8a8*=0x155, lpOverlapped=0x0) returned 1 [0114.593] CloseHandle (hObject=0x230) returned 1 [0114.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", lpFilePart=0x0) returned 0x93 [0114.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a", lpFilePart=0x0) returned 0x93 [0114.594] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a.partially.cryptoNar", lpFilePart=0x0) returned 0xa7 [0114.594] SetErrorMode (uMode=0x1) returned 0x0 [0114.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_06f90924-1e5d-474b-ba1f-65c4b5caf36a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ccbf1f5, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x2ccbf1f5, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x46c13187, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1 [0114.594] SetErrorMode (uMode=0x0) returned 0x1 [0114.594] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_06f90924-1e5d-474b-ba1f-65c4b5caf36a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_06f90924-1e5d-474b-ba1f-65c4b5caf36a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_06f90924-1e5d-474b-ba1f-65c4b5caf36a.partially.cryptonar")) returned 1 [0114.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", lpFilePart=0x0) returned 0x93 [0114.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", lpFilePart=0x0) returned 0x93 [0114.596] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", lpFilePart=0x0) returned 0x93 [0114.596] SetErrorMode (uMode=0x1) returned 0x0 [0114.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.598] GetFileType (hFile=0x230) returned 0x1 [0114.598] SetErrorMode (uMode=0x0) returned 0x1 [0114.599] GetFileType (hFile=0x230) returned 0x1 [0114.599] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.599] ReadFile (in: hFile=0x230, lpBuffer=0x2850658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2850658*, lpNumberOfBytesRead=0x5ae8b8*=0x3e3, lpOverlapped=0x0) returned 1 [0114.643] ReadFile (in: hFile=0x230, lpBuffer=0x2850658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2850658*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0114.643] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.644] WriteFile (in: hFile=0x230, lpBuffer=0x2850658*, nNumberOfBytesToWrite=0x3e3, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2850658*, lpNumberOfBytesWritten=0x5ae8a8*=0x3e3, lpOverlapped=0x0) returned 1 [0114.644] CloseHandle (hObject=0x230) returned 1 [0114.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", lpFilePart=0x0) returned 0x93 [0114.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d", lpFilePart=0x0) returned 0x93 [0114.644] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d.partially.cryptoNar", lpFilePart=0x0) returned 0xa7 [0114.644] SetErrorMode (uMode=0x1) returned 0x0 [0114.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a57c84, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27a57c84, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x46c85933, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e3)) returned 1 [0114.644] SetErrorMode (uMode=0x0) returned 0x1 [0114.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_6e1b9325-f1be-48ba-a974-ab12f8ee0c5d.partially.cryptonar")) returned 1 [0114.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", lpFilePart=0x0) returned 0x93 [0114.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", lpFilePart=0x0) returned 0x93 [0114.645] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", lpFilePart=0x0) returned 0x93 [0114.645] SetErrorMode (uMode=0x1) returned 0x0 [0114.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_85525a38-be22-4966-b0fc-b808e4124a0f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.646] GetFileType (hFile=0x230) returned 0x1 [0114.646] SetErrorMode (uMode=0x0) returned 0x1 [0114.646] GetFileType (hFile=0x230) returned 0x1 [0114.646] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.646] ReadFile (in: hFile=0x230, lpBuffer=0x2854600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2854600*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.667] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.667] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.667] WriteFile (in: hFile=0x230, lpBuffer=0x2854600*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2854600*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.668] CloseHandle (hObject=0x230) returned 1 [0114.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", lpFilePart=0x0) returned 0x93 [0114.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f", lpFilePart=0x0) returned 0x93 [0114.684] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f.partially.cryptoNar", lpFilePart=0x0) returned 0xa7 [0114.684] SetErrorMode (uMode=0x1) returned 0x0 [0114.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_85525a38-be22-4966-b0fc-b808e4124a0f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c93f3d, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27c93f3d, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x46cf87ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46af)) returned 1 [0114.684] SetErrorMode (uMode=0x0) returned 0x1 [0114.684] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_85525a38-be22-4966-b0fc-b808e4124a0f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_85525a38-be22-4966-b0fc-b808e4124a0f.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_85525a38-be22-4966-b0fc-b808e4124a0f.partially.cryptonar")) returned 1 [0114.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", lpFilePart=0x0) returned 0x93 [0114.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", lpFilePart=0x0) returned 0x93 [0114.686] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", lpFilePart=0x0) returned 0x93 [0114.686] SetErrorMode (uMode=0x1) returned 0x0 [0114.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bd7521a2-be87-486f-928a-80ffca5b0219"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.686] GetFileType (hFile=0x230) returned 0x1 [0114.686] SetErrorMode (uMode=0x0) returned 0x1 [0114.686] GetFileType (hFile=0x230) returned 0x1 [0114.686] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.687] ReadFile (in: hFile=0x230, lpBuffer=0x28581c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28581c0*, lpNumberOfBytesRead=0x5ae8b8*=0x155, lpOverlapped=0x0) returned 1 [0114.687] ReadFile (in: hFile=0x230, lpBuffer=0x28581c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28581c0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0114.687] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.688] WriteFile (in: hFile=0x230, lpBuffer=0x28581c0*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28581c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x155, lpOverlapped=0x0) returned 1 [0114.688] CloseHandle (hObject=0x230) returned 1 [0114.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", lpFilePart=0x0) returned 0x93 [0114.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219", lpFilePart=0x0) returned 0x93 [0114.688] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219.partially.cryptoNar", lpFilePart=0x0) returned 0xa7 [0114.688] SetErrorMode (uMode=0x1) returned 0x0 [0114.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bd7521a2-be87-486f-928a-80ffca5b0219"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc98f96, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x2cc98f96, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x46cf87ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x155)) returned 1 [0114.688] SetErrorMode (uMode=0x0) returned 0x1 [0114.688] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bd7521a2-be87-486f-928a-80ffca5b0219"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bd7521a2-be87-486f-928a-80ffca5b0219.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bd7521a2-be87-486f-928a-80ffca5b0219.partially.cryptonar")) returned 1 [0114.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", lpFilePart=0x0) returned 0x93 [0114.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", lpFilePart=0x0) returned 0x93 [0114.689] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", lpFilePart=0x0) returned 0x93 [0114.690] SetErrorMode (uMode=0x1) returned 0x0 [0114.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.690] GetFileType (hFile=0x230) returned 0x1 [0114.690] SetErrorMode (uMode=0x0) returned 0x1 [0114.690] GetFileType (hFile=0x230) returned 0x1 [0114.691] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.691] ReadFile (in: hFile=0x230, lpBuffer=0x285bc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285bc48*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.695] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.695] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.695] WriteFile (in: hFile=0x230, lpBuffer=0x285bc48*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x285bc48*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.695] CloseHandle (hObject=0x230) returned 1 [0114.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", lpFilePart=0x0) returned 0x93 [0114.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8", lpFilePart=0x0) returned 0x93 [0114.695] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8.partially.cryptoNar", lpFilePart=0x0) returned 0xa7 [0114.695] SetErrorMode (uMode=0x1) returned 0x0 [0114.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd0b69d, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x2cd0b69d, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x46cf87ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39d2)) returned 1 [0114.696] SetErrorMode (uMode=0x0) returned 0x1 [0114.696] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_bf1cb9b0-ce8c-44e7-bb1c-52ad1299acf8.partially.cryptonar")) returned 1 [0114.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", lpFilePart=0x0) returned 0x93 [0114.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", lpFilePart=0x0) returned 0x93 [0114.698] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", lpFilePart=0x0) returned 0x93 [0114.698] SetErrorMode (uMode=0x1) returned 0x0 [0114.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.699] GetFileType (hFile=0x230) returned 0x1 [0114.699] SetErrorMode (uMode=0x0) returned 0x1 [0114.699] GetFileType (hFile=0x230) returned 0x1 [0114.700] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.700] ReadFile (in: hFile=0x230, lpBuffer=0x285f808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x285f808*, lpNumberOfBytesRead=0x5ae8b8*=0x972, lpOverlapped=0x0) returned 1 [0114.702] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1394, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.702] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.702] WriteFile (in: hFile=0x230, lpBuffer=0x285f808*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x285f808*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.702] CloseHandle (hObject=0x230) returned 1 [0114.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", lpFilePart=0x0) returned 0x93 [0114.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c", lpFilePart=0x0) returned 0x93 [0114.703] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c.partially.cryptoNar", lpFilePart=0x0) returned 0xa7 [0114.703] SetErrorMode (uMode=0x1) returned 0x0 [0114.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27d2ca12, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27d2ca12, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x46d1e0f2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x972)) returned 1 [0114.703] SetErrorMode (uMode=0x0) returned 0x1 [0114.703] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheEntry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheentry_e1d59afd-fedf-4dad-a2f3-bba3e7eabe5c.partially.cryptonar")) returned 1 [0114.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", lpFilePart=0x0) returned 0x6e [0114.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", lpFilePart=0x0) returned 0x6e [0114.705] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", lpFilePart=0x0) returned 0x6e [0114.705] SetErrorMode (uMode=0x1) returned 0x0 [0114.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheindex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.706] GetFileType (hFile=0x230) returned 0x1 [0114.706] SetErrorMode (uMode=0x0) returned 0x1 [0114.706] GetFileType (hFile=0x230) returned 0x1 [0114.706] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.706] ReadFile (in: hFile=0x230, lpBuffer=0x2863260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2863260*, lpNumberOfBytesRead=0x5ae8b8*=0x781, lpOverlapped=0x0) returned 1 [0114.734] SetFilePointer (in: hFile=0x230, lDistanceToMove=-897, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.734] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.734] WriteFile (in: hFile=0x230, lpBuffer=0x2863260*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2863260*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.734] CloseHandle (hObject=0x230) returned 1 [0114.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", lpFilePart=0x0) returned 0x6e [0114.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex", lpFilePart=0x0) returned 0x6e [0114.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex.partially.cryptoNar", lpFilePart=0x0) returned 0x82 [0114.735] SetErrorMode (uMode=0x1) returned 0x0 [0114.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheindex"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27c21964, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x27c21964, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x46d7a6d3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x781)) returned 1 [0114.735] SetErrorMode (uMode=0x0) returned 0x1 [0114.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheindex"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\CommandAnalysis\\PowerShell_AnalysisCacheIndex.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\powershell\\commandanalysis\\powershell_analysiscacheindex.partially.cryptonar")) returned 1 [0114.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x58 [0114.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x58 [0114.736] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x58 [0114.736] SetErrorMode (uMode=0x1) returned 0x0 [0114.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1079934665\\2034961148.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.739] GetFileType (hFile=0x230) returned 0x1 [0114.739] SetErrorMode (uMode=0x0) returned 0x1 [0114.739] GetFileType (hFile=0x230) returned 0x1 [0114.739] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.739] ReadFile (in: hFile=0x230, lpBuffer=0x2866aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2866aa0*, lpNumberOfBytesRead=0x5ae8b8*=0x730, lpOverlapped=0x0) returned 1 [0114.770] SetFilePointer (in: hFile=0x230, lDistanceToMove=-816, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.771] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.771] WriteFile (in: hFile=0x230, lpBuffer=0x2866aa0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2866aa0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.773] CloseHandle (hObject=0x230) returned 1 [0114.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x58 [0114.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x58 [0114.773] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0114.773] SetErrorMode (uMode=0x1) returned 0x0 [0114.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1079934665\\2034961148.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbecbcdfa, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbecbcdfa, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x46dd10ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0114.773] SetErrorMode (uMode=0x0) returned 0x1 [0114.774] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1079934665\\2034961148.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1079934665\\2034961148.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1079934665\\2034961148.pri.partially.cryptonar")) returned 1 [0114.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x58 [0114.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x58 [0114.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x58 [0114.806] SetErrorMode (uMode=0x1) returned 0x0 [0114.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.806] GetFileType (hFile=0x230) returned 0x1 [0114.806] SetErrorMode (uMode=0x0) returned 0x1 [0114.806] GetFileType (hFile=0x230) returned 0x1 [0114.806] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.806] ReadFile (in: hFile=0x230, lpBuffer=0x286a1e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x286a1e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.831] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.831] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.832] WriteFile (in: hFile=0x230, lpBuffer=0x286a1e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x286a1e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.832] CloseHandle (hObject=0x230) returned 1 [0114.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x58 [0114.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x58 [0114.849] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0114.849] SetErrorMode (uMode=0x1) returned 0x0 [0114.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb19963d4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb19963d4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x46e90044, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0114.849] SetErrorMode (uMode=0x0) returned 0x1 [0114.849] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1605653898\\4275773285.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1605653898\\4275773285.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1605653898\\4275773285.pri.partially.cryptonar")) returned 1 [0114.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x57 [0114.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x57 [0114.851] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x57 [0114.851] SetErrorMode (uMode=0x1) returned 0x0 [0114.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1978304864\\923683402.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.852] GetFileType (hFile=0x230) returned 0x1 [0114.852] SetErrorMode (uMode=0x0) returned 0x1 [0114.852] GetFileType (hFile=0x230) returned 0x1 [0114.852] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.853] ReadFile (in: hFile=0x230, lpBuffer=0x286d918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x286d918*, lpNumberOfBytesRead=0x5ae8b8*=0xa30, lpOverlapped=0x0) returned 1 [0114.854] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1584, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.854] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.854] WriteFile (in: hFile=0x230, lpBuffer=0x286d918*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x286d918*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.855] CloseHandle (hObject=0x230) returned 1 [0114.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x57 [0114.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x57 [0114.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.855] SetErrorMode (uMode=0x1) returned 0x0 [0114.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1978304864\\923683402.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb13eca61, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb13eca61, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x46e90044, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa30)) returned 1 [0114.855] SetErrorMode (uMode=0x0) returned 0x1 [0114.855] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1978304864\\923683402.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1978304864\\923683402.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\1978304864\\923683402.pri.partially.cryptonar")) returned 1 [0114.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0x58 [0114.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0x58 [0114.856] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0x58 [0114.856] SetErrorMode (uMode=0x1) returned 0x0 [0114.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2107319684\\2467780804.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.857] GetFileType (hFile=0x230) returned 0x1 [0114.857] SetErrorMode (uMode=0x0) returned 0x1 [0114.857] GetFileType (hFile=0x230) returned 0x1 [0114.858] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.858] ReadFile (in: hFile=0x230, lpBuffer=0x2871038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2871038*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0114.859] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.859] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.859] WriteFile (in: hFile=0x230, lpBuffer=0x2871038*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2871038*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.860] CloseHandle (hObject=0x230) returned 1 [0114.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0x58 [0114.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0x58 [0114.860] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0114.860] SetErrorMode (uMode=0x1) returned 0x0 [0114.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2107319684\\2467780804.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbce79bc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbce79bc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x46e90044, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22d0)) returned 1 [0114.860] SetErrorMode (uMode=0x0) returned 0x1 [0114.860] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2107319684\\2467780804.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2107319684\\2467780804.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2107319684\\2467780804.pri.partially.cryptonar")) returned 1 [0114.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0x57 [0114.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0x57 [0114.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0x57 [0114.861] SetErrorMode (uMode=0x1) returned 0x0 [0114.861] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\226732975\\2698495915.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.862] GetFileType (hFile=0x230) returned 0x1 [0114.862] SetErrorMode (uMode=0x0) returned 0x1 [0114.862] GetFileType (hFile=0x230) returned 0x1 [0114.862] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.863] ReadFile (in: hFile=0x230, lpBuffer=0x2874768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2874768*, lpNumberOfBytesRead=0x5ae8b8*=0x710, lpOverlapped=0x0) returned 1 [0114.938] SetFilePointer (in: hFile=0x230, lDistanceToMove=-784, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.938] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.938] WriteFile (in: hFile=0x230, lpBuffer=0x2874768*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2874768*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.938] CloseHandle (hObject=0x230) returned 1 [0114.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0x57 [0114.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0x57 [0114.938] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.938] SetErrorMode (uMode=0x1) returned 0x0 [0114.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\226732975\\2698495915.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb242ab2f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb242ab2f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x46f53231, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0114.939] SetErrorMode (uMode=0x0) returned 0x1 [0114.939] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\226732975\\2698495915.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\226732975\\2698495915.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\226732975\\2698495915.pri.partially.cryptonar")) returned 1 [0114.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0x57 [0114.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0x57 [0114.940] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0x57 [0114.941] SetErrorMode (uMode=0x1) returned 0x0 [0114.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2570292521\\231755001.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.942] GetFileType (hFile=0x230) returned 0x1 [0114.942] SetErrorMode (uMode=0x0) returned 0x1 [0114.942] GetFileType (hFile=0x230) returned 0x1 [0114.942] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.942] ReadFile (in: hFile=0x230, lpBuffer=0x2877e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2877e70*, lpNumberOfBytesRead=0x5ae8b8*=0x748, lpOverlapped=0x0) returned 1 [0114.953] SetFilePointer (in: hFile=0x230, lDistanceToMove=-840, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.953] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.953] WriteFile (in: hFile=0x230, lpBuffer=0x2877e70*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2877e70*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.953] CloseHandle (hObject=0x230) returned 1 [0114.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0x57 [0114.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0x57 [0114.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0114.954] SetErrorMode (uMode=0x1) returned 0x0 [0114.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2570292521\\231755001.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c3bb52, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb7c3bb52, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x46f74e02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x748)) returned 1 [0114.954] SetErrorMode (uMode=0x0) returned 0x1 [0114.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2570292521\\231755001.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2570292521\\231755001.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2570292521\\231755001.pri.partially.cryptonar")) returned 1 [0114.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x58 [0114.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x58 [0114.955] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x58 [0114.955] SetErrorMode (uMode=0x1) returned 0x0 [0114.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2577507833\\3967450640.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.956] GetFileType (hFile=0x230) returned 0x1 [0114.956] SetErrorMode (uMode=0x0) returned 0x1 [0114.956] GetFileType (hFile=0x230) returned 0x1 [0114.956] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.956] ReadFile (in: hFile=0x230, lpBuffer=0x287b590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x287b590*, lpNumberOfBytesRead=0x5ae8b8*=0xde0, lpOverlapped=0x0) returned 1 [0114.963] SetFilePointer (in: hFile=0x230, lDistanceToMove=-2528, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0114.964] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.964] WriteFile (in: hFile=0x230, lpBuffer=0x287b590*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x287b590*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0114.965] CloseHandle (hObject=0x230) returned 1 [0114.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x58 [0114.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0x58 [0114.967] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0114.967] SetErrorMode (uMode=0x1) returned 0x0 [0114.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2577507833\\3967450640.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4b5b6bb, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4b5b6bb, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x46f9bea2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0114.969] SetErrorMode (uMode=0x0) returned 0x1 [0114.969] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2577507833\\3967450640.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2577507833\\3967450640.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2577507833\\3967450640.pri.partially.cryptonar")) returned 1 [0114.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x57 [0114.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x57 [0114.985] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x57 [0114.985] SetErrorMode (uMode=0x1) returned 0x0 [0114.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2646675675\\806068533.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0114.987] GetFileType (hFile=0x230) returned 0x1 [0114.987] SetErrorMode (uMode=0x0) returned 0x1 [0114.987] GetFileType (hFile=0x230) returned 0x1 [0114.987] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0114.987] ReadFile (in: hFile=0x230, lpBuffer=0x287ecc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x287ecc0*, lpNumberOfBytesRead=0x5ae8b8*=0xfd8, lpOverlapped=0x0) returned 1 [0115.014] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3032, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.014] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.014] WriteFile (in: hFile=0x230, lpBuffer=0x287ecc0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x287ecc0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.015] CloseHandle (hObject=0x230) returned 1 [0115.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x57 [0115.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x57 [0115.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0115.015] SetErrorMode (uMode=0x1) returned 0x0 [0115.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2646675675\\806068533.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd89f045, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd89f045, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4700d835, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfd8)) returned 1 [0115.015] SetErrorMode (uMode=0x0) returned 0x1 [0115.015] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2646675675\\806068533.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2646675675\\806068533.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\2646675675\\806068533.pri.partially.cryptonar")) returned 1 [0115.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x58 [0115.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x58 [0115.018] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x58 [0115.018] SetErrorMode (uMode=0x1) returned 0x0 [0115.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3053798886\\3825186184.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.019] GetFileType (hFile=0x230) returned 0x1 [0115.019] SetErrorMode (uMode=0x0) returned 0x1 [0115.019] GetFileType (hFile=0x230) returned 0x1 [0115.019] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.019] ReadFile (in: hFile=0x230, lpBuffer=0x28823e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28823e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.022] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.022] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.022] WriteFile (in: hFile=0x230, lpBuffer=0x28823e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28823e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.022] CloseHandle (hObject=0x230) returned 1 [0115.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x58 [0115.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x58 [0115.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0115.022] SetErrorMode (uMode=0x1) returned 0x0 [0115.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3053798886\\3825186184.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb09320c6, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb09320c6, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x470339a1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c10)) returned 1 [0115.023] SetErrorMode (uMode=0x0) returned 0x1 [0115.023] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3053798886\\3825186184.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3053798886\\3825186184.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3053798886\\3825186184.pri.partially.cryptonar")) returned 1 [0115.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x58 [0115.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x58 [0115.024] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x58 [0115.024] SetErrorMode (uMode=0x1) returned 0x0 [0115.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3295484897\\2504515037.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.026] GetFileType (hFile=0x230) returned 0x1 [0115.026] SetErrorMode (uMode=0x0) returned 0x1 [0115.026] GetFileType (hFile=0x230) returned 0x1 [0115.026] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.026] ReadFile (in: hFile=0x230, lpBuffer=0x2885b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2885b28*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.031] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.031] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.032] WriteFile (in: hFile=0x230, lpBuffer=0x2885b28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2885b28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.033] CloseHandle (hObject=0x230) returned 1 [0115.033] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x58 [0115.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0x58 [0115.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0115.034] SetErrorMode (uMode=0x1) returned 0x0 [0115.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb897ee9d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb897ee9d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x470339a1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0115.035] SetErrorMode (uMode=0x0) returned 0x1 [0115.035] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3295484897\\2504515037.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3295484897\\2504515037.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3295484897\\2504515037.pri.partially.cryptonar")) returned 1 [0115.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x58 [0115.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x58 [0115.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x58 [0115.037] SetErrorMode (uMode=0x1) returned 0x0 [0115.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.038] GetFileType (hFile=0x230) returned 0x1 [0115.038] SetErrorMode (uMode=0x0) returned 0x1 [0115.038] GetFileType (hFile=0x230) returned 0x1 [0115.038] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.038] ReadFile (in: hFile=0x230, lpBuffer=0x2889270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2889270*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.081] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.082] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.082] WriteFile (in: hFile=0x230, lpBuffer=0x2889270*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2889270*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.084] CloseHandle (hObject=0x230) returned 1 [0115.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x58 [0115.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0x58 [0115.135] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0115.135] SetErrorMode (uMode=0x1) returned 0x0 [0115.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc3e8880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc3e8880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4713eafb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0115.135] SetErrorMode (uMode=0x0) returned 0x1 [0115.136] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3375042201\\1858609885.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3375042201\\1858609885.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3375042201\\1858609885.pri.partially.cryptonar")) returned 1 [0115.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x58 [0115.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x58 [0115.137] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x58 [0115.137] SetErrorMode (uMode=0x1) returned 0x0 [0115.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.138] GetFileType (hFile=0x230) returned 0x1 [0115.138] SetErrorMode (uMode=0x0) returned 0x1 [0115.138] GetFileType (hFile=0x230) returned 0x1 [0115.138] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.138] ReadFile (in: hFile=0x230, lpBuffer=0x288c9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x288c9b8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.252] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.253] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.253] WriteFile (in: hFile=0x230, lpBuffer=0x288c9b8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x288c9b8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.253] CloseHandle (hObject=0x230) returned 1 [0115.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x58 [0115.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x58 [0115.271] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0115.271] SetErrorMode (uMode=0x1) returned 0x0 [0115.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ca4804, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb5ca4804, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47295e69, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0115.271] SetErrorMode (uMode=0x0) returned 0x1 [0115.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3530508098\\2495906576.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3530508098\\2495906576.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3530508098\\2495906576.pri.partially.cryptonar")) returned 1 [0115.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x57 [0115.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x57 [0115.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x57 [0115.273] SetErrorMode (uMode=0x1) returned 0x0 [0115.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3705566220\\624664733.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.275] GetFileType (hFile=0x230) returned 0x1 [0115.275] SetErrorMode (uMode=0x0) returned 0x1 [0115.275] GetFileType (hFile=0x230) returned 0x1 [0115.275] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.277] ReadFile (in: hFile=0x230, lpBuffer=0x28900e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28900e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.305] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.305] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.306] WriteFile (in: hFile=0x230, lpBuffer=0x28900e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28900e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.306] CloseHandle (hObject=0x230) returned 1 [0115.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x57 [0115.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0x57 [0115.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0115.323] SetErrorMode (uMode=0x1) returned 0x0 [0115.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb019889b, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb019889b, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4730d4b5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0115.323] SetErrorMode (uMode=0x0) returned 0x1 [0115.323] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3705566220\\624664733.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3705566220\\624664733.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3705566220\\624664733.pri.partially.cryptonar")) returned 1 [0115.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0x58 [0115.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0x58 [0115.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0x58 [0115.326] SetErrorMode (uMode=0x1) returned 0x0 [0115.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3779757838\\1034590242.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.328] GetFileType (hFile=0x230) returned 0x1 [0115.328] SetErrorMode (uMode=0x0) returned 0x1 [0115.328] GetFileType (hFile=0x230) returned 0x1 [0115.328] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.328] ReadFile (in: hFile=0x230, lpBuffer=0x2893808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2893808*, lpNumberOfBytesRead=0x5ae8b8*=0x728, lpOverlapped=0x0) returned 1 [0115.364] SetFilePointer (in: hFile=0x230, lDistanceToMove=-808, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.364] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.364] WriteFile (in: hFile=0x230, lpBuffer=0x2893808*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2893808*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.365] CloseHandle (hObject=0x230) returned 1 [0115.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0x58 [0115.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0x58 [0115.365] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0115.365] SetErrorMode (uMode=0x1) returned 0x0 [0115.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3779757838\\1034590242.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad661d8c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xad661d8c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4737ac46, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0115.365] SetErrorMode (uMode=0x0) returned 0x1 [0115.365] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3779757838\\1034590242.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3779757838\\1034590242.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3779757838\\1034590242.pri.partially.cryptonar")) returned 1 [0115.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x58 [0115.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x58 [0115.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x58 [0115.367] SetErrorMode (uMode=0x1) returned 0x0 [0115.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3782802250\\2924287686.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.367] GetFileType (hFile=0x230) returned 0x1 [0115.368] SetErrorMode (uMode=0x0) returned 0x1 [0115.368] GetFileType (hFile=0x230) returned 0x1 [0115.368] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.368] ReadFile (in: hFile=0x230, lpBuffer=0x2896f50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2896f50*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.375] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.375] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.375] WriteFile (in: hFile=0x230, lpBuffer=0x2896f50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2896f50*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.375] CloseHandle (hObject=0x230) returned 1 [0115.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x58 [0115.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x58 [0115.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0115.383] SetErrorMode (uMode=0x1) returned 0x0 [0115.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3782802250\\2924287686.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0e8f58a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0e8f58a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x473a1278, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19f0)) returned 1 [0115.384] SetErrorMode (uMode=0x0) returned 0x1 [0115.384] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3782802250\\2924287686.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\3782802250\\2924287686.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\3782802250\\2924287686.pri.partially.cryptonar")) returned 1 [0115.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", lpFilePart=0x0) returned 0x56 [0115.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", lpFilePart=0x0) returned 0x56 [0115.386] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", lpFilePart=0x0) returned 0x56 [0115.386] SetErrorMode (uMode=0x1) returned 0x0 [0115.386] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\860568095\\965632691.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.387] GetFileType (hFile=0x230) returned 0x1 [0115.387] SetErrorMode (uMode=0x0) returned 0x1 [0115.387] GetFileType (hFile=0x230) returned 0x1 [0115.387] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.387] ReadFile (in: hFile=0x230, lpBuffer=0x289a680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x289a680*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.394] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.394] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.394] WriteFile (in: hFile=0x230, lpBuffer=0x289a680*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x289a680*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.395] CloseHandle (hObject=0x230) returned 1 [0115.395] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", lpFilePart=0x0) returned 0x56 [0115.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri", lpFilePart=0x0) returned 0x56 [0115.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0115.396] SetErrorMode (uMode=0x1) returned 0x0 [0115.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\860568095\\965632691.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf61da9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbcf61da9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x473c7368, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20a0)) returned 1 [0115.396] SetErrorMode (uMode=0x0) returned 0x1 [0115.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\860568095\\965632691.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\860568095\\965632691.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\860568095\\965632691.pri.partially.cryptonar")) returned 1 [0115.397] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0xa4 [0115.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0xa4 [0115.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0xa4 [0115.398] SetErrorMode (uMode=0x1) returned 0x0 [0115.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.399] GetFileType (hFile=0x230) returned 0x1 [0115.399] SetErrorMode (uMode=0x0) returned 0x1 [0115.399] GetFileType (hFile=0x230) returned 0x1 [0115.399] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.399] ReadFile (in: hFile=0x230, lpBuffer=0x289df68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x289df68*, lpNumberOfBytesRead=0x5ae8b8*=0x728, lpOverlapped=0x0) returned 1 [0115.417] SetFilePointer (in: hFile=0x230, lDistanceToMove=-808, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.417] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.417] WriteFile (in: hFile=0x230, lpBuffer=0x289df68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x289df68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.418] CloseHandle (hObject=0x230) returned 1 [0115.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0xa4 [0115.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri", lpFilePart=0x0) returned 0xa4 [0115.419] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xb8 [0115.419] SetErrorMode (uMode=0x1) returned 0x0 [0115.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf5869d0, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaf5869d0, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x473ed5a4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0115.420] SetErrorMode (uMode=0x0) returned 0x1 [0115.420] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\3779757838\\1034590242.pri.partially.cryptonar")) returned 1 [0115.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x9a [0115.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x9a [0115.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x9a [0115.424] SetErrorMode (uMode=0x1) returned 0x0 [0115.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.425] GetFileType (hFile=0x230) returned 0x1 [0115.425] SetErrorMode (uMode=0x0) returned 0x1 [0115.425] GetFileType (hFile=0x230) returned 0x1 [0115.425] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.425] ReadFile (in: hFile=0x230, lpBuffer=0x28a1bc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a1bc0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.479] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.479] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.479] WriteFile (in: hFile=0x230, lpBuffer=0x28a1bc0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a1bc0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.479] CloseHandle (hObject=0x230) returned 1 [0115.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x9a [0115.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri", lpFilePart=0x0) returned 0x9a [0115.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0115.480] SetErrorMode (uMode=0x1) returned 0x0 [0115.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb097e578, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb097e578, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47485e28, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c10)) returned 1 [0115.480] SetErrorMode (uMode=0x0) returned 0x1 [0115.480] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\3053798886\\3825186184.pri.partially.cryptonar")) returned 1 [0115.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x98 [0115.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x98 [0115.482] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x98 [0115.482] SetErrorMode (uMode=0x1) returned 0x0 [0115.482] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.483] GetFileType (hFile=0x230) returned 0x1 [0115.483] SetErrorMode (uMode=0x0) returned 0x1 [0115.483] GetFileType (hFile=0x230) returned 0x1 [0115.483] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.483] ReadFile (in: hFile=0x230, lpBuffer=0x28a5788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a5788*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.485] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.485] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.485] WriteFile (in: hFile=0x230, lpBuffer=0x28a5788*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a5788*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.485] CloseHandle (hObject=0x230) returned 1 [0115.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x98 [0115.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri", lpFilePart=0x0) returned 0x98 [0115.485] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xac [0115.485] SetErrorMode (uMode=0x1) returned 0x0 [0115.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0eb57fc, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0eb57fc, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47485e28, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19f0)) returned 1 [0115.485] SetErrorMode (uMode=0x0) returned 0x1 [0115.485] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\3782802250\\2924287686.pri.partially.cryptonar")) returned 1 [0115.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x91 [0115.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x91 [0115.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x91 [0115.487] SetErrorMode (uMode=0x1) returned 0x0 [0115.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.491] GetFileType (hFile=0x230) returned 0x1 [0115.491] SetErrorMode (uMode=0x0) returned 0x1 [0115.491] GetFileType (hFile=0x230) returned 0x1 [0115.491] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.491] ReadFile (in: hFile=0x230, lpBuffer=0x28a9320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a9320*, lpNumberOfBytesRead=0x5ae8b8*=0xa30, lpOverlapped=0x0) returned 1 [0115.492] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1584, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.492] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.492] WriteFile (in: hFile=0x230, lpBuffer=0x28a9320*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a9320*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.492] CloseHandle (hObject=0x230) returned 1 [0115.492] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x91 [0115.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri", lpFilePart=0x0) returned 0x91 [0115.493] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xa5 [0115.493] SetErrorMode (uMode=0x1) returned 0x0 [0115.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1412cba, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1412cba, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x474b09c3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa30)) returned 1 [0115.493] SetErrorMode (uMode=0x0) returned 0x1 [0115.493] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\1978304864\\923683402.pri.partially.cryptonar")) returned 1 [0115.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x98 [0115.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x98 [0115.494] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x98 [0115.494] SetErrorMode (uMode=0x1) returned 0x0 [0115.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.495] GetFileType (hFile=0x230) returned 0x1 [0115.495] SetErrorMode (uMode=0x0) returned 0x1 [0115.495] GetFileType (hFile=0x230) returned 0x1 [0115.495] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.495] ReadFile (in: hFile=0x230, lpBuffer=0x28ace88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28ace88*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.517] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.517] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.518] WriteFile (in: hFile=0x230, lpBuffer=0x28ace88*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28ace88*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.518] CloseHandle (hObject=0x230) returned 1 [0115.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x98 [0115.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri", lpFilePart=0x0) returned 0x98 [0115.544] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xac [0115.544] SetErrorMode (uMode=0x1) returned 0x0 [0115.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a08af4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1a08af4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4751e78c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0115.544] SetErrorMode (uMode=0x0) returned 0x1 [0115.544] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\1605653898\\4275773285.pri.partially.cryptonar")) returned 1 [0115.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0xb0 [0115.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0xb0 [0115.546] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0xb0 [0115.546] SetErrorMode (uMode=0x1) returned 0x0 [0115.546] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.547] GetFileType (hFile=0x230) returned 0x1 [0115.547] SetErrorMode (uMode=0x0) returned 0x1 [0115.547] GetFileType (hFile=0x230) returned 0x1 [0115.547] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.547] ReadFile (in: hFile=0x230, lpBuffer=0x28b0ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b0ae0*, lpNumberOfBytesRead=0x5ae8b8*=0x710, lpOverlapped=0x0) returned 1 [0115.571] SetFilePointer (in: hFile=0x230, lDistanceToMove=-784, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.571] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.571] WriteFile (in: hFile=0x230, lpBuffer=0x28b0ae0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b0ae0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.571] CloseHandle (hObject=0x230) returned 1 [0115.571] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0xb0 [0115.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri", lpFilePart=0x0) returned 0xb0 [0115.572] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xc4 [0115.572] SetErrorMode (uMode=0x1) returned 0x0 [0115.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb249d22a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb249d22a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4756ac82, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0115.572] SetErrorMode (uMode=0x0) returned 0x1 [0115.572] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\226732975\\2698495915.pri.partially.cryptonar")) returned 1 [0115.573] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0xac [0115.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0xac [0115.574] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0xac [0115.574] SetErrorMode (uMode=0x1) returned 0x0 [0115.574] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.575] GetFileType (hFile=0x230) returned 0x1 [0115.575] SetErrorMode (uMode=0x0) returned 0x1 [0115.575] GetFileType (hFile=0x230) returned 0x1 [0115.575] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.575] ReadFile (in: hFile=0x230, lpBuffer=0x28b4840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b4840*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.576] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.576] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.576] WriteFile (in: hFile=0x230, lpBuffer=0x28b4840*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b4840*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.577] CloseHandle (hObject=0x230) returned 1 [0115.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0xac [0115.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri", lpFilePart=0x0) returned 0xac [0115.577] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xc0 [0115.577] SetErrorMode (uMode=0x1) returned 0x0 [0115.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb01e4d5c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb01e4d5c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4756ac82, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0115.577] SetErrorMode (uMode=0x0) returned 0x1 [0115.577] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3705566220\\624664733.pri.partially.cryptonar")) returned 1 [0115.578] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0xb0 [0115.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0xb0 [0115.579] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0xb0 [0115.579] SetErrorMode (uMode=0x1) returned 0x0 [0115.579] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.580] GetFileType (hFile=0x230) returned 0x1 [0115.580] SetErrorMode (uMode=0x0) returned 0x1 [0115.580] GetFileType (hFile=0x230) returned 0x1 [0115.580] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.580] ReadFile (in: hFile=0x230, lpBuffer=0x28b8588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b8588*, lpNumberOfBytesRead=0x5ae8b8*=0xde0, lpOverlapped=0x0) returned 1 [0115.581] SetFilePointer (in: hFile=0x230, lDistanceToMove=-2528, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.581] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.581] WriteFile (in: hFile=0x230, lpBuffer=0x28b8588*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b8588*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.582] CloseHandle (hObject=0x230) returned 1 [0115.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0xb0 [0115.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri", lpFilePart=0x0) returned 0xb0 [0115.582] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xc4 [0115.582] SetErrorMode (uMode=0x1) returned 0x0 [0115.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4ba7b6d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4ba7b6d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4756ac82, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0115.583] SetErrorMode (uMode=0x0) returned 0x1 [0115.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2577507833\\3967450640.pri.partially.cryptonar")) returned 1 [0115.584] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x9a [0115.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x9a [0115.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x9a [0115.585] SetErrorMode (uMode=0x1) returned 0x0 [0115.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.586] GetFileType (hFile=0x230) returned 0x1 [0115.586] SetErrorMode (uMode=0x0) returned 0x1 [0115.586] GetFileType (hFile=0x230) returned 0x1 [0115.586] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.586] ReadFile (in: hFile=0x230, lpBuffer=0x28bc270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28bc270*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.589] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.589] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.589] WriteFile (in: hFile=0x230, lpBuffer=0x28bc270*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28bc270*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.589] CloseHandle (hObject=0x230) returned 1 [0115.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x9a [0115.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x9a [0115.589] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xae [0115.590] SetErrorMode (uMode=0x1) returned 0x0 [0115.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb629a62b, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb629a62b, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47590dc6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0115.590] SetErrorMode (uMode=0x0) returned 0x1 [0115.590] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\3530508098\\2495906576.pri.partially.cryptonar")) returned 1 [0115.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0xab [0115.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0xab [0115.593] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0xab [0115.593] SetErrorMode (uMode=0x1) returned 0x0 [0115.593] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.595] GetFileType (hFile=0x230) returned 0x1 [0115.595] SetErrorMode (uMode=0x0) returned 0x1 [0115.595] GetFileType (hFile=0x230) returned 0x1 [0115.595] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.595] ReadFile (in: hFile=0x230, lpBuffer=0x28bfe98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28bfe98*, lpNumberOfBytesRead=0x5ae8b8*=0x748, lpOverlapped=0x0) returned 1 [0115.599] SetFilePointer (in: hFile=0x230, lDistanceToMove=-840, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.599] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.599] WriteFile (in: hFile=0x230, lpBuffer=0x28bfe98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28bfe98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.599] CloseHandle (hObject=0x230) returned 1 [0115.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0xab [0115.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri", lpFilePart=0x0) returned 0xab [0115.600] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xbf [0115.600] SetErrorMode (uMode=0x1) returned 0x0 [0115.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7c8801d, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb7c8801d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x475b7d3a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x748)) returned 1 [0115.600] SetErrorMode (uMode=0x0) returned 0x1 [0115.600] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2570292521\\231755001.pri.partially.cryptonar")) returned 1 [0115.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0xad [0115.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0xad [0115.602] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0xad [0115.602] SetErrorMode (uMode=0x1) returned 0x0 [0115.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.603] GetFileType (hFile=0x230) returned 0x1 [0115.603] SetErrorMode (uMode=0x0) returned 0x1 [0115.603] GetFileType (hFile=0x230) returned 0x1 [0115.603] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.603] ReadFile (in: hFile=0x230, lpBuffer=0x28c3ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28c3ba0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.622] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.622] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.622] WriteFile (in: hFile=0x230, lpBuffer=0x28c3ba0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28c3ba0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.623] CloseHandle (hObject=0x230) returned 1 [0115.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0xad [0115.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri", lpFilePart=0x0) returned 0xad [0115.623] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xc1 [0115.623] SetErrorMode (uMode=0x1) returned 0x0 [0115.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba26166a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xba26166a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x475dd46f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0115.624] SetErrorMode (uMode=0x0) returned 0x1 [0115.624] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3295484897\\2504515037.pri.partially.cryptonar")) returned 1 [0115.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0xa1 [0115.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0xa1 [0115.625] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0xa1 [0115.628] SetErrorMode (uMode=0x1) returned 0x0 [0115.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.629] GetFileType (hFile=0x230) returned 0x1 [0115.629] SetErrorMode (uMode=0x0) returned 0x1 [0115.629] GetFileType (hFile=0x230) returned 0x1 [0115.629] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.629] ReadFile (in: hFile=0x230, lpBuffer=0x26c83a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c83a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.634] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.634] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.634] WriteFile (in: hFile=0x230, lpBuffer=0x26c83a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c83a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.635] CloseHandle (hObject=0x230) returned 1 [0115.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0xa1 [0115.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri", lpFilePart=0x0) returned 0xa1 [0115.635] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xb5 [0115.635] SetErrorMode (uMode=0x1) returned 0x0 [0115.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc434d45, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc434d45, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4760350e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0115.636] SetErrorMode (uMode=0x0) returned 0x1 [0115.636] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\3375042201\\1858609885.pri.partially.cryptonar")) returned 1 [0115.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0xa6 [0115.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0xa6 [0115.637] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0xa6 [0115.637] SetErrorMode (uMode=0x1) returned 0x0 [0115.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.638] GetFileType (hFile=0x230) returned 0x1 [0115.638] SetErrorMode (uMode=0x0) returned 0x1 [0115.638] GetFileType (hFile=0x230) returned 0x1 [0115.639] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.639] ReadFile (in: hFile=0x230, lpBuffer=0x26cc018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cc018*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.640] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.640] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.640] WriteFile (in: hFile=0x230, lpBuffer=0x26cc018*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cc018*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.641] CloseHandle (hObject=0x230) returned 1 [0115.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0xa6 [0115.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri", lpFilePart=0x0) returned 0xa6 [0115.641] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xba [0115.641] SetErrorMode (uMode=0x1) returned 0x0 [0115.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbd33e58, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbd33e58, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4760350e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22d0)) returned 1 [0115.641] SetErrorMode (uMode=0x0) returned 0x1 [0115.641] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\2107319684\\2467780804.pri.partially.cryptonar")) returned 1 [0115.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", lpFilePart=0x0) returned 0xa6 [0115.646] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", lpFilePart=0x0) returned 0xa6 [0115.647] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", lpFilePart=0x0) returned 0xa6 [0115.647] SetErrorMode (uMode=0x1) returned 0x0 [0115.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.648] GetFileType (hFile=0x230) returned 0x1 [0115.648] SetErrorMode (uMode=0x0) returned 0x1 [0115.648] GetFileType (hFile=0x230) returned 0x1 [0115.648] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.648] ReadFile (in: hFile=0x230, lpBuffer=0x26cfcb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cfcb8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.651] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.651] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.651] WriteFile (in: hFile=0x230, lpBuffer=0x26cfcb8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cfcb8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.651] CloseHandle (hObject=0x230) returned 1 [0115.651] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", lpFilePart=0x0) returned 0xa6 [0115.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri", lpFilePart=0x0) returned 0xa6 [0115.652] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xba [0115.652] SetErrorMode (uMode=0x1) returned 0x0 [0115.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcfae283, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbcfae283, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x476299f3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20a0)) returned 1 [0115.652] SetErrorMode (uMode=0x0) returned 0x1 [0115.652] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\860568095\\965632691.pri.partially.cryptonar")) returned 1 [0115.653] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x9d [0115.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x9d [0115.654] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x9d [0115.654] SetErrorMode (uMode=0x1) returned 0x0 [0115.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.655] GetFileType (hFile=0x230) returned 0x1 [0115.655] SetErrorMode (uMode=0x0) returned 0x1 [0115.655] GetFileType (hFile=0x230) returned 0x1 [0115.655] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.655] ReadFile (in: hFile=0x230, lpBuffer=0x26d3930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d3930*, lpNumberOfBytesRead=0x5ae8b8*=0xfd8, lpOverlapped=0x0) returned 1 [0115.681] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3032, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.681] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.681] WriteFile (in: hFile=0x230, lpBuffer=0x26d3930*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d3930*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.681] CloseHandle (hObject=0x230) returned 1 [0115.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x9d [0115.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri", lpFilePart=0x0) returned 0x9d [0115.682] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xb1 [0115.682] SetErrorMode (uMode=0x1) returned 0x0 [0115.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9116f8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd9116f8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47675c02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfd8)) returned 1 [0115.682] SetErrorMode (uMode=0x0) returned 0x1 [0115.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\2646675675\\806068533.pri.partially.cryptonar")) returned 1 [0115.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x95 [0115.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x95 [0115.687] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x95 [0115.687] SetErrorMode (uMode=0x1) returned 0x0 [0115.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.688] GetFileType (hFile=0x230) returned 0x1 [0115.688] SetErrorMode (uMode=0x0) returned 0x1 [0115.688] GetFileType (hFile=0x230) returned 0x1 [0115.688] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.688] ReadFile (in: hFile=0x230, lpBuffer=0x26d7510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d7510*, lpNumberOfBytesRead=0x5ae8b8*=0x730, lpOverlapped=0x0) returned 1 [0115.709] SetFilePointer (in: hFile=0x230, lDistanceToMove=-816, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.709] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.709] WriteFile (in: hFile=0x230, lpBuffer=0x26d7510*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d7510*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.709] CloseHandle (hObject=0x230) returned 1 [0115.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x95 [0115.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri", lpFilePart=0x0) returned 0x95 [0115.710] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri.partially.cryptoNar", lpFilePart=0x0) returned 0xa9 [0115.710] SetErrorMode (uMode=0x1) returned 0x0 [0115.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbece3041, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbece3041, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x476c21a9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0115.710] SetErrorMode (uMode=0x0) returned 0x1 [0115.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\pricache\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\1079934665\\2034961148.pri.partially.cryptonar")) returned 1 [0115.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", lpFilePart=0x0) returned 0x4e [0115.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", lpFilePart=0x0) returned 0x4e [0115.712] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", lpFilePart=0x0) returned 0x4e [0115.712] SetErrorMode (uMode=0x1) returned 0x0 [0115.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\shell\\defaultlayouts.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.713] GetFileType (hFile=0x230) returned 0x1 [0115.713] SetErrorMode (uMode=0x0) returned 0x1 [0115.713] GetFileType (hFile=0x230) returned 0x1 [0115.713] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.713] ReadFile (in: hFile=0x230, lpBuffer=0x26daef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26daef0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.727] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.727] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.727] WriteFile (in: hFile=0x230, lpBuffer=0x26daef0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26daef0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.727] CloseHandle (hObject=0x230) returned 1 [0115.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", lpFilePart=0x0) returned 0x4e [0115.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml", lpFilePart=0x0) returned 0x4e [0115.728] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml.partially.cryptoNar", lpFilePart=0x0) returned 0x62 [0115.728] SetErrorMode (uMode=0x1) returned 0x0 [0115.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\shell\\defaultlayouts.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa853b228, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa853b228, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x476e848a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb765)) returned 1 [0115.729] SetErrorMode (uMode=0x0) returned 0x1 [0115.729] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\shell\\defaultlayouts.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Shell\\DefaultLayouts.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\shell\\defaultlayouts.xml.partially.cryptonar")) returned 1 [0115.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", lpFilePart=0x0) returned 0x46 [0115.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", lpFilePart=0x0) returned 0x46 [0115.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", lpFilePart=0x0) returned 0x46 [0115.730] SetErrorMode (uMode=0x1) returned 0x0 [0115.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.731] GetFileType (hFile=0x230) returned 0x1 [0115.731] SetErrorMode (uMode=0x0) returned 0x1 [0115.731] GetFileType (hFile=0x230) returned 0x1 [0115.731] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.731] ReadFile (in: hFile=0x230, lpBuffer=0x26de510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26de510*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.732] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.732] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.732] WriteFile (in: hFile=0x230, lpBuffer=0x26de510*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26de510*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.733] CloseHandle (hObject=0x230) returned 1 [0115.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", lpFilePart=0x0) returned 0x46 [0115.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk", lpFilePart=0x0) returned 0x46 [0115.733] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk.partially.cryptoNar", lpFilePart=0x0) returned 0x5a [0115.733] SetErrorMode (uMode=0x1) returned 0x0 [0115.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc57bbd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc57bbd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x476e848a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0115.733] SetErrorMode (uMode=0x0) returned 0x1 [0115.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.chk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.chk.partially.cryptonar")) returned 1 [0115.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", lpFilePart=0x0) returned 0x46 [0115.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", lpFilePart=0x0) returned 0x46 [0115.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log", lpFilePart=0x0) returned 0x46 [0115.735] SetErrorMode (uMode=0x1) returned 0x0 [0115.735] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0115.746] SetErrorMode (uMode=0x0) returned 0x1 [0115.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", lpFilePart=0x0) returned 0x4b [0115.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", lpFilePart=0x0) returned 0x4b [0115.748] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", lpFilePart=0x0) returned 0x4b [0115.749] SetErrorMode (uMode=0x1) returned 0x0 [0115.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v010002c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.750] GetFileType (hFile=0x230) returned 0x1 [0115.750] SetErrorMode (uMode=0x0) returned 0x1 [0115.750] GetFileType (hFile=0x230) returned 0x1 [0115.750] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.750] ReadFile (in: hFile=0x230, lpBuffer=0x26e3058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e3058*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.751] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.751] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.751] WriteFile (in: hFile=0x230, lpBuffer=0x26e3058*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e3058*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.752] CloseHandle (hObject=0x230) returned 1 [0115.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", lpFilePart=0x0) returned 0x4b [0115.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log", lpFilePart=0x0) returned 0x4b [0115.752] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log.partially.cryptoNar", lpFilePart=0x0) returned 0x5f [0115.752] SetErrorMode (uMode=0x1) returned 0x0 [0115.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v010002c.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadb268c5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x26ab3cb1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x477104e2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0115.753] SetErrorMode (uMode=0x0) returned 0x1 [0115.753] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v010002c.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V010002C.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v010002c.log.partially.cryptonar")) returned 1 [0115.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", lpFilePart=0x0) returned 0x4e [0115.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", lpFilePart=0x0) returned 0x4e [0115.754] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", lpFilePart=0x0) returned 0x4e [0115.755] SetErrorMode (uMode=0x1) returned 0x0 [0115.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.756] GetFileType (hFile=0x230) returned 0x1 [0115.756] SetErrorMode (uMode=0x0) returned 0x1 [0115.756] GetFileType (hFile=0x230) returned 0x1 [0115.756] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.756] ReadFile (in: hFile=0x230, lpBuffer=0x26e66a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e66a0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.760] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.760] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.761] WriteFile (in: hFile=0x230, lpBuffer=0x26e66a0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e66a0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.761] CloseHandle (hObject=0x230) returned 1 [0115.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", lpFilePart=0x0) returned 0x4e [0115.761] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs", lpFilePart=0x0) returned 0x4e [0115.762] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs.partially.cryptoNar", lpFilePart=0x0) returned 0x62 [0115.762] SetErrorMode (uMode=0x1) returned 0x0 [0115.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc0b718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc0b718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x477348de, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0115.762] SetErrorMode (uMode=0x0) returned 0x1 [0115.762] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00001.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00001.jrs.partially.cryptonar")) returned 1 [0115.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", lpFilePart=0x0) returned 0x4e [0115.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", lpFilePart=0x0) returned 0x4e [0115.764] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", lpFilePart=0x0) returned 0x4e [0115.764] SetErrorMode (uMode=0x1) returned 0x0 [0115.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.765] GetFileType (hFile=0x230) returned 0x1 [0115.765] SetErrorMode (uMode=0x0) returned 0x1 [0115.765] GetFileType (hFile=0x230) returned 0x1 [0115.765] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.765] ReadFile (in: hFile=0x230, lpBuffer=0x26e9d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e9d10*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.767] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.767] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.767] WriteFile (in: hFile=0x230, lpBuffer=0x26e9d10*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e9d10*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.768] CloseHandle (hObject=0x230) returned 1 [0115.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", lpFilePart=0x0) returned 0x4e [0115.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs", lpFilePart=0x0) returned 0x4e [0115.769] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs.partially.cryptoNar", lpFilePart=0x0) returned 0x62 [0115.769] SetErrorMode (uMode=0x1) returned 0x0 [0115.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xadc57bbd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc57bbd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x477348de, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0115.770] SetErrorMode (uMode=0x0) returned 0x1 [0115.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01res00002.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01res00002.jrs.partially.cryptonar")) returned 1 [0115.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", lpFilePart=0x0) returned 0x49 [0115.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", lpFilePart=0x0) returned 0x49 [0115.772] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log", lpFilePart=0x0) returned 0x49 [0115.772] SetErrorMode (uMode=0x1) returned 0x0 [0115.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\V01tmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\v01tmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0115.780] SetErrorMode (uMode=0x0) returned 0x1 [0115.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat", lpFilePart=0x0) returned 0x4e [0115.782] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat", lpFilePart=0x0) returned 0x4e [0115.783] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat", lpFilePart=0x0) returned 0x4e [0115.783] SetErrorMode (uMode=0x1) returned 0x0 [0115.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WebCache\\WebCacheV01.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\webcache\\webcachev01.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0115.804] SetErrorMode (uMode=0x0) returned 0x1 [0115.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", lpFilePart=0x0) returned 0x5e [0115.805] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", lpFilePart=0x0) returned 0x5e [0115.806] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", lpFilePart=0x0) returned 0x5e [0115.806] SetErrorMode (uMode=0x1) returned 0x0 [0115.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\windows anytime upgrade\\upgrade_dism.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.807] GetFileType (hFile=0x230) returned 0x1 [0115.807] SetErrorMode (uMode=0x0) returned 0x1 [0115.807] GetFileType (hFile=0x230) returned 0x1 [0115.807] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.807] ReadFile (in: hFile=0x230, lpBuffer=0x26eff08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26eff08*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0115.846] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.846] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.846] WriteFile (in: hFile=0x230, lpBuffer=0x26eff08*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26eff08*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.846] CloseHandle (hObject=0x230) returned 1 [0115.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", lpFilePart=0x0) returned 0x5e [0115.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log", lpFilePart=0x0) returned 0x5e [0115.855] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log.partially.cryptoNar", lpFilePart=0x0) returned 0x72 [0115.855] SetErrorMode (uMode=0x1) returned 0x0 [0115.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\windows anytime upgrade\\upgrade_dism.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd98fcf0, ftCreationTime.dwHighDateTime=0x1d3001c, ftLastAccessTime.dwLowDateTime=0xdd98fcf0, ftLastAccessTime.dwHighDateTime=0x1d3001c, ftLastWriteTime.dwLowDateTime=0x4781a34a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xac34)) returned 1 [0115.855] SetErrorMode (uMode=0x0) returned 0x1 [0115.856] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\windows anytime upgrade\\upgrade_dism.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\Windows Anytime Upgrade\\Upgrade_dism.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\windows anytime upgrade\\upgrade_dism.log.partially.cryptonar")) returned 1 [0115.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", lpFilePart=0x0) returned 0x51 [0115.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", lpFilePart=0x0) returned 0x51 [0115.857] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", lpFilePart=0x0) returned 0x51 [0115.857] SetErrorMode (uMode=0x1) returned 0x0 [0115.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.858] GetFileType (hFile=0x230) returned 0x1 [0115.858] SetErrorMode (uMode=0x0) returned 0x1 [0115.858] GetFileType (hFile=0x230) returned 0x1 [0115.858] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.858] ReadFile (in: hFile=0x230, lpBuffer=0x26f3658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f3658*, lpNumberOfBytesRead=0x5ae8b8*=0x455, lpOverlapped=0x0) returned 1 [0115.909] SetFilePointer (in: hFile=0x230, lDistanceToMove=-85, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.909] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.909] WriteFile (in: hFile=0x230, lpBuffer=0x26f3658*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f3658*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.909] CloseHandle (hObject=0x230) returned 1 [0115.909] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", lpFilePart=0x0) returned 0x51 [0115.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk", lpFilePart=0x0) returned 0x51 [0115.910] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x65 [0115.910] SetErrorMode (uMode=0x1) returned 0x0 [0115.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa853b228, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa853b228, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4788bd12, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x455)) returned 1 [0115.910] SetErrorMode (uMode=0x0) returned 0x1 [0115.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\1 - Desktop.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\1 - desktop.lnk.partially.cryptonar")) returned 1 [0115.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0115.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0115.912] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0115.912] SetErrorMode (uMode=0x1) returned 0x0 [0115.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.913] GetFileType (hFile=0x230) returned 0x1 [0115.913] SetErrorMode (uMode=0x0) returned 0x1 [0115.913] GetFileType (hFile=0x230) returned 0x1 [0115.913] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.913] ReadFile (in: hFile=0x230, lpBuffer=0x26f6ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f6ce8*, lpNumberOfBytesRead=0x5ae8b8*=0x51, lpOverlapped=0x0) returned 1 [0115.914] ReadFile (in: hFile=0x230, lpBuffer=0x26f6ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f6ce8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0115.914] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.914] WriteFile (in: hFile=0x230, lpBuffer=0x26f6ce8*, nNumberOfBytesToWrite=0x51, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f6ce8*, lpNumberOfBytesWritten=0x5ae8a8*=0x51, lpOverlapped=0x0) returned 1 [0115.914] CloseHandle (hObject=0x230) returned 1 [0115.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0115.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini", lpFilePart=0x0) returned 0x4d [0115.914] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0115.914] SetErrorMode (uMode=0x1) returned 0x0 [0115.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8515036, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8515036, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x478b1f16, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51)) returned 1 [0115.915] SetErrorMode (uMode=0x0) returned 0x1 [0115.915] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group1\\desktop.ini.partially.cryptonar")) returned 1 [0115.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", lpFilePart=0x0) returned 0x4d [0115.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", lpFilePart=0x0) returned 0x4d [0115.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", lpFilePart=0x0) returned 0x4d [0115.916] SetErrorMode (uMode=0x1) returned 0x0 [0115.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.919] GetFileType (hFile=0x230) returned 0x1 [0115.919] SetErrorMode (uMode=0x0) returned 0x1 [0115.919] GetFileType (hFile=0x230) returned 0x1 [0115.919] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.919] ReadFile (in: hFile=0x230, lpBuffer=0x26fa010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fa010*, lpNumberOfBytesRead=0x5ae8b8*=0x455, lpOverlapped=0x0) returned 1 [0115.948] SetFilePointer (in: hFile=0x230, lDistanceToMove=-85, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.948] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.948] WriteFile (in: hFile=0x230, lpBuffer=0x26fa010*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26fa010*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.948] CloseHandle (hObject=0x230) returned 1 [0115.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", lpFilePart=0x0) returned 0x4d [0115.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk", lpFilePart=0x0) returned 0x4d [0115.948] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0115.948] SetErrorMode (uMode=0x1) returned 0x0 [0115.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8515036, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8515036, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x479000ea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x455)) returned 1 [0115.949] SetErrorMode (uMode=0x0) returned 0x1 [0115.949] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\1 - Run.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\1 - run.lnk.partially.cryptonar")) returned 1 [0115.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", lpFilePart=0x0) returned 0x50 [0115.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", lpFilePart=0x0) returned 0x50 [0115.950] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", lpFilePart=0x0) returned 0x50 [0115.950] SetErrorMode (uMode=0x1) returned 0x0 [0115.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.951] GetFileType (hFile=0x230) returned 0x1 [0115.951] SetErrorMode (uMode=0x0) returned 0x1 [0115.951] GetFileType (hFile=0x230) returned 0x1 [0115.951] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.951] ReadFile (in: hFile=0x230, lpBuffer=0x26fd698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fd698*, lpNumberOfBytesRead=0x5ae8b8*=0x455, lpOverlapped=0x0) returned 1 [0115.964] SetFilePointer (in: hFile=0x230, lDistanceToMove=-85, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.964] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.964] WriteFile (in: hFile=0x230, lpBuffer=0x26fd698*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26fd698*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.964] CloseHandle (hObject=0x230) returned 1 [0115.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", lpFilePart=0x0) returned 0x50 [0115.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk", lpFilePart=0x0) returned 0x50 [0115.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0115.965] SetErrorMode (uMode=0x1) returned 0x0 [0115.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8515036, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8515036, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47924709, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x455)) returned 1 [0115.965] SetErrorMode (uMode=0x0) returned 0x1 [0115.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\2 - Search.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\2 - search.lnk.partially.cryptonar")) returned 1 [0115.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", lpFilePart=0x0) returned 0x5a [0115.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", lpFilePart=0x0) returned 0x5a [0115.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", lpFilePart=0x0) returned 0x5a [0115.966] SetErrorMode (uMode=0x1) returned 0x0 [0115.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.968] GetFileType (hFile=0x230) returned 0x1 [0115.968] SetErrorMode (uMode=0x0) returned 0x1 [0115.968] GetFileType (hFile=0x230) returned 0x1 [0115.968] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.969] ReadFile (in: hFile=0x230, lpBuffer=0x2700db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2700db0*, lpNumberOfBytesRead=0x5ae8b8*=0x455, lpOverlapped=0x0) returned 1 [0115.971] SetFilePointer (in: hFile=0x230, lDistanceToMove=-85, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0115.971] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.971] WriteFile (in: hFile=0x230, lpBuffer=0x2700db0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2700db0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0115.971] CloseHandle (hObject=0x230) returned 1 [0115.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", lpFilePart=0x0) returned 0x5a [0115.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk", lpFilePart=0x0) returned 0x5a [0115.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0115.972] SetErrorMode (uMode=0x1) returned 0x0 [0115.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47924709, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x455)) returned 1 [0115.972] SetErrorMode (uMode=0x0) returned 0x1 [0115.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\3 - Windows Explorer.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\3 - windows explorer.lnk.partially.cryptonar")) returned 1 [0115.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", lpFilePart=0x0) returned 0x57 [0115.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", lpFilePart=0x0) returned 0x57 [0115.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", lpFilePart=0x0) returned 0x57 [0115.993] SetErrorMode (uMode=0x1) returned 0x0 [0115.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0115.994] GetFileType (hFile=0x230) returned 0x1 [0115.994] SetErrorMode (uMode=0x0) returned 0x1 [0115.994] GetFileType (hFile=0x230) returned 0x1 [0115.994] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.994] ReadFile (in: hFile=0x230, lpBuffer=0x2704508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2704508*, lpNumberOfBytesRead=0x5ae8b8*=0x3f7, lpOverlapped=0x0) returned 1 [0115.996] ReadFile (in: hFile=0x230, lpBuffer=0x2704508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2704508*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0115.996] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0115.997] WriteFile (in: hFile=0x230, lpBuffer=0x2704508*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2704508*, lpNumberOfBytesWritten=0x5ae8a8*=0x3f7, lpOverlapped=0x0) returned 1 [0115.997] CloseHandle (hObject=0x230) returned 1 [0115.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", lpFilePart=0x0) returned 0x57 [0115.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk", lpFilePart=0x0) returned 0x57 [0115.998] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x6b [0115.998] SetErrorMode (uMode=0x1) returned 0x0 [0115.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47973d83, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0115.999] SetErrorMode (uMode=0x0) returned 0x1 [0115.999] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\4 - Control Panel.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\4 - control panel.lnk.partially.cryptonar")) returned 1 [0116.002] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", lpFilePart=0x0) returned 0x56 [0116.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", lpFilePart=0x0) returned 0x56 [0116.003] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", lpFilePart=0x0) returned 0x56 [0116.003] SetErrorMode (uMode=0x1) returned 0x0 [0116.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.005] GetFileType (hFile=0x230) returned 0x1 [0116.005] SetErrorMode (uMode=0x0) returned 0x1 [0116.005] GetFileType (hFile=0x230) returned 0x1 [0116.005] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.005] ReadFile (in: hFile=0x230, lpBuffer=0x2708038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2708038*, lpNumberOfBytesRead=0x5ae8b8*=0x3fd, lpOverlapped=0x0) returned 1 [0116.008] ReadFile (in: hFile=0x230, lpBuffer=0x2708038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2708038*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0116.009] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.009] WriteFile (in: hFile=0x230, lpBuffer=0x2708038*, nNumberOfBytesToWrite=0x3fd, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2708038*, lpNumberOfBytesWritten=0x5ae8a8*=0x3fd, lpOverlapped=0x0) returned 1 [0116.012] CloseHandle (hObject=0x230) returned 1 [0116.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", lpFilePart=0x0) returned 0x56 [0116.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk", lpFilePart=0x0) returned 0x56 [0116.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x6a [0116.013] SetErrorMode (uMode=0x1) returned 0x0 [0116.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4799727d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fd)) returned 1 [0116.013] SetErrorMode (uMode=0x0) returned 0x1 [0116.013] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\5 - Task Manager.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\5 - task manager.lnk.partially.cryptonar")) returned 1 [0116.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0116.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0116.014] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0116.014] SetErrorMode (uMode=0x1) returned 0x0 [0116.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.015] GetFileType (hFile=0x230) returned 0x1 [0116.015] SetErrorMode (uMode=0x0) returned 0x1 [0116.015] GetFileType (hFile=0x230) returned 0x1 [0116.015] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.016] ReadFile (in: hFile=0x230, lpBuffer=0x270bb18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270bb18*, lpNumberOfBytesRead=0x5ae8b8*=0x14c, lpOverlapped=0x0) returned 1 [0116.017] ReadFile (in: hFile=0x230, lpBuffer=0x270bb18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270bb18*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0116.017] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.017] WriteFile (in: hFile=0x230, lpBuffer=0x270bb18*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270bb18*, lpNumberOfBytesWritten=0x5ae8a8*=0x14c, lpOverlapped=0x0) returned 1 [0116.017] CloseHandle (hObject=0x230) returned 1 [0116.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0116.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini", lpFilePart=0x0) returned 0x4d [0116.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini.partially.cryptoNar", lpFilePart=0x0) returned 0x61 [0116.017] SetErrorMode (uMode=0x1) returned 0x0 [0116.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa84eed80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84eed80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x4799727d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1 [0116.018] SetErrorMode (uMode=0x0) returned 0x1 [0116.018] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group2\\desktop.ini.partially.cryptonar")) returned 1 [0116.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0116.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0116.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0116.023] SetErrorMode (uMode=0x1) returned 0x0 [0116.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.025] GetFileType (hFile=0x230) returned 0x1 [0116.026] SetErrorMode (uMode=0x0) returned 0x1 [0116.026] GetFileType (hFile=0x230) returned 0x1 [0116.026] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.026] ReadFile (in: hFile=0x230, lpBuffer=0x270f0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270f0a8*, lpNumberOfBytesRead=0x5ae8b8*=0x3f7, lpOverlapped=0x0) returned 1 [0116.028] ReadFile (in: hFile=0x230, lpBuffer=0x270f0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270f0a8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0116.028] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.028] WriteFile (in: hFile=0x230, lpBuffer=0x270f0a8*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270f0a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x3f7, lpOverlapped=0x0) returned 1 [0116.029] CloseHandle (hObject=0x230) returned 1 [0116.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0116.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0116.029] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0116.029] SetErrorMode (uMode=0x1) returned 0x0 [0116.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x479c2133, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0116.029] SetErrorMode (uMode=0x0) returned 0x1 [0116.029] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01 - Command Prompt.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01 - command prompt.lnk.partially.cryptonar")) returned 1 [0116.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0116.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0116.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0116.031] SetErrorMode (uMode=0x1) returned 0x0 [0116.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.032] GetFileType (hFile=0x230) returned 0x1 [0116.032] SetErrorMode (uMode=0x0) returned 0x1 [0116.032] GetFileType (hFile=0x230) returned 0x1 [0116.032] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.032] ReadFile (in: hFile=0x230, lpBuffer=0x2712c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2712c50*, lpNumberOfBytesRead=0x5ae8b8*=0x467, lpOverlapped=0x0) returned 1 [0116.033] SetFilePointer (in: hFile=0x230, lDistanceToMove=-103, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0116.033] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.033] WriteFile (in: hFile=0x230, lpBuffer=0x2712c50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2712c50*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0116.034] CloseHandle (hObject=0x230) returned 1 [0116.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0116.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0116.034] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x72 [0116.034] SetErrorMode (uMode=0x1) returned 0x0 [0116.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x479c2133, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x467)) returned 1 [0116.034] SetErrorMode (uMode=0x0) returned 0x1 [0116.034] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\01a - Windows PowerShell.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\01a - windows powershell.lnk.partially.cryptonar")) returned 1 [0116.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0116.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0116.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0116.036] SetErrorMode (uMode=0x1) returned 0x0 [0116.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.037] GetFileType (hFile=0x230) returned 0x1 [0116.037] SetErrorMode (uMode=0x0) returned 0x1 [0116.037] GetFileType (hFile=0x230) returned 0x1 [0116.037] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.037] ReadFile (in: hFile=0x230, lpBuffer=0x27163f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27163f0*, lpNumberOfBytesRead=0x5ae8b8*=0x423, lpOverlapped=0x0) returned 1 [0116.063] SetFilePointer (in: hFile=0x230, lDistanceToMove=-35, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0116.064] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.064] WriteFile (in: hFile=0x230, lpBuffer=0x27163f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27163f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0116.064] CloseHandle (hObject=0x230) returned 1 [0116.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0116.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk", lpFilePart=0x0) returned 0x59 [0116.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0116.064] SetErrorMode (uMode=0x1) returned 0x0 [0116.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47a09584, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x423)) returned 1 [0116.064] SetErrorMode (uMode=0x0) returned 0x1 [0116.064] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02 - Command Prompt.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02 - command prompt.lnk.partially.cryptonar")) returned 1 [0116.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0116.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0116.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0116.066] SetErrorMode (uMode=0x1) returned 0x0 [0116.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.067] GetFileType (hFile=0x230) returned 0x1 [0116.067] SetErrorMode (uMode=0x0) returned 0x1 [0116.067] GetFileType (hFile=0x230) returned 0x1 [0116.067] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.068] ReadFile (in: hFile=0x230, lpBuffer=0x2719b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2719b90*, lpNumberOfBytesRead=0x5ae8b8*=0x493, lpOverlapped=0x0) returned 1 [0116.093] SetFilePointer (in: hFile=0x230, lDistanceToMove=-147, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0116.093] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.093] WriteFile (in: hFile=0x230, lpBuffer=0x2719b90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2719b90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0116.093] CloseHandle (hObject=0x230) returned 1 [0116.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0116.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk", lpFilePart=0x0) returned 0x5e [0116.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x72 [0116.094] SetErrorMode (uMode=0x1) returned 0x0 [0116.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84c8b14, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84c8b14, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47a55c92, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x493)) returned 1 [0116.094] SetErrorMode (uMode=0x0) returned 0x1 [0116.094] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\02a - Windows PowerShell.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\02a - windows powershell.lnk.partially.cryptonar")) returned 1 [0116.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", lpFilePart=0x0) returned 0x5e [0116.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", lpFilePart=0x0) returned 0x5e [0116.096] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", lpFilePart=0x0) returned 0x5e [0116.096] SetErrorMode (uMode=0x1) returned 0x0 [0116.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.098] GetFileType (hFile=0x230) returned 0x1 [0116.098] SetErrorMode (uMode=0x0) returned 0x1 [0116.098] GetFileType (hFile=0x230) returned 0x1 [0116.098] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.099] ReadFile (in: hFile=0x230, lpBuffer=0x271d368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271d368*, lpNumberOfBytesRead=0x5ae8b8*=0x3f7, lpOverlapped=0x0) returned 1 [0116.101] ReadFile (in: hFile=0x230, lpBuffer=0x271d368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271d368*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0116.101] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.101] WriteFile (in: hFile=0x230, lpBuffer=0x271d368*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271d368*, lpNumberOfBytesWritten=0x5ae8a8*=0x3f7, lpOverlapped=0x0) returned 1 [0116.101] CloseHandle (hObject=0x230) returned 1 [0116.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", lpFilePart=0x0) returned 0x5e [0116.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk", lpFilePart=0x0) returned 0x5e [0116.101] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x72 [0116.101] SetErrorMode (uMode=0x1) returned 0x0 [0116.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47a7bf22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0116.102] SetErrorMode (uMode=0x0) returned 0x1 [0116.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\03 - Computer Management.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\03 - computer management.lnk.partially.cryptonar")) returned 1 [0116.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", lpFilePart=0x0) returned 0x5a [0116.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", lpFilePart=0x0) returned 0x5a [0116.103] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", lpFilePart=0x0) returned 0x5a [0116.103] SetErrorMode (uMode=0x1) returned 0x0 [0116.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.104] GetFileType (hFile=0x230) returned 0x1 [0116.104] SetErrorMode (uMode=0x0) returned 0x1 [0116.104] GetFileType (hFile=0x230) returned 0x1 [0116.104] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.104] ReadFile (in: hFile=0x230, lpBuffer=0x2720f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2720f20*, lpNumberOfBytesRead=0x5ae8b8*=0x3f7, lpOverlapped=0x0) returned 1 [0116.105] ReadFile (in: hFile=0x230, lpBuffer=0x2720f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2720f20*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0116.105] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.105] WriteFile (in: hFile=0x230, lpBuffer=0x2720f20*, nNumberOfBytesToWrite=0x3f7, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2720f20*, lpNumberOfBytesWritten=0x5ae8a8*=0x3f7, lpOverlapped=0x0) returned 1 [0116.106] CloseHandle (hObject=0x230) returned 1 [0116.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", lpFilePart=0x0) returned 0x5a [0116.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk", lpFilePart=0x0) returned 0x5a [0116.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.partially.cryptoNar", lpFilePart=0x0) returned 0x6e [0116.106] SetErrorMode (uMode=0x1) returned 0x0 [0116.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47a7bf22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0116.106] SetErrorMode (uMode=0x0) returned 0x1 [0116.106] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04 - Disk Management.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04 - disk management.lnk.partially.cryptonar")) returned 1 [0116.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", lpFilePart=0x0) returned 0x60 [0116.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", lpFilePart=0x0) returned 0x60 [0116.107] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk", lpFilePart=0x0) returned 0x60 [0116.107] SetErrorMode (uMode=0x1) returned 0x0 [0116.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.108] GetFileType (hFile=0x230) returned 0x1 [0116.108] SetErrorMode (uMode=0x0) returned 0x1 [0116.108] GetFileType (hFile=0x230) returned 0x1 [0116.108] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.108] ReadFile (in: hFile=0x230, lpBuffer=0x2724ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2724ae8*, lpNumberOfBytesRead=0x5ae8b8*=0x449, lpOverlapped=0x0) returned 1 [0116.110] SetFilePointer (in: hFile=0x230, lDistanceToMove=-73, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0116.110] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.110] WriteFile (in: hFile=0x230, lpBuffer=0x2724ae8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2724ae8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0116.110] CloseHandle (hObject=0x230) returned 1 [0116.110] SetErrorMode (uMode=0x1) returned 0x0 [0116.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47a7bf22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x449)) returned 1 [0116.111] SetErrorMode (uMode=0x0) returned 0x1 [0116.111] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\04-1 - Network Connections.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\04-1 - network connections.lnk.partially.cryptonar")) returned 1 [0116.112] SetErrorMode (uMode=0x1) returned 0x0 [0116.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.113] SetErrorMode (uMode=0x0) returned 0x1 [0116.113] GetFileType (hFile=0x230) returned 0x1 [0116.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.117] SetErrorMode (uMode=0x1) returned 0x0 [0116.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47aa20fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x433)) returned 1 [0116.117] SetErrorMode (uMode=0x0) returned 0x1 [0116.117] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\05 - Device Manager.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\05 - device manager.lnk.partially.cryptonar")) returned 1 [0116.118] SetErrorMode (uMode=0x1) returned 0x0 [0116.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.119] SetErrorMode (uMode=0x0) returned 0x1 [0116.119] GetFileType (hFile=0x230) returned 0x1 [0116.119] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.150] SetErrorMode (uMode=0x1) returned 0x0 [0116.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84a290f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa84a290f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47aee2af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x425)) returned 1 [0116.150] SetErrorMode (uMode=0x0) returned 0x1 [0116.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\06 - System.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\06 - system.lnk.partially.cryptonar")) returned 1 [0116.152] SetErrorMode (uMode=0x1) returned 0x0 [0116.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.153] SetErrorMode (uMode=0x0) returned 0x1 [0116.153] GetFileType (hFile=0x230) returned 0x1 [0116.153] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.155] SetErrorMode (uMode=0x1) returned 0x0 [0116.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47aee2af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0116.155] SetErrorMode (uMode=0x0) returned 0x1 [0116.155] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\07 - Event Viewer.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\07 - event viewer.lnk.partially.cryptonar")) returned 1 [0116.157] SetErrorMode (uMode=0x1) returned 0x0 [0116.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.158] SetErrorMode (uMode=0x0) returned 0x1 [0116.158] GetFileType (hFile=0x230) returned 0x1 [0116.158] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.161] SetErrorMode (uMode=0x1) returned 0x0 [0116.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47b1446a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x431)) returned 1 [0116.161] SetErrorMode (uMode=0x0) returned 0x1 [0116.162] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\08 - Power Options.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\08 - power options.lnk.partially.cryptonar")) returned 1 [0116.163] SetErrorMode (uMode=0x1) returned 0x0 [0116.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.164] SetErrorMode (uMode=0x0) returned 0x1 [0116.164] GetFileType (hFile=0x230) returned 0x1 [0116.164] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.166] SetErrorMode (uMode=0x1) returned 0x0 [0116.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47b1446a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0116.166] SetErrorMode (uMode=0x0) returned 0x1 [0116.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\09 - Mobility Center.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\09 - mobility center.lnk.partially.cryptonar")) returned 1 [0116.167] SetErrorMode (uMode=0x1) returned 0x0 [0116.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.168] SetErrorMode (uMode=0x0) returned 0x1 [0116.168] GetFileType (hFile=0x230) returned 0x1 [0116.168] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.170] SetErrorMode (uMode=0x1) returned 0x0 [0116.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa847c665, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa847c665, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47b1446a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43f)) returned 1 [0116.170] SetErrorMode (uMode=0x0) returned 0x1 [0116.170] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\10 - Programs and Features.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\10 - programs and features.lnk.partially.cryptonar")) returned 1 [0116.172] SetErrorMode (uMode=0x1) returned 0x0 [0116.172] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.173] SetErrorMode (uMode=0x0) returned 0x1 [0116.173] GetFileType (hFile=0x230) returned 0x1 [0116.173] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.194] SetErrorMode (uMode=0x1) returned 0x0 [0116.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47b63b20, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0116.194] SetErrorMode (uMode=0x0) returned 0x1 [0116.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows\\winx\\group3\\desktop.ini.partially.cryptonar")) returned 1 [0116.196] SetErrorMode (uMode=0x1) returned 0x0 [0116.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.197] SetErrorMode (uMode=0x0) returned 0x1 [0116.197] GetFileType (hFile=0x230) returned 0x1 [0116.197] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.198] SetErrorMode (uMode=0x1) returned 0x0 [0116.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x47b63b20, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0116.198] SetErrorMode (uMode=0x0) returned 0x1 [0116.198] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Microsoft\\Windows Sidebar\\settings.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.partially.cryptonar")) returned 1 [0116.200] SetErrorMode (uMode=0x1) returned 0x0 [0116.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.202] SetErrorMode (uMode=0x0) returned 0x1 [0116.202] GetFileType (hFile=0x230) returned 0x1 [0116.202] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.202] SetErrorMode (uMode=0x1) returned 0x0 [0116.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x269a8c69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269a8c69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x269a8c69, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0116.202] SetErrorMode (uMode=0x0) returned 0x1 [0116.202] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat.partially.cryptonar")) returned 1 [0116.203] SetErrorMode (uMode=0x1) returned 0x0 [0116.203] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.204] SetErrorMode (uMode=0x0) returned 0x1 [0116.204] GetFileType (hFile=0x230) returned 0x1 [0116.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.205] SetErrorMode (uMode=0x1) returned 0x0 [0116.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdd8de4c, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdd8de4c, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdd8de4c, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0116.205] SetErrorMode (uMode=0x0) returned 0x1 [0116.205] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat.partially.cryptonar")) returned 1 [0116.206] SetErrorMode (uMode=0x1) returned 0x0 [0116.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.207] SetErrorMode (uMode=0x0) returned 0x1 [0116.207] GetFileType (hFile=0x230) returned 0x1 [0116.207] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.207] SetErrorMode (uMode=0x1) returned 0x0 [0116.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcc3358, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcc3358, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcc3358, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0116.207] SetErrorMode (uMode=0x0) returned 0x1 [0116.207] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat.partially.cryptonar")) returned 1 [0116.209] SetErrorMode (uMode=0x1) returned 0x0 [0116.209] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.210] SetErrorMode (uMode=0x0) returned 0x1 [0116.210] GetFileType (hFile=0x230) returned 0x1 [0116.210] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.276] SetErrorMode (uMode=0x1) returned 0x0 [0116.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x10cf01c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10cf01c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47c1f64b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x140af)) returned 1 [0116.277] SetErrorMode (uMode=0x0) returned 0x1 [0116.277] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml.partially.cryptonar")) returned 1 [0116.278] SetErrorMode (uMode=0x1) returned 0x0 [0116.278] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.279] SetErrorMode (uMode=0x0) returned 0x1 [0116.279] GetFileType (hFile=0x230) returned 0x1 [0116.279] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.279] SetErrorMode (uMode=0x1) returned 0x0 [0116.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcda68d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcda68d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcda68d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0116.279] SetErrorMode (uMode=0x0) returned 0x1 [0116.279] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat.partially.cryptonar")) returned 1 [0116.281] SetErrorMode (uMode=0x1) returned 0x0 [0116.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.281] SetErrorMode (uMode=0x0) returned 0x1 [0116.282] GetFileType (hFile=0x230) returned 0x1 [0116.282] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.282] SetErrorMode (uMode=0x1) returned 0x0 [0116.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x25d96dcc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25d96dcc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x25d96dcc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0116.282] SetErrorMode (uMode=0x0) returned 0x1 [0116.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat.partially.cryptonar")) returned 1 [0116.283] SetErrorMode (uMode=0x1) returned 0x0 [0116.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\postsigningdata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.284] SetErrorMode (uMode=0x0) returned 0x1 [0116.284] GetFileType (hFile=0x230) returned 0x1 [0116.284] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.285] SetErrorMode (uMode=0x1) returned 0x0 [0116.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\postsigningdata"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ad065e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x24ad065e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47c1f64b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x65)) returned 1 [0116.285] SetErrorMode (uMode=0x0) returned 0x1 [0116.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\postsigningdata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\postSigningData.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\postsigningdata.partially.cryptonar")) returned 1 [0116.286] SetErrorMode (uMode=0x1) returned 0x0 [0116.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\directorylinks.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.287] SetErrorMode (uMode=0x0) returned 0x1 [0116.287] GetFileType (hFile=0x230) returned 0x1 [0116.288] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.313] SetErrorMode (uMode=0x1) returned 0x0 [0116.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\directorylinks.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1ca206, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c1ca206, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47c70b0a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x90f)) returned 1 [0116.314] SetErrorMode (uMode=0x0) returned 0x1 [0116.314] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\directorylinks.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\directoryLinks.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\directorylinks.json.partially.cryptonar")) returned 1 [0116.315] SetErrorMode (uMode=0x1) returned 0x0 [0116.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\frequencycap.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.315] SetErrorMode (uMode=0x0) returned 0x1 [0116.315] GetFileType (hFile=0x230) returned 0x1 [0116.315] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.316] SetErrorMode (uMode=0x1) returned 0x0 [0116.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\frequencycap.json"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d302fa2, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7d5d8202, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x47c70b0a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2)) returned 1 [0116.316] SetErrorMode (uMode=0x0) returned 0x1 [0116.316] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\frequencycap.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\frequencyCap.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\frequencycap.json.partially.cryptonar")) returned 1 [0116.318] SetErrorMode (uMode=0x1) returned 0x0 [0116.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\_cache_clean_"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.319] SetErrorMode (uMode=0x0) returned 0x1 [0116.319] GetFileType (hFile=0x230) returned 0x1 [0116.320] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.320] SetErrorMode (uMode=0x1) returned 0x0 [0116.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\_cache_clean_"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79f1be64, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x79f1be64, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x47c91d23, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0116.321] SetErrorMode (uMode=0x0) returned 0x1 [0116.321] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\_cache_clean_"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\_CACHE_CLEAN_.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\_cache_clean_.partially.cryptonar")) returned 1 [0116.322] SetErrorMode (uMode=0x1) returned 0x0 [0116.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.323] SetErrorMode (uMode=0x0) returned 0x1 [0116.323] GetFileType (hFile=0x230) returned 0x1 [0116.323] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.356] SetErrorMode (uMode=0x1) returned 0x0 [0116.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf6d2437, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x3c489786, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x47cee163, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x57e0)) returned 1 [0116.356] SetErrorMode (uMode=0x0) returned 0x1 [0116.356] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.partially.cryptonar")) returned 1 [0116.358] SetErrorMode (uMode=0x1) returned 0x0 [0116.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.360] SetErrorMode (uMode=0x0) returned 0x1 [0116.360] GetFileType (hFile=0x230) returned 0x1 [0116.360] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.417] SetErrorMode (uMode=0x1) returned 0x0 [0116.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e745d7, ftCreationTime.dwHighDateTime=0x1d2d446, ftLastAccessTime.dwLowDateTime=0x3e745d7, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x47d7712f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x124c)) returned 1 [0116.417] SetErrorMode (uMode=0x0) returned 0x1 [0116.418] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\index.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\index.log.partially.cryptonar")) returned 1 [0116.420] SetErrorMode (uMode=0x1) returned 0x0 [0116.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00230E843D3A08B230E933E226DB601D643BC852" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00230e843d3a08b230e933e226db601d643bc852"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.425] SetErrorMode (uMode=0x0) returned 0x1 [0116.425] GetFileType (hFile=0x230) returned 0x1 [0116.425] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.428] SetErrorMode (uMode=0x1) returned 0x0 [0116.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00230E843D3A08B230E933E226DB601D643BC852" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00230e843d3a08b230e933e226db601d643bc852"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c1e6c6, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54c1e6c6, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47d9ccc8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x147d)) returned 1 [0116.428] SetErrorMode (uMode=0x0) returned 0x1 [0116.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00230E843D3A08B230E933E226DB601D643BC852" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00230e843d3a08b230e933e226db601d643bc852"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00230E843D3A08B230E933E226DB601D643BC852.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00230e843d3a08b230e933e226db601d643bc852.partially.cryptonar")) returned 1 [0116.430] SetErrorMode (uMode=0x1) returned 0x0 [0116.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00396519A728CAF55BA5985F2822E3CD29D0B17E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00396519a728caf55ba5985f2822e3cd29d0b17e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.431] SetErrorMode (uMode=0x0) returned 0x1 [0116.431] GetFileType (hFile=0x230) returned 0x1 [0116.431] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.465] SetErrorMode (uMode=0x1) returned 0x0 [0116.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00396519A728CAF55BA5985F2822E3CD29D0B17E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00396519a728caf55ba5985f2822e3cd29d0b17e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863d9532, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863d9532, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x47deb454, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe9d)) returned 1 [0116.465] SetErrorMode (uMode=0x0) returned 0x1 [0116.465] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00396519A728CAF55BA5985F2822E3CD29D0B17E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00396519a728caf55ba5985f2822e3cd29d0b17e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\00396519A728CAF55BA5985F2822E3CD29D0B17E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\00396519a728caf55ba5985f2822e3cd29d0b17e.partially.cryptonar")) returned 1 [0116.466] SetErrorMode (uMode=0x1) returned 0x0 [0116.466] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0070686314FCF810B3CEE062939E2805C4894837" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0070686314fcf810b3cee062939e2805c4894837"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.467] SetErrorMode (uMode=0x0) returned 0x1 [0116.467] GetFileType (hFile=0x230) returned 0x1 [0116.467] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.470] SetErrorMode (uMode=0x1) returned 0x0 [0116.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0070686314FCF810B3CEE062939E2805C4894837" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0070686314fcf810b3cee062939e2805c4894837"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x47deb454, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd26)) returned 1 [0116.470] SetErrorMode (uMode=0x0) returned 0x1 [0116.470] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0070686314FCF810B3CEE062939E2805C4894837" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0070686314fcf810b3cee062939e2805c4894837"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0070686314FCF810B3CEE062939E2805C4894837.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0070686314fcf810b3cee062939e2805c4894837.partially.cryptonar")) returned 1 [0116.471] SetErrorMode (uMode=0x1) returned 0x0 [0116.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01936D44B3D7F728EFEB4C28574EF44AB7260A17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01936d44b3d7f728efeb4c28574ef44ab7260a17"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.473] SetErrorMode (uMode=0x0) returned 0x1 [0116.473] GetFileType (hFile=0x230) returned 0x1 [0116.473] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.561] SetErrorMode (uMode=0x1) returned 0x0 [0116.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01936D44B3D7F728EFEB4C28574EF44AB7260A17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01936d44b3d7f728efeb4c28574ef44ab7260a17"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e0eb62, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x79e0eb62, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x47ece16e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0116.561] SetErrorMode (uMode=0x0) returned 0x1 [0116.561] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01936D44B3D7F728EFEB4C28574EF44AB7260A17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01936d44b3d7f728efeb4c28574ef44ab7260a17"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01936D44B3D7F728EFEB4C28574EF44AB7260A17.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01936d44b3d7f728efeb4c28574ef44ab7260a17.partially.cryptonar")) returned 1 [0116.563] SetErrorMode (uMode=0x1) returned 0x0 [0116.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01CC9F4D43A947CA6202BA62A7FFF28C6881C1BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01cc9f4d43a947ca6202ba62a7fff28c6881c1bf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.564] SetErrorMode (uMode=0x0) returned 0x1 [0116.564] GetFileType (hFile=0x230) returned 0x1 [0116.564] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.604] SetErrorMode (uMode=0x1) returned 0x0 [0116.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01CC9F4D43A947CA6202BA62A7FFF28C6881C1BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01cc9f4d43a947ca6202ba62a7fff28c6881c1bf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f09bc31, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f09bc31, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47f40775, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24cc)) returned 1 [0116.604] SetErrorMode (uMode=0x0) returned 0x1 [0116.604] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01CC9F4D43A947CA6202BA62A7FFF28C6881C1BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01cc9f4d43a947ca6202ba62a7fff28c6881c1bf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01CC9F4D43A947CA6202BA62A7FFF28C6881C1BF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01cc9f4d43a947ca6202ba62a7fff28c6881c1bf.partially.cryptonar")) returned 1 [0116.605] SetErrorMode (uMode=0x1) returned 0x0 [0116.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01D69525274B61DE5FF860EF9BDF5BEDBB7E52C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01d69525274b61de5ff860ef9bdf5bedbb7e52c6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.606] SetErrorMode (uMode=0x0) returned 0x1 [0116.606] GetFileType (hFile=0x230) returned 0x1 [0116.606] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.629] SetErrorMode (uMode=0x1) returned 0x0 [0116.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01D69525274B61DE5FF860EF9BDF5BEDBB7E52C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01d69525274b61de5ff860ef9bdf5bedbb7e52c6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88f6f40e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88f6f40e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x47f669b2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xeef)) returned 1 [0116.629] SetErrorMode (uMode=0x0) returned 0x1 [0116.629] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01D69525274B61DE5FF860EF9BDF5BEDBB7E52C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01d69525274b61de5ff860ef9bdf5bedbb7e52c6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\01D69525274B61DE5FF860EF9BDF5BEDBB7E52C6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\01d69525274b61de5ff860ef9bdf5bedbb7e52c6.partially.cryptonar")) returned 1 [0116.630] SetErrorMode (uMode=0x1) returned 0x0 [0116.630] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\023DB71E21A04D5A6CE60A1EC2C15A40BE00DD08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\023db71e21a04d5a6ce60a1ec2c15a40be00dd08"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.632] SetErrorMode (uMode=0x0) returned 0x1 [0116.632] GetFileType (hFile=0x230) returned 0x1 [0116.632] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.668] SetErrorMode (uMode=0x1) returned 0x0 [0116.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\023DB71E21A04D5A6CE60A1EC2C15A40BE00DD08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\023db71e21a04d5a6ce60a1ec2c15a40be00dd08"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47fd915a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x31c6)) returned 1 [0116.669] SetErrorMode (uMode=0x0) returned 0x1 [0116.669] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\023DB71E21A04D5A6CE60A1EC2C15A40BE00DD08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\023db71e21a04d5a6ce60a1ec2c15a40be00dd08"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\023DB71E21A04D5A6CE60A1EC2C15A40BE00DD08.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\023db71e21a04d5a6ce60a1ec2c15a40be00dd08.partially.cryptonar")) returned 1 [0116.671] SetErrorMode (uMode=0x1) returned 0x0 [0116.671] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\02556929cf2e7913af6e896368676f9bec324df4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.672] SetErrorMode (uMode=0x0) returned 0x1 [0116.672] GetFileType (hFile=0x230) returned 0x1 [0116.672] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.689] SetErrorMode (uMode=0x1) returned 0x0 [0116.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\02556929cf2e7913af6e896368676f9bec324df4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9f1bba, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa9f1bba, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x47ffff3e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0116.689] SetErrorMode (uMode=0x0) returned 0x1 [0116.689] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\02556929cf2e7913af6e896368676f9bec324df4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\02556929CF2E7913AF6E896368676F9BEC324DF4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\02556929cf2e7913af6e896368676f9bec324df4.partially.cryptonar")) returned 1 [0116.691] SetErrorMode (uMode=0x1) returned 0x0 [0116.691] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\025e6c3190211a09d15d92e5656fb71220b7737e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.692] SetErrorMode (uMode=0x0) returned 0x1 [0116.692] GetFileType (hFile=0x230) returned 0x1 [0116.693] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.709] SetErrorMode (uMode=0x1) returned 0x0 [0116.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\025e6c3190211a09d15d92e5656fb71220b7737e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4804b989, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x115f)) returned 1 [0116.710] SetErrorMode (uMode=0x0) returned 0x1 [0116.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\025e6c3190211a09d15d92e5656fb71220b7737e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\025E6C3190211A09D15D92E5656FB71220B7737E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\025e6c3190211a09d15d92e5656fb71220b7737e.partially.cryptonar")) returned 1 [0116.712] SetErrorMode (uMode=0x1) returned 0x0 [0116.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0396d4fe028249b03b952ecac5bdc2698d7ac41d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.713] SetErrorMode (uMode=0x0) returned 0x1 [0116.713] GetFileType (hFile=0x230) returned 0x1 [0116.713] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.734] SetErrorMode (uMode=0x1) returned 0x0 [0116.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0396d4fe028249b03b952ecac5bdc2698d7ac41d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48071a92, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0116.734] SetErrorMode (uMode=0x0) returned 0x1 [0116.734] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0396d4fe028249b03b952ecac5bdc2698d7ac41d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0396D4FE028249B03B952ECAC5BDC2698D7AC41D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0396d4fe028249b03b952ecac5bdc2698d7ac41d.partially.cryptonar")) returned 1 [0116.735] SetErrorMode (uMode=0x1) returned 0x0 [0116.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04407a80544b9cddb0bf74a9c5090d338ded55e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.736] SetErrorMode (uMode=0x0) returned 0x1 [0116.736] GetFileType (hFile=0x230) returned 0x1 [0116.736] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.791] SetErrorMode (uMode=0x1) returned 0x0 [0116.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04407a80544b9cddb0bf74a9c5090d338ded55e6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4810a470, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0116.791] SetErrorMode (uMode=0x0) returned 0x1 [0116.791] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04407a80544b9cddb0bf74a9c5090d338ded55e6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04407A80544B9CDDB0BF74A9C5090D338DED55E6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04407a80544b9cddb0bf74a9c5090d338ded55e6.partially.cryptonar")) returned 1 [0116.792] SetErrorMode (uMode=0x1) returned 0x0 [0116.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04825b72bd3ff3b25000ee8b3660f3e1748cf56d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.794] SetErrorMode (uMode=0x0) returned 0x1 [0116.794] GetFileType (hFile=0x230) returned 0x1 [0116.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.862] SetErrorMode (uMode=0x1) returned 0x0 [0116.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04825b72bd3ff3b25000ee8b3660f3e1748cf56d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x481a2f84, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0116.862] SetErrorMode (uMode=0x0) returned 0x1 [0116.862] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04825b72bd3ff3b25000ee8b3660f3e1748cf56d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04825B72BD3FF3B25000EE8B3660F3E1748CF56D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04825b72bd3ff3b25000ee8b3660f3e1748cf56d.partially.cryptonar")) returned 1 [0116.865] SetErrorMode (uMode=0x1) returned 0x0 [0116.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04dda15772bb1ebe40f174d3d0ad961ab0d85881"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.866] SetErrorMode (uMode=0x0) returned 0x1 [0116.866] GetFileType (hFile=0x230) returned 0x1 [0116.866] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.946] SetErrorMode (uMode=0x1) returned 0x0 [0116.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04dda15772bb1ebe40f174d3d0ad961ab0d85881"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7117a71e, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x7117a71e, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x4828f718, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0116.946] SetErrorMode (uMode=0x0) returned 0x1 [0116.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04dda15772bb1ebe40f174d3d0ad961ab0d85881"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04DDA15772BB1EBE40F174D3D0AD961AB0D85881.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04dda15772bb1ebe40f174d3d0ad961ab0d85881.partially.cryptonar")) returned 1 [0116.947] SetErrorMode (uMode=0x1) returned 0x0 [0116.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04e42d40e9ff818034b152ebbd5d2648e474b06e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.948] SetErrorMode (uMode=0x0) returned 0x1 [0116.948] GetFileType (hFile=0x230) returned 0x1 [0116.948] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.950] SetErrorMode (uMode=0x1) returned 0x0 [0116.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04e42d40e9ff818034b152ebbd5d2648e474b06e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e1699e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e1699e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4828f718, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ed5)) returned 1 [0116.950] SetErrorMode (uMode=0x0) returned 0x1 [0116.950] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04e42d40e9ff818034b152ebbd5d2648e474b06e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\04E42D40E9FF818034B152EBBD5D2648E474B06E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\04e42d40e9ff818034b152ebbd5d2648e474b06e.partially.cryptonar")) returned 1 [0116.951] SetErrorMode (uMode=0x1) returned 0x0 [0116.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\053023c6abe9799c7cba3d16bb67c1b7f7b0d8a0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.952] SetErrorMode (uMode=0x0) returned 0x1 [0116.952] GetFileType (hFile=0x230) returned 0x1 [0116.952] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.954] SetErrorMode (uMode=0x1) returned 0x0 [0116.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\053023c6abe9799c7cba3d16bb67c1b7f7b0d8a0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55334590, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x55334590, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4828f718, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7b83)) returned 1 [0116.954] SetErrorMode (uMode=0x0) returned 0x1 [0116.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\053023c6abe9799c7cba3d16bb67c1b7f7b0d8a0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\053023C6ABE9799C7CBA3D16BB67C1B7F7B0D8A0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\053023c6abe9799c7cba3d16bb67c1b7f7b0d8a0.partially.cryptonar")) returned 1 [0116.955] SetErrorMode (uMode=0x1) returned 0x0 [0116.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.957] SetErrorMode (uMode=0x0) returned 0x1 [0116.957] GetFileType (hFile=0x230) returned 0x1 [0116.957] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.958] SetErrorMode (uMode=0x1) returned 0x0 [0116.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x482adc8b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0116.958] SetErrorMode (uMode=0x0) returned 0x1 [0116.958] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6.partially.cryptonar")) returned 1 [0116.959] SetErrorMode (uMode=0x1) returned 0x0 [0116.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\073b56d883e94b03370493a96df99c2b51fb3e9d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.961] SetErrorMode (uMode=0x0) returned 0x1 [0116.961] GetFileType (hFile=0x230) returned 0x1 [0116.961] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0116.994] SetErrorMode (uMode=0x1) returned 0x0 [0116.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\073b56d883e94b03370493a96df99c2b51fb3e9d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ff577a9, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3ff577a9, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48300bd0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0116.994] SetErrorMode (uMode=0x0) returned 0x1 [0116.994] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\073b56d883e94b03370493a96df99c2b51fb3e9d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\073B56D883E94B03370493A96DF99C2B51FB3E9D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\073b56d883e94b03370493a96df99c2b51fb3e9d.partially.cryptonar")) returned 1 [0116.996] SetErrorMode (uMode=0x1) returned 0x0 [0116.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0782e7f698be212fdcb80d8de2c97c611ae50dff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0116.997] SetErrorMode (uMode=0x0) returned 0x1 [0116.997] GetFileType (hFile=0x230) returned 0x1 [0116.997] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.011] SetErrorMode (uMode=0x1) returned 0x0 [0117.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0782e7f698be212fdcb80d8de2c97c611ae50dff"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48320456, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2cd2)) returned 1 [0117.012] SetErrorMode (uMode=0x0) returned 0x1 [0117.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0782e7f698be212fdcb80d8de2c97c611ae50dff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0782E7F698BE212FDCB80D8DE2C97C611AE50DFF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0782e7f698be212fdcb80d8de2c97c611ae50dff.partially.cryptonar")) returned 1 [0117.014] SetErrorMode (uMode=0x1) returned 0x0 [0117.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\085cfb45496b3087abcb8abd8529b3eb41d17c27"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.016] SetErrorMode (uMode=0x0) returned 0x1 [0117.016] GetFileType (hFile=0x230) returned 0x1 [0117.016] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.154] SetErrorMode (uMode=0x1) returned 0x0 [0117.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\085cfb45496b3087abcb8abd8529b3eb41d17c27"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48477a1c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x85af)) returned 1 [0117.154] SetErrorMode (uMode=0x0) returned 0x1 [0117.154] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\085cfb45496b3087abcb8abd8529b3eb41d17c27"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\085CFB45496B3087ABCB8ABD8529B3EB41D17C27.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\085cfb45496b3087abcb8abd8529b3eb41d17c27.partially.cryptonar")) returned 1 [0117.155] SetErrorMode (uMode=0x1) returned 0x0 [0117.156] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a1144b8734850f5325aa6c259041ea8a201062c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.157] SetErrorMode (uMode=0x0) returned 0x1 [0117.157] GetFileType (hFile=0x230) returned 0x1 [0117.157] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.160] SetErrorMode (uMode=0x1) returned 0x0 [0117.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a1144b8734850f5325aa6c259041ea8a201062c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f9e43, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x828f9e43, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x48477a1c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc5f)) returned 1 [0117.161] SetErrorMode (uMode=0x0) returned 0x1 [0117.161] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a1144b8734850f5325aa6c259041ea8a201062c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A1144B8734850F5325AA6C259041EA8A201062C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a1144b8734850f5325aa6c259041ea8a201062c.partially.cryptonar")) returned 1 [0117.162] SetErrorMode (uMode=0x1) returned 0x0 [0117.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.163] SetErrorMode (uMode=0x0) returned 0x1 [0117.164] GetFileType (hFile=0x230) returned 0x1 [0117.164] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.165] SetErrorMode (uMode=0x1) returned 0x0 [0117.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4849db25, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x749)) returned 1 [0117.165] SetErrorMode (uMode=0x0) returned 0x1 [0117.165] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5.partially.cryptonar")) returned 1 [0117.167] SetErrorMode (uMode=0x1) returned 0x0 [0117.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a9b36c9f5bca2621c56bd4b714a9141238cf27d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.170] SetErrorMode (uMode=0x0) returned 0x1 [0117.171] GetFileType (hFile=0x230) returned 0x1 [0117.171] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.196] SetErrorMode (uMode=0x1) returned 0x0 [0117.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a9b36c9f5bca2621c56bd4b714a9141238cf27d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x484ea0a4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x53be)) returned 1 [0117.197] SetErrorMode (uMode=0x0) returned 0x1 [0117.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a9b36c9f5bca2621c56bd4b714a9141238cf27d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0A9B36C9F5BCA2621C56BD4B714A9141238CF27D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0a9b36c9f5bca2621c56bd4b714a9141238cf27d.partially.cryptonar")) returned 1 [0117.198] SetErrorMode (uMode=0x1) returned 0x0 [0117.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0adcf0e2a022cedf8d199ed2889db295128c4e25"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.199] SetErrorMode (uMode=0x0) returned 0x1 [0117.199] GetFileType (hFile=0x230) returned 0x1 [0117.199] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.229] SetErrorMode (uMode=0x1) returned 0x0 [0117.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0adcf0e2a022cedf8d199ed2889db295128c4e25"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88f6ccdf, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88f6ccdf, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x48536550, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x63dd)) returned 1 [0117.229] SetErrorMode (uMode=0x0) returned 0x1 [0117.230] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0adcf0e2a022cedf8d199ed2889db295128c4e25"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0ADCF0E2A022CEDF8D199ED2889DB295128C4E25.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0adcf0e2a022cedf8d199ed2889db295128c4e25.partially.cryptonar")) returned 1 [0117.231] SetErrorMode (uMode=0x1) returned 0x0 [0117.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0b55d23f82ee119dc0472267436cd5f2868e3b14"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.232] SetErrorMode (uMode=0x0) returned 0x1 [0117.232] GetFileType (hFile=0x230) returned 0x1 [0117.232] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.263] SetErrorMode (uMode=0x1) returned 0x0 [0117.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0b55d23f82ee119dc0472267436cd5f2868e3b14"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4858299a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a4ec)) returned 1 [0117.264] SetErrorMode (uMode=0x0) returned 0x1 [0117.264] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0b55d23f82ee119dc0472267436cd5f2868e3b14"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0B55D23F82EE119DC0472267436CD5F2868E3B14.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0b55d23f82ee119dc0472267436cd5f2868e3b14.partially.cryptonar")) returned 1 [0117.265] SetErrorMode (uMode=0x1) returned 0x0 [0117.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0bcd5c644e4a81783f24db39416d1ce0ca0c3015"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.266] SetErrorMode (uMode=0x0) returned 0x1 [0117.266] GetFileType (hFile=0x230) returned 0x1 [0117.266] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.268] SetErrorMode (uMode=0x1) returned 0x0 [0117.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0bcd5c644e4a81783f24db39416d1ce0ca0c3015"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c56e65b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3c56e65b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4858299a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15d10)) returned 1 [0117.269] SetErrorMode (uMode=0x0) returned 0x1 [0117.269] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0bcd5c644e4a81783f24db39416d1ce0ca0c3015"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0BCD5C644E4A81783F24DB39416D1CE0CA0C3015.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0bcd5c644e4a81783f24db39416d1ce0ca0c3015.partially.cryptonar")) returned 1 [0117.270] SetErrorMode (uMode=0x1) returned 0x0 [0117.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0cfeb549e537f8b2151a62ba069ae7a6d363bb90"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.272] SetErrorMode (uMode=0x0) returned 0x1 [0117.272] GetFileType (hFile=0x230) returned 0x1 [0117.272] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.273] SetErrorMode (uMode=0x1) returned 0x0 [0117.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0cfeb549e537f8b2151a62ba069ae7a6d363bb90"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x485a8baf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed3)) returned 1 [0117.274] SetErrorMode (uMode=0x0) returned 0x1 [0117.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0cfeb549e537f8b2151a62ba069ae7a6d363bb90"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0CFEB549E537F8B2151A62BA069AE7A6D363BB90.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0cfeb549e537f8b2151a62ba069ae7a6d363bb90.partially.cryptonar")) returned 1 [0117.275] SetErrorMode (uMode=0x1) returned 0x0 [0117.275] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d1b36e62742c7776d68b1240296d02dfd6478ff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.276] SetErrorMode (uMode=0x0) returned 0x1 [0117.276] GetFileType (hFile=0x230) returned 0x1 [0117.276] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.293] SetErrorMode (uMode=0x1) returned 0x0 [0117.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d1b36e62742c7776d68b1240296d02dfd6478ff"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74c739ea, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74c739ea, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x485cee93, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0117.293] SetErrorMode (uMode=0x0) returned 0x1 [0117.294] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d1b36e62742c7776d68b1240296d02dfd6478ff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D1B36E62742C7776D68B1240296D02DFD6478FF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d1b36e62742c7776d68b1240296d02dfd6478ff.partially.cryptonar")) returned 1 [0117.295] SetErrorMode (uMode=0x1) returned 0x0 [0117.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d83d658a0c069047f6b9fd30bfdedd80863b5f0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.296] SetErrorMode (uMode=0x0) returned 0x1 [0117.296] GetFileType (hFile=0x230) returned 0x1 [0117.296] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.302] SetErrorMode (uMode=0x1) returned 0x0 [0117.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d83d658a0c069047f6b9fd30bfdedd80863b5f0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8921d56b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8921d56b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x485f4fc7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0117.302] SetErrorMode (uMode=0x0) returned 0x1 [0117.302] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d83d658a0c069047f6b9fd30bfdedd80863b5f0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0D83D658A0C069047F6B9FD30BFDEDD80863B5F0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0d83d658a0c069047f6b9fd30bfdedd80863b5f0.partially.cryptonar")) returned 1 [0117.304] SetErrorMode (uMode=0x1) returned 0x0 [0117.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e030ae41b2ab97664b455929a8a0721ba5d1f69"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.305] SetErrorMode (uMode=0x0) returned 0x1 [0117.305] GetFileType (hFile=0x230) returned 0x1 [0117.305] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.306] SetErrorMode (uMode=0x1) returned 0x0 [0117.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e030ae41b2ab97664b455929a8a0721ba5d1f69"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44332a8e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x44332a8e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x485f4fc7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1 [0117.307] SetErrorMode (uMode=0x0) returned 0x1 [0117.307] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e030ae41b2ab97664b455929a8a0721ba5d1f69"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E030AE41B2AB97664B455929A8A0721BA5D1F69.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e030ae41b2ab97664b455929a8a0721ba5d1f69.partially.cryptonar")) returned 1 [0117.308] SetErrorMode (uMode=0x1) returned 0x0 [0117.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e331c2ef53b5c952b79b038c00588087d45a128"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.309] SetErrorMode (uMode=0x0) returned 0x1 [0117.310] GetFileType (hFile=0x230) returned 0x1 [0117.310] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.335] SetErrorMode (uMode=0x1) returned 0x0 [0117.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e331c2ef53b5c952b79b038c00588087d45a128"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x486415e7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xedf)) returned 1 [0117.335] SetErrorMode (uMode=0x0) returned 0x1 [0117.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e331c2ef53b5c952b79b038c00588087d45a128"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0E331C2EF53B5C952B79B038C00588087D45A128.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0e331c2ef53b5c952b79b038c00588087d45a128.partially.cryptonar")) returned 1 [0117.336] SetErrorMode (uMode=0x1) returned 0x0 [0117.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0ec55da246cc743c7eea604eb85a206384b78d8f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.338] SetErrorMode (uMode=0x0) returned 0x1 [0117.338] GetFileType (hFile=0x230) returned 0x1 [0117.338] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.389] SetErrorMode (uMode=0x1) returned 0x0 [0117.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0ec55da246cc743c7eea604eb85a206384b78d8f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89983f86, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89983f86, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x486b3c20, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x27b0)) returned 1 [0117.389] SetErrorMode (uMode=0x0) returned 0x1 [0117.389] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0ec55da246cc743c7eea604eb85a206384b78d8f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EC55DA246CC743C7EEA604EB85A206384B78D8F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0ec55da246cc743c7eea604eb85a206384b78d8f.partially.cryptonar")) returned 1 [0117.391] SetErrorMode (uMode=0x1) returned 0x0 [0117.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.392] SetErrorMode (uMode=0x0) returned 0x1 [0117.392] GetFileType (hFile=0x230) returned 0x1 [0117.392] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.432] SetErrorMode (uMode=0x1) returned 0x0 [0117.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0cbb13, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3e0cbb13, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48726490, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0117.432] SetErrorMode (uMode=0x0) returned 0x1 [0117.432] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f.partially.cryptonar")) returned 1 [0117.433] SetErrorMode (uMode=0x1) returned 0x0 [0117.433] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0efa10e4516acc80858411ca65a3cff2b1ab347d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.435] SetErrorMode (uMode=0x0) returned 0x1 [0117.435] GetFileType (hFile=0x230) returned 0x1 [0117.435] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.533] SetErrorMode (uMode=0x1) returned 0x0 [0117.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0efa10e4516acc80858411ca65a3cff2b1ab347d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfbb5d6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddfbb5d6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4880b0f6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0117.533] SetErrorMode (uMode=0x0) returned 0x1 [0117.533] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0efa10e4516acc80858411ca65a3cff2b1ab347d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0EFA10E4516ACC80858411CA65A3CFF2B1AB347D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0efa10e4516acc80858411ca65a3cff2b1ab347d.partially.cryptonar")) returned 1 [0117.534] SetErrorMode (uMode=0x1) returned 0x0 [0117.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fcd257674b1dec53e0617114c11061f0395be84"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.545] SetErrorMode (uMode=0x0) returned 0x1 [0117.545] GetFileType (hFile=0x230) returned 0x1 [0117.545] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.564] SetErrorMode (uMode=0x1) returned 0x0 [0117.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fcd257674b1dec53e0617114c11061f0395be84"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4885e91e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10df)) returned 1 [0117.564] SetErrorMode (uMode=0x0) returned 0x1 [0117.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fcd257674b1dec53e0617114c11061f0395be84"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FCD257674B1DEC53E0617114C11061F0395BE84.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fcd257674b1dec53e0617114c11061f0395be84.partially.cryptonar")) returned 1 [0117.567] SetErrorMode (uMode=0x1) returned 0x0 [0117.567] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fee7e531224ddc68090378ea0dd267e4a43a052"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.568] SetErrorMode (uMode=0x0) returned 0x1 [0117.568] GetFileType (hFile=0x230) returned 0x1 [0117.568] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.619] SetErrorMode (uMode=0x1) returned 0x0 [0117.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fee7e531224ddc68090378ea0dd267e4a43a052"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6969fa, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6969fa, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x488f008e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0117.619] SetErrorMode (uMode=0x0) returned 0x1 [0117.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fee7e531224ddc68090378ea0dd267e4a43a052"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\0FEE7E531224DDC68090378EA0DD267E4A43A052.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\0fee7e531224ddc68090378ea0dd267e4a43a052.partially.cryptonar")) returned 1 [0117.621] SetErrorMode (uMode=0x1) returned 0x0 [0117.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\10242bacb3a923dc9924a5b41fc879a31af03963"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.622] SetErrorMode (uMode=0x0) returned 0x1 [0117.622] GetFileType (hFile=0x230) returned 0x1 [0117.622] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.627] SetErrorMode (uMode=0x1) returned 0x0 [0117.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\10242bacb3a923dc9924a5b41fc879a31af03963"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5589f73, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5589f73, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x488f008e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0117.627] SetErrorMode (uMode=0x0) returned 0x1 [0117.627] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\10242bacb3a923dc9924a5b41fc879a31af03963"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\10242BACB3A923DC9924A5B41FC879A31AF03963.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\10242bacb3a923dc9924a5b41fc879a31af03963.partially.cryptonar")) returned 1 [0117.629] SetErrorMode (uMode=0x1) returned 0x0 [0117.629] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102dc0b203b92ae5ada25e34ceb5788226ca2769"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.631] SetErrorMode (uMode=0x0) returned 0x1 [0117.631] GetFileType (hFile=0x230) returned 0x1 [0117.631] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.669] SetErrorMode (uMode=0x1) returned 0x0 [0117.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102dc0b203b92ae5ada25e34ceb5788226ca2769"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881da781, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881da781, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x489627eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0117.670] SetErrorMode (uMode=0x0) returned 0x1 [0117.670] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102dc0b203b92ae5ada25e34ceb5788226ca2769"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102DC0B203B92AE5ADA25E34CEB5788226CA2769.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102dc0b203b92ae5ada25e34ceb5788226ca2769.partially.cryptonar")) returned 1 [0117.671] SetErrorMode (uMode=0x1) returned 0x0 [0117.671] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102e001fb34d784fbf727701c7932e3fc58af45d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.672] SetErrorMode (uMode=0x0) returned 0x1 [0117.673] GetFileType (hFile=0x230) returned 0x1 [0117.673] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.741] SetErrorMode (uMode=0x1) returned 0x0 [0117.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102e001fb34d784fbf727701c7932e3fc58af45d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cb941fc, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7cb941fc, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x48a213b5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1 [0117.741] SetErrorMode (uMode=0x0) returned 0x1 [0117.741] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102e001fb34d784fbf727701c7932e3fc58af45d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\102E001FB34D784FBF727701C7932E3FC58AF45D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\102e001fb34d784fbf727701c7932e3fc58af45d.partially.cryptonar")) returned 1 [0117.743] SetErrorMode (uMode=0x1) returned 0x0 [0117.743] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.744] SetErrorMode (uMode=0x0) returned 0x1 [0117.744] GetFileType (hFile=0x230) returned 0x1 [0117.744] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.746] SetErrorMode (uMode=0x1) returned 0x0 [0117.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef374aa, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef374aa, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48a213b5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8)) returned 1 [0117.747] SetErrorMode (uMode=0x0) returned 0x1 [0117.747] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d.partially.cryptonar")) returned 1 [0117.748] SetErrorMode (uMode=0x1) returned 0x0 [0117.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\116d5e76041e1dfc3004d30feeb76351bb9d361f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.749] SetErrorMode (uMode=0x0) returned 0x1 [0117.749] GetFileType (hFile=0x230) returned 0x1 [0117.749] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.762] SetErrorMode (uMode=0x1) returned 0x0 [0117.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\116d5e76041e1dfc3004d30feeb76351bb9d361f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48a4bbba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x113a)) returned 1 [0117.763] SetErrorMode (uMode=0x0) returned 0x1 [0117.763] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\116d5e76041e1dfc3004d30feeb76351bb9d361f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\116D5E76041E1DFC3004D30FEEB76351BB9D361F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\116d5e76041e1dfc3004d30feeb76351bb9d361f.partially.cryptonar")) returned 1 [0117.764] SetErrorMode (uMode=0x1) returned 0x0 [0117.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1355867c7c8acb52152cdc249b64d742cc40340d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.765] SetErrorMode (uMode=0x0) returned 0x1 [0117.765] GetFileType (hFile=0x230) returned 0x1 [0117.765] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.767] SetErrorMode (uMode=0x1) returned 0x0 [0117.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1355867c7c8acb52152cdc249b64d742cc40340d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870666b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x870666b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x48a4bbba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2159)) returned 1 [0117.768] SetErrorMode (uMode=0x0) returned 0x1 [0117.768] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1355867c7c8acb52152cdc249b64d742cc40340d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1355867C7C8ACB52152CDC249B64D742CC40340D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1355867c7c8acb52152cdc249b64d742cc40340d.partially.cryptonar")) returned 1 [0117.769] SetErrorMode (uMode=0x1) returned 0x0 [0117.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1367e452aefaa74cb544b69373fccbb6c0e95aeb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.771] SetErrorMode (uMode=0x0) returned 0x1 [0117.771] GetFileType (hFile=0x230) returned 0x1 [0117.771] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.802] SetErrorMode (uMode=0x1) returned 0x0 [0117.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1367e452aefaa74cb544b69373fccbb6c0e95aeb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94e774c7, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x94e774c7, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48ab9c8e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0117.803] SetErrorMode (uMode=0x0) returned 0x1 [0117.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1367e452aefaa74cb544b69373fccbb6c0e95aeb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1367E452AEFAA74CB544B69373FCCBB6C0E95AEB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1367e452aefaa74cb544b69373fccbb6c0e95aeb.partially.cryptonar")) returned 1 [0117.804] SetErrorMode (uMode=0x1) returned 0x0 [0117.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.805] SetErrorMode (uMode=0x0) returned 0x1 [0117.805] GetFileType (hFile=0x230) returned 0x1 [0117.805] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.811] SetErrorMode (uMode=0x1) returned 0x0 [0117.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48ab9c8e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48e)) returned 1 [0117.811] SetErrorMode (uMode=0x0) returned 0x1 [0117.811] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04.partially.cryptonar")) returned 1 [0117.813] SetErrorMode (uMode=0x1) returned 0x0 [0117.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\13871f2088220bcd932d60c30c272709deaabb04"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.815] SetErrorMode (uMode=0x0) returned 0x1 [0117.815] GetFileType (hFile=0x230) returned 0x1 [0117.815] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.836] SetErrorMode (uMode=0x1) returned 0x0 [0117.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\13871f2088220bcd932d60c30c272709deaabb04"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48b061f0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0117.836] SetErrorMode (uMode=0x0) returned 0x1 [0117.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\13871f2088220bcd932d60c30c272709deaabb04"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\13871F2088220BCD932D60C30C272709DEAABB04.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\13871f2088220bcd932d60c30c272709deaabb04.partially.cryptonar")) returned 1 [0117.838] SetErrorMode (uMode=0x1) returned 0x0 [0117.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1456d316bee665c776e86dc63d0f546ba069bfbe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.839] SetErrorMode (uMode=0x0) returned 0x1 [0117.839] GetFileType (hFile=0x230) returned 0x1 [0117.839] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.854] SetErrorMode (uMode=0x1) returned 0x0 [0117.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1456d316bee665c776e86dc63d0f546ba069bfbe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48b2c432, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x112f)) returned 1 [0117.854] SetErrorMode (uMode=0x0) returned 0x1 [0117.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1456d316bee665c776e86dc63d0f546ba069bfbe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1456D316BEE665C776E86DC63D0F546BA069BFBE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1456d316bee665c776e86dc63d0f546ba069bfbe.partially.cryptonar")) returned 1 [0117.856] SetErrorMode (uMode=0x1) returned 0x0 [0117.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14786be4b1040fae49eabd0e2222b7edcc6df321"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.857] SetErrorMode (uMode=0x0) returned 0x1 [0117.857] GetFileType (hFile=0x230) returned 0x1 [0117.857] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.917] SetErrorMode (uMode=0x1) returned 0x0 [0117.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14786be4b1040fae49eabd0e2222b7edcc6df321"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc23c4e53, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc23c4e53, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48bc4d02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0117.918] SetErrorMode (uMode=0x0) returned 0x1 [0117.918] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14786be4b1040fae49eabd0e2222b7edcc6df321"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14786BE4B1040FAE49EABD0E2222B7EDCC6DF321.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14786be4b1040fae49eabd0e2222b7edcc6df321.partially.cryptonar")) returned 1 [0117.920] SetErrorMode (uMode=0x1) returned 0x0 [0117.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14926d90946b0f4ba2fca38d75a5fba83ef29ad0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.921] SetErrorMode (uMode=0x0) returned 0x1 [0117.921] GetFileType (hFile=0x230) returned 0x1 [0117.921] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.923] SetErrorMode (uMode=0x1) returned 0x0 [0117.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14926d90946b0f4ba2fca38d75a5fba83ef29ad0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c43436, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x62c43436, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48bc4d02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1131)) returned 1 [0117.924] SetErrorMode (uMode=0x0) returned 0x1 [0117.924] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14926d90946b0f4ba2fca38d75a5fba83ef29ad0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14926D90946B0F4BA2FCA38D75A5FBA83EF29AD0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14926d90946b0f4ba2fca38d75a5fba83ef29ad0.partially.cryptonar")) returned 1 [0117.925] SetErrorMode (uMode=0x1) returned 0x0 [0117.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.927] SetErrorMode (uMode=0x0) returned 0x1 [0117.927] GetFileType (hFile=0x230) returned 0x1 [0117.927] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.929] SetErrorMode (uMode=0x1) returned 0x0 [0117.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45d6c8e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45d6c8e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48becaf0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2fc)) returned 1 [0117.929] SetErrorMode (uMode=0x0) returned 0x1 [0117.929] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1.partially.cryptonar")) returned 1 [0117.931] SetErrorMode (uMode=0x1) returned 0x0 [0117.931] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1531fbe50ce357526c558ee71aa60fc4d2e29e0c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.932] SetErrorMode (uMode=0x0) returned 0x1 [0117.932] GetFileType (hFile=0x230) returned 0x1 [0117.932] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.933] SetErrorMode (uMode=0x1) returned 0x0 [0117.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1531fbe50ce357526c558ee71aa60fc4d2e29e0c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x441b5306, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x441b5306, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x48becaf0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa98)) returned 1 [0117.934] SetErrorMode (uMode=0x0) returned 0x1 [0117.934] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1531fbe50ce357526c558ee71aa60fc4d2e29e0c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1531FBE50CE357526C558EE71AA60FC4D2E29E0C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1531fbe50ce357526c558ee71aa60fc4d2e29e0c.partially.cryptonar")) returned 1 [0117.935] SetErrorMode (uMode=0x1) returned 0x0 [0117.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15704e847dcfec6e9a511a8897461209c820c052"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.936] SetErrorMode (uMode=0x0) returned 0x1 [0117.936] GetFileType (hFile=0x230) returned 0x1 [0117.936] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.938] SetErrorMode (uMode=0x1) returned 0x0 [0117.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15704e847dcfec6e9a511a8897461209c820c052"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c8de57, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88c8de57, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x48becaf0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2b49)) returned 1 [0117.939] SetErrorMode (uMode=0x0) returned 0x1 [0117.939] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15704e847dcfec6e9a511a8897461209c820c052"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15704E847DCFEC6E9A511A8897461209C820C052.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15704e847dcfec6e9a511a8897461209c820c052.partially.cryptonar")) returned 1 [0117.940] SetErrorMode (uMode=0x1) returned 0x0 [0117.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15e4224da48b83948028aebe08751418dbde4688"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.941] SetErrorMode (uMode=0x0) returned 0x1 [0117.941] GetFileType (hFile=0x230) returned 0x1 [0117.941] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.943] SetErrorMode (uMode=0x1) returned 0x0 [0117.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15e4224da48b83948028aebe08751418dbde4688"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87975e62, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87975e62, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x48c110dd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10bc)) returned 1 [0117.944] SetErrorMode (uMode=0x0) returned 0x1 [0117.944] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15e4224da48b83948028aebe08751418dbde4688"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\15E4224DA48B83948028AEBE08751418DBDE4688.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\15e4224da48b83948028aebe08751418dbde4688.partially.cryptonar")) returned 1 [0117.945] SetErrorMode (uMode=0x1) returned 0x0 [0117.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16103553c2544720a8768aaa60212be5916a4ce9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.946] SetErrorMode (uMode=0x0) returned 0x1 [0117.946] GetFileType (hFile=0x230) returned 0x1 [0117.946] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0117.985] SetErrorMode (uMode=0x1) returned 0x0 [0117.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16103553c2544720a8768aaa60212be5916a4ce9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54484ec5, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54484ec5, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x48c5d689, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1470b)) returned 1 [0117.986] SetErrorMode (uMode=0x0) returned 0x1 [0117.986] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16103553c2544720a8768aaa60212be5916a4ce9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16103553C2544720A8768AAA60212BE5916A4CE9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16103553c2544720a8768aaa60212be5916a4ce9.partially.cryptonar")) returned 1 [0117.988] SetErrorMode (uMode=0x1) returned 0x0 [0117.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16114ba75206b6fa4c51adc8a73db4c6635f6af9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0117.989] SetErrorMode (uMode=0x0) returned 0x1 [0117.989] GetFileType (hFile=0x230) returned 0x1 [0117.989] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0118.070] SetErrorMode (uMode=0x1) returned 0x0 [0118.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16114ba75206b6fa4c51adc8a73db4c6635f6af9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x48d46f90, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe90f)) returned 1 [0118.070] SetErrorMode (uMode=0x0) returned 0x1 [0118.070] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16114ba75206b6fa4c51adc8a73db4c6635f6af9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16114BA75206B6FA4C51ADC8A73DB4C6635F6AF9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16114ba75206b6fa4c51adc8a73db4c6635f6af9.partially.cryptonar")) returned 1 [0118.071] SetErrorMode (uMode=0x1) returned 0x0 [0118.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\165a82b735ddde6f05e29a770a52297eae982902"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0118.072] SetErrorMode (uMode=0x0) returned 0x1 [0118.072] GetFileType (hFile=0x230) returned 0x1 [0118.072] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0118.496] SetErrorMode (uMode=0x1) returned 0x0 [0118.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\165a82b735ddde6f05e29a770a52297eae982902"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f15f168, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f15f168, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4914843c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1df0)) returned 1 [0118.496] SetErrorMode (uMode=0x0) returned 0x1 [0118.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\165a82b735ddde6f05e29a770a52297eae982902"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\165A82B735DDDE6F05E29A770A52297EAE982902.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\165a82b735ddde6f05e29a770a52297eae982902.partially.cryptonar")) returned 1 [0118.498] SetErrorMode (uMode=0x1) returned 0x0 [0118.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16656b13e13fb159c452e606297943961e41bd83"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0118.499] SetErrorMode (uMode=0x0) returned 0x1 [0118.499] GetFileType (hFile=0x230) returned 0x1 [0118.499] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0118.546] SetErrorMode (uMode=0x1) returned 0x0 [0118.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16656b13e13fb159c452e606297943961e41bd83"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe06175fa, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe06175fa, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x491bcc65, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd6e)) returned 1 [0118.547] SetErrorMode (uMode=0x0) returned 0x1 [0118.547] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16656b13e13fb159c452e606297943961e41bd83"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\16656B13E13FB159C452E606297943961E41BD83.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\16656b13e13fb159c452e606297943961e41bd83.partially.cryptonar")) returned 1 [0118.562] SetErrorMode (uMode=0x1) returned 0x0 [0118.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\167109a0c523f60f2197836b0bcda9b52a4d16ae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0118.564] SetErrorMode (uMode=0x0) returned 0x1 [0118.564] GetFileType (hFile=0x230) returned 0x1 [0118.564] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0118.610] SetErrorMode (uMode=0x1) returned 0x0 [0118.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\167109a0c523f60f2197836b0bcda9b52a4d16ae"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88424732, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88424732, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x492534f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a75)) returned 1 [0118.610] SetErrorMode (uMode=0x0) returned 0x1 [0118.610] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\167109a0c523f60f2197836b0bcda9b52a4d16ae"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\167109A0C523F60F2197836B0BCDA9B52A4D16AE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\167109a0c523f60f2197836b0bcda9b52a4d16ae.partially.cryptonar")) returned 1 [0118.612] SetErrorMode (uMode=0x1) returned 0x0 [0118.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\170f54edbe19be8676cc69b53bac08c8932d118a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0118.612] SetErrorMode (uMode=0x0) returned 0x1 [0118.613] GetFileType (hFile=0x230) returned 0x1 [0118.613] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0118.615] SetErrorMode (uMode=0x1) returned 0x0 [0118.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\170f54edbe19be8676cc69b53bac08c8932d118a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef2d87b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef2d87b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x49279595, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf5b2)) returned 1 [0118.615] SetErrorMode (uMode=0x0) returned 0x1 [0118.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\170f54edbe19be8676cc69b53bac08c8932d118a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\170F54EDBE19BE8676CC69B53BAC08C8932D118A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\170f54edbe19be8676cc69b53bac08c8932d118a.partially.cryptonar")) returned 1 [0118.616] SetErrorMode (uMode=0x1) returned 0x0 [0118.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0118.617] SetErrorMode (uMode=0x0) returned 0x1 [0118.617] GetFileType (hFile=0x230) returned 0x1 [0118.617] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0118.631] SetErrorMode (uMode=0x1) returned 0x0 [0118.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4929f963, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe29)) returned 1 [0118.631] SetErrorMode (uMode=0x0) returned 0x1 [0118.631] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac.partially.cryptonar")) returned 1 [0118.633] SetErrorMode (uMode=0x1) returned 0x0 [0118.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\17fde78a9aca4445d5d13c94208bc4b0e4ba046a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0118.634] SetErrorMode (uMode=0x0) returned 0x1 [0118.634] GetFileType (hFile=0x230) returned 0x1 [0118.634] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0118.668] SetErrorMode (uMode=0x1) returned 0x0 [0118.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\17fde78a9aca4445d5d13c94208bc4b0e4ba046a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x492ebced, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8978)) returned 1 [0118.669] SetErrorMode (uMode=0x0) returned 0x1 [0118.669] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\17fde78a9aca4445d5d13c94208bc4b0e4ba046a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\17FDE78A9ACA4445D5D13C94208BC4B0E4BA046A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\17fde78a9aca4445d5d13c94208bc4b0e4ba046a.partially.cryptonar")) returned 1 [0118.670] SetErrorMode (uMode=0x1) returned 0x0 [0118.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1801cfe5bc39c5b24721e8cb2f32854ef5c5f96a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0118.671] SetErrorMode (uMode=0x0) returned 0x1 [0118.671] GetFileType (hFile=0x230) returned 0x1 [0118.671] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0118.699] SetErrorMode (uMode=0x1) returned 0x0 [0118.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1801cfe5bc39c5b24721e8cb2f32854ef5c5f96a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x493382a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e80)) returned 1 [0118.699] SetErrorMode (uMode=0x0) returned 0x1 [0118.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1801cfe5bc39c5b24721e8cb2f32854ef5c5f96a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1801CFE5BC39C5B24721E8CB2F32854EF5C5F96A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1801cfe5bc39c5b24721e8cb2f32854ef5c5f96a.partially.cryptonar")) returned 1 [0118.701] SetErrorMode (uMode=0x1) returned 0x0 [0118.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1833d74fe9fd5e002d12ad1d5ce9845c539e6d49"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0118.702] SetErrorMode (uMode=0x0) returned 0x1 [0118.702] GetFileType (hFile=0x230) returned 0x1 [0118.702] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0118.726] SetErrorMode (uMode=0x1) returned 0x0 [0118.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1833d74fe9fd5e002d12ad1d5ce9845c539e6d49"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4938475a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1131)) returned 1 [0118.726] SetErrorMode (uMode=0x0) returned 0x1 [0118.726] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1833d74fe9fd5e002d12ad1d5ce9845c539e6d49"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1833D74FE9FD5E002D12AD1D5CE9845C539E6D49.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1833d74fe9fd5e002d12ad1d5ce9845c539e6d49.partially.cryptonar")) returned 1 [0118.728] SetErrorMode (uMode=0x1) returned 0x0 [0118.728] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\19b6a58f54f979d1cf008970b9b0d36b11b7944d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0118.730] SetErrorMode (uMode=0x0) returned 0x1 [0118.730] GetFileType (hFile=0x230) returned 0x1 [0118.730] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0118.823] SetErrorMode (uMode=0x1) returned 0x0 [0118.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\19b6a58f54f979d1cf008970b9b0d36b11b7944d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83a9edb7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x83a9edb7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4946958f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xab6)) returned 1 [0118.823] SetErrorMode (uMode=0x0) returned 0x1 [0118.823] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\19b6a58f54f979d1cf008970b9b0d36b11b7944d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\19B6A58F54F979D1CF008970B9B0D36B11B7944D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\19b6a58f54f979d1cf008970b9b0d36b11b7944d.partially.cryptonar")) returned 1 [0118.824] SetErrorMode (uMode=0x1) returned 0x0 [0118.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0118.826] SetErrorMode (uMode=0x0) returned 0x1 [0118.826] GetFileType (hFile=0x230) returned 0x1 [0118.826] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0118.843] SetErrorMode (uMode=0x1) returned 0x0 [0118.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4948f795, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0118.843] SetErrorMode (uMode=0x0) returned 0x1 [0118.843] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55.partially.cryptonar")) returned 1 [0118.845] SetErrorMode (uMode=0x1) returned 0x0 [0118.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1aa5afb1639fed28192bc2781a550c89494cdf9a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0118.846] SetErrorMode (uMode=0x0) returned 0x1 [0118.846] GetFileType (hFile=0x230) returned 0x1 [0118.846] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.006] SetErrorMode (uMode=0x1) returned 0x0 [0119.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1aa5afb1639fed28192bc2781a550c89494cdf9a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4963366f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x125c)) returned 1 [0119.006] SetErrorMode (uMode=0x0) returned 0x1 [0119.006] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1aa5afb1639fed28192bc2781a550c89494cdf9a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1AA5AFB1639FED28192BC2781A550C89494CDF9A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1aa5afb1639fed28192bc2781a550c89494cdf9a.partially.cryptonar")) returned 1 [0119.008] SetErrorMode (uMode=0x1) returned 0x0 [0119.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1adeb94741ea84bb04219da402bbc420b5512a2a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.010] SetErrorMode (uMode=0x0) returned 0x1 [0119.010] GetFileType (hFile=0x230) returned 0x1 [0119.010] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.092] SetErrorMode (uMode=0x1) returned 0x0 [0119.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1adeb94741ea84bb04219da402bbc420b5512a2a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x496f1db8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe58)) returned 1 [0119.092] SetErrorMode (uMode=0x0) returned 0x1 [0119.093] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1adeb94741ea84bb04219da402bbc420b5512a2a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1ADEB94741EA84BB04219DA402BBC420B5512A2A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1adeb94741ea84bb04219da402bbc420b5512a2a.partially.cryptonar")) returned 1 [0119.094] SetErrorMode (uMode=0x1) returned 0x0 [0119.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c7a6ce17940a6c75210fa60c52339417dedeefa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.095] SetErrorMode (uMode=0x0) returned 0x1 [0119.095] GetFileType (hFile=0x230) returned 0x1 [0119.095] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.111] SetErrorMode (uMode=0x1) returned 0x0 [0119.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c7a6ce17940a6c75210fa60c52339417dedeefa"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443ff7d8, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x443ff7d8, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x49717f05, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0119.111] SetErrorMode (uMode=0x0) returned 0x1 [0119.111] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c7a6ce17940a6c75210fa60c52339417dedeefa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C7A6CE17940A6C75210FA60C52339417DEDEEFA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c7a6ce17940a6c75210fa60c52339417dedeefa.partially.cryptonar")) returned 1 [0119.113] SetErrorMode (uMode=0x1) returned 0x0 [0119.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c849477de15b1f8f2245945f3f44468f58146df"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.114] SetErrorMode (uMode=0x0) returned 0x1 [0119.114] GetFileType (hFile=0x230) returned 0x1 [0119.114] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.189] SetErrorMode (uMode=0x1) returned 0x0 [0119.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c849477de15b1f8f2245945f3f44468f58146df"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe0bec3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fe0bec3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x497dc70a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11ca)) returned 1 [0119.189] SetErrorMode (uMode=0x0) returned 0x1 [0119.189] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c849477de15b1f8f2245945f3f44468f58146df"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1C849477DE15B1F8F2245945F3F44468F58146DF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1c849477de15b1f8f2245945f3f44468f58146df.partially.cryptonar")) returned 1 [0119.191] SetErrorMode (uMode=0x1) returned 0x0 [0119.191] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d719b3ee2a34a4e2dc9d0a4eae1df7948ea5a46"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.194] SetErrorMode (uMode=0x0) returned 0x1 [0119.194] GetFileType (hFile=0x230) returned 0x1 [0119.194] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.319] SetErrorMode (uMode=0x1) returned 0x0 [0119.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d719b3ee2a34a4e2dc9d0a4eae1df7948ea5a46"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a0d9885, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8a0d9885, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4992f068, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11cc)) returned 1 [0119.319] SetErrorMode (uMode=0x0) returned 0x1 [0119.319] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d719b3ee2a34a4e2dc9d0a4eae1df7948ea5a46"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D719B3EE2A34A4E2DC9D0A4EAE1DF7948EA5A46.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d719b3ee2a34a4e2dc9d0a4eae1df7948ea5a46.partially.cryptonar")) returned 1 [0119.322] SetErrorMode (uMode=0x1) returned 0x0 [0119.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d8c7f5b73a4cd02e54f20a75b1fc29be8e2ee8b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.324] SetErrorMode (uMode=0x0) returned 0x1 [0119.324] GetFileType (hFile=0x230) returned 0x1 [0119.324] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.347] SetErrorMode (uMode=0x1) returned 0x0 [0119.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d8c7f5b73a4cd02e54f20a75b1fc29be8e2ee8b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x49958371, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0119.347] SetErrorMode (uMode=0x0) returned 0x1 [0119.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d8c7f5b73a4cd02e54f20a75b1fc29be8e2ee8b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D8C7F5B73A4CD02E54F20A75B1FC29BE8E2EE8B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d8c7f5b73a4cd02e54f20a75b1fc29be8e2ee8b.partially.cryptonar")) returned 1 [0119.349] SetErrorMode (uMode=0x1) returned 0x0 [0119.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d94118c6fba173ac2ce7c335c3cb9b7365f1e90"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.350] SetErrorMode (uMode=0x0) returned 0x1 [0119.350] GetFileType (hFile=0x230) returned 0x1 [0119.350] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.376] SetErrorMode (uMode=0x1) returned 0x0 [0119.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d94118c6fba173ac2ce7c335c3cb9b7365f1e90"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf98914, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bf98914, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x499a0859, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0119.376] SetErrorMode (uMode=0x0) returned 0x1 [0119.376] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d94118c6fba173ac2ce7c335c3cb9b7365f1e90"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1D94118C6FBA173AC2CE7C335C3CB9B7365F1E90.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1d94118c6fba173ac2ce7c335c3cb9b7365f1e90.partially.cryptonar")) returned 1 [0119.387] SetErrorMode (uMode=0x1) returned 0x0 [0119.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dbc56bbf48819d9cc9e96f72309a2d366dd1b72"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.388] SetErrorMode (uMode=0x0) returned 0x1 [0119.388] GetFileType (hFile=0x230) returned 0x1 [0119.388] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.468] SetErrorMode (uMode=0x1) returned 0x0 [0119.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dbc56bbf48819d9cc9e96f72309a2d366dd1b72"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0883ae, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0883ae, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x49a85582, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2aa0)) returned 1 [0119.469] SetErrorMode (uMode=0x0) returned 0x1 [0119.469] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dbc56bbf48819d9cc9e96f72309a2d366dd1b72"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DBC56BBF48819D9CC9E96F72309A2D366DD1B72.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dbc56bbf48819d9cc9e96f72309a2d366dd1b72.partially.cryptonar")) returned 1 [0119.470] SetErrorMode (uMode=0x1) returned 0x0 [0119.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dcb6e830b5f6182674047bc07be94e869a82dc1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.471] SetErrorMode (uMode=0x0) returned 0x1 [0119.471] GetFileType (hFile=0x230) returned 0x1 [0119.471] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.489] SetErrorMode (uMode=0x1) returned 0x0 [0119.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dcb6e830b5f6182674047bc07be94e869a82dc1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x49aab7f3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe55)) returned 1 [0119.489] SetErrorMode (uMode=0x0) returned 0x1 [0119.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dcb6e830b5f6182674047bc07be94e869a82dc1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1DCB6E830B5F6182674047BC07BE94E869A82DC1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1dcb6e830b5f6182674047bc07be94e869a82dc1.partially.cryptonar")) returned 1 [0119.491] SetErrorMode (uMode=0x1) returned 0x0 [0119.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.492] SetErrorMode (uMode=0x0) returned 0x1 [0119.492] GetFileType (hFile=0x230) returned 0x1 [0119.492] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.494] SetErrorMode (uMode=0x1) returned 0x0 [0119.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466cfd21, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466cfd21, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x49ad1927, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x489)) returned 1 [0119.494] SetErrorMode (uMode=0x0) returned 0x1 [0119.494] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7.partially.cryptonar")) returned 1 [0119.496] SetErrorMode (uMode=0x1) returned 0x0 [0119.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e654765dd4c0b7a97a94ba7430ff4f02539b4d4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.497] SetErrorMode (uMode=0x0) returned 0x1 [0119.497] GetFileType (hFile=0x230) returned 0x1 [0119.497] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.565] SetErrorMode (uMode=0x1) returned 0x0 [0119.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e654765dd4c0b7a97a94ba7430ff4f02539b4d4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x839ec8a0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x839ec8a0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x49b6a360, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf5)) returned 1 [0119.566] SetErrorMode (uMode=0x0) returned 0x1 [0119.566] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e654765dd4c0b7a97a94ba7430ff4f02539b4d4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1E654765DD4C0B7A97A94BA7430FF4F02539B4D4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1e654765dd4c0b7a97a94ba7430ff4f02539b4d4.partially.cryptonar")) returned 1 [0119.567] SetErrorMode (uMode=0x1) returned 0x0 [0119.567] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.568] SetErrorMode (uMode=0x0) returned 0x1 [0119.568] GetFileType (hFile=0x230) returned 0x1 [0119.568] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.571] SetErrorMode (uMode=0x1) returned 0x0 [0119.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x49b99b2d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf9e)) returned 1 [0119.572] SetErrorMode (uMode=0x0) returned 0x1 [0119.572] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5.partially.cryptonar")) returned 1 [0119.573] SetErrorMode (uMode=0x1) returned 0x0 [0119.573] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f03c5beb6690c5e65013adc12747a8fb0266e74"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.574] SetErrorMode (uMode=0x0) returned 0x1 [0119.574] GetFileType (hFile=0x230) returned 0x1 [0119.574] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.606] SetErrorMode (uMode=0x1) returned 0x0 [0119.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f03c5beb6690c5e65013adc12747a8fb0266e74"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x49bdcc13, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x34f8)) returned 1 [0119.606] SetErrorMode (uMode=0x0) returned 0x1 [0119.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f03c5beb6690c5e65013adc12747a8fb0266e74"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F03C5BEB6690C5E65013ADC12747A8FB0266E74.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f03c5beb6690c5e65013adc12747a8fb0266e74.partially.cryptonar")) returned 1 [0119.608] SetErrorMode (uMode=0x1) returned 0x0 [0119.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f101a980b722e67f1fb3f0366ea9e520fb47d1b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.610] SetErrorMode (uMode=0x0) returned 0x1 [0119.610] GetFileType (hFile=0x230) returned 0x1 [0119.610] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.611] SetErrorMode (uMode=0x1) returned 0x0 [0119.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f101a980b722e67f1fb3f0366ea9e520fb47d1b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87875893, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87875893, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x49bdcc13, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2607)) returned 1 [0119.612] SetErrorMode (uMode=0x0) returned 0x1 [0119.612] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f101a980b722e67f1fb3f0366ea9e520fb47d1b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F101A980B722E67F1FB3F0366EA9E520FB47D1B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f101a980b722e67f1fb3f0366ea9e520fb47d1b.partially.cryptonar")) returned 1 [0119.613] SetErrorMode (uMode=0x1) returned 0x0 [0119.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.614] SetErrorMode (uMode=0x0) returned 0x1 [0119.614] GetFileType (hFile=0x230) returned 0x1 [0119.614] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.615] SetErrorMode (uMode=0x1) returned 0x0 [0119.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x49c036a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0119.615] SetErrorMode (uMode=0x0) returned 0x1 [0119.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc.partially.cryptonar")) returned 1 [0119.617] SetErrorMode (uMode=0x1) returned 0x0 [0119.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\20343a86fb834223cc13d33560122837208f7563"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.618] SetErrorMode (uMode=0x0) returned 0x1 [0119.618] GetFileType (hFile=0x230) returned 0x1 [0119.618] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.656] SetErrorMode (uMode=0x1) returned 0x0 [0119.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\20343a86fb834223cc13d33560122837208f7563"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd94dc4f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd94dc4f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x49c508fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7ae0)) returned 1 [0119.657] SetErrorMode (uMode=0x0) returned 0x1 [0119.657] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\20343a86fb834223cc13d33560122837208f7563"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\20343A86FB834223CC13D33560122837208F7563.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\20343a86fb834223cc13d33560122837208f7563.partially.cryptonar")) returned 1 [0119.658] SetErrorMode (uMode=0x1) returned 0x0 [0119.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\209d12df1554481fbdc90931601991a892f798e7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.659] SetErrorMode (uMode=0x0) returned 0x1 [0119.659] GetFileType (hFile=0x230) returned 0x1 [0119.659] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.764] SetErrorMode (uMode=0x1) returned 0x0 [0119.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\209d12df1554481fbdc90931601991a892f798e7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x49d5a23f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0119.764] SetErrorMode (uMode=0x0) returned 0x1 [0119.764] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\209d12df1554481fbdc90931601991a892f798e7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\209D12DF1554481FBDC90931601991A892F798E7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\209d12df1554481fbdc90931601991a892f798e7.partially.cryptonar")) returned 1 [0119.765] SetErrorMode (uMode=0x1) returned 0x0 [0119.765] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2118755562a693569ee2423cb1a2136cb8f1d9cc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.767] SetErrorMode (uMode=0x0) returned 0x1 [0119.767] GetFileType (hFile=0x230) returned 0x1 [0119.767] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.894] SetErrorMode (uMode=0x1) returned 0x0 [0119.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2118755562a693569ee2423cb1a2136cb8f1d9cc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ed84046, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3ed84046, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x49ea7386, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa9a)) returned 1 [0119.894] SetErrorMode (uMode=0x0) returned 0x1 [0119.894] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2118755562a693569ee2423cb1a2136cb8f1d9cc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2118755562A693569EE2423CB1A2136CB8F1D9CC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2118755562a693569ee2423cb1a2136cb8f1d9cc.partially.cryptonar")) returned 1 [0119.899] SetErrorMode (uMode=0x1) returned 0x0 [0119.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\212cb67d7b36a171aaf7f0b1e24e5adc687acdcf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.902] SetErrorMode (uMode=0x0) returned 0x1 [0119.902] GetFileType (hFile=0x230) returned 0x1 [0119.902] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0119.974] SetErrorMode (uMode=0x1) returned 0x0 [0119.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\212cb67d7b36a171aaf7f0b1e24e5adc687acdcf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9a57ab, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa9a57ab, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x49f65eb1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0119.975] SetErrorMode (uMode=0x0) returned 0x1 [0119.975] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\212cb67d7b36a171aaf7f0b1e24e5adc687acdcf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\212CB67D7B36A171AAF7F0B1E24E5ADC687ACDCF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\212cb67d7b36a171aaf7f0b1e24e5adc687acdcf.partially.cryptonar")) returned 1 [0119.977] SetErrorMode (uMode=0x1) returned 0x0 [0119.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2144c082c2ac8fa4fb4863d9d3be7e335dd2c91d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0119.979] SetErrorMode (uMode=0x0) returned 0x1 [0119.980] GetFileType (hFile=0x230) returned 0x1 [0119.980] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.101] SetErrorMode (uMode=0x1) returned 0x0 [0120.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2144c082c2ac8fa4fb4863d9d3be7e335dd2c91d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a097017, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed6)) returned 1 [0120.102] SetErrorMode (uMode=0x0) returned 0x1 [0120.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2144c082c2ac8fa4fb4863d9d3be7e335dd2c91d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2144C082C2AC8FA4FB4863D9D3BE7E335DD2C91D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2144c082c2ac8fa4fb4863d9d3be7e335dd2c91d.partially.cryptonar")) returned 1 [0120.103] SetErrorMode (uMode=0x1) returned 0x0 [0120.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21870284bd46d6f21e756ff12837e26ac55d301d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.104] SetErrorMode (uMode=0x0) returned 0x1 [0120.104] GetFileType (hFile=0x230) returned 0x1 [0120.104] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.105] SetErrorMode (uMode=0x1) returned 0x0 [0120.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21870284bd46d6f21e756ff12837e26ac55d301d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a9669, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8b6a9669, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a097017, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1 [0120.105] SetErrorMode (uMode=0x0) returned 0x1 [0120.105] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21870284bd46d6f21e756ff12837e26ac55d301d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21870284BD46D6F21E756FF12837E26AC55D301D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21870284bd46d6f21e756ff12837e26ac55d301d.partially.cryptonar")) returned 1 [0120.107] SetErrorMode (uMode=0x1) returned 0x0 [0120.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21b0e0f8c11507cb07a1bb82407f5ad646d80836"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.108] SetErrorMode (uMode=0x0) returned 0x1 [0120.108] GetFileType (hFile=0x230) returned 0x1 [0120.108] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.110] SetErrorMode (uMode=0x1) returned 0x0 [0120.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21b0e0f8c11507cb07a1bb82407f5ad646d80836"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2fdc2c4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2fdc2c4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a0bd22e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x106c)) returned 1 [0120.110] SetErrorMode (uMode=0x0) returned 0x1 [0120.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21b0e0f8c11507cb07a1bb82407f5ad646d80836"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\21B0E0F8C11507CB07A1BB82407F5AD646D80836.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\21b0e0f8c11507cb07a1bb82407f5ad646d80836.partially.cryptonar")) returned 1 [0120.112] SetErrorMode (uMode=0x1) returned 0x0 [0120.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\224a275ad09be370f96d409f6afe2904589080ec"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.113] SetErrorMode (uMode=0x0) returned 0x1 [0120.113] GetFileType (hFile=0x230) returned 0x1 [0120.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.115] SetErrorMode (uMode=0x1) returned 0x0 [0120.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\224a275ad09be370f96d409f6afe2904589080ec"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a0bd22e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf0c)) returned 1 [0120.115] SetErrorMode (uMode=0x0) returned 0x1 [0120.115] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\224a275ad09be370f96d409f6afe2904589080ec"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\224A275AD09BE370F96D409F6AFE2904589080EC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\224a275ad09be370f96d409f6afe2904589080ec.partially.cryptonar")) returned 1 [0120.117] SetErrorMode (uMode=0x1) returned 0x0 [0120.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\225640f98ef31b52ab76cf756a5c3512e0bde89b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.119] SetErrorMode (uMode=0x0) returned 0x1 [0120.119] GetFileType (hFile=0x230) returned 0x1 [0120.119] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.133] SetErrorMode (uMode=0x1) returned 0x0 [0120.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\225640f98ef31b52ab76cf756a5c3512e0bde89b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e05239, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45e05239, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a0e35fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xafe)) returned 1 [0120.133] SetErrorMode (uMode=0x0) returned 0x1 [0120.133] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\225640f98ef31b52ab76cf756a5c3512e0bde89b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\225640F98EF31B52AB76CF756A5C3512E0BDE89B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\225640f98ef31b52ab76cf756a5c3512e0bde89b.partially.cryptonar")) returned 1 [0120.134] SetErrorMode (uMode=0x1) returned 0x0 [0120.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22777c6913a6b4768ee40d5f0103a93d8b477c3c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.136] SetErrorMode (uMode=0x0) returned 0x1 [0120.136] GetFileType (hFile=0x230) returned 0x1 [0120.136] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.167] SetErrorMode (uMode=0x1) returned 0x0 [0120.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22777c6913a6b4768ee40d5f0103a93d8b477c3c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a12f9b0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10e1)) returned 1 [0120.167] SetErrorMode (uMode=0x0) returned 0x1 [0120.167] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22777c6913a6b4768ee40d5f0103a93d8b477c3c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22777C6913A6B4768EE40D5F0103A93D8B477C3C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22777c6913a6b4768ee40d5f0103a93d8b477c3c.partially.cryptonar")) returned 1 [0120.169] SetErrorMode (uMode=0x1) returned 0x0 [0120.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22b072de2e829a9bbdd29c6c1005cbe946651c89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.170] SetErrorMode (uMode=0x0) returned 0x1 [0120.170] GetFileType (hFile=0x230) returned 0x1 [0120.170] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.182] SetErrorMode (uMode=0x1) returned 0x0 [0120.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22b072de2e829a9bbdd29c6c1005cbe946651c89"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0619d0d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe0619d0d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a155ada, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc3f)) returned 1 [0120.182] SetErrorMode (uMode=0x0) returned 0x1 [0120.182] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22b072de2e829a9bbdd29c6c1005cbe946651c89"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22B072DE2E829A9BBDD29C6C1005CBE946651C89.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22b072de2e829a9bbdd29c6c1005cbe946651c89.partially.cryptonar")) returned 1 [0120.183] SetErrorMode (uMode=0x1) returned 0x0 [0120.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22ca1c7bcd8aa6b0d991889abe75c06ca1ebacd1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.184] SetErrorMode (uMode=0x0) returned 0x1 [0120.184] GetFileType (hFile=0x230) returned 0x1 [0120.184] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.186] SetErrorMode (uMode=0x1) returned 0x0 [0120.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22ca1c7bcd8aa6b0d991889abe75c06ca1ebacd1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfeb056, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3bfeb056, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a155ada, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0120.186] SetErrorMode (uMode=0x0) returned 0x1 [0120.186] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22ca1c7bcd8aa6b0d991889abe75c06ca1ebacd1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\22CA1C7BCD8AA6B0D991889ABE75C06CA1EBACD1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\22ca1c7bcd8aa6b0d991889abe75c06ca1ebacd1.partially.cryptonar")) returned 1 [0120.188] SetErrorMode (uMode=0x1) returned 0x0 [0120.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24073350a672357b47b2d1a937642146e80aa938"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.190] SetErrorMode (uMode=0x0) returned 0x1 [0120.190] GetFileType (hFile=0x230) returned 0x1 [0120.190] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.191] SetErrorMode (uMode=0x1) returned 0x0 [0120.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24073350a672357b47b2d1a937642146e80aa938"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f849380, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x74eafda9, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a17bd87, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14f2)) returned 1 [0120.192] SetErrorMode (uMode=0x0) returned 0x1 [0120.192] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24073350a672357b47b2d1a937642146e80aa938"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24073350A672357B47B2D1A937642146E80AA938.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24073350a672357b47b2d1a937642146e80aa938.partially.cryptonar")) returned 1 [0120.193] SetErrorMode (uMode=0x1) returned 0x0 [0120.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2445fa966a09e6b22679f2707aa980bbebbc3ba8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.194] SetErrorMode (uMode=0x0) returned 0x1 [0120.194] GetFileType (hFile=0x230) returned 0x1 [0120.194] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.268] SetErrorMode (uMode=0x1) returned 0x0 [0120.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2445fa966a09e6b22679f2707aa980bbebbc3ba8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5fcccf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f5fcccf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a23aa01, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0120.268] SetErrorMode (uMode=0x0) returned 0x1 [0120.268] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2445fa966a09e6b22679f2707aa980bbebbc3ba8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2445FA966A09E6B22679F2707AA980BBEBBC3BA8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2445fa966a09e6b22679f2707aa980bbebbc3ba8.partially.cryptonar")) returned 1 [0120.270] SetErrorMode (uMode=0x1) returned 0x0 [0120.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\245ceda973b44c04325e8f3063f7596f9c88f120"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.271] SetErrorMode (uMode=0x0) returned 0x1 [0120.271] GetFileType (hFile=0x230) returned 0x1 [0120.271] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.272] SetErrorMode (uMode=0x1) returned 0x0 [0120.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\245ceda973b44c04325e8f3063f7596f9c88f120"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a23aa01, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c8e)) returned 1 [0120.273] SetErrorMode (uMode=0x0) returned 0x1 [0120.273] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\245ceda973b44c04325e8f3063f7596f9c88f120"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\245CEDA973B44C04325E8F3063F7596F9C88F120.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\245ceda973b44c04325e8f3063f7596f9c88f120.partially.cryptonar")) returned 1 [0120.274] SetErrorMode (uMode=0x1) returned 0x0 [0120.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2465113476a71563c2561e1a45df343e04bff787"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.275] SetErrorMode (uMode=0x0) returned 0x1 [0120.275] GetFileType (hFile=0x230) returned 0x1 [0120.275] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.329] SetErrorMode (uMode=0x1) returned 0x0 [0120.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2465113476a71563c2561e1a45df343e04bff787"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5622901, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5622901, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a2d31ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0120.329] SetErrorMode (uMode=0x0) returned 0x1 [0120.329] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2465113476a71563c2561e1a45df343e04bff787"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2465113476A71563C2561E1A45DF343E04BFF787.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2465113476a71563c2561e1a45df343e04bff787.partially.cryptonar")) returned 1 [0120.330] SetErrorMode (uMode=0x1) returned 0x0 [0120.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.332] SetErrorMode (uMode=0x0) returned 0x1 [0120.332] GetFileType (hFile=0x230) returned 0x1 [0120.332] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.338] SetErrorMode (uMode=0x1) returned 0x0 [0120.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e05239, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45e05239, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a2d31ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x516)) returned 1 [0120.338] SetErrorMode (uMode=0x0) returned 0x1 [0120.338] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6.partially.cryptonar")) returned 1 [0120.339] SetErrorMode (uMode=0x1) returned 0x0 [0120.339] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.340] SetErrorMode (uMode=0x0) returned 0x1 [0120.340] GetFileType (hFile=0x230) returned 0x1 [0120.341] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.343] SetErrorMode (uMode=0x1) returned 0x0 [0120.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a2d31ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1584)) returned 1 [0120.343] SetErrorMode (uMode=0x0) returned 0x1 [0120.343] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3.partially.cryptonar")) returned 1 [0120.344] SetErrorMode (uMode=0x1) returned 0x0 [0120.344] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.345] SetErrorMode (uMode=0x0) returned 0x1 [0120.345] GetFileType (hFile=0x230) returned 0x1 [0120.345] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.347] SetErrorMode (uMode=0x1) returned 0x0 [0120.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eed330c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3eed330c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a2f9ea9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12083)) returned 1 [0120.347] SetErrorMode (uMode=0x0) returned 0x1 [0120.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a.partially.cryptonar")) returned 1 [0120.348] SetErrorMode (uMode=0x1) returned 0x0 [0120.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2530ef3224b6681d2b34ed5db0b170c716eb1e39"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.349] SetErrorMode (uMode=0x0) returned 0x1 [0120.349] GetFileType (hFile=0x230) returned 0x1 [0120.349] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.357] SetErrorMode (uMode=0x1) returned 0x0 [0120.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2530ef3224b6681d2b34ed5db0b170c716eb1e39"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a2f9ea9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0120.357] SetErrorMode (uMode=0x0) returned 0x1 [0120.357] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2530ef3224b6681d2b34ed5db0b170c716eb1e39"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2530EF3224B6681D2B34ED5DB0B170C716EB1E39.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2530ef3224b6681d2b34ed5db0b170c716eb1e39.partially.cryptonar")) returned 1 [0120.358] SetErrorMode (uMode=0x1) returned 0x0 [0120.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2587f851fece6e69f3b26e54ede4e02bd3c1d496"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.359] SetErrorMode (uMode=0x0) returned 0x1 [0120.359] GetFileType (hFile=0x230) returned 0x1 [0120.359] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.397] SetErrorMode (uMode=0x1) returned 0x0 [0120.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2587f851fece6e69f3b26e54ede4e02bd3c1d496"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a37383f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1134)) returned 1 [0120.398] SetErrorMode (uMode=0x0) returned 0x1 [0120.398] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2587f851fece6e69f3b26e54ede4e02bd3c1d496"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2587F851FECE6E69F3B26E54EDE4E02BD3C1D496.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2587f851fece6e69f3b26e54ede4e02bd3c1d496.partially.cryptonar")) returned 1 [0120.399] SetErrorMode (uMode=0x1) returned 0x0 [0120.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.401] SetErrorMode (uMode=0x0) returned 0x1 [0120.401] GetFileType (hFile=0x230) returned 0x1 [0120.401] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.418] SetErrorMode (uMode=0x1) returned 0x0 [0120.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c98576, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48c98576, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a394ca1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xad2)) returned 1 [0120.419] SetErrorMode (uMode=0x0) returned 0x1 [0120.419] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e.partially.cryptonar")) returned 1 [0120.420] SetErrorMode (uMode=0x1) returned 0x0 [0120.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\25afa0d28e7333eee9f600a4a4f5b1c37a33789f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.421] SetErrorMode (uMode=0x0) returned 0x1 [0120.421] GetFileType (hFile=0x230) returned 0x1 [0120.421] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.435] SetErrorMode (uMode=0x1) returned 0x0 [0120.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\25afa0d28e7333eee9f600a4a4f5b1c37a33789f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7112e24e, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x7112e24e, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x4a3bb2ac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0120.435] SetErrorMode (uMode=0x0) returned 0x1 [0120.435] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\25afa0d28e7333eee9f600a4a4f5b1c37a33789f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\25AFA0D28E7333EEE9F600A4A4F5B1C37A33789F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\25afa0d28e7333eee9f600a4a4f5b1c37a33789f.partially.cryptonar")) returned 1 [0120.436] SetErrorMode (uMode=0x1) returned 0x0 [0120.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26686166e96a3ebdac2ed90d8f9b4ecd22bbb577"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.438] SetErrorMode (uMode=0x0) returned 0x1 [0120.438] GetFileType (hFile=0x230) returned 0x1 [0120.438] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.441] SetErrorMode (uMode=0x1) returned 0x0 [0120.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26686166e96a3ebdac2ed90d8f9b4ecd22bbb577"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a3e1354, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf12)) returned 1 [0120.441] SetErrorMode (uMode=0x0) returned 0x1 [0120.441] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26686166e96a3ebdac2ed90d8f9b4ecd22bbb577"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26686166E96A3EBDAC2ED90D8F9B4ECD22BBB577.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26686166e96a3ebdac2ed90d8f9b4ecd22bbb577.partially.cryptonar")) returned 1 [0120.442] SetErrorMode (uMode=0x1) returned 0x0 [0120.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26926d1cdb0298f2781d6fad532518f7c8b787da"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.444] SetErrorMode (uMode=0x0) returned 0x1 [0120.444] GetFileType (hFile=0x230) returned 0x1 [0120.444] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.446] SetErrorMode (uMode=0x1) returned 0x0 [0120.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26926d1cdb0298f2781d6fad532518f7c8b787da"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c16060, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2c16060, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a3e1354, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x27c3)) returned 1 [0120.446] SetErrorMode (uMode=0x0) returned 0x1 [0120.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26926d1cdb0298f2781d6fad532518f7c8b787da"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26926D1CDB0298F2781D6FAD532518F7C8B787DA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26926d1cdb0298f2781d6fad532518f7c8b787da.partially.cryptonar")) returned 1 [0120.447] SetErrorMode (uMode=0x1) returned 0x0 [0120.447] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26c8d0872de7292bc9c7f54426a5e887557300ea"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.448] SetErrorMode (uMode=0x0) returned 0x1 [0120.448] GetFileType (hFile=0x230) returned 0x1 [0120.448] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.461] SetErrorMode (uMode=0x1) returned 0x0 [0120.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26c8d0872de7292bc9c7f54426a5e887557300ea"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f888b2b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f888b2b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a4075ff, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe3d)) returned 1 [0120.461] SetErrorMode (uMode=0x0) returned 0x1 [0120.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26c8d0872de7292bc9c7f54426a5e887557300ea"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26C8D0872DE7292BC9C7F54426A5E887557300EA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26c8d0872de7292bc9c7f54426a5e887557300ea.partially.cryptonar")) returned 1 [0120.462] SetErrorMode (uMode=0x1) returned 0x0 [0120.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26d5902e65f2ec88b7e5ed33e815a3fdbe18e10f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.463] SetErrorMode (uMode=0x0) returned 0x1 [0120.463] GetFileType (hFile=0x230) returned 0x1 [0120.463] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.490] SetErrorMode (uMode=0x1) returned 0x0 [0120.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26d5902e65f2ec88b7e5ed33e815a3fdbe18e10f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a453bc0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0120.490] SetErrorMode (uMode=0x0) returned 0x1 [0120.491] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26d5902e65f2ec88b7e5ed33e815a3fdbe18e10f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\26D5902E65F2EC88B7E5ED33E815A3FDBE18E10F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\26d5902e65f2ec88b7e5ed33e815a3fdbe18e10f.partially.cryptonar")) returned 1 [0120.492] SetErrorMode (uMode=0x1) returned 0x0 [0120.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\270900e85767111bd4c54667e304a0b6656ea0a0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.493] SetErrorMode (uMode=0x0) returned 0x1 [0120.493] GetFileType (hFile=0x230) returned 0x1 [0120.493] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.625] SetErrorMode (uMode=0x1) returned 0x0 [0120.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\270900e85767111bd4c54667e304a0b6656ea0a0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a6c7f3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87a6c7f3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a5922b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1 [0120.625] SetErrorMode (uMode=0x0) returned 0x1 [0120.625] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\270900e85767111bd4c54667e304a0b6656ea0a0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\270900E85767111BD4C54667E304A0B6656EA0A0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\270900e85767111bd4c54667e304a0b6656ea0a0.partially.cryptonar")) returned 1 [0120.628] SetErrorMode (uMode=0x1) returned 0x0 [0120.628] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\273736e26cff7795be550be3b37b1d4598946999"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.628] SetErrorMode (uMode=0x0) returned 0x1 [0120.629] GetFileType (hFile=0x230) returned 0x1 [0120.629] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.667] SetErrorMode (uMode=0x1) returned 0x0 [0120.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\273736e26cff7795be550be3b37b1d4598946999"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a604b4d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x198b)) returned 1 [0120.667] SetErrorMode (uMode=0x0) returned 0x1 [0120.667] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\273736e26cff7795be550be3b37b1d4598946999"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\273736E26CFF7795BE550BE3B37B1D4598946999.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\273736e26cff7795be550be3b37b1d4598946999.partially.cryptonar")) returned 1 [0120.668] SetErrorMode (uMode=0x1) returned 0x0 [0120.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28380882022be365ede32586cd158c635b9be8d1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.669] SetErrorMode (uMode=0x0) returned 0x1 [0120.669] GetFileType (hFile=0x230) returned 0x1 [0120.669] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.711] SetErrorMode (uMode=0x1) returned 0x0 [0120.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28380882022be365ede32586cd158c635b9be8d1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a676fdd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x529)) returned 1 [0120.711] SetErrorMode (uMode=0x0) returned 0x1 [0120.711] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28380882022be365ede32586cd158c635b9be8d1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28380882022BE365EDE32586CD158C635B9BE8D1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28380882022be365ede32586cd158c635b9be8d1.partially.cryptonar")) returned 1 [0120.712] SetErrorMode (uMode=0x1) returned 0x0 [0120.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28d18c8667b2e4c79e3ce2766cf075bbfa55c129"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.713] SetErrorMode (uMode=0x0) returned 0x1 [0120.713] GetFileType (hFile=0x230) returned 0x1 [0120.713] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.761] SetErrorMode (uMode=0x1) returned 0x0 [0120.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28d18c8667b2e4c79e3ce2766cf075bbfa55c129"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862fb25e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x862fb25e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a6edf2f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xff1)) returned 1 [0120.762] SetErrorMode (uMode=0x0) returned 0x1 [0120.762] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28d18c8667b2e4c79e3ce2766cf075bbfa55c129"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28D18C8667B2E4C79E3CE2766CF075BBFA55C129.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28d18c8667b2e4c79e3ce2766cf075bbfa55c129.partially.cryptonar")) returned 1 [0120.763] SetErrorMode (uMode=0x1) returned 0x0 [0120.763] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28daeea417486b2d8ff609cc22c0244d45f802f7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.764] SetErrorMode (uMode=0x0) returned 0x1 [0120.764] GetFileType (hFile=0x230) returned 0x1 [0120.764] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.766] SetErrorMode (uMode=0x1) returned 0x0 [0120.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28daeea417486b2d8ff609cc22c0244d45f802f7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a6edf2f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf0f)) returned 1 [0120.766] SetErrorMode (uMode=0x0) returned 0x1 [0120.766] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28daeea417486b2d8ff609cc22c0244d45f802f7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\28DAEEA417486B2D8FF609CC22C0244D45F802F7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\28daeea417486b2d8ff609cc22c0244d45f802f7.partially.cryptonar")) returned 1 [0120.767] SetErrorMode (uMode=0x1) returned 0x0 [0120.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\291f29ef92755427da03ab115bd92b68f34ab659"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.768] SetErrorMode (uMode=0x0) returned 0x1 [0120.768] GetFileType (hFile=0x230) returned 0x1 [0120.768] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.770] SetErrorMode (uMode=0x1) returned 0x0 [0120.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\291f29ef92755427da03ab115bd92b68f34ab659"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8647a792, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8647a792, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a6edf2f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1124)) returned 1 [0120.770] SetErrorMode (uMode=0x0) returned 0x1 [0120.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\291f29ef92755427da03ab115bd92b68f34ab659"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\291F29EF92755427DA03AB115BD92B68F34AB659.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\291f29ef92755427da03ab115bd92b68f34ab659.partially.cryptonar")) returned 1 [0120.771] SetErrorMode (uMode=0x1) returned 0x0 [0120.771] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\297135c089b3661f5aabb8e90985c6930164b685"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.773] SetErrorMode (uMode=0x0) returned 0x1 [0120.773] GetFileType (hFile=0x230) returned 0x1 [0120.773] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.824] SetErrorMode (uMode=0x1) returned 0x0 [0120.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\297135c089b3661f5aabb8e90985c6930164b685"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5407ef62, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5407ef62, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a782095, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc4b)) returned 1 [0120.824] SetErrorMode (uMode=0x0) returned 0x1 [0120.825] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\297135c089b3661f5aabb8e90985c6930164b685"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\297135C089B3661F5AABB8E90985C6930164B685.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\297135c089b3661f5aabb8e90985c6930164b685.partially.cryptonar")) returned 1 [0120.826] SetErrorMode (uMode=0x1) returned 0x0 [0120.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a650cb5032027b0ef79f4b9916c5d43eefedb3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.827] SetErrorMode (uMode=0x0) returned 0x1 [0120.827] GetFileType (hFile=0x230) returned 0x1 [0120.827] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.843] SetErrorMode (uMode=0x1) returned 0x0 [0120.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a650cb5032027b0ef79f4b9916c5d43eefedb3a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a7a8299, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0120.844] SetErrorMode (uMode=0x0) returned 0x1 [0120.844] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a650cb5032027b0ef79f4b9916c5d43eefedb3a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a650cb5032027b0ef79f4b9916c5d43eefedb3a.partially.cryptonar")) returned 1 [0120.845] SetErrorMode (uMode=0x1) returned 0x0 [0120.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a705ba174d08f119a903ad6ae391b16ae92d9fc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.846] SetErrorMode (uMode=0x0) returned 0x1 [0120.846] GetFileType (hFile=0x230) returned 0x1 [0120.846] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.904] SetErrorMode (uMode=0x1) returned 0x0 [0120.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a705ba174d08f119a903ad6ae391b16ae92d9fc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2b60a69, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2b60a69, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a840c70, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19c75)) returned 1 [0120.905] SetErrorMode (uMode=0x0) returned 0x1 [0120.905] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a705ba174d08f119a903ad6ae391b16ae92d9fc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2A705BA174D08F119A903AD6AE391B16AE92D9FC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2a705ba174d08f119a903ad6ae391b16ae92d9fc.partially.cryptonar")) returned 1 [0120.906] SetErrorMode (uMode=0x1) returned 0x0 [0120.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2aeea30e1abf20ce6edcd6534789a8a96595e87a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.907] SetErrorMode (uMode=0x0) returned 0x1 [0120.908] GetFileType (hFile=0x230) returned 0x1 [0120.908] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.921] SetErrorMode (uMode=0x1) returned 0x0 [0120.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2aeea30e1abf20ce6edcd6534789a8a96595e87a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a866de4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x587)) returned 1 [0120.921] SetErrorMode (uMode=0x0) returned 0x1 [0120.921] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2aeea30e1abf20ce6edcd6534789a8a96595e87a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2aeea30e1abf20ce6edcd6534789a8a96595e87a.partially.cryptonar")) returned 1 [0120.922] SetErrorMode (uMode=0x1) returned 0x0 [0120.923] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2b662789dfdd9c1308ff8ecd48e05f393053163c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.923] SetErrorMode (uMode=0x0) returned 0x1 [0120.923] GetFileType (hFile=0x230) returned 0x1 [0120.924] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.925] SetErrorMode (uMode=0x1) returned 0x0 [0120.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2b662789dfdd9c1308ff8ecd48e05f393053163c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b6a9669, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8b6a9669, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4a866de4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0120.925] SetErrorMode (uMode=0x0) returned 0x1 [0120.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2b662789dfdd9c1308ff8ecd48e05f393053163c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2B662789DFDD9C1308FF8ECD48E05F393053163C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2b662789dfdd9c1308ff8ecd48e05f393053163c.partially.cryptonar")) returned 1 [0120.926] SetErrorMode (uMode=0x1) returned 0x0 [0120.926] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c18fe48fbdba136a5ec51c8b9d4382d2452c359"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.927] SetErrorMode (uMode=0x0) returned 0x1 [0120.927] GetFileType (hFile=0x230) returned 0x1 [0120.927] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.958] SetErrorMode (uMode=0x1) returned 0x0 [0120.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c18fe48fbdba136a5ec51c8b9d4382d2452c359"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a8b326a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0120.959] SetErrorMode (uMode=0x0) returned 0x1 [0120.959] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c18fe48fbdba136a5ec51c8b9d4382d2452c359"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C18FE48FBDBA136A5EC51C8B9D4382D2452C359.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c18fe48fbdba136a5ec51c8b9d4382d2452c359.partially.cryptonar")) returned 1 [0120.960] SetErrorMode (uMode=0x1) returned 0x0 [0120.960] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c40c733b84018f500f4f551fc53305a5971f05f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.961] SetErrorMode (uMode=0x0) returned 0x1 [0120.961] GetFileType (hFile=0x230) returned 0x1 [0120.961] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0120.975] SetErrorMode (uMode=0x1) returned 0x0 [0120.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c40c733b84018f500f4f551fc53305a5971f05f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4101c449, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4101c449, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4a8d9f9f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51f)) returned 1 [0120.975] SetErrorMode (uMode=0x0) returned 0x1 [0120.975] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c40c733b84018f500f4f551fc53305a5971f05f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C40C733B84018F500F4F551FC53305A5971F05F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c40c733b84018f500f4f551fc53305a5971f05f.partially.cryptonar")) returned 1 [0120.976] SetErrorMode (uMode=0x1) returned 0x0 [0120.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c5330b3725c70f20f4bc8a5385f696cc68b83c6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0120.977] SetErrorMode (uMode=0x0) returned 0x1 [0120.977] GetFileType (hFile=0x230) returned 0x1 [0120.977] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.005] SetErrorMode (uMode=0x1) returned 0x0 [0121.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c5330b3725c70f20f4bc8a5385f696cc68b83c6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4a925b22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1 [0121.005] SetErrorMode (uMode=0x0) returned 0x1 [0121.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c5330b3725c70f20f4bc8a5385f696cc68b83c6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C5330B3725C70F20F4BC8A5385F696CC68B83C6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c5330b3725c70f20f4bc8a5385f696cc68b83c6.partially.cryptonar")) returned 1 [0121.006] SetErrorMode (uMode=0x1) returned 0x0 [0121.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c706476ef0944cd159653f65034a1071345205c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.007] SetErrorMode (uMode=0x0) returned 0x1 [0121.007] GetFileType (hFile=0x230) returned 0x1 [0121.007] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.061] SetErrorMode (uMode=0x1) returned 0x0 [0121.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c706476ef0944cd159653f65034a1071345205c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4572a6e1, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4572a6e1, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4a9be4b3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2567)) returned 1 [0121.061] SetErrorMode (uMode=0x0) returned 0x1 [0121.061] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c706476ef0944cd159653f65034a1071345205c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2C706476EF0944CD159653F65034A1071345205C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2c706476ef0944cd159653f65034a1071345205c.partially.cryptonar")) returned 1 [0121.062] SetErrorMode (uMode=0x1) returned 0x0 [0121.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2ccfcbe257b8f5be4feaf68c08171daf22aeed89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.063] SetErrorMode (uMode=0x0) returned 0x1 [0121.063] GetFileType (hFile=0x230) returned 0x1 [0121.063] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.108] SetErrorMode (uMode=0x1) returned 0x0 [0121.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2ccfcbe257b8f5be4feaf68c08171daf22aeed89"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560a3a7a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x560a3a7a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4aa30b06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ca)) returned 1 [0121.109] SetErrorMode (uMode=0x0) returned 0x1 [0121.109] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2ccfcbe257b8f5be4feaf68c08171daf22aeed89"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2CCFCBE257B8F5BE4FEAF68C08171DAF22AEED89.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2ccfcbe257b8f5be4feaf68c08171daf22aeed89.partially.cryptonar")) returned 1 [0121.111] SetErrorMode (uMode=0x1) returned 0x0 [0121.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d062cf6d6777e6bd7d9d53dbab84ca6329c9727"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.112] SetErrorMode (uMode=0x0) returned 0x1 [0121.112] GetFileType (hFile=0x230) returned 0x1 [0121.112] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.373] SetErrorMode (uMode=0x1) returned 0x0 [0121.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d062cf6d6777e6bd7d9d53dbab84ca6329c9727"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87336b13, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87336b13, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4acb9576, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaa70)) returned 1 [0121.373] SetErrorMode (uMode=0x0) returned 0x1 [0121.374] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d062cf6d6777e6bd7d9d53dbab84ca6329c9727"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D062CF6D6777E6BD7D9D53DBAB84CA6329C9727.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d062cf6d6777e6bd7d9d53dbab84ca6329c9727.partially.cryptonar")) returned 1 [0121.375] SetErrorMode (uMode=0x1) returned 0x0 [0121.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d693d07dd992fa2955c9ede27fda78487556e32"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.376] SetErrorMode (uMode=0x0) returned 0x1 [0121.376] GetFileType (hFile=0x230) returned 0x1 [0121.376] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.429] SetErrorMode (uMode=0x1) returned 0x0 [0121.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d693d07dd992fa2955c9ede27fda78487556e32"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560a3a7a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x560a3a7a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4ad2b983, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11ab)) returned 1 [0121.429] SetErrorMode (uMode=0x0) returned 0x1 [0121.429] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d693d07dd992fa2955c9ede27fda78487556e32"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D693D07DD992FA2955C9EDE27FDA78487556E32.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d693d07dd992fa2955c9ede27fda78487556e32.partially.cryptonar")) returned 1 [0121.430] SetErrorMode (uMode=0x1) returned 0x0 [0121.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d7db1f2a5bbde7db3035cea82134d2cf20d58ae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.431] SetErrorMode (uMode=0x0) returned 0x1 [0121.431] GetFileType (hFile=0x230) returned 0x1 [0121.431] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.541] SetErrorMode (uMode=0x1) returned 0x0 [0121.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d7db1f2a5bbde7db3035cea82134d2cf20d58ae"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ae5cf29, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdfc)) returned 1 [0121.542] SetErrorMode (uMode=0x0) returned 0x1 [0121.542] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d7db1f2a5bbde7db3035cea82134d2cf20d58ae"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2d7db1f2a5bbde7db3035cea82134d2cf20d58ae.partially.cryptonar")) returned 1 [0121.543] SetErrorMode (uMode=0x1) returned 0x0 [0121.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e08cdaee955a40889ac5877be194c7ef12394a5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.544] SetErrorMode (uMode=0x0) returned 0x1 [0121.544] GetFileType (hFile=0x230) returned 0x1 [0121.544] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.690] SetErrorMode (uMode=0x1) returned 0x0 [0121.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e08cdaee955a40889ac5877be194c7ef12394a5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e4a361, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e4a361, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4afb41cf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x178c)) returned 1 [0121.690] SetErrorMode (uMode=0x0) returned 0x1 [0121.690] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e08cdaee955a40889ac5877be194c7ef12394a5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E08CDAEE955A40889AC5877BE194C7EF12394A5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e08cdaee955a40889ac5877be194c7ef12394a5.partially.cryptonar")) returned 1 [0121.691] SetErrorMode (uMode=0x1) returned 0x0 [0121.691] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e2d3bd78aac7dd8ec8b5ca26c36a64a912ea68b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.692] SetErrorMode (uMode=0x0) returned 0x1 [0121.692] GetFileType (hFile=0x230) returned 0x1 [0121.692] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.831] SetErrorMode (uMode=0x1) returned 0x0 [0121.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e2d3bd78aac7dd8ec8b5ca26c36a64a912ea68b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b10b86b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x125e)) returned 1 [0121.832] SetErrorMode (uMode=0x0) returned 0x1 [0121.832] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e2d3bd78aac7dd8ec8b5ca26c36a64a912ea68b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E2D3BD78AAC7DD8EC8B5CA26C36A64A912EA68B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e2d3bd78aac7dd8ec8b5ca26c36a64a912ea68b.partially.cryptonar")) returned 1 [0121.833] SetErrorMode (uMode=0x1) returned 0x0 [0121.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e78209f2bd7068695bb80aae0d3e5f19a372bca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.834] SetErrorMode (uMode=0x0) returned 0x1 [0121.834] GetFileType (hFile=0x230) returned 0x1 [0121.834] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.905] SetErrorMode (uMode=0x1) returned 0x0 [0121.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e78209f2bd7068695bb80aae0d3e5f19a372bca"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb58f5e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fb58f5e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b1ca427, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3251)) returned 1 [0121.905] SetErrorMode (uMode=0x0) returned 0x1 [0121.906] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e78209f2bd7068695bb80aae0d3e5f19a372bca"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2E78209F2BD7068695BB80AAE0D3E5F19A372BCA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2e78209f2bd7068695bb80aae0d3e5f19a372bca.partially.cryptonar")) returned 1 [0121.907] SetErrorMode (uMode=0x1) returned 0x0 [0121.907] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2eaff2699fcee0edfef4ff824c07727f657b0d45"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.908] SetErrorMode (uMode=0x0) returned 0x1 [0121.908] GetFileType (hFile=0x230) returned 0x1 [0121.908] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.909] SetErrorMode (uMode=0x1) returned 0x0 [0121.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2eaff2699fcee0edfef4ff824c07727f657b0d45"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4b1ca427, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x861)) returned 1 [0121.910] SetErrorMode (uMode=0x0) returned 0x1 [0121.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2eaff2699fcee0edfef4ff824c07727f657b0d45"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2eaff2699fcee0edfef4ff824c07727f657b0d45.partially.cryptonar")) returned 1 [0121.911] SetErrorMode (uMode=0x1) returned 0x0 [0121.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2f0a7f5a4cf50fbaa8ec8fb9f3ebef7461e5fa83"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.912] SetErrorMode (uMode=0x0) returned 0x1 [0121.912] GetFileType (hFile=0x230) returned 0x1 [0121.912] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.933] SetErrorMode (uMode=0x1) returned 0x0 [0121.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2f0a7f5a4cf50fbaa8ec8fb9f3ebef7461e5fa83"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e0f4e0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85e0f4e0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4b216793, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9191)) returned 1 [0121.934] SetErrorMode (uMode=0x0) returned 0x1 [0121.934] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2f0a7f5a4cf50fbaa8ec8fb9f3ebef7461e5fa83"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2F0A7F5A4CF50FBAA8EC8FB9F3EBEF7461E5FA83.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2f0a7f5a4cf50fbaa8ec8fb9f3ebef7461e5fa83.partially.cryptonar")) returned 1 [0121.936] SetErrorMode (uMode=0x1) returned 0x0 [0121.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2fd2e2a71f89e3a92f68cb796207228217259289"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.936] SetErrorMode (uMode=0x0) returned 0x1 [0121.937] GetFileType (hFile=0x230) returned 0x1 [0121.937] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.958] SetErrorMode (uMode=0x1) returned 0x0 [0121.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2fd2e2a71f89e3a92f68cb796207228217259289"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f09e33a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f09e33a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b23c972, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd2e6)) returned 1 [0121.958] SetErrorMode (uMode=0x0) returned 0x1 [0121.958] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2fd2e2a71f89e3a92f68cb796207228217259289"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FD2E2A71F89E3A92F68CB796207228217259289.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2fd2e2a71f89e3a92f68cb796207228217259289.partially.cryptonar")) returned 1 [0121.959] SetErrorMode (uMode=0x1) returned 0x0 [0121.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2feb6245aa212ea51f79468084964097925bd6d6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.961] SetErrorMode (uMode=0x0) returned 0x1 [0121.961] GetFileType (hFile=0x230) returned 0x1 [0121.961] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0121.983] SetErrorMode (uMode=0x1) returned 0x0 [0121.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2feb6245aa212ea51f79468084964097925bd6d6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8624b5ac, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8624b5ac, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4b288fa3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d6f)) returned 1 [0121.984] SetErrorMode (uMode=0x0) returned 0x1 [0121.985] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2feb6245aa212ea51f79468084964097925bd6d6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\2FEB6245AA212EA51F79468084964097925BD6D6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\2feb6245aa212ea51f79468084964097925bd6d6.partially.cryptonar")) returned 1 [0121.987] SetErrorMode (uMode=0x1) returned 0x0 [0121.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\311c19847187cc20c5a8a21fa39c6639f5bbcf67"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0121.988] SetErrorMode (uMode=0x0) returned 0x1 [0121.988] GetFileType (hFile=0x230) returned 0x1 [0121.988] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.040] SetErrorMode (uMode=0x1) returned 0x0 [0122.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\311c19847187cc20c5a8a21fa39c6639f5bbcf67"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b3219d4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d48)) returned 1 [0122.040] SetErrorMode (uMode=0x0) returned 0x1 [0122.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\311c19847187cc20c5a8a21fa39c6639f5bbcf67"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\311C19847187CC20C5A8A21FA39C6639F5BBCF67.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\311c19847187cc20c5a8a21fa39c6639f5bbcf67.partially.cryptonar")) returned 1 [0122.042] SetErrorMode (uMode=0x1) returned 0x0 [0122.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31220725946ac054f523c4029c40ca22a7a42621"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.043] SetErrorMode (uMode=0x0) returned 0x1 [0122.043] GetFileType (hFile=0x230) returned 0x1 [0122.043] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.054] SetErrorMode (uMode=0x1) returned 0x0 [0122.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31220725946ac054f523c4029c40ca22a7a42621"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74c739ea, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74c739ea, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4b347a11, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0122.054] SetErrorMode (uMode=0x0) returned 0x1 [0122.055] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31220725946ac054f523c4029c40ca22a7a42621"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31220725946AC054F523C4029C40CA22A7A42621.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31220725946ac054f523c4029c40ca22a7a42621.partially.cryptonar")) returned 1 [0122.056] SetErrorMode (uMode=0x1) returned 0x0 [0122.056] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31592c8b017ca0508b5f0339e7e1ea46376f2d31"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.056] SetErrorMode (uMode=0x0) returned 0x1 [0122.056] GetFileType (hFile=0x230) returned 0x1 [0122.056] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.091] SetErrorMode (uMode=0x1) returned 0x0 [0122.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31592c8b017ca0508b5f0339e7e1ea46376f2d31"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc264d4b3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc264d4b3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b393e79, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9)) returned 1 [0122.091] SetErrorMode (uMode=0x0) returned 0x1 [0122.091] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31592c8b017ca0508b5f0339e7e1ea46376f2d31"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31592C8B017CA0508B5F0339E7E1EA46376F2D31.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31592c8b017ca0508b5f0339e7e1ea46376f2d31.partially.cryptonar")) returned 1 [0122.092] SetErrorMode (uMode=0x1) returned 0x0 [0122.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\317e80fb14217f5f6e8eab3c4982a166ebedbc9c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.093] SetErrorMode (uMode=0x0) returned 0x1 [0122.094] GetFileType (hFile=0x230) returned 0x1 [0122.094] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.150] SetErrorMode (uMode=0x1) returned 0x0 [0122.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\317e80fb14217f5f6e8eab3c4982a166ebedbc9c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b42c9b3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0122.150] SetErrorMode (uMode=0x0) returned 0x1 [0122.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\317e80fb14217f5f6e8eab3c4982a166ebedbc9c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\317E80FB14217F5F6E8EAB3C4982A166EBEDBC9C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\317e80fb14217f5f6e8eab3c4982a166ebedbc9c.partially.cryptonar")) returned 1 [0122.151] SetErrorMode (uMode=0x1) returned 0x0 [0122.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3194bbd824de5f4e0f44b99c71bb6c700199b487"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.152] SetErrorMode (uMode=0x0) returned 0x1 [0122.152] GetFileType (hFile=0x230) returned 0x1 [0122.152] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.245] SetErrorMode (uMode=0x1) returned 0x0 [0122.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3194bbd824de5f4e0f44b99c71bb6c700199b487"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c26b459, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c26b459, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b5116c1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15c1)) returned 1 [0122.246] SetErrorMode (uMode=0x0) returned 0x1 [0122.246] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3194bbd824de5f4e0f44b99c71bb6c700199b487"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3194BBD824DE5F4E0F44B99C71BB6C700199B487.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3194bbd824de5f4e0f44b99c71bb6c700199b487.partially.cryptonar")) returned 1 [0122.247] SetErrorMode (uMode=0x1) returned 0x0 [0122.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31f8f1df56894b1d3f2180db7128624160d6fd5e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.248] SetErrorMode (uMode=0x0) returned 0x1 [0122.248] GetFileType (hFile=0x230) returned 0x1 [0122.248] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.251] SetErrorMode (uMode=0x1) returned 0x0 [0122.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31f8f1df56894b1d3f2180db7128624160d6fd5e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b5116c1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c68)) returned 1 [0122.251] SetErrorMode (uMode=0x0) returned 0x1 [0122.251] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31f8f1df56894b1d3f2180db7128624160d6fd5e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\31F8F1DF56894B1D3F2180DB7128624160D6FD5E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\31f8f1df56894b1d3f2180db7128624160d6fd5e.partially.cryptonar")) returned 1 [0122.252] SetErrorMode (uMode=0x1) returned 0x0 [0122.252] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3221c03d33e21e6f8b41db86eb7b6527177ad6f9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.253] SetErrorMode (uMode=0x0) returned 0x1 [0122.253] GetFileType (hFile=0x230) returned 0x1 [0122.253] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.318] SetErrorMode (uMode=0x1) returned 0x0 [0122.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3221c03d33e21e6f8b41db86eb7b6527177ad6f9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5f097b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f5f097b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b5a9fdd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0122.319] SetErrorMode (uMode=0x0) returned 0x1 [0122.319] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3221c03d33e21e6f8b41db86eb7b6527177ad6f9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3221C03D33E21E6F8B41DB86EB7B6527177AD6F9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3221c03d33e21e6f8b41db86eb7b6527177ad6f9.partially.cryptonar")) returned 1 [0122.320] SetErrorMode (uMode=0x1) returned 0x0 [0122.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32afe38eed991ea004851e7c968397c7d9ea501c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.321] SetErrorMode (uMode=0x0) returned 0x1 [0122.321] GetFileType (hFile=0x230) returned 0x1 [0122.321] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.395] SetErrorMode (uMode=0x1) returned 0x0 [0122.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32afe38eed991ea004851e7c968397c7d9ea501c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4566ba3b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4566ba3b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4b668c25, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb6c1)) returned 1 [0122.395] SetErrorMode (uMode=0x0) returned 0x1 [0122.395] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32afe38eed991ea004851e7c968397c7d9ea501c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32AFE38EED991EA004851E7C968397C7D9EA501C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32afe38eed991ea004851e7c968397c7d9ea501c.partially.cryptonar")) returned 1 [0122.397] SetErrorMode (uMode=0x1) returned 0x0 [0122.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32b6927a1eb46e83b230070265358a1c5b788d11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.398] SetErrorMode (uMode=0x0) returned 0x1 [0122.398] GetFileType (hFile=0x230) returned 0x1 [0122.398] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.454] SetErrorMode (uMode=0x1) returned 0x0 [0122.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32b6927a1eb46e83b230070265358a1c5b788d11"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ca6960, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47ca6960, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4b701462, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ad0)) returned 1 [0122.455] SetErrorMode (uMode=0x0) returned 0x1 [0122.455] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32b6927a1eb46e83b230070265358a1c5b788d11"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\32B6927A1EB46E83B230070265358A1C5B788D11.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\32b6927a1eb46e83b230070265358a1c5b788d11.partially.cryptonar")) returned 1 [0122.456] SetErrorMode (uMode=0x1) returned 0x0 [0122.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3313b622f3b9896c056cb0a1a534e4c91732e665"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.457] SetErrorMode (uMode=0x0) returned 0x1 [0122.457] GetFileType (hFile=0x230) returned 0x1 [0122.457] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.459] SetErrorMode (uMode=0x1) returned 0x0 [0122.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3313b622f3b9896c056cb0a1a534e4c91732e665"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549bc116, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549bc116, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b701462, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40f0)) returned 1 [0122.459] SetErrorMode (uMode=0x0) returned 0x1 [0122.459] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3313b622f3b9896c056cb0a1a534e4c91732e665"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3313B622F3B9896C056CB0A1A534E4C91732E665.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3313b622f3b9896c056cb0a1a534e4c91732e665.partially.cryptonar")) returned 1 [0122.461] SetErrorMode (uMode=0x1) returned 0x0 [0122.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\338233a5ff4b5082e562a4b5bfbcdb2581de81e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.462] SetErrorMode (uMode=0x0) returned 0x1 [0122.462] GetFileType (hFile=0x230) returned 0x1 [0122.462] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.479] SetErrorMode (uMode=0x1) returned 0x0 [0122.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\338233a5ff4b5082e562a4b5bfbcdb2581de81e6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa93315b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa93315b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b74d99d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0122.480] SetErrorMode (uMode=0x0) returned 0x1 [0122.480] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\338233a5ff4b5082e562a4b5bfbcdb2581de81e6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\338233A5FF4B5082E562A4B5BFBCDB2581DE81E6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\338233a5ff4b5082e562a4b5bfbcdb2581de81e6.partially.cryptonar")) returned 1 [0122.481] SetErrorMode (uMode=0x1) returned 0x0 [0122.481] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\339a4e96e26dffa4704f0af081d2b85b12d03939"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.481] SetErrorMode (uMode=0x0) returned 0x1 [0122.481] GetFileType (hFile=0x230) returned 0x1 [0122.481] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.497] SetErrorMode (uMode=0x1) returned 0x0 [0122.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\339a4e96e26dffa4704f0af081d2b85b12d03939"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef6a908, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef6a908, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b773cea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x911b)) returned 1 [0122.498] SetErrorMode (uMode=0x0) returned 0x1 [0122.498] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\339a4e96e26dffa4704f0af081d2b85b12d03939"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\339A4E96E26DFFA4704F0AF081D2B85B12D03939.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\339a4e96e26dffa4704f0af081d2b85b12d03939.partially.cryptonar")) returned 1 [0122.499] SetErrorMode (uMode=0x1) returned 0x0 [0122.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33a34037b96bd19cc90c0a382cedf384ee052fcc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.500] SetErrorMode (uMode=0x0) returned 0x1 [0122.500] GetFileType (hFile=0x230) returned 0x1 [0122.500] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.544] SetErrorMode (uMode=0x1) returned 0x0 [0122.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33a34037b96bd19cc90c0a382cedf384ee052fcc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b7e6201, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdfd)) returned 1 [0122.544] SetErrorMode (uMode=0x0) returned 0x1 [0122.544] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33a34037b96bd19cc90c0a382cedf384ee052fcc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33A34037B96BD19CC90C0A382CEDF384EE052FCC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33a34037b96bd19cc90c0a382cedf384ee052fcc.partially.cryptonar")) returned 1 [0122.545] SetErrorMode (uMode=0x1) returned 0x0 [0122.545] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33b10e2c53e1205b7527185f086f1bd9a39b07cd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.546] SetErrorMode (uMode=0x0) returned 0x1 [0122.546] GetFileType (hFile=0x230) returned 0x1 [0122.546] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.561] SetErrorMode (uMode=0x1) returned 0x0 [0122.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33b10e2c53e1205b7527185f086f1bd9a39b07cd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b80c568, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0122.561] SetErrorMode (uMode=0x0) returned 0x1 [0122.561] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33b10e2c53e1205b7527185f086f1bd9a39b07cd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33B10E2C53E1205B7527185F086F1BD9A39B07CD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33b10e2c53e1205b7527185f086f1bd9a39b07cd.partially.cryptonar")) returned 1 [0122.562] SetErrorMode (uMode=0x1) returned 0x0 [0122.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e49db212b852799023f439d16990005f93c4f7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.563] SetErrorMode (uMode=0x0) returned 0x1 [0122.563] GetFileType (hFile=0x230) returned 0x1 [0122.563] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.569] SetErrorMode (uMode=0x1) returned 0x0 [0122.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e49db212b852799023f439d16990005f93c4f7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b80c568, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2da9)) returned 1 [0122.569] SetErrorMode (uMode=0x0) returned 0x1 [0122.576] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e49db212b852799023f439d16990005f93c4f7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E49DB212B852799023F439D16990005F93C4F7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e49db212b852799023f439d16990005f93c4f7.partially.cryptonar")) returned 1 [0122.577] SetErrorMode (uMode=0x1) returned 0x0 [0122.577] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e659b30b4e594b210633855ac841a47bb4bbb9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.578] SetErrorMode (uMode=0x0) returned 0x1 [0122.578] GetFileType (hFile=0x230) returned 0x1 [0122.578] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.609] SetErrorMode (uMode=0x1) returned 0x0 [0122.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e659b30b4e594b210633855ac841a47bb4bbb9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864f7000, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x864f7000, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4b87ec2d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1065)) returned 1 [0122.609] SetErrorMode (uMode=0x0) returned 0x1 [0122.609] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e659b30b4e594b210633855ac841a47bb4bbb9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\33E659B30B4E594B210633855AC841A47BB4BBB9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\33e659b30b4e594b210633855ac841a47bb4bbb9.partially.cryptonar")) returned 1 [0122.611] SetErrorMode (uMode=0x1) returned 0x0 [0122.611] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\346330431993bc995e9f9c114fe39fd5b54eb7df"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.612] SetErrorMode (uMode=0x0) returned 0x1 [0122.612] GetFileType (hFile=0x230) returned 0x1 [0122.612] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.632] SetErrorMode (uMode=0x1) returned 0x0 [0122.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\346330431993bc995e9f9c114fe39fd5b54eb7df"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa61a32, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6fa61a32, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x4b8cb227, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51f)) returned 1 [0122.633] SetErrorMode (uMode=0x0) returned 0x1 [0122.633] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\346330431993bc995e9f9c114fe39fd5b54eb7df"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\346330431993BC995E9F9C114FE39FD5B54EB7DF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\346330431993bc995e9f9c114fe39fd5b54eb7df.partially.cryptonar")) returned 1 [0122.634] SetErrorMode (uMode=0x1) returned 0x0 [0122.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\34cef73d25cb0de8a1cd86fb09ef24d17790bca7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.635] SetErrorMode (uMode=0x0) returned 0x1 [0122.635] GetFileType (hFile=0x230) returned 0x1 [0122.635] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.649] SetErrorMode (uMode=0x1) returned 0x0 [0122.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\34cef73d25cb0de8a1cd86fb09ef24d17790bca7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ab8a86d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8ab8a86d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4b8f1247, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xeff)) returned 1 [0122.649] SetErrorMode (uMode=0x0) returned 0x1 [0122.649] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\34cef73d25cb0de8a1cd86fb09ef24d17790bca7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\34CEF73D25CB0DE8A1CD86FB09EF24D17790BCA7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\34cef73d25cb0de8a1cd86fb09ef24d17790bca7.partially.cryptonar")) returned 1 [0122.651] SetErrorMode (uMode=0x1) returned 0x0 [0122.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3502f57243fbd8f9d25e093a72d603074783a304"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.653] SetErrorMode (uMode=0x0) returned 0x1 [0122.653] GetFileType (hFile=0x230) returned 0x1 [0122.653] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.709] SetErrorMode (uMode=0x1) returned 0x0 [0122.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3502f57243fbd8f9d25e093a72d603074783a304"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54248c69, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54248c69, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b963991, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c9e)) returned 1 [0122.709] SetErrorMode (uMode=0x0) returned 0x1 [0122.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3502f57243fbd8f9d25e093a72d603074783a304"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3502F57243FBD8F9D25E093A72D603074783A304.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3502f57243fbd8f9d25e093a72d603074783a304.partially.cryptonar")) returned 1 [0122.712] SetErrorMode (uMode=0x1) returned 0x0 [0122.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\356fce9f932692dc643481dba1abea937b629f58"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.713] SetErrorMode (uMode=0x0) returned 0x1 [0122.713] GetFileType (hFile=0x230) returned 0x1 [0122.713] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.714] SetErrorMode (uMode=0x1) returned 0x0 [0122.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\356fce9f932692dc643481dba1abea937b629f58"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a759447, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a759447, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4b989c7e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x64)) returned 1 [0122.715] SetErrorMode (uMode=0x0) returned 0x1 [0122.715] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\356fce9f932692dc643481dba1abea937b629f58"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\356FCE9F932692DC643481DBA1ABEA937B629F58.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\356fce9f932692dc643481dba1abea937b629f58.partially.cryptonar")) returned 1 [0122.716] SetErrorMode (uMode=0x1) returned 0x0 [0122.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\35933c361338037a97583e92da61c299851a9b4e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.718] SetErrorMode (uMode=0x0) returned 0x1 [0122.718] GetFileType (hFile=0x230) returned 0x1 [0122.718] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.720] SetErrorMode (uMode=0x1) returned 0x0 [0122.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\35933c361338037a97583e92da61c299851a9b4e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc52b52a5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc52b52a5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4b989c7e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f)) returned 1 [0122.720] SetErrorMode (uMode=0x0) returned 0x1 [0122.720] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\35933c361338037a97583e92da61c299851a9b4e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\35933C361338037A97583E92DA61C299851A9B4E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\35933c361338037a97583e92da61c299851a9b4e.partially.cryptonar")) returned 1 [0122.722] SetErrorMode (uMode=0x1) returned 0x0 [0122.722] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36a422c04312727a6116f45e357eda80b3b4a6fd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.722] SetErrorMode (uMode=0x0) returned 0x1 [0122.723] GetFileType (hFile=0x230) returned 0x1 [0122.723] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0122.831] SetErrorMode (uMode=0x1) returned 0x0 [0122.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36a422c04312727a6116f45e357eda80b3b4a6fd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ba94de8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1167)) returned 1 [0122.831] SetErrorMode (uMode=0x0) returned 0x1 [0122.832] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36a422c04312727a6116f45e357eda80b3b4a6fd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36A422C04312727A6116F45E357EDA80B3B4A6FD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36a422c04312727a6116f45e357eda80b3b4a6fd.partially.cryptonar")) returned 1 [0122.848] SetErrorMode (uMode=0x1) returned 0x0 [0122.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36c5c19636ca8995d6adcd176668444451854326"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0122.849] SetErrorMode (uMode=0x0) returned 0x1 [0122.849] GetFileType (hFile=0x230) returned 0x1 [0122.849] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.138] SetErrorMode (uMode=0x1) returned 0x0 [0123.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36c5c19636ca8995d6adcd176668444451854326"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4bd8fda5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1832)) returned 1 [0123.138] SetErrorMode (uMode=0x0) returned 0x1 [0123.138] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36c5c19636ca8995d6adcd176668444451854326"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36C5C19636CA8995D6ADCD176668444451854326.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36c5c19636ca8995d6adcd176668444451854326.partially.cryptonar")) returned 1 [0123.139] SetErrorMode (uMode=0x1) returned 0x0 [0123.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36dbe72541419953be4a8bd61964782f4dbedecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.140] SetErrorMode (uMode=0x0) returned 0x1 [0123.140] GetFileType (hFile=0x230) returned 0x1 [0123.140] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.155] SetErrorMode (uMode=0x1) returned 0x0 [0123.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36dbe72541419953be4a8bd61964782f4dbedecf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4bdb6030, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd26)) returned 1 [0123.156] SetErrorMode (uMode=0x0) returned 0x1 [0123.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36dbe72541419953be4a8bd61964782f4dbedecf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\36DBE72541419953BE4A8BD61964782F4DBEDECF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\36dbe72541419953be4a8bd61964782f4dbedecf.partially.cryptonar")) returned 1 [0123.157] SetErrorMode (uMode=0x1) returned 0x0 [0123.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\376ed25a1de94f0d96e985e5d5cacfcfe3812131"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.158] SetErrorMode (uMode=0x0) returned 0x1 [0123.158] GetFileType (hFile=0x230) returned 0x1 [0123.158] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.171] SetErrorMode (uMode=0x1) returned 0x0 [0123.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\376ed25a1de94f0d96e985e5d5cacfcfe3812131"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9f1bba, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa9f1bba, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4bdde427, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0123.171] SetErrorMode (uMode=0x0) returned 0x1 [0123.171] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\376ed25a1de94f0d96e985e5d5cacfcfe3812131"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\376ED25A1DE94F0D96E985E5D5CACFCFE3812131.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\376ed25a1de94f0d96e985e5d5cacfcfe3812131.partially.cryptonar")) returned 1 [0123.173] SetErrorMode (uMode=0x1) returned 0x0 [0123.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b0298825f693e093744779a7278e41f1419493"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.174] SetErrorMode (uMode=0x0) returned 0x1 [0123.174] GetFileType (hFile=0x230) returned 0x1 [0123.174] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.210] SetErrorMode (uMode=0x1) returned 0x0 [0123.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b0298825f693e093744779a7278e41f1419493"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552f9515, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x552f9515, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4be3012a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc3cc)) returned 1 [0123.211] SetErrorMode (uMode=0x0) returned 0x1 [0123.211] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b0298825f693e093744779a7278e41f1419493"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B0298825F693E093744779A7278E41F1419493.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b0298825f693e093744779a7278e41f1419493.partially.cryptonar")) returned 1 [0123.219] SetErrorMode (uMode=0x1) returned 0x0 [0123.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b4bc98c8fdd6283be80c5cc385582fef5d6747"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.224] SetErrorMode (uMode=0x0) returned 0x1 [0123.225] GetFileType (hFile=0x230) returned 0x1 [0123.225] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.243] SetErrorMode (uMode=0x1) returned 0x0 [0123.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b4bc98c8fdd6283be80c5cc385582fef5d6747"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8981adb5, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x8981adb5, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x4be9ad96, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0123.243] SetErrorMode (uMode=0x0) returned 0x1 [0123.243] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b4bc98c8fdd6283be80c5cc385582fef5d6747"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37B4BC98C8FDD6283BE80C5CC385582FEF5D6747.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37b4bc98c8fdd6283be80c5cc385582fef5d6747.partially.cryptonar")) returned 1 [0123.245] SetErrorMode (uMode=0x1) returned 0x0 [0123.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37bc32b4b7033c1ab388018ec734b639086c814e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.245] SetErrorMode (uMode=0x0) returned 0x1 [0123.246] GetFileType (hFile=0x230) returned 0x1 [0123.246] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.248] SetErrorMode (uMode=0x1) returned 0x0 [0123.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37bc32b4b7033c1ab388018ec734b639086c814e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4be9ad96, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1119)) returned 1 [0123.248] SetErrorMode (uMode=0x0) returned 0x1 [0123.248] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37bc32b4b7033c1ab388018ec734b639086c814e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\37BC32B4B7033C1AB388018EC734B639086C814E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\37bc32b4b7033c1ab388018ec734b639086c814e.partially.cryptonar")) returned 1 [0123.249] SetErrorMode (uMode=0x1) returned 0x0 [0123.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\383704e4bb07d527519a7352ba38b681c661fd8f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.251] SetErrorMode (uMode=0x0) returned 0x1 [0123.251] GetFileType (hFile=0x230) returned 0x1 [0123.251] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.270] SetErrorMode (uMode=0x1) returned 0x0 [0123.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\383704e4bb07d527519a7352ba38b681c661fd8f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x600d44c5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x600d44c5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4bec0f09, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c15f1)) returned 1 [0123.271] SetErrorMode (uMode=0x0) returned 0x1 [0123.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\383704e4bb07d527519a7352ba38b681c661fd8f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\383704E4BB07D527519A7352BA38B681C661FD8F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\383704e4bb07d527519a7352ba38b681c661fd8f.partially.cryptonar")) returned 1 [0123.273] SetErrorMode (uMode=0x1) returned 0x0 [0123.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\38819cf0eddf28f6c7ae4a62ea2dc0e07ea71115"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.274] SetErrorMode (uMode=0x0) returned 0x1 [0123.274] GetFileType (hFile=0x230) returned 0x1 [0123.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.289] SetErrorMode (uMode=0x1) returned 0x0 [0123.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\38819cf0eddf28f6c7ae4a62ea2dc0e07ea71115"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6d138f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6d138f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4bf0d710, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0123.289] SetErrorMode (uMode=0x0) returned 0x1 [0123.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\38819cf0eddf28f6c7ae4a62ea2dc0e07ea71115"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\38819CF0EDDF28F6C7AE4A62EA2DC0E07EA71115.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\38819cf0eddf28f6c7ae4a62ea2dc0e07ea71115.partially.cryptonar")) returned 1 [0123.291] SetErrorMode (uMode=0x1) returned 0x0 [0123.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39cc8aa9054ec6244ca281eea4bd937517e2861d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.292] SetErrorMode (uMode=0x0) returned 0x1 [0123.293] GetFileType (hFile=0x230) returned 0x1 [0123.293] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.305] SetErrorMode (uMode=0x1) returned 0x0 [0123.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39cc8aa9054ec6244ca281eea4bd937517e2861d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54bd2206, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54bd2206, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4bf336d2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c)) returned 1 [0123.306] SetErrorMode (uMode=0x0) returned 0x1 [0123.306] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39cc8aa9054ec6244ca281eea4bd937517e2861d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39CC8AA9054EC6244CA281EEA4BD937517E2861D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39cc8aa9054ec6244ca281eea4bd937517e2861d.partially.cryptonar")) returned 1 [0123.307] SetErrorMode (uMode=0x1) returned 0x0 [0123.307] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39d606c35c00ada6e9320e1f6431e5a33eb42182"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.308] SetErrorMode (uMode=0x0) returned 0x1 [0123.308] GetFileType (hFile=0x230) returned 0x1 [0123.308] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.323] SetErrorMode (uMode=0x1) returned 0x0 [0123.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39d606c35c00ada6e9320e1f6431e5a33eb42182"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4bf5a125, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf0f)) returned 1 [0123.324] SetErrorMode (uMode=0x0) returned 0x1 [0123.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39d606c35c00ada6e9320e1f6431e5a33eb42182"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\39D606C35C00ADA6E9320E1F6431E5A33EB42182.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\39d606c35c00ada6e9320e1f6431e5a33eb42182.partially.cryptonar")) returned 1 [0123.325] SetErrorMode (uMode=0x1) returned 0x0 [0123.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a554e4efcc1fad19e963d27b9a2bf73c9664268"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.326] SetErrorMode (uMode=0x0) returned 0x1 [0123.326] GetFileType (hFile=0x230) returned 0x1 [0123.326] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.348] SetErrorMode (uMode=0x1) returned 0x0 [0123.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a554e4efcc1fad19e963d27b9a2bf73c9664268"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f74abe7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5f74abe7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4bf7fcd1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0123.349] SetErrorMode (uMode=0x0) returned 0x1 [0123.349] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a554e4efcc1fad19e963d27b9a2bf73c9664268"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A554E4EFCC1FAD19E963D27B9A2BF73C9664268.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a554e4efcc1fad19e963d27b9a2bf73c9664268.partially.cryptonar")) returned 1 [0123.352] SetErrorMode (uMode=0x1) returned 0x0 [0123.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a6c331288f156e9a07e3ea398f3a8faf0530d8f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.354] SetErrorMode (uMode=0x0) returned 0x1 [0123.354] GetFileType (hFile=0x230) returned 0x1 [0123.354] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.357] SetErrorMode (uMode=0x1) returned 0x0 [0123.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a6c331288f156e9a07e3ea398f3a8faf0530d8f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8631ae1f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8631ae1f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4bfa6b20, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11eb)) returned 1 [0123.357] SetErrorMode (uMode=0x0) returned 0x1 [0123.357] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a6c331288f156e9a07e3ea398f3a8faf0530d8f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3A6C331288F156E9A07E3EA398F3A8FAF0530D8F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3a6c331288f156e9a07e3ea398f3a8faf0530d8f.partially.cryptonar")) returned 1 [0123.359] SetErrorMode (uMode=0x1) returned 0x0 [0123.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3b3edc129fe6ed020c044ac637791dec8b6b7603"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.360] SetErrorMode (uMode=0x0) returned 0x1 [0123.360] GetFileType (hFile=0x230) returned 0x1 [0123.360] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.382] SetErrorMode (uMode=0x1) returned 0x0 [0123.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3b3edc129fe6ed020c044ac637791dec8b6b7603"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d090e3, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x44d090e3, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4bff210b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb11)) returned 1 [0123.382] SetErrorMode (uMode=0x0) returned 0x1 [0123.382] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3b3edc129fe6ed020c044ac637791dec8b6b7603"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3B3EDC129FE6ED020C044AC637791DEC8B6B7603.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3b3edc129fe6ed020c044ac637791dec8b6b7603.partially.cryptonar")) returned 1 [0123.384] SetErrorMode (uMode=0x1) returned 0x0 [0123.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3d896079491ca68dd9bb6db7e612c8dc74463279"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.385] SetErrorMode (uMode=0x0) returned 0x1 [0123.385] GetFileType (hFile=0x230) returned 0x1 [0123.385] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.502] SetErrorMode (uMode=0x1) returned 0x0 [0123.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3d896079491ca68dd9bb6db7e612c8dc74463279"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddff8668, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddff8668, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c0fd31a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0123.503] SetErrorMode (uMode=0x0) returned 0x1 [0123.503] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3d896079491ca68dd9bb6db7e612c8dc74463279"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3D896079491CA68DD9BB6DB7E612C8DC74463279.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3d896079491ca68dd9bb6db7e612c8dc74463279.partially.cryptonar")) returned 1 [0123.504] SetErrorMode (uMode=0x1) returned 0x0 [0123.504] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3de1033d1165f9d849e6dfd8566abb9179db1d0f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.505] SetErrorMode (uMode=0x0) returned 0x1 [0123.505] GetFileType (hFile=0x230) returned 0x1 [0123.505] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.507] SetErrorMode (uMode=0x1) returned 0x0 [0123.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3de1033d1165f9d849e6dfd8566abb9179db1d0f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3b8631f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3b8631f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c1233cd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10f9)) returned 1 [0123.508] SetErrorMode (uMode=0x0) returned 0x1 [0123.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3de1033d1165f9d849e6dfd8566abb9179db1d0f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3DE1033D1165F9D849E6DFD8566ABB9179DB1D0F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3de1033d1165f9d849e6dfd8566abb9179db1d0f.partially.cryptonar")) returned 1 [0123.509] SetErrorMode (uMode=0x1) returned 0x0 [0123.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3e42820479fadf666581b0704fa4af901ae0e045"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.510] SetErrorMode (uMode=0x0) returned 0x1 [0123.510] GetFileType (hFile=0x230) returned 0x1 [0123.510] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.511] SetErrorMode (uMode=0x1) returned 0x0 [0123.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3e42820479fadf666581b0704fa4af901ae0e045"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c1233cd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x73)) returned 1 [0123.511] SetErrorMode (uMode=0x0) returned 0x1 [0123.511] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3e42820479fadf666581b0704fa4af901ae0e045"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3E42820479FADF666581B0704FA4AF901AE0E045.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3e42820479fadf666581b0704fa4af901ae0e045.partially.cryptonar")) returned 1 [0123.513] SetErrorMode (uMode=0x1) returned 0x0 [0123.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3ea580e2fd537915b7084615630f0189274b1f60"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.514] SetErrorMode (uMode=0x0) returned 0x1 [0123.514] GetFileType (hFile=0x230) returned 0x1 [0123.514] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.522] SetErrorMode (uMode=0x1) returned 0x0 [0123.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3ea580e2fd537915b7084615630f0189274b1f60"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c1233cd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1130)) returned 1 [0123.523] SetErrorMode (uMode=0x0) returned 0x1 [0123.523] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3ea580e2fd537915b7084615630f0189274b1f60"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3EA580E2FD537915B7084615630F0189274B1F60.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3ea580e2fd537915b7084615630f0189274b1f60.partially.cryptonar")) returned 1 [0123.524] SetErrorMode (uMode=0x1) returned 0x0 [0123.524] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3faecd8f44cecb41f5586c0dc333275fc173593a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.525] SetErrorMode (uMode=0x0) returned 0x1 [0123.525] GetFileType (hFile=0x230) returned 0x1 [0123.525] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.537] SetErrorMode (uMode=0x1) returned 0x0 [0123.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3faecd8f44cecb41f5586c0dc333275fc173593a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddf91dae, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddf91dae, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c149656, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0123.537] SetErrorMode (uMode=0x0) returned 0x1 [0123.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3faecd8f44cecb41f5586c0dc333275fc173593a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FAECD8F44CECB41F5586C0DC333275FC173593A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3faecd8f44cecb41f5586c0dc333275fc173593a.partially.cryptonar")) returned 1 [0123.539] SetErrorMode (uMode=0x1) returned 0x0 [0123.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3fb6de7747dc1b658385638d277cf2d620d232e4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.540] SetErrorMode (uMode=0x0) returned 0x1 [0123.540] GetFileType (hFile=0x230) returned 0x1 [0123.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.595] SetErrorMode (uMode=0x1) returned 0x0 [0123.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3fb6de7747dc1b658385638d277cf2d620d232e4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5488ae0f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5488ae0f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c1e2269, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3529)) returned 1 [0123.595] SetErrorMode (uMode=0x0) returned 0x1 [0123.595] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3fb6de7747dc1b658385638d277cf2d620d232e4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\3FB6DE7747DC1B658385638D277CF2D620D232E4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\3fb6de7747dc1b658385638d277cf2d620d232e4.partially.cryptonar")) returned 1 [0123.597] SetErrorMode (uMode=0x1) returned 0x0 [0123.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\400e86363026a9ac2dcd2221c145c6370e3e8eda"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.599] SetErrorMode (uMode=0x0) returned 0x1 [0123.599] GetFileType (hFile=0x230) returned 0x1 [0123.599] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.640] SetErrorMode (uMode=0x1) returned 0x0 [0123.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\400e86363026a9ac2dcd2221c145c6370e3e8eda"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a4e9f2, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a4e9f2, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c2548b7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0123.640] SetErrorMode (uMode=0x0) returned 0x1 [0123.640] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\400e86363026a9ac2dcd2221c145c6370e3e8eda"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\400E86363026A9AC2DCD2221C145C6370E3E8EDA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\400e86363026a9ac2dcd2221c145c6370e3e8eda.partially.cryptonar")) returned 1 [0123.642] SetErrorMode (uMode=0x1) returned 0x0 [0123.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4030dffe47d5b75257aa7a8c0a26b737e2f00ff3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.644] SetErrorMode (uMode=0x0) returned 0x1 [0123.644] GetFileType (hFile=0x230) returned 0x1 [0123.644] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.646] SetErrorMode (uMode=0x1) returned 0x0 [0123.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4030dffe47d5b75257aa7a8c0a26b737e2f00ff3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ad005d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89ad005d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c2548b7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2137)) returned 1 [0123.646] SetErrorMode (uMode=0x0) returned 0x1 [0123.646] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4030dffe47d5b75257aa7a8c0a26b737e2f00ff3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4030DFFE47D5B75257AA7A8C0A26B737E2F00FF3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4030dffe47d5b75257aa7a8c0a26b737e2f00ff3.partially.cryptonar")) returned 1 [0123.648] SetErrorMode (uMode=0x1) returned 0x0 [0123.648] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\40645d76e586e360d63982b2d4525920f0cf3060"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.649] SetErrorMode (uMode=0x0) returned 0x1 [0123.649] GetFileType (hFile=0x230) returned 0x1 [0123.649] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.651] SetErrorMode (uMode=0x1) returned 0x0 [0123.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\40645d76e586e360d63982b2d4525920f0cf3060"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c27b6a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf12)) returned 1 [0123.651] SetErrorMode (uMode=0x0) returned 0x1 [0123.651] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\40645d76e586e360d63982b2d4525920f0cf3060"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\40645D76E586E360D63982B2D4525920F0CF3060.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\40645d76e586e360d63982b2d4525920f0cf3060.partially.cryptonar")) returned 1 [0123.652] SetErrorMode (uMode=0x1) returned 0x0 [0123.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\406839ca18775158e58d75b2837624917d7e685c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.659] SetErrorMode (uMode=0x0) returned 0x1 [0123.659] GetFileType (hFile=0x230) returned 0x1 [0123.659] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.668] SetErrorMode (uMode=0x1) returned 0x0 [0123.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\406839ca18775158e58d75b2837624917d7e685c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4579cd89, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4579cd89, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c2a1cdb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8b1e)) returned 1 [0123.668] SetErrorMode (uMode=0x0) returned 0x1 [0123.668] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\406839ca18775158e58d75b2837624917d7e685c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\406839CA18775158E58D75B2837624917D7E685C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\406839ca18775158e58d75b2837624917d7e685c.partially.cryptonar")) returned 1 [0123.670] SetErrorMode (uMode=0x1) returned 0x0 [0123.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\407eb4de353de3ad4e1a29f0e0e84f65c2ce6e3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.671] SetErrorMode (uMode=0x0) returned 0x1 [0123.671] GetFileType (hFile=0x230) returned 0x1 [0123.671] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.688] SetErrorMode (uMode=0x1) returned 0x0 [0123.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\407eb4de353de3ad4e1a29f0e0e84f65c2ce6e3a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x489e9afc, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x489e9afc, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c2c714f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6b5)) returned 1 [0123.688] SetErrorMode (uMode=0x0) returned 0x1 [0123.689] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\407eb4de353de3ad4e1a29f0e0e84f65c2ce6e3a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\407eb4de353de3ad4e1a29f0e0e84f65c2ce6e3a.partially.cryptonar")) returned 1 [0123.690] SetErrorMode (uMode=0x1) returned 0x0 [0123.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\41367369b0154d1d2566cc216318c71115e089a2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.692] SetErrorMode (uMode=0x0) returned 0x1 [0123.692] GetFileType (hFile=0x230) returned 0x1 [0123.692] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.694] SetErrorMode (uMode=0x1) returned 0x0 [0123.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\41367369b0154d1d2566cc216318c71115e089a2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdf3824, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fdf3824, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c2c714f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5834)) returned 1 [0123.694] SetErrorMode (uMode=0x0) returned 0x1 [0123.695] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\41367369b0154d1d2566cc216318c71115e089a2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\41367369B0154D1D2566CC216318C71115E089A2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\41367369b0154d1d2566cc216318c71115e089a2.partially.cryptonar")) returned 1 [0123.696] SetErrorMode (uMode=0x1) returned 0x0 [0123.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4238786cb87b503754ee13346f30ae3fce28174f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.697] SetErrorMode (uMode=0x0) returned 0x1 [0123.697] GetFileType (hFile=0x230) returned 0x1 [0123.697] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.723] SetErrorMode (uMode=0x1) returned 0x0 [0123.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4238786cb87b503754ee13346f30ae3fce28174f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c31348a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x32fc)) returned 1 [0123.724] SetErrorMode (uMode=0x0) returned 0x1 [0123.724] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4238786cb87b503754ee13346f30ae3fce28174f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4238786CB87B503754EE13346F30AE3FCE28174F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4238786cb87b503754ee13346f30ae3fce28174f.partially.cryptonar")) returned 1 [0123.725] SetErrorMode (uMode=0x1) returned 0x0 [0123.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\425ab3a135ac92c5f7a29092f686a777b30a8c0a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.727] SetErrorMode (uMode=0x0) returned 0x1 [0123.727] GetFileType (hFile=0x230) returned 0x1 [0123.727] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.729] SetErrorMode (uMode=0x1) returned 0x0 [0123.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\425ab3a135ac92c5f7a29092f686a777b30a8c0a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f78856c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f78856c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c339546, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0123.729] SetErrorMode (uMode=0x0) returned 0x1 [0123.729] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\425ab3a135ac92c5f7a29092f686a777b30a8c0a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\425AB3A135AC92C5F7A29092F686A777B30A8C0A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\425ab3a135ac92c5f7a29092f686a777b30a8c0a.partially.cryptonar")) returned 1 [0123.731] SetErrorMode (uMode=0x1) returned 0x0 [0123.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\42c23bb7242dfe074931a302b5beb9b1d73b0ba5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.732] SetErrorMode (uMode=0x0) returned 0x1 [0123.732] GetFileType (hFile=0x230) returned 0x1 [0123.732] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.734] SetErrorMode (uMode=0x1) returned 0x0 [0123.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\42c23bb7242dfe074931a302b5beb9b1d73b0ba5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x893759f7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x893759f7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c339546, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2d3e)) returned 1 [0123.734] SetErrorMode (uMode=0x0) returned 0x1 [0123.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\42c23bb7242dfe074931a302b5beb9b1d73b0ba5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\42C23BB7242DFE074931A302B5BEB9B1D73B0BA5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\42c23bb7242dfe074931a302b5beb9b1d73b0ba5.partially.cryptonar")) returned 1 [0123.736] SetErrorMode (uMode=0x1) returned 0x0 [0123.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\431bdca04b51be586dfcf48431166463879b3dbf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.737] SetErrorMode (uMode=0x0) returned 0x1 [0123.737] GetFileType (hFile=0x230) returned 0x1 [0123.737] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.738] SetErrorMode (uMode=0x1) returned 0x0 [0123.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\431bdca04b51be586dfcf48431166463879b3dbf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cbff94, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74cbff94, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c339546, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0123.739] SetErrorMode (uMode=0x0) returned 0x1 [0123.739] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\431bdca04b51be586dfcf48431166463879b3dbf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\431BDCA04B51BE586DFCF48431166463879B3DBF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\431bdca04b51be586dfcf48431166463879b3dbf.partially.cryptonar")) returned 1 [0123.740] SetErrorMode (uMode=0x1) returned 0x0 [0123.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\434a5c8b5d0bef67ceeb6076803a286cae99c8c9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.741] SetErrorMode (uMode=0x0) returned 0x1 [0123.741] GetFileType (hFile=0x230) returned 0x1 [0123.741] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.793] SetErrorMode (uMode=0x1) returned 0x0 [0123.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\434a5c8b5d0bef67ceeb6076803a286cae99c8c9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548b1083, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548b1083, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c3d1fe5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c30)) returned 1 [0123.793] SetErrorMode (uMode=0x0) returned 0x1 [0123.793] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\434a5c8b5d0bef67ceeb6076803a286cae99c8c9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\434A5C8B5D0BEF67CEEB6076803A286CAE99C8C9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\434a5c8b5d0bef67ceeb6076803a286cae99c8c9.partially.cryptonar")) returned 1 [0123.795] SetErrorMode (uMode=0x1) returned 0x0 [0123.795] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43686105ac844b29a19e4ad788a5abbd2714fc75"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.796] SetErrorMode (uMode=0x0) returned 0x1 [0123.796] GetFileType (hFile=0x230) returned 0x1 [0123.796] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.841] SetErrorMode (uMode=0x1) returned 0x0 [0123.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43686105ac844b29a19e4ad788a5abbd2714fc75"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da4ec60, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7da4ec60, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c4446be, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1 [0123.841] SetErrorMode (uMode=0x0) returned 0x1 [0123.841] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43686105ac844b29a19e4ad788a5abbd2714fc75"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43686105AC844B29A19E4AD788A5ABBD2714FC75.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43686105ac844b29a19e4ad788a5abbd2714fc75.partially.cryptonar")) returned 1 [0123.843] SetErrorMode (uMode=0x1) returned 0x0 [0123.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\438ab448ed7fb7d99cb7cfab433f9e19a475d0ef"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.844] SetErrorMode (uMode=0x0) returned 0x1 [0123.844] GetFileType (hFile=0x230) returned 0x1 [0123.844] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.845] SetErrorMode (uMode=0x1) returned 0x0 [0123.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\438ab448ed7fb7d99cb7cfab433f9e19a475d0ef"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfbb5d6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddfbb5d6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c4446be, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0123.846] SetErrorMode (uMode=0x0) returned 0x1 [0123.846] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\438ab448ed7fb7d99cb7cfab433f9e19a475d0ef"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\438AB448ED7FB7D99CB7CFAB433F9E19A475D0EF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\438ab448ed7fb7d99cb7cfab433f9e19a475d0ef.partially.cryptonar")) returned 1 [0123.847] SetErrorMode (uMode=0x1) returned 0x0 [0123.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43a641b524487afdac7a8af548ee196228bf6eae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.848] SetErrorMode (uMode=0x0) returned 0x1 [0123.848] GetFileType (hFile=0x230) returned 0x1 [0123.848] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.870] SetErrorMode (uMode=0x1) returned 0x0 [0123.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43a641b524487afdac7a8af548ee196228bf6eae"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48a82464, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48a82464, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c490c83, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf2d)) returned 1 [0123.871] SetErrorMode (uMode=0x0) returned 0x1 [0123.871] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43a641b524487afdac7a8af548ee196228bf6eae"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\43A641B524487AFDAC7A8AF548EE196228BF6EAE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\43a641b524487afdac7a8af548ee196228bf6eae.partially.cryptonar")) returned 1 [0123.873] SetErrorMode (uMode=0x1) returned 0x0 [0123.873] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\44437bae601c72f5ed96953eae92c527d4c2d46f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.874] SetErrorMode (uMode=0x0) returned 0x1 [0123.874] GetFileType (hFile=0x230) returned 0x1 [0123.874] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.910] SetErrorMode (uMode=0x1) returned 0x0 [0123.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\44437bae601c72f5ed96953eae92c527d4c2d46f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54379e61, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54379e61, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c4dd07b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf75)) returned 1 [0123.911] SetErrorMode (uMode=0x0) returned 0x1 [0123.911] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\44437bae601c72f5ed96953eae92c527d4c2d46f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\44437BAE601C72F5ED96953EAE92C527D4C2D46F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\44437bae601c72f5ed96953eae92c527d4c2d46f.partially.cryptonar")) returned 1 [0123.912] SetErrorMode (uMode=0x1) returned 0x0 [0123.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4453cb40f54977cdf96034a3a658080fda7e43fa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.913] SetErrorMode (uMode=0x0) returned 0x1 [0123.913] GetFileType (hFile=0x230) returned 0x1 [0123.913] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.915] SetErrorMode (uMode=0x1) returned 0x0 [0123.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4453cb40f54977cdf96034a3a658080fda7e43fa"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879ba483, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879ba483, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c503714, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ea1)) returned 1 [0123.916] SetErrorMode (uMode=0x0) returned 0x1 [0123.916] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4453cb40f54977cdf96034a3a658080fda7e43fa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4453CB40F54977CDF96034A3A658080FDA7E43FA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4453cb40f54977cdf96034a3a658080fda7e43fa.partially.cryptonar")) returned 1 [0123.917] SetErrorMode (uMode=0x1) returned 0x0 [0123.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\445e695f447ca967c4dae00c80034130290f80ea"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.918] SetErrorMode (uMode=0x0) returned 0x1 [0123.918] GetFileType (hFile=0x230) returned 0x1 [0123.918] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.933] SetErrorMode (uMode=0x1) returned 0x0 [0123.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\445e695f447ca967c4dae00c80034130290f80ea"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c52950e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdfe)) returned 1 [0123.934] SetErrorMode (uMode=0x0) returned 0x1 [0123.934] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\445e695f447ca967c4dae00c80034130290f80ea"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\445E695F447CA967C4DAE00C80034130290F80EA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\445e695f447ca967c4dae00c80034130290f80ea.partially.cryptonar")) returned 1 [0123.936] SetErrorMode (uMode=0x1) returned 0x0 [0123.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45a759ac8024ef1fcc5eca005ceb9c4a4f78984e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.937] SetErrorMode (uMode=0x0) returned 0x1 [0123.937] GetFileType (hFile=0x230) returned 0x1 [0123.937] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.953] SetErrorMode (uMode=0x1) returned 0x0 [0123.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45a759ac8024ef1fcc5eca005ceb9c4a4f78984e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c4f83d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5c4f83d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c54f6f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0123.954] SetErrorMode (uMode=0x0) returned 0x1 [0123.954] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45a759ac8024ef1fcc5eca005ceb9c4a4f78984e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45A759AC8024EF1FCC5ECA005CEB9C4A4F78984E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45a759ac8024ef1fcc5eca005ceb9c4a4f78984e.partially.cryptonar")) returned 1 [0123.955] SetErrorMode (uMode=0x1) returned 0x0 [0123.955] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45c64e5c2e9809667c5fc9f06fc42641326df768"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.956] SetErrorMode (uMode=0x0) returned 0x1 [0123.957] GetFileType (hFile=0x230) returned 0x1 [0123.957] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.967] SetErrorMode (uMode=0x1) returned 0x0 [0123.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45c64e5c2e9809667c5fc9f06fc42641326df768"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c57587d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x494)) returned 1 [0123.967] SetErrorMode (uMode=0x0) returned 0x1 [0123.967] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45c64e5c2e9809667c5fc9f06fc42641326df768"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\45C64E5C2E9809667C5FC9F06FC42641326DF768.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\45c64e5c2e9809667c5fc9f06fc42641326df768.partially.cryptonar")) returned 1 [0123.969] SetErrorMode (uMode=0x1) returned 0x0 [0123.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4613b437e86d18e98f830433a5e6f7f9abaf3693"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.970] SetErrorMode (uMode=0x0) returned 0x1 [0123.970] GetFileType (hFile=0x230) returned 0x1 [0123.970] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0123.972] SetErrorMode (uMode=0x1) returned 0x0 [0123.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4613b437e86d18e98f830433a5e6f7f9abaf3693"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf46a29ca, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf46a29ca, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c57587d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x229e)) returned 1 [0123.972] SetErrorMode (uMode=0x0) returned 0x1 [0123.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4613b437e86d18e98f830433a5e6f7f9abaf3693"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4613B437E86D18E98F830433A5E6F7F9ABAF3693.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4613b437e86d18e98f830433a5e6f7f9abaf3693.partially.cryptonar")) returned 1 [0123.974] SetErrorMode (uMode=0x1) returned 0x0 [0123.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\467a961d019f23e5af0f0266cd78a5f3d3290e5b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0123.975] SetErrorMode (uMode=0x0) returned 0x1 [0123.975] GetFileType (hFile=0x230) returned 0x1 [0123.975] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.001] SetErrorMode (uMode=0x1) returned 0x0 [0124.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\467a961d019f23e5af0f0266cd78a5f3d3290e5b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0b42d0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0b42d0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c5c480a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe698)) returned 1 [0124.001] SetErrorMode (uMode=0x0) returned 0x1 [0124.002] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\467a961d019f23e5af0f0266cd78a5f3d3290e5b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\467A961D019F23E5AF0F0266CD78A5F3D3290E5B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\467a961d019f23e5af0f0266cd78a5f3d3290e5b.partially.cryptonar")) returned 1 [0124.003] SetErrorMode (uMode=0x1) returned 0x0 [0124.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\489059ed134c75d04357fd895c6280e1f7978c59"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.004] SetErrorMode (uMode=0x0) returned 0x1 [0124.004] GetFileType (hFile=0x230) returned 0x1 [0124.004] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.027] SetErrorMode (uMode=0x1) returned 0x0 [0124.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\489059ed134c75d04357fd895c6280e1f7978c59"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x897a8543, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x897a8543, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x4c60ebc9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0124.028] SetErrorMode (uMode=0x0) returned 0x1 [0124.028] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\489059ed134c75d04357fd895c6280e1f7978c59"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\489059ED134C75D04357FD895C6280E1F7978C59.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\489059ed134c75d04357fd895c6280e1f7978c59.partially.cryptonar")) returned 1 [0124.029] SetErrorMode (uMode=0x1) returned 0x0 [0124.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\48d18a403364708b74676d0c5068809ee47bcf43"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.031] SetErrorMode (uMode=0x0) returned 0x1 [0124.031] GetFileType (hFile=0x230) returned 0x1 [0124.031] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.042] SetErrorMode (uMode=0x1) returned 0x0 [0124.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\48d18a403364708b74676d0c5068809ee47bcf43"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4659ea40, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4659ea40, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c63dbdc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb17)) returned 1 [0124.043] SetErrorMode (uMode=0x0) returned 0x1 [0124.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\48d18a403364708b74676d0c5068809ee47bcf43"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\48D18A403364708B74676D0C5068809EE47BCF43.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\48d18a403364708b74676d0c5068809ee47bcf43.partially.cryptonar")) returned 1 [0124.048] SetErrorMode (uMode=0x1) returned 0x0 [0124.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491836973bd7f16266314a8709ef00934a1bfca0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.051] SetErrorMode (uMode=0x0) returned 0x1 [0124.052] GetFileType (hFile=0x230) returned 0x1 [0124.052] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.057] SetErrorMode (uMode=0x1) returned 0x0 [0124.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491836973bd7f16266314a8709ef00934a1bfca0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f74dbd9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f74dbd9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c65ea76, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe0d)) returned 1 [0124.058] SetErrorMode (uMode=0x0) returned 0x1 [0124.058] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491836973bd7f16266314a8709ef00934a1bfca0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491836973BD7F16266314A8709EF00934A1BFCA0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491836973bd7f16266314a8709ef00934a1bfca0.partially.cryptonar")) returned 1 [0124.061] SetErrorMode (uMode=0x1) returned 0x0 [0124.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491ffc0d1e910dc1db3107e7da730b43a97010a0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.064] SetErrorMode (uMode=0x0) returned 0x1 [0124.064] GetFileType (hFile=0x230) returned 0x1 [0124.064] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.082] SetErrorMode (uMode=0x1) returned 0x0 [0124.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491ffc0d1e910dc1db3107e7da730b43a97010a0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863334e0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863334e0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c6809e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf2b)) returned 1 [0124.082] SetErrorMode (uMode=0x0) returned 0x1 [0124.083] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491ffc0d1e910dc1db3107e7da730b43a97010a0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\491FFC0D1E910DC1DB3107E7DA730B43A97010A0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\491ffc0d1e910dc1db3107e7da730b43a97010a0.partially.cryptonar")) returned 1 [0124.084] SetErrorMode (uMode=0x1) returned 0x0 [0124.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4a46ac76f0ccc4293cc380999116f3b7911f85be"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.085] SetErrorMode (uMode=0x0) returned 0x1 [0124.086] GetFileType (hFile=0x230) returned 0x1 [0124.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.089] SetErrorMode (uMode=0x1) returned 0x0 [0124.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4a46ac76f0ccc4293cc380999116f3b7911f85be"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e705b6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e705b6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c6a7a0f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe79)) returned 1 [0124.089] SetErrorMode (uMode=0x0) returned 0x1 [0124.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4a46ac76f0ccc4293cc380999116f3b7911f85be"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4A46AC76F0CCC4293CC380999116F3B7911F85BE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4a46ac76f0ccc4293cc380999116f3b7911f85be.partially.cryptonar")) returned 1 [0124.091] SetErrorMode (uMode=0x1) returned 0x0 [0124.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b18b5ada8bf2e475961694931be215aed8ecbd5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.092] SetErrorMode (uMode=0x0) returned 0x1 [0124.092] GetFileType (hFile=0x230) returned 0x1 [0124.092] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.094] SetErrorMode (uMode=0x1) returned 0x0 [0124.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b18b5ada8bf2e475961694931be215aed8ecbd5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c6a7a0f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdfc)) returned 1 [0124.095] SetErrorMode (uMode=0x0) returned 0x1 [0124.095] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b18b5ada8bf2e475961694931be215aed8ecbd5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B18B5ADA8BF2E475961694931BE215AED8ECBD5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b18b5ada8bf2e475961694931be215aed8ecbd5.partially.cryptonar")) returned 1 [0124.097] SetErrorMode (uMode=0x1) returned 0x0 [0124.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b2a0dfa12feadff375261309f704b43534bee37"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.098] SetErrorMode (uMode=0x0) returned 0x1 [0124.098] GetFileType (hFile=0x230) returned 0x1 [0124.098] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.100] SetErrorMode (uMode=0x1) returned 0x0 [0124.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b2a0dfa12feadff375261309f704b43534bee37"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c6a7a0f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0124.101] SetErrorMode (uMode=0x0) returned 0x1 [0124.101] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b2a0dfa12feadff375261309f704b43534bee37"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4B2A0DFA12FEADFF375261309F704B43534BEE37.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4b2a0dfa12feadff375261309f704b43534bee37.partially.cryptonar")) returned 1 [0124.102] SetErrorMode (uMode=0x1) returned 0x0 [0124.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4bb6ac032612f432b6b5da43ee2daa6a8a03b6f4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.104] SetErrorMode (uMode=0x0) returned 0x1 [0124.104] GetFileType (hFile=0x230) returned 0x1 [0124.104] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.133] SetErrorMode (uMode=0x1) returned 0x0 [0124.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4bb6ac032612f432b6b5da43ee2daa6a8a03b6f4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f08f8d3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f08f8d3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c719b89, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x246e)) returned 1 [0124.133] SetErrorMode (uMode=0x0) returned 0x1 [0124.133] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4bb6ac032612f432b6b5da43ee2daa6a8a03b6f4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4BB6AC032612F432B6B5DA43EE2DAA6A8A03B6F4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4bb6ac032612f432b6b5da43ee2daa6a8a03b6f4.partially.cryptonar")) returned 1 [0124.135] SetErrorMode (uMode=0x1) returned 0x0 [0124.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4c7eaef07520b2c9900cfe06971368ff939aa197"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.136] SetErrorMode (uMode=0x0) returned 0x1 [0124.136] GetFileType (hFile=0x230) returned 0x1 [0124.136] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.156] SetErrorMode (uMode=0x1) returned 0x0 [0124.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4c7eaef07520b2c9900cfe06971368ff939aa197"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f157ba, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86f157ba, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c73f443, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1157b)) returned 1 [0124.156] SetErrorMode (uMode=0x0) returned 0x1 [0124.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4c7eaef07520b2c9900cfe06971368ff939aa197"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4C7EAEF07520B2C9900CFE06971368FF939AA197.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4c7eaef07520b2c9900cfe06971368ff939aa197.partially.cryptonar")) returned 1 [0124.157] SetErrorMode (uMode=0x1) returned 0x0 [0124.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cad791f9c35bb747a46bac7be30a1e3bc028262"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.158] SetErrorMode (uMode=0x0) returned 0x1 [0124.158] GetFileType (hFile=0x230) returned 0x1 [0124.158] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.181] SetErrorMode (uMode=0x1) returned 0x0 [0124.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cad791f9c35bb747a46bac7be30a1e3bc028262"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b81eab, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x41b81eab, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c78ba7c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfb1)) returned 1 [0124.181] SetErrorMode (uMode=0x0) returned 0x1 [0124.181] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cad791f9c35bb747a46bac7be30a1e3bc028262"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CAD791F9C35BB747A46BAC7BE30A1E3BC028262.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cad791f9c35bb747a46bac7be30a1e3bc028262.partially.cryptonar")) returned 1 [0124.183] SetErrorMode (uMode=0x1) returned 0x0 [0124.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cf1aed5bbd3500653d8e2d1ace09c58cf2d6182"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.183] SetErrorMode (uMode=0x0) returned 0x1 [0124.183] GetFileType (hFile=0x230) returned 0x1 [0124.184] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.218] SetErrorMode (uMode=0x1) returned 0x0 [0124.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cf1aed5bbd3500653d8e2d1ace09c58cf2d6182"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c7d832c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23d3b)) returned 1 [0124.219] SetErrorMode (uMode=0x0) returned 0x1 [0124.219] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cf1aed5bbd3500653d8e2d1ace09c58cf2d6182"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4CF1AED5BBD3500653D8E2D1ACE09C58CF2D6182.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4cf1aed5bbd3500653d8e2d1ace09c58cf2d6182.partially.cryptonar")) returned 1 [0124.220] SetErrorMode (uMode=0x1) returned 0x0 [0124.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4dce88d30f65c9460cc26665bc0a65f3234fa3d4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.222] SetErrorMode (uMode=0x0) returned 0x1 [0124.222] GetFileType (hFile=0x230) returned 0x1 [0124.222] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.253] SetErrorMode (uMode=0x1) returned 0x0 [0124.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4dce88d30f65c9460cc26665bc0a65f3234fa3d4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99f5d18a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x99f5d18a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4c8243d0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1096)) returned 1 [0124.253] SetErrorMode (uMode=0x0) returned 0x1 [0124.253] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4dce88d30f65c9460cc26665bc0a65f3234fa3d4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DCE88D30F65C9460CC26665BC0A65F3234FA3D4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4dce88d30f65c9460cc26665bc0a65f3234fa3d4.partially.cryptonar")) returned 1 [0124.255] SetErrorMode (uMode=0x1) returned 0x0 [0124.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4debfbf420a31cfdd61418b1be3adb580389730e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.257] SetErrorMode (uMode=0x0) returned 0x1 [0124.257] GetFileType (hFile=0x230) returned 0x1 [0124.257] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.259] SetErrorMode (uMode=0x1) returned 0x0 [0124.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4debfbf420a31cfdd61418b1be3adb580389730e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4338d3ac, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4338d3ac, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4c84afed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd42)) returned 1 [0124.259] SetErrorMode (uMode=0x0) returned 0x1 [0124.259] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4debfbf420a31cfdd61418b1be3adb580389730e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4DEBFBF420A31CFDD61418B1BE3ADB580389730E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4debfbf420a31cfdd61418b1be3adb580389730e.partially.cryptonar")) returned 1 [0124.261] SetErrorMode (uMode=0x1) returned 0x0 [0124.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4efb15999ee57edbfaadf69d6a31d8c6f90fe8dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.263] SetErrorMode (uMode=0x0) returned 0x1 [0124.263] GetFileType (hFile=0x230) returned 0x1 [0124.263] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.279] SetErrorMode (uMode=0x1) returned 0x0 [0124.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4efb15999ee57edbfaadf69d6a31d8c6f90fe8dc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c87082d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe27)) returned 1 [0124.279] SetErrorMode (uMode=0x0) returned 0x1 [0124.280] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4efb15999ee57edbfaadf69d6a31d8c6f90fe8dc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4efb15999ee57edbfaadf69d6a31d8c6f90fe8dc.partially.cryptonar")) returned 1 [0124.281] SetErrorMode (uMode=0x1) returned 0x0 [0124.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f0c54eef677196e2899e5e79b4f3a906e46f926"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.282] SetErrorMode (uMode=0x0) returned 0x1 [0124.282] GetFileType (hFile=0x230) returned 0x1 [0124.282] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.403] SetErrorMode (uMode=0x1) returned 0x0 [0124.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f0c54eef677196e2899e5e79b4f3a906e46f926"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4c9a1b94, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe29)) returned 1 [0124.403] SetErrorMode (uMode=0x0) returned 0x1 [0124.403] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f0c54eef677196e2899e5e79b4f3a906e46f926"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F0C54EEF677196E2899E5E79B4F3A906E46F926.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f0c54eef677196e2899e5e79b4f3a906e46f926.partially.cryptonar")) returned 1 [0124.405] SetErrorMode (uMode=0x1) returned 0x0 [0124.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f21ddd23480f1d4fba13115badb18b9ad18d8b1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.406] SetErrorMode (uMode=0x0) returned 0x1 [0124.406] GetFileType (hFile=0x230) returned 0x1 [0124.406] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.442] SetErrorMode (uMode=0x1) returned 0x0 [0124.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f21ddd23480f1d4fba13115badb18b9ad18d8b1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4c9ee00d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x275b)) returned 1 [0124.443] SetErrorMode (uMode=0x0) returned 0x1 [0124.443] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f21ddd23480f1d4fba13115badb18b9ad18d8b1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F21DDD23480F1D4FBA13115BADB18B9AD18D8B1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f21ddd23480f1d4fba13115badb18b9ad18d8b1.partially.cryptonar")) returned 1 [0124.444] SetErrorMode (uMode=0x1) returned 0x0 [0124.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f372c9418b79051abed288900cdf3d20c12f38c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.445] SetErrorMode (uMode=0x0) returned 0x1 [0124.445] GetFileType (hFile=0x230) returned 0x1 [0124.446] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.447] SetErrorMode (uMode=0x1) returned 0x0 [0124.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f372c9418b79051abed288900cdf3d20c12f38c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ca141f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10df)) returned 1 [0124.447] SetErrorMode (uMode=0x0) returned 0x1 [0124.448] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f372c9418b79051abed288900cdf3d20c12f38c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F372C9418B79051ABED288900CDF3D20C12F38C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f372c9418b79051abed288900cdf3d20c12f38c.partially.cryptonar")) returned 1 [0124.449] SetErrorMode (uMode=0x1) returned 0x0 [0124.449] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f680e68b8c682b5d2540fa7be7b7f0d7521d9c9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.450] SetErrorMode (uMode=0x0) returned 0x1 [0124.450] GetFileType (hFile=0x230) returned 0x1 [0124.450] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.456] SetErrorMode (uMode=0x1) returned 0x0 [0124.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f680e68b8c682b5d2540fa7be7b7f0d7521d9c9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466cfd21, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466cfd21, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4ca141f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x458)) returned 1 [0124.456] SetErrorMode (uMode=0x0) returned 0x1 [0124.457] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f680e68b8c682b5d2540fa7be7b7f0d7521d9c9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f680e68b8c682b5d2540fa7be7b7f0d7521d9c9.partially.cryptonar")) returned 1 [0124.458] SetErrorMode (uMode=0x1) returned 0x0 [0124.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f78d1f2d9b48d34c6259cf59fd5e171b97efb3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.459] SetErrorMode (uMode=0x0) returned 0x1 [0124.459] GetFileType (hFile=0x230) returned 0x1 [0124.459] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.550] SetErrorMode (uMode=0x1) returned 0x0 [0124.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f78d1f2d9b48d34c6259cf59fd5e171b97efb3a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x402961c1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x402961c1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4cafa178, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f2e)) returned 1 [0124.550] SetErrorMode (uMode=0x0) returned 0x1 [0124.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f78d1f2d9b48d34c6259cf59fd5e171b97efb3a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4F78D1F2D9B48D34C6259CF59FD5E171B97EFB3A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4f78d1f2d9b48d34c6259cf59fd5e171b97efb3a.partially.cryptonar")) returned 1 [0124.552] SetErrorMode (uMode=0x1) returned 0x0 [0124.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4fc872c4a3a8739207d005a676c19dab518fa53b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.553] SetErrorMode (uMode=0x0) returned 0x1 [0124.553] GetFileType (hFile=0x230) returned 0x1 [0124.553] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.576] SetErrorMode (uMode=0x1) returned 0x0 [0124.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4fc872c4a3a8739207d005a676c19dab518fa53b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8970447f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8970447f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4cb45501, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x300a)) returned 1 [0124.576] SetErrorMode (uMode=0x0) returned 0x1 [0124.576] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4fc872c4a3a8739207d005a676c19dab518fa53b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\4FC872C4A3A8739207D005A676C19DAB518FA53B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\4fc872c4a3a8739207d005a676c19dab518fa53b.partially.cryptonar")) returned 1 [0124.578] SetErrorMode (uMode=0x1) returned 0x0 [0124.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\514d7c625328106e43cec7fd7cf71aeda0a3101f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.579] SetErrorMode (uMode=0x0) returned 0x1 [0124.579] GetFileType (hFile=0x230) returned 0x1 [0124.579] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.610] SetErrorMode (uMode=0x1) returned 0x0 [0124.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\514d7c625328106e43cec7fd7cf71aeda0a3101f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4cb91a04, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x431)) returned 1 [0124.610] SetErrorMode (uMode=0x0) returned 0x1 [0124.611] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\514d7c625328106e43cec7fd7cf71aeda0a3101f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\514D7C625328106E43CEC7FD7CF71AEDA0A3101F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\514d7c625328106e43cec7fd7cf71aeda0a3101f.partially.cryptonar")) returned 1 [0124.612] SetErrorMode (uMode=0x1) returned 0x0 [0124.612] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\522ff036651fea29f227bfb14bd934175ddba62a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.613] SetErrorMode (uMode=0x0) returned 0x1 [0124.613] GetFileType (hFile=0x230) returned 0x1 [0124.613] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.614] SetErrorMode (uMode=0x1) returned 0x0 [0124.614] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\522ff036651fea29f227bfb14bd934175ddba62a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4cb91a04, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe25)) returned 1 [0124.615] SetErrorMode (uMode=0x0) returned 0x1 [0124.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\522ff036651fea29f227bfb14bd934175ddba62a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\522FF036651FEA29F227BFB14BD934175DDBA62A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\522ff036651fea29f227bfb14bd934175ddba62a.partially.cryptonar")) returned 1 [0124.616] SetErrorMode (uMode=0x1) returned 0x0 [0124.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5289f8c4ab5388de2fcd562674edf6674fb6dd30"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.617] SetErrorMode (uMode=0x0) returned 0x1 [0124.617] GetFileType (hFile=0x230) returned 0x1 [0124.617] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.642] SetErrorMode (uMode=0x1) returned 0x0 [0124.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5289f8c4ab5388de2fcd562674edf6674fb6dd30"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe21e62, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x751d0f1c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4cbddf1d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e10)) returned 1 [0124.643] SetErrorMode (uMode=0x0) returned 0x1 [0124.643] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5289f8c4ab5388de2fcd562674edf6674fb6dd30"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5289F8C4AB5388DE2FCD562674EDF6674FB6DD30.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5289f8c4ab5388de2fcd562674edf6674fb6dd30.partially.cryptonar")) returned 1 [0124.645] SetErrorMode (uMode=0x1) returned 0x0 [0124.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\529cd0d4c166c4989baaba7e5ff50f75fb1d22d3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.650] SetErrorMode (uMode=0x0) returned 0x1 [0124.650] GetFileType (hFile=0x230) returned 0x1 [0124.650] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.818] SetErrorMode (uMode=0x1) returned 0x0 [0124.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\529cd0d4c166c4989baaba7e5ff50f75fb1d22d3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4cd8b522, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdfc)) returned 1 [0124.818] SetErrorMode (uMode=0x0) returned 0x1 [0124.819] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\529cd0d4c166c4989baaba7e5ff50f75fb1d22d3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\529cd0d4c166c4989baaba7e5ff50f75fb1d22d3.partially.cryptonar")) returned 1 [0124.820] SetErrorMode (uMode=0x1) returned 0x0 [0124.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\52ece00b624c0c246123d20c46c3ee4f390a42fe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.821] SetErrorMode (uMode=0x0) returned 0x1 [0124.821] GetFileType (hFile=0x230) returned 0x1 [0124.821] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0124.839] SetErrorMode (uMode=0x1) returned 0x0 [0124.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\52ece00b624c0c246123d20c46c3ee4f390a42fe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871d235b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x871d235b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4cdd799b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x596)) returned 1 [0124.840] SetErrorMode (uMode=0x0) returned 0x1 [0124.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\52ece00b624c0c246123d20c46c3ee4f390a42fe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\52ECE00B624C0C246123D20C46C3EE4F390A42FE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\52ece00b624c0c246123d20c46c3ee4f390a42fe.partially.cryptonar")) returned 1 [0124.841] SetErrorMode (uMode=0x1) returned 0x0 [0124.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\539c21f72cc831d883a265394e7125efc208b096"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0124.841] SetErrorMode (uMode=0x0) returned 0x1 [0124.842] GetFileType (hFile=0x230) returned 0x1 [0124.842] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.016] SetErrorMode (uMode=0x1) returned 0x0 [0125.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\539c21f72cc831d883a265394e7125efc208b096"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bda662, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4bda662, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4cf7c5bf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc5d)) returned 1 [0125.017] SetErrorMode (uMode=0x0) returned 0x1 [0125.017] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\539c21f72cc831d883a265394e7125efc208b096"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\539C21F72CC831D883A265394E7125EFC208B096.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\539c21f72cc831d883a265394e7125efc208b096.partially.cryptonar")) returned 1 [0125.019] SetErrorMode (uMode=0x1) returned 0x0 [0125.019] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53dae4b1d7bff6744ccaf7207de631267f9883dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.020] SetErrorMode (uMode=0x0) returned 0x1 [0125.020] GetFileType (hFile=0x230) returned 0x1 [0125.020] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.085] SetErrorMode (uMode=0x1) returned 0x0 [0125.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53dae4b1d7bff6744ccaf7207de631267f9883dc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2732312, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2732312, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d013ebb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2b8b)) returned 1 [0125.085] SetErrorMode (uMode=0x0) returned 0x1 [0125.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53dae4b1d7bff6744ccaf7207de631267f9883dc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53DAE4B1D7BFF6744CCAF7207DE631267F9883DC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53dae4b1d7bff6744ccaf7207de631267f9883dc.partially.cryptonar")) returned 1 [0125.087] SetErrorMode (uMode=0x1) returned 0x0 [0125.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53e9caa90a10c82cf9c2d5393b332d17b263105e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.088] SetErrorMode (uMode=0x0) returned 0x1 [0125.088] GetFileType (hFile=0x230) returned 0x1 [0125.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.123] SetErrorMode (uMode=0x1) returned 0x0 [0125.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53e9caa90a10c82cf9c2d5393b332d17b263105e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f161877, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f161877, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d08b947, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x287f)) returned 1 [0125.123] SetErrorMode (uMode=0x0) returned 0x1 [0125.124] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53e9caa90a10c82cf9c2d5393b332d17b263105e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\53E9CAA90A10C82CF9C2D5393B332D17B263105E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\53e9caa90a10c82cf9c2d5393b332d17b263105e.partially.cryptonar")) returned 1 [0125.125] SetErrorMode (uMode=0x1) returned 0x0 [0125.125] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\54bf6d9d46d035228ac887abc41b451f2ba38c02"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.126] SetErrorMode (uMode=0x0) returned 0x1 [0125.126] GetFileType (hFile=0x230) returned 0x1 [0125.126] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.143] SetErrorMode (uMode=0x1) returned 0x0 [0125.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\54bf6d9d46d035228ac887abc41b451f2ba38c02"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x892f4303, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x892f4303, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d0ac819, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1285)) returned 1 [0125.143] SetErrorMode (uMode=0x0) returned 0x1 [0125.143] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\54bf6d9d46d035228ac887abc41b451f2ba38c02"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\54BF6D9D46D035228AC887ABC41B451F2BA38C02.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\54bf6d9d46d035228ac887abc41b451f2ba38c02.partially.cryptonar")) returned 1 [0125.147] SetErrorMode (uMode=0x1) returned 0x0 [0125.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5588a68ffecf7b388e18c33727bf06b30b837df1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.149] SetErrorMode (uMode=0x0) returned 0x1 [0125.149] GetFileType (hFile=0x230) returned 0x1 [0125.149] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.156] SetErrorMode (uMode=0x1) returned 0x0 [0125.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5588a68ffecf7b388e18c33727bf06b30b837df1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c268d3d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c268d3d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d0d29bb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1cdb)) returned 1 [0125.156] SetErrorMode (uMode=0x0) returned 0x1 [0125.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5588a68ffecf7b388e18c33727bf06b30b837df1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5588A68FFECF7B388E18C33727BF06B30B837DF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5588a68ffecf7b388e18c33727bf06b30b837df1.partially.cryptonar")) returned 1 [0125.158] SetErrorMode (uMode=0x1) returned 0x0 [0125.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\559737b84286037bf56fe9e46c53581fb6ff6751"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.159] SetErrorMode (uMode=0x0) returned 0x1 [0125.159] GetFileType (hFile=0x230) returned 0x1 [0125.159] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.203] SetErrorMode (uMode=0x1) returned 0x0 [0125.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\559737b84286037bf56fe9e46c53581fb6ff6751"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc8f5d5c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcc8f5d5c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d145bac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd0b)) returned 1 [0125.204] SetErrorMode (uMode=0x0) returned 0x1 [0125.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\559737b84286037bf56fe9e46c53581fb6ff6751"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\559737B84286037BF56FE9E46C53581FB6FF6751.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\559737b84286037bf56fe9e46c53581fb6ff6751.partially.cryptonar")) returned 1 [0125.205] SetErrorMode (uMode=0x1) returned 0x0 [0125.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56945bfe2b00eed1be4f7b1f389030a0af203742"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.206] SetErrorMode (uMode=0x0) returned 0x1 [0125.206] GetFileType (hFile=0x230) returned 0x1 [0125.206] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.220] SetErrorMode (uMode=0x1) returned 0x0 [0125.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56945bfe2b00eed1be4f7b1f389030a0af203742"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x877704a4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x877704a4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d16b396, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x921)) returned 1 [0125.220] SetErrorMode (uMode=0x0) returned 0x1 [0125.220] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56945bfe2b00eed1be4f7b1f389030a0af203742"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56945BFE2B00EED1BE4F7B1F389030A0AF203742.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56945bfe2b00eed1be4f7b1f389030a0af203742.partially.cryptonar")) returned 1 [0125.222] SetErrorMode (uMode=0x1) returned 0x0 [0125.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56b48b214c8c7ac2ce81efc4f92c4550fb675ae9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.223] SetErrorMode (uMode=0x0) returned 0x1 [0125.223] GetFileType (hFile=0x230) returned 0x1 [0125.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.224] SetErrorMode (uMode=0x1) returned 0x0 [0125.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56b48b214c8c7ac2ce81efc4f92c4550fb675ae9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89cdcf63, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89cdcf63, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d16b396, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x228a)) returned 1 [0125.225] SetErrorMode (uMode=0x0) returned 0x1 [0125.225] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56b48b214c8c7ac2ce81efc4f92c4550fb675ae9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56B48B214C8C7AC2CE81EFC4F92C4550FB675AE9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56b48b214c8c7ac2ce81efc4f92c4550fb675ae9.partially.cryptonar")) returned 1 [0125.226] SetErrorMode (uMode=0x1) returned 0x0 [0125.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56c1d667a6afd5406f830882d54923461e079c1b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.227] SetErrorMode (uMode=0x0) returned 0x1 [0125.227] GetFileType (hFile=0x230) returned 0x1 [0125.227] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.268] SetErrorMode (uMode=0x1) returned 0x0 [0125.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56c1d667a6afd5406f830882d54923461e079c1b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d1ddc65, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe29)) returned 1 [0125.268] SetErrorMode (uMode=0x0) returned 0x1 [0125.268] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56c1d667a6afd5406f830882d54923461e079c1b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\56C1D667A6AFD5406F830882D54923461E079C1B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\56c1d667a6afd5406f830882d54923461e079c1b.partially.cryptonar")) returned 1 [0125.270] SetErrorMode (uMode=0x1) returned 0x0 [0125.270] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5740b2dd533a74c3d20dd1d045cf7090d3bfb1ac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.273] SetErrorMode (uMode=0x0) returned 0x1 [0125.273] GetFileType (hFile=0x230) returned 0x1 [0125.273] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.291] SetErrorMode (uMode=0x1) returned 0x0 [0125.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5740b2dd533a74c3d20dd1d045cf7090d3bfb1ac"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a3d889, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a3d889, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d203cd5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdca)) returned 1 [0125.292] SetErrorMode (uMode=0x0) returned 0x1 [0125.292] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5740b2dd533a74c3d20dd1d045cf7090d3bfb1ac"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5740B2DD533A74C3D20DD1D045CF7090D3BFB1AC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5740b2dd533a74c3d20dd1d045cf7090d3bfb1ac.partially.cryptonar")) returned 1 [0125.294] SetErrorMode (uMode=0x1) returned 0x0 [0125.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\577655b6f15a0eea0864c0703652de24c091b634"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.295] SetErrorMode (uMode=0x0) returned 0x1 [0125.295] GetFileType (hFile=0x230) returned 0x1 [0125.295] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.348] SetErrorMode (uMode=0x1) returned 0x0 [0125.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\577655b6f15a0eea0864c0703652de24c091b634"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862e2baa, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x862e2baa, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d29c6b5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11dc)) returned 1 [0125.348] SetErrorMode (uMode=0x0) returned 0x1 [0125.349] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\577655b6f15a0eea0864c0703652de24c091b634"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\577655B6F15A0EEA0864C0703652DE24C091B634.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\577655b6f15a0eea0864c0703652de24c091b634.partially.cryptonar")) returned 1 [0125.350] SetErrorMode (uMode=0x1) returned 0x0 [0125.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5781f439935b6472d7d312e75a3b766c3e30cf60"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.351] SetErrorMode (uMode=0x0) returned 0x1 [0125.351] GetFileType (hFile=0x230) returned 0x1 [0125.351] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.372] SetErrorMode (uMode=0x1) returned 0x0 [0125.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5781f439935b6472d7d312e75a3b766c3e30cf60"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6bdaf3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6bdaf3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d2e8b8a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0125.373] SetErrorMode (uMode=0x0) returned 0x1 [0125.373] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5781f439935b6472d7d312e75a3b766c3e30cf60"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5781F439935B6472D7D312E75A3B766C3E30CF60.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5781f439935b6472d7d312e75a3b766c3e30cf60.partially.cryptonar")) returned 1 [0125.374] SetErrorMode (uMode=0x1) returned 0x0 [0125.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\579ec9227c4a988dcc4894d82aa161957107515d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.376] SetErrorMode (uMode=0x0) returned 0x1 [0125.376] GetFileType (hFile=0x230) returned 0x1 [0125.376] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.391] SetErrorMode (uMode=0x1) returned 0x0 [0125.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\579ec9227c4a988dcc4894d82aa161957107515d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46172872, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46172872, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4d311bd1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7ff)) returned 1 [0125.391] SetErrorMode (uMode=0x0) returned 0x1 [0125.391] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\579ec9227c4a988dcc4894d82aa161957107515d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\579EC9227C4A988DCC4894D82AA161957107515D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\579ec9227c4a988dcc4894d82aa161957107515d.partially.cryptonar")) returned 1 [0125.395] SetErrorMode (uMode=0x1) returned 0x0 [0125.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57e662573fd9e42d3972be92d3df0557c7b2e836"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.397] SetErrorMode (uMode=0x0) returned 0x1 [0125.397] GetFileType (hFile=0x230) returned 0x1 [0125.397] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.398] SetErrorMode (uMode=0x1) returned 0x0 [0125.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57e662573fd9e42d3972be92d3df0557c7b2e836"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4693f60, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4693f60, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d311bd1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22a1)) returned 1 [0125.399] SetErrorMode (uMode=0x0) returned 0x1 [0125.399] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57e662573fd9e42d3972be92d3df0557c7b2e836"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57E662573FD9E42D3972BE92D3DF0557C7B2E836.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57e662573fd9e42d3972be92d3df0557c7b2e836.partially.cryptonar")) returned 1 [0125.403] SetErrorMode (uMode=0x1) returned 0x0 [0125.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57fb9388d9b054d289cc913e797b5c5217b6a217"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.404] SetErrorMode (uMode=0x0) returned 0x1 [0125.404] GetFileType (hFile=0x230) returned 0x1 [0125.404] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.417] SetErrorMode (uMode=0x1) returned 0x0 [0125.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57fb9388d9b054d289cc913e797b5c5217b6a217"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f375ca8, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f375ca8, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d35b0c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0125.418] SetErrorMode (uMode=0x0) returned 0x1 [0125.418] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57fb9388d9b054d289cc913e797b5c5217b6a217"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\57FB9388D9B054D289CC913E797B5C5217B6A217.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\57fb9388d9b054d289cc913e797b5c5217b6a217.partially.cryptonar")) returned 1 [0125.419] SetErrorMode (uMode=0x1) returned 0x0 [0125.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58a845fd76589b14ef62bb6cfea62db0c7ccfbbe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.420] SetErrorMode (uMode=0x0) returned 0x1 [0125.420] GetFileType (hFile=0x230) returned 0x1 [0125.420] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.422] SetErrorMode (uMode=0x1) returned 0x0 [0125.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58a845fd76589b14ef62bb6cfea62db0c7ccfbbe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551c802f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x551c802f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d35b0c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe21)) returned 1 [0125.422] SetErrorMode (uMode=0x0) returned 0x1 [0125.422] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58a845fd76589b14ef62bb6cfea62db0c7ccfbbe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58A845FD76589B14EF62BB6CFEA62DB0C7CCFBBE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58a845fd76589b14ef62bb6cfea62db0c7ccfbbe.partially.cryptonar")) returned 1 [0125.423] SetErrorMode (uMode=0x1) returned 0x0 [0125.423] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58bfe77fa719f36ce48d4a317c753c845c38fe29"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.424] SetErrorMode (uMode=0x0) returned 0x1 [0125.424] GetFileType (hFile=0x230) returned 0x1 [0125.424] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.425] SetErrorMode (uMode=0x1) returned 0x0 [0125.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58bfe77fa719f36ce48d4a317c753c845c38fe29"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369a5b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf369a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d35b0c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1 [0125.426] SetErrorMode (uMode=0x0) returned 0x1 [0125.426] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58bfe77fa719f36ce48d4a317c753c845c38fe29"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\58BFE77FA719F36CE48D4A317C753C845C38FE29.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\58bfe77fa719f36ce48d4a317c753c845c38fe29.partially.cryptonar")) returned 1 [0125.427] SetErrorMode (uMode=0x1) returned 0x0 [0125.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59248032db55d8a9e0296a51bc66f3dea6028ea5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.427] SetErrorMode (uMode=0x0) returned 0x1 [0125.427] GetFileType (hFile=0x230) returned 0x1 [0125.427] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.432] ReadFile (in: hFile=0x230, lpBuffer=0x26bbc90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26bbc90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0125.463] SetErrorMode (uMode=0x1) returned 0x0 [0125.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59248032db55d8a9e0296a51bc66f3dea6028ea5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e7e1b9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e7e1b9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d3a7804, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1aef)) returned 1 [0125.464] SetErrorMode (uMode=0x0) returned 0x1 [0125.464] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59248032db55d8a9e0296a51bc66f3dea6028ea5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59248032DB55D8A9E0296A51BC66F3DEA6028EA5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59248032db55d8a9e0296a51bc66f3dea6028ea5.partially.cryptonar")) returned 1 [0125.465] SetErrorMode (uMode=0x1) returned 0x0 [0125.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\592bc6129bb410343931d35afb0fe270c66e58f0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.466] SetErrorMode (uMode=0x0) returned 0x1 [0125.466] GetFileType (hFile=0x230) returned 0x1 [0125.466] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.468] SetErrorMode (uMode=0x1) returned 0x0 [0125.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\592bc6129bb410343931d35afb0fe270c66e58f0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x447df52a, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x447df52a, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x4d3cd86f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0125.468] SetErrorMode (uMode=0x0) returned 0x1 [0125.468] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\592bc6129bb410343931d35afb0fe270c66e58f0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\592BC6129BB410343931D35AFB0FE270C66E58F0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\592bc6129bb410343931d35afb0fe270c66e58f0.partially.cryptonar")) returned 1 [0125.469] SetErrorMode (uMode=0x1) returned 0x0 [0125.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59bb52b352de6d0ed5d0376b33855d43ca80b3f7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.471] SetErrorMode (uMode=0x0) returned 0x1 [0125.471] GetFileType (hFile=0x230) returned 0x1 [0125.471] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.482] SetErrorMode (uMode=0x1) returned 0x0 [0125.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59bb52b352de6d0ed5d0376b33855d43ca80b3f7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c3d57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e8c3d57, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d3f3d06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5243)) returned 1 [0125.483] SetErrorMode (uMode=0x0) returned 0x1 [0125.483] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59bb52b352de6d0ed5d0376b33855d43ca80b3f7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59BB52B352DE6D0ED5D0376B33855D43CA80B3F7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59bb52b352de6d0ed5d0376b33855d43ca80b3f7.partially.cryptonar")) returned 1 [0125.485] SetErrorMode (uMode=0x1) returned 0x0 [0125.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59d05f1b38666c8ef68bdee20a28647f754464f6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.486] SetErrorMode (uMode=0x0) returned 0x1 [0125.487] GetFileType (hFile=0x230) returned 0x1 [0125.487] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.488] SetErrorMode (uMode=0x1) returned 0x0 [0125.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59d05f1b38666c8ef68bdee20a28647f754464f6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d3f3d06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf15)) returned 1 [0125.488] SetErrorMode (uMode=0x0) returned 0x1 [0125.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59d05f1b38666c8ef68bdee20a28647f754464f6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\59D05F1B38666C8EF68BDEE20A28647F754464F6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\59d05f1b38666c8ef68bdee20a28647f754464f6.partially.cryptonar")) returned 1 [0125.490] SetErrorMode (uMode=0x1) returned 0x0 [0125.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a39fcb4ccae4a6c76307026d7c882b4ae85b1f9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.491] SetErrorMode (uMode=0x0) returned 0x1 [0125.491] GetFileType (hFile=0x230) returned 0x1 [0125.491] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.493] SetErrorMode (uMode=0x1) returned 0x0 [0125.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a39fcb4ccae4a6c76307026d7c882b4ae85b1f9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d7396b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46d7396b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4d3f3d06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x37d3)) returned 1 [0125.493] SetErrorMode (uMode=0x0) returned 0x1 [0125.493] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a39fcb4ccae4a6c76307026d7c882b4ae85b1f9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a39fcb4ccae4a6c76307026d7c882b4ae85b1f9.partially.cryptonar")) returned 1 [0125.494] SetErrorMode (uMode=0x1) returned 0x0 [0125.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a6eec1674da4669a4ff612e7924a91fbf501426"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.495] SetErrorMode (uMode=0x0) returned 0x1 [0125.496] GetFileType (hFile=0x230) returned 0x1 [0125.496] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.499] SetErrorMode (uMode=0x1) returned 0x0 [0125.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a6eec1674da4669a4ff612e7924a91fbf501426"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x878b9e63, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x878b9e63, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d41a304, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1cbf)) returned 1 [0125.499] SetErrorMode (uMode=0x0) returned 0x1 [0125.499] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a6eec1674da4669a4ff612e7924a91fbf501426"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5A6EEC1674DA4669A4FF612E7924A91FBF501426.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5a6eec1674da4669a4ff612e7924a91fbf501426.partially.cryptonar")) returned 1 [0125.500] SetErrorMode (uMode=0x1) returned 0x0 [0125.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5af1f43361120818c2e543605f5df938574b1edc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.501] SetErrorMode (uMode=0x0) returned 0x1 [0125.501] GetFileType (hFile=0x230) returned 0x1 [0125.501] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.503] SetErrorMode (uMode=0x1) returned 0x0 [0125.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5af1f43361120818c2e543605f5df938574b1edc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe20ccbd6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xe20ccbd6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d41a304, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1257)) returned 1 [0125.504] SetErrorMode (uMode=0x0) returned 0x1 [0125.504] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5af1f43361120818c2e543605f5df938574b1edc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5AF1F43361120818C2E543605F5DF938574B1EDC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5af1f43361120818c2e543605f5df938574b1edc.partially.cryptonar")) returned 1 [0125.505] SetErrorMode (uMode=0x1) returned 0x0 [0125.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b1b55b57e2440a52de3fed7e02c83e04a78b0fd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.506] SetErrorMode (uMode=0x0) returned 0x1 [0125.506] GetFileType (hFile=0x230) returned 0x1 [0125.506] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.566] SetErrorMode (uMode=0x1) returned 0x0 [0125.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b1b55b57e2440a52de3fed7e02c83e04a78b0fd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32855dd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc32855dd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d4b27d3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb612)) returned 1 [0125.567] SetErrorMode (uMode=0x0) returned 0x1 [0125.567] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b1b55b57e2440a52de3fed7e02c83e04a78b0fd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B1B55B57E2440A52DE3FED7E02C83E04A78B0FD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b1b55b57e2440a52de3fed7e02c83e04a78b0fd.partially.cryptonar")) returned 1 [0125.568] SetErrorMode (uMode=0x1) returned 0x0 [0125.568] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b928bd544ba66929a709c6aec9d5968dcb905a1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.568] SetErrorMode (uMode=0x0) returned 0x1 [0125.569] GetFileType (hFile=0x230) returned 0x1 [0125.569] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.594] SetErrorMode (uMode=0x1) returned 0x0 [0125.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b928bd544ba66929a709c6aec9d5968dcb905a1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d85fb06, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d85fb06, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d5003b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1247)) returned 1 [0125.594] SetErrorMode (uMode=0x0) returned 0x1 [0125.595] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b928bd544ba66929a709c6aec9d5968dcb905a1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5B928BD544BA66929A709C6AEC9D5968DCB905A1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5b928bd544ba66929a709c6aec9d5968dcb905a1.partially.cryptonar")) returned 1 [0125.596] SetErrorMode (uMode=0x1) returned 0x0 [0125.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5bdde6c7804d11ce399af314c3d33e47fbae7c88"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.597] SetErrorMode (uMode=0x0) returned 0x1 [0125.597] GetFileType (hFile=0x230) returned 0x1 [0125.597] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.600] SetErrorMode (uMode=0x1) returned 0x0 [0125.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5bdde6c7804d11ce399af314c3d33e47fbae7c88"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f163f8a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f163f8a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d5003b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2f8f)) returned 1 [0125.600] SetErrorMode (uMode=0x0) returned 0x1 [0125.600] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5bdde6c7804d11ce399af314c3d33e47fbae7c88"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5BDDE6C7804D11CE399AF314C3D33E47FBAE7C88.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5bdde6c7804d11ce399af314c3d33e47fbae7c88.partially.cryptonar")) returned 1 [0125.601] SetErrorMode (uMode=0x1) returned 0x0 [0125.601] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5c30f12d68a505e4ae0a6a3d896a1ec9c549ae96"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.602] SetErrorMode (uMode=0x0) returned 0x1 [0125.602] GetFileType (hFile=0x230) returned 0x1 [0125.602] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.613] SetErrorMode (uMode=0x1) returned 0x0 [0125.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5c30f12d68a505e4ae0a6a3d896a1ec9c549ae96"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d524edd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0125.614] SetErrorMode (uMode=0x0) returned 0x1 [0125.614] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5c30f12d68a505e4ae0a6a3d896a1ec9c549ae96"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5C30F12D68A505E4AE0A6A3D896A1EC9C549AE96.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5c30f12d68a505e4ae0a6a3d896a1ec9c549ae96.partially.cryptonar")) returned 1 [0125.615] SetErrorMode (uMode=0x1) returned 0x0 [0125.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d3d330efbd2b9cd6eb45919d9403f605414efa5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.616] SetErrorMode (uMode=0x0) returned 0x1 [0125.616] GetFileType (hFile=0x230) returned 0x1 [0125.616] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.632] SetErrorMode (uMode=0x1) returned 0x0 [0125.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d3d330efbd2b9cd6eb45919d9403f605414efa5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c19e2e4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c19e2e4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d54aee4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2184)) returned 1 [0125.633] SetErrorMode (uMode=0x0) returned 0x1 [0125.633] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d3d330efbd2b9cd6eb45919d9403f605414efa5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D3D330EFBD2B9CD6EB45919D9403F605414EFA5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d3d330efbd2b9cd6eb45919d9403f605414efa5.partially.cryptonar")) returned 1 [0125.634] SetErrorMode (uMode=0x1) returned 0x0 [0125.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d44ac703c53cc7ee6356f698fd1b03da81ffe47"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.638] SetErrorMode (uMode=0x0) returned 0x1 [0125.638] GetFileType (hFile=0x230) returned 0x1 [0125.638] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.677] SetErrorMode (uMode=0x1) returned 0x0 [0125.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d44ac703c53cc7ee6356f698fd1b03da81ffe47"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef71e2a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef71e2a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d5c78fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2196)) returned 1 [0125.677] SetErrorMode (uMode=0x0) returned 0x1 [0125.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d44ac703c53cc7ee6356f698fd1b03da81ffe47"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D44AC703C53CC7EE6356F698FD1B03DA81FFE47.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d44ac703c53cc7ee6356f698fd1b03da81ffe47.partially.cryptonar")) returned 1 [0125.679] SetErrorMode (uMode=0x1) returned 0x0 [0125.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d4d29bf9ddc265d3bf3c2ec2ad949959db051e0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.680] SetErrorMode (uMode=0x0) returned 0x1 [0125.680] GetFileType (hFile=0x230) returned 0x1 [0125.680] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.694] SetErrorMode (uMode=0x1) returned 0x0 [0125.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d4d29bf9ddc265d3bf3c2ec2ad949959db051e0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43dd5662, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x43dd5662, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4d5e39c1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52b9)) returned 1 [0125.694] SetErrorMode (uMode=0x0) returned 0x1 [0125.694] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d4d29bf9ddc265d3bf3c2ec2ad949959db051e0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D4D29BF9DDC265D3BF3C2EC2AD949959DB051E0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d4d29bf9ddc265d3bf3c2ec2ad949959db051e0.partially.cryptonar")) returned 1 [0125.697] SetErrorMode (uMode=0x1) returned 0x0 [0125.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d9bd74008929159a2b20ba288e8c14e90139d9e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.698] SetErrorMode (uMode=0x0) returned 0x1 [0125.698] GetFileType (hFile=0x230) returned 0x1 [0125.698] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.743] SetErrorMode (uMode=0x1) returned 0x0 [0125.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d9bd74008929159a2b20ba288e8c14e90139d9e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547a6013, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x547a6013, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d6606fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4959)) returned 1 [0125.743] SetErrorMode (uMode=0x0) returned 0x1 [0125.743] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d9bd74008929159a2b20ba288e8c14e90139d9e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5D9BD74008929159A2B20BA288E8C14E90139D9E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5d9bd74008929159a2b20ba288e8c14e90139d9e.partially.cryptonar")) returned 1 [0125.744] SetErrorMode (uMode=0x1) returned 0x0 [0125.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e4954707b44e5a4b4acf5f22b52219a1dca477f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.745] SetErrorMode (uMode=0x0) returned 0x1 [0125.746] GetFileType (hFile=0x230) returned 0x1 [0125.746] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.762] SetErrorMode (uMode=0x1) returned 0x0 [0125.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e4954707b44e5a4b4acf5f22b52219a1dca477f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7047e6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f7047e6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d6a25f3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f9a)) returned 1 [0125.763] SetErrorMode (uMode=0x0) returned 0x1 [0125.763] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e4954707b44e5a4b4acf5f22b52219a1dca477f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E4954707B44E5A4B4ACF5F22B52219A1DCA477F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e4954707b44e5a4b4acf5f22b52219a1dca477f.partially.cryptonar")) returned 1 [0125.764] SetErrorMode (uMode=0x1) returned 0x0 [0125.764] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e6743008ead7f878bba3db3ac74b0f7b6847e62"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.768] SetErrorMode (uMode=0x0) returned 0x1 [0125.769] GetFileType (hFile=0x230) returned 0x1 [0125.769] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.774] SetErrorMode (uMode=0x1) returned 0x0 [0125.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e6743008ead7f878bba3db3ac74b0f7b6847e62"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d9a31d7, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x5d9a31d7, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4d6a25f3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf37)) returned 1 [0125.775] SetErrorMode (uMode=0x0) returned 0x1 [0125.784] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e6743008ead7f878bba3db3ac74b0f7b6847e62"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E6743008EAD7F878BBA3DB3AC74B0F7B6847E62.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e6743008ead7f878bba3db3ac74b0f7b6847e62.partially.cryptonar")) returned 1 [0125.788] SetErrorMode (uMode=0x1) returned 0x0 [0125.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e8fb85f742729abdb8d2a0429759ba5d6e156b0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.789] SetErrorMode (uMode=0x0) returned 0x1 [0125.789] GetFileType (hFile=0x230) returned 0x1 [0125.789] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.790] SetErrorMode (uMode=0x1) returned 0x0 [0125.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e8fb85f742729abdb8d2a0429759ba5d6e156b0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c5bf49c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5c5bf49c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d6d99e9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf37)) returned 1 [0125.790] SetErrorMode (uMode=0x0) returned 0x1 [0125.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e8fb85f742729abdb8d2a0429759ba5d6e156b0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E8FB85F742729ABDB8D2A0429759BA5D6E156B0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e8fb85f742729abdb8d2a0429759ba5d6e156b0.partially.cryptonar")) returned 1 [0125.792] SetErrorMode (uMode=0x1) returned 0x0 [0125.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e97e077892fc573b11b9de18e4e04712ee38b25"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.793] SetErrorMode (uMode=0x0) returned 0x1 [0125.793] GetFileType (hFile=0x230) returned 0x1 [0125.793] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.796] SetErrorMode (uMode=0x1) returned 0x0 [0125.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e97e077892fc573b11b9de18e4e04712ee38b25"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d6eea12, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18d8)) returned 1 [0125.796] SetErrorMode (uMode=0x0) returned 0x1 [0125.796] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e97e077892fc573b11b9de18e4e04712ee38b25"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5E97E077892FC573B11B9DE18E4E04712EE38B25.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5e97e077892fc573b11b9de18e4e04712ee38b25.partially.cryptonar")) returned 1 [0125.797] SetErrorMode (uMode=0x1) returned 0x0 [0125.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5edca8eab63e705143e36a7639d1a2ce2f619754"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.798] SetErrorMode (uMode=0x0) returned 0x1 [0125.798] GetFileType (hFile=0x230) returned 0x1 [0125.799] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.811] SetErrorMode (uMode=0x1) returned 0x0 [0125.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5edca8eab63e705143e36a7639d1a2ce2f619754"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde0e53cd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde0e53cd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d714cfc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfbe)) returned 1 [0125.811] SetErrorMode (uMode=0x0) returned 0x1 [0125.812] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5edca8eab63e705143e36a7639d1a2ce2f619754"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EDCA8EAB63E705143E36A7639D1A2CE2F619754.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5edca8eab63e705143e36a7639d1a2ce2f619754.partially.cryptonar")) returned 1 [0125.813] SetErrorMode (uMode=0x1) returned 0x0 [0125.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5ee31d123c1a55f6ff9368b871e37ac7d9f01fe5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.814] SetErrorMode (uMode=0x0) returned 0x1 [0125.814] GetFileType (hFile=0x230) returned 0x1 [0125.814] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.829] SetErrorMode (uMode=0x1) returned 0x0 [0125.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5ee31d123c1a55f6ff9368b871e37ac7d9f01fe5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d85fb06, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d85fb06, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d73aeeb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18ab)) returned 1 [0125.830] SetErrorMode (uMode=0x0) returned 0x1 [0125.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5ee31d123c1a55f6ff9368b871e37ac7d9f01fe5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5EE31D123C1A55F6FF9368B871E37AC7D9F01FE5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5ee31d123c1a55f6ff9368b871e37ac7d9f01fe5.partially.cryptonar")) returned 1 [0125.831] SetErrorMode (uMode=0x1) returned 0x0 [0125.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5f13be737eb5a225243b9a7c6d508d72dbd5c0b5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.832] SetErrorMode (uMode=0x0) returned 0x1 [0125.832] GetFileType (hFile=0x230) returned 0x1 [0125.832] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.845] SetErrorMode (uMode=0x1) returned 0x0 [0125.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5f13be737eb5a225243b9a7c6d508d72dbd5c0b5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d76116c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xecd)) returned 1 [0125.845] SetErrorMode (uMode=0x0) returned 0x1 [0125.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5f13be737eb5a225243b9a7c6d508d72dbd5c0b5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5F13BE737EB5A225243B9A7C6D508D72DBD5C0B5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5f13be737eb5a225243b9a7c6d508d72dbd5c0b5.partially.cryptonar")) returned 1 [0125.846] SetErrorMode (uMode=0x1) returned 0x0 [0125.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5fc12d3d59a53a815787f247f7bc644a4f2dbc17"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.847] SetErrorMode (uMode=0x0) returned 0x1 [0125.847] GetFileType (hFile=0x230) returned 0x1 [0125.847] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.862] SetErrorMode (uMode=0x1) returned 0x0 [0125.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5fc12d3d59a53a815787f247f7bc644a4f2dbc17"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f16b4b9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f16b4b9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d787462, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0125.863] SetErrorMode (uMode=0x0) returned 0x1 [0125.863] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5fc12d3d59a53a815787f247f7bc644a4f2dbc17"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\5FC12D3D59A53A815787F247F7BC644A4F2DBC17.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\5fc12d3d59a53a815787f247f7bc644a4f2dbc17.partially.cryptonar")) returned 1 [0125.864] SetErrorMode (uMode=0x1) returned 0x0 [0125.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\602af084d952e6e4f98efa78bc6fe6b89dee91b8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.866] SetErrorMode (uMode=0x0) returned 0x1 [0125.866] GetFileType (hFile=0x230) returned 0x1 [0125.866] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.880] SetErrorMode (uMode=0x1) returned 0x0 [0125.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\602af084d952e6e4f98efa78bc6fe6b89dee91b8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1b9090, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c1b9090, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d7ad67c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3740)) returned 1 [0125.880] SetErrorMode (uMode=0x0) returned 0x1 [0125.880] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\602af084d952e6e4f98efa78bc6fe6b89dee91b8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\602AF084D952E6E4F98EFA78BC6FE6B89DEE91B8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\602af084d952e6e4f98efa78bc6fe6b89dee91b8.partially.cryptonar")) returned 1 [0125.882] SetErrorMode (uMode=0x1) returned 0x0 [0125.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\60a4af5c5655ca195b9af21aadcf84e905febc55"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.883] SetErrorMode (uMode=0x0) returned 0x1 [0125.883] GetFileType (hFile=0x230) returned 0x1 [0125.883] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.893] SetErrorMode (uMode=0x1) returned 0x0 [0125.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\60a4af5c5655ca195b9af21aadcf84e905febc55"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc2d608, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fc2d608, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d7d3972, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ff4)) returned 1 [0125.894] SetErrorMode (uMode=0x0) returned 0x1 [0125.894] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\60a4af5c5655ca195b9af21aadcf84e905febc55"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\60A4AF5C5655CA195B9AF21AADCF84E905FEBC55.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\60a4af5c5655ca195b9af21aadcf84e905febc55.partially.cryptonar")) returned 1 [0125.895] SetErrorMode (uMode=0x1) returned 0x0 [0125.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6110e52dcc41b003f9abb87af539d456402b7f80"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.897] SetErrorMode (uMode=0x0) returned 0x1 [0125.897] GetFileType (hFile=0x230) returned 0x1 [0125.897] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.906] SetErrorMode (uMode=0x1) returned 0x0 [0125.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6110e52dcc41b003f9abb87af539d456402b7f80"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d7f9ac2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0125.907] SetErrorMode (uMode=0x0) returned 0x1 [0125.907] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6110e52dcc41b003f9abb87af539d456402b7f80"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6110E52DCC41B003F9ABB87AF539D456402B7F80.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6110e52dcc41b003f9abb87af539d456402b7f80.partially.cryptonar")) returned 1 [0125.909] SetErrorMode (uMode=0x1) returned 0x0 [0125.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6411fa6f2f74d405c46a9bd6767c418000b64a24"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.911] SetErrorMode (uMode=0x0) returned 0x1 [0125.911] GetFileType (hFile=0x230) returned 0x1 [0125.911] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.914] SetErrorMode (uMode=0x1) returned 0x0 [0125.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6411fa6f2f74d405c46a9bd6767c418000b64a24"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d7f9ac2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x116c)) returned 1 [0125.914] SetErrorMode (uMode=0x0) returned 0x1 [0125.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6411fa6f2f74d405c46a9bd6767c418000b64a24"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6411FA6F2F74D405C46A9BD6767C418000B64A24.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6411fa6f2f74d405c46a9bd6767c418000b64a24.partially.cryptonar")) returned 1 [0125.916] SetErrorMode (uMode=0x1) returned 0x0 [0125.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6422adccc2aa6961de5ffc515106f8b2d0d2d3e7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.918] SetErrorMode (uMode=0x0) returned 0x1 [0125.918] GetFileType (hFile=0x230) returned 0x1 [0125.918] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0125.935] SetErrorMode (uMode=0x1) returned 0x0 [0125.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6422adccc2aa6961de5ffc515106f8b2d0d2d3e7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881dce94, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881dce94, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d84601c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0125.935] SetErrorMode (uMode=0x0) returned 0x1 [0125.935] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6422adccc2aa6961de5ffc515106f8b2d0d2d3e7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6422ADCCC2AA6961DE5FFC515106F8B2D0D2D3E7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6422adccc2aa6961de5ffc515106f8b2d0d2d3e7.partially.cryptonar")) returned 1 [0125.937] SetErrorMode (uMode=0x1) returned 0x0 [0125.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\650a3159bca4987dd5b1950095087afc89edfbf4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0125.938] SetErrorMode (uMode=0x0) returned 0x1 [0125.938] GetFileType (hFile=0x230) returned 0x1 [0125.938] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.005] SetErrorMode (uMode=0x1) returned 0x0 [0126.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\650a3159bca4987dd5b1950095087afc89edfbf4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0d6df4a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd0d6df4a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d8df588, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x25c94)) returned 1 [0126.007] SetErrorMode (uMode=0x0) returned 0x1 [0126.007] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\650a3159bca4987dd5b1950095087afc89edfbf4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\650A3159BCA4987DD5B1950095087AFC89EDFBF4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\650a3159bca4987dd5b1950095087afc89edfbf4.partially.cryptonar")) returned 1 [0126.009] SetErrorMode (uMode=0x1) returned 0x0 [0126.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\656916b9b7899d4b69d34e1dd3bbd389f436f8f5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.010] SetErrorMode (uMode=0x0) returned 0x1 [0126.011] GetFileType (hFile=0x230) returned 0x1 [0126.011] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.022] SetErrorMode (uMode=0x1) returned 0x0 [0126.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\656916b9b7899d4b69d34e1dd3bbd389f436f8f5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53279de, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc53279de, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4d904b92, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1dc3)) returned 1 [0126.022] SetErrorMode (uMode=0x0) returned 0x1 [0126.022] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\656916b9b7899d4b69d34e1dd3bbd389f436f8f5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\656916B9B7899D4B69D34E1DD3BBD389F436F8F5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\656916b9b7899d4b69d34e1dd3bbd389f436f8f5.partially.cryptonar")) returned 1 [0126.024] SetErrorMode (uMode=0x1) returned 0x0 [0126.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6628e2aac6ff3b0be44d2610110acaf9071f1c8d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.025] SetErrorMode (uMode=0x0) returned 0x1 [0126.025] GetFileType (hFile=0x230) returned 0x1 [0126.025] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.043] SetErrorMode (uMode=0x1) returned 0x0 [0126.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6628e2aac6ff3b0be44d2610110acaf9071f1c8d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d951137, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0126.044] SetErrorMode (uMode=0x0) returned 0x1 [0126.044] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6628e2aac6ff3b0be44d2610110acaf9071f1c8d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6628E2AAC6FF3B0BE44D2610110ACAF9071F1C8D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6628e2aac6ff3b0be44d2610110acaf9071f1c8d.partially.cryptonar")) returned 1 [0126.045] SetErrorMode (uMode=0x1) returned 0x0 [0126.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66913f89f6e2c2fade791b6b6280e27520671b4c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.046] SetErrorMode (uMode=0x0) returned 0x1 [0126.046] GetFileType (hFile=0x230) returned 0x1 [0126.047] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.060] SetErrorMode (uMode=0x1) returned 0x0 [0126.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66913f89f6e2c2fade791b6b6280e27520671b4c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82951ced, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82951ced, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d97b7fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc5f)) returned 1 [0126.061] SetErrorMode (uMode=0x0) returned 0x1 [0126.061] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66913f89f6e2c2fade791b6b6280e27520671b4c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66913F89F6E2C2FADE791B6B6280E27520671B4C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66913f89f6e2c2fade791b6b6280e27520671b4c.partially.cryptonar")) returned 1 [0126.062] SetErrorMode (uMode=0x1) returned 0x0 [0126.062] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66b64249060dcbd0e7a35e24f8305d7fc258e22f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.064] SetErrorMode (uMode=0x0) returned 0x1 [0126.064] GetFileType (hFile=0x230) returned 0x1 [0126.064] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.066] SetErrorMode (uMode=0x1) returned 0x0 [0126.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66b64249060dcbd0e7a35e24f8305d7fc258e22f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd091baef, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd091baef, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d97b7fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x914d)) returned 1 [0126.066] SetErrorMode (uMode=0x0) returned 0x1 [0126.066] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66b64249060dcbd0e7a35e24f8305d7fc258e22f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66B64249060DCBD0E7A35E24F8305D7FC258E22F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66b64249060dcbd0e7a35e24f8305d7fc258e22f.partially.cryptonar")) returned 1 [0126.068] SetErrorMode (uMode=0x1) returned 0x0 [0126.068] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66ea61d5036d6a8a2ddd0634666ef265bf3c33c3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.069] SetErrorMode (uMode=0x0) returned 0x1 [0126.069] GetFileType (hFile=0x230) returned 0x1 [0126.069] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.091] SetErrorMode (uMode=0x1) returned 0x0 [0126.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66ea61d5036d6a8a2ddd0634666ef265bf3c33c3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02671ca, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd02671ca, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4d9c37b0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0126.091] SetErrorMode (uMode=0x0) returned 0x1 [0126.091] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66ea61d5036d6a8a2ddd0634666ef265bf3c33c3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\66EA61D5036D6A8A2DDD0634666EF265BF3C33C3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\66ea61d5036d6a8a2ddd0634666ef265bf3c33c3.partially.cryptonar")) returned 1 [0126.093] SetErrorMode (uMode=0x1) returned 0x0 [0126.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6730e7d38947125cf79caeb391a7c2548f883dd9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.094] SetErrorMode (uMode=0x0) returned 0x1 [0126.094] GetFileType (hFile=0x230) returned 0x1 [0126.094] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.110] SetErrorMode (uMode=0x1) returned 0x0 [0126.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6730e7d38947125cf79caeb391a7c2548f883dd9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4d9ee8f6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0126.110] SetErrorMode (uMode=0x0) returned 0x1 [0126.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6730e7d38947125cf79caeb391a7c2548f883dd9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6730E7D38947125CF79CAEB391A7C2548F883DD9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6730e7d38947125cf79caeb391a7c2548f883dd9.partially.cryptonar")) returned 1 [0126.112] SetErrorMode (uMode=0x1) returned 0x0 [0126.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\676fbe82e89585da0da55a36c5fe66d6c832fac6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.113] SetErrorMode (uMode=0x0) returned 0x1 [0126.113] GetFileType (hFile=0x230) returned 0x1 [0126.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.143] SetErrorMode (uMode=0x1) returned 0x0 [0126.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\676fbe82e89585da0da55a36c5fe66d6c832fac6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf44f0039, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf44f0039, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4da35e9d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0126.143] SetErrorMode (uMode=0x0) returned 0x1 [0126.143] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\676fbe82e89585da0da55a36c5fe66d6c832fac6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\676FBE82E89585DA0DA55A36C5FE66D6C832FAC6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\676fbe82e89585da0da55a36c5fe66d6c832fac6.partially.cryptonar")) returned 1 [0126.145] SetErrorMode (uMode=0x1) returned 0x0 [0126.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\681e7166db1f0b0a148fe6d0903d513ede8f745d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.146] SetErrorMode (uMode=0x0) returned 0x1 [0126.146] GetFileType (hFile=0x230) returned 0x1 [0126.146] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.147] SetErrorMode (uMode=0x1) returned 0x0 [0126.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\681e7166db1f0b0a148fe6d0903d513ede8f745d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881569eb, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881569eb, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4da35e9d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0126.147] SetErrorMode (uMode=0x0) returned 0x1 [0126.147] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\681e7166db1f0b0a148fe6d0903d513ede8f745d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\681E7166DB1F0B0A148FE6D0903D513EDE8F745D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\681e7166db1f0b0a148fe6d0903d513ede8f745d.partially.cryptonar")) returned 1 [0126.149] SetErrorMode (uMode=0x1) returned 0x0 [0126.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68426ae4792a86816cf3b07d8d4754c947ea08b5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.149] SetErrorMode (uMode=0x0) returned 0x1 [0126.150] GetFileType (hFile=0x230) returned 0x1 [0126.150] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.168] SetErrorMode (uMode=0x1) returned 0x0 [0126.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68426ae4792a86816cf3b07d8d4754c947ea08b5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4da82381, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0126.169] SetErrorMode (uMode=0x0) returned 0x1 [0126.169] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68426ae4792a86816cf3b07d8d4754c947ea08b5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68426AE4792A86816CF3B07D8D4754C947EA08B5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68426ae4792a86816cf3b07d8d4754c947ea08b5.partially.cryptonar")) returned 1 [0126.170] SetErrorMode (uMode=0x1) returned 0x0 [0126.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\685efccd3945b7e4d6ed3a85ee423a4a95942846"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.171] SetErrorMode (uMode=0x0) returned 0x1 [0126.171] GetFileType (hFile=0x230) returned 0x1 [0126.171] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.176] SetErrorMode (uMode=0x1) returned 0x0 [0126.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\685efccd3945b7e4d6ed3a85ee423a4a95942846"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863d4722, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863d4722, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4da82381, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdb4f)) returned 1 [0126.177] SetErrorMode (uMode=0x0) returned 0x1 [0126.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\685efccd3945b7e4d6ed3a85ee423a4a95942846"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\685EFCCD3945B7E4D6ED3A85EE423A4A95942846.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\685efccd3945b7e4d6ed3a85ee423a4a95942846.partially.cryptonar")) returned 1 [0126.178] SetErrorMode (uMode=0x1) returned 0x0 [0126.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\687958f5e9a2beea04a3614dd23fc37871418806"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.179] SetErrorMode (uMode=0x0) returned 0x1 [0126.179] GetFileType (hFile=0x230) returned 0x1 [0126.179] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.190] SetErrorMode (uMode=0x1) returned 0x0 [0126.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\687958f5e9a2beea04a3614dd23fc37871418806"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f16669d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f16669d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4daa8915, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2dd9)) returned 1 [0126.190] SetErrorMode (uMode=0x0) returned 0x1 [0126.190] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\687958f5e9a2beea04a3614dd23fc37871418806"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\687958F5E9A2BEEA04A3614DD23FC37871418806.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\687958f5e9a2beea04a3614dd23fc37871418806.partially.cryptonar")) returned 1 [0126.192] SetErrorMode (uMode=0x1) returned 0x0 [0126.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68f3916ad8f0d06279a8b2b1822559f18a0015c1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.193] SetErrorMode (uMode=0x0) returned 0x1 [0126.194] GetFileType (hFile=0x230) returned 0x1 [0126.194] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.211] SetErrorMode (uMode=0x1) returned 0x0 [0126.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68f3916ad8f0d06279a8b2b1822559f18a0015c1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8635098f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8635098f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4dace73d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1120)) returned 1 [0126.211] SetErrorMode (uMode=0x0) returned 0x1 [0126.211] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68f3916ad8f0d06279a8b2b1822559f18a0015c1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\68F3916AD8F0D06279A8B2B1822559F18A0015C1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\68f3916ad8f0d06279a8b2b1822559f18a0015c1.partially.cryptonar")) returned 1 [0126.212] SetErrorMode (uMode=0x1) returned 0x0 [0126.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\698ac159a6bcba0d13fe6f10f1a38e498f826f33"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.213] SetErrorMode (uMode=0x0) returned 0x1 [0126.213] GetFileType (hFile=0x230) returned 0x1 [0126.213] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.240] SetErrorMode (uMode=0x1) returned 0x0 [0126.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\698ac159a6bcba0d13fe6f10f1a38e498f826f33"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3735a2, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f3735a2, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4db1adbb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc294)) returned 1 [0126.241] SetErrorMode (uMode=0x0) returned 0x1 [0126.241] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\698ac159a6bcba0d13fe6f10f1a38e498f826f33"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\698AC159A6BCBA0D13FE6F10F1A38E498F826F33.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\698ac159a6bcba0d13fe6f10f1a38e498f826f33.partially.cryptonar")) returned 1 [0126.242] SetErrorMode (uMode=0x1) returned 0x0 [0126.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6b59d88f10856abb980993d7332f49ab71bd33b8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.244] SetErrorMode (uMode=0x0) returned 0x1 [0126.244] GetFileType (hFile=0x230) returned 0x1 [0126.244] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.250] SetErrorMode (uMode=0x1) returned 0x0 [0126.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6b59d88f10856abb980993d7332f49ab71bd33b8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45586c19, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45586c19, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4db40dd8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x155c)) returned 1 [0126.250] SetErrorMode (uMode=0x0) returned 0x1 [0126.251] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6b59d88f10856abb980993d7332f49ab71bd33b8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6B59D88F10856ABB980993D7332F49AB71BD33B8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6b59d88f10856abb980993d7332f49ab71bd33b8.partially.cryptonar")) returned 1 [0126.252] SetErrorMode (uMode=0x1) returned 0x0 [0126.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6bfe0eb337f328928e30dd51c1084b7fd4937d99"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.253] SetErrorMode (uMode=0x0) returned 0x1 [0126.254] GetFileType (hFile=0x230) returned 0x1 [0126.254] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.272] SetErrorMode (uMode=0x1) returned 0x0 [0126.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6bfe0eb337f328928e30dd51c1084b7fd4937d99"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4db6c5ea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe16)) returned 1 [0126.272] SetErrorMode (uMode=0x0) returned 0x1 [0126.272] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6bfe0eb337f328928e30dd51c1084b7fd4937d99"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6BFE0EB337F328928E30DD51C1084B7FD4937D99.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6bfe0eb337f328928e30dd51c1084b7fd4937d99.partially.cryptonar")) returned 1 [0126.274] SetErrorMode (uMode=0x1) returned 0x0 [0126.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6d2728c8959e4b632bdba3b15f34fc9075936ca6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.275] SetErrorMode (uMode=0x0) returned 0x1 [0126.275] GetFileType (hFile=0x230) returned 0x1 [0126.275] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.282] SetErrorMode (uMode=0x1) returned 0x0 [0126.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6d2728c8959e4b632bdba3b15f34fc9075936ca6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861a5542, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x861a5542, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4db8d32c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf7f)) returned 1 [0126.282] SetErrorMode (uMode=0x0) returned 0x1 [0126.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6d2728c8959e4b632bdba3b15f34fc9075936ca6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6D2728C8959E4B632BDBA3B15F34FC9075936CA6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6d2728c8959e4b632bdba3b15f34fc9075936ca6.partially.cryptonar")) returned 1 [0126.283] SetErrorMode (uMode=0x1) returned 0x0 [0126.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6e737977754f860fe206e1bda7e561c5efcf040b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.285] SetErrorMode (uMode=0x0) returned 0x1 [0126.285] GetFileType (hFile=0x230) returned 0x1 [0126.285] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.301] SetErrorMode (uMode=0x1) returned 0x0 [0126.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6e737977754f860fe206e1bda7e561c5efcf040b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4dbb3722, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe27)) returned 1 [0126.301] SetErrorMode (uMode=0x0) returned 0x1 [0126.301] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6e737977754f860fe206e1bda7e561c5efcf040b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6E737977754F860FE206E1BDA7E561C5EFCF040B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6e737977754f860fe206e1bda7e561c5efcf040b.partially.cryptonar")) returned 1 [0126.303] SetErrorMode (uMode=0x1) returned 0x0 [0126.303] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6ecde68737a8ab107ad15bf26496698293735a7f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.304] SetErrorMode (uMode=0x0) returned 0x1 [0126.304] GetFileType (hFile=0x230) returned 0x1 [0126.304] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.306] SetErrorMode (uMode=0x1) returned 0x0 [0126.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6ecde68737a8ab107ad15bf26496698293735a7f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4dbb3722, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed6)) returned 1 [0126.306] SetErrorMode (uMode=0x0) returned 0x1 [0126.306] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6ecde68737a8ab107ad15bf26496698293735a7f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6ECDE68737A8AB107AD15BF26496698293735A7F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6ecde68737a8ab107ad15bf26496698293735a7f.partially.cryptonar")) returned 1 [0126.308] SetErrorMode (uMode=0x1) returned 0x0 [0126.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6eefc19174d5eb9f9d4298caa1169279c37b51a6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.309] SetErrorMode (uMode=0x0) returned 0x1 [0126.309] GetFileType (hFile=0x230) returned 0x1 [0126.309] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.324] SetErrorMode (uMode=0x1) returned 0x0 [0126.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6eefc19174d5eb9f9d4298caa1169279c37b51a6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf32ee5af, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf32ee5af, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4dbff941, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf8c)) returned 1 [0126.324] SetErrorMode (uMode=0x0) returned 0x1 [0126.325] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6eefc19174d5eb9f9d4298caa1169279c37b51a6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6EEFC19174D5EB9F9D4298CAA1169279C37B51A6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6eefc19174d5eb9f9d4298caa1169279c37b51a6.partially.cryptonar")) returned 1 [0126.326] SetErrorMode (uMode=0x1) returned 0x0 [0126.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f0d7b7cc1d4d00c50aedbc1b3d0fbad11be073f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.327] SetErrorMode (uMode=0x0) returned 0x1 [0126.327] GetFileType (hFile=0x230) returned 0x1 [0126.327] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.341] SetErrorMode (uMode=0x1) returned 0x0 [0126.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f0d7b7cc1d4d00c50aedbc1b3d0fbad11be073f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f74b4d0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f74b4d0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4dc25d3b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0126.341] SetErrorMode (uMode=0x0) returned 0x1 [0126.341] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f0d7b7cc1d4d00c50aedbc1b3d0fbad11be073f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F0D7B7CC1D4D00C50AEDBC1B3D0FBAD11BE073F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f0d7b7cc1d4d00c50aedbc1b3d0fbad11be073f.partially.cryptonar")) returned 1 [0126.345] SetErrorMode (uMode=0x1) returned 0x0 [0126.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f1fc0b439cd82ece281a60f7927eb116f5e5108"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.347] SetErrorMode (uMode=0x0) returned 0x1 [0126.347] GetFileType (hFile=0x230) returned 0x1 [0126.347] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.375] SetErrorMode (uMode=0x1) returned 0x0 [0126.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f1fc0b439cd82ece281a60f7927eb116f5e5108"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4038f245, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x7539aca2, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4dc795cc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x134c)) returned 1 [0126.375] SetErrorMode (uMode=0x0) returned 0x1 [0126.375] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f1fc0b439cd82ece281a60f7927eb116f5e5108"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F1FC0B439CD82ECE281A60F7927EB116F5E5108.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f1fc0b439cd82ece281a60f7927eb116f5e5108.partially.cryptonar")) returned 1 [0126.377] SetErrorMode (uMode=0x1) returned 0x0 [0126.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f26192e14c4c0b13b7860d0a345a5733c7c06ee"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.378] SetErrorMode (uMode=0x0) returned 0x1 [0126.378] GetFileType (hFile=0x230) returned 0x1 [0126.378] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.398] SetErrorMode (uMode=0x1) returned 0x0 [0126.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f26192e14c4c0b13b7860d0a345a5733c7c06ee"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9a57ab, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfa9a57ab, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4dc98407, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0126.398] SetErrorMode (uMode=0x0) returned 0x1 [0126.398] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f26192e14c4c0b13b7860d0a345a5733c7c06ee"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F26192E14C4C0B13B7860D0A345A5733C7C06EE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f26192e14c4c0b13b7860d0a345a5733c7c06ee.partially.cryptonar")) returned 1 [0126.400] SetErrorMode (uMode=0x1) returned 0x0 [0126.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f392e73aca1b277c637cbb45733e07ead74cbce"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.402] SetErrorMode (uMode=0x0) returned 0x1 [0126.402] GetFileType (hFile=0x230) returned 0x1 [0126.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.416] SetErrorMode (uMode=0x1) returned 0x0 [0126.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f392e73aca1b277c637cbb45733e07ead74cbce"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc30492b0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc30492b0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4dcbf4f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa07)) returned 1 [0126.417] SetErrorMode (uMode=0x0) returned 0x1 [0126.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f392e73aca1b277c637cbb45733e07ead74cbce"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F392E73ACA1B277C637CBB45733E07EAD74CBCE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f392e73aca1b277c637cbb45733e07ead74cbce.partially.cryptonar")) returned 1 [0126.419] SetErrorMode (uMode=0x1) returned 0x0 [0126.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f39e22506ae2a3dadd87ef5d9ef306b0235583a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.421] SetErrorMode (uMode=0x0) returned 0x1 [0126.421] GetFileType (hFile=0x230) returned 0x1 [0126.421] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.422] SetErrorMode (uMode=0x1) returned 0x0 [0126.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f39e22506ae2a3dadd87ef5d9ef306b0235583a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f52cd6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42f52cd6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4dce47f6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0126.423] SetErrorMode (uMode=0x0) returned 0x1 [0126.423] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f39e22506ae2a3dadd87ef5d9ef306b0235583a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F39E22506AE2A3DADD87EF5D9EF306B0235583A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f39e22506ae2a3dadd87ef5d9ef306b0235583a.partially.cryptonar")) returned 1 [0126.424] SetErrorMode (uMode=0x1) returned 0x0 [0126.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4e0de1d5ce86753b3cd75d8f8effc8458578f5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.425] SetErrorMode (uMode=0x0) returned 0x1 [0126.425] GetFileType (hFile=0x230) returned 0x1 [0126.425] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.439] SetErrorMode (uMode=0x1) returned 0x0 [0126.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4e0de1d5ce86753b3cd75d8f8effc8458578f5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4dd0aa7c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1133)) returned 1 [0126.439] SetErrorMode (uMode=0x0) returned 0x1 [0126.439] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4e0de1d5ce86753b3cd75d8f8effc8458578f5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4E0DE1D5CE86753B3CD75D8F8EFFC8458578F5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4e0de1d5ce86753b3cd75d8f8effc8458578f5.partially.cryptonar")) returned 1 [0126.441] SetErrorMode (uMode=0x1) returned 0x0 [0126.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4fa43590a63eb51f16a747b6869fea664d492d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.442] SetErrorMode (uMode=0x0) returned 0x1 [0126.442] GetFileType (hFile=0x230) returned 0x1 [0126.442] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.482] SetErrorMode (uMode=0x1) returned 0x0 [0126.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4fa43590a63eb51f16a747b6869fea664d492d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459ff2ba, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459ff2ba, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4dd7d2ed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5ca5)) returned 1 [0126.482] SetErrorMode (uMode=0x0) returned 0x1 [0126.482] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4fa43590a63eb51f16a747b6869fea664d492d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F4FA43590A63EB51F16A747B6869FEA664D492D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f4fa43590a63eb51f16a747b6869fea664d492d.partially.cryptonar")) returned 1 [0126.484] SetErrorMode (uMode=0x1) returned 0x0 [0126.484] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f8fb4d82c35910ecf7ab512d58576d942963ba4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.486] SetErrorMode (uMode=0x0) returned 0x1 [0126.486] GetFileType (hFile=0x230) returned 0x1 [0126.486] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.506] SetErrorMode (uMode=0x1) returned 0x0 [0126.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f8fb4d82c35910ecf7ab512d58576d942963ba4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858c91fa, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x858c91fa, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4dda6f60, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1104)) returned 1 [0126.506] SetErrorMode (uMode=0x0) returned 0x1 [0126.506] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f8fb4d82c35910ecf7ab512d58576d942963ba4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6F8FB4D82C35910ECF7AB512D58576D942963BA4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6f8fb4d82c35910ecf7ab512d58576d942963ba4.partially.cryptonar")) returned 1 [0126.508] SetErrorMode (uMode=0x1) returned 0x0 [0126.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6fab625af8a09eb1f9ad0ca5c0405bdb6afc978e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.510] SetErrorMode (uMode=0x0) returned 0x1 [0126.510] GetFileType (hFile=0x230) returned 0x1 [0126.510] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.530] SetErrorMode (uMode=0x1) returned 0x0 [0126.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6fab625af8a09eb1f9ad0ca5c0405bdb6afc978e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ddefb2e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10dc)) returned 1 [0126.531] SetErrorMode (uMode=0x0) returned 0x1 [0126.531] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6fab625af8a09eb1f9ad0ca5c0405bdb6afc978e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\6FAB625AF8A09EB1F9AD0CA5C0405BDB6AFC978E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\6fab625af8a09eb1f9ad0ca5c0405bdb6afc978e.partially.cryptonar")) returned 1 [0126.533] SetErrorMode (uMode=0x1) returned 0x0 [0126.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70878ce2eaadc1e41bae291fd13b352563df6022"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.534] SetErrorMode (uMode=0x0) returned 0x1 [0126.534] GetFileType (hFile=0x230) returned 0x1 [0126.534] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.550] SetErrorMode (uMode=0x1) returned 0x0 [0126.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70878ce2eaadc1e41bae291fd13b352563df6022"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4640f42, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4640f42, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4de187cd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20e7)) returned 1 [0126.550] SetErrorMode (uMode=0x0) returned 0x1 [0126.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70878ce2eaadc1e41bae291fd13b352563df6022"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70878CE2EAADC1E41BAE291FD13B352563DF6022.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70878ce2eaadc1e41bae291fd13b352563df6022.partially.cryptonar")) returned 1 [0126.552] SetErrorMode (uMode=0x1) returned 0x0 [0126.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ae3be112fc73f5e433f373ec3916c36ce729fc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.553] SetErrorMode (uMode=0x0) returned 0x1 [0126.553] GetFileType (hFile=0x230) returned 0x1 [0126.553] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.578] SetErrorMode (uMode=0x1) returned 0x0 [0126.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ae3be112fc73f5e433f373ec3916c36ce729fc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfbb5d6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddfbb5d6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4de620c1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0126.579] SetErrorMode (uMode=0x0) returned 0x1 [0126.579] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ae3be112fc73f5e433f373ec3916c36ce729fc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70AE3BE112FC73F5E433F373EC3916C36CE729FC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ae3be112fc73f5e433f373ec3916c36ce729fc.partially.cryptonar")) returned 1 [0126.580] SetErrorMode (uMode=0x1) returned 0x0 [0126.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70b3e6fd6779eebf5e87eafea269ecdbd889a0bb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.581] SetErrorMode (uMode=0x0) returned 0x1 [0126.582] GetFileType (hFile=0x230) returned 0x1 [0126.582] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.605] SetErrorMode (uMode=0x1) returned 0x0 [0126.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70b3e6fd6779eebf5e87eafea269ecdbd889a0bb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a537e3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a537e3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4deae58e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0126.606] SetErrorMode (uMode=0x0) returned 0x1 [0126.606] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70b3e6fd6779eebf5e87eafea269ecdbd889a0bb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70B3E6FD6779EEBF5E87EAFEA269ECDBD889A0BB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70b3e6fd6779eebf5e87eafea269ecdbd889a0bb.partially.cryptonar")) returned 1 [0126.607] SetErrorMode (uMode=0x1) returned 0x0 [0126.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ed86b2851af1f558cf9e13c146068b2300bd5f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.609] SetErrorMode (uMode=0x0) returned 0x1 [0126.609] GetFileType (hFile=0x230) returned 0x1 [0126.609] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.619] SetErrorMode (uMode=0x1) returned 0x0 [0126.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ed86b2851af1f558cf9e13c146068b2300bd5f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6b3ea9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f6b3ea9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4deae58e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0126.620] SetErrorMode (uMode=0x0) returned 0x1 [0126.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ed86b2851af1f558cf9e13c146068b2300bd5f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\70ED86B2851AF1F558CF9E13C146068B2300BD5F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\70ed86b2851af1f558cf9e13c146068b2300bd5f.partially.cryptonar")) returned 1 [0126.621] SetErrorMode (uMode=0x1) returned 0x0 [0126.622] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\714ab8f4df28029afc0681556f48d37351016356"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.623] SetErrorMode (uMode=0x0) returned 0x1 [0126.623] GetFileType (hFile=0x230) returned 0x1 [0126.623] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.634] SetErrorMode (uMode=0x1) returned 0x0 [0126.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\714ab8f4df28029afc0681556f48d37351016356"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31a07d8, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc31a07d8, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ded6ec6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa3c)) returned 1 [0126.634] SetErrorMode (uMode=0x0) returned 0x1 [0126.635] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\714ab8f4df28029afc0681556f48d37351016356"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\714AB8F4DF28029AFC0681556F48D37351016356.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\714ab8f4df28029afc0681556f48d37351016356.partially.cryptonar")) returned 1 [0126.636] SetErrorMode (uMode=0x1) returned 0x0 [0126.636] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\71aedca900a67fa2fab608a99a2e36584bd343fb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.637] SetErrorMode (uMode=0x0) returned 0x1 [0126.638] GetFileType (hFile=0x230) returned 0x1 [0126.638] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.675] SetErrorMode (uMode=0x1) returned 0x0 [0126.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\71aedca900a67fa2fab608a99a2e36584bd343fb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2a06fdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2a06fdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4df46d7e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15df4)) returned 1 [0126.675] SetErrorMode (uMode=0x0) returned 0x1 [0126.675] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\71aedca900a67fa2fab608a99a2e36584bd343fb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\71AEDCA900A67FA2FAB608A99A2E36584BD343FB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\71aedca900a67fa2fab608a99a2e36584bd343fb.partially.cryptonar")) returned 1 [0126.677] SetErrorMode (uMode=0x1) returned 0x0 [0126.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72383665fb6b3db66261c12404f5abd0e4b1fade"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.679] SetErrorMode (uMode=0x0) returned 0x1 [0126.679] GetFileType (hFile=0x230) returned 0x1 [0126.679] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.681] SetErrorMode (uMode=0x1) returned 0x0 [0126.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72383665fb6b3db66261c12404f5abd0e4b1fade"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e78a39, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3e78a39, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4df46d7e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcd8c)) returned 1 [0126.681] SetErrorMode (uMode=0x0) returned 0x1 [0126.681] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72383665fb6b3db66261c12404f5abd0e4b1fade"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72383665FB6B3DB66261C12404F5ABD0E4B1FADE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72383665fb6b3db66261c12404f5abd0e4b1fade.partially.cryptonar")) returned 1 [0126.683] SetErrorMode (uMode=0x1) returned 0x0 [0126.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72b792700ca27d878d3f3bf0c712462ebac296e1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.685] SetErrorMode (uMode=0x0) returned 0x1 [0126.685] GetFileType (hFile=0x230) returned 0x1 [0126.685] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.706] SetErrorMode (uMode=0x1) returned 0x0 [0126.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72b792700ca27d878d3f3bf0c712462ebac296e1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e96814, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e96814, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4df933b7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xab57)) returned 1 [0126.706] SetErrorMode (uMode=0x0) returned 0x1 [0126.706] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72b792700ca27d878d3f3bf0c712462ebac296e1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\72B792700CA27D878D3F3BF0C712462EBAC296E1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\72b792700ca27d878d3f3bf0c712462ebac296e1.partially.cryptonar")) returned 1 [0126.708] SetErrorMode (uMode=0x1) returned 0x0 [0126.709] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7394b7fe1c950657969e92e15fda4293af92f94e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.710] SetErrorMode (uMode=0x0) returned 0x1 [0126.710] GetFileType (hFile=0x230) returned 0x1 [0126.710] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.728] SetErrorMode (uMode=0x1) returned 0x0 [0126.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7394b7fe1c950657969e92e15fda4293af92f94e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d5d122, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85d5d122, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4dfb9555, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42da)) returned 1 [0126.729] SetErrorMode (uMode=0x0) returned 0x1 [0126.729] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7394b7fe1c950657969e92e15fda4293af92f94e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7394B7FE1C950657969E92E15FDA4293AF92F94E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7394b7fe1c950657969e92e15fda4293af92f94e.partially.cryptonar")) returned 1 [0126.730] SetErrorMode (uMode=0x1) returned 0x0 [0126.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\73a976e5255cdab8b19acbfc7ebbb3682467e56a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.732] SetErrorMode (uMode=0x0) returned 0x1 [0126.732] GetFileType (hFile=0x230) returned 0x1 [0126.732] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0126.752] SetErrorMode (uMode=0x1) returned 0x0 [0126.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\73a976e5255cdab8b19acbfc7ebbb3682467e56a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e4864a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e4864a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4e00b270, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0126.752] SetErrorMode (uMode=0x0) returned 0x1 [0126.752] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\73a976e5255cdab8b19acbfc7ebbb3682467e56a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\73A976E5255CDAB8B19ACBFC7EBBB3682467E56A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\73a976e5255cdab8b19acbfc7ebbb3682467e56a.partially.cryptonar")) returned 1 [0126.754] SetErrorMode (uMode=0x1) returned 0x0 [0126.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\745f42a62f3552debb8a0452590dc0edcb0b05f3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0126.755] SetErrorMode (uMode=0x0) returned 0x1 [0126.755] GetFileType (hFile=0x230) returned 0x1 [0126.755] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.275] SetErrorMode (uMode=0x1) returned 0x0 [0127.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\745f42a62f3552debb8a0452590dc0edcb0b05f3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a0ec87, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86a0ec87, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4e4f0621, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c49)) returned 1 [0127.281] SetErrorMode (uMode=0x0) returned 0x1 [0127.333] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\745f42a62f3552debb8a0452590dc0edcb0b05f3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\745F42A62F3552DEBB8A0452590DC0EDCB0B05F3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\745f42a62f3552debb8a0452590dc0edcb0b05f3.partially.cryptonar")) returned 1 [0127.363] SetErrorMode (uMode=0x1) returned 0x0 [0127.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\756a937558919df71fcb88d7b4da15352d72dc2f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.378] SetErrorMode (uMode=0x0) returned 0x1 [0127.378] GetFileType (hFile=0x230) returned 0x1 [0127.378] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.423] SetErrorMode (uMode=0x1) returned 0x0 [0127.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\756a937558919df71fcb88d7b4da15352d72dc2f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4e66ddfc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7e1)) returned 1 [0127.423] SetErrorMode (uMode=0x0) returned 0x1 [0127.424] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\756a937558919df71fcb88d7b4da15352d72dc2f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\756A937558919DF71FCB88D7B4DA15352D72DC2F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\756a937558919df71fcb88d7b4da15352d72dc2f.partially.cryptonar")) returned 1 [0127.425] SetErrorMode (uMode=0x1) returned 0x0 [0127.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7604b9de587d6f4084bf95b41c1f4b2ec876892c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.425] SetErrorMode (uMode=0x0) returned 0x1 [0127.425] GetFileType (hFile=0x230) returned 0x1 [0127.425] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.460] SetErrorMode (uMode=0x1) returned 0x0 [0127.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7604b9de587d6f4084bf95b41c1f4b2ec876892c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4844017a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4844017a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4e6ba413, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c24)) returned 1 [0127.461] SetErrorMode (uMode=0x0) returned 0x1 [0127.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7604b9de587d6f4084bf95b41c1f4b2ec876892c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7604B9DE587D6F4084BF95B41C1F4B2EC876892C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7604b9de587d6f4084bf95b41c1f4b2ec876892c.partially.cryptonar")) returned 1 [0127.462] SetErrorMode (uMode=0x1) returned 0x0 [0127.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\767a9961fdb5ac27d3d7ce17d91203113c888ee1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.463] SetErrorMode (uMode=0x0) returned 0x1 [0127.463] GetFileType (hFile=0x230) returned 0x1 [0127.463] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.476] SetErrorMode (uMode=0x1) returned 0x0 [0127.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\767a9961fdb5ac27d3d7ce17d91203113c888ee1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4e6e04d7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0127.476] SetErrorMode (uMode=0x0) returned 0x1 [0127.477] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\767a9961fdb5ac27d3d7ce17d91203113c888ee1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\767A9961FDB5AC27D3D7CE17D91203113C888EE1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\767a9961fdb5ac27d3d7ce17d91203113c888ee1.partially.cryptonar")) returned 1 [0127.478] SetErrorMode (uMode=0x1) returned 0x0 [0127.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\768c8d1ae760f166bfd97a67c4a578795d3d56ff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.479] SetErrorMode (uMode=0x0) returned 0x1 [0127.479] GetFileType (hFile=0x230) returned 0x1 [0127.479] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.537] SetErrorMode (uMode=0x1) returned 0x0 [0127.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\768c8d1ae760f166bfd97a67c4a578795d3d56ff"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45776aae, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45776aae, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4e77f1e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc76f)) returned 1 [0127.537] SetErrorMode (uMode=0x0) returned 0x1 [0127.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\768c8d1ae760f166bfd97a67c4a578795d3d56ff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\768C8D1AE760F166BFD97A67C4A578795D3D56FF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\768c8d1ae760f166bfd97a67c4a578795d3d56ff.partially.cryptonar")) returned 1 [0127.538] SetErrorMode (uMode=0x1) returned 0x0 [0127.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76aae75069d3f560b973fb3c30f2bdbfa042bfff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.539] SetErrorMode (uMode=0x0) returned 0x1 [0127.539] GetFileType (hFile=0x230) returned 0x1 [0127.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.541] SetErrorMode (uMode=0x1) returned 0x0 [0127.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76aae75069d3f560b973fb3c30f2bdbfa042bfff"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4e77f1e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x539)) returned 1 [0127.541] SetErrorMode (uMode=0x0) returned 0x1 [0127.541] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76aae75069d3f560b973fb3c30f2bdbfa042bfff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76AAE75069D3F560B973FB3C30F2BDBFA042BFFF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76aae75069d3f560b973fb3c30f2bdbfa042bfff.partially.cryptonar")) returned 1 [0127.543] SetErrorMode (uMode=0x1) returned 0x0 [0127.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ef1292f45b28008b0e37edaf898359bda69ef7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.543] SetErrorMode (uMode=0x0) returned 0x1 [0127.543] GetFileType (hFile=0x230) returned 0x1 [0127.543] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.545] SetErrorMode (uMode=0x1) returned 0x0 [0127.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ef1292f45b28008b0e37edaf898359bda69ef7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef2b14d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef2b14d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4e79fd21, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24e2)) returned 1 [0127.545] SetErrorMode (uMode=0x0) returned 0x1 [0127.545] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ef1292f45b28008b0e37edaf898359bda69ef7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76EF1292F45B28008B0E37EDAF898359BDA69EF7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ef1292f45b28008b0e37edaf898359bda69ef7.partially.cryptonar")) returned 1 [0127.546] SetErrorMode (uMode=0x1) returned 0x0 [0127.546] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ffaadfd6e911e3e7f09e99d9a7feb643a7794e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.547] SetErrorMode (uMode=0x0) returned 0x1 [0127.547] GetFileType (hFile=0x230) returned 0x1 [0127.547] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.576] SetErrorMode (uMode=0x1) returned 0x0 [0127.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ffaadfd6e911e3e7f09e99d9a7feb643a7794e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4e7eb64d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12a0)) returned 1 [0127.576] SetErrorMode (uMode=0x0) returned 0x1 [0127.576] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ffaadfd6e911e3e7f09e99d9a7feb643a7794e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\76FFAADFD6E911E3E7F09E99D9A7FEB643A7794E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\76ffaadfd6e911e3e7f09e99d9a7feb643a7794e.partially.cryptonar")) returned 1 [0127.578] SetErrorMode (uMode=0x1) returned 0x0 [0127.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7745b0aa62a2d610e6df708bd9e5017145e8592e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.579] SetErrorMode (uMode=0x0) returned 0x1 [0127.579] GetFileType (hFile=0x230) returned 0x1 [0127.579] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.598] SetErrorMode (uMode=0x1) returned 0x0 [0127.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7745b0aa62a2d610e6df708bd9e5017145e8592e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0753cf, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3d0753cf, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4e8118f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf6)) returned 1 [0127.598] SetErrorMode (uMode=0x0) returned 0x1 [0127.599] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7745b0aa62a2d610e6df708bd9e5017145e8592e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7745B0AA62A2D610E6DF708BD9E5017145E8592E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7745b0aa62a2d610e6df708bd9e5017145e8592e.partially.cryptonar")) returned 1 [0127.600] SetErrorMode (uMode=0x1) returned 0x0 [0127.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\77cef3a6676f7d9193ed09c07246a8dec5d24fe9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.601] SetErrorMode (uMode=0x0) returned 0x1 [0127.601] GetFileType (hFile=0x230) returned 0x1 [0127.601] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.620] SetErrorMode (uMode=0x1) returned 0x0 [0127.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\77cef3a6676f7d9193ed09c07246a8dec5d24fe9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8af193c0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8af193c0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4e837b47, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa81)) returned 1 [0127.620] SetErrorMode (uMode=0x0) returned 0x1 [0127.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\77cef3a6676f7d9193ed09c07246a8dec5d24fe9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\77CEF3A6676F7D9193ED09C07246A8DEC5D24FE9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\77cef3a6676f7d9193ed09c07246a8dec5d24fe9.partially.cryptonar")) returned 1 [0127.622] SetErrorMode (uMode=0x1) returned 0x0 [0127.622] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7807899bf5e94564afe48a5b5df11c0fdb47f065"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.623] SetErrorMode (uMode=0x0) returned 0x1 [0127.623] GetFileType (hFile=0x230) returned 0x1 [0127.623] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.668] SetErrorMode (uMode=0x1) returned 0x0 [0127.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7807899bf5e94564afe48a5b5df11c0fdb47f065"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4e8d03e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4a8)) returned 1 [0127.668] SetErrorMode (uMode=0x0) returned 0x1 [0127.668] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7807899bf5e94564afe48a5b5df11c0fdb47f065"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7807899BF5E94564AFE48A5B5DF11C0FDB47F065.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7807899bf5e94564afe48a5b5df11c0fdb47f065.partially.cryptonar")) returned 1 [0127.669] SetErrorMode (uMode=0x1) returned 0x0 [0127.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\781e33189fe64505ae85dafd54ed7730a4a55952"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.671] SetErrorMode (uMode=0x0) returned 0x1 [0127.671] GetFileType (hFile=0x230) returned 0x1 [0127.671] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.709] SetErrorMode (uMode=0x1) returned 0x0 [0127.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\781e33189fe64505ae85dafd54ed7730a4a55952"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x477bbbb4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x477bbbb4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4e91c8a4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43b2)) returned 1 [0127.710] SetErrorMode (uMode=0x0) returned 0x1 [0127.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\781e33189fe64505ae85dafd54ed7730a4a55952"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\781E33189FE64505AE85DAFD54ED7730A4A55952.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\781e33189fe64505ae85dafd54ed7730a4a55952.partially.cryptonar")) returned 1 [0127.711] SetErrorMode (uMode=0x1) returned 0x0 [0127.711] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\785445a5ff1777fd0ea02b65b10108b52e873145"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.713] SetErrorMode (uMode=0x0) returned 0x1 [0127.713] GetFileType (hFile=0x230) returned 0x1 [0127.713] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.745] SetErrorMode (uMode=0x1) returned 0x0 [0127.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\785445a5ff1777fd0ea02b65b10108b52e873145"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f86dd8f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f86dd8f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4e968e12, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe4f)) returned 1 [0127.745] SetErrorMode (uMode=0x0) returned 0x1 [0127.745] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\785445a5ff1777fd0ea02b65b10108b52e873145"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\785445A5FF1777FD0EA02B65B10108B52E873145.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\785445a5ff1777fd0ea02b65b10108b52e873145.partially.cryptonar")) returned 1 [0127.747] SetErrorMode (uMode=0x1) returned 0x0 [0127.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\788d679b0ef749bcc9e1d90d68cf10f4eac25366"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.747] SetErrorMode (uMode=0x0) returned 0x1 [0127.747] GetFileType (hFile=0x230) returned 0x1 [0127.747] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.816] SetErrorMode (uMode=0x1) returned 0x0 [0127.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\788d679b0ef749bcc9e1d90d68cf10f4eac25366"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a6afaa, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3a6afaa, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ea279f0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8dc)) returned 1 [0127.817] SetErrorMode (uMode=0x0) returned 0x1 [0127.817] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\788d679b0ef749bcc9e1d90d68cf10f4eac25366"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\788D679B0EF749BCC9E1D90D68CF10F4EAC25366.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\788d679b0ef749bcc9e1d90d68cf10f4eac25366.partially.cryptonar")) returned 1 [0127.818] SetErrorMode (uMode=0x1) returned 0x0 [0127.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\78a520fe200dd59f7079043c2e4494d582db5e27"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.819] SetErrorMode (uMode=0x0) returned 0x1 [0127.819] GetFileType (hFile=0x230) returned 0x1 [0127.819] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.821] SetErrorMode (uMode=0x1) returned 0x0 [0127.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\78a520fe200dd59f7079043c2e4494d582db5e27"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef3c2df, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef3c2df, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ea279f0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47da)) returned 1 [0127.821] SetErrorMode (uMode=0x0) returned 0x1 [0127.821] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\78a520fe200dd59f7079043c2e4494d582db5e27"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\78A520FE200DD59F7079043C2E4494D582DB5E27.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\78a520fe200dd59f7079043c2e4494d582db5e27.partially.cryptonar")) returned 1 [0127.823] SetErrorMode (uMode=0x1) returned 0x0 [0127.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79122ac35356132f14e7aa3248b675b5ba972274"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.824] SetErrorMode (uMode=0x0) returned 0x1 [0127.824] GetFileType (hFile=0x230) returned 0x1 [0127.824] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.887] SetErrorMode (uMode=0x1) returned 0x0 [0127.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79122ac35356132f14e7aa3248b675b5ba972274"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4eae6620, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdf8)) returned 1 [0127.887] SetErrorMode (uMode=0x0) returned 0x1 [0127.887] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79122ac35356132f14e7aa3248b675b5ba972274"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79122AC35356132F14E7AA3248B675B5BA972274.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79122ac35356132f14e7aa3248b675b5ba972274.partially.cryptonar")) returned 1 [0127.889] SetErrorMode (uMode=0x1) returned 0x0 [0127.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\793b27ba59d8a7b2ba6678feab19c5da43e97721"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.890] SetErrorMode (uMode=0x0) returned 0x1 [0127.891] GetFileType (hFile=0x230) returned 0x1 [0127.891] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.892] SetErrorMode (uMode=0x1) returned 0x0 [0127.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\793b27ba59d8a7b2ba6678feab19c5da43e97721"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4efb7c2, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4efb7c2, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4eae6620, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x206e)) returned 1 [0127.893] SetErrorMode (uMode=0x0) returned 0x1 [0127.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\793b27ba59d8a7b2ba6678feab19c5da43e97721"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\793B27BA59D8A7B2BA6678FEAB19C5DA43E97721.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\793b27ba59d8a7b2ba6678feab19c5da43e97721.partially.cryptonar")) returned 1 [0127.894] SetErrorMode (uMode=0x1) returned 0x0 [0127.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79495235f3219b3019a451820d1c43c06bfd4393"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.895] SetErrorMode (uMode=0x0) returned 0x1 [0127.895] GetFileType (hFile=0x230) returned 0x1 [0127.895] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.897] SetErrorMode (uMode=0x1) returned 0x0 [0127.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79495235f3219b3019a451820d1c43c06bfd4393"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c4d5c3d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3c4d5c3d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4eae6620, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1267)) returned 1 [0127.898] SetErrorMode (uMode=0x0) returned 0x1 [0127.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79495235f3219b3019a451820d1c43c06bfd4393"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79495235F3219B3019A451820D1C43C06BFD4393.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79495235f3219b3019a451820d1c43c06bfd4393.partially.cryptonar")) returned 1 [0127.899] SetErrorMode (uMode=0x1) returned 0x0 [0127.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79f42694978874799a67708237eecf993f994146"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.900] SetErrorMode (uMode=0x0) returned 0x1 [0127.900] GetFileType (hFile=0x230) returned 0x1 [0127.900] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.934] SetErrorMode (uMode=0x1) returned 0x0 [0127.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79f42694978874799a67708237eecf993f994146"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8829b5a0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8829b5a0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4eb58fbc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb71)) returned 1 [0127.935] SetErrorMode (uMode=0x0) returned 0x1 [0127.935] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79f42694978874799a67708237eecf993f994146"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\79F42694978874799A67708237EECF993F994146.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\79f42694978874799a67708237eecf993f994146.partially.cryptonar")) returned 1 [0127.937] SetErrorMode (uMode=0x1) returned 0x0 [0127.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a1a1466465e81b4f3f17b7b1e323bc295511e34"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.938] SetErrorMode (uMode=0x0) returned 0x1 [0127.938] GetFileType (hFile=0x230) returned 0x1 [0127.938] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.950] SetErrorMode (uMode=0x1) returned 0x0 [0127.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a1a1466465e81b4f3f17b7b1e323bc295511e34"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4eb7eed9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x445)) returned 1 [0127.951] SetErrorMode (uMode=0x0) returned 0x1 [0127.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a1a1466465e81b4f3f17b7b1e323bc295511e34"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A1A1466465E81B4F3F17B7B1E323BC295511E34.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a1a1466465e81b4f3f17b7b1e323bc295511e34.partially.cryptonar")) returned 1 [0127.952] SetErrorMode (uMode=0x1) returned 0x0 [0127.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a315f0f46ed849ce7a91455d41326be0fbd8df6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.953] SetErrorMode (uMode=0x0) returned 0x1 [0127.953] GetFileType (hFile=0x230) returned 0x1 [0127.953] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0127.978] SetErrorMode (uMode=0x1) returned 0x0 [0127.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a315f0f46ed849ce7a91455d41326be0fbd8df6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3be7fc7d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3be7fc7d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4eba5062, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0127.978] SetErrorMode (uMode=0x0) returned 0x1 [0127.978] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a315f0f46ed849ce7a91455d41326be0fbd8df6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A315F0F46ED849CE7A91455D41326BE0FBD8DF6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a315f0f46ed849ce7a91455d41326be0fbd8df6.partially.cryptonar")) returned 1 [0127.980] SetErrorMode (uMode=0x1) returned 0x0 [0127.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a7b3aea0bd15bf742c8652dab7dd9291e6b44e3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0127.981] SetErrorMode (uMode=0x0) returned 0x1 [0127.981] GetFileType (hFile=0x230) returned 0x1 [0127.981] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.024] SetErrorMode (uMode=0x1) returned 0x0 [0128.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a7b3aea0bd15bf742c8652dab7dd9291e6b44e3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eb98a46, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5eb98a46, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ec17912, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc12)) returned 1 [0128.024] SetErrorMode (uMode=0x0) returned 0x1 [0128.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a7b3aea0bd15bf742c8652dab7dd9291e6b44e3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A7B3AEA0BD15BF742C8652DAB7DD9291E6B44E3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a7b3aea0bd15bf742c8652dab7dd9291e6b44e3.partially.cryptonar")) returned 1 [0128.025] SetErrorMode (uMode=0x1) returned 0x0 [0128.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a8d3a9360cc37f0ad80962d4aea72b6d0f0b2b3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.026] SetErrorMode (uMode=0x0) returned 0x1 [0128.026] GetFileType (hFile=0x230) returned 0x1 [0128.027] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.027] SetErrorMode (uMode=0x1) returned 0x0 [0128.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a8d3a9360cc37f0ad80962d4aea72b6d0f0b2b3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b7344a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x41b7344a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4ec3db22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x105)) returned 1 [0128.027] SetErrorMode (uMode=0x0) returned 0x1 [0128.028] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a8d3a9360cc37f0ad80962d4aea72b6d0f0b2b3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a8d3a9360cc37f0ad80962d4aea72b6d0f0b2b3.partially.cryptonar")) returned 1 [0128.028] SetErrorMode (uMode=0x1) returned 0x0 [0128.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a93ef828a8c217f3a12a7af2896c1ea3ea58080"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.030] SetErrorMode (uMode=0x0) returned 0x1 [0128.030] GetFileType (hFile=0x230) returned 0x1 [0128.030] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.031] SetErrorMode (uMode=0x1) returned 0x0 [0128.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a93ef828a8c217f3a12a7af2896c1ea3ea58080"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4244604, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4244604, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ec3db22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb7fd)) returned 1 [0128.032] SetErrorMode (uMode=0x0) returned 0x1 [0128.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a93ef828a8c217f3a12a7af2896c1ea3ea58080"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7A93EF828A8C217F3A12A7AF2896C1EA3EA58080.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7a93ef828a8c217f3a12a7af2896c1ea3ea58080.partially.cryptonar")) returned 1 [0128.033] SetErrorMode (uMode=0x1) returned 0x0 [0128.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7b2118cb15de60985b2f5a4b0a54ff4d177bd7f2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.033] SetErrorMode (uMode=0x0) returned 0x1 [0128.033] GetFileType (hFile=0x230) returned 0x1 [0128.034] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.070] SetErrorMode (uMode=0x1) returned 0x0 [0128.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7b2118cb15de60985b2f5a4b0a54ff4d177bd7f2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87969b02, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87969b02, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ec8a12e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfde)) returned 1 [0128.070] SetErrorMode (uMode=0x0) returned 0x1 [0128.070] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7b2118cb15de60985b2f5a4b0a54ff4d177bd7f2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7B2118CB15DE60985B2F5A4B0A54FF4D177BD7F2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7b2118cb15de60985b2f5a4b0a54ff4d177bd7f2.partially.cryptonar")) returned 1 [0128.072] SetErrorMode (uMode=0x1) returned 0x0 [0128.072] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ba99981d9cfabde0d8a629a068d5c4b067aff15"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.072] SetErrorMode (uMode=0x0) returned 0x1 [0128.072] GetFileType (hFile=0x230) returned 0x1 [0128.072] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.075] SetErrorMode (uMode=0x1) returned 0x0 [0128.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ba99981d9cfabde0d8a629a068d5c4b067aff15"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb7c40b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7bb7c40b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ecb0e9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x206a)) returned 1 [0128.075] SetErrorMode (uMode=0x0) returned 0x1 [0128.075] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ba99981d9cfabde0d8a629a068d5c4b067aff15"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BA99981D9CFABDE0D8A629A068D5C4B067AFF15.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ba99981d9cfabde0d8a629a068d5c4b067aff15.partially.cryptonar")) returned 1 [0128.077] SetErrorMode (uMode=0x1) returned 0x0 [0128.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7bc5c2025f544e50b3de3549ada4aa613d5c7842"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.078] SetErrorMode (uMode=0x0) returned 0x1 [0128.079] GetFileType (hFile=0x230) returned 0x1 [0128.079] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.166] SetErrorMode (uMode=0x1) returned 0x0 [0128.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7bc5c2025f544e50b3de3549ada4aa613d5c7842"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfb70d26, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xcfb70d26, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ed6ee90, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ca66)) returned 1 [0128.167] SetErrorMode (uMode=0x0) returned 0x1 [0128.167] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7bc5c2025f544e50b3de3549ada4aa613d5c7842"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7BC5C2025F544E50B3DE3549ADA4AA613D5C7842.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7bc5c2025f544e50b3de3549ada4aa613d5c7842.partially.cryptonar")) returned 1 [0128.168] SetErrorMode (uMode=0x1) returned 0x0 [0128.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7c0135458bd7055c44a6fc5595953ec97ae2564c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.169] SetErrorMode (uMode=0x0) returned 0x1 [0128.169] GetFileType (hFile=0x230) returned 0x1 [0128.169] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.287] SetErrorMode (uMode=0x1) returned 0x0 [0128.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7c0135458bd7055c44a6fc5595953ec97ae2564c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c168768, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c168768, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4eea00f5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x235a)) returned 1 [0128.288] SetErrorMode (uMode=0x0) returned 0x1 [0128.288] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7c0135458bd7055c44a6fc5595953ec97ae2564c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7C0135458BD7055C44A6FC5595953EC97AE2564C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7c0135458bd7055c44a6fc5595953ec97ae2564c.partially.cryptonar")) returned 1 [0128.289] SetErrorMode (uMode=0x1) returned 0x0 [0128.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d085640ca3acca510cd84959d65912bdc5e033d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.290] SetErrorMode (uMode=0x0) returned 0x1 [0128.290] GetFileType (hFile=0x230) returned 0x1 [0128.291] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.292] SetErrorMode (uMode=0x1) returned 0x0 [0128.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d085640ca3acca510cd84959d65912bdc5e033d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x881dce94, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x881dce94, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4eec619f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0128.293] SetErrorMode (uMode=0x0) returned 0x1 [0128.293] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d085640ca3acca510cd84959d65912bdc5e033d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D085640CA3ACCA510CD84959D65912BDC5E033D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d085640ca3acca510cd84959d65912bdc5e033d.partially.cryptonar")) returned 1 [0128.294] SetErrorMode (uMode=0x1) returned 0x0 [0128.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d92b4388f8e6b32f40e02b9dd20ca3d76209f4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.296] SetErrorMode (uMode=0x0) returned 0x1 [0128.296] GetFileType (hFile=0x230) returned 0x1 [0128.296] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.487] SetErrorMode (uMode=0x1) returned 0x0 [0128.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d92b4388f8e6b32f40e02b9dd20ca3d76209f4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4739fda, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4739fda, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f095155, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x34c1)) returned 1 [0128.487] SetErrorMode (uMode=0x0) returned 0x1 [0128.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d92b4388f8e6b32f40e02b9dd20ca3d76209f4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7D92B4388F8E6B32F40E02B9DD20CA3D76209F4A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7d92b4388f8e6b32f40e02b9dd20ca3d76209f4a.partially.cryptonar")) returned 1 [0128.488] SetErrorMode (uMode=0x1) returned 0x0 [0128.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7dc89b7400c4c6b5ac1000c69db6591a4ea8244e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.489] SetErrorMode (uMode=0x0) returned 0x1 [0128.489] GetFileType (hFile=0x230) returned 0x1 [0128.489] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.508] SetErrorMode (uMode=0x1) returned 0x0 [0128.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7dc89b7400c4c6b5ac1000c69db6591a4ea8244e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a705c9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf0a705c9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f0b60b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0128.508] SetErrorMode (uMode=0x0) returned 0x1 [0128.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7dc89b7400c4c6b5ac1000c69db6591a4ea8244e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7DC89B7400C4C6B5AC1000C69DB6591A4EA8244E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7dc89b7400c4c6b5ac1000c69db6591a4ea8244e.partially.cryptonar")) returned 1 [0128.509] SetErrorMode (uMode=0x1) returned 0x0 [0128.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7e6a4ddd6ebe916c46924ced08fc10c7e58a9a59"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.510] SetErrorMode (uMode=0x0) returned 0x1 [0128.510] GetFileType (hFile=0x230) returned 0x1 [0128.510] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.530] SetErrorMode (uMode=0x1) returned 0x0 [0128.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7e6a4ddd6ebe916c46924ced08fc10c7e58a9a59"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x870295ff, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x870295ff, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f1026a2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8ff)) returned 1 [0128.530] SetErrorMode (uMode=0x0) returned 0x1 [0128.531] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7e6a4ddd6ebe916c46924ced08fc10c7e58a9a59"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7E6A4DDD6EBE916C46924CED08FC10C7E58A9A59.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7e6a4ddd6ebe916c46924ced08fc10c7e58a9a59.partially.cryptonar")) returned 1 [0128.532] SetErrorMode (uMode=0x1) returned 0x0 [0128.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eb87f80f5e3271b910df76ecb8fc273cfc9b047"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.533] SetErrorMode (uMode=0x0) returned 0x1 [0128.533] GetFileType (hFile=0x230) returned 0x1 [0128.533] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.562] SetErrorMode (uMode=0x1) returned 0x0 [0128.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eb87f80f5e3271b910df76ecb8fc273cfc9b047"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc54a515b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc54a515b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f14eb6f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1cc1)) returned 1 [0128.562] SetErrorMode (uMode=0x0) returned 0x1 [0128.562] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eb87f80f5e3271b910df76ecb8fc273cfc9b047"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EB87F80F5E3271B910DF76ECB8FC273CFC9B047.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eb87f80f5e3271b910df76ecb8fc273cfc9b047.partially.cryptonar")) returned 1 [0128.563] SetErrorMode (uMode=0x1) returned 0x0 [0128.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ed75b3614c7d3eee86d39a5f382cbe557da312e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.564] SetErrorMode (uMode=0x0) returned 0x1 [0128.564] GetFileType (hFile=0x230) returned 0x1 [0128.564] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.592] SetErrorMode (uMode=0x1) returned 0x0 [0128.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ed75b3614c7d3eee86d39a5f382cbe557da312e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4f19aff9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x453)) returned 1 [0128.592] SetErrorMode (uMode=0x0) returned 0x1 [0128.592] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ed75b3614c7d3eee86d39a5f382cbe557da312e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7ED75B3614C7D3EEE86D39A5F382CBE557DA312E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7ed75b3614c7d3eee86d39a5f382cbe557da312e.partially.cryptonar")) returned 1 [0128.594] SetErrorMode (uMode=0x1) returned 0x0 [0128.594] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eecec96c96f7efd42bccef138eb2246983aee2b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.595] SetErrorMode (uMode=0x0) returned 0x1 [0128.595] GetFileType (hFile=0x230) returned 0x1 [0128.595] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.596] SetErrorMode (uMode=0x1) returned 0x0 [0128.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eecec96c96f7efd42bccef138eb2246983aee2b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466cfd21, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466cfd21, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4f19aff9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xea4)) returned 1 [0128.597] SetErrorMode (uMode=0x0) returned 0x1 [0128.597] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eecec96c96f7efd42bccef138eb2246983aee2b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7EECEC96C96F7EFD42BCCEF138EB2246983AEE2B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7eecec96c96f7efd42bccef138eb2246983aee2b.partially.cryptonar")) returned 1 [0128.598] SetErrorMode (uMode=0x1) returned 0x0 [0128.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7fe50be7077de90d076e000c0a24643af8cd9ac9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.602] SetErrorMode (uMode=0x0) returned 0x1 [0128.602] GetFileType (hFile=0x230) returned 0x1 [0128.602] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.660] SetErrorMode (uMode=0x1) returned 0x0 [0128.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7fe50be7077de90d076e000c0a24643af8cd9ac9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87be6eda, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87be6eda, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f23396c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1123)) returned 1 [0128.660] SetErrorMode (uMode=0x0) returned 0x1 [0128.660] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7fe50be7077de90d076e000c0a24643af8cd9ac9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\7FE50BE7077DE90D076E000C0A24643AF8CD9AC9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\7fe50be7077de90d076e000c0a24643af8cd9ac9.partially.cryptonar")) returned 1 [0128.662] SetErrorMode (uMode=0x1) returned 0x0 [0128.662] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\804d00971a6713df10cab1b024ca03f9b3c038f2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.663] SetErrorMode (uMode=0x0) returned 0x1 [0128.663] GetFileType (hFile=0x230) returned 0x1 [0128.663] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.669] SetErrorMode (uMode=0x1) returned 0x0 [0128.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\804d00971a6713df10cab1b024ca03f9b3c038f2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549499fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549499fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f259ae9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e74)) returned 1 [0128.670] SetErrorMode (uMode=0x0) returned 0x1 [0128.670] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\804d00971a6713df10cab1b024ca03f9b3c038f2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\804D00971A6713DF10CAB1B024CA03F9B3C038F2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\804d00971a6713df10cab1b024ca03f9b3c038f2.partially.cryptonar")) returned 1 [0128.671] SetErrorMode (uMode=0x1) returned 0x0 [0128.671] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\80f2f68fb2bdac2a31fff46701389c7ea9c7b74f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.672] SetErrorMode (uMode=0x0) returned 0x1 [0128.672] GetFileType (hFile=0x230) returned 0x1 [0128.672] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.679] SetErrorMode (uMode=0x1) returned 0x0 [0128.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\80f2f68fb2bdac2a31fff46701389c7ea9c7b74f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373e86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5373e86, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f259ae9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcd4d)) returned 1 [0128.680] SetErrorMode (uMode=0x0) returned 0x1 [0128.680] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\80f2f68fb2bdac2a31fff46701389c7ea9c7b74f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\80F2F68FB2BDAC2A31FFF46701389C7EA9C7B74F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\80f2f68fb2bdac2a31fff46701389c7ea9c7b74f.partially.cryptonar")) returned 1 [0128.681] SetErrorMode (uMode=0x1) returned 0x0 [0128.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\816b0061e79b6e53649ec38d2c76c3cb97737646"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.683] SetErrorMode (uMode=0x0) returned 0x1 [0128.683] GetFileType (hFile=0x230) returned 0x1 [0128.683] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.696] SetErrorMode (uMode=0x1) returned 0x0 [0128.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\816b0061e79b6e53649ec38d2c76c3cb97737646"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8e579b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c8e579b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f27fdc3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x68c9)) returned 1 [0128.697] SetErrorMode (uMode=0x0) returned 0x1 [0128.697] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\816b0061e79b6e53649ec38d2c76c3cb97737646"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\816B0061E79B6E53649EC38D2C76C3CB97737646.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\816b0061e79b6e53649ec38d2c76c3cb97737646.partially.cryptonar")) returned 1 [0128.699] SetErrorMode (uMode=0x1) returned 0x0 [0128.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8181a6d542bc353bbf64d59bc6d1e6b99fe41d04"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.700] SetErrorMode (uMode=0x0) returned 0x1 [0128.700] GetFileType (hFile=0x230) returned 0x1 [0128.700] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.702] SetErrorMode (uMode=0x1) returned 0x0 [0128.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8181a6d542bc353bbf64d59bc6d1e6b99fe41d04"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54cdd37f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54cdd37f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f2a60f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2676)) returned 1 [0128.702] SetErrorMode (uMode=0x0) returned 0x1 [0128.702] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8181a6d542bc353bbf64d59bc6d1e6b99fe41d04"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8181A6D542BC353BBF64D59BC6D1E6B99FE41D04.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8181a6d542bc353bbf64d59bc6d1e6b99fe41d04.partially.cryptonar")) returned 1 [0128.704] SetErrorMode (uMode=0x1) returned 0x0 [0128.704] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\81bad44f278646a44e19b8e1bb5d91720320eaf3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.705] SetErrorMode (uMode=0x0) returned 0x1 [0128.705] GetFileType (hFile=0x230) returned 0x1 [0128.705] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.779] SetErrorMode (uMode=0x1) returned 0x0 [0128.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\81bad44f278646a44e19b8e1bb5d91720320eaf3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5137b11, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5137b11, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f364c28, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x21bc1)) returned 1 [0128.779] SetErrorMode (uMode=0x0) returned 0x1 [0128.779] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\81bad44f278646a44e19b8e1bb5d91720320eaf3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\81BAD44F278646A44E19B8E1BB5D91720320EAF3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\81bad44f278646a44e19b8e1bb5d91720320eaf3.partially.cryptonar")) returned 1 [0128.781] SetErrorMode (uMode=0x1) returned 0x0 [0128.781] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\83a45fef980b64bf75e4a05f00358d435194c556"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.782] SetErrorMode (uMode=0x0) returned 0x1 [0128.782] GetFileType (hFile=0x230) returned 0x1 [0128.782] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.851] SetErrorMode (uMode=0x1) returned 0x0 [0128.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\83a45fef980b64bf75e4a05f00358d435194c556"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bfa7368, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bfa7368, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f3fd525, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0128.851] SetErrorMode (uMode=0x0) returned 0x1 [0128.851] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\83a45fef980b64bf75e4a05f00358d435194c556"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\83A45FEF980B64BF75E4A05F00358D435194C556.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\83a45fef980b64bf75e4a05f00358d435194c556.partially.cryptonar")) returned 1 [0128.852] SetErrorMode (uMode=0x1) returned 0x0 [0128.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\84165838615173ec8d9fd7b48624825c1bf0de5b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.853] SetErrorMode (uMode=0x0) returned 0x1 [0128.854] GetFileType (hFile=0x230) returned 0x1 [0128.854] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.864] SetErrorMode (uMode=0x1) returned 0x0 [0128.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\84165838615173ec8d9fd7b48624825c1bf0de5b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7afca4c9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7afca4c9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f423777, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0128.864] SetErrorMode (uMode=0x0) returned 0x1 [0128.864] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\84165838615173ec8d9fd7b48624825c1bf0de5b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\84165838615173EC8D9FD7B48624825C1BF0DE5B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\84165838615173ec8d9fd7b48624825c1bf0de5b.partially.cryptonar")) returned 1 [0128.865] SetErrorMode (uMode=0x1) returned 0x0 [0128.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8527be88abe092f222f01f1faa6bb09aa3c86e1c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.866] SetErrorMode (uMode=0x0) returned 0x1 [0128.866] GetFileType (hFile=0x230) returned 0x1 [0128.867] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.956] SetErrorMode (uMode=0x1) returned 0x0 [0128.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8527be88abe092f222f01f1faa6bb09aa3c86e1c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f508626, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0128.956] SetErrorMode (uMode=0x0) returned 0x1 [0128.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8527be88abe092f222f01f1faa6bb09aa3c86e1c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8527be88abe092f222f01f1faa6bb09aa3c86e1c.partially.cryptonar")) returned 1 [0128.958] SetErrorMode (uMode=0x1) returned 0x0 [0128.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\856994bf71bee39831bb203883640c63d2a3eb13"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.959] SetErrorMode (uMode=0x0) returned 0x1 [0128.959] GetFileType (hFile=0x230) returned 0x1 [0128.959] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0128.964] SetErrorMode (uMode=0x1) returned 0x0 [0128.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\856994bf71bee39831bb203883640c63d2a3eb13"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4f508626, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0128.964] SetErrorMode (uMode=0x0) returned 0x1 [0128.964] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\856994bf71bee39831bb203883640c63d2a3eb13"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\856994BF71BEE39831BB203883640C63D2A3EB13.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\856994bf71bee39831bb203883640c63d2a3eb13.partially.cryptonar")) returned 1 [0128.969] SetErrorMode (uMode=0x1) returned 0x0 [0128.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\85d45be07aadc9ae35157e1f49ebd4d7ead9c37b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0128.970] SetErrorMode (uMode=0x0) returned 0x1 [0128.970] GetFileType (hFile=0x230) returned 0x1 [0128.970] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.011] SetErrorMode (uMode=0x1) returned 0x0 [0129.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\85d45be07aadc9ae35157e1f49ebd4d7ead9c37b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ed5566, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4ed5566, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f57ae92, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10b72)) returned 1 [0129.011] SetErrorMode (uMode=0x0) returned 0x1 [0129.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\85d45be07aadc9ae35157e1f49ebd4d7ead9c37b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\85D45BE07AADC9AE35157E1F49EBD4D7EAD9C37B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\85d45be07aadc9ae35157e1f49ebd4d7ead9c37b.partially.cryptonar")) returned 1 [0129.022] SetErrorMode (uMode=0x1) returned 0x0 [0129.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\861c798ecb309fb01c45fe3e3b63a4c2c3d13ad9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.023] SetErrorMode (uMode=0x0) returned 0x1 [0129.023] GetFileType (hFile=0x230) returned 0x1 [0129.023] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.040] SetErrorMode (uMode=0x1) returned 0x0 [0129.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\861c798ecb309fb01c45fe3e3b63a4c2c3d13ad9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c266628, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c266628, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f5c710c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1fc5)) returned 1 [0129.040] SetErrorMode (uMode=0x0) returned 0x1 [0129.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\861c798ecb309fb01c45fe3e3b63a4c2c3d13ad9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\861C798ECB309FB01C45FE3E3B63A4C2C3D13AD9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\861c798ecb309fb01c45fe3e3b63a4c2c3d13ad9.partially.cryptonar")) returned 1 [0129.041] SetErrorMode (uMode=0x1) returned 0x0 [0129.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\867c4a2bac51d572fb7cbb0430893756378d1f42"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.043] SetErrorMode (uMode=0x0) returned 0x1 [0129.043] GetFileType (hFile=0x230) returned 0x1 [0129.043] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.044] SetErrorMode (uMode=0x1) returned 0x0 [0129.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\867c4a2bac51d572fb7cbb0430893756378d1f42"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe062122f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe062122f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f5ee65c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6b)) returned 1 [0129.044] SetErrorMode (uMode=0x0) returned 0x1 [0129.044] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\867c4a2bac51d572fb7cbb0430893756378d1f42"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\867C4A2BAC51D572FB7CBB0430893756378D1F42.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\867c4a2bac51d572fb7cbb0430893756378d1f42.partially.cryptonar")) returned 1 [0129.046] SetErrorMode (uMode=0x1) returned 0x0 [0129.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\86a76ca2e1b13a2a88317eae6628f08207275bc8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.048] SetErrorMode (uMode=0x0) returned 0x1 [0129.048] GetFileType (hFile=0x230) returned 0x1 [0129.048] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.105] SetErrorMode (uMode=0x1) returned 0x0 [0129.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\86a76ca2e1b13a2a88317eae6628f08207275bc8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f685c15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0129.105] SetErrorMode (uMode=0x0) returned 0x1 [0129.105] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\86a76ca2e1b13a2a88317eae6628f08207275bc8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\86A76CA2E1B13A2A88317EAE6628F08207275BC8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\86a76ca2e1b13a2a88317eae6628f08207275bc8.partially.cryptonar")) returned 1 [0129.107] SetErrorMode (uMode=0x1) returned 0x0 [0129.107] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87831840eb1af4b7388e370ba94421c5897b8373"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.108] SetErrorMode (uMode=0x0) returned 0x1 [0129.108] GetFileType (hFile=0x230) returned 0x1 [0129.108] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.124] SetErrorMode (uMode=0x1) returned 0x0 [0129.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87831840eb1af4b7388e370ba94421c5897b8373"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455d30cd, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x455d30cd, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4f6ac022, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c8)) returned 1 [0129.125] SetErrorMode (uMode=0x0) returned 0x1 [0129.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87831840eb1af4b7388e370ba94421c5897b8373"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87831840EB1AF4B7388E370BA94421C5897B8373.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87831840eb1af4b7388e370ba94421c5897b8373.partially.cryptonar")) returned 1 [0129.127] SetErrorMode (uMode=0x1) returned 0x0 [0129.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87c1bbebf88c597db196c025271235cb67e5dd86"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.129] SetErrorMode (uMode=0x0) returned 0x1 [0129.129] GetFileType (hFile=0x230) returned 0x1 [0129.129] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.146] SetErrorMode (uMode=0x1) returned 0x0 [0129.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87c1bbebf88c597db196c025271235cb67e5dd86"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f6d21cf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1130)) returned 1 [0129.146] SetErrorMode (uMode=0x0) returned 0x1 [0129.146] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87c1bbebf88c597db196c025271235cb67e5dd86"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87C1BBEBF88C597DB196C025271235CB67E5DD86.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87c1bbebf88c597db196c025271235cb67e5dd86.partially.cryptonar")) returned 1 [0129.147] SetErrorMode (uMode=0x1) returned 0x0 [0129.147] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87fbb86f054039d548caec249fd69f1568394fa5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.148] SetErrorMode (uMode=0x0) returned 0x1 [0129.148] GetFileType (hFile=0x230) returned 0x1 [0129.148] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.150] SetErrorMode (uMode=0x1) returned 0x0 [0129.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87fbb86f054039d548caec249fd69f1568394fa5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f26b1, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f26b1, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4f6d21cf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3318)) returned 1 [0129.150] SetErrorMode (uMode=0x0) returned 0x1 [0129.150] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87fbb86f054039d548caec249fd69f1568394fa5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\87FBB86F054039D548CAEC249FD69F1568394FA5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\87fbb86f054039d548caec249fd69f1568394fa5.partially.cryptonar")) returned 1 [0129.152] SetErrorMode (uMode=0x1) returned 0x0 [0129.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8857f3033add4eb28817638302a934efc707bbdc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.153] SetErrorMode (uMode=0x0) returned 0x1 [0129.153] GetFileType (hFile=0x230) returned 0x1 [0129.153] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.207] SetErrorMode (uMode=0x1) returned 0x0 [0129.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8857f3033add4eb28817638302a934efc707bbdc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b84751, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2b84751, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f76aa3b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c79)) returned 1 [0129.208] SetErrorMode (uMode=0x0) returned 0x1 [0129.208] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8857f3033add4eb28817638302a934efc707bbdc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8857F3033ADD4EB28817638302A934EFC707BBDC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8857f3033add4eb28817638302a934efc707bbdc.partially.cryptonar")) returned 1 [0129.209] SetErrorMode (uMode=0x1) returned 0x0 [0129.209] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8858061f604137649f7f7aed0dd9533b288d061a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.210] SetErrorMode (uMode=0x0) returned 0x1 [0129.210] GetFileType (hFile=0x230) returned 0x1 [0129.210] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.220] SetErrorMode (uMode=0x1) returned 0x0 [0129.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8858061f604137649f7f7aed0dd9533b288d061a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5cc4a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5cc4a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f790cb2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2528)) returned 1 [0129.220] SetErrorMode (uMode=0x0) returned 0x1 [0129.220] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8858061f604137649f7f7aed0dd9533b288d061a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8858061F604137649F7F7AED0DD9533B288D061A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8858061f604137649f7f7aed0dd9533b288d061a.partially.cryptonar")) returned 1 [0129.222] SetErrorMode (uMode=0x1) returned 0x0 [0129.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\89743f26a40dbac175b5fff4fc14795f1746d995"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.223] SetErrorMode (uMode=0x0) returned 0x1 [0129.223] GetFileType (hFile=0x230) returned 0x1 [0129.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.233] SetErrorMode (uMode=0x1) returned 0x0 [0129.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\89743f26a40dbac175b5fff4fc14795f1746d995"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f7b6f91, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf0f)) returned 1 [0129.234] SetErrorMode (uMode=0x0) returned 0x1 [0129.234] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\89743f26a40dbac175b5fff4fc14795f1746d995"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\89743F26A40DBAC175B5FFF4FC14795F1746D995.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\89743f26a40dbac175b5fff4fc14795f1746d995.partially.cryptonar")) returned 1 [0129.236] SetErrorMode (uMode=0x1) returned 0x0 [0129.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2107086f36fa7af2b6af5f80b1a42a605a053a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.236] SetErrorMode (uMode=0x0) returned 0x1 [0129.237] GetFileType (hFile=0x230) returned 0x1 [0129.237] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.238] SetErrorMode (uMode=0x1) returned 0x0 [0129.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2107086f36fa7af2b6af5f80b1a42a605a053a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f7b6f91, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed3)) returned 1 [0129.238] SetErrorMode (uMode=0x0) returned 0x1 [0129.238] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2107086f36fa7af2b6af5f80b1a42a605a053a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2107086F36FA7AF2B6AF5F80B1A42A605A053A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2107086f36fa7af2b6af5f80b1a42a605a053a.partially.cryptonar")) returned 1 [0129.239] SetErrorMode (uMode=0x1) returned 0x0 [0129.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2ad8f5df71b3edeecb2f31fb7313248369277e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.240] SetErrorMode (uMode=0x0) returned 0x1 [0129.240] GetFileType (hFile=0x230) returned 0x1 [0129.240] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.269] SetErrorMode (uMode=0x1) returned 0x0 [0129.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2ad8f5df71b3edeecb2f31fb7313248369277e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8752b5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f8752b5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f807e78, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0129.270] SetErrorMode (uMode=0x0) returned 0x1 [0129.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2ad8f5df71b3edeecb2f31fb7313248369277e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A2AD8F5DF71B3EDEECB2F31FB7313248369277E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a2ad8f5df71b3edeecb2f31fb7313248369277e.partially.cryptonar")) returned 1 [0129.271] SetErrorMode (uMode=0x1) returned 0x0 [0129.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a7920081c1315333e277e9f21318af059b30830"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.272] SetErrorMode (uMode=0x0) returned 0x1 [0129.272] GetFileType (hFile=0x230) returned 0x1 [0129.272] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.294] SetErrorMode (uMode=0x1) returned 0x0 [0129.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a7920081c1315333e277e9f21318af059b30830"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5cc4a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5cc4a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f84f888, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40ee)) returned 1 [0129.295] SetErrorMode (uMode=0x0) returned 0x1 [0129.295] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a7920081c1315333e277e9f21318af059b30830"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A7920081C1315333E277E9F21318AF059B30830.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a7920081c1315333e277e9f21318af059b30830.partially.cryptonar")) returned 1 [0129.297] SetErrorMode (uMode=0x1) returned 0x0 [0129.297] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a8fb4c98364036c0183d518c77cc8fc39f40bc1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.298] SetErrorMode (uMode=0x0) returned 0x1 [0129.298] GetFileType (hFile=0x230) returned 0x1 [0129.298] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.321] SetErrorMode (uMode=0x1) returned 0x0 [0129.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a8fb4c98364036c0183d518c77cc8fc39f40bc1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f875bbc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0129.321] SetErrorMode (uMode=0x0) returned 0x1 [0129.321] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a8fb4c98364036c0183d518c77cc8fc39f40bc1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8A8FB4C98364036C0183D518C77CC8FC39F40BC1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8a8fb4c98364036c0183d518c77cc8fc39f40bc1.partially.cryptonar")) returned 1 [0129.323] SetErrorMode (uMode=0x1) returned 0x0 [0129.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ac71e619e56a3e91432a092c6c908d04a1344f4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.324] SetErrorMode (uMode=0x0) returned 0x1 [0129.325] GetFileType (hFile=0x230) returned 0x1 [0129.325] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.340] SetErrorMode (uMode=0x1) returned 0x0 [0129.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ac71e619e56a3e91432a092c6c908d04a1344f4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed6267c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5ed6267c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f8c2019, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1484)) returned 1 [0129.341] SetErrorMode (uMode=0x0) returned 0x1 [0129.341] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ac71e619e56a3e91432a092c6c908d04a1344f4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8AC71E619E56A3E91432A092C6C908D04A1344F4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ac71e619e56a3e91432a092c6c908d04a1344f4.partially.cryptonar")) returned 1 [0129.343] SetErrorMode (uMode=0x1) returned 0x0 [0129.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b4df9c9c3e59d43f4b9d7acf58641b677239f1c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.344] SetErrorMode (uMode=0x0) returned 0x1 [0129.344] GetFileType (hFile=0x230) returned 0x1 [0129.344] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.357] SetErrorMode (uMode=0x1) returned 0x0 [0129.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b4df9c9c3e59d43f4b9d7acf58641b677239f1c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde916960, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde916960, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f8e818c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0129.357] SetErrorMode (uMode=0x0) returned 0x1 [0129.357] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b4df9c9c3e59d43f4b9d7acf58641b677239f1c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B4DF9C9C3E59D43F4B9D7ACF58641B677239F1C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b4df9c9c3e59d43f4b9d7acf58641b677239f1c.partially.cryptonar")) returned 1 [0129.358] SetErrorMode (uMode=0x1) returned 0x0 [0129.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b84bb849a29090a3112f400e6dc463ad0368aa0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.359] SetErrorMode (uMode=0x0) returned 0x1 [0129.359] GetFileType (hFile=0x230) returned 0x1 [0129.359] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.370] SetErrorMode (uMode=0x1) returned 0x0 [0129.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b84bb849a29090a3112f400e6dc463ad0368aa0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f8e818c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1134)) returned 1 [0129.370] SetErrorMode (uMode=0x0) returned 0x1 [0129.370] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b84bb849a29090a3112f400e6dc463ad0368aa0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8B84BB849A29090A3112F400E6DC463AD0368AA0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8b84bb849a29090a3112f400e6dc463ad0368aa0.partially.cryptonar")) returned 1 [0129.372] SetErrorMode (uMode=0x1) returned 0x0 [0129.372] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ba8244a3d96efb0ad646b78fa7d56c7b7c78669"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.372] SetErrorMode (uMode=0x0) returned 0x1 [0129.372] GetFileType (hFile=0x230) returned 0x1 [0129.373] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.438] SetErrorMode (uMode=0x1) returned 0x0 [0129.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ba8244a3d96efb0ad646b78fa7d56c7b7c78669"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdef4996a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdef4996a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4f9a6ed5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0129.438] SetErrorMode (uMode=0x0) returned 0x1 [0129.439] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ba8244a3d96efb0ad646b78fa7d56c7b7c78669"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8BA8244A3D96EFB0AD646B78FA7D56C7B7C78669.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ba8244a3d96efb0ad646b78fa7d56c7b7c78669.partially.cryptonar")) returned 1 [0129.440] SetErrorMode (uMode=0x1) returned 0x0 [0129.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c464319d7da26eeef0dc70d0e126016b1661be9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.443] SetErrorMode (uMode=0x0) returned 0x1 [0129.443] GetFileType (hFile=0x230) returned 0x1 [0129.443] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.460] SetErrorMode (uMode=0x1) returned 0x0 [0129.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c464319d7da26eeef0dc70d0e126016b1661be9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4f9cd0a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdfa)) returned 1 [0129.460] SetErrorMode (uMode=0x0) returned 0x1 [0129.460] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c464319d7da26eeef0dc70d0e126016b1661be9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C464319D7DA26EEEF0DC70D0E126016B1661BE9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c464319d7da26eeef0dc70d0e126016b1661be9.partially.cryptonar")) returned 1 [0129.462] SetErrorMode (uMode=0x1) returned 0x0 [0129.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c485aab55cf31b760712b22fb3f3ab91a5e2021"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.462] SetErrorMode (uMode=0x0) returned 0x1 [0129.463] GetFileType (hFile=0x230) returned 0x1 [0129.463] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.523] SetErrorMode (uMode=0x1) returned 0x0 [0129.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c485aab55cf31b760712b22fb3f3ab91a5e2021"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4fa65a0c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0129.523] SetErrorMode (uMode=0x0) returned 0x1 [0129.523] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c485aab55cf31b760712b22fb3f3ab91a5e2021"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C485AAB55CF31B760712B22FB3F3AB91A5E2021.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c485aab55cf31b760712b22fb3f3ab91a5e2021.partially.cryptonar")) returned 1 [0129.524] SetErrorMode (uMode=0x1) returned 0x0 [0129.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c527dbb4d7cb3c5361e45317d8ed1748d9913a3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.526] SetErrorMode (uMode=0x0) returned 0x1 [0129.526] GetFileType (hFile=0x230) returned 0x1 [0129.526] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.538] SetErrorMode (uMode=0x1) returned 0x0 [0129.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c527dbb4d7cb3c5361e45317d8ed1748d9913a3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3697e9d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3697e9d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fa8bc20, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf53)) returned 1 [0129.538] SetErrorMode (uMode=0x0) returned 0x1 [0129.538] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c527dbb4d7cb3c5361e45317d8ed1748d9913a3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8C527DBB4D7CB3C5361E45317D8ED1748D9913A3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8c527dbb4d7cb3c5361e45317d8ed1748d9913a3.partially.cryptonar")) returned 1 [0129.539] SetErrorMode (uMode=0x1) returned 0x0 [0129.539] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d1cd10b54831000c610115ae0473daa9952c7a5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.540] SetErrorMode (uMode=0x0) returned 0x1 [0129.540] GetFileType (hFile=0x230) returned 0x1 [0129.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.542] SetErrorMode (uMode=0x1) returned 0x0 [0129.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d1cd10b54831000c610115ae0473daa9952c7a5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5edd4da7, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5edd4da7, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4fab1dd9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a30)) returned 1 [0129.543] SetErrorMode (uMode=0x0) returned 0x1 [0129.543] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d1cd10b54831000c610115ae0473daa9952c7a5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D1CD10B54831000C610115AE0473DAA9952C7A5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d1cd10b54831000c610115ae0473daa9952c7a5.partially.cryptonar")) returned 1 [0129.544] SetErrorMode (uMode=0x1) returned 0x0 [0129.544] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d3548a9e299638e821f0d23205c31173a0f66fa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.545] SetErrorMode (uMode=0x0) returned 0x1 [0129.545] GetFileType (hFile=0x230) returned 0x1 [0129.545] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.547] SetErrorMode (uMode=0x1) returned 0x0 [0129.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d3548a9e299638e821f0d23205c31173a0f66fa"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b14f76, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87b14f76, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fab1dd9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x247f)) returned 1 [0129.547] SetErrorMode (uMode=0x0) returned 0x1 [0129.547] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d3548a9e299638e821f0d23205c31173a0f66fa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8D3548A9E299638E821F0D23205C31173A0F66FA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8d3548a9e299638e821f0d23205c31173a0f66fa.partially.cryptonar")) returned 1 [0129.548] SetErrorMode (uMode=0x1) returned 0x0 [0129.548] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8e7a6f14994cb357d289b605f3ae15cceb964d75"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.549] SetErrorMode (uMode=0x0) returned 0x1 [0129.549] GetFileType (hFile=0x230) returned 0x1 [0129.549] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.551] SetErrorMode (uMode=0x1) returned 0x0 [0129.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8e7a6f14994cb357d289b605f3ae15cceb964d75"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3404afb, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3404afb, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fab1dd9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1260)) returned 1 [0129.551] SetErrorMode (uMode=0x0) returned 0x1 [0129.551] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8e7a6f14994cb357d289b605f3ae15cceb964d75"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8E7A6F14994CB357D289B605F3AE15CCEB964D75.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8e7a6f14994cb357d289b605f3ae15cceb964d75.partially.cryptonar")) returned 1 [0129.552] SetErrorMode (uMode=0x1) returned 0x0 [0129.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ebd4c30a0a1d17d352ed6e095aa363915e38384"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.553] SetErrorMode (uMode=0x0) returned 0x1 [0129.553] GetFileType (hFile=0x230) returned 0x1 [0129.553] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.569] SetErrorMode (uMode=0x1) returned 0x0 [0129.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ebd4c30a0a1d17d352ed6e095aa363915e38384"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82895c80, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82895c80, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fad804e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0129.569] SetErrorMode (uMode=0x0) returned 0x1 [0129.569] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ebd4c30a0a1d17d352ed6e095aa363915e38384"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8EBD4C30A0A1D17D352ED6E095AA363915E38384.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8ebd4c30a0a1d17d352ed6e095aa363915e38384.partially.cryptonar")) returned 1 [0129.570] SetErrorMode (uMode=0x1) returned 0x0 [0129.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f27e0dd6b745a71bfef380695a51d56f3ef3131"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.571] SetErrorMode (uMode=0x0) returned 0x1 [0129.571] GetFileType (hFile=0x230) returned 0x1 [0129.571] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.584] SetErrorMode (uMode=0x1) returned 0x0 [0129.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f27e0dd6b745a71bfef380695a51d56f3ef3131"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48defa6b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48defa6b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4fafe2d0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42d)) returned 1 [0129.584] SetErrorMode (uMode=0x0) returned 0x1 [0129.584] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f27e0dd6b745a71bfef380695a51d56f3ef3131"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F27E0DD6B745A71BFEF380695A51D56F3EF3131.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f27e0dd6b745a71bfef380695a51d56f3ef3131.partially.cryptonar")) returned 1 [0129.586] SetErrorMode (uMode=0x1) returned 0x0 [0129.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f66570022be064d8fb444e6fd0228a3516536d2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.587] SetErrorMode (uMode=0x0) returned 0x1 [0129.587] GetFileType (hFile=0x230) returned 0x1 [0129.587] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.606] SetErrorMode (uMode=0x1) returned 0x0 [0129.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f66570022be064d8fb444e6fd0228a3516536d2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0612806, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe0612806, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4fb4a797, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1aeb)) returned 1 [0129.607] SetErrorMode (uMode=0x0) returned 0x1 [0129.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f66570022be064d8fb444e6fd0228a3516536d2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8F66570022BE064D8FB444E6FD0228A3516536D2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8f66570022be064d8fb444e6fd0228a3516536d2.partially.cryptonar")) returned 1 [0129.608] SetErrorMode (uMode=0x1) returned 0x0 [0129.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8fc28c2700f124c5a21f0a4c78dd979612c11402"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.609] SetErrorMode (uMode=0x0) returned 0x1 [0129.609] GetFileType (hFile=0x230) returned 0x1 [0129.609] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.635] SetErrorMode (uMode=0x1) returned 0x0 [0129.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8fc28c2700f124c5a21f0a4c78dd979612c11402"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86246790, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86246790, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fb70a9b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1277)) returned 1 [0129.635] SetErrorMode (uMode=0x0) returned 0x1 [0129.636] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8fc28c2700f124c5a21f0a4c78dd979612c11402"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\8FC28C2700F124C5A21F0A4C78DD979612C11402.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\8fc28c2700f124c5a21f0a4c78dd979612c11402.partially.cryptonar")) returned 1 [0129.637] SetErrorMode (uMode=0x1) returned 0x0 [0129.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9003ff2348afef56e6377cf6330a59048823186d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.638] SetErrorMode (uMode=0x0) returned 0x1 [0129.638] GetFileType (hFile=0x230) returned 0x1 [0129.638] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.686] WriteFile (in: hFile=0x230, lpBuffer=0x26bb860*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26bb860*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0129.686] SetErrorMode (uMode=0x1) returned 0x0 [0129.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9003ff2348afef56e6377cf6330a59048823186d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b14f76, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87b14f76, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fc0b17c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0129.686] SetErrorMode (uMode=0x0) returned 0x1 [0129.686] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9003ff2348afef56e6377cf6330a59048823186d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9003FF2348AFEF56E6377CF6330A59048823186D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9003ff2348afef56e6377cf6330a59048823186d.partially.cryptonar")) returned 1 [0129.688] SetErrorMode (uMode=0x1) returned 0x0 [0129.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9097930649fe7a5ed5c370e284f3159b56458eff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.689] SetErrorMode (uMode=0x0) returned 0x1 [0129.689] GetFileType (hFile=0x230) returned 0x1 [0129.689] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.710] SetErrorMode (uMode=0x1) returned 0x0 [0129.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9097930649fe7a5ed5c370e284f3159b56458eff"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc269999d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc269999d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4fc2f724, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1124)) returned 1 [0129.710] SetErrorMode (uMode=0x0) returned 0x1 [0129.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9097930649fe7a5ed5c370e284f3159b56458eff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9097930649FE7A5ED5C370E284F3159B56458EFF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9097930649fe7a5ed5c370e284f3159b56458eff.partially.cryptonar")) returned 1 [0129.712] SetErrorMode (uMode=0x1) returned 0x0 [0129.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\90b5a4dfa3d04ffcc1c2205e680cba62807b3285"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.713] SetErrorMode (uMode=0x0) returned 0x1 [0129.713] GetFileType (hFile=0x230) returned 0x1 [0129.713] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.752] SetErrorMode (uMode=0x1) returned 0x0 [0129.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\90b5a4dfa3d04ffcc1c2205e680cba62807b3285"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862f3d2c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x862f3d2c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fca1d89, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1233)) returned 1 [0129.752] SetErrorMode (uMode=0x0) returned 0x1 [0129.752] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\90b5a4dfa3d04ffcc1c2205e680cba62807b3285"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\90B5A4DFA3D04FFCC1C2205E680CBA62807B3285.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\90b5a4dfa3d04ffcc1c2205e680cba62807b3285.partially.cryptonar")) returned 1 [0129.753] SetErrorMode (uMode=0x1) returned 0x0 [0129.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\911bfefe1daca4bc169b5c5d19d4e9e4c2e17924"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.755] SetErrorMode (uMode=0x0) returned 0x1 [0129.755] GetFileType (hFile=0x230) returned 0x1 [0129.755] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.771] SetErrorMode (uMode=0x1) returned 0x0 [0129.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\911bfefe1daca4bc169b5c5d19d4e9e4c2e17924"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c20ab54, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c20ab54, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fcc7f93, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa05)) returned 1 [0129.771] SetErrorMode (uMode=0x0) returned 0x1 [0129.771] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\911bfefe1daca4bc169b5c5d19d4e9e4c2e17924"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\911BFEFE1DACA4BC169B5C5D19D4E9E4C2E17924.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\911bfefe1daca4bc169b5c5d19d4e9e4c2e17924.partially.cryptonar")) returned 1 [0129.773] SetErrorMode (uMode=0x1) returned 0x0 [0129.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\912362c536960bd3b81aef8024aef4bce0bec8ef"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.774] SetErrorMode (uMode=0x0) returned 0x1 [0129.774] GetFileType (hFile=0x230) returned 0x1 [0129.774] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.820] SetErrorMode (uMode=0x1) returned 0x0 [0129.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\912362c536960bd3b81aef8024aef4bce0bec8ef"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549499fa, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549499fa, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4fd582e4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ef0)) returned 1 [0129.820] SetErrorMode (uMode=0x0) returned 0x1 [0129.820] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\912362c536960bd3b81aef8024aef4bce0bec8ef"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\912362C536960BD3B81AEF8024AEF4BCE0BEC8EF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\912362c536960bd3b81aef8024aef4bce0bec8ef.partially.cryptonar")) returned 1 [0129.822] SetErrorMode (uMode=0x1) returned 0x0 [0129.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\915818cb6d8b5c4b402f57730ddc15e3c33a0bcc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.823] SetErrorMode (uMode=0x0) returned 0x1 [0129.823] GetFileType (hFile=0x230) returned 0x1 [0129.823] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.844] SetErrorMode (uMode=0x1) returned 0x0 [0129.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\915818cb6d8b5c4b402f57730ddc15e3c33a0bcc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c420c18, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c420c18, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fd6cf02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfaab)) returned 1 [0129.844] SetErrorMode (uMode=0x0) returned 0x1 [0129.844] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\915818cb6d8b5c4b402f57730ddc15e3c33a0bcc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\915818CB6D8B5C4B402F57730DDC15E3C33A0BCC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\915818cb6d8b5c4b402f57730ddc15e3c33a0bcc.partially.cryptonar")) returned 1 [0129.846] SetErrorMode (uMode=0x1) returned 0x0 [0129.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91b49a7be9b6470cc38db1b7807ef7ab77e643ce"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.847] SetErrorMode (uMode=0x0) returned 0x1 [0129.847] GetFileType (hFile=0x230) returned 0x1 [0129.847] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.909] SetErrorMode (uMode=0x1) returned 0x0 [0129.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91b49a7be9b6470cc38db1b7807ef7ab77e643ce"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x896b3b6b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x896b3b6b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fe2bd61, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0129.910] SetErrorMode (uMode=0x0) returned 0x1 [0129.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91b49a7be9b6470cc38db1b7807ef7ab77e643ce"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91B49A7BE9B6470CC38DB1B7807EF7AB77E643CE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91b49a7be9b6470cc38db1b7807ef7ab77e643ce.partially.cryptonar")) returned 1 [0129.911] SetErrorMode (uMode=0x1) returned 0x0 [0129.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91de0a67543f5514405172df5ad0254558e1052f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.912] SetErrorMode (uMode=0x0) returned 0x1 [0129.912] GetFileType (hFile=0x230) returned 0x1 [0129.912] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.945] SetErrorMode (uMode=0x1) returned 0x0 [0129.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91de0a67543f5514405172df5ad0254558e1052f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4fe78316, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0129.945] SetErrorMode (uMode=0x0) returned 0x1 [0129.945] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91de0a67543f5514405172df5ad0254558e1052f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\91DE0A67543F5514405172DF5AD0254558E1052F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\91de0a67543f5514405172df5ad0254558e1052f.partially.cryptonar")) returned 1 [0129.946] SetErrorMode (uMode=0x1) returned 0x0 [0129.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\929bcf811537ce5a1b05bc367e7d5fcd9d1512c2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.947] SetErrorMode (uMode=0x0) returned 0x1 [0129.947] GetFileType (hFile=0x230) returned 0x1 [0129.947] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.948] SetErrorMode (uMode=0x1) returned 0x0 [0129.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\929bcf811537ce5a1b05bc367e7d5fcd9d1512c2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41b22b1f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x41b22b1f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4fe78316, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0129.948] SetErrorMode (uMode=0x0) returned 0x1 [0129.948] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\929bcf811537ce5a1b05bc367e7d5fcd9d1512c2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\929BCF811537CE5A1B05BC367E7D5FCD9D1512C2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\929bcf811537ce5a1b05bc367e7d5fcd9d1512c2.partially.cryptonar")) returned 1 [0129.950] SetErrorMode (uMode=0x1) returned 0x0 [0129.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\931f2eefc041cac80bd66611e79c03b3146e557a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.950] SetErrorMode (uMode=0x0) returned 0x1 [0129.950] GetFileType (hFile=0x230) returned 0x1 [0129.951] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.980] SetErrorMode (uMode=0x1) returned 0x0 [0129.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\931f2eefc041cac80bd66611e79c03b3146e557a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82105a0f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82105a0f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4fec47e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf7)) returned 1 [0129.980] SetErrorMode (uMode=0x0) returned 0x1 [0129.980] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\931f2eefc041cac80bd66611e79c03b3146e557a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\931F2EEFC041CAC80BD66611E79C03B3146E557A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\931f2eefc041cac80bd66611e79c03b3146e557a.partially.cryptonar")) returned 1 [0129.982] SetErrorMode (uMode=0x1) returned 0x0 [0129.982] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9389a36571ab4e34e35e26aedcf49d9554459ad7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.983] SetErrorMode (uMode=0x0) returned 0x1 [0129.983] GetFileType (hFile=0x230) returned 0x1 [0129.983] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0129.991] SetErrorMode (uMode=0x1) returned 0x0 [0129.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9389a36571ab4e34e35e26aedcf49d9554459ad7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x4feea919, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c52)) returned 1 [0129.992] SetErrorMode (uMode=0x0) returned 0x1 [0129.992] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9389a36571ab4e34e35e26aedcf49d9554459ad7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9389A36571AB4E34E35E26AEDCF49D9554459AD7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9389a36571ab4e34e35e26aedcf49d9554459ad7.partially.cryptonar")) returned 1 [0129.993] SetErrorMode (uMode=0x1) returned 0x0 [0129.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\941a1b56bb6c49802b2d2c51ed172a4a9f7d360c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0129.994] SetErrorMode (uMode=0x0) returned 0x1 [0129.994] GetFileType (hFile=0x230) returned 0x1 [0129.994] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.005] SetErrorMode (uMode=0x1) returned 0x0 [0130.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\941a1b56bb6c49802b2d2c51ed172a4a9f7d360c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4547bba0, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4547bba0, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x4ff1831b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4a87)) returned 1 [0130.005] SetErrorMode (uMode=0x0) returned 0x1 [0130.005] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\941a1b56bb6c49802b2d2c51ed172a4a9f7d360c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\941A1B56BB6C49802B2D2C51ED172A4A9F7D360C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\941a1b56bb6c49802b2d2c51ed172a4a9f7d360c.partially.cryptonar")) returned 1 [0130.007] SetErrorMode (uMode=0x1) returned 0x0 [0130.007] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9437da7680859789102972ed376085a988b0dc1f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.008] SetErrorMode (uMode=0x0) returned 0x1 [0130.008] GetFileType (hFile=0x230) returned 0x1 [0130.008] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.042] SetErrorMode (uMode=0x1) returned 0x0 [0130.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9437da7680859789102972ed376085a988b0dc1f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x4ff5d11c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1136)) returned 1 [0130.043] SetErrorMode (uMode=0x0) returned 0x1 [0130.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9437da7680859789102972ed376085a988b0dc1f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9437DA7680859789102972ED376085A988B0DC1F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9437da7680859789102972ed376085a988b0dc1f.partially.cryptonar")) returned 1 [0130.046] SetErrorMode (uMode=0x1) returned 0x0 [0130.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\94ebd8ae2b4a80b3785cc414ecd6bd2e73a7401e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.047] SetErrorMode (uMode=0x0) returned 0x1 [0130.048] GetFileType (hFile=0x230) returned 0x1 [0130.048] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.058] SetErrorMode (uMode=0x1) returned 0x0 [0130.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\94ebd8ae2b4a80b3785cc414ecd6bd2e73a7401e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca3ccc6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7ca3ccc6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ff83280, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb05)) returned 1 [0130.058] SetErrorMode (uMode=0x0) returned 0x1 [0130.058] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\94ebd8ae2b4a80b3785cc414ecd6bd2e73a7401e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\94EBD8AE2B4A80B3785CC414ECD6BD2E73A7401E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\94ebd8ae2b4a80b3785cc414ecd6bd2e73a7401e.partially.cryptonar")) returned 1 [0130.060] SetErrorMode (uMode=0x1) returned 0x0 [0130.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9520cfd826ce16709baa39bae6ca5d0c77e46a47"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.061] SetErrorMode (uMode=0x0) returned 0x1 [0130.061] GetFileType (hFile=0x230) returned 0x1 [0130.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.088] SetErrorMode (uMode=0x1) returned 0x0 [0130.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9520cfd826ce16709baa39bae6ca5d0c77e46a47"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e05889, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85e05889, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x4ffcf784, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x171c7)) returned 1 [0130.089] SetErrorMode (uMode=0x0) returned 0x1 [0130.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9520cfd826ce16709baa39bae6ca5d0c77e46a47"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9520CFD826CE16709BAA39BAE6CA5D0C77E46A47.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9520cfd826ce16709baa39bae6ca5d0c77e46a47.partially.cryptonar")) returned 1 [0130.090] SetErrorMode (uMode=0x1) returned 0x0 [0130.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9583726276cc4ebfbe062c772c29dcac66e75bfe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.091] SetErrorMode (uMode=0x0) returned 0x1 [0130.091] GetFileType (hFile=0x230) returned 0x1 [0130.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.144] SetErrorMode (uMode=0x1) returned 0x0 [0130.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9583726276cc4ebfbe062c772c29dcac66e75bfe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548b1083, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548b1083, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x500681c3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x32eb)) returned 1 [0130.145] SetErrorMode (uMode=0x0) returned 0x1 [0130.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9583726276cc4ebfbe062c772c29dcac66e75bfe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9583726276CC4EBFBE062C772C29DCAC66E75BFE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9583726276cc4ebfbe062c772c29dcac66e75bfe.partially.cryptonar")) returned 1 [0130.146] SetErrorMode (uMode=0x1) returned 0x0 [0130.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\95c7da1d4957a899e9f622853c746c06faf4dc11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.147] SetErrorMode (uMode=0x0) returned 0x1 [0130.147] GetFileType (hFile=0x230) returned 0x1 [0130.147] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.167] SetErrorMode (uMode=0x1) returned 0x0 [0130.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\95c7da1d4957a899e9f622853c746c06faf4dc11"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54543a7e, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54543a7e, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5008e312, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x151de)) returned 1 [0130.168] SetErrorMode (uMode=0x0) returned 0x1 [0130.168] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\95c7da1d4957a899e9f622853c746c06faf4dc11"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\95C7DA1D4957A899E9F622853C746C06FAF4DC11.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\95c7da1d4957a899e9f622853c746c06faf4dc11.partially.cryptonar")) returned 1 [0130.169] SetErrorMode (uMode=0x1) returned 0x0 [0130.169] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96191281b2c84e3b117531ae499adf73e5070d91"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.170] SetErrorMode (uMode=0x0) returned 0x1 [0130.170] GetFileType (hFile=0x230) returned 0x1 [0130.170] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.267] SetErrorMode (uMode=0x1) returned 0x0 [0130.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96191281b2c84e3b117531ae499adf73e5070d91"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b1ebbb, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87b1ebbb, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50199264, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0130.267] SetErrorMode (uMode=0x0) returned 0x1 [0130.267] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96191281b2c84e3b117531ae499adf73e5070d91"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96191281B2C84E3B117531AE499ADF73E5070D91.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96191281b2c84e3b117531ae499adf73e5070d91.partially.cryptonar")) returned 1 [0130.268] SetErrorMode (uMode=0x1) returned 0x0 [0130.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96a77890c16ff5a4d9851aa5b45d42e21b2a35b4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.269] SetErrorMode (uMode=0x0) returned 0x1 [0130.269] GetFileType (hFile=0x230) returned 0x1 [0130.269] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.300] SetErrorMode (uMode=0x1) returned 0x0 [0130.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96a77890c16ff5a4d9851aa5b45d42e21b2a35b4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2c43316, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2c43316, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x501e59fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x25e6d)) returned 1 [0130.300] SetErrorMode (uMode=0x0) returned 0x1 [0130.300] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96a77890c16ff5a4d9851aa5b45d42e21b2a35b4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96A77890C16FF5A4D9851AA5B45D42E21B2A35B4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96a77890c16ff5a4d9851aa5b45d42e21b2a35b4.partially.cryptonar")) returned 1 [0130.302] SetErrorMode (uMode=0x1) returned 0x0 [0130.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96b50584be88dc16be9b1e1d4cc4f9900eed55b8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.303] SetErrorMode (uMode=0x0) returned 0x1 [0130.303] GetFileType (hFile=0x230) returned 0x1 [0130.303] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.336] SetErrorMode (uMode=0x1) returned 0x0 [0130.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96b50584be88dc16be9b1e1d4cc4f9900eed55b8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cd37be0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7cd37be0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x502395a1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0130.336] SetErrorMode (uMode=0x0) returned 0x1 [0130.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96b50584be88dc16be9b1e1d4cc4f9900eed55b8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\96B50584BE88DC16BE9B1E1D4CC4F9900EED55B8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\96b50584be88dc16be9b1e1d4cc4f9900eed55b8.partially.cryptonar")) returned 1 [0130.338] SetErrorMode (uMode=0x1) returned 0x0 [0130.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\97409c15e729461dc4ff96e79f878a0a8817c034"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.339] SetErrorMode (uMode=0x0) returned 0x1 [0130.339] GetFileType (hFile=0x230) returned 0x1 [0130.339] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.348] SetErrorMode (uMode=0x1) returned 0x0 [0130.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\97409c15e729461dc4ff96e79f878a0a8817c034"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fca2933, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fca2933, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50257fa3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2d750)) returned 1 [0130.348] SetErrorMode (uMode=0x0) returned 0x1 [0130.348] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\97409c15e729461dc4ff96e79f878a0a8817c034"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\97409C15E729461DC4FF96E79F878A0A8817C034.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\97409c15e729461dc4ff96e79f878a0a8817c034.partially.cryptonar")) returned 1 [0130.350] SetErrorMode (uMode=0x1) returned 0x0 [0130.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\975c1b9a5e1a08ca19a7a35290f12ad97d4268eb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.351] SetErrorMode (uMode=0x0) returned 0x1 [0130.351] GetFileType (hFile=0x230) returned 0x1 [0130.351] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.364] SetErrorMode (uMode=0x1) returned 0x0 [0130.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\975c1b9a5e1a08ca19a7a35290f12ad97d4268eb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf8c5a7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bf8c5a7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5027e1f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0130.364] SetErrorMode (uMode=0x0) returned 0x1 [0130.364] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\975c1b9a5e1a08ca19a7a35290f12ad97d4268eb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\975C1B9A5E1A08CA19A7A35290F12AD97D4268EB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\975c1b9a5e1a08ca19a7a35290f12ad97d4268eb.partially.cryptonar")) returned 1 [0130.365] SetErrorMode (uMode=0x1) returned 0x0 [0130.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\979c819d6c7504d17bb5a3f483ada0c1ff961e27"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.366] SetErrorMode (uMode=0x0) returned 0x1 [0130.366] GetFileType (hFile=0x230) returned 0x1 [0130.366] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.385] SetErrorMode (uMode=0x1) returned 0x0 [0130.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\979c819d6c7504d17bb5a3f483ada0c1ff961e27"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x502a4410, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdfc)) returned 1 [0130.385] SetErrorMode (uMode=0x0) returned 0x1 [0130.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\979c819d6c7504d17bb5a3f483ada0c1ff961e27"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\979C819D6C7504D17BB5A3F483ADA0C1FF961E27.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\979c819d6c7504d17bb5a3f483ada0c1ff961e27.partially.cryptonar")) returned 1 [0130.386] SetErrorMode (uMode=0x1) returned 0x0 [0130.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9882a29b72713c4ca8e5a9bb58d0d0e29a9b9598"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.387] SetErrorMode (uMode=0x0) returned 0x1 [0130.388] GetFileType (hFile=0x230) returned 0x1 [0130.388] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.415] SetErrorMode (uMode=0x1) returned 0x0 [0130.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9882a29b72713c4ca8e5a9bb58d0d0e29a9b9598"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ac9c95, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82ac9c95, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x502f09bb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xadb)) returned 1 [0130.415] SetErrorMode (uMode=0x0) returned 0x1 [0130.415] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9882a29b72713c4ca8e5a9bb58d0d0e29a9b9598"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9882A29B72713C4CA8E5A9BB58D0D0E29A9B9598.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9882a29b72713c4ca8e5a9bb58d0d0e29a9b9598.partially.cryptonar")) returned 1 [0130.417] SetErrorMode (uMode=0x1) returned 0x0 [0130.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\98cac6d4d596c92f0e63de8392e62bd4e731649b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.419] SetErrorMode (uMode=0x0) returned 0x1 [0130.419] GetFileType (hFile=0x230) returned 0x1 [0130.419] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.475] SetErrorMode (uMode=0x1) returned 0x0 [0130.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\98cac6d4d596c92f0e63de8392e62bd4e731649b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f067eb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42f067eb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x503893a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc60)) returned 1 [0130.476] SetErrorMode (uMode=0x0) returned 0x1 [0130.476] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\98cac6d4d596c92f0e63de8392e62bd4e731649b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\98CAC6D4D596C92F0E63DE8392E62BD4E731649B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\98cac6d4d596c92f0e63de8392e62bd4e731649b.partially.cryptonar")) returned 1 [0130.477] SetErrorMode (uMode=0x1) returned 0x0 [0130.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\994152a6629e97b62fe91526f3dca909e7ed6e79"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.478] SetErrorMode (uMode=0x0) returned 0x1 [0130.478] GetFileType (hFile=0x230) returned 0x1 [0130.479] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.480] SetErrorMode (uMode=0x1) returned 0x0 [0130.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\994152a6629e97b62fe91526f3dca909e7ed6e79"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3475060, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf3475060, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x503893a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb4e4)) returned 1 [0130.481] SetErrorMode (uMode=0x0) returned 0x1 [0130.481] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\994152a6629e97b62fe91526f3dca909e7ed6e79"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\994152A6629E97B62FE91526F3DCA909E7ED6E79.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\994152a6629e97b62fe91526f3dca909e7ed6e79.partially.cryptonar")) returned 1 [0130.482] SetErrorMode (uMode=0x1) returned 0x0 [0130.482] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\996ff69b28b46aa08240d5b033726e178ea73f53"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.483] SetErrorMode (uMode=0x0) returned 0x1 [0130.483] GetFileType (hFile=0x230) returned 0x1 [0130.483] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.526] SetErrorMode (uMode=0x1) returned 0x0 [0130.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\996ff69b28b46aa08240d5b033726e178ea73f53"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f17fc2, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2f17fc2, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x503fb9ae, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0130.526] SetErrorMode (uMode=0x0) returned 0x1 [0130.526] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\996ff69b28b46aa08240d5b033726e178ea73f53"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\996FF69B28B46AA08240D5B033726E178EA73F53.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\996ff69b28b46aa08240d5b033726e178ea73f53.partially.cryptonar")) returned 1 [0130.528] SetErrorMode (uMode=0x1) returned 0x0 [0130.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9acb6c9d19d869c115786c54ea81f2353b7f838d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.529] SetErrorMode (uMode=0x0) returned 0x1 [0130.529] GetFileType (hFile=0x230) returned 0x1 [0130.529] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.561] SetErrorMode (uMode=0x1) returned 0x0 [0130.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9acb6c9d19d869c115786c54ea81f2353b7f838d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e705b6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e705b6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x50447e00, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x429)) returned 1 [0130.561] SetErrorMode (uMode=0x0) returned 0x1 [0130.561] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9acb6c9d19d869c115786c54ea81f2353b7f838d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9ACB6C9D19D869C115786C54EA81F2353B7F838D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9acb6c9d19d869c115786c54ea81f2353b7f838d.partially.cryptonar")) returned 1 [0130.563] SetErrorMode (uMode=0x1) returned 0x0 [0130.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9b388a82e44baae48d6f9967937d48ac2eda3127"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.564] SetErrorMode (uMode=0x0) returned 0x1 [0130.564] GetFileType (hFile=0x230) returned 0x1 [0130.565] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.589] SetErrorMode (uMode=0x1) returned 0x0 [0130.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9b388a82e44baae48d6f9967937d48ac2eda3127"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54fb1f26, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54fb1f26, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5049569d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x82c4)) returned 1 [0130.589] SetErrorMode (uMode=0x0) returned 0x1 [0130.589] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9b388a82e44baae48d6f9967937d48ac2eda3127"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9B388A82E44BAAE48D6F9967937D48AC2EDA3127.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9b388a82e44baae48d6f9967937d48ac2eda3127.partially.cryptonar")) returned 1 [0130.591] SetErrorMode (uMode=0x1) returned 0x0 [0130.591] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9bc05fc50582eca836df8f673699d925643af8b7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.592] SetErrorMode (uMode=0x0) returned 0x1 [0130.592] GetFileType (hFile=0x230) returned 0x1 [0130.592] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.594] SetErrorMode (uMode=0x1) returned 0x0 [0130.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9bc05fc50582eca836df8f673699d925643af8b7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459d9052, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459d9052, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5049569d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x452)) returned 1 [0130.594] SetErrorMode (uMode=0x0) returned 0x1 [0130.594] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9bc05fc50582eca836df8f673699d925643af8b7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9BC05FC50582ECA836DF8F673699D925643AF8B7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9bc05fc50582eca836df8f673699d925643af8b7.partially.cryptonar")) returned 1 [0130.598] SetErrorMode (uMode=0x1) returned 0x0 [0130.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9cb1507e8150b6a3a9d726112952a7150ea6236d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.599] SetErrorMode (uMode=0x0) returned 0x1 [0130.599] GetFileType (hFile=0x230) returned 0x1 [0130.599] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.632] SetErrorMode (uMode=0x1) returned 0x0 [0130.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9cb1507e8150b6a3a9d726112952a7150ea6236d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef34db0, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef34db0, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50506955, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1088b)) returned 1 [0130.632] SetErrorMode (uMode=0x0) returned 0x1 [0130.632] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9cb1507e8150b6a3a9d726112952a7150ea6236d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9CB1507E8150B6A3A9D726112952A7150EA6236D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9cb1507e8150b6a3a9d726112952a7150ea6236d.partially.cryptonar")) returned 1 [0130.634] SetErrorMode (uMode=0x1) returned 0x0 [0130.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9d583dd5ebc7a2dd954f1ec3d377f78dd56656cd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.635] SetErrorMode (uMode=0x0) returned 0x1 [0130.635] GetFileType (hFile=0x230) returned 0x1 [0130.635] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.647] SetErrorMode (uMode=0x1) returned 0x0 [0130.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9d583dd5ebc7a2dd954f1ec3d377f78dd56656cd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2a72695, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2a72695, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5052cbc8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe72)) returned 1 [0130.647] SetErrorMode (uMode=0x0) returned 0x1 [0130.647] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9d583dd5ebc7a2dd954f1ec3d377f78dd56656cd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9D583DD5EBC7A2DD954F1EC3D377F78DD56656CD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9d583dd5ebc7a2dd954f1ec3d377f78dd56656cd.partially.cryptonar")) returned 1 [0130.649] SetErrorMode (uMode=0x1) returned 0x0 [0130.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9dca33818f5a4335c123c5512eddb0d08852b5bc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.650] SetErrorMode (uMode=0x0) returned 0x1 [0130.650] GetFileType (hFile=0x230) returned 0x1 [0130.650] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.713] SetErrorMode (uMode=0x1) returned 0x0 [0130.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9dca33818f5a4335c123c5512eddb0d08852b5bc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4dca4da, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4dca4da, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x505c6b99, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1840f)) returned 1 [0130.713] SetErrorMode (uMode=0x0) returned 0x1 [0130.713] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9dca33818f5a4335c123c5512eddb0d08852b5bc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9DCA33818F5A4335C123C5512EDDB0D08852B5BC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9dca33818f5a4335c123c5512eddb0d08852b5bc.partially.cryptonar")) returned 1 [0130.715] SetErrorMode (uMode=0x1) returned 0x0 [0130.715] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e3a50ec9bae611478e026d6f01591882657de94"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.715] SetErrorMode (uMode=0x0) returned 0x1 [0130.716] GetFileType (hFile=0x230) returned 0x1 [0130.716] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.717] SetErrorMode (uMode=0x1) returned 0x0 [0130.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e3a50ec9bae611478e026d6f01591882657de94"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x811f386e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x811f386e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x505c6b99, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16f12)) returned 1 [0130.717] SetErrorMode (uMode=0x0) returned 0x1 [0130.718] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e3a50ec9bae611478e026d6f01591882657de94"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E3A50EC9BAE611478E026D6F01591882657DE94.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e3a50ec9bae611478e026d6f01591882657de94.partially.cryptonar")) returned 1 [0130.719] SetErrorMode (uMode=0x1) returned 0x0 [0130.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e62aafd59e8d16cbdea929439408b6e96ba7117"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.720] SetErrorMode (uMode=0x0) returned 0x1 [0130.720] GetFileType (hFile=0x230) returned 0x1 [0130.720] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.755] SetErrorMode (uMode=0x1) returned 0x0 [0130.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e62aafd59e8d16cbdea929439408b6e96ba7117"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42f52cd6, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42f52cd6, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x50637cf2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc5f)) returned 1 [0130.755] SetErrorMode (uMode=0x0) returned 0x1 [0130.755] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e62aafd59e8d16cbdea929439408b6e96ba7117"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E62AAFD59E8D16CBDEA929439408B6E96BA7117.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e62aafd59e8d16cbdea929439408b6e96ba7117.partially.cryptonar")) returned 1 [0130.757] SetErrorMode (uMode=0x1) returned 0x0 [0130.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e9b7254db86aada6f1e1ea84f14c13de088bffc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.758] SetErrorMode (uMode=0x0) returned 0x1 [0130.758] GetFileType (hFile=0x230) returned 0x1 [0130.758] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.783] SetErrorMode (uMode=0x1) returned 0x0 [0130.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e9b7254db86aada6f1e1ea84f14c13de088bffc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45eea05d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x45eea05d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x506841b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x156d)) returned 1 [0130.783] SetErrorMode (uMode=0x0) returned 0x1 [0130.783] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e9b7254db86aada6f1e1ea84f14c13de088bffc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9E9B7254DB86AADA6F1E1EA84F14C13DE088BFFC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9e9b7254db86aada6f1e1ea84f14c13de088bffc.partially.cryptonar")) returned 1 [0130.785] SetErrorMode (uMode=0x1) returned 0x0 [0130.785] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f4521aea8b0157813ba5c1335558df917e3a311"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.786] SetErrorMode (uMode=0x0) returned 0x1 [0130.786] GetFileType (hFile=0x230) returned 0x1 [0130.786] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.787] SetErrorMode (uMode=0x1) returned 0x0 [0130.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f4521aea8b0157813ba5c1335558df917e3a311"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46257681, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46257681, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x506841b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x539)) returned 1 [0130.787] SetErrorMode (uMode=0x0) returned 0x1 [0130.788] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f4521aea8b0157813ba5c1335558df917e3a311"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F4521AEA8B0157813BA5C1335558DF917E3A311.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f4521aea8b0157813ba5c1335558df917e3a311.partially.cryptonar")) returned 1 [0130.789] SetErrorMode (uMode=0x1) returned 0x0 [0130.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f651a43713c608823431125b0c4b181b8e2c60f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.789] SetErrorMode (uMode=0x0) returned 0x1 [0130.789] GetFileType (hFile=0x230) returned 0x1 [0130.789] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.791] SetErrorMode (uMode=0x1) returned 0x0 [0130.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f651a43713c608823431125b0c4b181b8e2c60f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a07e825, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a07e825, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x506841b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1261)) returned 1 [0130.791] SetErrorMode (uMode=0x0) returned 0x1 [0130.791] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f651a43713c608823431125b0c4b181b8e2c60f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\9F651A43713C608823431125B0C4B181B8E2C60F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\9f651a43713c608823431125b0c4b181b8e2c60f.partially.cryptonar")) returned 1 [0130.792] SetErrorMode (uMode=0x1) returned 0x0 [0130.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a21065f31ee0058531f754d1f9331e5ac5b3e1cc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.793] SetErrorMode (uMode=0x0) returned 0x1 [0130.793] GetFileType (hFile=0x230) returned 0x1 [0130.793] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.804] SetErrorMode (uMode=0x1) returned 0x0 [0130.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a21065f31ee0058531f754d1f9331e5ac5b3e1cc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda5a53b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda5a53b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x506ba3d8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c4b)) returned 1 [0130.804] SetErrorMode (uMode=0x0) returned 0x1 [0130.804] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a21065f31ee0058531f754d1f9331e5ac5b3e1cc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A21065F31EE0058531F754D1F9331E5AC5B3E1CC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a21065f31ee0058531f754d1f9331e5ac5b3e1cc.partially.cryptonar")) returned 1 [0130.806] SetErrorMode (uMode=0x1) returned 0x0 [0130.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a3ae39e0fb78e2f298326d61c876a88868e131ec"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.807] SetErrorMode (uMode=0x0) returned 0x1 [0130.807] GetFileType (hFile=0x230) returned 0x1 [0130.807] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.809] SetErrorMode (uMode=0x1) returned 0x0 [0130.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a3ae39e0fb78e2f298326d61c876a88868e131ec"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c8a856, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87c8a856, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x506c7a53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2700)) returned 1 [0130.809] SetErrorMode (uMode=0x0) returned 0x1 [0130.810] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a3ae39e0fb78e2f298326d61c876a88868e131ec"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A3AE39E0FB78E2F298326D61C876A88868E131EC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a3ae39e0fb78e2f298326d61c876a88868e131ec.partially.cryptonar")) returned 1 [0130.812] SetErrorMode (uMode=0x1) returned 0x0 [0130.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a452e838ff9e4634826be621406d0a260dab4fd8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.814] SetErrorMode (uMode=0x0) returned 0x1 [0130.814] GetFileType (hFile=0x230) returned 0x1 [0130.814] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.828] SetErrorMode (uMode=0x1) returned 0x0 [0130.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a452e838ff9e4634826be621406d0a260dab4fd8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478c6c4d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x478c6c4d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x506f5f9b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1 [0130.829] SetErrorMode (uMode=0x0) returned 0x1 [0130.829] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a452e838ff9e4634826be621406d0a260dab4fd8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A452E838FF9E4634826BE621406D0A260DAB4FD8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a452e838ff9e4634826be621406d0a260dab4fd8.partially.cryptonar")) returned 1 [0130.831] SetErrorMode (uMode=0x1) returned 0x0 [0130.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a4855879501a8287b513b14a31ce831c3c6f2fd2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.832] SetErrorMode (uMode=0x0) returned 0x1 [0130.832] GetFileType (hFile=0x230) returned 0x1 [0130.832] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.839] SetErrorMode (uMode=0x1) returned 0x0 [0130.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a4855879501a8287b513b14a31ce831c3c6f2fd2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x99fc6147, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x99fc6147, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x506fc133, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0130.840] SetErrorMode (uMode=0x0) returned 0x1 [0130.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a4855879501a8287b513b14a31ce831c3c6f2fd2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A4855879501A8287B513B14A31CE831C3C6F2FD2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a4855879501a8287b513b14a31ce831c3c6f2fd2.partially.cryptonar")) returned 1 [0130.841] SetErrorMode (uMode=0x1) returned 0x0 [0130.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a54b398703e64482d4c0347214229ab910e990dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.842] SetErrorMode (uMode=0x0) returned 0x1 [0130.842] GetFileType (hFile=0x230) returned 0x1 [0130.842] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.844] SetErrorMode (uMode=0x1) returned 0x0 [0130.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a54b398703e64482d4c0347214229ab910e990dc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf34924d0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf34924d0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x506fc133, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a86)) returned 1 [0130.845] SetErrorMode (uMode=0x0) returned 0x1 [0130.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a54b398703e64482d4c0347214229ab910e990dc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A54B398703E64482D4C0347214229AB910E990DC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a54b398703e64482d4c0347214229ab910e990dc.partially.cryptonar")) returned 1 [0130.846] SetErrorMode (uMode=0x1) returned 0x0 [0130.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5ce6011cbc78912c62950ef4d2f8ec1217240b0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.847] SetErrorMode (uMode=0x0) returned 0x1 [0130.847] GetFileType (hFile=0x230) returned 0x1 [0130.847] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.849] SetErrorMode (uMode=0x1) returned 0x0 [0130.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5ce6011cbc78912c62950ef4d2f8ec1217240b0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x507225a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12fd)) returned 1 [0130.849] SetErrorMode (uMode=0x0) returned 0x1 [0130.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5ce6011cbc78912c62950ef4d2f8ec1217240b0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5CE6011CBC78912C62950EF4D2F8EC1217240B0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5ce6011cbc78912c62950ef4d2f8ec1217240b0.partially.cryptonar")) returned 1 [0130.851] SetErrorMode (uMode=0x1) returned 0x0 [0130.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5fa9ddf296e0470e37d76cf07a3eb57c576526b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.852] SetErrorMode (uMode=0x0) returned 0x1 [0130.852] GetFileType (hFile=0x230) returned 0x1 [0130.852] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.853] SetErrorMode (uMode=0x1) returned 0x0 [0130.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5fa9ddf296e0470e37d76cf07a3eb57c576526b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81fe7f84, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x81fe7f84, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x507225a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1 [0130.854] SetErrorMode (uMode=0x0) returned 0x1 [0130.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5fa9ddf296e0470e37d76cf07a3eb57c576526b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A5FA9DDF296E0470E37D76CF07A3EB57C576526B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a5fa9ddf296e0470e37d76cf07a3eb57c576526b.partially.cryptonar")) returned 1 [0130.856] SetErrorMode (uMode=0x1) returned 0x0 [0130.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a615d0218839bb4f69554eb267c1fe664667ee08"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.857] SetErrorMode (uMode=0x0) returned 0x1 [0130.857] GetFileType (hFile=0x230) returned 0x1 [0130.857] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.954] SetErrorMode (uMode=0x1) returned 0x0 [0130.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a615d0218839bb4f69554eb267c1fe664667ee08"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46bbaac8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46bbaac8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x50807494, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e70)) returned 1 [0130.954] SetErrorMode (uMode=0x0) returned 0x1 [0130.955] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a615d0218839bb4f69554eb267c1fe664667ee08"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A615D0218839BB4F69554EB267C1FE664667EE08.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a615d0218839bb4f69554eb267c1fe664667ee08.partially.cryptonar")) returned 1 [0130.957] SetErrorMode (uMode=0x1) returned 0x0 [0130.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6225aaa26d69ee93799c2ada0a886e6efe3f005"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.958] SetErrorMode (uMode=0x0) returned 0x1 [0130.958] GetFileType (hFile=0x230) returned 0x1 [0130.959] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0130.973] SetErrorMode (uMode=0x1) returned 0x0 [0130.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6225aaa26d69ee93799c2ada0a886e6efe3f005"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0c2d21, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0c2d21, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x508564bc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f32)) returned 1 [0130.973] SetErrorMode (uMode=0x0) returned 0x1 [0130.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6225aaa26d69ee93799c2ada0a886e6efe3f005"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6225AAA26D69EE93799C2ADA0A886E6EFE3F005.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6225aaa26d69ee93799c2ada0a886e6efe3f005.partially.cryptonar")) returned 1 [0130.975] SetErrorMode (uMode=0x1) returned 0x0 [0130.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6a0642cce1a0de96c87ad670cce93587788f893"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0130.976] SetErrorMode (uMode=0x0) returned 0x1 [0130.977] GetFileType (hFile=0x230) returned 0x1 [0130.977] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.011] SetErrorMode (uMode=0x1) returned 0x0 [0131.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6a0642cce1a0de96c87ad670cce93587788f893"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f87c7d4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f87c7d4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x508b1627, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0131.011] SetErrorMode (uMode=0x0) returned 0x1 [0131.011] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6a0642cce1a0de96c87ad670cce93587788f893"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6A0642CCE1A0DE96C87AD670CCE93587788F893.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6a0642cce1a0de96c87ad670cce93587788f893.partially.cryptonar")) returned 1 [0131.013] SetErrorMode (uMode=0x1) returned 0x0 [0131.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6baa2487d35da4035fcda9d515566516c00bfdd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.014] SetErrorMode (uMode=0x0) returned 0x1 [0131.014] GetFileType (hFile=0x230) returned 0x1 [0131.014] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.044] SetErrorMode (uMode=0x1) returned 0x0 [0131.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6baa2487d35da4035fcda9d515566516c00bfdd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b32f9, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x443b32f9, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x508fb56d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0131.044] SetErrorMode (uMode=0x0) returned 0x1 [0131.044] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6baa2487d35da4035fcda9d515566516c00bfdd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A6BAA2487D35DA4035FCDA9D515566516C00BFDD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a6baa2487d35da4035fcda9d515566516c00bfdd.partially.cryptonar")) returned 1 [0131.046] SetErrorMode (uMode=0x1) returned 0x0 [0131.046] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7377cb548c4faa4bc173181cb5a845625640804"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.047] SetErrorMode (uMode=0x0) returned 0x1 [0131.047] GetFileType (hFile=0x230) returned 0x1 [0131.047] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.069] SetErrorMode (uMode=0x1) returned 0x0 [0131.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7377cb548c4faa4bc173181cb5a845625640804"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55fc670, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc55fc670, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x509218cf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0131.069] SetErrorMode (uMode=0x0) returned 0x1 [0131.069] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7377cb548c4faa4bc173181cb5a845625640804"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7377CB548C4FAA4BC173181CB5A845625640804.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7377cb548c4faa4bc173181cb5a845625640804.partially.cryptonar")) returned 1 [0131.072] SetErrorMode (uMode=0x1) returned 0x0 [0131.072] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a74c725dae07f5f191d727c460dc9607d8637705"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.073] SetErrorMode (uMode=0x0) returned 0x1 [0131.073] GetFileType (hFile=0x230) returned 0x1 [0131.073] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.162] SetErrorMode (uMode=0x1) returned 0x0 [0131.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a74c725dae07f5f191d727c460dc9607d8637705"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x555645b0, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x555645b0, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x50a082c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3616)) returned 1 [0131.162] SetErrorMode (uMode=0x0) returned 0x1 [0131.162] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a74c725dae07f5f191d727c460dc9607d8637705"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A74C725DAE07F5F191D727C460DC9607D8637705.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a74c725dae07f5f191d727c460dc9607d8637705.partially.cryptonar")) returned 1 [0131.164] SetErrorMode (uMode=0x1) returned 0x0 [0131.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a77c54626c6d859c2b8cded8c97e042e0f4620af"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.164] SetErrorMode (uMode=0x0) returned 0x1 [0131.164] GetFileType (hFile=0x230) returned 0x1 [0131.165] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.199] SetErrorMode (uMode=0x1) returned 0x0 [0131.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a77c54626c6d859c2b8cded8c97e042e0f4620af"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x819ed1bd, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x819ed1bd, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50a78d71, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf2fd)) returned 1 [0131.200] SetErrorMode (uMode=0x0) returned 0x1 [0131.200] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a77c54626c6d859c2b8cded8c97e042e0f4620af"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A77C54626C6D859C2B8CDED8C97E042E0F4620AF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a77c54626c6d859c2b8cded8c97e042e0f4620af.partially.cryptonar")) returned 1 [0131.201] SetErrorMode (uMode=0x1) returned 0x0 [0131.201] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a79a7f293c737f424e1646c7780c2d393ff20f80"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.204] SetErrorMode (uMode=0x0) returned 0x1 [0131.204] GetFileType (hFile=0x230) returned 0x1 [0131.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.278] SetErrorMode (uMode=0x1) returned 0x0 [0131.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a79a7f293c737f424e1646c7780c2d393ff20f80"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8653b59b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8653b59b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50b379da, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0131.278] SetErrorMode (uMode=0x0) returned 0x1 [0131.278] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a79a7f293c737f424e1646c7780c2d393ff20f80"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A79A7F293C737F424E1646C7780C2D393FF20F80.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a79a7f293c737f424e1646c7780c2d393ff20f80.partially.cryptonar")) returned 1 [0131.280] SetErrorMode (uMode=0x1) returned 0x0 [0131.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7a2a4920970582d0113ba088df7fd2bcd0bc1f1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.281] SetErrorMode (uMode=0x0) returned 0x1 [0131.281] GetFileType (hFile=0x230) returned 0x1 [0131.281] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.281] SetErrorMode (uMode=0x1) returned 0x0 [0131.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7a2a4920970582d0113ba088df7fd2bcd0bc1f1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886a692c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x886a692c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50b379da, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc5)) returned 1 [0131.282] SetErrorMode (uMode=0x0) returned 0x1 [0131.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7a2a4920970582d0113ba088df7fd2bcd0bc1f1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7A2A4920970582D0113BA088DF7FD2BCD0BC1F1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7a2a4920970582d0113ba088df7fd2bcd0bc1f1.partially.cryptonar")) returned 1 [0131.283] SetErrorMode (uMode=0x1) returned 0x0 [0131.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7c9ece1c490e537aeb164e08953d6e9659d47cd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.283] SetErrorMode (uMode=0x0) returned 0x1 [0131.283] GetFileType (hFile=0x230) returned 0x1 [0131.283] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.329] SetErrorMode (uMode=0x1) returned 0x0 [0131.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7c9ece1c490e537aeb164e08953d6e9659d47cd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f26b1, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f26b1, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50ba9f9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1125)) returned 1 [0131.329] SetErrorMode (uMode=0x0) returned 0x1 [0131.329] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7c9ece1c490e537aeb164e08953d6e9659d47cd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7C9ECE1C490E537AEB164E08953D6E9659D47CD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7c9ece1c490e537aeb164e08953d6e9659d47cd.partially.cryptonar")) returned 1 [0131.330] SetErrorMode (uMode=0x1) returned 0x0 [0131.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cae8a6fff01e6d9a75068a16268676e73706eb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.331] SetErrorMode (uMode=0x0) returned 0x1 [0131.331] GetFileType (hFile=0x230) returned 0x1 [0131.331] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.349] SetErrorMode (uMode=0x1) returned 0x0 [0131.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cae8a6fff01e6d9a75068a16268676e73706eb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fc56e27, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fc56e27, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50bd08b0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13d3)) returned 1 [0131.349] SetErrorMode (uMode=0x0) returned 0x1 [0131.349] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cae8a6fff01e6d9a75068a16268676e73706eb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CAE8A6FFF01E6D9A75068A16268676E73706EB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cae8a6fff01e6d9a75068a16268676e73706eb.partially.cryptonar")) returned 1 [0131.350] SetErrorMode (uMode=0x1) returned 0x0 [0131.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cb81b20a3391ab83c4a3310414c5f73ad69ff0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.351] SetErrorMode (uMode=0x0) returned 0x1 [0131.351] GetFileType (hFile=0x230) returned 0x1 [0131.351] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.353] SetErrorMode (uMode=0x1) returned 0x0 [0131.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cb81b20a3391ab83c4a3310414c5f73ad69ff0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4350ac7e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4350ac7e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x50bf62cf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd35)) returned 1 [0131.353] SetErrorMode (uMode=0x0) returned 0x1 [0131.353] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cb81b20a3391ab83c4a3310414c5f73ad69ff0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A7CB81B20A3391AB83C4A3310414C5F73AD69FF0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a7cb81b20a3391ab83c4a3310414c5f73ad69ff0.partially.cryptonar")) returned 1 [0131.354] SetErrorMode (uMode=0x1) returned 0x0 [0131.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a923c18c85e7d22d3214ba40baddfec4f2c1946a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.355] SetErrorMode (uMode=0x0) returned 0x1 [0131.355] GetFileType (hFile=0x230) returned 0x1 [0131.355] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.376] SetErrorMode (uMode=0x1) returned 0x0 [0131.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a923c18c85e7d22d3214ba40baddfec4f2c1946a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a0a41f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a0a41f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50c1c7b0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0131.376] SetErrorMode (uMode=0x0) returned 0x1 [0131.377] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a923c18c85e7d22d3214ba40baddfec4f2c1946a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A923C18C85E7D22D3214BA40BADDFEC4F2C1946A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a923c18c85e7d22d3214ba40baddfec4f2c1946a.partially.cryptonar")) returned 1 [0131.378] SetErrorMode (uMode=0x1) returned 0x0 [0131.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a924ce02c4623ad66cf438353687033a493649c0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.379] SetErrorMode (uMode=0x0) returned 0x1 [0131.379] GetFileType (hFile=0x230) returned 0x1 [0131.379] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.409] SetErrorMode (uMode=0x1) returned 0x0 [0131.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a924ce02c4623ad66cf438353687033a493649c0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86322361, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86322361, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50c6a0b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1254)) returned 1 [0131.410] SetErrorMode (uMode=0x0) returned 0x1 [0131.410] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a924ce02c4623ad66cf438353687033a493649c0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\A924CE02C4623AD66CF438353687033A493649C0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\a924ce02c4623ad66cf438353687033a493649c0.partially.cryptonar")) returned 1 [0131.412] SetErrorMode (uMode=0x1) returned 0x0 [0131.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa177c2ba237a1cf9ecb7e55c96f75db3bc33f00"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.414] SetErrorMode (uMode=0x0) returned 0x1 [0131.414] GetFileType (hFile=0x230) returned 0x1 [0131.414] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.473] SetErrorMode (uMode=0x1) returned 0x0 [0131.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa177c2ba237a1cf9ecb7e55c96f75db3bc33f00"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457e91b1, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x457e91b1, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x50d014e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18bf4)) returned 1 [0131.474] SetErrorMode (uMode=0x0) returned 0x1 [0131.474] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa177c2ba237a1cf9ecb7e55c96f75db3bc33f00"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA177C2BA237A1CF9ECB7E55C96F75DB3BC33F00.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa177c2ba237a1cf9ecb7e55c96f75db3bc33f00.partially.cryptonar")) returned 1 [0131.475] SetErrorMode (uMode=0x1) returned 0x0 [0131.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa3474876a2b69b0aeb50f15cab72645bf18f99b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.477] SetErrorMode (uMode=0x0) returned 0x1 [0131.477] GetFileType (hFile=0x230) returned 0x1 [0131.477] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.487] SetErrorMode (uMode=0x1) returned 0x0 [0131.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa3474876a2b69b0aeb50f15cab72645bf18f99b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x50d2764c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x113c)) returned 1 [0131.487] SetErrorMode (uMode=0x0) returned 0x1 [0131.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa3474876a2b69b0aeb50f15cab72645bf18f99b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AA3474876A2B69B0AEB50F15CAB72645BF18F99B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aa3474876a2b69b0aeb50f15cab72645bf18f99b.partially.cryptonar")) returned 1 [0131.488] SetErrorMode (uMode=0x1) returned 0x0 [0131.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aae0cfd840e62ed509f219eee80dbd34f1ab4601"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.489] SetErrorMode (uMode=0x0) returned 0x1 [0131.489] GetFileType (hFile=0x230) returned 0x1 [0131.489] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.512] SetErrorMode (uMode=0x1) returned 0x0 [0131.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aae0cfd840e62ed509f219eee80dbd34f1ab4601"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84fc368c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x84fc368c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50d73c19, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf5)) returned 1 [0131.513] SetErrorMode (uMode=0x0) returned 0x1 [0131.513] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aae0cfd840e62ed509f219eee80dbd34f1ab4601"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AAE0CFD840E62ED509F219EEE80DBD34F1AB4601.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aae0cfd840e62ed509f219eee80dbd34f1ab4601.partially.cryptonar")) returned 1 [0131.514] SetErrorMode (uMode=0x1) returned 0x0 [0131.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab3f4dfac8e881949b1487b51777cd625e9d7c75"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.515] SetErrorMode (uMode=0x0) returned 0x1 [0131.515] GetFileType (hFile=0x230) returned 0x1 [0131.515] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.517] SetErrorMode (uMode=0x1) returned 0x0 [0131.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab3f4dfac8e881949b1487b51777cd625e9d7c75"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544f75b8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544f75b8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x50d73c19, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11a5)) returned 1 [0131.517] SetErrorMode (uMode=0x0) returned 0x1 [0131.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab3f4dfac8e881949b1487b51777cd625e9d7c75"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB3F4DFAC8E881949B1487B51777CD625E9D7C75.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab3f4dfac8e881949b1487b51777cd625e9d7c75.partially.cryptonar")) returned 1 [0131.519] SetErrorMode (uMode=0x1) returned 0x0 [0131.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab4611569fef4b72635ad5b6e8bafc273815e7bb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.519] SetErrorMode (uMode=0x0) returned 0x1 [0131.520] GetFileType (hFile=0x230) returned 0x1 [0131.520] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.525] SetErrorMode (uMode=0x1) returned 0x0 [0131.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab4611569fef4b72635ad5b6e8bafc273815e7bb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x50d99d5e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0131.526] SetErrorMode (uMode=0x0) returned 0x1 [0131.526] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab4611569fef4b72635ad5b6e8bafc273815e7bb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB4611569FEF4B72635AD5B6E8BAFC273815E7BB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab4611569fef4b72635ad5b6e8bafc273815e7bb.partially.cryptonar")) returned 1 [0131.527] SetErrorMode (uMode=0x1) returned 0x0 [0131.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab585870ab0f856402ee28c3bfe9f839a1ed8c40"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.529] SetErrorMode (uMode=0x0) returned 0x1 [0131.529] GetFileType (hFile=0x230) returned 0x1 [0131.529] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.530] SetErrorMode (uMode=0x1) returned 0x0 [0131.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab585870ab0f856402ee28c3bfe9f839a1ed8c40"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf67ae9e9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf67ae9e9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50d99d5e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1 [0131.530] SetErrorMode (uMode=0x0) returned 0x1 [0131.530] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab585870ab0f856402ee28c3bfe9f839a1ed8c40"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB585870AB0F856402EE28C3BFE9F839A1ED8C40.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab585870ab0f856402ee28c3bfe9f839a1ed8c40.partially.cryptonar")) returned 1 [0131.532] SetErrorMode (uMode=0x1) returned 0x0 [0131.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab64da67cfd54d7d76a690466131cf5944f86377"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.533] SetErrorMode (uMode=0x0) returned 0x1 [0131.533] GetFileType (hFile=0x230) returned 0x1 [0131.533] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.560] SetErrorMode (uMode=0x1) returned 0x0 [0131.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab64da67cfd54d7d76a690466131cf5944f86377"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc264d4b3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc264d4b3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50de6395, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1329)) returned 1 [0131.560] SetErrorMode (uMode=0x0) returned 0x1 [0131.560] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab64da67cfd54d7d76a690466131cf5944f86377"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AB64DA67CFD54D7D76A690466131CF5944F86377.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ab64da67cfd54d7d76a690466131cf5944f86377.partially.cryptonar")) returned 1 [0131.562] SetErrorMode (uMode=0x1) returned 0x0 [0131.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aba24aab8a9ea0e34c3e86efd7ee2992ce614003"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.563] SetErrorMode (uMode=0x0) returned 0x1 [0131.563] GetFileType (hFile=0x230) returned 0x1 [0131.563] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.576] SetErrorMode (uMode=0x1) returned 0x0 [0131.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aba24aab8a9ea0e34c3e86efd7ee2992ce614003"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50e0c55a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1da1)) returned 1 [0131.577] SetErrorMode (uMode=0x0) returned 0x1 [0131.577] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aba24aab8a9ea0e34c3e86efd7ee2992ce614003"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABA24AAB8A9EA0E34C3E86EFD7EE2992CE614003.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aba24aab8a9ea0e34c3e86efd7ee2992ce614003.partially.cryptonar")) returned 1 [0131.578] SetErrorMode (uMode=0x1) returned 0x0 [0131.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abab5b796c3e9ff61e59d58436c93c71c17f8f3c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.579] SetErrorMode (uMode=0x0) returned 0x1 [0131.579] GetFileType (hFile=0x230) returned 0x1 [0131.579] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.600] SetErrorMode (uMode=0x1) returned 0x0 [0131.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abab5b796c3e9ff61e59d58436c93c71c17f8f3c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864a8dd3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x864a8dd3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50e327de, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10f2)) returned 1 [0131.600] SetErrorMode (uMode=0x0) returned 0x1 [0131.600] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abab5b796c3e9ff61e59d58436c93c71c17f8f3c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABAB5B796C3E9FF61E59D58436C93C71C17F8F3C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abab5b796c3e9ff61e59d58436c93c71c17f8f3c.partially.cryptonar")) returned 1 [0131.601] SetErrorMode (uMode=0x1) returned 0x0 [0131.602] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abe48add965359712aa7699f9ba83e690ee9b03e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.603] SetErrorMode (uMode=0x0) returned 0x1 [0131.603] GetFileType (hFile=0x230) returned 0x1 [0131.603] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.604] SetErrorMode (uMode=0x1) returned 0x0 [0131.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abe48add965359712aa7699f9ba83e690ee9b03e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f78ac7e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f78ac7e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50e58ae3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x575)) returned 1 [0131.604] SetErrorMode (uMode=0x0) returned 0x1 [0131.605] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abe48add965359712aa7699f9ba83e690ee9b03e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ABE48ADD965359712AA7699F9BA83E690EE9B03E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\abe48add965359712aa7699f9ba83e690ee9b03e.partially.cryptonar")) returned 1 [0131.606] SetErrorMode (uMode=0x1) returned 0x0 [0131.606] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ac3f27214ce49edb200bd2c19e310751df9bab3b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.607] SetErrorMode (uMode=0x0) returned 0x1 [0131.607] GetFileType (hFile=0x230) returned 0x1 [0131.607] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.609] SetErrorMode (uMode=0x1) returned 0x0 [0131.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ac3f27214ce49edb200bd2c19e310751df9bab3b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2f37228, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2f37228, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50e58ae3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5ab1)) returned 1 [0131.609] SetErrorMode (uMode=0x0) returned 0x1 [0131.609] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ac3f27214ce49edb200bd2c19e310751df9bab3b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AC3F27214CE49EDB200BD2C19E310751DF9BAB3B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ac3f27214ce49edb200bd2c19e310751df9bab3b.partially.cryptonar")) returned 1 [0131.611] SetErrorMode (uMode=0x1) returned 0x0 [0131.611] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ad7a5673189c3d8259e7b3fe0033e19e1674cc68"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.612] SetErrorMode (uMode=0x0) returned 0x1 [0131.612] GetFileType (hFile=0x230) returned 0x1 [0131.612] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.613] SetErrorMode (uMode=0x1) returned 0x0 [0131.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ad7a5673189c3d8259e7b3fe0033e19e1674cc68"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ee98980, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ee98980, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50e58ae3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0131.614] SetErrorMode (uMode=0x0) returned 0x1 [0131.614] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ad7a5673189c3d8259e7b3fe0033e19e1674cc68"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AD7A5673189C3D8259E7B3FE0033E19E1674CC68.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ad7a5673189c3d8259e7b3fe0033e19e1674cc68.partially.cryptonar")) returned 1 [0131.616] SetErrorMode (uMode=0x1) returned 0x0 [0131.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\add6b501c09066d4e06ee26cba87dec5f0e83f7c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.617] SetErrorMode (uMode=0x0) returned 0x1 [0131.617] GetFileType (hFile=0x230) returned 0x1 [0131.617] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.619] SetErrorMode (uMode=0x1) returned 0x0 [0131.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\add6b501c09066d4e06ee26cba87dec5f0e83f7c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf491d69c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf491d69c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50e7ea88, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1447)) returned 1 [0131.619] SetErrorMode (uMode=0x0) returned 0x1 [0131.619] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\add6b501c09066d4e06ee26cba87dec5f0e83f7c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ADD6B501C09066D4E06EE26CBA87DEC5F0E83F7C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\add6b501c09066d4e06ee26cba87dec5f0e83f7c.partially.cryptonar")) returned 1 [0131.621] SetErrorMode (uMode=0x1) returned 0x0 [0131.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aeb83a675769b7671cbb139390343154897f64ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.622] SetErrorMode (uMode=0x0) returned 0x1 [0131.622] GetFileType (hFile=0x230) returned 0x1 [0131.622] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.638] SetErrorMode (uMode=0x1) returned 0x0 [0131.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aeb83a675769b7671cbb139390343154897f64ca"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x50ea4e9a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf12)) returned 1 [0131.638] SetErrorMode (uMode=0x0) returned 0x1 [0131.638] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aeb83a675769b7671cbb139390343154897f64ca"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AEB83A675769B7671CBB139390343154897F64CA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aeb83a675769b7671cbb139390343154897f64ca.partially.cryptonar")) returned 1 [0131.639] SetErrorMode (uMode=0x1) returned 0x0 [0131.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aed594943264796a509740bbc9e3e0f5a2ff7fd8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.640] SetErrorMode (uMode=0x0) returned 0x1 [0131.640] GetFileType (hFile=0x230) returned 0x1 [0131.640] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.693] SetErrorMode (uMode=0x1) returned 0x0 [0131.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aed594943264796a509740bbc9e3e0f5a2ff7fd8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x50f17648, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe58)) returned 1 [0131.694] SetErrorMode (uMode=0x0) returned 0x1 [0131.694] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aed594943264796a509740bbc9e3e0f5a2ff7fd8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AED594943264796A509740BBC9E3E0F5A2FF7FD8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\aed594943264796a509740bbc9e3e0f5a2ff7fd8.partially.cryptonar")) returned 1 [0131.695] SetErrorMode (uMode=0x1) returned 0x0 [0131.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af989f03e66780f314e74927b87e92b7afb156e0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.696] SetErrorMode (uMode=0x0) returned 0x1 [0131.696] GetFileType (hFile=0x230) returned 0x1 [0131.696] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.710] SetErrorMode (uMode=0x1) returned 0x0 [0131.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af989f03e66780f314e74927b87e92b7afb156e0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d96615b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3d96615b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x50f3d762, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaa9)) returned 1 [0131.710] SetErrorMode (uMode=0x0) returned 0x1 [0131.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af989f03e66780f314e74927b87e92b7afb156e0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF989F03E66780F314E74927B87E92B7AFB156E0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af989f03e66780f314e74927b87e92b7afb156e0.partially.cryptonar")) returned 1 [0131.712] SetErrorMode (uMode=0x1) returned 0x0 [0131.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af9ecd1102cf6928aef6788488d5c54f77118ae1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.713] SetErrorMode (uMode=0x0) returned 0x1 [0131.713] GetFileType (hFile=0x230) returned 0x1 [0131.713] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.737] SetErrorMode (uMode=0x1) returned 0x0 [0131.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af9ecd1102cf6928aef6788488d5c54f77118ae1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cfafcf, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2cfafcf, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x50f89d50, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe66)) returned 1 [0131.738] SetErrorMode (uMode=0x0) returned 0x1 [0131.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af9ecd1102cf6928aef6788488d5c54f77118ae1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\AF9ECD1102CF6928AEF6788488D5C54F77118AE1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\af9ecd1102cf6928aef6788488d5c54f77118ae1.partially.cryptonar")) returned 1 [0131.739] SetErrorMode (uMode=0x1) returned 0x0 [0131.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b06646ad5f1441555865045f21a52c8bbf2e7cb3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.740] SetErrorMode (uMode=0x0) returned 0x1 [0131.740] GetFileType (hFile=0x230) returned 0x1 [0131.740] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.742] SetErrorMode (uMode=0x1) returned 0x0 [0131.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b06646ad5f1441555865045f21a52c8bbf2e7cb3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ffc170, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46ffc170, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x50f89d50, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc7d)) returned 1 [0131.742] SetErrorMode (uMode=0x0) returned 0x1 [0131.742] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b06646ad5f1441555865045f21a52c8bbf2e7cb3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B06646AD5F1441555865045F21A52C8BBF2E7CB3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b06646ad5f1441555865045f21a52c8bbf2e7cb3.partially.cryptonar")) returned 1 [0131.744] SetErrorMode (uMode=0x1) returned 0x0 [0131.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0c842777757a860221eeb07669943eda6e0e6f8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.745] SetErrorMode (uMode=0x0) returned 0x1 [0131.745] GetFileType (hFile=0x230) returned 0x1 [0131.745] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.768] SetErrorMode (uMode=0x1) returned 0x0 [0131.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0c842777757a860221eeb07669943eda6e0e6f8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x50fd61cb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x191c)) returned 1 [0131.768] SetErrorMode (uMode=0x0) returned 0x1 [0131.768] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0c842777757a860221eeb07669943eda6e0e6f8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0C842777757A860221EEB07669943EDA6E0E6F8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0c842777757a860221eeb07669943eda6e0e6f8.partially.cryptonar")) returned 1 [0131.770] SetErrorMode (uMode=0x1) returned 0x0 [0131.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0d47070252b6ee1939b4bd6dc01d326171716ad"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.771] SetErrorMode (uMode=0x0) returned 0x1 [0131.771] GetFileType (hFile=0x230) returned 0x1 [0131.771] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.786] SetErrorMode (uMode=0x1) returned 0x0 [0131.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0d47070252b6ee1939b4bd6dc01d326171716ad"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0c7b5f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f0c7b5f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x50ffc2f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2156)) returned 1 [0131.786] SetErrorMode (uMode=0x0) returned 0x1 [0131.786] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0d47070252b6ee1939b4bd6dc01d326171716ad"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B0D47070252B6EE1939B4BD6DC01D326171716AD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b0d47070252b6ee1939b4bd6dc01d326171716ad.partially.cryptonar")) returned 1 [0131.788] SetErrorMode (uMode=0x1) returned 0x0 [0131.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b13636b15d6b2224a652fd8433a0e5ff077ae63b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.789] SetErrorMode (uMode=0x0) returned 0x1 [0131.789] GetFileType (hFile=0x230) returned 0x1 [0131.789] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.791] SetErrorMode (uMode=0x1) returned 0x0 [0131.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b13636b15d6b2224a652fd8433a0e5ff077ae63b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4798580c, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4798580c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x51022499, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x34a)) returned 1 [0131.791] SetErrorMode (uMode=0x0) returned 0x1 [0131.791] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b13636b15d6b2224a652fd8433a0e5ff077ae63b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B13636B15D6B2224A652FD8433A0E5FF077AE63B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b13636b15d6b2224a652fd8433a0e5ff077ae63b.partially.cryptonar")) returned 1 [0131.792] SetErrorMode (uMode=0x1) returned 0x0 [0131.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b1535b3dd9dd55168d9c4e287dff1ced74684f31"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.793] SetErrorMode (uMode=0x0) returned 0x1 [0131.793] GetFileType (hFile=0x230) returned 0x1 [0131.793] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.884] SetErrorMode (uMode=0x1) returned 0x0 [0131.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b1535b3dd9dd55168d9c4e287dff1ced74684f31"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4eaf35b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4eaf35b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x510e11f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13d55)) returned 1 [0131.884] SetErrorMode (uMode=0x0) returned 0x1 [0131.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b1535b3dd9dd55168d9c4e287dff1ced74684f31"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B1535B3DD9DD55168D9C4E287DFF1CED74684F31.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b1535b3dd9dd55168d9c4e287dff1ced74684f31.partially.cryptonar")) returned 1 [0131.886] SetErrorMode (uMode=0x1) returned 0x0 [0131.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b26e09f1951b50cf919617cf90b6c1001ebf3354"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.887] SetErrorMode (uMode=0x0) returned 0x1 [0131.887] GetFileType (hFile=0x230) returned 0x1 [0131.887] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.911] SetErrorMode (uMode=0x1) returned 0x0 [0131.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b26e09f1951b50cf919617cf90b6c1001ebf3354"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f64fd10, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f64fd10, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5112d974, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0131.911] SetErrorMode (uMode=0x0) returned 0x1 [0131.911] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b26e09f1951b50cf919617cf90b6c1001ebf3354"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B26E09F1951B50CF919617CF90B6C1001EBF3354.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b26e09f1951b50cf919617cf90b6c1001ebf3354.partially.cryptonar")) returned 1 [0131.912] SetErrorMode (uMode=0x1) returned 0x0 [0131.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b328aa3491454066984c57961aa69bea1d2fda76"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.913] SetErrorMode (uMode=0x0) returned 0x1 [0131.914] GetFileType (hFile=0x230) returned 0x1 [0131.914] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.949] SetErrorMode (uMode=0x1) returned 0x0 [0131.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b328aa3491454066984c57961aa69bea1d2fda76"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x863075b2, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x863075b2, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5119fe18, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x101b)) returned 1 [0131.949] SetErrorMode (uMode=0x0) returned 0x1 [0131.949] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b328aa3491454066984c57961aa69bea1d2fda76"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B328AA3491454066984C57961AA69BEA1D2FDA76.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b328aa3491454066984c57961aa69bea1d2fda76.partially.cryptonar")) returned 1 [0131.951] SetErrorMode (uMode=0x1) returned 0x0 [0131.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b332620fec5b3f46e970e43b14f2990fc5698ccc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.952] SetErrorMode (uMode=0x0) returned 0x1 [0131.952] GetFileType (hFile=0x230) returned 0x1 [0131.952] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0131.968] SetErrorMode (uMode=0x1) returned 0x0 [0131.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b332620fec5b3f46e970e43b14f2990fc5698ccc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5381bb6f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x5381bb6f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x511cdca6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8ff)) returned 1 [0131.969] SetErrorMode (uMode=0x0) returned 0x1 [0131.969] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b332620fec5b3f46e970e43b14f2990fc5698ccc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B332620FEC5B3F46E970E43B14F2990FC5698CCC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b332620fec5b3f46e970e43b14f2990fc5698ccc.partially.cryptonar")) returned 1 [0131.971] SetErrorMode (uMode=0x1) returned 0x0 [0131.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b34ef52333f13c92b035e4da7e00ee58a80645f0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0131.972] SetErrorMode (uMode=0x0) returned 0x1 [0131.972] GetFileType (hFile=0x230) returned 0x1 [0131.972] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.022] SetErrorMode (uMode=0x1) returned 0x0 [0132.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b34ef52333f13c92b035e4da7e00ee58a80645f0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x459406e4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x459406e4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5123876e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xca7)) returned 1 [0132.023] SetErrorMode (uMode=0x0) returned 0x1 [0132.023] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b34ef52333f13c92b035e4da7e00ee58a80645f0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B34EF52333F13C92B035E4DA7E00EE58A80645F0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b34ef52333f13c92b035e4da7e00ee58a80645f0.partially.cryptonar")) returned 1 [0132.024] SetErrorMode (uMode=0x1) returned 0x0 [0132.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e4e2650da2cc89ea5df260683628253401f4b0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.026] SetErrorMode (uMode=0x0) returned 0x1 [0132.026] GetFileType (hFile=0x230) returned 0x1 [0132.026] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.046] SetErrorMode (uMode=0x1) returned 0x0 [0132.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e4e2650da2cc89ea5df260683628253401f4b0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x51284b3e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0132.046] SetErrorMode (uMode=0x0) returned 0x1 [0132.046] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e4e2650da2cc89ea5df260683628253401f4b0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E4E2650DA2CC89EA5DF260683628253401F4B0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e4e2650da2cc89ea5df260683628253401f4b0.partially.cryptonar")) returned 1 [0132.048] SetErrorMode (uMode=0x1) returned 0x0 [0132.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e9278f892b368b068b5c24bbfede6dddad0d6f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.049] SetErrorMode (uMode=0x0) returned 0x1 [0132.049] GetFileType (hFile=0x230) returned 0x1 [0132.049] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.068] SetErrorMode (uMode=0x1) returned 0x0 [0132.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e9278f892b368b068b5c24bbfede6dddad0d6f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x466f5f96, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x466f5f96, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x512aae11, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8056)) returned 1 [0132.068] SetErrorMode (uMode=0x0) returned 0x1 [0132.069] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e9278f892b368b068b5c24bbfede6dddad0d6f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B3E9278F892B368B068B5C24BBFEDE6DDDAD0D6F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b3e9278f892b368b068b5c24bbfede6dddad0d6f.partially.cryptonar")) returned 1 [0132.070] SetErrorMode (uMode=0x1) returned 0x0 [0132.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b430adc763d30db86e64f043832d757c6a8fa207"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.071] SetErrorMode (uMode=0x0) returned 0x1 [0132.071] GetFileType (hFile=0x230) returned 0x1 [0132.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.073] SetErrorMode (uMode=0x1) returned 0x0 [0132.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b430adc763d30db86e64f043832d757c6a8fa207"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf56a5c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3bf56a5c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x512d116d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0132.073] SetErrorMode (uMode=0x0) returned 0x1 [0132.073] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b430adc763d30db86e64f043832d757c6a8fa207"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B430ADC763D30DB86E64F043832D757C6A8FA207.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b430adc763d30db86e64f043832d757c6a8fa207.partially.cryptonar")) returned 1 [0132.075] SetErrorMode (uMode=0x1) returned 0x0 [0132.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b495bae5519b053312c8b03fe09c2eafb1077894"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.075] SetErrorMode (uMode=0x0) returned 0x1 [0132.076] GetFileType (hFile=0x230) returned 0x1 [0132.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.096] SetErrorMode (uMode=0x1) returned 0x0 [0132.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b495bae5519b053312c8b03fe09c2eafb1077894"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x512f8561, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0132.097] SetErrorMode (uMode=0x0) returned 0x1 [0132.097] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b495bae5519b053312c8b03fe09c2eafb1077894"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B495BAE5519B053312C8B03FE09C2EAFB1077894.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b495bae5519b053312c8b03fe09c2eafb1077894.partially.cryptonar")) returned 1 [0132.098] SetErrorMode (uMode=0x1) returned 0x0 [0132.098] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b4d3001b84e5bc0c4a0eefac34743026d9baa7af"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.099] SetErrorMode (uMode=0x0) returned 0x1 [0132.099] GetFileType (hFile=0x230) returned 0x1 [0132.099] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.145] SetErrorMode (uMode=0x1) returned 0x0 [0132.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b4d3001b84e5bc0c4a0eefac34743026d9baa7af"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4819170d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4819170d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x51369a31, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xadd1)) returned 1 [0132.146] SetErrorMode (uMode=0x0) returned 0x1 [0132.146] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b4d3001b84e5bc0c4a0eefac34743026d9baa7af"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B4D3001B84E5BC0C4A0EEFAC34743026D9BAA7AF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b4d3001b84e5bc0c4a0eefac34743026d9baa7af.partially.cryptonar")) returned 1 [0132.148] SetErrorMode (uMode=0x1) returned 0x0 [0132.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b597da2e9b2d181df7f2fb8d2baec133c8dba0a3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.149] SetErrorMode (uMode=0x0) returned 0x1 [0132.149] GetFileType (hFile=0x230) returned 0x1 [0132.149] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.393] SetErrorMode (uMode=0x1) returned 0x0 [0132.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b597da2e9b2d181df7f2fb8d2baec133c8dba0a3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548d72f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548d72f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x515cc099, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b73)) returned 1 [0132.394] SetErrorMode (uMode=0x0) returned 0x1 [0132.394] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b597da2e9b2d181df7f2fb8d2baec133c8dba0a3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B597DA2E9B2D181DF7F2FB8D2BAEC133C8DBA0A3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b597da2e9b2d181df7f2fb8d2baec133c8dba0a3.partially.cryptonar")) returned 1 [0132.395] SetErrorMode (uMode=0x1) returned 0x0 [0132.395] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b5c3109d53713a832971d24fdc110840b57cebce"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.399] SetErrorMode (uMode=0x0) returned 0x1 [0132.399] GetFileType (hFile=0x230) returned 0x1 [0132.399] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.402] SetErrorMode (uMode=0x1) returned 0x0 [0132.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b5c3109d53713a832971d24fdc110840b57cebce"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x515f218d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c8e)) returned 1 [0132.402] SetErrorMode (uMode=0x0) returned 0x1 [0132.402] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b5c3109d53713a832971d24fdc110840b57cebce"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B5C3109D53713A832971D24FDC110840B57CEBCE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b5c3109d53713a832971d24fdc110840b57cebce.partially.cryptonar")) returned 1 [0132.404] SetErrorMode (uMode=0x1) returned 0x0 [0132.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b63cbf55658040edbedecc3844d1774f5e740a67"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.405] SetErrorMode (uMode=0x0) returned 0x1 [0132.405] GetFileType (hFile=0x230) returned 0x1 [0132.405] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.418] SetErrorMode (uMode=0x1) returned 0x0 [0132.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b63cbf55658040edbedecc3844d1774f5e740a67"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b16de53, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7b16de53, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x516184af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0132.418] SetErrorMode (uMode=0x0) returned 0x1 [0132.418] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b63cbf55658040edbedecc3844d1774f5e740a67"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B63CBF55658040EDBEDECC3844D1774F5E740A67.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b63cbf55658040edbedecc3844d1774f5e740a67.partially.cryptonar")) returned 1 [0132.419] SetErrorMode (uMode=0x1) returned 0x0 [0132.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b73e4a4438b9b71f020e7d4b54ae283770e47ca7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.420] SetErrorMode (uMode=0x0) returned 0x1 [0132.420] GetFileType (hFile=0x230) returned 0x1 [0132.420] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.422] SetErrorMode (uMode=0x1) returned 0x0 [0132.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b73e4a4438b9b71f020e7d4b54ae283770e47ca7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef4860b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef4860b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x516184af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x22f3)) returned 1 [0132.423] SetErrorMode (uMode=0x0) returned 0x1 [0132.423] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b73e4a4438b9b71f020e7d4b54ae283770e47ca7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B73E4A4438B9B71F020E7D4B54AE283770E47CA7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b73e4a4438b9b71f020e7d4b54ae283770e47ca7.partially.cryptonar")) returned 1 [0132.424] SetErrorMode (uMode=0x1) returned 0x0 [0132.424] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b7a20c0210c3f0c6dd2ecc8be3de39ecdf9bbcf2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.425] SetErrorMode (uMode=0x0) returned 0x1 [0132.425] GetFileType (hFile=0x230) returned 0x1 [0132.425] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.470] SetErrorMode (uMode=0x1) returned 0x0 [0132.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b7a20c0210c3f0c6dd2ecc8be3de39ecdf9bbcf2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdb102c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5fdb102c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5168ab90, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0132.470] SetErrorMode (uMode=0x0) returned 0x1 [0132.470] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b7a20c0210c3f0c6dd2ecc8be3de39ecdf9bbcf2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B7A20C0210C3F0C6DD2ECC8BE3DE39ECDF9BBCF2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b7a20c0210c3f0c6dd2ecc8be3de39ecdf9bbcf2.partially.cryptonar")) returned 1 [0132.471] SetErrorMode (uMode=0x1) returned 0x0 [0132.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b813d1e65f59ece607454f649dff306ab7917f43"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.472] SetErrorMode (uMode=0x0) returned 0x1 [0132.472] GetFileType (hFile=0x230) returned 0x1 [0132.473] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.503] SetErrorMode (uMode=0x1) returned 0x0 [0132.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b813d1e65f59ece607454f649dff306ab7917f43"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544d135a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544d135a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x516d707d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x208b6)) returned 1 [0132.504] SetErrorMode (uMode=0x0) returned 0x1 [0132.504] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b813d1e65f59ece607454f649dff306ab7917f43"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B813D1E65F59ECE607454F649DFF306AB7917F43.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b813d1e65f59ece607454f649dff306ab7917f43.partially.cryptonar")) returned 1 [0132.505] SetErrorMode (uMode=0x1) returned 0x0 [0132.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b8fee01834958b679c82ea25187620814cf36041"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.506] SetErrorMode (uMode=0x0) returned 0x1 [0132.506] GetFileType (hFile=0x230) returned 0x1 [0132.506] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.508] SetErrorMode (uMode=0x1) returned 0x0 [0132.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b8fee01834958b679c82ea25187620814cf36041"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87c06ad0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87c06ad0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x516d707d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x303a)) returned 1 [0132.508] SetErrorMode (uMode=0x0) returned 0x1 [0132.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b8fee01834958b679c82ea25187620814cf36041"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B8FEE01834958B679C82EA25187620814CF36041.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b8fee01834958b679c82ea25187620814cf36041.partially.cryptonar")) returned 1 [0132.510] SetErrorMode (uMode=0x1) returned 0x0 [0132.510] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b9b97bd99314d1af1c4620c4d93e36dfae9e88eb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.511] SetErrorMode (uMode=0x0) returned 0x1 [0132.511] GetFileType (hFile=0x230) returned 0x1 [0132.511] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.558] SetErrorMode (uMode=0x1) returned 0x0 [0132.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b9b97bd99314d1af1c4620c4d93e36dfae9e88eb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5176f9b0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1130)) returned 1 [0132.558] SetErrorMode (uMode=0x0) returned 0x1 [0132.558] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b9b97bd99314d1af1c4620c4d93e36dfae9e88eb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\B9B97BD99314D1AF1C4620C4D93E36DFAE9E88EB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\b9b97bd99314d1af1c4620c4d93e36dfae9e88eb.partially.cryptonar")) returned 1 [0132.559] SetErrorMode (uMode=0x1) returned 0x0 [0132.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba200b5026a6777e410131ae059633f84e4b7980"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.560] SetErrorMode (uMode=0x0) returned 0x1 [0132.560] GetFileType (hFile=0x230) returned 0x1 [0132.560] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.575] SetErrorMode (uMode=0x1) returned 0x0 [0132.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba200b5026a6777e410131ae059633f84e4b7980"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x51795c54, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0132.575] SetErrorMode (uMode=0x0) returned 0x1 [0132.575] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba200b5026a6777e410131ae059633f84e4b7980"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA200B5026A6777E410131AE059633F84E4B7980.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba200b5026a6777e410131ae059633f84e4b7980.partially.cryptonar")) returned 1 [0132.577] SetErrorMode (uMode=0x1) returned 0x0 [0132.577] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba683fb23a6d8343be97a432e6c3e422a3740d93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.577] SetErrorMode (uMode=0x0) returned 0x1 [0132.578] GetFileType (hFile=0x230) returned 0x1 [0132.578] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.656] SetErrorMode (uMode=0x1) returned 0x0 [0132.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba683fb23a6d8343be97a432e6c3e422a3740d93"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f3e215, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc2f3e215, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5185466a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xec82)) returned 1 [0132.656] SetErrorMode (uMode=0x0) returned 0x1 [0132.656] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba683fb23a6d8343be97a432e6c3e422a3740d93"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA683FB23A6D8343BE97A432E6C3E422A3740D93.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba683fb23a6d8343be97a432e6c3e422a3740d93.partially.cryptonar")) returned 1 [0132.658] SetErrorMode (uMode=0x1) returned 0x0 [0132.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba743f1189037db14b73915e4397924bcf1a176c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.661] SetErrorMode (uMode=0x0) returned 0x1 [0132.661] GetFileType (hFile=0x230) returned 0x1 [0132.661] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.663] SetErrorMode (uMode=0x1) returned 0x0 [0132.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba743f1189037db14b73915e4397924bcf1a176c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f1d929c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f1d929c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5185466a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0132.663] SetErrorMode (uMode=0x0) returned 0x1 [0132.663] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba743f1189037db14b73915e4397924bcf1a176c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BA743F1189037DB14B73915E4397924BCF1A176C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ba743f1189037db14b73915e4397924bcf1a176c.partially.cryptonar")) returned 1 [0132.664] SetErrorMode (uMode=0x1) returned 0x0 [0132.664] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\baa3409405f54bd7aa1ea463dd797dac4cd168fa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.665] SetErrorMode (uMode=0x0) returned 0x1 [0132.665] GetFileType (hFile=0x230) returned 0x1 [0132.666] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.691] SetErrorMode (uMode=0x1) returned 0x0 [0132.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\baa3409405f54bd7aa1ea463dd797dac4cd168fa"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x868aa4fe, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x868aa4fe, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x518a0aae, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c3d)) returned 1 [0132.692] SetErrorMode (uMode=0x0) returned 0x1 [0132.692] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\baa3409405f54bd7aa1ea463dd797dac4cd168fa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BAA3409405F54BD7AA1EA463DD797DAC4CD168FA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\baa3409405f54bd7aa1ea463dd797dac4cd168fa.partially.cryptonar")) returned 1 [0132.693] SetErrorMode (uMode=0x1) returned 0x0 [0132.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb649871ec4b0ed29f1ee47a8a2729c402d6fcf9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.694] SetErrorMode (uMode=0x0) returned 0x1 [0132.694] GetFileType (hFile=0x230) returned 0x1 [0132.694] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.696] SetErrorMode (uMode=0x1) returned 0x0 [0132.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb649871ec4b0ed29f1ee47a8a2729c402d6fcf9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0bc7b09, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf0bc7b09, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x518a0aae, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13f4)) returned 1 [0132.696] SetErrorMode (uMode=0x0) returned 0x1 [0132.696] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb649871ec4b0ed29f1ee47a8a2729c402d6fcf9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB649871EC4B0ED29F1EE47A8A2729C402D6FCF9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb649871ec4b0ed29f1ee47a8a2729c402d6fcf9.partially.cryptonar")) returned 1 [0132.697] SetErrorMode (uMode=0x1) returned 0x0 [0132.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb73fafa02c6691813606bd61843202d8ca8482c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.698] SetErrorMode (uMode=0x0) returned 0x1 [0132.698] GetFileType (hFile=0x230) returned 0x1 [0132.698] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.700] SetErrorMode (uMode=0x1) returned 0x0 [0132.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb73fafa02c6691813606bd61843202d8ca8482c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c768006, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c768006, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x518c6d55, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa18)) returned 1 [0132.700] SetErrorMode (uMode=0x0) returned 0x1 [0132.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb73fafa02c6691813606bd61843202d8ca8482c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB73FAFA02C6691813606BD61843202D8CA8482C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb73fafa02c6691813606bd61843202d8ca8482c.partially.cryptonar")) returned 1 [0132.701] SetErrorMode (uMode=0x1) returned 0x0 [0132.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb85d650f29e20e233d5d93fae448d4754c97228"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.702] SetErrorMode (uMode=0x0) returned 0x1 [0132.702] GetFileType (hFile=0x230) returned 0x1 [0132.702] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.756] SetErrorMode (uMode=0x1) returned 0x0 [0132.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb85d650f29e20e233d5d93fae448d4754c97228"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc3af80, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7bc3af80, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x519395d2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0132.757] SetErrorMode (uMode=0x0) returned 0x1 [0132.757] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb85d650f29e20e233d5d93fae448d4754c97228"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB85D650F29E20E233D5D93FAE448D4754C97228.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb85d650f29e20e233d5d93fae448d4754c97228.partially.cryptonar")) returned 1 [0132.758] SetErrorMode (uMode=0x1) returned 0x0 [0132.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb95d0607349d05725d5fe01d4fb300e319072ad"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.759] SetErrorMode (uMode=0x0) returned 0x1 [0132.759] GetFileType (hFile=0x230) returned 0x1 [0132.759] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.761] SetErrorMode (uMode=0x1) returned 0x0 [0132.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb95d0607349d05725d5fe01d4fb300e319072ad"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf9a7122, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd2e9e86f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51960483, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11d7)) returned 1 [0132.761] SetErrorMode (uMode=0x0) returned 0x1 [0132.762] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb95d0607349d05725d5fe01d4fb300e319072ad"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BB95D0607349D05725D5FE01D4FB300E319072AD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bb95d0607349d05725d5fe01d4fb300e319072ad.partially.cryptonar")) returned 1 [0132.763] SetErrorMode (uMode=0x1) returned 0x0 [0132.763] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bba422756f6fa102dd0903f6fdf256b0dbf9724a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.764] SetErrorMode (uMode=0x0) returned 0x1 [0132.764] GetFileType (hFile=0x230) returned 0x1 [0132.764] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.784] SetErrorMode (uMode=0x1) returned 0x0 [0132.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bba422756f6fa102dd0903f6fdf256b0dbf9724a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x51985aa5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0132.784] SetErrorMode (uMode=0x0) returned 0x1 [0132.784] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bba422756f6fa102dd0903f6fdf256b0dbf9724a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBA422756F6FA102DD0903F6FDF256B0DBF9724A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bba422756f6fa102dd0903f6fdf256b0dbf9724a.partially.cryptonar")) returned 1 [0132.786] SetErrorMode (uMode=0x1) returned 0x0 [0132.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bbfe014b08f9aedb8b8bbef18fae9fe066488d9d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.787] SetErrorMode (uMode=0x0) returned 0x1 [0132.787] GetFileType (hFile=0x230) returned 0x1 [0132.787] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.802] SetErrorMode (uMode=0x1) returned 0x0 [0132.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bbfe014b08f9aedb8b8bbef18fae9fe066488d9d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f1cce8, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86f1cce8, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x519abc22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0132.802] SetErrorMode (uMode=0x0) returned 0x1 [0132.802] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bbfe014b08f9aedb8b8bbef18fae9fe066488d9d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BBFE014B08F9AEDB8B8BBEF18FAE9FE066488D9D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bbfe014b08f9aedb8b8bbef18fae9fe066488d9d.partially.cryptonar")) returned 1 [0132.804] SetErrorMode (uMode=0x1) returned 0x0 [0132.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bc20a45b3dcd784841c1d1db98f042f71d4a5c25"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.805] SetErrorMode (uMode=0x0) returned 0x1 [0132.805] GetFileType (hFile=0x230) returned 0x1 [0132.805] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.824] SetErrorMode (uMode=0x1) returned 0x0 [0132.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bc20a45b3dcd784841c1d1db98f042f71d4a5c25"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x895dcdbd, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x895dcdbd, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x519f81f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8280)) returned 1 [0132.824] SetErrorMode (uMode=0x0) returned 0x1 [0132.824] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bc20a45b3dcd784841c1d1db98f042f71d4a5c25"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BC20A45B3DCD784841C1D1DB98F042F71D4A5C25.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bc20a45b3dcd784841c1d1db98f042f71d4a5c25.partially.cryptonar")) returned 1 [0132.826] SetErrorMode (uMode=0x1) returned 0x0 [0132.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd2a385a460e1ba73c47bbb5c799560b0fdbf002"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.826] SetErrorMode (uMode=0x0) returned 0x1 [0132.827] GetFileType (hFile=0x230) returned 0x1 [0132.827] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.854] SetErrorMode (uMode=0x1) returned 0x0 [0132.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd2a385a460e1ba73c47bbb5c799560b0fdbf002"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x452d81ac, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x452d81ac, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x51a1e401, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc8d)) returned 1 [0132.854] SetErrorMode (uMode=0x0) returned 0x1 [0132.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd2a385a460e1ba73c47bbb5c799560b0fdbf002"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD2A385A460E1BA73C47BBB5C799560B0FDBF002.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd2a385a460e1ba73c47bbb5c799560b0fdbf002.partially.cryptonar")) returned 1 [0132.857] SetErrorMode (uMode=0x1) returned 0x0 [0132.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd9ccf25afc4c5a7e0331eaa2bdcaa6d542cb0f8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.858] SetErrorMode (uMode=0x0) returned 0x1 [0132.858] GetFileType (hFile=0x230) returned 0x1 [0132.858] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.860] SetErrorMode (uMode=0x1) returned 0x0 [0132.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd9ccf25afc4c5a7e0331eaa2bdcaa6d542cb0f8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42186e9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf42186e9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51a4a67f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15d6)) returned 1 [0132.860] SetErrorMode (uMode=0x0) returned 0x1 [0132.860] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd9ccf25afc4c5a7e0331eaa2bdcaa6d542cb0f8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BD9CCF25AFC4C5A7E0331EAA2BDCAA6D542CB0F8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bd9ccf25afc4c5a7e0331eaa2bdcaa6d542cb0f8.partially.cryptonar")) returned 1 [0132.861] SetErrorMode (uMode=0x1) returned 0x0 [0132.861] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bef8596945e3759f8e0654124d6a07a220d5b46a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.862] SetErrorMode (uMode=0x0) returned 0x1 [0132.862] GetFileType (hFile=0x230) returned 0x1 [0132.862] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.864] SetErrorMode (uMode=0x1) returned 0x0 [0132.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bef8596945e3759f8e0654124d6a07a220d5b46a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d98691f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7d98691f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51a4a67f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xac8)) returned 1 [0132.864] SetErrorMode (uMode=0x0) returned 0x1 [0132.864] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bef8596945e3759f8e0654124d6a07a220d5b46a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BEF8596945E3759F8E0654124D6A07A220D5B46A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bef8596945e3759f8e0654124d6a07a220d5b46a.partially.cryptonar")) returned 1 [0132.865] SetErrorMode (uMode=0x1) returned 0x0 [0132.865] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf6dc2bdf8544f1b381f1b153eb40266b0321b4d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.866] SetErrorMode (uMode=0x0) returned 0x1 [0132.866] GetFileType (hFile=0x230) returned 0x1 [0132.866] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.893] SetErrorMode (uMode=0x1) returned 0x0 [0132.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf6dc2bdf8544f1b381f1b153eb40266b0321b4d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x864f7000, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x864f7000, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51a91e50, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0132.893] SetErrorMode (uMode=0x0) returned 0x1 [0132.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf6dc2bdf8544f1b381f1b153eb40266b0321b4d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF6DC2BDF8544F1B381F1B153EB40266B0321B4D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf6dc2bdf8544f1b381f1b153eb40266b0321b4d.partially.cryptonar")) returned 1 [0132.895] SetErrorMode (uMode=0x1) returned 0x0 [0132.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf8487cb0d2c245b63ffcbf5b93c4378247f46d7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.896] SetErrorMode (uMode=0x0) returned 0x1 [0132.896] GetFileType (hFile=0x230) returned 0x1 [0132.896] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.920] SetErrorMode (uMode=0x1) returned 0x0 [0132.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf8487cb0d2c245b63ffcbf5b93c4378247f46d7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc317a586, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc317a586, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x51add019, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc731)) returned 1 [0132.920] SetErrorMode (uMode=0x0) returned 0x1 [0132.920] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf8487cb0d2c245b63ffcbf5b93c4378247f46d7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\BF8487CB0D2C245B63FFCBF5B93C4378247F46D7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\bf8487cb0d2c245b63ffcbf5b93c4378247f46d7.partially.cryptonar")) returned 1 [0132.922] SetErrorMode (uMode=0x1) returned 0x0 [0132.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c043ff37ecbc9b18aa5d7f2750e581bccc99c9a7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.923] SetErrorMode (uMode=0x0) returned 0x1 [0132.923] GetFileType (hFile=0x230) returned 0x1 [0132.923] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.928] SetErrorMode (uMode=0x1) returned 0x0 [0132.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c043ff37ecbc9b18aa5d7f2750e581bccc99c9a7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x51add019, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4fb)) returned 1 [0132.928] SetErrorMode (uMode=0x0) returned 0x1 [0132.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c043ff37ecbc9b18aa5d7f2750e581bccc99c9a7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C043FF37ECBC9B18AA5D7F2750E581BCCC99C9A7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c043ff37ecbc9b18aa5d7f2750e581bccc99c9a7.partially.cryptonar")) returned 1 [0132.929] SetErrorMode (uMode=0x1) returned 0x0 [0132.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c06845ad909eae17c1959fcd298671a28ac2c0dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.930] SetErrorMode (uMode=0x0) returned 0x1 [0132.930] GetFileType (hFile=0x230) returned 0x1 [0132.930] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.973] SetErrorMode (uMode=0x1) returned 0x0 [0132.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c06845ad909eae17c1959fcd298671a28ac2c0dc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6152bc7d, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6152bc7d, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x51b4f740, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe27)) returned 1 [0132.973] SetErrorMode (uMode=0x0) returned 0x1 [0132.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c06845ad909eae17c1959fcd298671a28ac2c0dc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C06845AD909EAE17C1959FCD298671A28AC2C0DC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c06845ad909eae17c1959fcd298671a28ac2c0dc.partially.cryptonar")) returned 1 [0132.975] SetErrorMode (uMode=0x1) returned 0x0 [0132.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c1044b244f2c1cc0a3c149eb74f13afc827487ac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.976] SetErrorMode (uMode=0x0) returned 0x1 [0132.976] GetFileType (hFile=0x230) returned 0x1 [0132.976] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0132.977] SetErrorMode (uMode=0x1) returned 0x0 [0132.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c1044b244f2c1cc0a3c149eb74f13afc827487ac"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x51b4f740, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf1b)) returned 1 [0132.978] SetErrorMode (uMode=0x0) returned 0x1 [0132.978] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c1044b244f2c1cc0a3c149eb74f13afc827487ac"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C1044B244F2C1CC0A3C149EB74F13AFC827487AC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c1044b244f2c1cc0a3c149eb74f13afc827487ac.partially.cryptonar")) returned 1 [0132.979] SetErrorMode (uMode=0x1) returned 0x0 [0132.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f7e66fba7b9b70f058c9742c721acf90cf849"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0132.981] SetErrorMode (uMode=0x0) returned 0x1 [0132.981] GetFileType (hFile=0x230) returned 0x1 [0132.981] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.078] SetErrorMode (uMode=0x1) returned 0x0 [0133.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f7e66fba7b9b70f058c9742c721acf90cf849"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a33eb46, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4a33eb46, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x51c5a7ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x24707)) returned 1 [0133.078] SetErrorMode (uMode=0x0) returned 0x1 [0133.078] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f7e66fba7b9b70f058c9742c721acf90cf849"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F7E66FBA7B9B70F058C9742C721ACF90CF849.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f7e66fba7b9b70f058c9742c721acf90cf849.partially.cryptonar")) returned 1 [0133.080] SetErrorMode (uMode=0x1) returned 0x0 [0133.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f8ef9c7c1d479ab4cf2451b11109a30a54952"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.080] SetErrorMode (uMode=0x0) returned 0x1 [0133.081] GetFileType (hFile=0x230) returned 0x1 [0133.081] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.082] SetErrorMode (uMode=0x1) returned 0x0 [0133.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f8ef9c7c1d479ab4cf2451b11109a30a54952"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55260990, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x55260990, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x51c5a7ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2042)) returned 1 [0133.082] SetErrorMode (uMode=0x0) returned 0x1 [0133.083] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f8ef9c7c1d479ab4cf2451b11109a30a54952"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C17F8EF9C7C1D479AB4CF2451B11109A30A54952.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c17f8ef9c7c1d479ab4cf2451b11109a30a54952.partially.cryptonar")) returned 1 [0133.084] SetErrorMode (uMode=0x1) returned 0x0 [0133.084] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c203bd0b4d1412aefb65c250dd0d6ae7ae31f0fe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.085] SetErrorMode (uMode=0x0) returned 0x1 [0133.085] GetFileType (hFile=0x230) returned 0x1 [0133.085] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.086] SetErrorMode (uMode=0x1) returned 0x0 [0133.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c203bd0b4d1412aefb65c250dd0d6ae7ae31f0fe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2dbbb4b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2dbbb4b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51c5a7ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1252)) returned 1 [0133.087] SetErrorMode (uMode=0x0) returned 0x1 [0133.087] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c203bd0b4d1412aefb65c250dd0d6ae7ae31f0fe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C203BD0B4D1412AEFB65C250DD0D6AE7AE31F0FE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c203bd0b4d1412aefb65c250dd0d6ae7ae31f0fe.partially.cryptonar")) returned 1 [0133.090] SetErrorMode (uMode=0x1) returned 0x0 [0133.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2763b00b8d7dcd5086bf4fad37cbd7f56dd1f2a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.092] SetErrorMode (uMode=0x0) returned 0x1 [0133.092] GetFileType (hFile=0x230) returned 0x1 [0133.092] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.110] SetErrorMode (uMode=0x1) returned 0x0 [0133.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2763b00b8d7dcd5086bf4fad37cbd7f56dd1f2a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c50da6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88c50da6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51ca6b9a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0133.110] SetErrorMode (uMode=0x0) returned 0x1 [0133.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2763b00b8d7dcd5086bf4fad37cbd7f56dd1f2a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2763B00B8D7DCD5086BF4FAD37CBD7F56DD1F2A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2763b00b8d7dcd5086bf4fad37cbd7f56dd1f2a.partially.cryptonar")) returned 1 [0133.112] SetErrorMode (uMode=0x1) returned 0x0 [0133.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c27d7a62fcb3822b15fe7a889eac6ebcb8e81a80"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.115] SetErrorMode (uMode=0x0) returned 0x1 [0133.115] GetFileType (hFile=0x230) returned 0x1 [0133.115] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.138] SetErrorMode (uMode=0x1) returned 0x0 [0133.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c27d7a62fcb3822b15fe7a889eac6ebcb8e81a80"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eeb5e63, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3eeb5e63, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x51cf3293, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x156d)) returned 1 [0133.139] SetErrorMode (uMode=0x0) returned 0x1 [0133.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c27d7a62fcb3822b15fe7a889eac6ebcb8e81a80"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C27D7A62FCB3822B15FE7A889EAC6EBCB8E81A80.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c27d7a62fcb3822b15fe7a889eac6ebcb8e81a80.partially.cryptonar")) returned 1 [0133.140] SetErrorMode (uMode=0x1) returned 0x0 [0133.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2e84e1a7c46c9b41e77a00a9483fc557ea0ab29"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.142] SetErrorMode (uMode=0x0) returned 0x1 [0133.142] GetFileType (hFile=0x230) returned 0x1 [0133.142] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.156] SetErrorMode (uMode=0x1) returned 0x0 [0133.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2e84e1a7c46c9b41e77a00a9483fc557ea0ab29"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1bb7a9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c1bb7a9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x51d19190, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c96)) returned 1 [0133.156] SetErrorMode (uMode=0x0) returned 0x1 [0133.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2e84e1a7c46c9b41e77a00a9483fc557ea0ab29"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C2E84E1A7C46C9B41E77A00A9483FC557EA0AB29.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c2e84e1a7c46c9b41e77a00a9483fc557ea0ab29.partially.cryptonar")) returned 1 [0133.158] SetErrorMode (uMode=0x1) returned 0x0 [0133.158] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c3357b699a03d6c47624a0bc4184ed6e2b8d6443"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.159] SetErrorMode (uMode=0x0) returned 0x1 [0133.159] GetFileType (hFile=0x230) returned 0x1 [0133.159] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.161] SetErrorMode (uMode=0x1) returned 0x0 [0133.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c3357b699a03d6c47624a0bc4184ed6e2b8d6443"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ef32688, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3ef32688, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x51d19190, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3543)) returned 1 [0133.161] SetErrorMode (uMode=0x0) returned 0x1 [0133.161] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c3357b699a03d6c47624a0bc4184ed6e2b8d6443"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C3357B699A03D6C47624A0BC4184ED6E2B8D6443.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c3357b699a03d6c47624a0bc4184ed6e2b8d6443.partially.cryptonar")) returned 1 [0133.164] SetErrorMode (uMode=0x1) returned 0x0 [0133.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c4946d9cbaac446a50cb86f04338e6f3f959efc5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.165] SetErrorMode (uMode=0x0) returned 0x1 [0133.165] GetFileType (hFile=0x230) returned 0x1 [0133.165] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.186] SetErrorMode (uMode=0x1) returned 0x0 [0133.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c4946d9cbaac446a50cb86f04338e6f3f959efc5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x51d657a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50b)) returned 1 [0133.186] SetErrorMode (uMode=0x0) returned 0x1 [0133.186] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c4946d9cbaac446a50cb86f04338e6f3f959efc5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C4946D9CBAAC446A50CB86F04338E6F3F959EFC5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c4946d9cbaac446a50cb86f04338e6f3f959efc5.partially.cryptonar")) returned 1 [0133.188] SetErrorMode (uMode=0x1) returned 0x0 [0133.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c505e7dd9508360b0cac8ea23e2e4250812d4ea2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.189] SetErrorMode (uMode=0x0) returned 0x1 [0133.189] GetFileType (hFile=0x230) returned 0x1 [0133.189] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.196] SetErrorMode (uMode=0x1) returned 0x0 [0133.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c505e7dd9508360b0cac8ea23e2e4250812d4ea2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5373e86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5373e86, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x51d657a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc16f)) returned 1 [0133.196] SetErrorMode (uMode=0x0) returned 0x1 [0133.196] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c505e7dd9508360b0cac8ea23e2e4250812d4ea2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C505E7DD9508360B0CAC8EA23E2E4250812D4EA2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c505e7dd9508360b0cac8ea23e2e4250812d4ea2.partially.cryptonar")) returned 1 [0133.198] SetErrorMode (uMode=0x1) returned 0x0 [0133.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c60596c8fddc477a7730ad04c3c8e1a8a0cf7376"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.199] SetErrorMode (uMode=0x0) returned 0x1 [0133.199] GetFileType (hFile=0x230) returned 0x1 [0133.199] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.200] SetErrorMode (uMode=0x1) returned 0x0 [0133.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c60596c8fddc477a7730ad04c3c8e1a8a0cf7376"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4768a8fe, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4768a8fe, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x51d8b8d3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x745)) returned 1 [0133.200] SetErrorMode (uMode=0x0) returned 0x1 [0133.200] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c60596c8fddc477a7730ad04c3c8e1a8a0cf7376"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C60596C8FDDC477A7730AD04C3C8E1A8A0CF7376.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c60596c8fddc477a7730ad04c3c8e1a8a0cf7376.partially.cryptonar")) returned 1 [0133.202] SetErrorMode (uMode=0x1) returned 0x0 [0133.202] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6415d1859f2ea4def7b2f7f227e932f25e31921"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.202] SetErrorMode (uMode=0x0) returned 0x1 [0133.202] GetFileType (hFile=0x230) returned 0x1 [0133.202] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.204] SetErrorMode (uMode=0x1) returned 0x0 [0133.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6415d1859f2ea4def7b2f7f227e932f25e31921"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8297dbc7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8297dbc7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51d8b8d3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0133.204] SetErrorMode (uMode=0x0) returned 0x1 [0133.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6415d1859f2ea4def7b2f7f227e932f25e31921"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6415D1859F2EA4DEF7B2F7F227E932F25E31921.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6415d1859f2ea4def7b2f7f227e932f25e31921.partially.cryptonar")) returned 1 [0133.205] SetErrorMode (uMode=0x1) returned 0x0 [0133.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c65fa3dcc52a2ee8f7f1055aadc2e4e39a1fcb55"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.206] SetErrorMode (uMode=0x0) returned 0x1 [0133.206] GetFileType (hFile=0x230) returned 0x1 [0133.206] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.216] SetErrorMode (uMode=0x1) returned 0x0 [0133.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c65fa3dcc52a2ee8f7f1055aadc2e4e39a1fcb55"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369a5b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf369a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51db1b80, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x25c)) returned 1 [0133.216] SetErrorMode (uMode=0x0) returned 0x1 [0133.216] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c65fa3dcc52a2ee8f7f1055aadc2e4e39a1fcb55"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C65FA3DCC52A2EE8F7F1055AADC2E4E39A1FCB55.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c65fa3dcc52a2ee8f7f1055aadc2e4e39a1fcb55.partially.cryptonar")) returned 1 [0133.217] SetErrorMode (uMode=0x1) returned 0x0 [0133.217] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c672eb641e0e20e83d6b55b92050fd8e9bb04f8e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.218] SetErrorMode (uMode=0x0) returned 0x1 [0133.218] GetFileType (hFile=0x230) returned 0x1 [0133.218] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.253] SetErrorMode (uMode=0x1) returned 0x0 [0133.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c672eb641e0e20e83d6b55b92050fd8e9bb04f8e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e34dc1, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e34dc1, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51dfe0ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0133.253] SetErrorMode (uMode=0x0) returned 0x1 [0133.253] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c672eb641e0e20e83d6b55b92050fd8e9bb04f8e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C672EB641E0E20E83D6B55B92050FD8E9BB04F8E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c672eb641e0e20e83d6b55b92050fd8e9bb04f8e.partially.cryptonar")) returned 1 [0133.254] SetErrorMode (uMode=0x1) returned 0x0 [0133.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d0be59f16fe678f1df4ea4c7dee37195801b33"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.256] SetErrorMode (uMode=0x0) returned 0x1 [0133.256] GetFileType (hFile=0x230) returned 0x1 [0133.256] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.282] SetErrorMode (uMode=0x1) returned 0x0 [0133.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d0be59f16fe678f1df4ea4c7dee37195801b33"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b663d46, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7b663d46, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51e4a649, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0133.282] SetErrorMode (uMode=0x0) returned 0x1 [0133.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d0be59f16fe678f1df4ea4c7dee37195801b33"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D0BE59F16FE678F1DF4EA4C7DEE37195801B33.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d0be59f16fe678f1df4ea4c7dee37195801b33.partially.cryptonar")) returned 1 [0133.283] SetErrorMode (uMode=0x1) returned 0x0 [0133.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d3fad85d1c5de4a6404132a8199e69dfe46883"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.284] SetErrorMode (uMode=0x0) returned 0x1 [0133.284] GetFileType (hFile=0x230) returned 0x1 [0133.284] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.294] SetErrorMode (uMode=0x1) returned 0x0 [0133.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d3fad85d1c5de4a6404132a8199e69dfe46883"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x946e0542, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x946e0542, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x51e70710, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1263)) returned 1 [0133.294] SetErrorMode (uMode=0x0) returned 0x1 [0133.294] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d3fad85d1c5de4a6404132a8199e69dfe46883"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6D3FAD85D1C5DE4A6404132A8199E69DFE46883.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6d3fad85d1c5de4a6404132a8199e69dfe46883.partially.cryptonar")) returned 1 [0133.295] SetErrorMode (uMode=0x1) returned 0x0 [0133.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6fbe9cdc62d5615c39a962b00b00ab1c735197e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.296] SetErrorMode (uMode=0x0) returned 0x1 [0133.297] GetFileType (hFile=0x230) returned 0x1 [0133.297] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.416] SetErrorMode (uMode=0x1) returned 0x0 [0133.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6fbe9cdc62d5615c39a962b00b00ab1c735197e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd4cc3b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xddd4cc3b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x51fa197e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe9ab)) returned 1 [0133.416] SetErrorMode (uMode=0x0) returned 0x1 [0133.416] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6fbe9cdc62d5615c39a962b00b00ab1c735197e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C6FBE9CDC62D5615C39A962B00B00AB1C735197E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c6fbe9cdc62d5615c39a962b00b00ab1c735197e.partially.cryptonar")) returned 1 [0133.418] SetErrorMode (uMode=0x1) returned 0x0 [0133.418] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c7453facd8b326e9bca8fe524015c4423278c9f7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.419] SetErrorMode (uMode=0x0) returned 0x1 [0133.419] GetFileType (hFile=0x230) returned 0x1 [0133.419] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.469] SetErrorMode (uMode=0x1) returned 0x0 [0133.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c7453facd8b326e9bca8fe524015c4423278c9f7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48846112, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48846112, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x520141ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa15)) returned 1 [0133.469] SetErrorMode (uMode=0x0) returned 0x1 [0133.469] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c7453facd8b326e9bca8fe524015c4423278c9f7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C7453FACD8B326E9BCA8FE524015C4423278C9F7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c7453facd8b326e9bca8fe524015c4423278c9f7.partially.cryptonar")) returned 1 [0133.471] SetErrorMode (uMode=0x1) returned 0x0 [0133.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c77b5180a8ea3664bb00894ba85dfa7a72e298ec"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.472] SetErrorMode (uMode=0x0) returned 0x1 [0133.472] GetFileType (hFile=0x230) returned 0x1 [0133.472] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.512] SetErrorMode (uMode=0x1) returned 0x0 [0133.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c77b5180a8ea3664bb00894ba85dfa7a72e298ec"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87cfd45e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87cfd45e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52086967, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xee5)) returned 1 [0133.512] SetErrorMode (uMode=0x0) returned 0x1 [0133.512] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c77b5180a8ea3664bb00894ba85dfa7a72e298ec"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C77B5180A8EA3664BB00894BA85DFA7A72E298EC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c77b5180a8ea3664bb00894ba85dfa7a72e298ec.partially.cryptonar")) returned 1 [0133.515] SetErrorMode (uMode=0x1) returned 0x0 [0133.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c86f6fdd616be8b0f30dec15f3a1984cb61b5ff5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.516] SetErrorMode (uMode=0x0) returned 0x1 [0133.516] GetFileType (hFile=0x230) returned 0x1 [0133.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.545] SetErrorMode (uMode=0x1) returned 0x0 [0133.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c86f6fdd616be8b0f30dec15f3a1984cb61b5ff5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0cbb13, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3e0cbb13, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x520d2e12, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa98)) returned 1 [0133.546] SetErrorMode (uMode=0x0) returned 0x1 [0133.546] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c86f6fdd616be8b0f30dec15f3a1984cb61b5ff5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C86F6FDD616BE8B0F30DEC15F3A1984CB61B5FF5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c86f6fdd616be8b0f30dec15f3a1984cb61b5ff5.partially.cryptonar")) returned 1 [0133.547] SetErrorMode (uMode=0x1) returned 0x0 [0133.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c886c15b36e63849fb9e86dcc97456303f590459"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.548] SetErrorMode (uMode=0x0) returned 0x1 [0133.548] GetFileType (hFile=0x230) returned 0x1 [0133.548] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.549] SetErrorMode (uMode=0x1) returned 0x0 [0133.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c886c15b36e63849fb9e86dcc97456303f590459"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf67ae9e9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf67ae9e9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x520d2e12, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1 [0133.549] SetErrorMode (uMode=0x0) returned 0x1 [0133.549] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c886c15b36e63849fb9e86dcc97456303f590459"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C886C15B36E63849FB9E86DCC97456303F590459.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c886c15b36e63849fb9e86dcc97456303f590459.partially.cryptonar")) returned 1 [0133.551] SetErrorMode (uMode=0x1) returned 0x0 [0133.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c95e824f69260ec56ba56c3001e44743197b6c48"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.551] SetErrorMode (uMode=0x0) returned 0x1 [0133.552] GetFileType (hFile=0x230) returned 0x1 [0133.552] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.553] SetErrorMode (uMode=0x1) returned 0x0 [0133.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c95e824f69260ec56ba56c3001e44743197b6c48"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x520d2e12, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8a0d)) returned 1 [0133.554] SetErrorMode (uMode=0x0) returned 0x1 [0133.554] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c95e824f69260ec56ba56c3001e44743197b6c48"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C95E824F69260EC56BA56C3001E44743197B6C48.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c95e824f69260ec56ba56c3001e44743197b6c48.partially.cryptonar")) returned 1 [0133.555] SetErrorMode (uMode=0x1) returned 0x0 [0133.555] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c972ac86ba22adbfc038b134c02101c894d0078a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.556] SetErrorMode (uMode=0x0) returned 0x1 [0133.556] GetFileType (hFile=0x230) returned 0x1 [0133.556] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.601] SetErrorMode (uMode=0x1) returned 0x0 [0133.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c972ac86ba22adbfc038b134c02101c894d0078a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd133db69, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd133db69, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52145385, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x53bc7)) returned 1 [0133.602] SetErrorMode (uMode=0x0) returned 0x1 [0133.602] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c972ac86ba22adbfc038b134c02101c894d0078a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C972AC86BA22ADBFC038B134C02101C894D0078A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c972ac86ba22adbfc038b134c02101c894d0078a.partially.cryptonar")) returned 1 [0133.603] SetErrorMode (uMode=0x1) returned 0x0 [0133.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c97d1f95f7d1463d27d4564c5162dd2a73947bdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.604] SetErrorMode (uMode=0x0) returned 0x1 [0133.604] GetFileType (hFile=0x230) returned 0x1 [0133.604] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.606] SetErrorMode (uMode=0x1) returned 0x0 [0133.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c97d1f95f7d1463d27d4564c5162dd2a73947bdb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf387dc66, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf387dc66, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5216c898, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3540)) returned 1 [0133.606] SetErrorMode (uMode=0x0) returned 0x1 [0133.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c97d1f95f7d1463d27d4564c5162dd2a73947bdb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C97D1F95F7D1463D27D4564C5162DD2A73947BDB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c97d1f95f7d1463d27d4564c5162dd2a73947bdb.partially.cryptonar")) returned 1 [0133.608] SetErrorMode (uMode=0x1) returned 0x0 [0133.608] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c99f573d81cd53d25e5d1e14f0315fd75e50e968"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.610] SetErrorMode (uMode=0x0) returned 0x1 [0133.610] GetFileType (hFile=0x230) returned 0x1 [0133.610] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.623] SetErrorMode (uMode=0x1) returned 0x0 [0133.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c99f573d81cd53d25e5d1e14f0315fd75e50e968"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x52191e7e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0133.623] SetErrorMode (uMode=0x0) returned 0x1 [0133.623] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c99f573d81cd53d25e5d1e14f0315fd75e50e968"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C99F573D81CD53D25E5D1E14F0315FD75E50E968.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c99f573d81cd53d25e5d1e14f0315fd75e50e968.partially.cryptonar")) returned 1 [0133.625] SetErrorMode (uMode=0x1) returned 0x0 [0133.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c9a12fce6396ec06eb6484e10fd461652842cecb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.626] SetErrorMode (uMode=0x0) returned 0x1 [0133.626] GetFileType (hFile=0x230) returned 0x1 [0133.626] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.628] SetErrorMode (uMode=0x1) returned 0x0 [0133.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c9a12fce6396ec06eb6484e10fd461652842cecb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f2d99a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xf7f2d99a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52191e7e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0133.628] SetErrorMode (uMode=0x0) returned 0x1 [0133.628] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c9a12fce6396ec06eb6484e10fd461652842cecb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\C9A12FCE6396EC06EB6484E10FD461652842CECB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\c9a12fce6396ec06eb6484e10fd461652842cecb.partially.cryptonar")) returned 1 [0133.630] SetErrorMode (uMode=0x1) returned 0x0 [0133.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca141f5232aa310b7c290c543787c07bddb091e7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.633] SetErrorMode (uMode=0x0) returned 0x1 [0133.633] GetFileType (hFile=0x230) returned 0x1 [0133.633] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.657] SetErrorMode (uMode=0x1) returned 0x0 [0133.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca141f5232aa310b7c290c543787c07bddb091e7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d5eed3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf2d5eed3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x521dde71, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0133.657] SetErrorMode (uMode=0x0) returned 0x1 [0133.657] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca141f5232aa310b7c290c543787c07bddb091e7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA141F5232AA310B7C290C543787C07BDDB091E7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca141f5232aa310b7c290c543787c07bddb091e7.partially.cryptonar")) returned 1 [0133.658] SetErrorMode (uMode=0x1) returned 0x0 [0133.659] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca302f67f21fc2283b285f13f48b45cf1ffe8a69"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.659] SetErrorMode (uMode=0x0) returned 0x1 [0133.660] GetFileType (hFile=0x230) returned 0x1 [0133.660] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.671] SetErrorMode (uMode=0x1) returned 0x0 [0133.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca302f67f21fc2283b285f13f48b45cf1ffe8a69"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8727f8f4, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8727f8f4, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5220405c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf7c)) returned 1 [0133.672] SetErrorMode (uMode=0x0) returned 0x1 [0133.672] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca302f67f21fc2283b285f13f48b45cf1ffe8a69"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA302F67F21FC2283B285F13F48B45CF1FFE8A69.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca302f67f21fc2283b285f13f48b45cf1ffe8a69.partially.cryptonar")) returned 1 [0133.673] SetErrorMode (uMode=0x1) returned 0x0 [0133.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca47b19518620d5822c6bfd89490bb624e197b98"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.674] SetErrorMode (uMode=0x0) returned 0x1 [0133.674] GetFileType (hFile=0x230) returned 0x1 [0133.674] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.676] SetErrorMode (uMode=0x1) returned 0x0 [0133.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca47b19518620d5822c6bfd89490bb624e197b98"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda41e89, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda41e89, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5220405c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1bfa)) returned 1 [0133.676] SetErrorMode (uMode=0x0) returned 0x1 [0133.676] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca47b19518620d5822c6bfd89490bb624e197b98"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CA47B19518620D5822C6BFD89490BB624E197B98.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ca47b19518620d5822c6bfd89490bb624e197b98.partially.cryptonar")) returned 1 [0133.679] SetErrorMode (uMode=0x1) returned 0x0 [0133.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb06f3f3e4fcbd4d7968183ff36d440700c56e89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.680] SetErrorMode (uMode=0x0) returned 0x1 [0133.680] GetFileType (hFile=0x230) returned 0x1 [0133.680] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.689] SetErrorMode (uMode=0x1) returned 0x0 [0133.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb06f3f3e4fcbd4d7968183ff36d440700c56e89"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54569cd4, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54569cd4, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5222a308, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfd5)) returned 1 [0133.690] SetErrorMode (uMode=0x0) returned 0x1 [0133.690] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb06f3f3e4fcbd4d7968183ff36d440700c56e89"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB06F3F3E4FCBD4D7968183FF36D440700C56E89.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb06f3f3e4fcbd4d7968183ff36d440700c56e89.partially.cryptonar")) returned 1 [0133.691] SetErrorMode (uMode=0x1) returned 0x0 [0133.691] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb7f80280433db6c2ab7523118ae32e9b0145b89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.693] SetErrorMode (uMode=0x0) returned 0x1 [0133.693] GetFileType (hFile=0x230) returned 0x1 [0133.693] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.695] SetErrorMode (uMode=0x1) returned 0x0 [0133.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb7f80280433db6c2ab7523118ae32e9b0145b89"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe3af39, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xcfe3af39, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5222a308, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x27a1)) returned 1 [0133.696] SetErrorMode (uMode=0x0) returned 0x1 [0133.696] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb7f80280433db6c2ab7523118ae32e9b0145b89"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CB7F80280433DB6C2AB7523118AE32E9B0145B89.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cb7f80280433db6c2ab7523118ae32e9b0145b89.partially.cryptonar")) returned 1 [0133.697] SetErrorMode (uMode=0x1) returned 0x0 [0133.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cbac5e389d030968ed6917c840b4ec0a4a63e2e9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.698] SetErrorMode (uMode=0x0) returned 0x1 [0133.698] GetFileType (hFile=0x230) returned 0x1 [0133.698] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.700] SetErrorMode (uMode=0x1) returned 0x0 [0133.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cbac5e389d030968ed6917c840b4ec0a4a63e2e9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5413db09, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5413db09, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x52250421, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3acf)) returned 1 [0133.700] SetErrorMode (uMode=0x0) returned 0x1 [0133.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cbac5e389d030968ed6917c840b4ec0a4a63e2e9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CBAC5E389D030968ED6917C840B4EC0A4A63E2E9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cbac5e389d030968ed6917c840b4ec0a4a63e2e9.partially.cryptonar")) returned 1 [0133.702] SetErrorMode (uMode=0x1) returned 0x0 [0133.702] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc2a8bdf0dccf7ea8c7c4105f9e28e1d4a76a49b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.703] SetErrorMode (uMode=0x0) returned 0x1 [0133.703] GetFileType (hFile=0x230) returned 0x1 [0133.703] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.721] SetErrorMode (uMode=0x1) returned 0x0 [0133.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc2a8bdf0dccf7ea8c7c4105f9e28e1d4a76a49b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52276771, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x185d5)) returned 1 [0133.721] SetErrorMode (uMode=0x0) returned 0x1 [0133.721] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc2a8bdf0dccf7ea8c7c4105f9e28e1d4a76a49b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC2A8BDF0DCCF7EA8C7C4105F9E28E1D4A76A49B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc2a8bdf0dccf7ea8c7c4105f9e28e1d4a76a49b.partially.cryptonar")) returned 1 [0133.723] SetErrorMode (uMode=0x1) returned 0x0 [0133.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc8ce593a5f223276d1643fb5b74a4edf0663e86"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.724] SetErrorMode (uMode=0x0) returned 0x1 [0133.724] GetFileType (hFile=0x230) returned 0x1 [0133.724] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.749] SetErrorMode (uMode=0x1) returned 0x0 [0133.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc8ce593a5f223276d1643fb5b74a4edf0663e86"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86329886, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86329886, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x522c32fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf22)) returned 1 [0133.750] SetErrorMode (uMode=0x0) returned 0x1 [0133.750] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc8ce593a5f223276d1643fb5b74a4edf0663e86"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CC8CE593A5F223276D1643FB5B74A4EDF0663E86.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cc8ce593a5f223276d1643fb5b74a4edf0663e86.partially.cryptonar")) returned 1 [0133.752] SetErrorMode (uMode=0x1) returned 0x0 [0133.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ccc3379a00d4874cce6fc80f67576d843d43cf1d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.753] SetErrorMode (uMode=0x0) returned 0x1 [0133.753] GetFileType (hFile=0x230) returned 0x1 [0133.753] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.781] SetErrorMode (uMode=0x1) returned 0x0 [0133.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ccc3379a00d4874cce6fc80f67576d843d43cf1d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x52310438, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1bc1e)) returned 1 [0133.781] SetErrorMode (uMode=0x0) returned 0x1 [0133.781] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ccc3379a00d4874cce6fc80f67576d843d43cf1d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CCC3379A00D4874CCE6FC80F67576D843D43CF1D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ccc3379a00d4874cce6fc80f67576d843d43cf1d.partially.cryptonar")) returned 1 [0133.782] SetErrorMode (uMode=0x1) returned 0x0 [0133.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce031113eab415f7a4924029386ab488343d75cd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.783] SetErrorMode (uMode=0x0) returned 0x1 [0133.784] GetFileType (hFile=0x230) returned 0x1 [0133.784] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.796] SetErrorMode (uMode=0x1) returned 0x0 [0133.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce031113eab415f7a4924029386ab488343d75cd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc87417, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7bc87417, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5233860b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0133.797] SetErrorMode (uMode=0x0) returned 0x1 [0133.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce031113eab415f7a4924029386ab488343d75cd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE031113EAB415F7A4924029386AB488343D75CD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce031113eab415f7a4924029386ab488343d75cd.partially.cryptonar")) returned 1 [0133.799] SetErrorMode (uMode=0x1) returned 0x0 [0133.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce42030f5816ea164f67512875e5193bd6324334"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.800] SetErrorMode (uMode=0x0) returned 0x1 [0133.800] GetFileType (hFile=0x230) returned 0x1 [0133.800] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.802] SetErrorMode (uMode=0x1) returned 0x0 [0133.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce42030f5816ea164f67512875e5193bd6324334"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543c62ff, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x543c62ff, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5233860b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2144)) returned 1 [0133.802] SetErrorMode (uMode=0x0) returned 0x1 [0133.802] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce42030f5816ea164f67512875e5193bd6324334"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CE42030F5816EA164F67512875E5193BD6324334.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ce42030f5816ea164f67512875e5193bd6324334.partially.cryptonar")) returned 1 [0133.803] SetErrorMode (uMode=0x1) returned 0x0 [0133.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cee4f020c2ae9f88c6d9fd835e8e0d0be281b6f4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.804] SetErrorMode (uMode=0x0) returned 0x1 [0133.804] GetFileType (hFile=0x230) returned 0x1 [0133.804] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.806] SetErrorMode (uMode=0x1) returned 0x0 [0133.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cee4f020c2ae9f88c6d9fd835e8e0d0be281b6f4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865403d3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x865403d3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5233860b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12e8)) returned 1 [0133.806] SetErrorMode (uMode=0x0) returned 0x1 [0133.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cee4f020c2ae9f88c6d9fd835e8e0d0be281b6f4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CEE4F020C2AE9F88C6D9FD835E8E0D0BE281B6F4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cee4f020c2ae9f88c6d9fd835e8e0d0be281b6f4.partially.cryptonar")) returned 1 [0133.807] SetErrorMode (uMode=0x1) returned 0x0 [0133.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cff24293e6e60613e48d2f2e2cc1f721414cccf7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.808] SetErrorMode (uMode=0x0) returned 0x1 [0133.808] GetFileType (hFile=0x230) returned 0x1 [0133.808] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.810] SetErrorMode (uMode=0x1) returned 0x0 [0133.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cff24293e6e60613e48d2f2e2cc1f721414cccf7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86402d5c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86402d5c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5235b437, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a08)) returned 1 [0133.810] SetErrorMode (uMode=0x0) returned 0x1 [0133.810] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cff24293e6e60613e48d2f2e2cc1f721414cccf7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\CFF24293E6E60613E48D2F2E2CC1F721414CCCF7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\cff24293e6e60613e48d2f2e2cc1f721414cccf7.partially.cryptonar")) returned 1 [0133.812] SetErrorMode (uMode=0x1) returned 0x0 [0133.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d012b01ef531e718c771dac040f05c0a21530d4d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.812] SetErrorMode (uMode=0x0) returned 0x1 [0133.812] GetFileType (hFile=0x230) returned 0x1 [0133.812] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.814] SetErrorMode (uMode=0x1) returned 0x0 [0133.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d012b01ef531e718c771dac040f05c0a21530d4d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf369a5b3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf369a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5235b437, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484f)) returned 1 [0133.814] SetErrorMode (uMode=0x0) returned 0x1 [0133.814] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d012b01ef531e718c771dac040f05c0a21530d4d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D012B01EF531E718C771DAC040F05C0A21530D4D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d012b01ef531e718c771dac040f05c0a21530d4d.partially.cryptonar")) returned 1 [0133.816] SetErrorMode (uMode=0x1) returned 0x0 [0133.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d04eebe4cad296a12d74364c89c4c67b17da3986"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.817] SetErrorMode (uMode=0x0) returned 0x1 [0133.817] GetFileType (hFile=0x230) returned 0x1 [0133.817] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.819] SetErrorMode (uMode=0x1) returned 0x0 [0133.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d04eebe4cad296a12d74364c89c4c67b17da3986"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x483a780d, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x483a780d, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5235b437, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ca1)) returned 1 [0133.819] SetErrorMode (uMode=0x0) returned 0x1 [0133.819] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d04eebe4cad296a12d74364c89c4c67b17da3986"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D04EEBE4CAD296A12D74364C89C4C67B17DA3986.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d04eebe4cad296a12d74364c89c4c67b17da3986.partially.cryptonar")) returned 1 [0133.820] SetErrorMode (uMode=0x1) returned 0x0 [0133.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d0ec0312840e3fc86b187974bcf7249a67b8fc14"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.821] SetErrorMode (uMode=0x0) returned 0x1 [0133.821] GetFileType (hFile=0x230) returned 0x1 [0133.821] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.858] SetErrorMode (uMode=0x1) returned 0x0 [0133.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d0ec0312840e3fc86b187974bcf7249a67b8fc14"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf499c603, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf499c603, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x523cdd5d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe46)) returned 1 [0133.858] SetErrorMode (uMode=0x0) returned 0x1 [0133.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d0ec0312840e3fc86b187974bcf7249a67b8fc14"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D0EC0312840E3FC86B187974BCF7249A67B8FC14.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d0ec0312840e3fc86b187974bcf7249a67b8fc14.partially.cryptonar")) returned 1 [0133.860] SetErrorMode (uMode=0x1) returned 0x0 [0133.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d1a6fdd49c775939f18ef172b45c2a7876b5a8c9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.861] SetErrorMode (uMode=0x0) returned 0x1 [0133.861] GetFileType (hFile=0x230) returned 0x1 [0133.861] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.913] SetErrorMode (uMode=0x1) returned 0x0 [0133.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d1a6fdd49c775939f18ef172b45c2a7876b5a8c9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48b8d58b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48b8d58b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x52440472, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3736)) returned 1 [0133.913] SetErrorMode (uMode=0x0) returned 0x1 [0133.913] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d1a6fdd49c775939f18ef172b45c2a7876b5a8c9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D1A6FDD49C775939F18EF172B45C2A7876B5A8C9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d1a6fdd49c775939f18ef172b45c2a7876b5a8c9.partially.cryptonar")) returned 1 [0133.915] SetErrorMode (uMode=0x1) returned 0x0 [0133.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d23eb138fbf38277931754f5e6df1a72b541893a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.916] SetErrorMode (uMode=0x0) returned 0x1 [0133.916] GetFileType (hFile=0x230) returned 0x1 [0133.916] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.931] SetErrorMode (uMode=0x1) returned 0x0 [0133.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d23eb138fbf38277931754f5e6df1a72b541893a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x524665b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0133.931] SetErrorMode (uMode=0x0) returned 0x1 [0133.931] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d23eb138fbf38277931754f5e6df1a72b541893a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D23EB138FBF38277931754F5E6DF1A72B541893A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d23eb138fbf38277931754f5e6df1a72b541893a.partially.cryptonar")) returned 1 [0133.933] SetErrorMode (uMode=0x1) returned 0x0 [0133.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26b30c29653ff6e88387c8edc58bcd16c78ae71"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.934] SetErrorMode (uMode=0x0) returned 0x1 [0133.934] GetFileType (hFile=0x230) returned 0x1 [0133.934] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.944] SetErrorMode (uMode=0x1) returned 0x0 [0133.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26b30c29653ff6e88387c8edc58bcd16c78ae71"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x886a1b03, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x886a1b03, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5248c77d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x498)) returned 1 [0133.944] SetErrorMode (uMode=0x0) returned 0x1 [0133.944] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26b30c29653ff6e88387c8edc58bcd16c78ae71"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26B30C29653FF6E88387C8EDC58BCD16C78AE71.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26b30c29653ff6e88387c8edc58bcd16c78ae71.partially.cryptonar")) returned 1 [0133.945] SetErrorMode (uMode=0x1) returned 0x0 [0133.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26d2eb85b6c6d10e3cd0ebf37e16574f96615d4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.946] SetErrorMode (uMode=0x0) returned 0x1 [0133.946] GetFileType (hFile=0x230) returned 0x1 [0133.947] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0133.988] SetErrorMode (uMode=0x1) returned 0x0 [0133.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26d2eb85b6c6d10e3cd0ebf37e16574f96615d4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ff63a35, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5ff63a35, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x524fefbe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0133.988] SetErrorMode (uMode=0x0) returned 0x1 [0133.988] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26d2eb85b6c6d10e3cd0ebf37e16574f96615d4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D26D2EB85B6C6D10E3CD0EBF37E16574F96615D4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d26d2eb85b6c6d10e3cd0ebf37e16574f96615d4.partially.cryptonar")) returned 1 [0133.990] SetErrorMode (uMode=0x1) returned 0x0 [0133.990] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d287db1d82ce15ea35d5594a90d93b611fdedbb2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0133.991] SetErrorMode (uMode=0x0) returned 0x1 [0133.991] GetFileType (hFile=0x230) returned 0x1 [0133.991] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.040] SetErrorMode (uMode=0x1) returned 0x0 [0134.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d287db1d82ce15ea35d5594a90d93b611fdedbb2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f65a88, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x54f65a88, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x525716cc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb042)) returned 1 [0134.040] SetErrorMode (uMode=0x0) returned 0x1 [0134.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d287db1d82ce15ea35d5594a90d93b611fdedbb2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D287DB1D82CE15EA35D5594A90D93B611FDEDBB2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d287db1d82ce15ea35d5594a90d93b611fdedbb2.partially.cryptonar")) returned 1 [0134.042] SetErrorMode (uMode=0x1) returned 0x0 [0134.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d381fb47d731c2651fb103e2f7bc18af380f7b1f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.043] SetErrorMode (uMode=0x0) returned 0x1 [0134.043] GetFileType (hFile=0x230) returned 0x1 [0134.043] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.071] SetErrorMode (uMode=0x1) returned 0x0 [0134.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d381fb47d731c2651fb103e2f7bc18af380f7b1f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc53279de, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc53279de, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x525bda36, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1be8)) returned 1 [0134.071] SetErrorMode (uMode=0x0) returned 0x1 [0134.071] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d381fb47d731c2651fb103e2f7bc18af380f7b1f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D381FB47D731C2651FB103E2F7BC18AF380F7B1F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d381fb47d731c2651fb103e2f7bc18af380f7b1f.partially.cryptonar")) returned 1 [0134.073] SetErrorMode (uMode=0x1) returned 0x0 [0134.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d44b347a13638ee05eb00425b25cbaf5cd282dd3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.074] SetErrorMode (uMode=0x0) returned 0x1 [0134.074] GetFileType (hFile=0x230) returned 0x1 [0134.074] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.076] SetErrorMode (uMode=0x1) returned 0x0 [0134.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d44b347a13638ee05eb00425b25cbaf5cd282dd3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bb1cb7, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85bb1cb7, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x525e3c5b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa59b)) returned 1 [0134.076] SetErrorMode (uMode=0x0) returned 0x1 [0134.076] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d44b347a13638ee05eb00425b25cbaf5cd282dd3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D44B347A13638EE05EB00425B25CBAF5CD282DD3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d44b347a13638ee05eb00425b25cbaf5cd282dd3.partially.cryptonar")) returned 1 [0134.077] SetErrorMode (uMode=0x1) returned 0x0 [0134.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d49e72d78c3715697df690aa687c1f3791fc5e3a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.078] SetErrorMode (uMode=0x0) returned 0x1 [0134.078] GetFileType (hFile=0x230) returned 0x1 [0134.078] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.080] SetErrorMode (uMode=0x1) returned 0x0 [0134.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d49e72d78c3715697df690aa687c1f3791fc5e3a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549e2349, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549e2349, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x525e3c5b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3602)) returned 1 [0134.081] SetErrorMode (uMode=0x0) returned 0x1 [0134.081] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d49e72d78c3715697df690aa687c1f3791fc5e3a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D49E72D78C3715697DF690AA687C1F3791FC5E3A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d49e72d78c3715697df690aa687c1f3791fc5e3a.partially.cryptonar")) returned 1 [0134.082] SetErrorMode (uMode=0x1) returned 0x0 [0134.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d50816b5e2ed9f09c831bdb4ae2f7cfa3c52fb2b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.083] SetErrorMode (uMode=0x0) returned 0x1 [0134.083] GetFileType (hFile=0x230) returned 0x1 [0134.083] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.101] SetErrorMode (uMode=0x1) returned 0x0 [0134.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d50816b5e2ed9f09c831bdb4ae2f7cfa3c52fb2b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88b88a78, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88b88a78, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52609fe8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0134.102] SetErrorMode (uMode=0x0) returned 0x1 [0134.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d50816b5e2ed9f09c831bdb4ae2f7cfa3c52fb2b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D50816B5E2ED9F09C831BDB4AE2F7CFA3C52FB2B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d50816b5e2ed9f09c831bdb4ae2f7cfa3c52fb2b.partially.cryptonar")) returned 1 [0134.104] SetErrorMode (uMode=0x1) returned 0x0 [0134.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d570d20f28499ad6c252e60269dbe07353805495"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.106] SetErrorMode (uMode=0x0) returned 0x1 [0134.106] GetFileType (hFile=0x230) returned 0x1 [0134.106] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.107] SetErrorMode (uMode=0x1) returned 0x0 [0134.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d570d20f28499ad6c252e60269dbe07353805495"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8804a0e0, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8804a0e0, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5263020d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbf3)) returned 1 [0134.108] SetErrorMode (uMode=0x0) returned 0x1 [0134.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d570d20f28499ad6c252e60269dbe07353805495"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D570D20F28499AD6C252E60269DBE07353805495.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d570d20f28499ad6c252e60269dbe07353805495.partially.cryptonar")) returned 1 [0134.109] SetErrorMode (uMode=0x1) returned 0x0 [0134.109] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5ab8cc0a1003487102f816a4a405469dad23e59"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.110] SetErrorMode (uMode=0x0) returned 0x1 [0134.110] GetFileType (hFile=0x230) returned 0x1 [0134.110] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.147] SetErrorMode (uMode=0x1) returned 0x0 [0134.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5ab8cc0a1003487102f816a4a405469dad23e59"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5267c72f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed6)) returned 1 [0134.148] SetErrorMode (uMode=0x0) returned 0x1 [0134.148] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5ab8cc0a1003487102f816a4a405469dad23e59"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5AB8CC0A1003487102F816A4A405469DAD23E59.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5ab8cc0a1003487102f816a4a405469dad23e59.partially.cryptonar")) returned 1 [0134.150] SetErrorMode (uMode=0x1) returned 0x0 [0134.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5bb319d7ce2bacda94f8548b526c81a6b2bf857"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.151] SetErrorMode (uMode=0x0) returned 0x1 [0134.151] GetFileType (hFile=0x230) returned 0x1 [0134.151] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.166] SetErrorMode (uMode=0x1) returned 0x0 [0134.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5bb319d7ce2bacda94f8548b526c81a6b2bf857"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc33dcb27, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc33dcb27, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x526c8bc4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaf5)) returned 1 [0134.167] SetErrorMode (uMode=0x0) returned 0x1 [0134.167] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5bb319d7ce2bacda94f8548b526c81a6b2bf857"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BB319D7CE2BACDA94F8548B526C81A6B2BF857.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5bb319d7ce2bacda94f8548b526c81a6b2bf857.partially.cryptonar")) returned 1 [0134.168] SetErrorMode (uMode=0x1) returned 0x0 [0134.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5be614c1ebe9e5b82200b0bc51e343cf5cc6f93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.169] SetErrorMode (uMode=0x0) returned 0x1 [0134.169] GetFileType (hFile=0x230) returned 0x1 [0134.169] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.184] SetErrorMode (uMode=0x1) returned 0x0 [0134.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5be614c1ebe9e5b82200b0bc51e343cf5cc6f93"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fb5b67a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3fb5b67a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x526f0a67, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10761)) returned 1 [0134.184] SetErrorMode (uMode=0x0) returned 0x1 [0134.185] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5be614c1ebe9e5b82200b0bc51e343cf5cc6f93"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5BE614C1EBE9E5B82200B0BC51E343CF5CC6F93.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5be614c1ebe9e5b82200b0bc51e343cf5cc6f93.partially.cryptonar")) returned 1 [0134.186] SetErrorMode (uMode=0x1) returned 0x0 [0134.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dc762df0422060c6f9a047e69273b52d0695ba"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.187] SetErrorMode (uMode=0x0) returned 0x1 [0134.187] GetFileType (hFile=0x230) returned 0x1 [0134.187] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.209] SetErrorMode (uMode=0x1) returned 0x0 [0134.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dc762df0422060c6f9a047e69273b52d0695ba"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x527161bd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10e0)) returned 1 [0134.210] SetErrorMode (uMode=0x0) returned 0x1 [0134.210] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dc762df0422060c6f9a047e69273b52d0695ba"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DC762DF0422060C6F9A047E69273B52D0695BA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dc762df0422060c6f9a047e69273b52d0695ba.partially.cryptonar")) returned 1 [0134.211] SetErrorMode (uMode=0x1) returned 0x0 [0134.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dcfe019454129c62a59d3a88c47156f7b88ba9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.213] SetErrorMode (uMode=0x0) returned 0x1 [0134.213] GetFileType (hFile=0x230) returned 0x1 [0134.213] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.231] SetErrorMode (uMode=0x1) returned 0x0 [0134.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dcfe019454129c62a59d3a88c47156f7b88ba9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x527615e4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe55)) returned 1 [0134.231] SetErrorMode (uMode=0x0) returned 0x1 [0134.231] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dcfe019454129c62a59d3a88c47156f7b88ba9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5DCFE019454129C62A59D3A88C47156F7B88BA9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5dcfe019454129c62a59d3a88c47156f7b88ba9.partially.cryptonar")) returned 1 [0134.233] SetErrorMode (uMode=0x1) returned 0x0 [0134.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5fbfc2e0d8272d13795db35e359bac056694b0f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.234] SetErrorMode (uMode=0x0) returned 0x1 [0134.234] GetFileType (hFile=0x230) returned 0x1 [0134.234] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.252] SetErrorMode (uMode=0x1) returned 0x0 [0134.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5fbfc2e0d8272d13795db35e359bac056694b0f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4798580c, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4798580c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5278885c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x34c)) returned 1 [0134.252] SetErrorMode (uMode=0x0) returned 0x1 [0134.252] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5fbfc2e0d8272d13795db35e359bac056694b0f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D5FBFC2E0D8272D13795DB35E359BAC056694B0F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d5fbfc2e0d8272d13795db35e359bac056694b0f.partially.cryptonar")) returned 1 [0134.254] SetErrorMode (uMode=0x1) returned 0x0 [0134.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d61ebe2bc4d099371fbe4c68d687faa6416db3d5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.255] SetErrorMode (uMode=0x0) returned 0x1 [0134.255] GetFileType (hFile=0x230) returned 0x1 [0134.255] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.268] SetErrorMode (uMode=0x1) returned 0x0 [0134.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d61ebe2bc4d099371fbe4c68d687faa6416db3d5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b80fad, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x80b80fad, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x527ad90a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaa3)) returned 1 [0134.269] SetErrorMode (uMode=0x0) returned 0x1 [0134.269] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d61ebe2bc4d099371fbe4c68d687faa6416db3d5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D61EBE2BC4D099371FBE4C68D687FAA6416DB3D5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d61ebe2bc4d099371fbe4c68d687faa6416db3d5.partially.cryptonar")) returned 1 [0134.271] SetErrorMode (uMode=0x1) returned 0x0 [0134.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d63eb68aa63a8165758df40dec9f79208efc096a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.272] SetErrorMode (uMode=0x0) returned 0x1 [0134.272] GetFileType (hFile=0x230) returned 0x1 [0134.272] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.274] SetErrorMode (uMode=0x1) returned 0x0 [0134.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d63eb68aa63a8165758df40dec9f79208efc096a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf6a371, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3cf6a371, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x527ad90a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa3a)) returned 1 [0134.275] SetErrorMode (uMode=0x0) returned 0x1 [0134.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d63eb68aa63a8165758df40dec9f79208efc096a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D63EB68AA63A8165758DF40DEC9F79208EFC096A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d63eb68aa63a8165758df40dec9f79208efc096a.partially.cryptonar")) returned 1 [0134.277] SetErrorMode (uMode=0x1) returned 0x0 [0134.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6d081457cf07afa7a0bef995b37b6400d5e830d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.278] SetErrorMode (uMode=0x0) returned 0x1 [0134.278] GetFileType (hFile=0x230) returned 0x1 [0134.278] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.279] SetErrorMode (uMode=0x1) returned 0x0 [0134.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6d081457cf07afa7a0bef995b37b6400d5e830d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55b01c8, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc55b01c8, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x527d3b78, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0134.279] SetErrorMode (uMode=0x0) returned 0x1 [0134.279] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6d081457cf07afa7a0bef995b37b6400d5e830d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6D081457CF07AFA7A0BEF995B37B6400D5E830D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6d081457cf07afa7a0bef995b37b6400d5e830d.partially.cryptonar")) returned 1 [0134.281] SetErrorMode (uMode=0x1) returned 0x0 [0134.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6f079f21194af40050b050cf0c5b7b7593cb819"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.282] SetErrorMode (uMode=0x0) returned 0x1 [0134.282] GetFileType (hFile=0x230) returned 0x1 [0134.282] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.283] SetErrorMode (uMode=0x1) returned 0x0 [0134.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6f079f21194af40050b050cf0c5b7b7593cb819"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f20c6ff, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f20c6ff, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x527d3b78, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdfd)) returned 1 [0134.283] SetErrorMode (uMode=0x0) returned 0x1 [0134.284] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6f079f21194af40050b050cf0c5b7b7593cb819"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D6F079F21194AF40050B050CF0C5B7B7593CB819.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d6f079f21194af40050b050cf0c5b7b7593cb819.partially.cryptonar")) returned 1 [0134.285] SetErrorMode (uMode=0x1) returned 0x0 [0134.285] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d8f9517f7b467542a0b48c5afa173d728b3e867f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.286] SetErrorMode (uMode=0x0) returned 0x1 [0134.286] GetFileType (hFile=0x230) returned 0x1 [0134.286] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.306] SetErrorMode (uMode=0x1) returned 0x0 [0134.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d8f9517f7b467542a0b48c5afa173d728b3e867f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x527f9e10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe55)) returned 1 [0134.306] SetErrorMode (uMode=0x0) returned 0x1 [0134.306] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d8f9517f7b467542a0b48c5afa173d728b3e867f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D8F9517F7B467542A0B48C5AFA173D728B3E867F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d8f9517f7b467542a0b48c5afa173d728b3e867f.partially.cryptonar")) returned 1 [0134.308] SetErrorMode (uMode=0x1) returned 0x0 [0134.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9214db11627bc7320896c660646b3bb5928a3e1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.309] SetErrorMode (uMode=0x0) returned 0x1 [0134.309] GetFileType (hFile=0x230) returned 0x1 [0134.309] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.311] SetErrorMode (uMode=0x1) returned 0x0 [0134.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9214db11627bc7320896c660646b3bb5928a3e1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c16393c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c16393c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5282035e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c66)) returned 1 [0134.311] SetErrorMode (uMode=0x0) returned 0x1 [0134.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9214db11627bc7320896c660646b3bb5928a3e1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9214DB11627BC7320896C660646B3BB5928A3E1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9214db11627bc7320896c660646b3bb5928a3e1.partially.cryptonar")) returned 1 [0134.313] SetErrorMode (uMode=0x1) returned 0x0 [0134.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9fcf8e310397bf1f14cf1d297f8d882bf9b716b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.314] SetErrorMode (uMode=0x0) returned 0x1 [0134.314] GetFileType (hFile=0x230) returned 0x1 [0134.314] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.338] SetErrorMode (uMode=0x1) returned 0x0 [0134.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9fcf8e310397bf1f14cf1d297f8d882bf9b716b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e89099, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e89099, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5286c63f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2393)) returned 1 [0134.339] SetErrorMode (uMode=0x0) returned 0x1 [0134.339] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9fcf8e310397bf1f14cf1d297f8d882bf9b716b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\D9FCF8E310397BF1F14CF1D297F8D882BF9B716B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\d9fcf8e310397bf1f14cf1d297f8d882bf9b716b.partially.cryptonar")) returned 1 [0134.342] SetErrorMode (uMode=0x1) returned 0x0 [0134.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\da976e14b75c312e9e77bed368f06e50ae15e8d7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.343] SetErrorMode (uMode=0x0) returned 0x1 [0134.343] GetFileType (hFile=0x230) returned 0x1 [0134.343] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.357] SetErrorMode (uMode=0x1) returned 0x0 [0134.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\da976e14b75c312e9e77bed368f06e50ae15e8d7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x861a7c68, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x861a7c68, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5289283e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1af7)) returned 1 [0134.357] SetErrorMode (uMode=0x0) returned 0x1 [0134.357] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\da976e14b75c312e9e77bed368f06e50ae15e8d7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DA976E14B75C312E9E77BED368F06E50AE15E8D7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\da976e14b75c312e9e77bed368f06e50ae15e8d7.partially.cryptonar")) returned 1 [0134.359] SetErrorMode (uMode=0x1) returned 0x0 [0134.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dac72a334f6e2dc96ba09a9a85ecbe7a3b8c77d8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.360] SetErrorMode (uMode=0x0) returned 0x1 [0134.360] GetFileType (hFile=0x230) returned 0x1 [0134.360] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.385] SetErrorMode (uMode=0x1) returned 0x0 [0134.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dac72a334f6e2dc96ba09a9a85ecbe7a3b8c77d8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x528dfaca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf12)) returned 1 [0134.385] SetErrorMode (uMode=0x0) returned 0x1 [0134.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dac72a334f6e2dc96ba09a9a85ecbe7a3b8c77d8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DAC72A334F6E2DC96BA09A9A85ECBE7A3B8C77D8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dac72a334f6e2dc96ba09a9a85ecbe7a3b8c77d8.partially.cryptonar")) returned 1 [0134.387] SetErrorMode (uMode=0x1) returned 0x0 [0134.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db14345bcb05a4867c9161fb375c431f56ef9884"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.388] SetErrorMode (uMode=0x0) returned 0x1 [0134.388] GetFileType (hFile=0x230) returned 0x1 [0134.388] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.390] SetErrorMode (uMode=0x1) returned 0x0 [0134.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db14345bcb05a4867c9161fb375c431f56ef9884"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x528dfaca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0134.390] SetErrorMode (uMode=0x0) returned 0x1 [0134.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db14345bcb05a4867c9161fb375c431f56ef9884"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB14345BCB05A4867C9161FB375C431F56EF9884.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db14345bcb05a4867c9161fb375c431f56ef9884.partially.cryptonar")) returned 1 [0134.392] SetErrorMode (uMode=0x1) returned 0x0 [0134.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db2ec57404309c752195f926c20cf4d374ae9ae9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.393] SetErrorMode (uMode=0x0) returned 0x1 [0134.393] GetFileType (hFile=0x230) returned 0x1 [0134.393] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.416] SetErrorMode (uMode=0x1) returned 0x0 [0134.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db2ec57404309c752195f926c20cf4d374ae9ae9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5589f73, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5589f73, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5292b00b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdf15)) returned 1 [0134.417] SetErrorMode (uMode=0x0) returned 0x1 [0134.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db2ec57404309c752195f926c20cf4d374ae9ae9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB2EC57404309C752195F926C20CF4D374AE9AE9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db2ec57404309c752195f926c20cf4d374ae9ae9.partially.cryptonar")) returned 1 [0134.418] SetErrorMode (uMode=0x1) returned 0x0 [0134.418] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db35f7b5c3b638134575506c1decc7214b0152e3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.419] SetErrorMode (uMode=0x0) returned 0x1 [0134.419] GetFileType (hFile=0x230) returned 0x1 [0134.419] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.440] SetErrorMode (uMode=0x1) returned 0x0 [0134.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db35f7b5c3b638134575506c1decc7214b0152e3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f06aee6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f06aee6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x529513d0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7a8f)) returned 1 [0134.441] SetErrorMode (uMode=0x0) returned 0x1 [0134.441] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db35f7b5c3b638134575506c1decc7214b0152e3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB35F7B5C3B638134575506C1DECC7214B0152E3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db35f7b5c3b638134575506c1decc7214b0152e3.partially.cryptonar")) returned 1 [0134.442] SetErrorMode (uMode=0x1) returned 0x0 [0134.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db65f2f6542a9b1877838f046853c61ece4beb29"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.443] SetErrorMode (uMode=0x0) returned 0x1 [0134.444] GetFileType (hFile=0x230) returned 0x1 [0134.444] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.446] SetErrorMode (uMode=0x1) returned 0x0 [0134.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db65f2f6542a9b1877838f046853c61ece4beb29"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x897797a6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x897797a6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x529513d0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x35e9)) returned 1 [0134.446] SetErrorMode (uMode=0x0) returned 0x1 [0134.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db65f2f6542a9b1877838f046853c61ece4beb29"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB65F2F6542A9B1877838F046853C61ECE4BEB29.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db65f2f6542a9b1877838f046853c61ece4beb29.partially.cryptonar")) returned 1 [0134.448] SetErrorMode (uMode=0x1) returned 0x0 [0134.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db7b4f598dc813ff0ed87d8fb28b07938972d877"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.448] SetErrorMode (uMode=0x0) returned 0x1 [0134.449] GetFileType (hFile=0x230) returned 0x1 [0134.449] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.450] SetErrorMode (uMode=0x1) returned 0x0 [0134.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db7b4f598dc813ff0ed87d8fb28b07938972d877"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c4d127, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5c4d127, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x529774c6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd34)) returned 1 [0134.450] SetErrorMode (uMode=0x0) returned 0x1 [0134.450] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db7b4f598dc813ff0ed87d8fb28b07938972d877"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB7B4F598DC813FF0ED87D8FB28B07938972D877.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db7b4f598dc813ff0ed87d8fb28b07938972d877.partially.cryptonar")) returned 1 [0134.452] SetErrorMode (uMode=0x1) returned 0x0 [0134.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db9c379b8bcc5c0b7939cf2847225fecba24256f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.453] SetErrorMode (uMode=0x0) returned 0x1 [0134.453] GetFileType (hFile=0x230) returned 0x1 [0134.453] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.473] SetErrorMode (uMode=0x1) returned 0x0 [0134.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db9c379b8bcc5c0b7939cf2847225fecba24256f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8e579b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c8e579b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5299d852, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa98)) returned 1 [0134.473] SetErrorMode (uMode=0x0) returned 0x1 [0134.473] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db9c379b8bcc5c0b7939cf2847225fecba24256f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DB9C379B8BCC5C0B7939CF2847225FECBA24256F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\db9c379b8bcc5c0b7939cf2847225fecba24256f.partially.cryptonar")) returned 1 [0134.474] SetErrorMode (uMode=0x1) returned 0x0 [0134.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc35e516849bdb1cd66329aaaeb70dccf968f72e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.476] SetErrorMode (uMode=0x0) returned 0x1 [0134.476] GetFileType (hFile=0x230) returned 0x1 [0134.476] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.485] SetErrorMode (uMode=0x1) returned 0x0 [0134.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc35e516849bdb1cd66329aaaeb70dccf968f72e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf477be8a, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf477be8a, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x529c39dc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c65)) returned 1 [0134.485] SetErrorMode (uMode=0x0) returned 0x1 [0134.485] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc35e516849bdb1cd66329aaaeb70dccf968f72e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC35E516849BDB1CD66329AAAEB70DCCF968F72E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc35e516849bdb1cd66329aaaeb70dccf968f72e.partially.cryptonar")) returned 1 [0134.487] SetErrorMode (uMode=0x1) returned 0x0 [0134.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc4d1e7db155e48a1ee307e80594c7efd3a4cbaa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.488] SetErrorMode (uMode=0x0) returned 0x1 [0134.488] GetFileType (hFile=0x230) returned 0x1 [0134.488] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.550] SetErrorMode (uMode=0x1) returned 0x0 [0134.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc4d1e7db155e48a1ee307e80594c7efd3a4cbaa"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4451501, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf4451501, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52a5c472, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xda4)) returned 1 [0134.550] SetErrorMode (uMode=0x0) returned 0x1 [0134.551] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc4d1e7db155e48a1ee307e80594c7efd3a4cbaa"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC4D1E7DB155E48A1EE307E80594C7EFD3A4CBAA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc4d1e7db155e48a1ee307e80594c7efd3a4cbaa.partially.cryptonar")) returned 1 [0134.552] SetErrorMode (uMode=0x1) returned 0x0 [0134.552] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc6edee259edc415a58f9090844e1512a6433e30"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.553] SetErrorMode (uMode=0x0) returned 0x1 [0134.553] GetFileType (hFile=0x230) returned 0x1 [0134.553] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.555] SetErrorMode (uMode=0x1) returned 0x0 [0134.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc6edee259edc415a58f9090844e1512a6433e30"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85bfb0af, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85bfb0af, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52a5c472, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23b8)) returned 1 [0134.555] SetErrorMode (uMode=0x0) returned 0x1 [0134.555] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc6edee259edc415a58f9090844e1512a6433e30"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC6EDEE259EDC415A58F9090844E1512A6433E30.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc6edee259edc415a58f9090844e1512a6433e30.partially.cryptonar")) returned 1 [0134.557] SetErrorMode (uMode=0x1) returned 0x0 [0134.557] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc88c3fd43bdf3c08efc291e53d213d7facaf25e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.558] SetErrorMode (uMode=0x0) returned 0x1 [0134.558] GetFileType (hFile=0x230) returned 0x1 [0134.558] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.570] SetErrorMode (uMode=0x1) returned 0x0 [0134.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc88c3fd43bdf3c08efc291e53d213d7facaf25e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f40364d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f40364d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52a825cb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5f35)) returned 1 [0134.570] SetErrorMode (uMode=0x0) returned 0x1 [0134.570] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc88c3fd43bdf3c08efc291e53d213d7facaf25e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC88C3FD43BDF3C08EFC291E53D213D7FACAF25E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc88c3fd43bdf3c08efc291e53d213d7facaf25e.partially.cryptonar")) returned 1 [0134.572] SetErrorMode (uMode=0x1) returned 0x0 [0134.573] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc9eda251ee111f3a521fe1dee79aa20d6e293f9"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.574] SetErrorMode (uMode=0x0) returned 0x1 [0134.574] GetFileType (hFile=0x230) returned 0x1 [0134.574] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.591] SetErrorMode (uMode=0x1) returned 0x0 [0134.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc9eda251ee111f3a521fe1dee79aa20d6e293f9"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e627d68, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7e627d68, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52aceb1f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb23)) returned 1 [0134.591] SetErrorMode (uMode=0x0) returned 0x1 [0134.591] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc9eda251ee111f3a521fe1dee79aa20d6e293f9"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DC9EDA251EE111F3A521FE1DEE79AA20D6E293F9.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dc9eda251ee111f3a521fe1dee79aa20d6e293f9.partially.cryptonar")) returned 1 [0134.593] SetErrorMode (uMode=0x1) returned 0x0 [0134.593] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd331cdee5217c660e4446ab9e026b5e35b511ce"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.594] SetErrorMode (uMode=0x0) returned 0x1 [0134.594] GetFileType (hFile=0x230) returned 0x1 [0134.594] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.615] SetErrorMode (uMode=0x1) returned 0x0 [0134.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd331cdee5217c660e4446ab9e026b5e35b511ce"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x52af4d45, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe55)) returned 1 [0134.615] SetErrorMode (uMode=0x0) returned 0x1 [0134.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd331cdee5217c660e4446ab9e026b5e35b511ce"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD331CDEE5217C660E4446AB9E026B5E35B511CE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd331cdee5217c660e4446ab9e026b5e35b511ce.partially.cryptonar")) returned 1 [0134.617] SetErrorMode (uMode=0x1) returned 0x0 [0134.617] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd555b1573cf9b20ecc06cd1e40952550161b7f6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.618] SetErrorMode (uMode=0x0) returned 0x1 [0134.618] GetFileType (hFile=0x230) returned 0x1 [0134.618] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.712] SetErrorMode (uMode=0x1) returned 0x0 [0134.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd555b1573cf9b20ecc06cd1e40952550161b7f6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4eaf35b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4eaf35b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52bd9be9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbc1d)) returned 1 [0134.712] SetErrorMode (uMode=0x0) returned 0x1 [0134.712] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd555b1573cf9b20ecc06cd1e40952550161b7f6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD555B1573CF9B20ECC06CD1E40952550161B7F6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd555b1573cf9b20ecc06cd1e40952550161b7f6.partially.cryptonar")) returned 1 [0134.714] SetErrorMode (uMode=0x1) returned 0x0 [0134.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd6d23189087e38a96ac10e85043366d02b2fa05"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.714] SetErrorMode (uMode=0x0) returned 0x1 [0134.714] GetFileType (hFile=0x230) returned 0x1 [0134.714] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.716] SetErrorMode (uMode=0x1) returned 0x0 [0134.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd6d23189087e38a96ac10e85043366d02b2fa05"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549bc116, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x549bc116, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x52bffd82, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3016)) returned 1 [0134.716] SetErrorMode (uMode=0x0) returned 0x1 [0134.716] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd6d23189087e38a96ac10e85043366d02b2fa05"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD6D23189087E38A96AC10E85043366D02B2FA05.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd6d23189087e38a96ac10e85043366d02b2fa05.partially.cryptonar")) returned 1 [0134.717] SetErrorMode (uMode=0x1) returned 0x0 [0134.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd7955ed55e47999ea8c7ea435e8a9998516745d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.718] SetErrorMode (uMode=0x0) returned 0x1 [0134.718] GetFileType (hFile=0x230) returned 0x1 [0134.718] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.719] SetErrorMode (uMode=0x1) returned 0x0 [0134.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd7955ed55e47999ea8c7ea435e8a9998516745d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x52bffd82, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbc)) returned 1 [0134.719] SetErrorMode (uMode=0x0) returned 0x1 [0134.719] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd7955ed55e47999ea8c7ea435e8a9998516745d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD7955ED55E47999EA8C7EA435E8A9998516745D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd7955ed55e47999ea8c7ea435e8a9998516745d.partially.cryptonar")) returned 1 [0134.720] SetErrorMode (uMode=0x1) returned 0x0 [0134.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd94abfb65bb6d7e2887463ae6eaaabf8105477f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.721] SetErrorMode (uMode=0x0) returned 0x1 [0134.721] GetFileType (hFile=0x230) returned 0x1 [0134.721] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.737] SetErrorMode (uMode=0x1) returned 0x0 [0134.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd94abfb65bb6d7e2887463ae6eaaabf8105477f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde0e53cd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde0e53cd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52c25fa0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfbe)) returned 1 [0134.737] SetErrorMode (uMode=0x0) returned 0x1 [0134.737] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd94abfb65bb6d7e2887463ae6eaaabf8105477f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DD94ABFB65BB6D7E2887463AE6EAAABF8105477F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\dd94abfb65bb6d7e2887463ae6eaaabf8105477f.partially.cryptonar")) returned 1 [0134.738] SetErrorMode (uMode=0x1) returned 0x0 [0134.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ddd3ccbc5b9060df64802e72007266b115ee1fc2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.739] SetErrorMode (uMode=0x0) returned 0x1 [0134.739] GetFileType (hFile=0x230) returned 0x1 [0134.739] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.749] SetErrorMode (uMode=0x1) returned 0x0 [0134.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ddd3ccbc5b9060df64802e72007266b115ee1fc2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4798580c, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x4798580c, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x52c4c4f6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x66d)) returned 1 [0134.749] SetErrorMode (uMode=0x0) returned 0x1 [0134.749] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ddd3ccbc5b9060df64802e72007266b115ee1fc2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DDD3CCBC5B9060DF64802E72007266B115EE1FC2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ddd3ccbc5b9060df64802e72007266b115ee1fc2.partially.cryptonar")) returned 1 [0134.750] SetErrorMode (uMode=0x1) returned 0x0 [0134.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\de5ea05fc720ed48c862d73d763ecf05ba52f303"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.751] SetErrorMode (uMode=0x0) returned 0x1 [0134.751] GetFileType (hFile=0x230) returned 0x1 [0134.751] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.752] SetErrorMode (uMode=0x1) returned 0x0 [0134.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\de5ea05fc720ed48c862d73d763ecf05ba52f303"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4482b9a6, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x4482b9a6, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x52c4c4f6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0134.752] SetErrorMode (uMode=0x0) returned 0x1 [0134.752] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\de5ea05fc720ed48c862d73d763ecf05ba52f303"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DE5EA05FC720ED48C862D73D763ECF05BA52F303.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\de5ea05fc720ed48c862d73d763ecf05ba52f303.partially.cryptonar")) returned 1 [0134.753] SetErrorMode (uMode=0x1) returned 0x0 [0134.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb93950b6b09b546b075ea3d98a625d7736c389"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.754] SetErrorMode (uMode=0x0) returned 0x1 [0134.754] GetFileType (hFile=0x230) returned 0x1 [0134.754] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.758] SetErrorMode (uMode=0x1) returned 0x0 [0134.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb93950b6b09b546b075ea3d98a625d7736c389"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x879f4dba, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x879f4dba, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52c4c4f6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2477)) returned 1 [0134.758] SetErrorMode (uMode=0x0) returned 0x1 [0134.758] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb93950b6b09b546b075ea3d98a625d7736c389"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB93950B6B09B546B075EA3D98A625D7736C389.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb93950b6b09b546b075ea3d98a625d7736c389.partially.cryptonar")) returned 1 [0134.760] SetErrorMode (uMode=0x1) returned 0x0 [0134.760] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb96a36e884508fa7960ad873ea8eafafc33775"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.762] SetErrorMode (uMode=0x0) returned 0x1 [0134.762] GetFileType (hFile=0x230) returned 0x1 [0134.762] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.778] SetErrorMode (uMode=0x1) returned 0x0 [0134.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb96a36e884508fa7960ad873ea8eafafc33775"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8c0db1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f8c0db1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52c987c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1bee)) returned 1 [0134.779] SetErrorMode (uMode=0x0) returned 0x1 [0134.779] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb96a36e884508fa7960ad873ea8eafafc33775"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEB96A36E884508FA7960AD873EA8EAFAFC33775.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\deb96a36e884508fa7960ad873ea8eafafc33775.partially.cryptonar")) returned 1 [0134.780] SetErrorMode (uMode=0x1) returned 0x0 [0134.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\defdf4d2703ff0edb617bb7ebe1a6e0997f23390"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.781] SetErrorMode (uMode=0x0) returned 0x1 [0134.781] GetFileType (hFile=0x230) returned 0x1 [0134.781] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.782] SetErrorMode (uMode=0x1) returned 0x0 [0134.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\defdf4d2703ff0edb617bb7ebe1a6e0997f23390"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88c534b6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88c534b6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52c987c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0134.783] SetErrorMode (uMode=0x0) returned 0x1 [0134.783] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\defdf4d2703ff0edb617bb7ebe1a6e0997f23390"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\DEFDF4D2703FF0EDB617BB7EBE1A6E0997F23390.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\defdf4d2703ff0edb617bb7ebe1a6e0997f23390.partially.cryptonar")) returned 1 [0134.784] SetErrorMode (uMode=0x1) returned 0x0 [0134.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0d705ec81c925e0077cafa8b01689e3d17e4d14"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.785] SetErrorMode (uMode=0x0) returned 0x1 [0134.785] GetFileType (hFile=0x230) returned 0x1 [0134.785] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.808] SetErrorMode (uMode=0x1) returned 0x0 [0134.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0d705ec81c925e0077cafa8b01689e3d17e4d14"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf38459f6, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf38459f6, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52ce4bd9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48f6)) returned 1 [0134.808] SetErrorMode (uMode=0x0) returned 0x1 [0134.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0d705ec81c925e0077cafa8b01689e3d17e4d14"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0D705EC81C925E0077CAFA8B01689E3D17E4D14.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0d705ec81c925e0077cafa8b01689e3d17e4d14.partially.cryptonar")) returned 1 [0134.809] SetErrorMode (uMode=0x1) returned 0x0 [0134.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0e842ce092a1406147c113a64af2d607e5f714c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.810] SetErrorMode (uMode=0x0) returned 0x1 [0134.810] GetFileType (hFile=0x230) returned 0x1 [0134.810] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.811] SetErrorMode (uMode=0x1) returned 0x0 [0134.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0e842ce092a1406147c113a64af2d607e5f714c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560a3a7a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x560a3a7a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x52ce4bd9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x69)) returned 1 [0134.812] SetErrorMode (uMode=0x0) returned 0x1 [0134.812] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0e842ce092a1406147c113a64af2d607e5f714c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E0E842CE092A1406147C113A64AF2D607E5F714C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e0e842ce092a1406147c113a64af2d607e5f714c.partially.cryptonar")) returned 1 [0134.813] SetErrorMode (uMode=0x1) returned 0x0 [0134.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e28a3149b5567fd2e5f36e78e602c8905dac66c5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.814] SetErrorMode (uMode=0x0) returned 0x1 [0134.814] GetFileType (hFile=0x230) returned 0x1 [0134.814] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.827] SetErrorMode (uMode=0x1) returned 0x0 [0134.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e28a3149b5567fd2e5f36e78e602c8905dac66c5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x52d1870a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4fc)) returned 1 [0134.828] SetErrorMode (uMode=0x0) returned 0x1 [0134.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e28a3149b5567fd2e5f36e78e602c8905dac66c5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E28A3149B5567FD2E5F36E78E602C8905DAC66C5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e28a3149b5567fd2e5f36e78e602c8905dac66c5.partially.cryptonar")) returned 1 [0134.829] SetErrorMode (uMode=0x1) returned 0x0 [0134.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2abe93c9392ce049a77989b0b58e20c6016e61a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.830] SetErrorMode (uMode=0x0) returned 0x1 [0134.830] GetFileType (hFile=0x230) returned 0x1 [0134.830] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.832] SetErrorMode (uMode=0x1) returned 0x0 [0134.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2abe93c9392ce049a77989b0b58e20c6016e61a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x52d25dc0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed9)) returned 1 [0134.833] SetErrorMode (uMode=0x0) returned 0x1 [0134.833] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2abe93c9392ce049a77989b0b58e20c6016e61a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2ABE93C9392CE049A77989B0B58E20C6016E61A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2abe93c9392ce049a77989b0b58e20c6016e61a.partially.cryptonar")) returned 1 [0134.834] SetErrorMode (uMode=0x1) returned 0x0 [0134.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2d6a6e09d5f2a00ba530787c313dcb80a665272"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.835] SetErrorMode (uMode=0x0) returned 0x1 [0134.835] GetFileType (hFile=0x230) returned 0x1 [0134.835] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.849] SetErrorMode (uMode=0x1) returned 0x0 [0134.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2d6a6e09d5f2a00ba530787c313dcb80a665272"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8576718d, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8576718d, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52d4b9bb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc96)) returned 1 [0134.849] SetErrorMode (uMode=0x0) returned 0x1 [0134.849] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2d6a6e09d5f2a00ba530787c313dcb80a665272"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2D6A6E09D5F2A00BA530787C313DCB80A665272.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2d6a6e09d5f2a00ba530787c313dcb80a665272.partially.cryptonar")) returned 1 [0134.850] SetErrorMode (uMode=0x1) returned 0x0 [0134.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2f561c6f56fc8a2e1a92afe2013c01b9270aaee"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.852] SetErrorMode (uMode=0x0) returned 0x1 [0134.852] GetFileType (hFile=0x230) returned 0x1 [0134.852] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.872] SetErrorMode (uMode=0x1) returned 0x0 [0134.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2f561c6f56fc8a2e1a92afe2013c01b9270aaee"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544d135a, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544d135a, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x52d744de, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14fd3)) returned 1 [0134.872] SetErrorMode (uMode=0x0) returned 0x1 [0134.873] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2f561c6f56fc8a2e1a92afe2013c01b9270aaee"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E2F561C6F56FC8A2E1A92AFE2013C01B9270AAEE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e2f561c6f56fc8a2e1a92afe2013c01b9270aaee.partially.cryptonar")) returned 1 [0134.874] SetErrorMode (uMode=0x1) returned 0x0 [0134.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e325b486b777c14c29762600d998974140f8fd34"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.875] SetErrorMode (uMode=0x0) returned 0x1 [0134.876] GetFileType (hFile=0x230) returned 0x1 [0134.876] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.909] SetErrorMode (uMode=0x1) returned 0x0 [0134.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e325b486b777c14c29762600d998974140f8fd34"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7fa0015, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xf7fa0015, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52dda093, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xacd)) returned 1 [0134.910] SetErrorMode (uMode=0x0) returned 0x1 [0134.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e325b486b777c14c29762600d998974140f8fd34"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E325B486B777C14C29762600D998974140F8FD34.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e325b486b777c14c29762600d998974140f8fd34.partially.cryptonar")) returned 1 [0134.913] SetErrorMode (uMode=0x1) returned 0x0 [0134.913] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e36b47a130b76e06bb674f6891750c6324159c2f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.914] SetErrorMode (uMode=0x0) returned 0x1 [0134.915] GetFileType (hFile=0x230) returned 0x1 [0134.915] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.944] SetErrorMode (uMode=0x1) returned 0x0 [0134.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e36b47a130b76e06bb674f6891750c6324159c2f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5733adf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc5733adf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52e331a0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0134.944] SetErrorMode (uMode=0x0) returned 0x1 [0134.944] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e36b47a130b76e06bb674f6891750c6324159c2f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E36B47A130B76E06BB674F6891750C6324159C2F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e36b47a130b76e06bb674f6891750c6324159c2f.partially.cryptonar")) returned 1 [0134.946] SetErrorMode (uMode=0x1) returned 0x0 [0134.946] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4c38e7d26df3fa1ad4c6271429eaedf5799f280"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.947] SetErrorMode (uMode=0x0) returned 0x1 [0134.947] GetFileType (hFile=0x230) returned 0x1 [0134.947] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.949] SetErrorMode (uMode=0x1) returned 0x0 [0134.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4c38e7d26df3fa1ad4c6271429eaedf5799f280"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46172872, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46172872, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x52e331a0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xef4)) returned 1 [0134.949] SetErrorMode (uMode=0x0) returned 0x1 [0134.949] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4c38e7d26df3fa1ad4c6271429eaedf5799f280"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4C38E7D26DF3FA1AD4C6271429EAEDF5799F280.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4c38e7d26df3fa1ad4c6271429eaedf5799f280.partially.cryptonar")) returned 1 [0134.951] SetErrorMode (uMode=0x1) returned 0x0 [0134.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4f7b356d54ae33bec4ddcf16c0472df675bace8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.952] SetErrorMode (uMode=0x0) returned 0x1 [0134.952] GetFileType (hFile=0x230) returned 0x1 [0134.952] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.960] SetErrorMode (uMode=0x1) returned 0x0 [0134.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4f7b356d54ae33bec4ddcf16c0472df675bace8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26a8c4c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd26a8c4c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52e594eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdea)) returned 1 [0134.960] SetErrorMode (uMode=0x0) returned 0x1 [0134.960] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4f7b356d54ae33bec4ddcf16c0472df675bace8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E4F7B356D54AE33BEC4DDCF16C0472DF675BACE8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e4f7b356d54ae33bec4ddcf16c0472df675bace8.partially.cryptonar")) returned 1 [0134.962] SetErrorMode (uMode=0x1) returned 0x0 [0134.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e54192d9113c93d5a18b33f9af466dad477e1f00"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.963] SetErrorMode (uMode=0x0) returned 0x1 [0134.963] GetFileType (hFile=0x230) returned 0x1 [0134.963] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.969] SetErrorMode (uMode=0x1) returned 0x0 [0134.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e54192d9113c93d5a18b33f9af466dad477e1f00"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde08ae3f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xde08ae3f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52e594eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe48)) returned 1 [0134.969] SetErrorMode (uMode=0x0) returned 0x1 [0134.970] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e54192d9113c93d5a18b33f9af466dad477e1f00"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E54192D9113C93D5A18B33F9AF466DAD477E1F00.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e54192d9113c93d5a18b33f9af466dad477e1f00.partially.cryptonar")) returned 1 [0134.971] SetErrorMode (uMode=0x1) returned 0x0 [0134.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5453ff31cca6ccc857f838d9a776d23b7b56f91"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.972] SetErrorMode (uMode=0x0) returned 0x1 [0134.972] GetFileType (hFile=0x230) returned 0x1 [0134.972] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.975] SetErrorMode (uMode=0x1) returned 0x0 [0134.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5453ff31cca6ccc857f838d9a776d23b7b56f91"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87be47f9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87be47f9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52e7f573, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x26e9)) returned 1 [0134.975] SetErrorMode (uMode=0x0) returned 0x1 [0134.975] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5453ff31cca6ccc857f838d9a776d23b7b56f91"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5453FF31CCA6CCC857F838D9A776D23B7B56F91.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5453ff31cca6ccc857f838d9a776d23b7b56f91.partially.cryptonar")) returned 1 [0134.976] SetErrorMode (uMode=0x1) returned 0x0 [0134.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e59cb3871fe03235cf8a064a97ed56b9959d1103"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.977] SetErrorMode (uMode=0x0) returned 0x1 [0134.977] GetFileType (hFile=0x230) returned 0x1 [0134.977] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.985] SetErrorMode (uMode=0x1) returned 0x0 [0134.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e59cb3871fe03235cf8a064a97ed56b9959d1103"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8829406e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8829406e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52e7f573, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb71)) returned 1 [0134.985] SetErrorMode (uMode=0x0) returned 0x1 [0134.985] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e59cb3871fe03235cf8a064a97ed56b9959d1103"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E59CB3871FE03235CF8A064A97ED56B9959D1103.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e59cb3871fe03235cf8a064a97ed56b9959d1103.partially.cryptonar")) returned 1 [0134.986] SetErrorMode (uMode=0x1) returned 0x0 [0134.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5aff4d31656e6aa923781ca04eed34cd21fa79a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.987] SetErrorMode (uMode=0x0) returned 0x1 [0134.987] GetFileType (hFile=0x230) returned 0x1 [0134.987] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0134.989] SetErrorMode (uMode=0x1) returned 0x0 [0134.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5aff4d31656e6aa923781ca04eed34cd21fa79a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8afc3b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f8afc3b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52e7f573, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe3d)) returned 1 [0134.990] SetErrorMode (uMode=0x0) returned 0x1 [0134.990] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5aff4d31656e6aa923781ca04eed34cd21fa79a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E5AFF4D31656E6AA923781CA04EED34CD21FA79A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e5aff4d31656e6aa923781ca04eed34cd21fa79a.partially.cryptonar")) returned 1 [0134.992] SetErrorMode (uMode=0x1) returned 0x0 [0134.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e617aaa0550a6bef5d9981a54982ea06d9264e06"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0134.993] SetErrorMode (uMode=0x0) returned 0x1 [0134.993] GetFileType (hFile=0x230) returned 0x1 [0134.994] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.023] SetErrorMode (uMode=0x1) returned 0x0 [0135.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e617aaa0550a6bef5d9981a54982ea06d9264e06"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898357ab, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x898357ab, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52ef4b63, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd898)) returned 1 [0135.023] SetErrorMode (uMode=0x0) returned 0x1 [0135.023] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e617aaa0550a6bef5d9981a54982ea06d9264e06"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E617AAA0550A6BEF5D9981A54982EA06D9264E06.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e617aaa0550a6bef5d9981a54982ea06d9264e06.partially.cryptonar")) returned 1 [0135.024] SetErrorMode (uMode=0x1) returned 0x0 [0135.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6708b606cb4a5c7fd8231151366f3674360f25f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.026] SetErrorMode (uMode=0x0) returned 0x1 [0135.026] GetFileType (hFile=0x230) returned 0x1 [0135.026] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.027] SetErrorMode (uMode=0x1) returned 0x0 [0135.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6708b606cb4a5c7fd8231151366f3674360f25f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8bf533, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7c8bf533, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52ef4b63, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0135.027] SetErrorMode (uMode=0x0) returned 0x1 [0135.027] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6708b606cb4a5c7fd8231151366f3674360f25f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6708B606CB4A5C7FD8231151366F3674360F25F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6708b606cb4a5c7fd8231151366f3674360f25f.partially.cryptonar")) returned 1 [0135.028] SetErrorMode (uMode=0x1) returned 0x0 [0135.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6b1788f4884f4b5eb0897c0d56092928a378fb0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.030] SetErrorMode (uMode=0x0) returned 0x1 [0135.030] GetFileType (hFile=0x230) returned 0x1 [0135.030] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.048] SetErrorMode (uMode=0x1) returned 0x0 [0135.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6b1788f4884f4b5eb0897c0d56092928a378fb0"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x52f186a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0135.048] SetErrorMode (uMode=0x0) returned 0x1 [0135.048] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6b1788f4884f4b5eb0897c0d56092928a378fb0"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6B1788F4884F4B5EB0897C0D56092928A378FB0.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6b1788f4884f4b5eb0897c0d56092928a378fb0.partially.cryptonar")) returned 1 [0135.049] SetErrorMode (uMode=0x1) returned 0x0 [0135.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6fa1fc2e9368c16e114b06cf1719dd109620f0c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.051] SetErrorMode (uMode=0x0) returned 0x1 [0135.051] GetFileType (hFile=0x230) returned 0x1 [0135.051] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.061] SetErrorMode (uMode=0x1) returned 0x0 [0135.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6fa1fc2e9368c16e114b06cf1719dd109620f0c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f85f322, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f85f322, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x52f3e1c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdfb)) returned 1 [0135.061] SetErrorMode (uMode=0x0) returned 0x1 [0135.062] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6fa1fc2e9368c16e114b06cf1719dd109620f0c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E6FA1FC2E9368C16E114B06CF1719DD109620F0C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e6fa1fc2e9368c16e114b06cf1719dd109620f0c.partially.cryptonar")) returned 1 [0135.063] SetErrorMode (uMode=0x1) returned 0x0 [0135.063] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e755f4d95c65e55966b4f130be123456a847d2e2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.064] SetErrorMode (uMode=0x0) returned 0x1 [0135.064] GetFileType (hFile=0x230) returned 0x1 [0135.064] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.066] SetErrorMode (uMode=0x1) returned 0x0 [0135.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e755f4d95c65e55966b4f130be123456a847d2e2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e81246, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x79e81246, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52f3e1c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0135.066] SetErrorMode (uMode=0x0) returned 0x1 [0135.066] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e755f4d95c65e55966b4f130be123456a847d2e2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E755F4D95C65E55966B4F130BE123456A847D2E2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e755f4d95c65e55966b4f130be123456a847d2e2.partially.cryptonar")) returned 1 [0135.067] SetErrorMode (uMode=0x1) returned 0x0 [0135.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e77ccf247e8477e087d8d5197583a185e5fd6ac1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.069] SetErrorMode (uMode=0x0) returned 0x1 [0135.069] GetFileType (hFile=0x230) returned 0x1 [0135.069] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.107] SetErrorMode (uMode=0x1) returned 0x0 [0135.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e77ccf247e8477e087d8d5197583a185e5fd6ac1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87030b44, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x87030b44, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52fb09ae, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8ff)) returned 1 [0135.107] SetErrorMode (uMode=0x0) returned 0x1 [0135.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e77ccf247e8477e087d8d5197583a185e5fd6ac1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E77CCF247E8477E087D8D5197583A185E5FD6AC1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e77ccf247e8477e087d8d5197583a185e5fd6ac1.partially.cryptonar")) returned 1 [0135.110] SetErrorMode (uMode=0x1) returned 0x0 [0135.110] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e7f58637fe8feaf467324196f386d2f6b1cb2a01"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.111] SetErrorMode (uMode=0x0) returned 0x1 [0135.112] GetFileType (hFile=0x230) returned 0x1 [0135.112] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.113] SetErrorMode (uMode=0x1) returned 0x0 [0135.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e7f58637fe8feaf467324196f386d2f6b1cb2a01"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd02b35c3, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xd02b35c3, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x52fb09ae, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0135.113] SetErrorMode (uMode=0x0) returned 0x1 [0135.113] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e7f58637fe8feaf467324196f386d2f6b1cb2a01"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E7F58637FE8FEAF467324196F386D2F6B1CB2A01.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e7f58637fe8feaf467324196f386d2f6b1cb2a01.partially.cryptonar")) returned 1 [0135.115] SetErrorMode (uMode=0x1) returned 0x0 [0135.115] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8376984b7111e6c56412fe9cd32a367e9d6e072"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.116] SetErrorMode (uMode=0x0) returned 0x1 [0135.116] GetFileType (hFile=0x230) returned 0x1 [0135.116] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.118] SetErrorMode (uMode=0x1) returned 0x0 [0135.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8376984b7111e6c56412fe9cd32a367e9d6e072"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x52fd7870, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0135.118] SetErrorMode (uMode=0x0) returned 0x1 [0135.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8376984b7111e6c56412fe9cd32a367e9d6e072"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8376984B7111E6C56412FE9CD32A367E9D6E072.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8376984b7111e6c56412fe9cd32a367e9d6e072.partially.cryptonar")) returned 1 [0135.120] SetErrorMode (uMode=0x1) returned 0x0 [0135.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8aca32cfa8da14bafe930a3ad39ccc430d74344"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.121] SetErrorMode (uMode=0x0) returned 0x1 [0135.121] GetFileType (hFile=0x230) returned 0x1 [0135.121] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.166] SetErrorMode (uMode=0x1) returned 0x0 [0135.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8aca32cfa8da14bafe930a3ad39ccc430d74344"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e8c3d57, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e8c3d57, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5304928c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7af6)) returned 1 [0135.166] SetErrorMode (uMode=0x0) returned 0x1 [0135.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8aca32cfa8da14bafe930a3ad39ccc430d74344"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E8ACA32CFA8DA14BAFE930A3AD39CCC430D74344.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e8aca32cfa8da14bafe930a3ad39ccc430d74344.partially.cryptonar")) returned 1 [0135.168] SetErrorMode (uMode=0x1) returned 0x0 [0135.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9b5f1423155db2e35fd739fc2008db01c93de1e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.169] SetErrorMode (uMode=0x0) returned 0x1 [0135.169] GetFileType (hFile=0x230) returned 0x1 [0135.169] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.251] SetErrorMode (uMode=0x1) returned 0x0 [0135.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9b5f1423155db2e35fd739fc2008db01c93de1e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fb02f12, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x5fb02f12, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x53107ef1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x57680)) returned 1 [0135.251] SetErrorMode (uMode=0x0) returned 0x1 [0135.252] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9b5f1423155db2e35fd739fc2008db01c93de1e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9B5F1423155DB2E35FD739FC2008DB01C93DE1E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9b5f1423155db2e35fd739fc2008db01c93de1e.partially.cryptonar")) returned 1 [0135.253] SetErrorMode (uMode=0x1) returned 0x0 [0135.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9f077a8b99e4a3e259ed129779ca46c677341b4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.254] SetErrorMode (uMode=0x0) returned 0x1 [0135.254] GetFileType (hFile=0x230) returned 0x1 [0135.254] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.304] SetErrorMode (uMode=0x1) returned 0x0 [0135.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9f077a8b99e4a3e259ed129779ca46c677341b4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e982952, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5e982952, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x531a07c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ab45)) returned 1 [0135.304] SetErrorMode (uMode=0x0) returned 0x1 [0135.304] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9f077a8b99e4a3e259ed129779ca46c677341b4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\E9F077A8B99E4A3E259ED129779CA46C677341B4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\e9f077a8b99e4a3e259ed129779ca46c677341b4.partially.cryptonar")) returned 1 [0135.306] SetErrorMode (uMode=0x1) returned 0x0 [0135.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea105bb5209cf00c1512f6770736ab8be06beefb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.307] SetErrorMode (uMode=0x0) returned 0x1 [0135.307] GetFileType (hFile=0x230) returned 0x1 [0135.307] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.325] SetErrorMode (uMode=0x1) returned 0x0 [0135.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea105bb5209cf00c1512f6770736ab8be06beefb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711c6bbc, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x711c6bbc, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x531c6aff, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0135.325] SetErrorMode (uMode=0x0) returned 0x1 [0135.325] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea105bb5209cf00c1512f6770736ab8be06beefb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA105BB5209CF00C1512F6770736AB8BE06BEEFB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea105bb5209cf00c1512f6770736ab8be06beefb.partially.cryptonar")) returned 1 [0135.327] SetErrorMode (uMode=0x1) returned 0x0 [0135.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea3c336104d249ab57e7dfbd70a5612fbf89ba5c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.328] SetErrorMode (uMode=0x0) returned 0x1 [0135.328] GetFileType (hFile=0x230) returned 0x1 [0135.328] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.351] SetErrorMode (uMode=0x1) returned 0x0 [0135.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea3c336104d249ab57e7dfbd70a5612fbf89ba5c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89030211, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89030211, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x53212f61, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1593)) returned 1 [0135.352] SetErrorMode (uMode=0x0) returned 0x1 [0135.352] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea3c336104d249ab57e7dfbd70a5612fbf89ba5c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA3C336104D249AB57E7DFBD70A5612FBF89BA5C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea3c336104d249ab57e7dfbd70a5612fbf89ba5c.partially.cryptonar")) returned 1 [0135.353] SetErrorMode (uMode=0x1) returned 0x0 [0135.353] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea61752c1ceb35c2574dd80871ffcd4b582b8fb3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.354] SetErrorMode (uMode=0x0) returned 0x1 [0135.354] GetFileType (hFile=0x230) returned 0x1 [0135.354] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.373] SetErrorMode (uMode=0x1) returned 0x0 [0135.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea61752c1ceb35c2574dd80871ffcd4b582b8fb3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x532390b9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0135.373] SetErrorMode (uMode=0x0) returned 0x1 [0135.373] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea61752c1ceb35c2574dd80871ffcd4b582b8fb3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA61752C1CEB35C2574DD80871FFCD4B582B8FB3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea61752c1ceb35c2574dd80871ffcd4b582b8fb3.partially.cryptonar")) returned 1 [0135.375] SetErrorMode (uMode=0x1) returned 0x0 [0135.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea922c644aed3e82ef17a4212acb67bf66bd50ec"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.376] SetErrorMode (uMode=0x0) returned 0x1 [0135.376] GetFileType (hFile=0x230) returned 0x1 [0135.376] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.390] SetErrorMode (uMode=0x1) returned 0x0 [0135.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea922c644aed3e82ef17a4212acb67bf66bd50ec"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88a06e1f, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88a06e1f, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5325f350, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13c0)) returned 1 [0135.390] SetErrorMode (uMode=0x0) returned 0x1 [0135.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea922c644aed3e82ef17a4212acb67bf66bd50ec"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EA922C644AED3E82EF17A4212ACB67BF66BD50EC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ea922c644aed3e82ef17a4212acb67bf66bd50ec.partially.cryptonar")) returned 1 [0135.392] SetErrorMode (uMode=0x1) returned 0x0 [0135.392] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eb13fd121dce5708f031430c9dd99d6a34564f9c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.394] SetErrorMode (uMode=0x0) returned 0x1 [0135.394] GetFileType (hFile=0x230) returned 0x1 [0135.394] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.446] SetErrorMode (uMode=0x1) returned 0x0 [0135.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eb13fd121dce5708f031430c9dd99d6a34564f9c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x532f7d62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0135.447] SetErrorMode (uMode=0x0) returned 0x1 [0135.447] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eb13fd121dce5708f031430c9dd99d6a34564f9c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EB13FD121DCE5708F031430C9DD99D6A34564F9C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eb13fd121dce5708f031430c9dd99d6a34564f9c.partially.cryptonar")) returned 1 [0135.448] SetErrorMode (uMode=0x1) returned 0x0 [0135.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eba2828adbae591ac642ebd9411c1564521b33ff"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.449] SetErrorMode (uMode=0x0) returned 0x1 [0135.449] GetFileType (hFile=0x230) returned 0x1 [0135.449] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.451] SetErrorMode (uMode=0x1) returned 0x0 [0135.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eba2828adbae591ac642ebd9411c1564521b33ff"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x532f7d62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0135.451] SetErrorMode (uMode=0x0) returned 0x1 [0135.451] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eba2828adbae591ac642ebd9411c1564521b33ff"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBA2828ADBAE591AC642EBD9411C1564521B33FF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\eba2828adbae591ac642ebd9411c1564521b33ff.partially.cryptonar")) returned 1 [0135.453] SetErrorMode (uMode=0x1) returned 0x0 [0135.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ebde98f20367971abfe20bc912d3fb2e90144c1c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.453] SetErrorMode (uMode=0x0) returned 0x1 [0135.454] GetFileType (hFile=0x230) returned 0x1 [0135.454] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.455] SetErrorMode (uMode=0x1) returned 0x0 [0135.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ebde98f20367971abfe20bc912d3fb2e90144c1c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480f8d9f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x480f8d9f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x532f7d62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x139a)) returned 1 [0135.456] SetErrorMode (uMode=0x0) returned 0x1 [0135.456] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ebde98f20367971abfe20bc912d3fb2e90144c1c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EBDE98F20367971ABFE20BC912D3FB2E90144C1C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ebde98f20367971abfe20bc912d3fb2e90144c1c.partially.cryptonar")) returned 1 [0135.457] SetErrorMode (uMode=0x1) returned 0x0 [0135.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed0cb237a7670f7783de11f3ad0107c16522d303"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.458] SetErrorMode (uMode=0x0) returned 0x1 [0135.458] GetFileType (hFile=0x230) returned 0x1 [0135.458] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.460] SetErrorMode (uMode=0x1) returned 0x0 [0135.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed0cb237a7670f7783de11f3ad0107c16522d303"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46172872, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46172872, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5331dea2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13d6)) returned 1 [0135.461] SetErrorMode (uMode=0x0) returned 0x1 [0135.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed0cb237a7670f7783de11f3ad0107c16522d303"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED0CB237A7670F7783DE11F3AD0107C16522D303.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed0cb237a7670f7783de11f3ad0107c16522d303.partially.cryptonar")) returned 1 [0135.465] SetErrorMode (uMode=0x1) returned 0x0 [0135.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed12013e991e9ed93611e7886d1f2f0c4c05bc42"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.466] SetErrorMode (uMode=0x0) returned 0x1 [0135.466] GetFileType (hFile=0x230) returned 0x1 [0135.466] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.507] SetErrorMode (uMode=0x1) returned 0x0 [0135.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed12013e991e9ed93611e7886d1f2f0c4c05bc42"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cbff94, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x74cbff94, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x533906b6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0135.508] SetErrorMode (uMode=0x0) returned 0x1 [0135.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed12013e991e9ed93611e7886d1f2f0c4c05bc42"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\ED12013E991E9ED93611E7886D1F2F0C4C05BC42.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ed12013e991e9ed93611e7886d1f2f0c4c05bc42.partially.cryptonar")) returned 1 [0135.509] SetErrorMode (uMode=0x1) returned 0x0 [0135.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edae6150300842896a3cdebd36fca29dbbe012e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.510] SetErrorMode (uMode=0x0) returned 0x1 [0135.510] GetFileType (hFile=0x230) returned 0x1 [0135.510] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.512] SetErrorMode (uMode=0x1) returned 0x0 [0135.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edae6150300842896a3cdebd36fca29dbbe012e6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3390670, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc3390670, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x533906b6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0135.512] SetErrorMode (uMode=0x0) returned 0x1 [0135.512] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edae6150300842896a3cdebd36fca29dbbe012e6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDAE6150300842896A3CDEBD36FCA29DBBE012E6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edae6150300842896a3cdebd36fca29dbbe012e6.partially.cryptonar")) returned 1 [0135.514] SetErrorMode (uMode=0x1) returned 0x0 [0135.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edb4b1c94f69d79b0c0884b50a1124cf6f2f0828"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.515] SetErrorMode (uMode=0x0) returned 0x1 [0135.515] GetFileType (hFile=0x230) returned 0x1 [0135.515] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.526] SetErrorMode (uMode=0x1) returned 0x0 [0135.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edb4b1c94f69d79b0c0884b50a1124cf6f2f0828"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x548d72f1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x548d72f1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x533b6865, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17108)) returned 1 [0135.527] SetErrorMode (uMode=0x0) returned 0x1 [0135.527] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edb4b1c94f69d79b0c0884b50a1124cf6f2f0828"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EDB4B1C94F69D79B0C0884B50A1124CF6F2F0828.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\edb4b1c94f69d79b0c0884b50a1124cf6f2f0828.partially.cryptonar")) returned 1 [0135.528] SetErrorMode (uMode=0x1) returned 0x0 [0135.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee17aa5e7ddc06372654d04024fd4c4a2e7f813d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.529] SetErrorMode (uMode=0x0) returned 0x1 [0135.529] GetFileType (hFile=0x230) returned 0x1 [0135.529] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.531] SetErrorMode (uMode=0x1) returned 0x0 [0135.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee17aa5e7ddc06372654d04024fd4c4a2e7f813d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x577f6811, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x577f6811, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x533b6865, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc3b)) returned 1 [0135.531] SetErrorMode (uMode=0x0) returned 0x1 [0135.531] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee17aa5e7ddc06372654d04024fd4c4a2e7f813d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE17AA5E7DDC06372654D04024FD4C4A2E7F813D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee17aa5e7ddc06372654d04024fd4c4a2e7f813d.partially.cryptonar")) returned 1 [0135.533] SetErrorMode (uMode=0x1) returned 0x0 [0135.533] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee5d487a6a7dfa0fe7b50077029fa59cb08ad8d6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.533] SetErrorMode (uMode=0x0) returned 0x1 [0135.534] GetFileType (hFile=0x230) returned 0x1 [0135.534] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.561] SetErrorMode (uMode=0x1) returned 0x0 [0135.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee5d487a6a7dfa0fe7b50077029fa59cb08ad8d6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e3cc0d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc4e3cc0d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x53402dbe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x37e0)) returned 1 [0135.561] SetErrorMode (uMode=0x0) returned 0x1 [0135.561] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee5d487a6a7dfa0fe7b50077029fa59cb08ad8d6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EE5D487A6A7DFA0FE7B50077029FA59CB08AD8D6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ee5d487a6a7dfa0fe7b50077029fa59cb08ad8d6.partially.cryptonar")) returned 1 [0135.563] SetErrorMode (uMode=0x1) returned 0x0 [0135.563] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef17a802a840bc510cab43487db4afaef5bd3dae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.564] SetErrorMode (uMode=0x0) returned 0x1 [0135.564] GetFileType (hFile=0x230) returned 0x1 [0135.564] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.578] SetErrorMode (uMode=0x1) returned 0x0 [0135.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef17a802a840bc510cab43487db4afaef5bd3dae"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x407b7b1b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x407b7b1b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5342901f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x79f8f)) returned 1 [0135.579] SetErrorMode (uMode=0x0) returned 0x1 [0135.579] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef17a802a840bc510cab43487db4afaef5bd3dae"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF17A802A840BC510CAB43487DB4AFAEF5BD3DAE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef17a802a840bc510cab43487db4afaef5bd3dae.partially.cryptonar")) returned 1 [0135.584] SetErrorMode (uMode=0x1) returned 0x0 [0135.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef646b2b4eaaadeed258a28e8075ccb139b02cf1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.585] SetErrorMode (uMode=0x0) returned 0x1 [0135.585] GetFileType (hFile=0x230) returned 0x1 [0135.585] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.596] SetErrorMode (uMode=0x1) returned 0x0 [0135.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef646b2b4eaaadeed258a28e8075ccb139b02cf1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a1c86, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x7b8a1c86, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5344f531, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x182aa)) returned 1 [0135.596] SetErrorMode (uMode=0x0) returned 0x1 [0135.596] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef646b2b4eaaadeed258a28e8075ccb139b02cf1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\EF646B2B4EAAADEED258A28E8075CCB139B02CF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ef646b2b4eaaadeed258a28e8075ccb139b02cf1.partially.cryptonar")) returned 1 [0135.598] SetErrorMode (uMode=0x1) returned 0x0 [0135.598] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f02df5051b5f97b90da0cc78014af7d71ae8c94b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.599] SetErrorMode (uMode=0x0) returned 0x1 [0135.600] GetFileType (hFile=0x230) returned 0x1 [0135.600] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.618] SetErrorMode (uMode=0x1) returned 0x0 [0135.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f02df5051b5f97b90da0cc78014af7d71ae8c94b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88b86362, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x88b86362, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5349b7ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0135.619] SetErrorMode (uMode=0x0) returned 0x1 [0135.619] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f02df5051b5f97b90da0cc78014af7d71ae8c94b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F02DF5051B5F97B90DA0CC78014AF7D71AE8C94B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f02df5051b5f97b90da0cc78014af7d71ae8c94b.partially.cryptonar")) returned 1 [0135.620] SetErrorMode (uMode=0x1) returned 0x0 [0135.621] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f056302c3d66b480f828a6f0588a3a4abafbd146"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.622] SetErrorMode (uMode=0x0) returned 0x1 [0135.622] GetFileType (hFile=0x230) returned 0x1 [0135.622] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.634] SetErrorMode (uMode=0x1) returned 0x0 [0135.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f056302c3d66b480f828a6f0588a3a4abafbd146"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8624196b, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8624196b, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x534c51f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1317)) returned 1 [0135.634] SetErrorMode (uMode=0x0) returned 0x1 [0135.635] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f056302c3d66b480f828a6f0588a3a4abafbd146"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F056302C3D66B480F828A6F0588A3A4ABAFBD146.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f056302c3d66b480f828a6f0588a3a4abafbd146.partially.cryptonar")) returned 1 [0135.636] SetErrorMode (uMode=0x1) returned 0x0 [0135.636] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f09c0b6e2651d957218fab6f53d702a59b66d455"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.638] SetErrorMode (uMode=0x0) returned 0x1 [0135.638] GetFileType (hFile=0x230) returned 0x1 [0135.638] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.664] SetErrorMode (uMode=0x1) returned 0x0 [0135.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f09c0b6e2651d957218fab6f53d702a59b66d455"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480f8d9f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x480f8d9f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5350ea02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d5)) returned 1 [0135.664] SetErrorMode (uMode=0x0) returned 0x1 [0135.664] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f09c0b6e2651d957218fab6f53d702a59b66d455"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F09C0B6E2651D957218FAB6F53D702A59B66D455.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f09c0b6e2651d957218fab6f53d702a59b66d455.partially.cryptonar")) returned 1 [0135.666] SetErrorMode (uMode=0x1) returned 0x0 [0135.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0b0760ca5a4ca1c8e3870f69ff9c6abad0d4331"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.667] SetErrorMode (uMode=0x0) returned 0x1 [0135.667] GetFileType (hFile=0x230) returned 0x1 [0135.667] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.669] SetErrorMode (uMode=0x1) returned 0x0 [0135.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0b0760ca5a4ca1c8e3870f69ff9c6abad0d4331"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x889f5cb8, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x889f5cb8, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5350ea02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1059)) returned 1 [0135.669] SetErrorMode (uMode=0x0) returned 0x1 [0135.669] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0b0760ca5a4ca1c8e3870f69ff9c6abad0d4331"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0B0760CA5A4CA1C8E3870F69FF9C6ABAD0D4331.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0b0760ca5a4ca1c8e3870f69ff9c6abad0d4331.partially.cryptonar")) returned 1 [0135.671] SetErrorMode (uMode=0x1) returned 0x0 [0135.671] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0eb2346e30e6575d9159faac2d28582edee6ae6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.672] SetErrorMode (uMode=0x0) returned 0x1 [0135.672] GetFileType (hFile=0x230) returned 0x1 [0135.672] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.734] SetErrorMode (uMode=0x1) returned 0x0 [0135.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0eb2346e30e6575d9159faac2d28582edee6ae6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x535a67fc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0135.734] SetErrorMode (uMode=0x0) returned 0x1 [0135.734] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0eb2346e30e6575d9159faac2d28582edee6ae6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F0EB2346E30E6575D9159FAAC2D28582EDEE6AE6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f0eb2346e30e6575d9159faac2d28582edee6ae6.partially.cryptonar")) returned 1 [0135.736] SetErrorMode (uMode=0x1) returned 0x0 [0135.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f121025e2309bc1b82d9e1abea177a8e57f04adc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.737] SetErrorMode (uMode=0x0) returned 0x1 [0135.737] GetFileType (hFile=0x230) returned 0x1 [0135.737] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.747] SetErrorMode (uMode=0x1) returned 0x0 [0135.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f121025e2309bc1b82d9e1abea177a8e57f04adc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f90538e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f90538e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x535cc962, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0135.747] SetErrorMode (uMode=0x0) returned 0x1 [0135.747] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f121025e2309bc1b82d9e1abea177a8e57f04adc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F121025E2309BC1B82D9E1ABEA177A8E57F04ADC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f121025e2309bc1b82d9e1abea177a8e57f04adc.partially.cryptonar")) returned 1 [0135.749] SetErrorMode (uMode=0x1) returned 0x0 [0135.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f17c63a49c6c1a2764439ffb4810b1b44d04b6b5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.751] SetErrorMode (uMode=0x0) returned 0x1 [0135.751] GetFileType (hFile=0x230) returned 0x1 [0135.751] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.779] SetErrorMode (uMode=0x1) returned 0x0 [0135.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f17c63a49c6c1a2764439ffb4810b1b44d04b6b5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739fe7ee, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x739fe7ee, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x53618fd0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x575)) returned 1 [0135.779] SetErrorMode (uMode=0x0) returned 0x1 [0135.779] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f17c63a49c6c1a2764439ffb4810b1b44d04b6b5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F17C63A49C6C1A2764439FFB4810B1B44D04B6B5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f17c63a49c6c1a2764439ffb4810b1b44d04b6b5.partially.cryptonar")) returned 1 [0135.780] SetErrorMode (uMode=0x1) returned 0x0 [0135.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f18d85f52ebbba2ab081ef739ed0d6e8a76d497c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.781] SetErrorMode (uMode=0x0) returned 0x1 [0135.781] GetFileType (hFile=0x230) returned 0x1 [0135.781] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.782] SetErrorMode (uMode=0x1) returned 0x0 [0135.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f18d85f52ebbba2ab081ef739ed0d6e8a76d497c"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x53618fd0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x219)) returned 1 [0135.783] SetErrorMode (uMode=0x0) returned 0x1 [0135.783] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f18d85f52ebbba2ab081ef739ed0d6e8a76d497c"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f18d85f52ebbba2ab081ef739ed0d6e8a76d497c.partially.cryptonar")) returned 1 [0135.830] SetErrorMode (uMode=0x1) returned 0x0 [0135.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1a6524f9bcf3e2cb2e05ef47961c07cf64cdae1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.831] SetErrorMode (uMode=0x0) returned 0x1 [0135.831] GetFileType (hFile=0x230) returned 0x1 [0135.831] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.853] SetErrorMode (uMode=0x1) returned 0x0 [0135.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1a6524f9bcf3e2cb2e05ef47961c07cf64cdae1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x536d7932, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1 [0135.854] SetErrorMode (uMode=0x0) returned 0x1 [0135.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1a6524f9bcf3e2cb2e05ef47961c07cf64cdae1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1A6524F9BCF3E2CB2E05EF47961C07CF64CDAE1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1a6524f9bcf3e2cb2e05ef47961c07cf64cdae1.partially.cryptonar")) returned 1 [0135.855] SetErrorMode (uMode=0x1) returned 0x0 [0135.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1eed789c6a0f298f5d5b723101fd85602764d93"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.856] SetErrorMode (uMode=0x0) returned 0x1 [0135.856] GetFileType (hFile=0x230) returned 0x1 [0135.856] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.877] SetErrorMode (uMode=0x1) returned 0x0 [0135.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1eed789c6a0f298f5d5b723101fd85602764d93"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x544389d9, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x544389d9, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x536fdd4c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11770)) returned 1 [0135.877] SetErrorMode (uMode=0x0) returned 0x1 [0135.877] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1eed789c6a0f298f5d5b723101fd85602764d93"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F1EED789C6A0F298F5D5B723101FD85602764D93.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f1eed789c6a0f298f5d5b723101fd85602764d93.partially.cryptonar")) returned 1 [0135.878] SetErrorMode (uMode=0x1) returned 0x0 [0135.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f2042a7e980ac3744999f3f9dd7272205f0794d8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.880] SetErrorMode (uMode=0x0) returned 0x1 [0135.880] GetFileType (hFile=0x230) returned 0x1 [0135.880] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.891] SetErrorMode (uMode=0x1) returned 0x0 [0135.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f2042a7e980ac3744999f3f9dd7272205f0794d8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a5ad47, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x89a5ad47, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x53726d74, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0135.891] SetErrorMode (uMode=0x0) returned 0x1 [0135.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f2042a7e980ac3744999f3f9dd7272205f0794d8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F2042A7E980AC3744999F3F9DD7272205F0794D8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f2042a7e980ac3744999f3f9dd7272205f0794d8.partially.cryptonar")) returned 1 [0135.899] SetErrorMode (uMode=0x1) returned 0x0 [0135.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f31fa1f48ea5a5a5c16b8d7512e9104fa627f76d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.900] SetErrorMode (uMode=0x0) returned 0x1 [0135.900] GetFileType (hFile=0x230) returned 0x1 [0135.900] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.902] SetErrorMode (uMode=0x1) returned 0x0 [0135.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f31fa1f48ea5a5a5c16b8d7512e9104fa627f76d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a946e1, ftCreationTime.dwHighDateTime=0x1d2d43d, ftLastAccessTime.dwLowDateTime=0x42a946e1, ftLastAccessTime.dwHighDateTime=0x1d2d43d, ftLastWriteTime.dwLowDateTime=0x5374a0c1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51f)) returned 1 [0135.902] SetErrorMode (uMode=0x0) returned 0x1 [0135.902] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f31fa1f48ea5a5a5c16b8d7512e9104fa627f76d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F31FA1F48EA5A5A5C16B8D7512E9104FA627F76D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f31fa1f48ea5a5a5c16b8d7512e9104fa627f76d.partially.cryptonar")) returned 1 [0135.904] SetErrorMode (uMode=0x1) returned 0x0 [0135.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f32823d68319e873a5d3ba72d3dc092e4e379276"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.905] SetErrorMode (uMode=0x0) returned 0x1 [0135.905] GetFileType (hFile=0x230) returned 0x1 [0135.905] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.916] SetErrorMode (uMode=0x1) returned 0x0 [0135.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f32823d68319e873a5d3ba72d3dc092e4e379276"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c0c9c2b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c0c9c2b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5377039f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3851)) returned 1 [0135.916] SetErrorMode (uMode=0x0) returned 0x1 [0135.916] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f32823d68319e873a5d3ba72d3dc092e4e379276"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F32823D68319E873A5D3BA72D3DC092E4E379276.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f32823d68319e873a5d3ba72d3dc092e4e379276.partially.cryptonar")) returned 1 [0135.917] SetErrorMode (uMode=0x1) returned 0x0 [0135.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f342e84bb0c780a30c90b03f5c63c5ff4b75773f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.918] SetErrorMode (uMode=0x0) returned 0x1 [0135.919] GetFileType (hFile=0x230) returned 0x1 [0135.919] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.920] SetErrorMode (uMode=0x1) returned 0x0 [0135.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f342e84bb0c780a30c90b03f5c63c5ff4b75773f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e4a361, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x47e4a361, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5377039f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x343)) returned 1 [0135.920] SetErrorMode (uMode=0x0) returned 0x1 [0135.920] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f342e84bb0c780a30c90b03f5c63c5ff4b75773f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F342E84BB0C780A30C90B03F5C63C5FF4B75773F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f342e84bb0c780a30c90b03f5c63c5ff4b75773f.partially.cryptonar")) returned 1 [0135.922] SetErrorMode (uMode=0x1) returned 0x0 [0135.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3a2102f7afd6075ac6a868778ffc092c10f0f6e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.923] SetErrorMode (uMode=0x0) returned 0x1 [0135.923] GetFileType (hFile=0x230) returned 0x1 [0135.923] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.949] SetErrorMode (uMode=0x1) returned 0x0 [0135.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3a2102f7afd6075ac6a868778ffc092c10f0f6e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42ee05be, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x42ee05be, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x537bc92d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0135.950] SetErrorMode (uMode=0x0) returned 0x1 [0135.950] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3a2102f7afd6075ac6a868778ffc092c10f0f6e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3A2102F7AFD6075AC6A868778FFC092C10F0F6E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3a2102f7afd6075ac6a868778ffc092c10f0f6e.partially.cryptonar")) returned 1 [0135.951] SetErrorMode (uMode=0x1) returned 0x0 [0135.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3d90c6ab094ee1e51fa1e8802e6ca43814228c1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.952] SetErrorMode (uMode=0x0) returned 0x1 [0135.952] GetFileType (hFile=0x230) returned 0x1 [0135.952] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.954] SetErrorMode (uMode=0x1) returned 0x0 [0135.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3d90c6ab094ee1e51fa1e8802e6ca43814228c1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc534dc24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc534dc24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x537bc92d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbf70)) returned 1 [0135.955] SetErrorMode (uMode=0x0) returned 0x1 [0135.955] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3d90c6ab094ee1e51fa1e8802e6ca43814228c1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F3D90C6AB094EE1E51FA1E8802E6CA43814228C1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f3d90c6ab094ee1e51fa1e8802e6ca43814228c1.partially.cryptonar")) returned 1 [0135.956] SetErrorMode (uMode=0x1) returned 0x0 [0135.956] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f40097b0b56961e44c8b985ba539d8266739eefd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.957] SetErrorMode (uMode=0x0) returned 0x1 [0135.957] GetFileType (hFile=0x230) returned 0x1 [0135.957] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0135.974] SetErrorMode (uMode=0x1) returned 0x0 [0135.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f40097b0b56961e44c8b985ba539d8266739eefd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61577ff1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61577ff1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53808bc0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdfe)) returned 1 [0135.975] SetErrorMode (uMode=0x0) returned 0x1 [0135.975] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f40097b0b56961e44c8b985ba539d8266739eefd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F40097B0B56961E44C8B985BA539D8266739EEFD.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f40097b0b56961e44c8b985ba539d8266739eefd.partially.cryptonar")) returned 1 [0135.976] SetErrorMode (uMode=0x1) returned 0x0 [0135.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f43fb06219a35da10acdb22d3ad944003924cf7a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0135.977] SetErrorMode (uMode=0x0) returned 0x1 [0135.977] GetFileType (hFile=0x230) returned 0x1 [0135.977] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.029] SetErrorMode (uMode=0x1) returned 0x0 [0136.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f43fb06219a35da10acdb22d3ad944003924cf7a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x615c4498, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x615c4498, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5387b3e0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0136.030] SetErrorMode (uMode=0x0) returned 0x1 [0136.030] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f43fb06219a35da10acdb22d3ad944003924cf7a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F43FB06219A35DA10ACDB22D3AD944003924CF7A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f43fb06219a35da10acdb22d3ad944003924cf7a.partially.cryptonar")) returned 1 [0136.031] SetErrorMode (uMode=0x1) returned 0x0 [0136.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f5387e8365bd2dadd2bb866ad939802535a18630"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.032] SetErrorMode (uMode=0x0) returned 0x1 [0136.032] GetFileType (hFile=0x230) returned 0x1 [0136.032] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.033] SetErrorMode (uMode=0x1) returned 0x0 [0136.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f5387e8365bd2dadd2bb866ad939802535a18630"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5387b3e0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x113)) returned 1 [0136.034] SetErrorMode (uMode=0x0) returned 0x1 [0136.034] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f5387e8365bd2dadd2bb866ad939802535a18630"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F5387E8365BD2DADD2BB866AD939802535A18630.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f5387e8365bd2dadd2bb866ad939802535a18630.partially.cryptonar")) returned 1 [0136.035] SetErrorMode (uMode=0x1) returned 0x0 [0136.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f53ad59669090c260993858428a97cac9487a471"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.035] SetErrorMode (uMode=0x0) returned 0x1 [0136.036] GetFileType (hFile=0x230) returned 0x1 [0136.036] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.110] SetErrorMode (uMode=0x1) returned 0x0 [0136.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f53ad59669090c260993858428a97cac9487a471"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c19e2e4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3c19e2e4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5393a03b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc490)) returned 1 [0136.110] SetErrorMode (uMode=0x0) returned 0x1 [0136.110] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f53ad59669090c260993858428a97cac9487a471"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F53AD59669090C260993858428A97CAC9487A471.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f53ad59669090c260993858428a97cac9487a471.partially.cryptonar")) returned 1 [0136.112] SetErrorMode (uMode=0x1) returned 0x0 [0136.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f629dfcf4d7930d989b2144d372254183187d392"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.113] SetErrorMode (uMode=0x0) returned 0x1 [0136.113] GetFileType (hFile=0x230) returned 0x1 [0136.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.114] SetErrorMode (uMode=0x1) returned 0x0 [0136.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f629dfcf4d7930d989b2144d372254183187d392"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551ee291, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x551ee291, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5393a03b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0136.117] SetErrorMode (uMode=0x0) returned 0x1 [0136.117] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f629dfcf4d7930d989b2144d372254183187d392"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F629DFCF4D7930D989B2144D372254183187D392.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f629dfcf4d7930d989b2144d372254183187d392.partially.cryptonar")) returned 1 [0136.118] SetErrorMode (uMode=0x1) returned 0x0 [0136.119] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f6746302354f94e846f07832102cb3083100fd38"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.119] SetErrorMode (uMode=0x0) returned 0x1 [0136.120] GetFileType (hFile=0x230) returned 0x1 [0136.120] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.138] SetErrorMode (uMode=0x1) returned 0x0 [0136.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f6746302354f94e846f07832102cb3083100fd38"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d885d52, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5d885d52, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53986822, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17f9)) returned 1 [0136.138] SetErrorMode (uMode=0x0) returned 0x1 [0136.138] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f6746302354f94e846f07832102cb3083100fd38"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F6746302354F94E846F07832102CB3083100FD38.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f6746302354f94e846f07832102cb3083100fd38.partially.cryptonar")) returned 1 [0136.140] SetErrorMode (uMode=0x1) returned 0x0 [0136.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f76eee8c81085751e30dee1cb3470c9ac1e39a37"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.141] SetErrorMode (uMode=0x0) returned 0x1 [0136.141] GetFileType (hFile=0x230) returned 0x1 [0136.141] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.274] SetErrorMode (uMode=0x1) returned 0x0 [0136.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f76eee8c81085751e30dee1cb3470c9ac1e39a37"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53add91e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xedc)) returned 1 [0136.274] SetErrorMode (uMode=0x0) returned 0x1 [0136.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f76eee8c81085751e30dee1cb3470c9ac1e39a37"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F76EEE8C81085751E30DEE1CB3470C9AC1E39A37.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f76eee8c81085751e30dee1cb3470c9ac1e39a37.partially.cryptonar")) returned 1 [0136.276] SetErrorMode (uMode=0x1) returned 0x0 [0136.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8a41f5ad5bec0461e786408b9cba230e4aefeac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.277] SetErrorMode (uMode=0x0) returned 0x1 [0136.277] GetFileType (hFile=0x230) returned 0x1 [0136.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.370] SetErrorMode (uMode=0x1) returned 0x0 [0136.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8a41f5ad5bec0461e786408b9cba230e4aefeac"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a4382c1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a4382c1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53bc60ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x114f05)) returned 1 [0136.370] SetErrorMode (uMode=0x0) returned 0x1 [0136.370] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8a41f5ad5bec0461e786408b9cba230e4aefeac"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8A41F5AD5BEC0461E786408B9CBA230E4AEFEAC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8a41f5ad5bec0461e786408b9cba230e4aefeac.partially.cryptonar")) returned 1 [0136.372] SetErrorMode (uMode=0x1) returned 0x0 [0136.372] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8ac72083e334f70a553ae68455fbdf0e65c5221"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.373] SetErrorMode (uMode=0x0) returned 0x1 [0136.373] GetFileType (hFile=0x230) returned 0x1 [0136.374] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.378] SetErrorMode (uMode=0x1) returned 0x0 [0136.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8ac72083e334f70a553ae68455fbdf0e65c5221"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7e2ac9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f7e2ac9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x53bc60ca, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfe6)) returned 1 [0136.378] SetErrorMode (uMode=0x0) returned 0x1 [0136.378] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8ac72083e334f70a553ae68455fbdf0e65c5221"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8AC72083E334F70A553AE68455FBDF0E65C5221.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8ac72083e334f70a553ae68455fbdf0e65c5221.partially.cryptonar")) returned 1 [0136.379] SetErrorMode (uMode=0x1) returned 0x0 [0136.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8adda6a2780337cb00ea6cfd0d333b43a478be7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.381] SetErrorMode (uMode=0x0) returned 0x1 [0136.381] GetFileType (hFile=0x230) returned 0x1 [0136.381] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.428] SetErrorMode (uMode=0x1) returned 0x0 [0136.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8adda6a2780337cb00ea6cfd0d333b43a478be7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85d5f82e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x85d5f82e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x53c5b1a2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0136.428] SetErrorMode (uMode=0x0) returned 0x1 [0136.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8adda6a2780337cb00ea6cfd0d333b43a478be7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8ADDA6A2780337CB00EA6CFD0D333B43A478BE7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8adda6a2780337cb00ea6cfd0d333b43a478be7.partially.cryptonar")) returned 1 [0136.430] SetErrorMode (uMode=0x1) returned 0x0 [0136.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8e997939ce39acf17f9bf64cdb0813e72c16a3b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.431] SetErrorMode (uMode=0x0) returned 0x1 [0136.431] GetFileType (hFile=0x230) returned 0x1 [0136.431] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.506] SetErrorMode (uMode=0x1) returned 0x0 [0136.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8e997939ce39acf17f9bf64cdb0813e72c16a3b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ed6267c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5ed6267c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53d19d2d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1b5c)) returned 1 [0136.506] SetErrorMode (uMode=0x0) returned 0x1 [0136.506] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8e997939ce39acf17f9bf64cdb0813e72c16a3b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F8E997939CE39ACF17F9BF64CDB0813E72C16A3B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f8e997939ce39acf17f9bf64cdb0813e72c16a3b.partially.cryptonar")) returned 1 [0136.508] SetErrorMode (uMode=0x1) returned 0x0 [0136.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f936163ead042bb4759be1de9f87bae451b4e83f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.509] SetErrorMode (uMode=0x0) returned 0x1 [0136.509] GetFileType (hFile=0x230) returned 0x1 [0136.509] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.549] SetErrorMode (uMode=0x1) returned 0x0 [0136.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f936163ead042bb4759be1de9f87bae451b4e83f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8776dd9e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8776dd9e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x53d66246, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x923)) returned 1 [0136.550] SetErrorMode (uMode=0x0) returned 0x1 [0136.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f936163ead042bb4759be1de9f87bae451b4e83f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F936163EAD042BB4759BE1DE9F87BAE451B4E83F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f936163ead042bb4759be1de9f87bae451b4e83f.partially.cryptonar")) returned 1 [0136.551] SetErrorMode (uMode=0x1) returned 0x0 [0136.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9a2f2909435e63f6ef590817897771342c91dac"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.552] SetErrorMode (uMode=0x0) returned 0x1 [0136.553] GetFileType (hFile=0x230) returned 0x1 [0136.553] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.554] SetErrorMode (uMode=0x1) returned 0x0 [0136.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9a2f2909435e63f6ef590817897771342c91dac"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61551d8c, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x61551d8c, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53d8cf1f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0136.555] SetErrorMode (uMode=0x0) returned 0x1 [0136.555] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9a2f2909435e63f6ef590817897771342c91dac"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9A2F2909435E63F6EF590817897771342C91DAC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9a2f2909435e63f6ef590817897771342c91dac.partially.cryptonar")) returned 1 [0136.556] SetErrorMode (uMode=0x1) returned 0x0 [0136.556] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9ae75e3ed4bc0e626be654b838b134cb24877fb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.557] SetErrorMode (uMode=0x0) returned 0x1 [0136.557] GetFileType (hFile=0x230) returned 0x1 [0136.557] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.559] SetErrorMode (uMode=0x1) returned 0x0 [0136.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9ae75e3ed4bc0e626be654b838b134cb24877fb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53d8cf1f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18d9)) returned 1 [0136.559] SetErrorMode (uMode=0x0) returned 0x1 [0136.559] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9ae75e3ed4bc0e626be654b838b134cb24877fb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9AE75E3ED4BC0E626BE654B838B134CB24877FB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9ae75e3ed4bc0e626be654b838b134cb24877fb.partially.cryptonar")) returned 1 [0136.561] SetErrorMode (uMode=0x1) returned 0x0 [0136.561] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9d7f87a5111531ed1228d6215f3f149ab84b11f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.562] SetErrorMode (uMode=0x0) returned 0x1 [0136.562] GetFileType (hFile=0x230) returned 0x1 [0136.562] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.611] SetErrorMode (uMode=0x1) returned 0x0 [0136.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9d7f87a5111531ed1228d6215f3f149ab84b11f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53dfeb58, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xed6)) returned 1 [0136.611] SetErrorMode (uMode=0x0) returned 0x1 [0136.611] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9d7f87a5111531ed1228d6215f3f149ab84b11f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9D7F87A5111531ED1228D6215F3F149AB84B11F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9d7f87a5111531ed1228d6215f3f149ab84b11f.partially.cryptonar")) returned 1 [0136.613] SetErrorMode (uMode=0x1) returned 0x0 [0136.613] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9e8ec185099dca2b57df193413a10e49a526035"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.614] SetErrorMode (uMode=0x0) returned 0x1 [0136.614] GetFileType (hFile=0x230) returned 0x1 [0136.614] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.616] SetErrorMode (uMode=0x1) returned 0x0 [0136.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9e8ec185099dca2b57df193413a10e49a526035"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46e0c2c3, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x46e0c2c3, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x53e24cf0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fad)) returned 1 [0136.617] SetErrorMode (uMode=0x0) returned 0x1 [0136.617] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9e8ec185099dca2b57df193413a10e49a526035"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\F9E8EC185099DCA2B57DF193413A10E49A526035.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\f9e8ec185099dca2b57df193413a10e49a526035.partially.cryptonar")) returned 1 [0136.618] SetErrorMode (uMode=0x1) returned 0x0 [0136.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fa7d8cb4a75665ae4e1047ff5bda52f144a8e68d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.619] SetErrorMode (uMode=0x0) returned 0x1 [0136.619] GetFileType (hFile=0x230) returned 0x1 [0136.619] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.672] SetErrorMode (uMode=0x1) returned 0x0 [0136.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fa7d8cb4a75665ae4e1047ff5bda52f144a8e68d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f9e8496, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f9e8496, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x53e974fa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd52)) returned 1 [0136.673] SetErrorMode (uMode=0x0) returned 0x1 [0136.673] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fa7d8cb4a75665ae4e1047ff5bda52f144a8e68d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FA7D8CB4A75665AE4E1047FF5BDA52F144A8E68D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fa7d8cb4a75665ae4e1047ff5bda52f144a8e68d.partially.cryptonar")) returned 1 [0136.675] SetErrorMode (uMode=0x1) returned 0x0 [0136.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb0089835b5c9b7196c5139b4f42040b6acd3fab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.676] SetErrorMode (uMode=0x0) returned 0x1 [0136.676] GetFileType (hFile=0x230) returned 0x1 [0136.676] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.684] SetErrorMode (uMode=0x1) returned 0x0 [0136.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb0089835b5c9b7196c5139b4f42040b6acd3fab"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x465c4c9e, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x465c4c9e, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x53ebd6fd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49b3)) returned 1 [0136.684] SetErrorMode (uMode=0x0) returned 0x1 [0136.684] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb0089835b5c9b7196c5139b4f42040b6acd3fab"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB0089835B5C9B7196C5139B4F42040B6ACD3FAB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb0089835b5c9b7196c5139b4f42040b6acd3fab.partially.cryptonar")) returned 1 [0136.686] SetErrorMode (uMode=0x1) returned 0x0 [0136.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1883674369f31dfbe94f534555088a34c57b70"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.687] SetErrorMode (uMode=0x0) returned 0x1 [0136.687] GetFileType (hFile=0x230) returned 0x1 [0136.687] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.688] SetErrorMode (uMode=0x1) returned 0x0 [0136.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1883674369f31dfbe94f534555088a34c57b70"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c762e64, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5c762e64, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53ebd6fd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x521)) returned 1 [0136.689] SetErrorMode (uMode=0x0) returned 0x1 [0136.689] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1883674369f31dfbe94f534555088a34c57b70"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1883674369F31DFBE94F534555088A34C57B70.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1883674369f31dfbe94f534555088a34c57b70.partially.cryptonar")) returned 1 [0136.690] SetErrorMode (uMode=0x1) returned 0x0 [0136.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1e7a9a796b06d8e3fec1865e89b7487da1f8ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.691] SetErrorMode (uMode=0x0) returned 0x1 [0136.691] GetFileType (hFile=0x230) returned 0x1 [0136.691] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.717] SetErrorMode (uMode=0x1) returned 0x0 [0136.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1e7a9a796b06d8e3fec1865e89b7487da1f8ca"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x828f5027, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x828f5027, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x53f09c1b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0136.717] SetErrorMode (uMode=0x0) returned 0x1 [0136.717] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1e7a9a796b06d8e3fec1865e89b7487da1f8ca"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB1E7A9A796B06D8E3FEC1865E89B7487DA1F8CA.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb1e7a9a796b06d8e3fec1865e89b7487da1f8ca.partially.cryptonar")) returned 1 [0136.719] SetErrorMode (uMode=0x1) returned 0x0 [0136.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb4782f8039a28310bc1249d8c4ad8ea12f700d8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.720] SetErrorMode (uMode=0x0) returned 0x1 [0136.720] GetFileType (hFile=0x230) returned 0x1 [0136.720] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.736] WriteFile (in: hFile=0x230, lpBuffer=0x26bd6a0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26bd6a0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0136.751] SetErrorMode (uMode=0x1) returned 0x0 [0136.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb4782f8039a28310bc1249d8c4ad8ea12f700d8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6159e1e8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6159e1e8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x53f55fb0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0136.752] SetErrorMode (uMode=0x0) returned 0x1 [0136.752] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb4782f8039a28310bc1249d8c4ad8ea12f700d8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FB4782F8039A28310BC1249D8C4AD8EA12F700D8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fb4782f8039a28310bc1249d8c4ad8ea12f700d8.partially.cryptonar")) returned 1 [0136.753] SetErrorMode (uMode=0x1) returned 0x0 [0136.753] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fbeebfe6936925d7556ea1e800e546e6497d38cb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.754] SetErrorMode (uMode=0x0) returned 0x1 [0136.754] GetFileType (hFile=0x230) returned 0x1 [0136.755] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.805] SetErrorMode (uMode=0x1) returned 0x0 [0136.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fbeebfe6936925d7556ea1e800e546e6497d38cb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d30ecb, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x48d30ecb, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x53feea0d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x151b)) returned 1 [0136.806] SetErrorMode (uMode=0x0) returned 0x1 [0136.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fbeebfe6936925d7556ea1e800e546e6497d38cb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FBEEBFE6936925D7556EA1E800E546E6497D38CB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fbeebfe6936925d7556ea1e800e546e6497d38cb.partially.cryptonar")) returned 1 [0136.807] SetErrorMode (uMode=0x1) returned 0x0 [0136.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1787c957c34efd7efef65cf061def32996908f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.808] SetErrorMode (uMode=0x0) returned 0x1 [0136.808] GetFileType (hFile=0x230) returned 0x1 [0136.808] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.811] SetErrorMode (uMode=0x1) returned 0x0 [0136.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1787c957c34efd7efef65cf061def32996908f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e87df5, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x86e87df5, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x53feea0d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1896)) returned 1 [0136.811] SetErrorMode (uMode=0x0) returned 0x1 [0136.811] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1787c957c34efd7efef65cf061def32996908f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1787C957C34EFD7EFEF65CF061DEF32996908F.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1787c957c34efd7efef65cf061def32996908f.partially.cryptonar")) returned 1 [0136.812] SetErrorMode (uMode=0x1) returned 0x0 [0136.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1c6d751c621bcf6abca0073c32a4f17e5bdcc7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.814] SetErrorMode (uMode=0x0) returned 0x1 [0136.814] GetFileType (hFile=0x230) returned 0x1 [0136.814] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.854] SetErrorMode (uMode=0x1) returned 0x0 [0136.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1c6d751c621bcf6abca0073c32a4f17e5bdcc7"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf449a8f9, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf449a8f9, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54061131, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0136.854] SetErrorMode (uMode=0x0) returned 0x1 [0136.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1c6d751c621bcf6abca0073c32a4f17e5bdcc7"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC1C6D751C621BCF6ABCA0073C32A4F17E5BDCC7.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc1c6d751c621bcf6abca0073c32a4f17e5bdcc7.partially.cryptonar")) returned 1 [0136.856] SetErrorMode (uMode=0x1) returned 0x0 [0136.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc9105d7472baca3464a9e54ae43a5a3714a0581"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.857] SetErrorMode (uMode=0x0) returned 0x1 [0136.857] GetFileType (hFile=0x230) returned 0x1 [0136.857] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.912] SetErrorMode (uMode=0x1) returned 0x0 [0136.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc9105d7472baca3464a9e54ae43a5a3714a0581"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdda35b35, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdda35b35, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x540f9901, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ea1)) returned 1 [0136.912] SetErrorMode (uMode=0x0) returned 0x1 [0136.912] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc9105d7472baca3464a9e54ae43a5a3714a0581"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FC9105D7472BACA3464A9E54AE43A5A3714A0581.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fc9105d7472baca3464a9e54ae43a5a3714a0581.partially.cryptonar")) returned 1 [0136.914] SetErrorMode (uMode=0x1) returned 0x0 [0136.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fd8689b4cb4259b01a718ffb181bfab0745437d8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.915] SetErrorMode (uMode=0x0) returned 0x1 [0136.915] GetFileType (hFile=0x230) returned 0x1 [0136.915] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.968] SetErrorMode (uMode=0x1) returned 0x0 [0136.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fd8689b4cb4259b01a718ffb181bfab0745437d8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5e462a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3f5e462a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5416c199, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0136.968] SetErrorMode (uMode=0x0) returned 0x1 [0136.968] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fd8689b4cb4259b01a718ffb181bfab0745437d8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FD8689B4CB4259B01A718FFB181BFAB0745437D8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fd8689b4cb4259b01a718ffb181bfab0745437d8.partially.cryptonar")) returned 1 [0136.970] SetErrorMode (uMode=0x1) returned 0x0 [0136.970] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe1db0c7b7a0c24b1340664a748202958e29e80a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.972] SetErrorMode (uMode=0x0) returned 0x1 [0136.972] GetFileType (hFile=0x230) returned 0x1 [0136.973] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0136.991] SetErrorMode (uMode=0x1) returned 0x0 [0136.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe1db0c7b7a0c24b1340664a748202958e29e80a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc50c5407, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc50c5407, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x541b8525, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a580)) returned 1 [0136.991] SetErrorMode (uMode=0x0) returned 0x1 [0136.991] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe1db0c7b7a0c24b1340664a748202958e29e80a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE1DB0C7B7A0C24B1340664A748202958E29E80A.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe1db0c7b7a0c24b1340664a748202958e29e80a.partially.cryptonar")) returned 1 [0136.992] SetErrorMode (uMode=0x1) returned 0x0 [0136.993] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe53447ddfc9e555551ef4e9ae61a336101cd64b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0136.994] SetErrorMode (uMode=0x0) returned 0x1 [0136.994] GetFileType (hFile=0x230) returned 0x1 [0136.994] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.015] SetErrorMode (uMode=0x1) returned 0x0 [0137.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe53447ddfc9e555551ef4e9ae61a336101cd64b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8634bb8c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8634bb8c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x541de997, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0137.016] SetErrorMode (uMode=0x0) returned 0x1 [0137.016] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe53447ddfc9e555551ef4e9ae61a336101cd64b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FE53447DDFC9E555551EF4E9AE61A336101CD64B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\fe53447ddfc9e555551ef4e9ae61a336101cd64b.partially.cryptonar")) returned 1 [0137.017] SetErrorMode (uMode=0x1) returned 0x0 [0137.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff17896bbac510a32e30adcd50f068bf5d775ef5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.018] SetErrorMode (uMode=0x0) returned 0x1 [0137.018] GetFileType (hFile=0x230) returned 0x1 [0137.018] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.020] SetErrorMode (uMode=0x1) returned 0x0 [0137.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff17896bbac510a32e30adcd50f068bf5d775ef5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x871d4a74, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x871d4a74, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x541de997, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x596)) returned 1 [0137.020] SetErrorMode (uMode=0x0) returned 0x1 [0137.020] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff17896bbac510a32e30adcd50f068bf5d775ef5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF17896BBAC510A32E30ADCD50F068BF5D775EF5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff17896bbac510a32e30adcd50f068bf5d775ef5.partially.cryptonar")) returned 1 [0137.029] SetErrorMode (uMode=0x1) returned 0x0 [0137.029] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff308582a6e017961806b4f720e48f59ae7b2685"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.030] SetErrorMode (uMode=0x0) returned 0x1 [0137.030] GetFileType (hFile=0x230) returned 0x1 [0137.030] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.032] SetErrorMode (uMode=0x1) returned 0x0 [0137.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff308582a6e017961806b4f720e48f59ae7b2685"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479d1cba, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x479d1cba, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x54205d25, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10e6)) returned 1 [0137.032] SetErrorMode (uMode=0x0) returned 0x1 [0137.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff308582a6e017961806b4f720e48f59ae7b2685"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FF308582A6E017961806B4F720E48F59AE7B2685.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ff308582a6e017961806b4f720e48f59ae7b2685.partially.cryptonar")) returned 1 [0137.033] SetErrorMode (uMode=0x1) returned 0x0 [0137.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ffdd781447b2cd835f1281f45a47f6b7268b329e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.034] SetErrorMode (uMode=0x0) returned 0x1 [0137.034] GetFileType (hFile=0x230) returned 0x1 [0137.034] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.036] SetErrorMode (uMode=0x1) returned 0x0 [0137.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ffdd781447b2cd835f1281f45a47f6b7268b329e"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f05be8, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x56f05be8, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x54205d25, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1832)) returned 1 [0137.038] SetErrorMode (uMode=0x0) returned 0x1 [0137.038] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ffdd781447b2cd835f1281f45a47f6b7268b329e"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cache2\\entries\\FFDD781447B2CD835F1281F45A47F6B7268B329E.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\cache2\\entries\\ffdd781447b2cd835f1281f45a47f6b7268b329e.partially.cryptonar")) returned 1 [0137.039] SetErrorMode (uMode=0x1) returned 0x0 [0137.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\4mkhr_p+wn_2aezogyttqq==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.042] SetErrorMode (uMode=0x0) returned 0x1 [0137.042] GetFileType (hFile=0x230) returned 0x1 [0137.043] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.078] SetErrorMode (uMode=0x1) returned 0x0 [0137.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\4mkhr_p+wn_2aezogyttqq==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x542771a4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0137.079] SetErrorMode (uMode=0x0) returned 0x1 [0137.079] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\4mkhr_p+wn_2aezogyttqq==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\4mkHR_p+Wn_2AEZoGYTTQQ==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\4mkhr_p+wn_2aezogyttqq==.ico.partially.cryptonar")) returned 1 [0137.083] SetErrorMode (uMode=0x1) returned 0x0 [0137.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\asrzlaifrhwb7kzygffefa==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.084] SetErrorMode (uMode=0x0) returned 0x1 [0137.084] GetFileType (hFile=0x230) returned 0x1 [0137.084] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.116] SetErrorMode (uMode=0x1) returned 0x0 [0137.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\asrzlaifrhwb7kzygffefa==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad3ea71, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcad3ea71, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x542e9845, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0137.116] SetErrorMode (uMode=0x0) returned 0x1 [0137.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\asrzlaifrhwb7kzygffefa==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\asRZLAIfRhwB7KZygffeFA==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\asrzlaifrhwb7kzygffefa==.ico.partially.cryptonar")) returned 1 [0137.117] SetErrorMode (uMode=0x1) returned 0x0 [0137.117] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.118] SetErrorMode (uMode=0x0) returned 0x1 [0137.118] GetFileType (hFile=0x230) returned 0x1 [0137.118] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.119] SetErrorMode (uMode=0x1) returned 0x0 [0137.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564cfcb8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x564cfcb8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x542e9845, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18c)) returned 1 [0137.119] SetErrorMode (uMode=0x0) returned 0x1 [0137.120] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico.partially.cryptonar")) returned 1 [0137.121] SetErrorMode (uMode=0x1) returned 0x0 [0137.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\diktk+qhhlcjqwkz9_vsta==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.122] SetErrorMode (uMode=0x0) returned 0x1 [0137.122] GetFileType (hFile=0x230) returned 0x1 [0137.122] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.123] SetErrorMode (uMode=0x1) returned 0x0 [0137.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\diktk+qhhlcjqwkz9_vsta==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564cfcb8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x564cfcb8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x542e9845, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0137.123] SetErrorMode (uMode=0x0) returned 0x1 [0137.123] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\diktk+qhhlcjqwkz9_vsta==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\DiktK+QHhLcJqWKZ9_VsTA==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\diktk+qhhlcjqwkz9_vsta==.ico.partially.cryptonar")) returned 1 [0137.135] SetErrorMode (uMode=0x1) returned 0x0 [0137.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\dlcxomhmeiiunpbg1nl8ew==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.137] SetErrorMode (uMode=0x0) returned 0x1 [0137.137] GetFileType (hFile=0x230) returned 0x1 [0137.138] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.161] SetErrorMode (uMode=0x1) returned 0x0 [0137.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\dlcxomhmeiiunpbg1nl8ew==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x564cfcb8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x564cfcb8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x54335e4f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0137.162] SetErrorMode (uMode=0x0) returned 0x1 [0137.162] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\dlcxomhmeiiunpbg1nl8ew==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\dLcXOMhmEiiUNPBG1nL8Ew==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\dlcxomhmeiiunpbg1nl8ew==.ico.partially.cryptonar")) returned 1 [0137.165] SetErrorMode (uMode=0x1) returned 0x0 [0137.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\gntk5oh7oplvuch7ue1nuw==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.167] SetErrorMode (uMode=0x0) returned 0x1 [0137.167] GetFileType (hFile=0x230) returned 0x1 [0137.167] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.204] SetErrorMode (uMode=0x1) returned 0x0 [0137.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\gntk5oh7oplvuch7ue1nuw==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x543a84e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0137.205] SetErrorMode (uMode=0x0) returned 0x1 [0137.205] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\gntk5oh7oplvuch7ue1nuw==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\GNtk5OH7OPlVUCH7Ue1nuw==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\gntk5oh7oplvuch7ue1nuw==.ico.partially.cryptonar")) returned 1 [0137.206] SetErrorMode (uMode=0x1) returned 0x0 [0137.207] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\intr8v5+a8pq96nv92i9rg==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.209] SetErrorMode (uMode=0x0) returned 0x1 [0137.209] GetFileType (hFile=0x230) returned 0x1 [0137.209] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.210] SetErrorMode (uMode=0x1) returned 0x0 [0137.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\intr8v5+a8pq96nv92i9rg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad3c349, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcad3c349, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x543ce6f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9f3)) returned 1 [0137.211] SetErrorMode (uMode=0x0) returned 0x1 [0137.211] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\intr8v5+a8pq96nv92i9rg==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\iNtr8V5+A8pq96nV92I9rg==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\intr8v5+a8pq96nv92i9rg==.ico.partially.cryptonar")) returned 1 [0137.212] SetErrorMode (uMode=0x1) returned 0x0 [0137.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kmkld2mykttwkdykdz4gna==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.214] SetErrorMode (uMode=0x0) returned 0x1 [0137.214] GetFileType (hFile=0x230) returned 0x1 [0137.214] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.236] SetErrorMode (uMode=0x1) returned 0x0 [0137.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kmkld2mykttwkdykdz4gna==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b99746, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5b99746, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x543f4912, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0137.236] SetErrorMode (uMode=0x0) returned 0x1 [0137.236] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kmkld2mykttwkdykdz4gna==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KMkld2mykTtwKDykdZ4gNA==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kmkld2mykttwkdykdz4gna==.ico.partially.cryptonar")) returned 1 [0137.238] SetErrorMode (uMode=0x1) returned 0x0 [0137.238] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kykenqt8cz0gp+hqz5mipw==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.239] SetErrorMode (uMode=0x0) returned 0x1 [0137.239] GetFileType (hFile=0x230) returned 0x1 [0137.239] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.284] SetErrorMode (uMode=0x1) returned 0x0 [0137.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kykenqt8cz0gp+hqz5mipw==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94bdb583, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x94bdb583, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x544670c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5e9)) returned 1 [0137.284] SetErrorMode (uMode=0x0) returned 0x1 [0137.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kykenqt8cz0gp+hqz5mipw==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\KykeNQT8cz0GP+hqz5mIpw==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kykenqt8cz0gp+hqz5mipw==.ico.partially.cryptonar")) returned 1 [0137.286] SetErrorMode (uMode=0x1) returned 0x0 [0137.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kzbajfgdibzzmvdtka320q==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.287] SetErrorMode (uMode=0x0) returned 0x1 [0137.287] GetFileType (hFile=0x230) returned 0x1 [0137.287] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.289] SetErrorMode (uMode=0x1) returned 0x0 [0137.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kzbajfgdibzzmvdtka320q==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x833ca312, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x833ca312, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5448eef3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9f3)) returned 1 [0137.289] SetErrorMode (uMode=0x0) returned 0x1 [0137.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kzbajfgdibzzmvdtka320q==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\kZbAJfgDibZzMvDTka320Q==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\kzbajfgdibzzmvdtka320q==.ico.partially.cryptonar")) returned 1 [0137.290] SetErrorMode (uMode=0x1) returned 0x0 [0137.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\k_jba2cueaaojvmrlkk+gq==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.291] SetErrorMode (uMode=0x0) returned 0x1 [0137.291] GetFileType (hFile=0x230) returned 0x1 [0137.291] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.293] SetErrorMode (uMode=0x1) returned 0x0 [0137.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\k_jba2cueaaojvmrlkk+gq==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94bdb583, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x94bdb583, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x5448eef3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5e9)) returned 1 [0137.293] SetErrorMode (uMode=0x0) returned 0x1 [0137.293] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\k_jba2cueaaojvmrlkk+gq==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\K_jbA2CUeAAOJVMrlKk+gQ==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\k_jba2cueaaojvmrlkk+gq==.ico.partially.cryptonar")) returned 1 [0137.294] SetErrorMode (uMode=0x1) returned 0x0 [0137.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\mgder72bxyca3ilavifttq==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.295] SetErrorMode (uMode=0x0) returned 0x1 [0137.295] GetFileType (hFile=0x230) returned 0x1 [0137.295] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.310] SetErrorMode (uMode=0x1) returned 0x0 [0137.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\mgder72bxyca3ilavifttq==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x544b34b7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9f3)) returned 1 [0137.311] SetErrorMode (uMode=0x0) returned 0x1 [0137.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\mgder72bxyca3ilavifttq==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\mgDer72BXyCa3ilaVifttQ==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\mgder72bxyca3ilavifttq==.ico.partially.cryptonar")) returned 1 [0137.312] SetErrorMode (uMode=0x1) returned 0x0 [0137.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\obxqskyxtpxkezhnvwjwjg==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.313] SetErrorMode (uMode=0x0) returned 0x1 [0137.313] GetFileType (hFile=0x230) returned 0x1 [0137.313] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.569] SetErrorMode (uMode=0x1) returned 0x0 [0137.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\obxqskyxtpxkezhnvwjwjg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5473c563, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0137.569] SetErrorMode (uMode=0x0) returned 0x1 [0137.569] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\obxqskyxtpxkezhnvwjwjg==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\obXqSkYxtPxKEzhnvwJwjg==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\obxqskyxtpxkezhnvwjwjg==.ico.partially.cryptonar")) returned 1 [0137.571] SetErrorMode (uMode=0x1) returned 0x0 [0137.571] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\ttwzscrofkviytvqaflxrw==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.572] SetErrorMode (uMode=0x0) returned 0x1 [0137.572] GetFileType (hFile=0x230) returned 0x1 [0137.572] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.585] SetErrorMode (uMode=0x1) returned 0x0 [0137.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\ttwzscrofkviytvqaflxrw==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe26028e, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe26028e, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x54761fe9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0137.585] SetErrorMode (uMode=0x0) returned 0x1 [0137.585] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\ttwzscrofkviytvqaflxrw==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\ttwZSCROfkViyTVqAFLXrw==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\ttwzscrofkviytvqaflxrw==.ico.partially.cryptonar")) returned 1 [0137.587] SetErrorMode (uMode=0x1) returned 0x0 [0137.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\xumtyi1whw2h+uz6m0ifow==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.588] SetErrorMode (uMode=0x0) returned 0x1 [0137.588] GetFileType (hFile=0x230) returned 0x1 [0137.588] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.730] SetErrorMode (uMode=0x1) returned 0x0 [0137.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\xumtyi1whw2h+uz6m0ifow==.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe23a11c, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xbe23a11c, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x548b9518, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2b6)) returned 1 [0137.730] SetErrorMode (uMode=0x0) returned 0x1 [0137.730] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\xumtyi1whw2h+uz6m0ifow==.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\jumpListCache\\XUMtyI1WhW2H+uz6m0iFOw==.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\jumplistcache\\xumtyi1whw2h+uz6m0ifow==.ico.partially.cryptonar")) returned 1 [0137.731] SetErrorMode (uMode=0x1) returned 0x0 [0137.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.732] SetErrorMode (uMode=0x0) returned 0x1 [0137.733] GetFileType (hFile=0x230) returned 0x1 [0137.733] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.734] SetErrorMode (uMode=0x1) returned 0x0 [0137.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\offlinecache\\index.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79deab70, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x79deab70, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x548b9518, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0137.735] SetErrorMode (uMode=0x0) returned 0x1 [0137.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\offlinecache\\index.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\OfflineCache\\index.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\offlinecache\\index.sqlite.partially.cryptonar")) returned 1 [0137.736] SetErrorMode (uMode=0x1) returned 0x0 [0137.736] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.738] SetErrorMode (uMode=0x0) returned 0x1 [0137.738] GetFileType (hFile=0x230) returned 0x1 [0137.739] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.753] SetErrorMode (uMode=0x1) returned 0x0 [0137.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x548df683, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0137.754] SetErrorMode (uMode=0x0) returned 0x1 [0137.754] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.pset.partially.cryptonar")) returned 1 [0137.755] SetErrorMode (uMode=0x1) returned 0x0 [0137.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.756] SetErrorMode (uMode=0x0) returned 0x1 [0137.756] GetFileType (hFile=0x230) returned 0x1 [0137.756] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.858] SetErrorMode (uMode=0x1) returned 0x0 [0137.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x549ea666, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf238)) returned 1 [0137.859] SetErrorMode (uMode=0x0) returned 0x1 [0137.859] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\base-track-digest256.sbstore.partially.cryptonar")) returned 1 [0137.861] SetErrorMode (uMode=0x1) returned 0x0 [0137.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.864] SetErrorMode (uMode=0x0) returned 0x1 [0137.864] GetFileType (hFile=0x230) returned 0x1 [0137.864] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0137.925] SetErrorMode (uMode=0x1) returned 0x0 [0137.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x54a832c0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x177b6)) returned 1 [0137.925] SetErrorMode (uMode=0x0) returned 0x1 [0137.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.pset.partially.cryptonar")) returned 1 [0137.927] SetErrorMode (uMode=0x1) returned 0x0 [0137.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0137.929] SetErrorMode (uMode=0x0) returned 0x1 [0137.929] GetFileType (hFile=0x230) returned 0x1 [0137.929] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.079] SetErrorMode (uMode=0x1) returned 0x0 [0138.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x54bda674, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x166a5)) returned 1 [0138.079] SetErrorMode (uMode=0x0) returned 0x1 [0138.080] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-badbinurl-shavar.sbstore.partially.cryptonar")) returned 1 [0138.081] SetErrorMode (uMode=0x1) returned 0x0 [0138.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.082] SetErrorMode (uMode=0x0) returned 0x1 [0138.082] GetFileType (hFile=0x230) returned 0x1 [0138.082] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.084] SetErrorMode (uMode=0x1) returned 0x0 [0138.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x54c26a98, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.084] SetErrorMode (uMode=0x0) returned 0x1 [0138.084] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.pset.partially.cryptonar")) returned 1 [0138.086] SetErrorMode (uMode=0x1) returned 0x0 [0138.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.087] SetErrorMode (uMode=0x0) returned 0x1 [0138.088] GetFileType (hFile=0x230) returned 0x1 [0138.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.143] SetErrorMode (uMode=0x1) returned 0x0 [0138.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728ebf1a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x728ebf1a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x54c9932b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x529c)) returned 1 [0138.146] SetErrorMode (uMode=0x0) returned 0x1 [0138.147] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-downloadwhite-digest256.sbstore.partially.cryptonar")) returned 1 [0138.150] SetErrorMode (uMode=0x1) returned 0x0 [0138.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.152] SetErrorMode (uMode=0x0) returned 0x1 [0138.152] GetFileType (hFile=0x230) returned 0x1 [0138.155] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.224] SetErrorMode (uMode=0x1) returned 0x0 [0138.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x54d57e83, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x97714)) returned 1 [0138.224] SetErrorMode (uMode=0x0) returned 0x1 [0138.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.pset.partially.cryptonar")) returned 1 [0138.226] SetErrorMode (uMode=0x1) returned 0x0 [0138.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.228] SetErrorMode (uMode=0x0) returned 0x1 [0138.228] GetFileType (hFile=0x230) returned 0x1 [0138.228] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.361] SetErrorMode (uMode=0x1) returned 0x0 [0138.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x54eb30ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1465f6)) returned 1 [0138.361] SetErrorMode (uMode=0x0) returned 0x1 [0138.361] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-malware-shavar.sbstore.partially.cryptonar")) returned 1 [0138.366] SetErrorMode (uMode=0x1) returned 0x0 [0138.367] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.368] SetErrorMode (uMode=0x0) returned 0x1 [0138.368] GetFileType (hFile=0x230) returned 0x1 [0138.368] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.498] SetErrorMode (uMode=0x1) returned 0x0 [0138.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x550067b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x89ec8)) returned 1 [0138.498] SetErrorMode (uMode=0x0) returned 0x1 [0138.498] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.pset.partially.cryptonar")) returned 1 [0138.500] SetErrorMode (uMode=0x1) returned 0x0 [0138.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.501] SetErrorMode (uMode=0x0) returned 0x1 [0138.501] GetFileType (hFile=0x230) returned 0x1 [0138.501] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.652] SetErrorMode (uMode=0x1) returned 0x0 [0138.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55183f96, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1036e0)) returned 1 [0138.652] SetErrorMode (uMode=0x0) returned 0x1 [0138.652] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-phish-shavar.sbstore.partially.cryptonar")) returned 1 [0138.654] SetErrorMode (uMode=0x1) returned 0x0 [0138.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.656] SetErrorMode (uMode=0x0) returned 0x1 [0138.656] GetFileType (hFile=0x230) returned 0x1 [0138.657] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.712] SetErrorMode (uMode=0x1) returned 0x0 [0138.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5521c9fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x547d6)) returned 1 [0138.713] SetErrorMode (uMode=0x0) returned 0x1 [0138.713] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.pset.partially.cryptonar")) returned 1 [0138.714] SetErrorMode (uMode=0x1) returned 0x0 [0138.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.715] SetErrorMode (uMode=0x0) returned 0x1 [0138.715] GetFileType (hFile=0x230) returned 0x1 [0138.715] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.801] SetErrorMode (uMode=0x1) returned 0x0 [0138.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x552db4a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x61bc9)) returned 1 [0138.801] SetErrorMode (uMode=0x0) returned 0x1 [0138.801] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\goog-unwanted-shavar.sbstore.partially.cryptonar")) returned 1 [0138.803] SetErrorMode (uMode=0x1) returned 0x0 [0138.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.807] SetErrorMode (uMode=0x0) returned 0x1 [0138.807] GetFileType (hFile=0x230) returned 0x1 [0138.807] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.808] SetErrorMode (uMode=0x1) returned 0x0 [0138.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5530160d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.808] SetErrorMode (uMode=0x0) returned 0x1 [0138.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.pset.partially.cryptonar")) returned 1 [0138.810] SetErrorMode (uMode=0x1) returned 0x0 [0138.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.811] SetErrorMode (uMode=0x0) returned 0x1 [0138.811] GetFileType (hFile=0x230) returned 0x1 [0138.811] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.818] SetErrorMode (uMode=0x1) returned 0x0 [0138.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x553277dc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdfc)) returned 1 [0138.819] SetErrorMode (uMode=0x0) returned 0x1 [0138.819] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozplugin-block-digest256.sbstore.partially.cryptonar")) returned 1 [0138.820] SetErrorMode (uMode=0x1) returned 0x0 [0138.820] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.822] SetErrorMode (uMode=0x0) returned 0x1 [0138.822] GetFileType (hFile=0x230) returned 0x1 [0138.822] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.823] SetErrorMode (uMode=0x1) returned 0x0 [0138.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x553277dc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.823] SetErrorMode (uMode=0x0) returned 0x1 [0138.823] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.pset.partially.cryptonar")) returned 1 [0138.824] SetErrorMode (uMode=0x1) returned 0x0 [0138.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.825] SetErrorMode (uMode=0x0) returned 0x1 [0138.825] GetFileType (hFile=0x230) returned 0x1 [0138.825] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.827] SetErrorMode (uMode=0x1) returned 0x0 [0138.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x553277dc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x55810)) returned 1 [0138.828] SetErrorMode (uMode=0x0) returned 0x1 [0138.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\mozstd-trackwhite-digest256.sbstore.partially.cryptonar")) returned 1 [0138.829] SetErrorMode (uMode=0x1) returned 0x0 [0138.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.830] SetErrorMode (uMode=0x0) returned 0x1 [0138.830] GetFileType (hFile=0x230) returned 0x1 [0138.830] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.831] SetErrorMode (uMode=0x1) returned 0x0 [0138.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x553277dc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.832] SetErrorMode (uMode=0x0) returned 0x1 [0138.832] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.pset.partially.cryptonar")) returned 1 [0138.833] SetErrorMode (uMode=0x1) returned 0x0 [0138.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.835] SetErrorMode (uMode=0x0) returned 0x1 [0138.835] GetFileType (hFile=0x230) returned 0x1 [0138.835] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.836] SetErrorMode (uMode=0x1) returned 0x0 [0138.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c0d071, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72c0d071, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5534db3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0138.836] SetErrorMode (uMode=0x0) returned 0x1 [0138.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-block-simple.sbstore.partially.cryptonar")) returned 1 [0138.838] SetErrorMode (uMode=0x1) returned 0x0 [0138.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.840] SetErrorMode (uMode=0x0) returned 0x1 [0138.840] GetFileType (hFile=0x230) returned 0x1 [0138.840] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.841] SetErrorMode (uMode=0x1) returned 0x0 [0138.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72912163, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72912163, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5534db3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.841] SetErrorMode (uMode=0x0) returned 0x1 [0138.841] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.pset.partially.cryptonar")) returned 1 [0138.843] SetErrorMode (uMode=0x1) returned 0x0 [0138.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.844] SetErrorMode (uMode=0x0) returned 0x1 [0138.844] GetFileType (hFile=0x230) returned 0x1 [0138.844] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.845] SetErrorMode (uMode=0x1) returned 0x0 [0138.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c596ee, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72c596ee, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5534db3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0138.845] SetErrorMode (uMode=0x0) returned 0x1 [0138.846] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flash-simple.sbstore.partially.cryptonar")) returned 1 [0138.847] SetErrorMode (uMode=0x1) returned 0x0 [0138.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.848] SetErrorMode (uMode=0x0) returned 0x1 [0138.848] GetFileType (hFile=0x230) returned 0x1 [0138.848] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.849] SetErrorMode (uMode=0x1) returned 0x0 [0138.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55373da3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.850] SetErrorMode (uMode=0x0) returned 0x1 [0138.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.pset.partially.cryptonar")) returned 1 [0138.852] SetErrorMode (uMode=0x1) returned 0x0 [0138.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.856] SetErrorMode (uMode=0x0) returned 0x1 [0138.856] GetFileType (hFile=0x230) returned 0x1 [0138.856] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.857] SetErrorMode (uMode=0x1) returned 0x0 [0138.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cf1e80, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72cf1e80, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55373da3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0138.858] SetErrorMode (uMode=0x0) returned 0x1 [0138.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashallow-simple.sbstore.partially.cryptonar")) returned 1 [0138.859] SetErrorMode (uMode=0x1) returned 0x0 [0138.859] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.863] SetErrorMode (uMode=0x0) returned 0x1 [0138.864] GetFileType (hFile=0x230) returned 0x1 [0138.864] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.865] SetErrorMode (uMode=0x1) returned 0x0 [0138.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55399fc8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.865] SetErrorMode (uMode=0x0) returned 0x1 [0138.865] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.pset.partially.cryptonar")) returned 1 [0138.867] SetErrorMode (uMode=0x1) returned 0x0 [0138.867] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.867] SetErrorMode (uMode=0x0) returned 0x1 [0138.867] GetFileType (hFile=0x230) returned 0x1 [0138.868] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.868] SetErrorMode (uMode=0x1) returned 0x0 [0138.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d64585, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72d64585, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55399fc8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0138.869] SetErrorMode (uMode=0x0) returned 0x1 [0138.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-flashsubdoc-simple.sbstore.partially.cryptonar")) returned 1 [0138.870] SetErrorMode (uMode=0x1) returned 0x0 [0138.870] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.871] SetErrorMode (uMode=0x0) returned 0x1 [0138.871] GetFileType (hFile=0x230) returned 0x1 [0138.871] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.872] SetErrorMode (uMode=0x1) returned 0x0 [0138.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55399fc8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.872] SetErrorMode (uMode=0x0) returned 0x1 [0138.872] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.pset.partially.cryptonar")) returned 1 [0138.874] SetErrorMode (uMode=0x1) returned 0x0 [0138.874] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.875] SetErrorMode (uMode=0x0) returned 0x1 [0138.875] GetFileType (hFile=0x230) returned 0x1 [0138.875] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.877] SetErrorMode (uMode=0x1) returned 0x0 [0138.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55399fc8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0138.877] SetErrorMode (uMode=0x0) returned 0x1 [0138.877] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-malware-simple.sbstore.partially.cryptonar")) returned 1 [0138.879] SetErrorMode (uMode=0x1) returned 0x0 [0138.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.881] SetErrorMode (uMode=0x0) returned 0x1 [0138.881] GetFileType (hFile=0x230) returned 0x1 [0138.881] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.883] SetErrorMode (uMode=0x1) returned 0x0 [0138.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x553c2330, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.883] SetErrorMode (uMode=0x0) returned 0x1 [0138.883] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.pset.partially.cryptonar")) returned 1 [0138.885] SetErrorMode (uMode=0x1) returned 0x0 [0138.885] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.886] SetErrorMode (uMode=0x0) returned 0x1 [0138.886] GetFileType (hFile=0x230) returned 0x1 [0138.886] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.887] SetErrorMode (uMode=0x1) returned 0x0 [0138.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b02125, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72b02125, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x553c2330, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0138.888] SetErrorMode (uMode=0x0) returned 0x1 [0138.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-phish-simple.sbstore.partially.cryptonar")) returned 1 [0138.890] SetErrorMode (uMode=0x1) returned 0x0 [0138.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.891] SetErrorMode (uMode=0x0) returned 0x1 [0138.891] GetFileType (hFile=0x230) returned 0x1 [0138.891] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.892] SetErrorMode (uMode=0x1) returned 0x0 [0138.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x553c2330, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.893] SetErrorMode (uMode=0x0) returned 0x1 [0138.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.pset.partially.cryptonar")) returned 1 [0138.895] SetErrorMode (uMode=0x1) returned 0x0 [0138.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.896] SetErrorMode (uMode=0x0) returned 0x1 [0138.896] GetFileType (hFile=0x230) returned 0x1 [0138.896] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.898] SetErrorMode (uMode=0x1) returned 0x0 [0138.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b74837, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72b74837, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x553e71a0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0138.898] SetErrorMode (uMode=0x0) returned 0x1 [0138.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-track-simple.sbstore.partially.cryptonar")) returned 1 [0138.900] SetErrorMode (uMode=0x1) returned 0x0 [0138.900] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.902] SetErrorMode (uMode=0x0) returned 0x1 [0138.902] GetFileType (hFile=0x230) returned 0x1 [0138.902] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.903] SetErrorMode (uMode=0x1) returned 0x0 [0138.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x553e71a0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.904] SetErrorMode (uMode=0x0) returned 0x1 [0138.904] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.pset.partially.cryptonar")) returned 1 [0138.906] SetErrorMode (uMode=0x1) returned 0x0 [0138.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.907] SetErrorMode (uMode=0x0) returned 0x1 [0138.907] GetFileType (hFile=0x230) returned 0x1 [0138.907] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.908] SetErrorMode (uMode=0x1) returned 0x0 [0138.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bc0d13, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72bc0d13, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x553e71a0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0138.909] SetErrorMode (uMode=0x0) returned 0x1 [0138.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-trackwhite-simple.sbstore.partially.cryptonar")) returned 1 [0138.910] SetErrorMode (uMode=0x1) returned 0x0 [0138.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.912] SetErrorMode (uMode=0x0) returned 0x1 [0138.912] GetFileType (hFile=0x230) returned 0x1 [0138.912] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.913] SetErrorMode (uMode=0x1) returned 0x0 [0138.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x729383b8, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x729383b8, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5540d40d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.914] SetErrorMode (uMode=0x0) returned 0x1 [0138.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.pset.partially.cryptonar")) returned 1 [0138.915] SetErrorMode (uMode=0x1) returned 0x0 [0138.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.917] SetErrorMode (uMode=0x0) returned 0x1 [0138.917] GetFileType (hFile=0x230) returned 0x1 [0138.917] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.918] SetErrorMode (uMode=0x1) returned 0x0 [0138.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b2840f, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72b2840f, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5540d40d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0138.918] SetErrorMode (uMode=0x0) returned 0x1 [0138.919] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\test-unwanted-simple.sbstore.partially.cryptonar")) returned 1 [0138.920] SetErrorMode (uMode=0x1) returned 0x0 [0138.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.921] SetErrorMode (uMode=0x0) returned 0x1 [0138.921] GetFileType (hFile=0x230) returned 0x1 [0138.921] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.922] SetErrorMode (uMode=0x1) returned 0x0 [0138.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5540d40d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.923] SetErrorMode (uMode=0x0) returned 0x1 [0138.923] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.pset.partially.cryptonar")) returned 1 [0138.924] SetErrorMode (uMode=0x1) returned 0x0 [0138.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.926] SetErrorMode (uMode=0x0) returned 0x1 [0138.926] GetFileType (hFile=0x230) returned 0x1 [0138.926] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.927] SetErrorMode (uMode=0x1) returned 0x0 [0138.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ca5b16, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72ca5b16, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5540d40d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0138.928] SetErrorMode (uMode=0x0) returned 0x1 [0138.928] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flash-simple.sbstore.partially.cryptonar")) returned 1 [0138.930] SetErrorMode (uMode=0x1) returned 0x0 [0138.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.932] SetErrorMode (uMode=0x0) returned 0x1 [0138.932] GetFileType (hFile=0x230) returned 0x1 [0138.932] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.933] SetErrorMode (uMode=0x1) returned 0x0 [0138.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55432a08, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.933] SetErrorMode (uMode=0x0) returned 0x1 [0138.933] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.pset.partially.cryptonar")) returned 1 [0138.935] SetErrorMode (uMode=0x1) returned 0x0 [0138.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.936] SetErrorMode (uMode=0x0) returned 0x1 [0138.936] GetFileType (hFile=0x230) returned 0x1 [0138.936] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.937] SetErrorMode (uMode=0x1) returned 0x0 [0138.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d3e33a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72d3e33a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55432a08, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0138.937] SetErrorMode (uMode=0x0) returned 0x1 [0138.937] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashallow-simple.sbstore.partially.cryptonar")) returned 1 [0138.939] SetErrorMode (uMode=0x1) returned 0x0 [0138.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.940] SetErrorMode (uMode=0x0) returned 0x1 [0138.940] GetFileType (hFile=0x230) returned 0x1 [0138.940] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.941] SetErrorMode (uMode=0x1) returned 0x0 [0138.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7295e5f4, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x7295e5f4, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55432a08, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0138.941] SetErrorMode (uMode=0x0) returned 0x1 [0138.941] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.pset.partially.cryptonar")) returned 1 [0138.942] SetErrorMode (uMode=0x1) returned 0x0 [0138.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.944] SetErrorMode (uMode=0x0) returned 0x1 [0138.944] GetFileType (hFile=0x230) returned 0x1 [0138.944] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0138.945] SetErrorMode (uMode=0x1) returned 0x0 [0138.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72db0a14, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x72db0a14, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55458c75, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1 [0138.945] SetErrorMode (uMode=0x0) returned 0x1 [0138.945] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\safebrowsing\\testexcept-flashsubdoc-simple.sbstore.partially.cryptonar")) returned 1 [0138.946] SetErrorMode (uMode=0x1) returned 0x0 [0138.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\startupcache\\startupcache.4.little"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0138.948] SetErrorMode (uMode=0x0) returned 0x1 [0138.948] GetFileType (hFile=0x230) returned 0x1 [0138.948] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.011] SetErrorMode (uMode=0x1) returned 0x0 [0139.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\startupcache\\startupcache.4.little"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfca9379d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfca9379d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x554f164d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a208d)) returned 1 [0139.012] SetErrorMode (uMode=0x0) returned 0x1 [0139.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\startupcache\\startupcache.4.little"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\startupCache\\startupCache.4.little.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\startupcache\\startupcache.4.little.partially.cryptonar")) returned 1 [0139.013] SetErrorMode (uMode=0x1) returned 0x0 [0139.013] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.017] SetErrorMode (uMode=0x0) returned 0x1 [0139.017] GetFileType (hFile=0x230) returned 0x1 [0139.017] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.052] SetErrorMode (uMode=0x1) returned 0x0 [0139.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db09b13, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3db09b13, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x5553d95f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4304)) returned 1 [0139.052] SetErrorMode (uMode=0x0) returned 0x1 [0139.052] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\0e292d2be40784b709a96299f7f56c4c.png.partially.cryptonar")) returned 1 [0139.054] SetErrorMode (uMode=0x1) returned 0x0 [0139.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.055] SetErrorMode (uMode=0x0) returned 0x1 [0139.055] GetFileType (hFile=0x230) returned 0x1 [0139.055] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.121] SetErrorMode (uMode=0x1) returned 0x0 [0139.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf532d433, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0xf532d433, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x555fc6ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d15)) returned 1 [0139.122] SetErrorMode (uMode=0x0) returned 0x1 [0139.122] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\28c9257769b2913b70283ca4759e2034.png.partially.cryptonar")) returned 1 [0139.123] SetErrorMode (uMode=0x1) returned 0x0 [0139.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.125] SetErrorMode (uMode=0x0) returned 0x1 [0139.125] GetFileType (hFile=0x230) returned 0x1 [0139.125] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.129] SetErrorMode (uMode=0x1) returned 0x0 [0139.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60d92304, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x60d92304, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x555fc6ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6a58)) returned 1 [0139.129] SetErrorMode (uMode=0x0) returned 0x1 [0139.129] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\2bf8db03609478000e25532b94a93e81.png.partially.cryptonar")) returned 1 [0139.132] SetErrorMode (uMode=0x1) returned 0x0 [0139.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.134] SetErrorMode (uMode=0x0) returned 0x1 [0139.134] GetFileType (hFile=0x230) returned 0x1 [0139.134] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.169] SetErrorMode (uMode=0x1) returned 0x0 [0139.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a80f5ad, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x8a80f5ad, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x5566ee85, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e94)) returned 1 [0139.170] SetErrorMode (uMode=0x0) returned 0x1 [0139.170] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\5d432dc88d56856d87faecfa9b48853b.png.partially.cryptonar")) returned 1 [0139.173] SetErrorMode (uMode=0x1) returned 0x0 [0139.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.174] SetErrorMode (uMode=0x0) returned 0x1 [0139.174] GetFileType (hFile=0x230) returned 0x1 [0139.174] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.198] SetErrorMode (uMode=0x1) returned 0x0 [0139.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49942d66, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x49942d66, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x556bb21b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x44c5)) returned 1 [0139.198] SetErrorMode (uMode=0x0) returned 0x1 [0139.199] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\77ec32dc2bee35c0b759503a76ed5b66.png.partially.cryptonar")) returned 1 [0139.200] SetErrorMode (uMode=0x1) returned 0x0 [0139.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.201] SetErrorMode (uMode=0x0) returned 0x1 [0139.201] GetFileType (hFile=0x230) returned 0x1 [0139.201] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.209] SetErrorMode (uMode=0x1) returned 0x0 [0139.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82c2e405, ftCreationTime.dwHighDateTime=0x1d2d442, ftLastAccessTime.dwLowDateTime=0x82c2e405, ftLastAccessTime.dwHighDateTime=0x1d2d442, ftLastWriteTime.dwLowDateTime=0x556e146e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x395a)) returned 1 [0139.210] SetErrorMode (uMode=0x0) returned 0x1 [0139.210] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\b6dc1948244e7e4562c9356a0052d7af.png.partially.cryptonar")) returned 1 [0139.212] SetErrorMode (uMode=0x1) returned 0x0 [0139.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.213] SetErrorMode (uMode=0x0) returned 0x1 [0139.213] GetFileType (hFile=0x230) returned 0x1 [0139.213] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.237] SetErrorMode (uMode=0x1) returned 0x0 [0139.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3db09b13, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x3db09b13, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x55709b74, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4304)) returned 1 [0139.237] SetErrorMode (uMode=0x0) returned 0x1 [0139.237] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\mozilla\\firefox\\profiles\\8i341t8m.default\\thumbnails\\e214427ea25af5774381fe2c2582382e.png.partially.cryptonar")) returned 1 [0139.239] SetErrorMode (uMode=0x1) returned 0x0 [0139.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.242] SetErrorMode (uMode=0x0) returned 0x1 [0139.242] GetFileType (hFile=0x230) returned 0x1 [0139.242] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.254] SetErrorMode (uMode=0x1) returned 0x0 [0139.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2defcfc4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5572d81b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.254] SetErrorMode (uMode=0x0) returned 0x1 [0139.254] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0139.256] SetErrorMode (uMode=0x1) returned 0x0 [0139.256] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.257] SetErrorMode (uMode=0x0) returned 0x1 [0139.257] GetFileType (hFile=0x230) returned 0x1 [0139.257] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.277] SetErrorMode (uMode=0x1) returned 0x0 [0139.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2dc7478f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x55779dbd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0139.277] SetErrorMode (uMode=0x0) returned 0x1 [0139.277] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0139.279] SetErrorMode (uMode=0x1) returned 0x0 [0139.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.280] SetErrorMode (uMode=0x0) returned 0x1 [0139.280] GetFileType (hFile=0x230) returned 0x1 [0139.280] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.280] SetErrorMode (uMode=0x1) returned 0x0 [0139.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2dc7478f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2dc7478f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2dc7478f, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.280] SetErrorMode (uMode=0x0) returned 0x1 [0139.280] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Microsoft.3DBuilder_10.0.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\microsoft.3dbuilder_10.0.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0139.281] SetErrorMode (uMode=0x1) returned 0x0 [0139.281] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.282] SetErrorMode (uMode=0x0) returned 0x1 [0139.282] GetFileType (hFile=0x230) returned 0x1 [0139.282] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.282] SetErrorMode (uMode=0x1) returned 0x0 [0139.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d54d7e7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d54d7e7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2d54d7e7, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.282] SetErrorMode (uMode=0x0) returned 0x1 [0139.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0139.283] SetErrorMode (uMode=0x1) returned 0x0 [0139.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.284] SetErrorMode (uMode=0x0) returned 0x1 [0139.284] GetFileType (hFile=0x230) returned 0x1 [0139.284] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.319] SetErrorMode (uMode=0x1) returned 0x0 [0139.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d4b4cf8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d4b4cf8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x557ec4f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0139.319] SetErrorMode (uMode=0x0) returned 0x1 [0139.319] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.3DBuilder_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.3dbuilder_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0139.320] SetErrorMode (uMode=0x1) returned 0x0 [0139.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.329] SetErrorMode (uMode=0x0) returned 0x1 [0139.329] GetFileType (hFile=0x230) returned 0x1 [0139.329] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.331] SetErrorMode (uMode=0x1) returned 0x0 [0139.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe0504c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe77721, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x557ec4f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.332] SetErrorMode (uMode=0x0) returned 0x1 [0139.332] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0139.334] SetErrorMode (uMode=0x1) returned 0x0 [0139.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.336] SetErrorMode (uMode=0x0) returned 0x1 [0139.336] GetFileType (hFile=0x230) returned 0x1 [0139.336] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.364] SetErrorMode (uMode=0x1) returned 0x0 [0139.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xafe2b28c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe2b28c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x558389c0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.364] SetErrorMode (uMode=0x0) returned 0x1 [0139.365] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0139.366] SetErrorMode (uMode=0x1) returned 0x0 [0139.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.367] SetErrorMode (uMode=0x0) returned 0x1 [0139.367] GetFileType (hFile=0x230) returned 0x1 [0139.367] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.368] SetErrorMode (uMode=0x1) returned 0x0 [0139.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xafe2b28c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xafe2b28c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xafe2b28c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.368] SetErrorMode (uMode=0x0) returned 0x1 [0139.368] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Microsoft.AAD.BrokerPlugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0139.369] SetErrorMode (uMode=0x1) returned 0x0 [0139.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.371] SetErrorMode (uMode=0x0) returned 0x1 [0139.371] GetFileType (hFile=0x230) returned 0x1 [0139.371] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.372] SetErrorMode (uMode=0x1) returned 0x0 [0139.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8a7b49, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xaf8a7b49, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xaf8a7b49, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.372] SetErrorMode (uMode=0x0) returned 0x1 [0139.372] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0139.373] SetErrorMode (uMode=0x1) returned 0x0 [0139.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.374] SetErrorMode (uMode=0x0) returned 0x1 [0139.374] GetFileType (hFile=0x230) returned 0x1 [0139.374] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.401] SetErrorMode (uMode=0x1) returned 0x0 [0139.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf8a7b49, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x62f0a7ff, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x558ab0a1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0139.402] SetErrorMode (uMode=0x0) returned 0x1 [0139.402] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0139.404] SetErrorMode (uMode=0x1) returned 0x0 [0139.404] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.405] SetErrorMode (uMode=0x0) returned 0x1 [0139.405] GetFileType (hFile=0x230) returned 0x1 [0139.405] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.420] SetErrorMode (uMode=0x1) returned 0x0 [0139.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62e71eb2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x62e71eb2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x558d1256, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0139.421] SetErrorMode (uMode=0x0) returned 0x1 [0139.421] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0139.422] SetErrorMode (uMode=0x1) returned 0x0 [0139.423] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.424] SetErrorMode (uMode=0x0) returned 0x1 [0139.424] GetFileType (hFile=0x230) returned 0x1 [0139.425] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.425] SetErrorMode (uMode=0x1) returned 0x0 [0139.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x62e71eb2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x62e71eb2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x62e71eb2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.425] SetErrorMode (uMode=0x0) returned 0x1 [0139.425] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.aad.brokerplugin_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0139.428] SetErrorMode (uMode=0x1) returned 0x0 [0139.428] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.432] SetErrorMode (uMode=0x0) returned 0x1 [0139.432] GetFileType (hFile=0x230) returned 0x1 [0139.432] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.438] SetErrorMode (uMode=0x1) returned 0x0 [0139.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0b6e49a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x558f8fbf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0139.438] SetErrorMode (uMode=0x0) returned 0x1 [0139.438] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0139.440] SetErrorMode (uMode=0x1) returned 0x0 [0139.440] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.442] SetErrorMode (uMode=0x0) returned 0x1 [0139.442] GetFileType (hFile=0x230) returned 0x1 [0139.442] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.490] SetErrorMode (uMode=0x1) returned 0x0 [0139.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0afbd09, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5598fd0d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0139.490] SetErrorMode (uMode=0x0) returned 0x1 [0139.490] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0139.492] SetErrorMode (uMode=0x1) returned 0x0 [0139.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.493] SetErrorMode (uMode=0x0) returned 0x1 [0139.493] GetFileType (hFile=0x230) returned 0x1 [0139.493] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.493] SetErrorMode (uMode=0x1) returned 0x0 [0139.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0afbd09, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0afbd09, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0afbd09, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.493] SetErrorMode (uMode=0x0) returned 0x1 [0139.494] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Microsoft.AccountsControl_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0139.495] SetErrorMode (uMode=0x1) returned 0x0 [0139.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.497] SetErrorMode (uMode=0x0) returned 0x1 [0139.497] GetFileType (hFile=0x230) returned 0x1 [0139.497] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.498] SetErrorMode (uMode=0x1) returned 0x0 [0139.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a3d13a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0a3d13a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0a3d13a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.498] SetErrorMode (uMode=0x0) returned 0x1 [0139.498] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0139.499] SetErrorMode (uMode=0x1) returned 0x0 [0139.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.500] SetErrorMode (uMode=0x0) returned 0x1 [0139.500] GetFileType (hFile=0x230) returned 0x1 [0139.500] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.502] SetErrorMode (uMode=0x1) returned 0x0 [0139.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a3d13a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x66416e84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5598fd0d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0139.502] SetErrorMode (uMode=0x0) returned 0x1 [0139.502] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0139.503] SetErrorMode (uMode=0x1) returned 0x0 [0139.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.504] SetErrorMode (uMode=0x0) returned 0x1 [0139.505] GetFileType (hFile=0x230) returned 0x1 [0139.505] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.507] SetErrorMode (uMode=0x1) returned 0x0 [0139.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x65f2c0e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x65f2c0e5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x559b603c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0139.507] SetErrorMode (uMode=0x0) returned 0x1 [0139.507] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0139.508] SetErrorMode (uMode=0x1) returned 0x0 [0139.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.510] SetErrorMode (uMode=0x0) returned 0x1 [0139.510] GetFileType (hFile=0x230) returned 0x1 [0139.510] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.510] SetErrorMode (uMode=0x1) returned 0x0 [0139.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x65f2c0e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x65f2c0e5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x65f2c0e5, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.510] SetErrorMode (uMode=0x0) returned 0x1 [0139.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.AccountsControl_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.accountscontrol_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0139.512] SetErrorMode (uMode=0x1) returned 0x0 [0139.512] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.515] SetErrorMode (uMode=0x0) returned 0x1 [0139.515] GetFileType (hFile=0x230) returned 0x1 [0139.515] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.574] SetErrorMode (uMode=0x1) returned 0x0 [0139.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae1cadf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2b5dc71a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x55a4ea6e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0139.574] SetErrorMode (uMode=0x0) returned 0x1 [0139.574] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0139.575] SetErrorMode (uMode=0x1) returned 0x0 [0139.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.576] SetErrorMode (uMode=0x0) returned 0x1 [0139.576] GetFileType (hFile=0x230) returned 0x1 [0139.576] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.618] SetErrorMode (uMode=0x1) returned 0x0 [0139.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2ae690fa, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2ae690fa, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x55ac11a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0139.618] SetErrorMode (uMode=0x0) returned 0x1 [0139.618] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0139.619] SetErrorMode (uMode=0x1) returned 0x0 [0139.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.621] SetErrorMode (uMode=0x0) returned 0x1 [0139.621] GetFileType (hFile=0x230) returned 0x1 [0139.621] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.621] SetErrorMode (uMode=0x1) returned 0x0 [0139.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2ae690fa, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2ae690fa, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2ae690fa, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.621] SetErrorMode (uMode=0x0) returned 0x1 [0139.622] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0139.623] SetErrorMode (uMode=0x1) returned 0x0 [0139.623] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.624] SetErrorMode (uMode=0x0) returned 0x1 [0139.624] GetFileType (hFile=0x230) returned 0x1 [0139.624] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.624] SetErrorMode (uMode=0x1) returned 0x0 [0139.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a78e4ee, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a78e4ee, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2a78e4ee, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.624] SetErrorMode (uMode=0x0) returned 0x1 [0139.624] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0139.626] SetErrorMode (uMode=0x1) returned 0x0 [0139.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.627] SetErrorMode (uMode=0x0) returned 0x1 [0139.627] GetFileType (hFile=0x230) returned 0x1 [0139.627] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.667] SetErrorMode (uMode=0x1) returned 0x0 [0139.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a6f5b3a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a6f5b3a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x55b3393b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0139.667] SetErrorMode (uMode=0x0) returned 0x1 [0139.667] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Appconnector_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.appconnector_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0139.669] SetErrorMode (uMode=0x1) returned 0x0 [0139.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.671] SetErrorMode (uMode=0x0) returned 0x1 [0139.671] GetFileType (hFile=0x230) returned 0x1 [0139.671] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.870] SetErrorMode (uMode=0x1) returned 0x0 [0139.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28af1f1c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28c231d1, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x55d2f044, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0139.870] SetErrorMode (uMode=0x0) returned 0x1 [0139.870] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0139.872] SetErrorMode (uMode=0x1) returned 0x0 [0139.872] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.873] SetErrorMode (uMode=0x0) returned 0x1 [0139.873] GetFileType (hFile=0x230) returned 0x1 [0139.873] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.899] SetErrorMode (uMode=0x1) returned 0x0 [0139.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28b182c2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28b182c2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x55d67bf2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0139.900] SetErrorMode (uMode=0x0) returned 0x1 [0139.900] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0139.901] SetErrorMode (uMode=0x1) returned 0x0 [0139.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.902] SetErrorMode (uMode=0x0) returned 0x1 [0139.902] GetFileType (hFile=0x230) returned 0x1 [0139.902] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.902] SetErrorMode (uMode=0x1) returned 0x0 [0139.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28b182c2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28b182c2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x28b182c2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.903] SetErrorMode (uMode=0x0) returned 0x1 [0139.903] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Microsoft.BingFinance_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\microsoft.bingfinance_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0139.904] SetErrorMode (uMode=0x1) returned 0x0 [0139.904] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.905] SetErrorMode (uMode=0x0) returned 0x1 [0139.905] GetFileType (hFile=0x230) returned 0x1 [0139.905] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0139.905] SetErrorMode (uMode=0x1) returned 0x0 [0139.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2881d214, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2881d214, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2881d214, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0139.905] SetErrorMode (uMode=0x0) returned 0x1 [0139.905] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0139.906] SetErrorMode (uMode=0x1) returned 0x0 [0139.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0139.907] SetErrorMode (uMode=0x0) returned 0x1 [0139.907] GetFileType (hFile=0x230) returned 0x1 [0139.907] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.039] SetErrorMode (uMode=0x1) returned 0x0 [0140.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2881d214, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2881d214, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x55ebf43d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.040] SetErrorMode (uMode=0x0) returned 0x1 [0140.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingFinance_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingfinance_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0140.041] SetErrorMode (uMode=0x1) returned 0x0 [0140.041] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.044] SetErrorMode (uMode=0x0) returned 0x1 [0140.044] GetFileType (hFile=0x230) returned 0x1 [0140.044] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.046] SetErrorMode (uMode=0x1) returned 0x0 [0140.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x272f4412, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x274256b7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x55ebf43d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0140.047] SetErrorMode (uMode=0x0) returned 0x1 [0140.047] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0140.048] SetErrorMode (uMode=0x1) returned 0x0 [0140.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.049] SetErrorMode (uMode=0x0) returned 0x1 [0140.049] GetFileType (hFile=0x230) returned 0x1 [0140.049] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.132] SetErrorMode (uMode=0x1) returned 0x0 [0140.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2731a795, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2731a795, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x55fa41d6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0140.133] SetErrorMode (uMode=0x0) returned 0x1 [0140.133] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0140.134] SetErrorMode (uMode=0x1) returned 0x0 [0140.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.135] SetErrorMode (uMode=0x0) returned 0x1 [0140.135] GetFileType (hFile=0x230) returned 0x1 [0140.135] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.135] SetErrorMode (uMode=0x1) returned 0x0 [0140.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2731a795, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2731a795, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2731a795, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.136] SetErrorMode (uMode=0x0) returned 0x1 [0140.136] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Microsoft.BingNews_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\microsoft.bingnews_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0140.137] SetErrorMode (uMode=0x1) returned 0x0 [0140.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.137] SetErrorMode (uMode=0x0) returned 0x1 [0140.137] GetFileType (hFile=0x230) returned 0x1 [0140.137] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.138] SetErrorMode (uMode=0x1) returned 0x0 [0140.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2701f6af, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2701f6af, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x2701f6af, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.138] SetErrorMode (uMode=0x0) returned 0x1 [0140.138] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0140.139] SetErrorMode (uMode=0x1) returned 0x0 [0140.139] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.139] SetErrorMode (uMode=0x0) returned 0x1 [0140.139] GetFileType (hFile=0x230) returned 0x1 [0140.139] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.178] SetErrorMode (uMode=0x1) returned 0x0 [0140.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2701f6af, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2701f6af, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x56016974, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.178] SetErrorMode (uMode=0x0) returned 0x1 [0140.178] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingNews_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingnews_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0140.180] SetErrorMode (uMode=0x1) returned 0x0 [0140.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.184] SetErrorMode (uMode=0x0) returned 0x1 [0140.184] GetFileType (hFile=0x230) returned 0x1 [0140.184] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.186] SetErrorMode (uMode=0x1) returned 0x0 [0140.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2449c762, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2474b13b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x56016974, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0140.186] SetErrorMode (uMode=0x0) returned 0x1 [0140.186] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0140.187] SetErrorMode (uMode=0x1) returned 0x0 [0140.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.189] SetErrorMode (uMode=0x0) returned 0x1 [0140.189] GetFileType (hFile=0x230) returned 0x1 [0140.189] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.191] SetErrorMode (uMode=0x1) returned 0x0 [0140.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x244e8c04, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x244e8c04, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5603caf7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0140.191] SetErrorMode (uMode=0x0) returned 0x1 [0140.191] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0140.192] SetErrorMode (uMode=0x1) returned 0x0 [0140.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.193] SetErrorMode (uMode=0x0) returned 0x1 [0140.193] GetFileType (hFile=0x230) returned 0x1 [0140.193] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.194] SetErrorMode (uMode=0x1) returned 0x0 [0140.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x244e8c04, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x244e8c04, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x244e8c04, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.194] SetErrorMode (uMode=0x0) returned 0x1 [0140.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Microsoft.BingSports_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\microsoft.bingsports_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0140.195] SetErrorMode (uMode=0x1) returned 0x0 [0140.195] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.196] SetErrorMode (uMode=0x0) returned 0x1 [0140.196] GetFileType (hFile=0x230) returned 0x1 [0140.196] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.196] SetErrorMode (uMode=0x1) returned 0x0 [0140.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23b13012, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x23b13012, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x23b13012, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.197] SetErrorMode (uMode=0x0) returned 0x1 [0140.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0140.198] SetErrorMode (uMode=0x1) returned 0x0 [0140.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.198] SetErrorMode (uMode=0x0) returned 0x1 [0140.198] GetFileType (hFile=0x230) returned 0x1 [0140.198] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.200] SetErrorMode (uMode=0x1) returned 0x0 [0140.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23a2e212, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x23a2e212, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5603caf7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.200] SetErrorMode (uMode=0x0) returned 0x1 [0140.200] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingSports_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingsports_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0140.201] SetErrorMode (uMode=0x1) returned 0x0 [0140.201] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.204] SetErrorMode (uMode=0x0) returned 0x1 [0140.204] GetFileType (hFile=0x230) returned 0x1 [0140.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.275] SetErrorMode (uMode=0x1) returned 0x0 [0140.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x216dd51b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2180e81d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x560fb5e0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0140.275] SetErrorMode (uMode=0x0) returned 0x1 [0140.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0140.277] SetErrorMode (uMode=0x1) returned 0x0 [0140.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.278] SetErrorMode (uMode=0x0) returned 0x1 [0140.278] GetFileType (hFile=0x230) returned 0x1 [0140.278] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.332] SetErrorMode (uMode=0x1) returned 0x0 [0140.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x217298be, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x217298be, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x56197460, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1 [0140.333] SetErrorMode (uMode=0x0) returned 0x1 [0140.333] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0140.335] SetErrorMode (uMode=0x1) returned 0x0 [0140.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.336] SetErrorMode (uMode=0x0) returned 0x1 [0140.336] GetFileType (hFile=0x230) returned 0x1 [0140.336] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.336] SetErrorMode (uMode=0x1) returned 0x0 [0140.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x217298be, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x217298be, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x217298be, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.337] SetErrorMode (uMode=0x0) returned 0x1 [0140.337] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Microsoft.BingWeather_4.3.193.0_x86__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\microsoft.bingweather_4.3.193.0_x86__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0140.338] SetErrorMode (uMode=0x1) returned 0x0 [0140.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.340] SetErrorMode (uMode=0x0) returned 0x1 [0140.340] GetFileType (hFile=0x230) returned 0x1 [0140.340] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.340] SetErrorMode (uMode=0x1) returned 0x0 [0140.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e12897, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x20e12897, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x20e12897, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.341] SetErrorMode (uMode=0x0) returned 0x1 [0140.341] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0140.342] SetErrorMode (uMode=0x1) returned 0x0 [0140.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.344] SetErrorMode (uMode=0x0) returned 0x1 [0140.344] GetFileType (hFile=0x230) returned 0x1 [0140.344] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.361] SetErrorMode (uMode=0x1) returned 0x0 [0140.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20e12897, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x20e12897, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x561ba2d8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.361] SetErrorMode (uMode=0x0) returned 0x1 [0140.361] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BingWeather_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bingweather_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0140.363] SetErrorMode (uMode=0x1) returned 0x0 [0140.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.368] SetErrorMode (uMode=0x0) returned 0x1 [0140.368] GetFileType (hFile=0x230) returned 0x1 [0140.368] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.472] SetErrorMode (uMode=0x1) returned 0x0 [0140.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb10591cd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x562eb5af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.472] SetErrorMode (uMode=0x0) returned 0x1 [0140.472] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0140.473] SetErrorMode (uMode=0x1) returned 0x0 [0140.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.474] SetErrorMode (uMode=0x0) returned 0x1 [0140.474] GetFileType (hFile=0x230) returned 0x1 [0140.474] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.479] SetErrorMode (uMode=0x1) returned 0x0 [0140.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0fc086a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x562eb5af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.479] SetErrorMode (uMode=0x0) returned 0x1 [0140.480] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0140.481] SetErrorMode (uMode=0x1) returned 0x0 [0140.481] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.482] SetErrorMode (uMode=0x0) returned 0x1 [0140.482] GetFileType (hFile=0x230) returned 0x1 [0140.482] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.482] SetErrorMode (uMode=0x1) returned 0x0 [0140.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb0fc086a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0fc086a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0fc086a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.482] SetErrorMode (uMode=0x0) returned 0x1 [0140.482] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Microsoft.BioEnrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\microsoft.bioenrollment_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0140.483] SetErrorMode (uMode=0x1) returned 0x0 [0140.483] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.485] SetErrorMode (uMode=0x0) returned 0x1 [0140.485] GetFileType (hFile=0x230) returned 0x1 [0140.485] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.485] SetErrorMode (uMode=0x1) returned 0x0 [0140.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f4e15f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb0f4e15f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb0f4e15f, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.485] SetErrorMode (uMode=0x0) returned 0x1 [0140.485] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0140.487] SetErrorMode (uMode=0x1) returned 0x0 [0140.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.487] SetErrorMode (uMode=0x0) returned 0x1 [0140.487] GetFileType (hFile=0x230) returned 0x1 [0140.488] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.489] SetErrorMode (uMode=0x1) returned 0x0 [0140.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0f27f06, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6745513f, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x56311884, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.489] SetErrorMode (uMode=0x0) returned 0x1 [0140.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0140.490] SetErrorMode (uMode=0x1) returned 0x0 [0140.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.492] SetErrorMode (uMode=0x0) returned 0x1 [0140.492] GetFileType (hFile=0x230) returned 0x1 [0140.492] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.518] SetErrorMode (uMode=0x1) returned 0x0 [0140.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5635ee68, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.518] SetErrorMode (uMode=0x0) returned 0x1 [0140.519] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0140.520] SetErrorMode (uMode=0x1) returned 0x0 [0140.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.521] SetErrorMode (uMode=0x0) returned 0x1 [0140.521] GetFileType (hFile=0x230) returned 0x1 [0140.521] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.521] SetErrorMode (uMode=0x1) returned 0x0 [0140.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x66a7f3a6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x66a7f3a6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x66a7f3a6, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.521] SetErrorMode (uMode=0x0) returned 0x1 [0140.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.BioEnrollment_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.bioenrollment_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0140.522] SetErrorMode (uMode=0x1) returned 0x0 [0140.522] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.525] SetErrorMode (uMode=0x0) returned 0x1 [0140.525] GetFileType (hFile=0x230) returned 0x1 [0140.525] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.527] SetErrorMode (uMode=0x1) returned 0x0 [0140.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f3d8b79, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f4e3c25, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x56373a89, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0140.527] SetErrorMode (uMode=0x0) returned 0x1 [0140.527] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0140.528] SetErrorMode (uMode=0x1) returned 0x0 [0140.528] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.529] SetErrorMode (uMode=0x0) returned 0x1 [0140.529] GetFileType (hFile=0x230) returned 0x1 [0140.529] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.572] SetErrorMode (uMode=0x1) returned 0x0 [0140.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1f3fede1, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f3fede1, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x563d317d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0140.572] SetErrorMode (uMode=0x0) returned 0x1 [0140.572] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0140.582] SetErrorMode (uMode=0x1) returned 0x0 [0140.582] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.583] SetErrorMode (uMode=0x0) returned 0x1 [0140.583] GetFileType (hFile=0x230) returned 0x1 [0140.583] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.583] SetErrorMode (uMode=0x1) returned 0x0 [0140.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1f424ecb, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f424ecb, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1f424ecb, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.583] SetErrorMode (uMode=0x0) returned 0x1 [0140.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Microsoft.Getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0140.584] SetErrorMode (uMode=0x1) returned 0x0 [0140.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.585] SetErrorMode (uMode=0x0) returned 0x1 [0140.585] GetFileType (hFile=0x230) returned 0x1 [0140.585] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.585] SetErrorMode (uMode=0x1) returned 0x0 [0140.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f25b285, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f25b285, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1f25b285, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.586] SetErrorMode (uMode=0x0) returned 0x1 [0140.586] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0140.587] SetErrorMode (uMode=0x1) returned 0x0 [0140.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.587] SetErrorMode (uMode=0x0) returned 0x1 [0140.587] GetFileType (hFile=0x230) returned 0x1 [0140.587] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.600] SetErrorMode (uMode=0x1) returned 0x0 [0140.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f235019, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f235019, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x56422f16, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.601] SetErrorMode (uMode=0x0) returned 0x1 [0140.601] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Getstarted_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.getstarted_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0140.602] SetErrorMode (uMode=0x1) returned 0x0 [0140.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.606] SetErrorMode (uMode=0x0) returned 0x1 [0140.606] GetFileType (hFile=0x230) returned 0x1 [0140.606] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.638] SetErrorMode (uMode=0x1) returned 0x0 [0140.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb15b66a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x56463352, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0140.638] SetErrorMode (uMode=0x0) returned 0x1 [0140.638] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0140.640] SetErrorMode (uMode=0x1) returned 0x0 [0140.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.641] SetErrorMode (uMode=0x0) returned 0x1 [0140.641] GetFileType (hFile=0x230) returned 0x1 [0140.641] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.676] SetErrorMode (uMode=0x1) returned 0x0 [0140.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1543f93, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x564df001, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0140.676] SetErrorMode (uMode=0x0) returned 0x1 [0140.676] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0140.679] SetErrorMode (uMode=0x1) returned 0x0 [0140.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.681] SetErrorMode (uMode=0x0) returned 0x1 [0140.681] GetFileType (hFile=0x230) returned 0x1 [0140.681] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.682] SetErrorMode (uMode=0x1) returned 0x0 [0140.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1543f93, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1543f93, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1543f93, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.682] SetErrorMode (uMode=0x0) returned 0x1 [0140.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Microsoft.LockApp_10.0.10240.16384_neutral__cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0140.684] SetErrorMode (uMode=0x1) returned 0x0 [0140.685] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.692] SetErrorMode (uMode=0x0) returned 0x1 [0140.692] GetFileType (hFile=0x230) returned 0x1 [0140.692] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.693] SetErrorMode (uMode=0x1) returned 0x0 [0140.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14ab620, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb14ab620, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb14ab620, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.694] SetErrorMode (uMode=0x0) returned 0x1 [0140.694] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0140.696] SetErrorMode (uMode=0x1) returned 0x0 [0140.696] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.697] SetErrorMode (uMode=0x0) returned 0x1 [0140.698] GetFileType (hFile=0x230) returned 0x1 [0140.698] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.699] SetErrorMode (uMode=0x1) returned 0x0 [0140.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb14ab620, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x68eb5044, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5650e586, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.700] SetErrorMode (uMode=0x0) returned 0x1 [0140.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0140.701] SetErrorMode (uMode=0x1) returned 0x0 [0140.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.702] SetErrorMode (uMode=0x0) returned 0x1 [0140.702] GetFileType (hFile=0x230) returned 0x1 [0140.702] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.749] SetErrorMode (uMode=0x1) returned 0x0 [0140.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x682ef5db, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x682ef5db, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x56580fe1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0140.749] SetErrorMode (uMode=0x0) returned 0x1 [0140.750] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0140.751] SetErrorMode (uMode=0x1) returned 0x0 [0140.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.752] SetErrorMode (uMode=0x0) returned 0x1 [0140.752] GetFileType (hFile=0x230) returned 0x1 [0140.752] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.753] SetErrorMode (uMode=0x1) returned 0x0 [0140.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x684208ac, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x684208ac, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x684208ac, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.753] SetErrorMode (uMode=0x0) returned 0x1 [0140.753] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.LockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.lockapp_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0140.756] SetErrorMode (uMode=0x1) returned 0x0 [0140.756] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.759] SetErrorMode (uMode=0x0) returned 0x1 [0140.759] GetFileType (hFile=0x230) returned 0x1 [0140.759] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.785] SetErrorMode (uMode=0x1) returned 0x0 [0140.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9b6825, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9b6825, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x565cdf21, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0140.786] SetErrorMode (uMode=0x0) returned 0x1 [0140.786] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0140.787] SetErrorMode (uMode=0x1) returned 0x0 [0140.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.789] SetErrorMode (uMode=0x0) returned 0x1 [0140.789] GetFileType (hFile=0x230) returned 0x1 [0140.789] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.789] SetErrorMode (uMode=0x1) returned 0x0 [0140.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.790] SetErrorMode (uMode=0x0) returned 0x1 [0140.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0140.791] SetErrorMode (uMode=0x1) returned 0x0 [0140.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.792] SetErrorMode (uMode=0x0) returned 0x1 [0140.792] GetFileType (hFile=0x230) returned 0x1 [0140.792] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.793] SetErrorMode (uMode=0x1) returned 0x0 [0140.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc94daff, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc94daff, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x565f40e0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0140.793] SetErrorMode (uMode=0x0) returned 0x1 [0140.794] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6.partially.cryptonar")) returned 1 [0140.829] SetErrorMode (uMode=0x1) returned 0x0 [0140.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.831] SetErrorMode (uMode=0x0) returned 0x1 [0140.831] GetFileType (hFile=0x230) returned 0x1 [0140.831] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.831] SetErrorMode (uMode=0x1) returned 0x0 [0140.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0140.831] SetErrorMode (uMode=0x0) returned 0x1 [0140.831] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0140.832] SetErrorMode (uMode=0x1) returned 0x0 [0140.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.833] SetErrorMode (uMode=0x0) returned 0x1 [0140.833] GetFileType (hFile=0x230) returned 0x1 [0140.833] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.834] SetErrorMode (uMode=0x1) returned 0x0 [0140.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x973638f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x973638f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5664473f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0140.834] SetErrorMode (uMode=0x0) returned 0x1 [0140.834] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11.partially.cryptonar")) returned 1 [0140.837] SetErrorMode (uMode=0x1) returned 0x0 [0140.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.838] SetErrorMode (uMode=0x0) returned 0x1 [0140.838] GetFileType (hFile=0x230) returned 0x1 [0140.838] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.840] SetErrorMode (uMode=0x1) returned 0x0 [0140.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa42cfdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa42cfdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56665c49, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0140.840] SetErrorMode (uMode=0x0) returned 0x1 [0140.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d.partially.cryptonar")) returned 1 [0140.843] SetErrorMode (uMode=0x1) returned 0x0 [0140.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.845] SetErrorMode (uMode=0x0) returned 0x1 [0140.845] GetFileType (hFile=0x230) returned 0x1 [0140.845] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.846] SetErrorMode (uMode=0x1) returned 0x0 [0140.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x99261c6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x99261c6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56665c49, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0140.846] SetErrorMode (uMode=0x0) returned 0x1 [0140.846] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b.partially.cryptonar")) returned 1 [0140.848] SetErrorMode (uMode=0x1) returned 0x0 [0140.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.849] SetErrorMode (uMode=0x0) returned 0x1 [0140.849] GetFileType (hFile=0x230) returned 0x1 [0140.849] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.879] SetErrorMode (uMode=0x1) returned 0x0 [0140.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x96514c9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x96514c9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x566b3dc1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x561)) returned 1 [0140.879] SetErrorMode (uMode=0x0) returned 0x1 [0140.879] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62.partially.cryptonar")) returned 1 [0140.881] SetErrorMode (uMode=0x1) returned 0x0 [0140.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.882] SetErrorMode (uMode=0x0) returned 0x1 [0140.882] GetFileType (hFile=0x230) returned 0x1 [0140.882] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.883] SetErrorMode (uMode=0x1) returned 0x0 [0140.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf69b48, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcf69b48, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x566b3dc1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0140.884] SetErrorMode (uMode=0x0) returned 0x1 [0140.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232.partially.cryptonar")) returned 1 [0140.888] SetErrorMode (uMode=0x1) returned 0x0 [0140.889] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.890] SetErrorMode (uMode=0x0) returned 0x1 [0140.890] GetFileType (hFile=0x230) returned 0x1 [0140.890] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0140.891] SetErrorMode (uMode=0x1) returned 0x0 [0140.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc999f69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc999f69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x566dbe01, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0140.891] SetErrorMode (uMode=0x0) returned 0x1 [0140.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95.partially.cryptonar")) returned 1 [0140.894] SetErrorMode (uMode=0x1) returned 0x0 [0140.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0140.895] SetErrorMode (uMode=0x0) returned 0x1 [0140.895] GetFileType (hFile=0x230) returned 0x1 [0140.895] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.139] SetErrorMode (uMode=0x1) returned 0x0 [0141.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdd02cf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd02cf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5693ab4a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0141.140] SetErrorMode (uMode=0x0) returned 0x1 [0141.140] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8.partially.cryptonar")) returned 1 [0141.141] SetErrorMode (uMode=0x1) returned 0x0 [0141.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.143] SetErrorMode (uMode=0x0) returned 0x1 [0141.143] GetFileType (hFile=0x230) returned 0x1 [0141.143] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.146] SetErrorMode (uMode=0x1) returned 0x0 [0141.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa9b553, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa9b553, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5693ab4a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0141.146] SetErrorMode (uMode=0x0) returned 0x1 [0141.147] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929.partially.cryptonar")) returned 1 [0141.149] SetErrorMode (uMode=0x1) returned 0x0 [0141.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.150] SetErrorMode (uMode=0x0) returned 0x1 [0141.150] GetFileType (hFile=0x230) returned 0x1 [0141.150] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.201] SetErrorMode (uMode=0x1) returned 0x0 [0141.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8f33454, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8f33454, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x569d34b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0141.202] SetErrorMode (uMode=0x0) returned 0x1 [0141.202] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873.partially.cryptonar")) returned 1 [0141.204] SetErrorMode (uMode=0x1) returned 0x0 [0141.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.206] SetErrorMode (uMode=0x0) returned 0x1 [0141.206] GetFileType (hFile=0x230) returned 0x1 [0141.206] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.231] SetErrorMode (uMode=0x1) returned 0x0 [0141.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x10f141d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10f141d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56a1f967, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0141.231] SetErrorMode (uMode=0x0) returned 0x1 [0141.231] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf.partially.cryptonar")) returned 1 [0141.233] SetErrorMode (uMode=0x1) returned 0x0 [0141.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.235] SetErrorMode (uMode=0x0) returned 0x1 [0141.235] GetFileType (hFile=0x230) returned 0x1 [0141.235] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.254] SetErrorMode (uMode=0x1) returned 0x0 [0141.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x91ff119, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x91ff119, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56a4cce4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1 [0141.254] SetErrorMode (uMode=0x0) returned 0x1 [0141.254] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf.partially.cryptonar")) returned 1 [0141.256] SetErrorMode (uMode=0x1) returned 0x0 [0141.256] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.258] SetErrorMode (uMode=0x0) returned 0x1 [0141.258] GetFileType (hFile=0x230) returned 0x1 [0141.258] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.272] SetErrorMode (uMode=0x1) returned 0x0 [0141.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1f0ec25, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1f0ec25, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56a6f771, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1 [0141.272] SetErrorMode (uMode=0x0) returned 0x1 [0141.272] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de.partially.cryptonar")) returned 1 [0141.274] SetErrorMode (uMode=0x1) returned 0x0 [0141.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.275] SetErrorMode (uMode=0x0) returned 0x1 [0141.275] GetFileType (hFile=0x230) returned 0x1 [0141.275] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.276] SetErrorMode (uMode=0x1) returned 0x0 [0141.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbcef5c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbcef5c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56a6f771, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0141.277] SetErrorMode (uMode=0x0) returned 0x1 [0141.277] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8.partially.cryptonar")) returned 1 [0141.282] SetErrorMode (uMode=0x1) returned 0x0 [0141.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.284] SetErrorMode (uMode=0x0) returned 0x1 [0141.284] GetFileType (hFile=0x230) returned 0x1 [0141.284] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.285] SetErrorMode (uMode=0x1) returned 0x0 [0141.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbca3121, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbca3121, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56a9d489, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0141.285] SetErrorMode (uMode=0x0) returned 0x1 [0141.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab.partially.cryptonar")) returned 1 [0141.288] SetErrorMode (uMode=0x1) returned 0x0 [0141.288] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.289] SetErrorMode (uMode=0x0) returned 0x1 [0141.290] GetFileType (hFile=0x230) returned 0x1 [0141.290] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.291] SetErrorMode (uMode=0x1) returned 0x0 [0141.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9c4747d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9c4747d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56ab827a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0141.291] SetErrorMode (uMode=0x0) returned 0x1 [0141.291] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619.partially.cryptonar")) returned 1 [0141.293] SetErrorMode (uMode=0x1) returned 0x0 [0141.293] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.294] SetErrorMode (uMode=0x0) returned 0x1 [0141.295] GetFileType (hFile=0x230) returned 0x1 [0141.295] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.295] SetErrorMode (uMode=0x1) returned 0x0 [0141.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xac17a3, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.295] SetErrorMode (uMode=0x0) returned 0x1 [0141.295] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0141.296] SetErrorMode (uMode=0x1) returned 0x0 [0141.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.299] SetErrorMode (uMode=0x0) returned 0x1 [0141.299] GetFileType (hFile=0x230) returned 0x1 [0141.299] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.300] SetErrorMode (uMode=0x1) returned 0x0 [0141.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9b6825, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9b6825, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56ab827a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0141.300] SetErrorMode (uMode=0x0) returned 0x1 [0141.300] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0141.301] SetErrorMode (uMode=0x1) returned 0x0 [0141.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.302] SetErrorMode (uMode=0x0) returned 0x1 [0141.302] GetFileType (hFile=0x230) returned 0x1 [0141.302] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.303] SetErrorMode (uMode=0x1) returned 0x0 [0141.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56ab827a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0141.303] SetErrorMode (uMode=0x0) returned 0x1 [0141.304] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0141.305] SetErrorMode (uMode=0x1) returned 0x0 [0141.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.306] SetErrorMode (uMode=0x0) returned 0x1 [0141.306] GetFileType (hFile=0x230) returned 0x1 [0141.306] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.307] SetErrorMode (uMode=0x1) returned 0x0 [0141.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc94daff, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc94daff, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56ade4d6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1 [0141.307] SetErrorMode (uMode=0x0) returned 0x1 [0141.307] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6.partially.cryptonar")) returned 1 [0141.308] SetErrorMode (uMode=0x1) returned 0x0 [0141.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.309] SetErrorMode (uMode=0x0) returned 0x1 [0141.309] GetFileType (hFile=0x230) returned 0x1 [0141.309] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.310] SetErrorMode (uMode=0x1) returned 0x0 [0141.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56ade4d6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0141.311] SetErrorMode (uMode=0x0) returned 0x1 [0141.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0141.312] SetErrorMode (uMode=0x1) returned 0x0 [0141.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.313] SetErrorMode (uMode=0x0) returned 0x1 [0141.313] GetFileType (hFile=0x230) returned 0x1 [0141.313] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.314] SetErrorMode (uMode=0x1) returned 0x0 [0141.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x973638f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x973638f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56ade4d6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0141.314] SetErrorMode (uMode=0x0) returned 0x1 [0141.314] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_15B894361B8229C12E6CD4370E03BA11.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_15b894361b8229c12e6cd4370e03ba11.partially.cryptonar")) returned 1 [0141.315] SetErrorMode (uMode=0x1) returned 0x0 [0141.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.316] SetErrorMode (uMode=0x0) returned 0x1 [0141.316] GetFileType (hFile=0x230) returned 0x1 [0141.316] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.318] SetErrorMode (uMode=0x1) returned 0x0 [0141.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa42cfdd, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa42cfdd, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56ade4d6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0141.318] SetErrorMode (uMode=0x0) returned 0x1 [0141.318] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_71FE2912451B2B453DAF1EB6A0D6DE9D.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_71fe2912451b2b453daf1eb6a0d6de9d.partially.cryptonar")) returned 1 [0141.321] SetErrorMode (uMode=0x1) returned 0x0 [0141.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.322] SetErrorMode (uMode=0x0) returned 0x1 [0141.322] GetFileType (hFile=0x230) returned 0x1 [0141.322] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.323] SetErrorMode (uMode=0x1) returned 0x0 [0141.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x99261c6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x99261c6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b04ac8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1 [0141.323] SetErrorMode (uMode=0x0) returned 0x1 [0141.323] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_AEB6328053EC598E3A1DBA7D9B00C40B.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_aeb6328053ec598e3a1dba7d9b00c40b.partially.cryptonar")) returned 1 [0141.325] SetErrorMode (uMode=0x1) returned 0x0 [0141.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.326] SetErrorMode (uMode=0x0) returned 0x1 [0141.326] GetFileType (hFile=0x230) returned 0x1 [0141.326] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.327] SetErrorMode (uMode=0x1) returned 0x0 [0141.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x96514c9, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x96514c9, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b04ac8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x164)) returned 1 [0141.327] SetErrorMode (uMode=0x0) returned 0x1 [0141.327] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_6B5C8B321CA02275A82E95FA81D6DE62.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_6b5c8b321ca02275a82e95fa81d6de62.partially.cryptonar")) returned 1 [0141.329] SetErrorMode (uMode=0x1) returned 0x0 [0141.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.330] SetErrorMode (uMode=0x0) returned 0x1 [0141.330] GetFileType (hFile=0x230) returned 0x1 [0141.330] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.330] SetErrorMode (uMode=0x1) returned 0x0 [0141.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf69b48, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcf69b48, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b04ac8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0141.331] SetErrorMode (uMode=0x0) returned 0x1 [0141.331] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_B6480DD2AFAFCC504C59FFB35E8A6232.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_b6480dd2afafcc504c59ffb35e8a6232.partially.cryptonar")) returned 1 [0141.332] SetErrorMode (uMode=0x1) returned 0x0 [0141.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.332] SetErrorMode (uMode=0x0) returned 0x1 [0141.332] GetFileType (hFile=0x230) returned 0x1 [0141.332] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.333] SetErrorMode (uMode=0x1) returned 0x0 [0141.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc999f69, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xc999f69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b04ac8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1aa)) returned 1 [0141.333] SetErrorMode (uMode=0x0) returned 0x1 [0141.333] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_DCA82AA47C444DFAE483555D3A592A95.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_dca82aa47c444dfae483555d3a592a95.partially.cryptonar")) returned 1 [0141.334] SetErrorMode (uMode=0x1) returned 0x0 [0141.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.335] SetErrorMode (uMode=0x0) returned 0x1 [0141.335] GetFileType (hFile=0x230) returned 0x1 [0141.335] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.336] SetErrorMode (uMode=0x1) returned 0x0 [0141.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdd02cf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdd02cf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b2a8ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e6)) returned 1 [0141.336] SetErrorMode (uMode=0x0) returned 0x1 [0141.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_F85B8279FA54A31CEEC2563F5A8F73E8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_f85b8279fa54a31ceec2563f5a8f73e8.partially.cryptonar")) returned 1 [0141.351] SetErrorMode (uMode=0x1) returned 0x0 [0141.351] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.352] SetErrorMode (uMode=0x0) returned 0x1 [0141.353] GetFileType (hFile=0x230) returned 0x1 [0141.353] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.353] SetErrorMode (uMode=0x1) returned 0x0 [0141.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa7541c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa7541c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b50a53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ee)) returned 1 [0141.354] SetErrorMode (uMode=0x0) returned 0x1 [0141.354] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_FD02B13068D47EB94BCC5D8B201E9929.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_fd02b13068d47eb94bcc5d8b201e9929.partially.cryptonar")) returned 1 [0141.356] SetErrorMode (uMode=0x1) returned 0x0 [0141.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.357] SetErrorMode (uMode=0x0) returned 0x1 [0141.357] GetFileType (hFile=0x230) returned 0x1 [0141.357] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.358] SetErrorMode (uMode=0x1) returned 0x0 [0141.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8f33454, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8f33454, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b50a53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0141.358] SetErrorMode (uMode=0x0) returned 0x1 [0141.358] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873.partially.cryptonar")) returned 1 [0141.359] SetErrorMode (uMode=0x1) returned 0x0 [0141.360] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.360] SetErrorMode (uMode=0x0) returned 0x1 [0141.360] GetFileType (hFile=0x230) returned 0x1 [0141.360] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.361] SetErrorMode (uMode=0x1) returned 0x0 [0141.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x10f141d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x10f141d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b50a53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0141.361] SetErrorMode (uMode=0x0) returned 0x1 [0141.361] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf.partially.cryptonar")) returned 1 [0141.363] SetErrorMode (uMode=0x1) returned 0x0 [0141.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.363] SetErrorMode (uMode=0x0) returned 0x1 [0141.363] GetFileType (hFile=0x230) returned 0x1 [0141.363] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.364] SetErrorMode (uMode=0x1) returned 0x0 [0141.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x91ff119, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x91ff119, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b50a53, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1 [0141.364] SetErrorMode (uMode=0x0) returned 0x1 [0141.364] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_835A2FD7EE5F1F37B7872C78D42A88BF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_835a2fd7ee5f1f37b7872c78d42a88bf.partially.cryptonar")) returned 1 [0141.366] SetErrorMode (uMode=0x1) returned 0x0 [0141.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.366] SetErrorMode (uMode=0x0) returned 0x1 [0141.366] GetFileType (hFile=0x230) returned 0x1 [0141.367] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.368] SetErrorMode (uMode=0x1) returned 0x0 [0141.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x1f0d895, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1f0d895, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b76ec0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x198)) returned 1 [0141.368] SetErrorMode (uMode=0x0) returned 0x1 [0141.368] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de.partially.cryptonar")) returned 1 [0141.369] SetErrorMode (uMode=0x1) returned 0x0 [0141.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.370] SetErrorMode (uMode=0x0) returned 0x1 [0141.370] GetFileType (hFile=0x230) returned 0x1 [0141.370] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.371] SetErrorMode (uMode=0x1) returned 0x0 [0141.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbcef5c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbcef5c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b76ec0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1b6)) returned 1 [0141.371] SetErrorMode (uMode=0x0) returned 0x1 [0141.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\DCE3BDBF5BDD86E2AB5B471CB90709B4_D787EFA352C03E71EA5F8B6B11B398B8.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\dce3bdbf5bdd86e2ab5b471cb90709b4_d787efa352c03e71ea5f8b6b11b398b8.partially.cryptonar")) returned 1 [0141.372] SetErrorMode (uMode=0x1) returned 0x0 [0141.372] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.373] SetErrorMode (uMode=0x0) returned 0x1 [0141.373] GetFileType (hFile=0x230) returned 0x1 [0141.373] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.374] SetErrorMode (uMode=0x1) returned 0x0 [0141.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbca3121, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbca3121, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b76ec0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1aa)) returned 1 [0141.375] SetErrorMode (uMode=0x0) returned 0x1 [0141.375] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C20E0DA2D0F89FE526E1490F4A2EE5AB.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c20e0da2d0f89fe526e1490f4a2ee5ab.partially.cryptonar")) returned 1 [0141.376] SetErrorMode (uMode=0x1) returned 0x0 [0141.376] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.377] SetErrorMode (uMode=0x0) returned 0x1 [0141.377] GetFileType (hFile=0x230) returned 0x1 [0141.377] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.378] SetErrorMode (uMode=0x1) returned 0x0 [0141.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x9c4747d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x9c4747d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b76ec0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0141.378] SetErrorMode (uMode=0x0) returned 0x1 [0141.378] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619.partially.cryptonar")) returned 1 [0141.380] SetErrorMode (uMode=0x1) returned 0x0 [0141.380] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.381] SetErrorMode (uMode=0x0) returned 0x1 [0141.381] GetFileType (hFile=0x230) returned 0x1 [0141.381] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.382] SetErrorMode (uMode=0x1) returned 0x0 [0141.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xac17a3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xac17a3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56b76ec0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0141.382] SetErrorMode (uMode=0x0) returned 0x1 [0141.382] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0141.383] SetErrorMode (uMode=0x1) returned 0x0 [0141.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.384] SetErrorMode (uMode=0x0) returned 0x1 [0141.384] GetFileType (hFile=0x230) returned 0x1 [0141.384] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.454] SetErrorMode (uMode=0x1) returned 0x0 [0141.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff73f6cb, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff73f6cb, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x56c35a5c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0141.454] SetErrorMode (uMode=0x0) returned 0x1 [0141.454] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\4275773285.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\Microsoft\\Windows\\1605653898\\4275773285.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoft\\windows\\1605653898\\4275773285.pri.partially.cryptonar")) returned 1 [0141.455] SetErrorMode (uMode=0x1) returned 0x0 [0141.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.457] SetErrorMode (uMode=0x0) returned 0x1 [0141.457] GetFileType (hFile=0x230) returned 0x1 [0141.457] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.484] SetErrorMode (uMode=0x1) returned 0x0 [0141.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eaf96, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x81eaf96, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56c81eb0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0141.484] SetErrorMode (uMode=0x0) returned 0x1 [0141.484] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\MSIMGSIZ.DAT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\msimgsiz.dat.partially.cryptonar")) returned 1 [0141.486] SetErrorMode (uMode=0x1) returned 0x0 [0141.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.487] SetErrorMode (uMode=0x0) returned 0x1 [0141.487] GetFileType (hFile=0x230) returned 0x1 [0141.487] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.487] SetErrorMode (uMode=0x1) returned 0x0 [0141.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xffaa1b33, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffaa1b33, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffaa1b33, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.487] SetErrorMode (uMode=0x0) returned 0x1 [0141.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cache\\container.dat.partially.cryptonar")) returned 1 [0141.488] SetErrorMode (uMode=0x1) returned 0x0 [0141.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.491] SetErrorMode (uMode=0x0) returned 0x1 [0141.491] GetFileType (hFile=0x230) returned 0x1 [0141.491] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6f [0141.493] SetErrorMode (uMode=0x1) returned 0x0 [0141.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92bde19, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x92bde19, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56ca804f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0141.493] SetErrorMode (uMode=0x0) returned 0x1 [0141.493] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\1ZJA02JO.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\1zja02jo.txt.fully.cryptonar")) returned 1 [0141.494] SetErrorMode (uMode=0x1) returned 0x0 [0141.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.495] SetErrorMode (uMode=0x0) returned 0x1 [0141.495] GetFileType (hFile=0x230) returned 0x1 [0141.495] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x26c [0141.496] SetErrorMode (uMode=0x1) returned 0x0 [0141.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x92bde19, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x92bde19, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56ca804f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x26c)) returned 1 [0141.496] SetErrorMode (uMode=0x0) returned 0x1 [0141.496] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\268TPJIA.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\268tpjia.txt.fully.cryptonar")) returned 1 [0141.503] SetErrorMode (uMode=0x1) returned 0x0 [0141.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.504] SetErrorMode (uMode=0x0) returned 0x1 [0141.504] GetFileType (hFile=0x230) returned 0x1 [0141.504] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x4d [0141.505] SetErrorMode (uMode=0x1) returned 0x0 [0141.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x122b55d, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x122b55d, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x56ca804f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d)) returned 1 [0141.506] SetErrorMode (uMode=0x0) returned 0x1 [0141.506] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\6KWA3R8C.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\6kwa3r8c.txt.fully.cryptonar")) returned 1 [0141.507] SetErrorMode (uMode=0x1) returned 0x0 [0141.507] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.508] SetErrorMode (uMode=0x0) returned 0x1 [0141.508] GetFileType (hFile=0x230) returned 0x1 [0141.508] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xd5 [0141.509] SetErrorMode (uMode=0x1) returned 0x0 [0141.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ea008, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x96ea008, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56cce2b2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0141.509] SetErrorMode (uMode=0x0) returned 0x1 [0141.509] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\85DGK2J5.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\85dgk2j5.txt.fully.cryptonar")) returned 1 [0141.511] SetErrorMode (uMode=0x1) returned 0x0 [0141.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.511] SetErrorMode (uMode=0x0) returned 0x1 [0141.512] GetFileType (hFile=0x230) returned 0x1 [0141.512] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.512] SetErrorMode (uMode=0x1) returned 0x0 [0141.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff29f9d2, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff29f9d2, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff29f9d2, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.512] SetErrorMode (uMode=0x0) returned 0x1 [0141.512] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\container.dat.partially.cryptonar")) returned 1 [0141.513] SetErrorMode (uMode=0x1) returned 0x0 [0141.513] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.515] SetErrorMode (uMode=0x0) returned 0x1 [0141.515] GetFileType (hFile=0x230) returned 0x1 [0141.515] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x1a0 [0141.517] SetErrorMode (uMode=0x1) returned 0x0 [0141.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8a1da24, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8a1da24, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56cce2b2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0141.517] SetErrorMode (uMode=0x0) returned 0x1 [0141.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\FPNDV7T3.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\fpndv7t3.txt.fully.cryptonar")) returned 1 [0141.518] SetErrorMode (uMode=0x1) returned 0x0 [0141.518] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.520] SetErrorMode (uMode=0x0) returned 0x1 [0141.520] GetFileType (hFile=0x230) returned 0x1 [0141.520] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x181 [0141.521] SetErrorMode (uMode=0x1) returned 0x0 [0141.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa5988c5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa5988c5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56cce2b2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x181)) returned 1 [0141.521] SetErrorMode (uMode=0x0) returned 0x1 [0141.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\J9KFLZDX.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\j9kflzdx.txt.fully.cryptonar")) returned 1 [0141.523] SetErrorMode (uMode=0x1) returned 0x0 [0141.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.524] SetErrorMode (uMode=0x0) returned 0x1 [0141.524] GetFileType (hFile=0x230) returned 0x1 [0141.524] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x58 [0141.525] SetErrorMode (uMode=0x1) returned 0x0 [0141.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd61e45, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xbd61e45, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56cf4523, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1 [0141.525] SetErrorMode (uMode=0x0) returned 0x1 [0141.525] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\JN00AKV9.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\jn00akv9.txt.fully.cryptonar")) returned 1 [0141.527] SetErrorMode (uMode=0x1) returned 0x0 [0141.527] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.528] SetErrorMode (uMode=0x0) returned 0x1 [0141.528] GetFileType (hFile=0x230) returned 0x1 [0141.528] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x104 [0141.529] SetErrorMode (uMode=0x1) returned 0x0 [0141.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x99988da, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x99988da, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56cf4523, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0141.529] SetErrorMode (uMode=0x0) returned 0x1 [0141.529] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\OR8K8VRM.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\or8k8vrm.txt.fully.cryptonar")) returned 1 [0141.530] SetErrorMode (uMode=0x1) returned 0x0 [0141.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.531] SetErrorMode (uMode=0x0) returned 0x1 [0141.531] GetFileType (hFile=0x230) returned 0x1 [0141.531] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xd3 [0141.532] SetErrorMode (uMode=0x1) returned 0x0 [0141.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80dff54, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x80dff54, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56cf4523, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd3)) returned 1 [0141.533] SetErrorMode (uMode=0x0) returned 0x1 [0141.533] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\TK0LXHBL.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\tk0lxhbl.txt.fully.cryptonar")) returned 1 [0141.534] SetErrorMode (uMode=0x1) returned 0x0 [0141.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.535] SetErrorMode (uMode=0x0) returned 0x1 [0141.535] GetFileType (hFile=0x230) returned 0x1 [0141.535] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xb6 [0141.537] SetErrorMode (uMode=0x1) returned 0x0 [0141.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2e9ea247, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2e9ea247, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56cf4523, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1 [0141.537] SetErrorMode (uMode=0x0) returned 0x1 [0141.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VC62GJSF.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vc62gjsf.txt.fully.cryptonar")) returned 1 [0141.538] SetErrorMode (uMode=0x1) returned 0x0 [0141.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.539] SetErrorMode (uMode=0x0) returned 0x1 [0141.540] GetFileType (hFile=0x230) returned 0x1 [0141.540] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x5c [0141.541] SetErrorMode (uMode=0x1) returned 0x0 [0141.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x506a5dc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x506a5dc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56d1a7fc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0141.541] SetErrorMode (uMode=0x0) returned 0x1 [0141.541] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\Cookies\\VSMDVD55.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\cookies\\vsmdvd55.txt.fully.cryptonar")) returned 1 [0141.542] SetErrorMode (uMode=0x1) returned 0x0 [0141.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.543] SetErrorMode (uMode=0x0) returned 0x1 [0141.543] GetFileType (hFile=0x230) returned 0x1 [0141.543] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.543] SetErrorMode (uMode=0x1) returned 0x0 [0141.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xffa1437d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa1437d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffa1437d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.544] SetErrorMode (uMode=0x0) returned 0x1 [0141.544] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\History\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\history\\container.dat.partially.cryptonar")) returned 1 [0141.545] SetErrorMode (uMode=0x1) returned 0x0 [0141.545] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.547] SetErrorMode (uMode=0x0) returned 0x1 [0141.547] GetFileType (hFile=0x230) returned 0x1 [0141.547] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.547] SetErrorMode (uMode=0x1) returned 0x0 [0141.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff03d40e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff03d40e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff03d40e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.547] SetErrorMode (uMode=0x0) returned 0x1 [0141.547] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatcache\\container.dat.partially.cryptonar")) returned 1 [0141.548] SetErrorMode (uMode=0x1) returned 0x0 [0141.549] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.549] SetErrorMode (uMode=0x0) returned 0x1 [0141.549] GetFileType (hFile=0x230) returned 0x1 [0141.549] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.550] SetErrorMode (uMode=0x1) returned 0x0 [0141.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff03d40e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff03d40e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff03d40e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.550] SetErrorMode (uMode=0x0) returned 0x1 [0141.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IECompatUaCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\iecompatuacache\\container.dat.partially.cryptonar")) returned 1 [0141.551] SetErrorMode (uMode=0x1) returned 0x0 [0141.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.552] SetErrorMode (uMode=0x0) returned 0x1 [0141.552] GetFileType (hFile=0x230) returned 0x1 [0141.552] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.552] SetErrorMode (uMode=0x1) returned 0x0 [0141.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x15a0e75c, ftCreationTime.dwHighDateTime=0x1d2fc21, ftLastAccessTime.dwLowDateTime=0x15a0e75c, ftLastAccessTime.dwHighDateTime=0x1d2fc21, ftLastWriteTime.dwLowDateTime=0x15a0e75c, ftLastWriteTime.dwHighDateTime=0x1d2fc21, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.552] SetErrorMode (uMode=0x0) returned 0x1 [0141.553] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\IEFlipAheadCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\ieflipaheadcache\\container.dat.partially.cryptonar")) returned 1 [0141.554] SetErrorMode (uMode=0x1) returned 0x0 [0141.554] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.556] SetErrorMode (uMode=0x0) returned 0x1 [0141.556] GetFileType (hFile=0x230) returned 0x1 [0141.556] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.556] SetErrorMode (uMode=0x1) returned 0x0 [0141.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x108fb4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x108fb4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x108fb4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.556] SetErrorMode (uMode=0x0) returned 0x1 [0141.556] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\container.dat.partially.cryptonar")) returned 1 [0141.557] SetErrorMode (uMode=0x1) returned 0x0 [0141.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.559] SetErrorMode (uMode=0x0) returned 0x1 [0141.559] GetFileType (hFile=0x230) returned 0x1 [0141.559] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.559] SetErrorMode (uMode=0x1) returned 0x0 [0141.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x108fb4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x108fb4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x108fb4, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.559] SetErrorMode (uMode=0x0) returned 0x1 [0141.559] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!001\\MicrosoftEdge\\User\\Default\\AppCache\\Y2EKXLK8\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!001\\microsoftedge\\user\\default\\appcache\\y2ekxlk8\\container.dat.partially.cryptonar")) returned 1 [0141.560] SetErrorMode (uMode=0x1) returned 0x0 [0141.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.563] SetErrorMode (uMode=0x0) returned 0x1 [0141.564] GetFileType (hFile=0x230) returned 0x1 [0141.564] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.578] SetErrorMode (uMode=0x1) returned 0x0 [0141.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x48abefb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x48abefb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56d66c20, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf1d)) returned 1 [0141.579] SetErrorMode (uMode=0x0) returned 0x1 [0141.579] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406.partially.cryptonar")) returned 1 [0141.580] SetErrorMode (uMode=0x1) returned 0x0 [0141.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.581] SetErrorMode (uMode=0x0) returned 0x1 [0141.582] GetFileType (hFile=0x230) returned 0x1 [0141.582] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.609] SetErrorMode (uMode=0x1) returned 0x0 [0141.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffa91d49, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa91d49, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x56db31f4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0141.609] SetErrorMode (uMode=0x0) returned 0x1 [0141.609] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0141.610] SetErrorMode (uMode=0x1) returned 0x0 [0141.611] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.612] SetErrorMode (uMode=0x0) returned 0x1 [0141.612] GetFileType (hFile=0x230) returned 0x1 [0141.612] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.613] SetErrorMode (uMode=0x1) returned 0x0 [0141.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffc5a77a, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffc5a77a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x56db31f4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1 [0141.614] SetErrorMode (uMode=0x0) returned 0x1 [0141.614] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0141.615] SetErrorMode (uMode=0x1) returned 0x0 [0141.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.616] SetErrorMode (uMode=0x0) returned 0x1 [0141.616] GetFileType (hFile=0x230) returned 0x1 [0141.616] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.617] SetErrorMode (uMode=0x1) returned 0x0 [0141.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffb94aae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffb94aae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xffb94aae, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.617] SetErrorMode (uMode=0x0) returned 0x1 [0141.617] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0141.618] SetErrorMode (uMode=0x1) returned 0x0 [0141.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.619] SetErrorMode (uMode=0x0) returned 0x1 [0141.619] GetFileType (hFile=0x230) returned 0x1 [0141.619] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.634] SetErrorMode (uMode=0x1) returned 0x0 [0141.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x595f2f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x595f2f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56dff5db, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0141.635] SetErrorMode (uMode=0x0) returned 0x1 [0141.635] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be.partially.cryptonar")) returned 1 [0141.636] SetErrorMode (uMode=0x1) returned 0x0 [0141.636] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.638] SetErrorMode (uMode=0x0) returned 0x1 [0141.638] GetFileType (hFile=0x230) returned 0x1 [0141.638] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.669] SetErrorMode (uMode=0x1) returned 0x0 [0141.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffe807b3, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffe807b3, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x56e4bb0d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0141.669] SetErrorMode (uMode=0x0) returned 0x1 [0141.669] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0141.671] SetErrorMode (uMode=0x1) returned 0x0 [0141.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.675] SetErrorMode (uMode=0x0) returned 0x1 [0141.675] GetFileType (hFile=0x230) returned 0x1 [0141.675] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.681] SetErrorMode (uMode=0x1) returned 0x0 [0141.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x48abefb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x48abefb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56e71d90, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1 [0141.681] SetErrorMode (uMode=0x0) returned 0x1 [0141.681] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406.partially.cryptonar")) returned 1 [0141.683] SetErrorMode (uMode=0x1) returned 0x0 [0141.683] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.684] SetErrorMode (uMode=0x0) returned 0x1 [0141.684] GetFileType (hFile=0x230) returned 0x1 [0141.684] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.685] SetErrorMode (uMode=0x1) returned 0x0 [0141.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffa909cc, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffa909cc, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x56e71d90, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0141.686] SetErrorMode (uMode=0x0) returned 0x1 [0141.686] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0141.687] SetErrorMode (uMode=0x1) returned 0x0 [0141.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.688] SetErrorMode (uMode=0x0) returned 0x1 [0141.688] GetFileType (hFile=0x230) returned 0x1 [0141.688] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.689] SetErrorMode (uMode=0x1) returned 0x0 [0141.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffc09e1a, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffc09e1a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x56e71d90, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0141.689] SetErrorMode (uMode=0x0) returned 0x1 [0141.689] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0141.690] SetErrorMode (uMode=0x1) returned 0x0 [0141.690] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.691] SetErrorMode (uMode=0x0) returned 0x1 [0141.691] GetFileType (hFile=0x230) returned 0x1 [0141.691] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.692] SetErrorMode (uMode=0x1) returned 0x0 [0141.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffb66466, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffb66466, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x56e71d90, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0141.692] SetErrorMode (uMode=0x0) returned 0x1 [0141.692] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0141.693] SetErrorMode (uMode=0x1) returned 0x0 [0141.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.695] SetErrorMode (uMode=0x0) returned 0x1 [0141.695] GetFileType (hFile=0x230) returned 0x1 [0141.695] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.696] SetErrorMode (uMode=0x1) returned 0x0 [0141.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x595f2f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x595f2f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56e97e42, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18c)) returned 1 [0141.696] SetErrorMode (uMode=0x0) returned 0x1 [0141.696] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be.partially.cryptonar")) returned 1 [0141.698] SetErrorMode (uMode=0x1) returned 0x0 [0141.698] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.698] SetErrorMode (uMode=0x0) returned 0x1 [0141.698] GetFileType (hFile=0x230) returned 0x1 [0141.698] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.699] SetErrorMode (uMode=0x1) returned 0x0 [0141.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xffe342f6, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xffe342f6, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x56e97e42, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0141.700] SetErrorMode (uMode=0x0) returned 0x1 [0141.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0141.701] SetErrorMode (uMode=0x1) returned 0x0 [0141.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.702] SetErrorMode (uMode=0x0) returned 0x1 [0141.702] GetFileType (hFile=0x230) returned 0x1 [0141.702] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.793] SetErrorMode (uMode=0x1) returned 0x0 [0141.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c30ddf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1c30ddf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56f7ccb3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0)) returned 1 [0141.793] SetErrorMode (uMode=0x0) returned 0x1 [0141.793] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\MSIMGSIZ.DAT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\msimgsiz.dat.partially.cryptonar")) returned 1 [0141.794] SetErrorMode (uMode=0x1) returned 0x0 [0141.795] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.796] SetErrorMode (uMode=0x0) returned 0x1 [0141.796] GetFileType (hFile=0x230) returned 0x1 [0141.796] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.796] SetErrorMode (uMode=0x1) returned 0x0 [0141.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff54c64e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff54c64e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff54c64e, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.796] SetErrorMode (uMode=0x0) returned 0x1 [0141.796] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cache\\container.dat.partially.cryptonar")) returned 1 [0141.798] SetErrorMode (uMode=0x1) returned 0x0 [0141.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.800] SetErrorMode (uMode=0x0) returned 0x1 [0141.800] GetFileType (hFile=0x230) returned 0x1 [0141.800] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x7f [0141.801] SetErrorMode (uMode=0x1) returned 0x0 [0141.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4abb45f, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4abb45f, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56f7ccb3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7f)) returned 1 [0141.801] SetErrorMode (uMode=0x0) returned 0x1 [0141.801] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\51TU1403.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\51tu1403.txt.fully.cryptonar")) returned 1 [0141.802] SetErrorMode (uMode=0x1) returned 0x0 [0141.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.804] SetErrorMode (uMode=0x0) returned 0x1 [0141.804] GetFileType (hFile=0x230) returned 0x1 [0141.804] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x1bf [0141.805] SetErrorMode (uMode=0x1) returned 0x0 [0141.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4a32908, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4a32908, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56fa2e70, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1bf)) returned 1 [0141.805] SetErrorMode (uMode=0x0) returned 0x1 [0141.805] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\5GJKP08H.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\5gjkp08h.txt.fully.cryptonar")) returned 1 [0141.806] SetErrorMode (uMode=0x1) returned 0x0 [0141.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.807] SetErrorMode (uMode=0x0) returned 0x1 [0141.808] GetFileType (hFile=0x230) returned 0x1 [0141.808] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x18b [0141.808] SetErrorMode (uMode=0x1) returned 0x0 [0141.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x46f47c6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x46f47c6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56fa2e70, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18b)) returned 1 [0141.809] SetErrorMode (uMode=0x0) returned 0x1 [0141.809] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\6NQ9V8CD.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\6nq9v8cd.txt.fully.cryptonar")) returned 1 [0141.810] SetErrorMode (uMode=0x1) returned 0x0 [0141.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.810] SetErrorMode (uMode=0x0) returned 0x1 [0141.811] GetFileType (hFile=0x230) returned 0x1 [0141.811] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.811] SetErrorMode (uMode=0x1) returned 0x0 [0141.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff5870a7, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff5870a7, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff5870a7, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.811] SetErrorMode (uMode=0x0) returned 0x1 [0141.811] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\container.dat.partially.cryptonar")) returned 1 [0141.812] SetErrorMode (uMode=0x1) returned 0x0 [0141.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.813] SetErrorMode (uMode=0x0) returned 0x1 [0141.813] GetFileType (hFile=0x230) returned 0x1 [0141.813] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x1a3 [0141.814] SetErrorMode (uMode=0x1) returned 0x0 [0141.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e784fb, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4e784fb, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56fa2e70, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a3)) returned 1 [0141.814] SetErrorMode (uMode=0x0) returned 0x1 [0141.815] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\JZ1UUUP9.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\jz1uuup9.txt.fully.cryptonar")) returned 1 [0141.816] SetErrorMode (uMode=0x1) returned 0x0 [0141.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.816] SetErrorMode (uMode=0x0) returned 0x1 [0141.816] GetFileType (hFile=0x230) returned 0x1 [0141.817] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x166 [0141.818] SetErrorMode (uMode=0x1) returned 0x0 [0141.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x567ada4, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x567ada4, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56fa2e70, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x166)) returned 1 [0141.818] SetErrorMode (uMode=0x0) returned 0x1 [0141.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\KW0ULAFV.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\kw0ulafv.txt.fully.cryptonar")) returned 1 [0141.819] SetErrorMode (uMode=0x1) returned 0x0 [0141.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.820] SetErrorMode (uMode=0x0) returned 0x1 [0141.820] GetFileType (hFile=0x230) returned 0x1 [0141.820] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xd1 [0141.821] SetErrorMode (uMode=0x1) returned 0x0 [0141.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2577b2e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2577b2e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56fca104, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0141.822] SetErrorMode (uMode=0x0) returned 0x1 [0141.822] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\SW6Z4AI1.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\sw6z4ai1.txt.fully.cryptonar")) returned 1 [0141.823] SetErrorMode (uMode=0x1) returned 0x0 [0141.823] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.823] SetErrorMode (uMode=0x0) returned 0x1 [0141.823] GetFileType (hFile=0x230) returned 0x1 [0141.823] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xc8 [0141.824] SetErrorMode (uMode=0x1) returned 0x0 [0141.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4fc4588, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x4fc4588, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x56fca104, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc8)) returned 1 [0141.825] SetErrorMode (uMode=0x0) returned 0x1 [0141.825] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\TU6XBKFE.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\tu6xbkfe.txt.fully.cryptonar")) returned 1 [0141.826] SetErrorMode (uMode=0x1) returned 0x0 [0141.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.826] SetErrorMode (uMode=0x0) returned 0x1 [0141.826] GetFileType (hFile=0x230) returned 0x1 [0141.826] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x231 [0141.828] SetErrorMode (uMode=0x1) returned 0x0 [0141.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16861968, ftCreationTime.dwHighDateTime=0x1d2fc21, ftLastAccessTime.dwLowDateTime=0x16861968, ftLastAccessTime.dwHighDateTime=0x1d2fc21, ftLastWriteTime.dwLowDateTime=0x56fca104, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x231)) returned 1 [0141.828] SetErrorMode (uMode=0x0) returned 0x1 [0141.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\Cookies\\U9PT9V3Q.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\cookies\\u9pt9v3q.txt.fully.cryptonar")) returned 1 [0141.829] SetErrorMode (uMode=0x1) returned 0x0 [0141.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.830] SetErrorMode (uMode=0x0) returned 0x1 [0141.830] GetFileType (hFile=0x230) returned 0x1 [0141.830] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.830] SetErrorMode (uMode=0x1) returned 0x0 [0141.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfae66c7, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xfae66c7, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xfae66c7, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.830] SetErrorMode (uMode=0x0) returned 0x1 [0141.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\History\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\history\\container.dat.partially.cryptonar")) returned 1 [0141.831] SetErrorMode (uMode=0x1) returned 0x0 [0141.831] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.832] SetErrorMode (uMode=0x0) returned 0x1 [0141.832] GetFileType (hFile=0x230) returned 0x1 [0141.832] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.832] SetErrorMode (uMode=0x1) returned 0x0 [0141.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff1484a0, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1484a0, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1484a0, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.832] SetErrorMode (uMode=0x0) returned 0x1 [0141.832] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatcache\\container.dat.partially.cryptonar")) returned 1 [0141.833] SetErrorMode (uMode=0x1) returned 0x0 [0141.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.834] SetErrorMode (uMode=0x0) returned 0x1 [0141.834] GetFileType (hFile=0x230) returned 0x1 [0141.834] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.834] SetErrorMode (uMode=0x1) returned 0x0 [0141.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff1484a0, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1484a0, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff1484a0, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.835] SetErrorMode (uMode=0x0) returned 0x1 [0141.835] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\IECompatUaCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\iecompatuacache\\container.dat.partially.cryptonar")) returned 1 [0141.836] SetErrorMode (uMode=0x1) returned 0x0 [0141.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.837] SetErrorMode (uMode=0x0) returned 0x1 [0141.837] GetFileType (hFile=0x230) returned 0x1 [0141.837] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.837] SetErrorMode (uMode=0x1) returned 0x0 [0141.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff4ee601, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff4ee601, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff4ee601, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.837] SetErrorMode (uMode=0x0) returned 0x1 [0141.837] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\container.dat.partially.cryptonar")) returned 1 [0141.838] SetErrorMode (uMode=0x1) returned 0x0 [0141.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.839] SetErrorMode (uMode=0x0) returned 0x1 [0141.839] GetFileType (hFile=0x230) returned 0x1 [0141.839] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.839] SetErrorMode (uMode=0x1) returned 0x0 [0141.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff51f37d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff51f37d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff51f37d, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0141.839] SetErrorMode (uMode=0x0) returned 0x1 [0141.839] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\container.dat.partially.cryptonar")) returned 1 [0141.840] SetErrorMode (uMode=0x1) returned 0x0 [0141.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.843] SetErrorMode (uMode=0x0) returned 0x1 [0141.843] GetFileType (hFile=0x230) returned 0x1 [0141.843] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0141.984] SetErrorMode (uMode=0x1) returned 0x0 [0141.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30b1cac, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30b1cac, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57146a15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x38ff)) returned 1 [0141.984] SetErrorMode (uMode=0x0) returned 0x1 [0141.984] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1ab36a6a[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1ab36a6a[1].js.partially.cryptonar")) returned 1 [0141.986] SetErrorMode (uMode=0x1) returned 0x0 [0141.986] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0141.987] SetErrorMode (uMode=0x0) returned 0x1 [0141.987] GetFileType (hFile=0x230) returned 0x1 [0141.987] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.073] SetErrorMode (uMode=0x1) returned 0x0 [0142.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30b7e61, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30b7e61, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5722b84a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f19a)) returned 1 [0142.073] SetErrorMode (uMode=0x0) returned 0x1 [0142.073] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\1acd62c3[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\1acd62c3[1].js.partially.cryptonar")) returned 1 [0142.075] SetErrorMode (uMode=0x1) returned 0x0 [0142.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.076] SetErrorMode (uMode=0x0) returned 0x1 [0142.076] GetFileType (hFile=0x230) returned 0x1 [0142.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.078] SetErrorMode (uMode=0x1) returned 0x0 [0142.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30e510d, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30e510d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5722b84a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3cf6)) returned 1 [0142.078] SetErrorMode (uMode=0x0) returned 0x1 [0142.078] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\236a1503[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\236a1503[1].js.partially.cryptonar")) returned 1 [0142.079] SetErrorMode (uMode=0x1) returned 0x0 [0142.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.081] SetErrorMode (uMode=0x0) returned 0x1 [0142.081] GetFileType (hFile=0x230) returned 0x1 [0142.081] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.089] SetErrorMode (uMode=0x1) returned 0x0 [0142.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30d2c26, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30d2c26, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57251986, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x26874)) returned 1 [0142.089] SetErrorMode (uMode=0x0) returned 0x1 [0142.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\36a8ead3[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\36a8ead3[1].js.partially.cryptonar")) returned 1 [0142.091] SetErrorMode (uMode=0x1) returned 0x0 [0142.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.092] SetErrorMode (uMode=0x0) returned 0x1 [0142.093] GetFileType (hFile=0x230) returned 0x1 [0142.093] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.284] SetErrorMode (uMode=0x1) returned 0x0 [0142.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3038ed3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3038ed3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5741b6c9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4da8)) returned 1 [0142.284] SetErrorMode (uMode=0x0) returned 0x1 [0142.284] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\3727cd16[1].css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\3727cd16[1].css.partially.cryptonar")) returned 1 [0142.286] SetErrorMode (uMode=0x1) returned 0x0 [0142.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.287] SetErrorMode (uMode=0x0) returned 0x1 [0142.287] GetFileType (hFile=0x230) returned 0x1 [0142.287] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.472] SetErrorMode (uMode=0x1) returned 0x0 [0142.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30be001, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30be001, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x575e73e1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19d6)) returned 1 [0142.472] SetErrorMode (uMode=0x0) returned 0x1 [0142.472] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\41795194[1].css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\41795194[1].css.partially.cryptonar")) returned 1 [0142.474] SetErrorMode (uMode=0x1) returned 0x0 [0142.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.475] SetErrorMode (uMode=0x0) returned 0x1 [0142.475] GetFileType (hFile=0x230) returned 0x1 [0142.475] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.517] SetErrorMode (uMode=0x1) returned 0x0 [0142.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309e423, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x309e423, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57657a32, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48d2)) returned 1 [0142.517] SetErrorMode (uMode=0x0) returned 0x1 [0142.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\9101d3f2[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\9101d3f2[1].js.partially.cryptonar")) returned 1 [0142.519] SetErrorMode (uMode=0x1) returned 0x0 [0142.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\appcache[1].man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.520] SetErrorMode (uMode=0x0) returned 0x1 [0142.520] GetFileType (hFile=0x230) returned 0x1 [0142.520] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.536] SetErrorMode (uMode=0x1) returned 0x0 [0142.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2b668c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2b668c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5767db47, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0142.537] SetErrorMode (uMode=0x0) returned 0x1 [0142.537] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\appcache[1].man"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\appcache[1].man.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\appcache[1].man.partially.cryptonar")) returned 1 [0142.538] SetErrorMode (uMode=0x1) returned 0x0 [0142.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.540] SetErrorMode (uMode=0x0) returned 0x1 [0142.540] GetFileType (hFile=0x230) returned 0x1 [0142.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.540] SetErrorMode (uMode=0x1) returned 0x0 [0142.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b65523, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2b65523, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x2b65523, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.540] SetErrorMode (uMode=0x0) returned 0x1 [0142.540] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\container.dat.partially.cryptonar")) returned 1 [0142.542] SetErrorMode (uMode=0x1) returned 0x0 [0142.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.542] SetErrorMode (uMode=0x0) returned 0x1 [0142.542] GetFileType (hFile=0x230) returned 0x1 [0142.543] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.583] SetErrorMode (uMode=0x1) returned 0x0 [0142.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30eb2d1, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30eb2d1, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x576f033f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x59e2)) returned 1 [0142.584] SetErrorMode (uMode=0x0) returned 0x1 [0142.584] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\d11fd6a0[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\d11fd6a0[1].js.partially.cryptonar")) returned 1 [0142.585] SetErrorMode (uMode=0x1) returned 0x0 [0142.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f544a93b[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.587] SetErrorMode (uMode=0x0) returned 0x1 [0142.587] GetFileType (hFile=0x230) returned 0x1 [0142.587] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.608] SetErrorMode (uMode=0x1) returned 0x0 [0142.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f544a93b[1].css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3040402, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x3040402, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5773c7f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x592)) returned 1 [0142.608] SetErrorMode (uMode=0x0) returned 0x1 [0142.608] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f544a93b[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f544a93b[1].css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f544a93b[1].css.partially.cryptonar")) returned 1 [0142.610] SetErrorMode (uMode=0x1) returned 0x0 [0142.610] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.611] SetErrorMode (uMode=0x0) returned 0x1 [0142.611] GetFileType (hFile=0x230) returned 0x1 [0142.611] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.624] SetErrorMode (uMode=0x1) returned 0x0 [0142.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30e0303, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x30e0303, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57762969, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10f47)) returned 1 [0142.625] SetErrorMode (uMode=0x0) returned 0x1 [0142.625] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\f682f456[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\f682f456[1].js.partially.cryptonar")) returned 1 [0142.626] SetErrorMode (uMode=0x1) returned 0x0 [0142.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.627] SetErrorMode (uMode=0x0) returned 0x1 [0142.627] GetFileType (hFile=0x230) returned 0x1 [0142.627] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.629] SetErrorMode (uMode=0x1) returned 0x0 [0142.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2eecd1b, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2eecd1b, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57762969, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x972e)) returned 1 [0142.629] SetErrorMode (uMode=0x0) returned 0x1 [0142.629] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\fce27fce[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\fce27fce[1].js.partially.cryptonar")) returned 1 [0142.631] SetErrorMode (uMode=0x1) returned 0x0 [0142.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.632] SetErrorMode (uMode=0x0) returned 0x1 [0142.632] GetFileType (hFile=0x230) returned 0x1 [0142.632] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.642] SetErrorMode (uMode=0x1) returned 0x0 [0142.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2cb2a46, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2cb2a46, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57788bc6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x70a8)) returned 1 [0142.642] SetErrorMode (uMode=0x0) returned 0x1 [0142.642] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\AppCache\\E6ZY23KO\\1\\Init[1].htm.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\appcache\\e6zy23ko\\1\\init[1].htm.partially.cryptonar")) returned 1 [0142.644] SetErrorMode (uMode=0x1) returned 0x0 [0142.644] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.645] SetErrorMode (uMode=0x0) returned 0x1 [0142.645] GetFileType (hFile=0x230) returned 0x1 [0142.645] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.645] SetErrorMode (uMode=0x1) returned 0x0 [0142.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1fbc207, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1fbc207, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x1fbc207, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.645] SetErrorMode (uMode=0x0) returned 0x1 [0142.645] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\container.dat.partially.cryptonar")) returned 1 [0142.647] SetErrorMode (uMode=0x1) returned 0x0 [0142.648] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.649] SetErrorMode (uMode=0x0) returned 0x1 [0142.649] GetFileType (hFile=0x230) returned 0x1 [0142.649] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.673] SetErrorMode (uMode=0x1) returned 0x0 [0142.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2705b9e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2705b9e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x577d513b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x147be)) returned 1 [0142.673] SetErrorMode (uMode=0x0) returned 0x1 [0142.674] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\ETFMMWBM\\www.bing[1].xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\etfmmwbm\\www.bing[1].xml.partially.cryptonar")) returned 1 [0142.675] SetErrorMode (uMode=0x1) returned 0x0 [0142.675] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.676] SetErrorMode (uMode=0x0) returned 0x1 [0142.676] GetFileType (hFile=0x230) returned 0x1 [0142.676] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.678] SetErrorMode (uMode=0x1) returned 0x0 [0142.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\www.msn[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1fdd190, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1fdd190, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x577d513b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2cb)) returned 1 [0142.678] SetErrorMode (uMode=0x0) returned 0x1 [0142.678] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\www.msn[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\#!002\\MicrosoftEdge\\User\\Default\\DOMStore\\P1T4DCFU\\www.msn[1].xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\#!002\\microsoftedge\\user\\default\\domstore\\p1t4dcfu\\www.msn[1].xml.partially.cryptonar")) returned 1 [0142.679] SetErrorMode (uMode=0x1) returned 0x0 [0142.680] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.682] SetErrorMode (uMode=0x0) returned 0x1 [0142.682] GetFileType (hFile=0x230) returned 0x1 [0142.683] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.694] SetErrorMode (uMode=0x1) returned 0x0 [0142.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x577fb2af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0142.694] SetErrorMode (uMode=0x0) returned 0x1 [0142.694] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0142.697] SetErrorMode (uMode=0x1) returned 0x0 [0142.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.698] SetErrorMode (uMode=0x0) returned 0x1 [0142.698] GetFileType (hFile=0x230) returned 0x1 [0142.698] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.700] SetErrorMode (uMode=0x1) returned 0x0 [0142.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe70cfc6, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe70cfc6, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x578215da, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0142.700] SetErrorMode (uMode=0x0) returned 0x1 [0142.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5.partially.cryptonar")) returned 1 [0142.723] SetErrorMode (uMode=0x1) returned 0x0 [0142.723] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.724] SetErrorMode (uMode=0x0) returned 0x1 [0142.724] GetFileType (hFile=0x230) returned 0x1 [0142.724] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.724] SetErrorMode (uMode=0x1) returned 0x0 [0142.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.724] SetErrorMode (uMode=0x0) returned 0x1 [0142.724] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0142.725] SetErrorMode (uMode=0x1) returned 0x0 [0142.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.726] SetErrorMode (uMode=0x0) returned 0x1 [0142.726] GetFileType (hFile=0x230) returned 0x1 [0142.726] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.727] SetErrorMode (uMode=0x1) returned 0x0 [0142.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe780fde, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe780fde, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5786dd0b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0142.728] SetErrorMode (uMode=0x0) returned 0x1 [0142.728] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162.partially.cryptonar")) returned 1 [0142.732] SetErrorMode (uMode=0x1) returned 0x0 [0142.732] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.733] SetErrorMode (uMode=0x0) returned 0x1 [0142.733] GetFileType (hFile=0x230) returned 0x1 [0142.733] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.733] SetErrorMode (uMode=0x1) returned 0x0 [0142.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8c84b2c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.733] SetErrorMode (uMode=0x0) returned 0x1 [0142.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0142.734] SetErrorMode (uMode=0x1) returned 0x0 [0142.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.735] SetErrorMode (uMode=0x0) returned 0x1 [0142.735] GetFileType (hFile=0x230) returned 0x1 [0142.735] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.736] SetErrorMode (uMode=0x1) returned 0x0 [0142.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa900ee5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa900ee5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5786dd0b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1 [0142.736] SetErrorMode (uMode=0x0) returned 0x1 [0142.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619.partially.cryptonar")) returned 1 [0142.739] SetErrorMode (uMode=0x1) returned 0x0 [0142.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.740] SetErrorMode (uMode=0x0) returned 0x1 [0142.740] GetFileType (hFile=0x230) returned 0x1 [0142.740] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.741] SetErrorMode (uMode=0x1) returned 0x0 [0142.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8caac22, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8caac22, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x8caac22, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.741] SetErrorMode (uMode=0x0) returned 0x1 [0142.741] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0142.742] SetErrorMode (uMode=0x1) returned 0x0 [0142.742] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.744] SetErrorMode (uMode=0x0) returned 0x1 [0142.744] GetFileType (hFile=0x230) returned 0x1 [0142.744] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.745] SetErrorMode (uMode=0x1) returned 0x0 [0142.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57893f4e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0142.745] SetErrorMode (uMode=0x0) returned 0x1 [0142.746] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0142.747] SetErrorMode (uMode=0x1) returned 0x0 [0142.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.748] SetErrorMode (uMode=0x0) returned 0x1 [0142.748] GetFileType (hFile=0x230) returned 0x1 [0142.748] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.749] SetErrorMode (uMode=0x1) returned 0x0 [0142.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe70bc33, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe70bc33, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57893f4e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1 [0142.749] SetErrorMode (uMode=0x0) returned 0x1 [0142.749] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\42B9A473B4DAF01285A36B4D3C7B1662_178C086B699FD6C56B804AF3EF759CB5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\42b9a473b4daf01285a36b4d3c7b1662_178c086b699fd6c56b804af3ef759cb5.partially.cryptonar")) returned 1 [0142.750] SetErrorMode (uMode=0x1) returned 0x0 [0142.750] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.751] SetErrorMode (uMode=0x0) returned 0x1 [0142.751] GetFileType (hFile=0x230) returned 0x1 [0142.751] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.752] SetErrorMode (uMode=0x1) returned 0x0 [0142.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57893f4e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0142.752] SetErrorMode (uMode=0x0) returned 0x1 [0142.752] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0142.753] SetErrorMode (uMode=0x1) returned 0x0 [0142.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.754] SetErrorMode (uMode=0x0) returned 0x1 [0142.754] GetFileType (hFile=0x230) returned 0x1 [0142.755] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.756] SetErrorMode (uMode=0x1) returned 0x0 [0142.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe77fc51, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xe77fc51, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57893f4e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0142.756] SetErrorMode (uMode=0x0) returned 0x1 [0142.757] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\66AE3BFDF94A732B262342AD2154B86E_108A7991F73F2B507007C35661993162.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\66ae3bfdf94a732b262342ad2154b86e_108a7991f73f2b507007c35661993162.partially.cryptonar")) returned 1 [0142.758] SetErrorMode (uMode=0x1) returned 0x0 [0142.758] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.760] SetErrorMode (uMode=0x0) returned 0x1 [0142.760] GetFileType (hFile=0x230) returned 0x1 [0142.760] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.761] SetErrorMode (uMode=0x1) returned 0x0 [0142.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8c84b2c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8c84b2c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x578bbf0d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0142.761] SetErrorMode (uMode=0x0) returned 0x1 [0142.761] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0142.763] SetErrorMode (uMode=0x1) returned 0x0 [0142.763] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.764] SetErrorMode (uMode=0x0) returned 0x1 [0142.764] GetFileType (hFile=0x230) returned 0x1 [0142.764] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.765] SetErrorMode (uMode=0x1) returned 0x0 [0142.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa900ee5, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xa900ee5, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x578bbf0d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1 [0142.765] SetErrorMode (uMode=0x0) returned 0x1 [0142.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\edc238bff48a31d55a97e1e93892934b_c31b2498754e340573f1336de607d619.partially.cryptonar")) returned 1 [0142.766] SetErrorMode (uMode=0x1) returned 0x0 [0142.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.767] SetErrorMode (uMode=0x0) returned 0x1 [0142.767] GetFileType (hFile=0x230) returned 0x1 [0142.767] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.768] SetErrorMode (uMode=0x1) returned 0x0 [0142.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8caac22, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x8caac22, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x578bbf0d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0142.768] SetErrorMode (uMode=0x0) returned 0x1 [0142.768] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0142.769] SetErrorMode (uMode=0x1) returned 0x0 [0142.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.771] SetErrorMode (uMode=0x0) returned 0x1 [0142.771] GetFileType (hFile=0x230) returned 0x1 [0142.771] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.789] SetErrorMode (uMode=0x1) returned 0x0 [0142.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdb43d5e, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdb43d5e, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x579063e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0142.789] SetErrorMode (uMode=0x0) returned 0x1 [0142.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoft\\windows\\1605653898\\4275773285.pri.partially.cryptonar")) returned 1 [0142.791] SetErrorMode (uMode=0x1) returned 0x0 [0142.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.792] SetErrorMode (uMode=0x0) returned 0x1 [0142.792] GetFileType (hFile=0x230) returned 0x1 [0142.792] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.792] SetErrorMode (uMode=0x1) returned 0x0 [0142.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x269842dc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269a8c69, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x269a8c69, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.793] SetErrorMode (uMode=0x0) returned 0x1 [0142.793] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\BingPageDataCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\bingpagedatacache\\container.dat.partially.cryptonar")) returned 1 [0142.794] SetErrorMode (uMode=0x1) returned 0x0 [0142.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.794] SetErrorMode (uMode=0x0) returned 0x1 [0142.794] GetFileType (hFile=0x230) returned 0x1 [0142.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.795] SetErrorMode (uMode=0x1) returned 0x0 [0142.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xcb1640, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xcb1640, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xcb1640, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.795] SetErrorMode (uMode=0x0) returned 0x1 [0142.795] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cache\\container.dat.partially.cryptonar")) returned 1 [0142.796] SetErrorMode (uMode=0x1) returned 0x0 [0142.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.799] SetErrorMode (uMode=0x0) returned 0x1 [0142.799] GetFileType (hFile=0x230) returned 0x1 [0142.799] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x6f [0142.800] SetErrorMode (uMode=0x1) returned 0x0 [0142.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26746715, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x26746715, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x579063e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1 [0142.800] SetErrorMode (uMode=0x0) returned 0x1 [0142.800] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1143SFPT.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1143sfpt.txt.fully.cryptonar")) returned 1 [0142.801] SetErrorMode (uMode=0x1) returned 0x0 [0142.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.802] SetErrorMode (uMode=0x0) returned 0x1 [0142.802] GetFileType (hFile=0x230) returned 0x1 [0142.802] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x95 [0142.803] SetErrorMode (uMode=0x1) returned 0x0 [0142.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x26746715, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x26746715, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x579063e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x95)) returned 1 [0142.803] SetErrorMode (uMode=0x0) returned 0x1 [0142.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\1HP9XSYA.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\1hp9xsya.txt.fully.cryptonar")) returned 1 [0142.805] SetErrorMode (uMode=0x1) returned 0x0 [0142.805] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.805] SetErrorMode (uMode=0x0) returned 0x1 [0142.805] GetFileType (hFile=0x230) returned 0x1 [0142.805] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x9f [0142.806] SetErrorMode (uMode=0x1) returned 0x0 [0142.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x258d23c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x258d23c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5792ca4d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9f)) returned 1 [0142.806] SetErrorMode (uMode=0x0) returned 0x1 [0142.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\205ESPV2.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\205espv2.txt.fully.cryptonar")) returned 1 [0142.807] SetErrorMode (uMode=0x1) returned 0x0 [0142.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.808] SetErrorMode (uMode=0x0) returned 0x1 [0142.808] GetFileType (hFile=0x230) returned 0x1 [0142.808] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.809] SetErrorMode (uMode=0x1) returned 0x0 [0142.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x856789c, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x856789c, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x856789c, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.809] SetErrorMode (uMode=0x0) returned 0x1 [0142.809] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\container.dat.partially.cryptonar")) returned 1 [0142.810] SetErrorMode (uMode=0x1) returned 0x0 [0142.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.811] SetErrorMode (uMode=0x0) returned 0x1 [0142.811] GetFileType (hFile=0x230) returned 0x1 [0142.811] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x79 [0142.812] SetErrorMode (uMode=0x1) returned 0x0 [0142.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x258d23c3, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x258d23c3, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x5792ca4d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x79)) returned 1 [0142.812] SetErrorMode (uMode=0x0) returned 0x1 [0142.812] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\Cookies\\Y51OCFZ0.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cookies\\y51ocfz0.txt.fully.cryptonar")) returned 1 [0142.813] SetErrorMode (uMode=0x1) returned 0x0 [0142.813] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.814] SetErrorMode (uMode=0x0) returned 0x1 [0142.814] GetFileType (hFile=0x230) returned 0x1 [0142.814] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.835] SetErrorMode (uMode=0x1) returned 0x0 [0142.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x269842dc, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x269842dc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x579528f2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49408)) returned 1 [0142.835] SetErrorMode (uMode=0x0) returned 0x1 [0142.835] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\CortanaAssist\\AllowList.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\cortanaassist\\allowlist.dat.partially.cryptonar")) returned 1 [0142.837] SetErrorMode (uMode=0x1) returned 0x0 [0142.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.838] SetErrorMode (uMode=0x0) returned 0x1 [0142.838] GetFileType (hFile=0x230) returned 0x1 [0142.838] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.838] SetErrorMode (uMode=0x1) returned 0x0 [0142.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xff9c7ed2, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff9c7ed2, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xff9c7ed2, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.839] SetErrorMode (uMode=0x0) returned 0x1 [0142.839] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\History\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\history\\container.dat.partially.cryptonar")) returned 1 [0142.840] SetErrorMode (uMode=0x1) returned 0x0 [0142.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.841] SetErrorMode (uMode=0x0) returned 0x1 [0142.841] GetFileType (hFile=0x230) returned 0x1 [0142.841] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.841] SetErrorMode (uMode=0x1) returned 0x0 [0142.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdc9c242, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcc950a, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcc950a, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.842] SetErrorMode (uMode=0x0) returned 0x1 [0142.842] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatcache\\container.dat.partially.cryptonar")) returned 1 [0142.843] SetErrorMode (uMode=0x1) returned 0x0 [0142.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.844] SetErrorMode (uMode=0x0) returned 0x1 [0142.844] GetFileType (hFile=0x230) returned 0x1 [0142.844] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.844] SetErrorMode (uMode=0x1) returned 0x0 [0142.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdcce33f, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdcedf10, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdcedf10, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.844] SetErrorMode (uMode=0x0) returned 0x1 [0142.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IECompatUaCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\iecompatuacache\\container.dat.partially.cryptonar")) returned 1 [0142.846] SetErrorMode (uMode=0x1) returned 0x0 [0142.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.847] SetErrorMode (uMode=0x0) returned 0x1 [0142.847] GetFileType (hFile=0x230) returned 0x1 [0142.847] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.847] SetErrorMode (uMode=0x1) returned 0x0 [0142.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x25d70b86, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25d96dcc, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x25d96dcc, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0142.847] SetErrorMode (uMode=0x0) returned 0x1 [0142.847] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\IEFlipAheadCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\ieflipaheadcache\\container.dat.partially.cryptonar")) returned 1 [0142.849] SetErrorMode (uMode=0x1) returned 0x0 [0142.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.851] SetErrorMode (uMode=0x0) returned 0x1 [0142.851] GetFileType (hFile=0x230) returned 0x1 [0142.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.867] SetErrorMode (uMode=0x1) returned 0x0 [0142.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff207043, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff207043, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x579c4e60, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0142.868] SetErrorMode (uMode=0x0) returned 0x1 [0142.868] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\edb.chk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\edb.chk.partially.cryptonar")) returned 1 [0142.869] SetErrorMode (uMode=0x1) returned 0x0 [0142.869] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.870] SetErrorMode (uMode=0x0) returned 0x1 [0142.870] GetFileType (hFile=0x230) returned 0x1 [0142.870] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0142.908] SetErrorMode (uMode=0x1) returned 0x0 [0142.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff207043, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff207043, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x57a113b2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0142.909] SetErrorMode (uMode=0x0) returned 0x1 [0142.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\spartan.edb.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\spartan.edb.partially.cryptonar")) returned 1 [0142.910] SetErrorMode (uMode=0x1) returned 0x0 [0142.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0142.911] SetErrorMode (uMode=0x0) returned 0x1 [0142.911] GetFileType (hFile=0x230) returned 0x1 [0142.911] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.037] SetErrorMode (uMode=0x1) returned 0x0 [0143.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1babae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1babae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x57b427fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0143.037] SetErrorMode (uMode=0x0) returned 0x1 [0143.037] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edb.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edb.log.partially.cryptonar")) returned 1 [0143.048] SetErrorMode (uMode=0x1) returned 0x0 [0143.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.049] SetErrorMode (uMode=0x0) returned 0x1 [0143.049] GetFileType (hFile=0x230) returned 0x1 [0143.049] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.051] SetErrorMode (uMode=0x1) returned 0x0 [0143.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1e0e0d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1e0e0d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x57b68819, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0143.051] SetErrorMode (uMode=0x0) returned 0x1 [0143.051] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00001.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00001.jrs.partially.cryptonar")) returned 1 [0143.053] SetErrorMode (uMode=0x1) returned 0x0 [0143.053] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.053] SetErrorMode (uMode=0x0) returned 0x1 [0143.053] GetFileType (hFile=0x230) returned 0x1 [0143.054] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.056] SetErrorMode (uMode=0x1) returned 0x0 [0143.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1e0e0d, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1e0e0d, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x57b8eb7c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0143.056] SetErrorMode (uMode=0x0) returned 0x1 [0143.056] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbres00002.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbres00002.jrs.partially.cryptonar")) returned 1 [0143.057] SetErrorMode (uMode=0x1) returned 0x0 [0143.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.058] SetErrorMode (uMode=0x0) returned 0x1 [0143.058] GetFileType (hFile=0x230) returned 0x1 [0143.058] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.085] SetErrorMode (uMode=0x1) returned 0x0 [0143.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xff1babae, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xff1babae, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0x57bb4de9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0143.085] SetErrorMode (uMode=0x0) returned 0x1 [0143.086] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DataStore\\Data\\nouser1\\120712-0049\\DBStore\\LogFiles\\edbtmp.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\datastore\\data\\nouser1\\120712-0049\\dbstore\\logfiles\\edbtmp.log.partially.cryptonar")) returned 1 [0143.087] SetErrorMode (uMode=0x1) returned 0x0 [0143.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.088] SetErrorMode (uMode=0x0) returned 0x1 [0143.088] GetFileType (hFile=0x230) returned 0x1 [0143.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.088] SetErrorMode (uMode=0x1) returned 0x0 [0143.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfdd7a5aa, ftCreationTime.dwHighDateTime=0x1d2d432, ftLastAccessTime.dwLowDateTime=0xfdd93fd3, ftLastAccessTime.dwHighDateTime=0x1d2d432, ftLastWriteTime.dwLowDateTime=0xfdd93fd3, ftLastWriteTime.dwHighDateTime=0x1d2d432, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.089] SetErrorMode (uMode=0x0) returned 0x1 [0143.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DNTException\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\dntexception\\container.dat.partially.cryptonar")) returned 1 [0143.090] SetErrorMode (uMode=0x1) returned 0x0 [0143.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.091] SetErrorMode (uMode=0x0) returned 0x1 [0143.091] GetFileType (hFile=0x230) returned 0x1 [0143.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.146] SetErrorMode (uMode=0x1) returned 0x0 [0143.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25a2974e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x25a2974e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57c4d67e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4700)) returned 1 [0143.147] SetErrorMode (uMode=0x0) returned 0x1 [0143.147] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DomainSuggestions\\en-US.1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\domainsuggestions\\en-us.1.partially.cryptonar")) returned 1 [0143.149] SetErrorMode (uMode=0x1) returned 0x0 [0143.149] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.150] SetErrorMode (uMode=0x0) returned 0x1 [0143.150] GetFileType (hFile=0x230) returned 0x1 [0143.151] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.151] SetErrorMode (uMode=0x1) returned 0x0 [0143.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdcd2e0a, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0xdcd2e0a, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0xdcd2e0a, ftLastWriteTime.dwHighDateTime=0x1d2d433, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.151] SetErrorMode (uMode=0x0) returned 0x1 [0143.151] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\DownloadHistory\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\downloadhistory\\container.dat.partially.cryptonar")) returned 1 [0143.153] SetErrorMode (uMode=0x1) returned 0x0 [0143.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.156] SetErrorMode (uMode=0x0) returned 0x1 [0143.156] GetFileType (hFile=0x230) returned 0x1 [0143.156] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.181] SetErrorMode (uMode=0x1) returned 0x0 [0143.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x535e1f, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x535e1f, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x57cc0026, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0143.181] SetErrorMode (uMode=0x0) returned 0x1 [0143.181] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\RecoveryStore.{3D88D67F-6818-11E7-9BD3-C40142ECDE47}.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\recoverystore.{3d88d67f-6818-11e7-9bd3-c40142ecde47}.dat.partially.cryptonar")) returned 1 [0143.183] SetErrorMode (uMode=0x1) returned 0x0 [0143.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.184] SetErrorMode (uMode=0x0) returned 0x1 [0143.184] GetFileType (hFile=0x230) returned 0x1 [0143.184] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.194] SetErrorMode (uMode=0x1) returned 0x0 [0143.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x725cd8, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x725cd8, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x57cc0026, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0143.194] SetErrorMode (uMode=0x0) returned 0x1 [0143.194] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AC\\MicrosoftEdge\\User\\Default\\Recovery\\Active\\{3D88D681-6818-11E7-9BD3-C40142ECDE47}.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\ac\\microsoftedge\\user\\default\\recovery\\active\\{3d88d681-6818-11e7-9bd3-c40142ecde47}.dat.partially.cryptonar")) returned 1 [0143.196] SetErrorMode (uMode=0x1) returned 0x0 [0143.196] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.200] SetErrorMode (uMode=0x0) returned 0x1 [0143.201] GetFileType (hFile=0x230) returned 0x1 [0143.201] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.213] SetErrorMode (uMode=0x1) returned 0x0 [0143.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb8593, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bb8593, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57d0d140, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.213] SetErrorMode (uMode=0x0) returned 0x1 [0143.213] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.chk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.chk.partially.cryptonar")) returned 1 [0143.215] SetErrorMode (uMode=0x1) returned 0x0 [0143.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.216] SetErrorMode (uMode=0x0) returned 0x1 [0143.216] GetFileType (hFile=0x230) returned 0x1 [0143.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.236] SetErrorMode (uMode=0x1) returned 0x0 [0143.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b89f42, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2b89f42, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57d32585, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0143.236] SetErrorMode (uMode=0x0) returned 0x1 [0143.236] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edb.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edb.log.partially.cryptonar")) returned 1 [0143.237] SetErrorMode (uMode=0x1) returned 0x0 [0143.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.238] SetErrorMode (uMode=0x0) returned 0x1 [0143.238] GetFileType (hFile=0x230) returned 0x1 [0143.238] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.240] SetErrorMode (uMode=0x1) returned 0x0 [0143.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2baaeaf, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2baaeaf, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57d32585, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0143.240] SetErrorMode (uMode=0x0) returned 0x1 [0143.241] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00001.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00001.jrs.partially.cryptonar")) returned 1 [0143.242] SetErrorMode (uMode=0x1) returned 0x0 [0143.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.242] SetErrorMode (uMode=0x0) returned 0x1 [0143.242] GetFileType (hFile=0x230) returned 0x1 [0143.242] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.244] SetErrorMode (uMode=0x1) returned 0x0 [0143.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb105e, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bb105e, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57d58742, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0143.244] SetErrorMode (uMode=0x0) returned 0x1 [0143.244] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbres00002.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbres00002.jrs.partially.cryptonar")) returned 1 [0143.245] SetErrorMode (uMode=0x1) returned 0x0 [0143.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.246] SetErrorMode (uMode=0x0) returned 0x1 [0143.246] GetFileType (hFile=0x230) returned 0x1 [0143.246] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.247] ReadFile (in: hFile=0x230, lpBuffer=0x26bfad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26bfad8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0143.477] SetErrorMode (uMode=0x1) returned 0x0 [0143.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b89f42, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2ba607d, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57f6e891, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0143.477] SetErrorMode (uMode=0x0) returned 0x1 [0143.477] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\edbtmp.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\edbtmp.log.partially.cryptonar")) returned 1 [0143.478] SetErrorMode (uMode=0x1) returned 0x0 [0143.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.479] SetErrorMode (uMode=0x0) returned 0x1 [0143.480] GetFileType (hFile=0x230) returned 0x1 [0143.480] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.489] SetErrorMode (uMode=0x1) returned 0x0 [0143.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2bcaa99, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x2bcaa99, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x57f949e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x280000)) returned 1 [0143.489] SetErrorMode (uMode=0x0) returned 0x1 [0143.489] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\AppData\\User\\Default\\Indexed DB\\IndexedDB.edb.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\appdata\\user\\default\\indexed db\\indexeddb.edb.partially.cryptonar")) returned 1 [0143.491] SetErrorMode (uMode=0x1) returned 0x0 [0143.491] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.494] SetErrorMode (uMode=0x0) returned 0x1 [0143.494] GetFileType (hFile=0x230) returned 0x1 [0143.494] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.496] SetErrorMode (uMode=0x1) returned 0x0 [0143.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x3389fe7, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x57fbad15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0143.496] SetErrorMode (uMode=0x0) returned 0x1 [0143.496] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0143.498] SetErrorMode (uMode=0x1) returned 0x0 [0143.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.499] SetErrorMode (uMode=0x0) returned 0x1 [0143.499] GetFileType (hFile=0x230) returned 0x1 [0143.499] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.501] SetErrorMode (uMode=0x1) returned 0x0 [0143.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1d03a0e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x57fbad15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd000)) returned 1 [0143.501] SetErrorMode (uMode=0x0) returned 0x1 [0143.501] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0143.503] SetErrorMode (uMode=0x1) returned 0x0 [0143.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.504] SetErrorMode (uMode=0x0) returned 0x1 [0143.504] GetFileType (hFile=0x230) returned 0x1 [0143.504] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.504] SetErrorMode (uMode=0x1) returned 0x0 [0143.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb1d03a0e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1d03a0e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1d03a0e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.504] SetErrorMode (uMode=0x0) returned 0x1 [0143.504] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Microsoft.MicrosoftEdge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0143.506] SetErrorMode (uMode=0x1) returned 0x0 [0143.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.509] SetErrorMode (uMode=0x0) returned 0x1 [0143.509] GetFileType (hFile=0x230) returned 0x1 [0143.509] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.509] SetErrorMode (uMode=0x1) returned 0x0 [0143.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b39dd1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb1b39dd1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb1b39dd1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.509] SetErrorMode (uMode=0x0) returned 0x1 [0143.509] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0143.511] SetErrorMode (uMode=0x1) returned 0x0 [0143.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.512] SetErrorMode (uMode=0x0) returned 0x1 [0143.512] GetFileType (hFile=0x230) returned 0x1 [0143.512] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.550] SetErrorMode (uMode=0x1) returned 0x0 [0143.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1b39dd1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x1794398a, ftLastAccessTime.dwHighDateTime=0x1d2fc21, ftLastWriteTime.dwLowDateTime=0x5802d529, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.550] SetErrorMode (uMode=0x0) returned 0x1 [0143.550] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0143.551] SetErrorMode (uMode=0x1) returned 0x0 [0143.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.552] SetErrorMode (uMode=0x0) returned 0x1 [0143.552] GetFileType (hFile=0x230) returned 0x1 [0143.552] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.596] SetErrorMode (uMode=0x1) returned 0x0 [0143.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x69b395f5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69b395f5, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5809fc06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.596] SetErrorMode (uMode=0x0) returned 0x1 [0143.596] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0143.597] SetErrorMode (uMode=0x1) returned 0x0 [0143.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.598] SetErrorMode (uMode=0x0) returned 0x1 [0143.598] GetFileType (hFile=0x230) returned 0x1 [0143.598] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.599] SetErrorMode (uMode=0x1) returned 0x0 [0143.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x69c4463c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69c4463c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x69c4463c, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.599] SetErrorMode (uMode=0x0) returned 0x1 [0143.599] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftedge_8wekyb3d8bbwe\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0143.600] SetErrorMode (uMode=0x1) returned 0x0 [0143.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.603] SetErrorMode (uMode=0x0) returned 0x1 [0143.603] GetFileType (hFile=0x230) returned 0x1 [0143.603] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.650] SetErrorMode (uMode=0x1) returned 0x0 [0143.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d7fb19b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1db1c3a3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x58138675, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0143.651] SetErrorMode (uMode=0x0) returned 0x1 [0143.651] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0143.652] SetErrorMode (uMode=0x1) returned 0x0 [0143.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.653] SetErrorMode (uMode=0x0) returned 0x1 [0143.653] GetFileType (hFile=0x230) returned 0x1 [0143.654] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.654] SetErrorMode (uMode=0x1) returned 0x0 [0143.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1d8477e8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d8477e8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1d8477e8, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.654] SetErrorMode (uMode=0x0) returned 0x1 [0143.654] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0143.655] SetErrorMode (uMode=0x1) returned 0x0 [0143.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.656] SetErrorMode (uMode=0x0) returned 0x1 [0143.656] GetFileType (hFile=0x230) returned 0x1 [0143.656] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.656] SetErrorMode (uMode=0x1) returned 0x0 [0143.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1d8477e8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d8477e8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1d8477e8, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.656] SetErrorMode (uMode=0x0) returned 0x1 [0143.656] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Microsoft.MicrosoftOfficeHub_17.4218.23751.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\microsoft.microsoftofficehub_17.4218.23751.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0143.658] SetErrorMode (uMode=0x1) returned 0x0 [0143.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.658] SetErrorMode (uMode=0x0) returned 0x1 [0143.659] GetFileType (hFile=0x230) returned 0x1 [0143.659] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.659] SetErrorMode (uMode=0x1) returned 0x0 [0143.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d015614, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d015614, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1d015614, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.659] SetErrorMode (uMode=0x0) returned 0x1 [0143.659] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0143.661] SetErrorMode (uMode=0x1) returned 0x0 [0143.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.661] SetErrorMode (uMode=0x0) returned 0x1 [0143.661] GetFileType (hFile=0x230) returned 0x1 [0143.662] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.663] SetErrorMode (uMode=0x1) returned 0x0 [0143.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cf568e9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1cf568e9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x58138675, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.664] SetErrorMode (uMode=0x0) returned 0x1 [0143.664] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftofficehub_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0143.665] SetErrorMode (uMode=0x1) returned 0x0 [0143.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.668] SetErrorMode (uMode=0x0) returned 0x1 [0143.668] GetFileType (hFile=0x230) returned 0x1 [0143.668] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.670] SetErrorMode (uMode=0x1) returned 0x0 [0143.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a256146, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a5772c9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5815e6d6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0143.670] SetErrorMode (uMode=0x0) returned 0x1 [0143.670] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0143.671] SetErrorMode (uMode=0x1) returned 0x0 [0143.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.673] SetErrorMode (uMode=0x0) returned 0x1 [0143.673] GetFileType (hFile=0x230) returned 0x1 [0143.673] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.682] SetErrorMode (uMode=0x1) returned 0x0 [0143.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a27c3a2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a27c3a2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x58184a51, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0143.683] SetErrorMode (uMode=0x0) returned 0x1 [0143.683] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0143.684] SetErrorMode (uMode=0x1) returned 0x0 [0143.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.685] SetErrorMode (uMode=0x0) returned 0x1 [0143.685] GetFileType (hFile=0x230) returned 0x1 [0143.685] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.685] SetErrorMode (uMode=0x1) returned 0x0 [0143.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a27c3a2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a27c3a2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1a27c3a2, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.685] SetErrorMode (uMode=0x0) returned 0x1 [0143.686] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Microsoft.MicrosoftSolitaireCollection_3.1.6103.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\microsoft.microsoftsolitairecollection_3.1.6103.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0143.686] SetErrorMode (uMode=0x1) returned 0x0 [0143.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.687] SetErrorMode (uMode=0x0) returned 0x1 [0143.687] GetFileType (hFile=0x230) returned 0x1 [0143.687] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.687] SetErrorMode (uMode=0x1) returned 0x0 [0143.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19c866f3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19c866f3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x19c866f3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.687] SetErrorMode (uMode=0x0) returned 0x1 [0143.687] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0143.688] SetErrorMode (uMode=0x1) returned 0x0 [0143.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.689] SetErrorMode (uMode=0x0) returned 0x1 [0143.689] GetFileType (hFile=0x230) returned 0x1 [0143.689] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.692] SetErrorMode (uMode=0x1) returned 0x0 [0143.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bedc2d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19bedc2d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x58184a51, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.692] SetErrorMode (uMode=0x0) returned 0x1 [0143.692] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.microsoftsolitairecollection_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0143.693] SetErrorMode (uMode=0x1) returned 0x0 [0143.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.696] SetErrorMode (uMode=0x0) returned 0x1 [0143.696] GetFileType (hFile=0x230) returned 0x1 [0143.696] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.696] SetErrorMode (uMode=0x1) returned 0x0 [0143.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccd87946, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xccd87946, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xccd87946, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.696] SetErrorMode (uMode=0x0) returned 0x1 [0143.696] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0143.697] SetErrorMode (uMode=0x1) returned 0x0 [0143.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.698] SetErrorMode (uMode=0x0) returned 0x1 [0143.698] GetFileType (hFile=0x230) returned 0x1 [0143.698] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.731] SetErrorMode (uMode=0x1) returned 0x0 [0143.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccc5666c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe4095b53, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x581f701a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.731] SetErrorMode (uMode=0x0) returned 0x1 [0143.731] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0143.733] SetErrorMode (uMode=0x1) returned 0x0 [0143.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.734] SetErrorMode (uMode=0x0) returned 0x1 [0143.734] GetFileType (hFile=0x230) returned 0x1 [0143.734] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.736] SetErrorMode (uMode=0x1) returned 0x0 [0143.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd0ced22, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd0ced22, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x581f701a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.736] SetErrorMode (uMode=0x0) returned 0x1 [0143.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0143.737] SetErrorMode (uMode=0x1) returned 0x0 [0143.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.738] SetErrorMode (uMode=0x0) returned 0x1 [0143.738] GetFileType (hFile=0x230) returned 0x1 [0143.738] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.738] SetErrorMode (uMode=0x1) returned 0x0 [0143.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd0ced22, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd0ced22, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd0ced22, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.738] SetErrorMode (uMode=0x0) returned 0x1 [0143.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Framework.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.framework.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0143.739] SetErrorMode (uMode=0x1) returned 0x0 [0143.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.742] SetErrorMode (uMode=0x0) returned 0x1 [0143.742] GetFileType (hFile=0x230) returned 0x1 [0143.742] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.742] SetErrorMode (uMode=0x1) returned 0x0 [0143.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca8ca29, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcca8ca29, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcca8ca29, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.742] SetErrorMode (uMode=0x0) returned 0x1 [0143.743] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0143.744] SetErrorMode (uMode=0x1) returned 0x0 [0143.744] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.744] SetErrorMode (uMode=0x0) returned 0x1 [0143.744] GetFileType (hFile=0x230) returned 0x1 [0143.744] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.746] SetErrorMode (uMode=0x1) returned 0x0 [0143.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcca8ca29, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe3baad39, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5821dce3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.746] SetErrorMode (uMode=0x0) returned 0x1 [0143.746] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0143.747] SetErrorMode (uMode=0x1) returned 0x0 [0143.747] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.748] SetErrorMode (uMode=0x0) returned 0x1 [0143.748] GetFileType (hFile=0x230) returned 0x1 [0143.748] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.752] SetErrorMode (uMode=0x1) returned 0x0 [0143.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xccb4b5e9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xccb4b5e9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5821dce3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.752] SetErrorMode (uMode=0x0) returned 0x1 [0143.752] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0143.754] SetErrorMode (uMode=0x1) returned 0x0 [0143.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.754] SetErrorMode (uMode=0x0) returned 0x1 [0143.754] GetFileType (hFile=0x230) returned 0x1 [0143.755] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.755] SetErrorMode (uMode=0x1) returned 0x0 [0143.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xccb4b5e9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xccb4b5e9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xccb4b5e9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.755] SetErrorMode (uMode=0x0) returned 0x1 [0143.755] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.NET.Native.Runtime.1.0_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.net.native.runtime.1.0_8wekyb3d8bbwe\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0143.756] SetErrorMode (uMode=0x1) returned 0x0 [0143.756] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.758] SetErrorMode (uMode=0x0) returned 0x1 [0143.758] GetFileType (hFile=0x230) returned 0x1 [0143.758] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.767] SetErrorMode (uMode=0x1) returned 0x0 [0143.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x179a7f88, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x17d87cb7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x582434ea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0143.767] SetErrorMode (uMode=0x0) returned 0x1 [0143.767] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0143.769] SetErrorMode (uMode=0x1) returned 0x0 [0143.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.770] SetErrorMode (uMode=0x0) returned 0x1 [0143.770] GetFileType (hFile=0x230) returned 0x1 [0143.770] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.770] SetErrorMode (uMode=0x1) returned 0x0 [0143.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x179f445c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x179f445c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x179f445c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.770] SetErrorMode (uMode=0x0) returned 0x1 [0143.771] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0143.772] SetErrorMode (uMode=0x1) returned 0x0 [0143.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.773] SetErrorMode (uMode=0x0) returned 0x1 [0143.773] GetFileType (hFile=0x230) returned 0x1 [0143.773] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.773] SetErrorMode (uMode=0x1) returned 0x0 [0143.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x179f445c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x179f445c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x179f445c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.786] SetErrorMode (uMode=0x0) returned 0x1 [0143.786] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Microsoft.Office.OneNote_17.4201.10091.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\microsoft.office.onenote_17.4201.10091.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0143.787] SetErrorMode (uMode=0x1) returned 0x0 [0143.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.788] SetErrorMode (uMode=0x0) returned 0x1 [0143.788] GetFileType (hFile=0x230) returned 0x1 [0143.788] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.788] SetErrorMode (uMode=0x1) returned 0x0 [0143.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16f5fccf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x16f5fccf, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x16f5fccf, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.788] SetErrorMode (uMode=0x0) returned 0x1 [0143.788] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0143.789] SetErrorMode (uMode=0x1) returned 0x0 [0143.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.790] SetErrorMode (uMode=0x0) returned 0x1 [0143.790] GetFileType (hFile=0x230) returned 0x1 [0143.790] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.802] SetErrorMode (uMode=0x1) returned 0x0 [0143.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ec721b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x16ec721b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5828fa35, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.802] SetErrorMode (uMode=0x0) returned 0x1 [0143.802] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Office.OneNote_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.office.onenote_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0143.803] SetErrorMode (uMode=0x1) returned 0x0 [0143.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.806] SetErrorMode (uMode=0x0) returned 0x1 [0143.806] GetFileType (hFile=0x230) returned 0x1 [0143.806] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.808] SetErrorMode (uMode=0x1) returned 0x0 [0143.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x140e1cb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1450df63, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x582b5d63, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0143.808] SetErrorMode (uMode=0x0) returned 0x1 [0143.808] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0143.809] SetErrorMode (uMode=0x1) returned 0x0 [0143.809] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.810] SetErrorMode (uMode=0x0) returned 0x1 [0143.810] GetFileType (hFile=0x230) returned 0x1 [0143.810] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.825] SetErrorMode (uMode=0x1) returned 0x0 [0143.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1417a5f3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1417a5f3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x582dbf74, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0143.825] SetErrorMode (uMode=0x0) returned 0x1 [0143.825] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0143.827] SetErrorMode (uMode=0x1) returned 0x0 [0143.827] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.828] SetErrorMode (uMode=0x0) returned 0x1 [0143.828] GetFileType (hFile=0x230) returned 0x1 [0143.828] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.828] SetErrorMode (uMode=0x1) returned 0x0 [0143.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1417a5f3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1417a5f3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1417a5f3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.828] SetErrorMode (uMode=0x0) returned 0x1 [0143.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Microsoft.People_1.10159.0.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\microsoft.people_1.10159.0.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0143.829] SetErrorMode (uMode=0x1) returned 0x0 [0143.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.830] SetErrorMode (uMode=0x0) returned 0x1 [0143.830] GetFileType (hFile=0x230) returned 0x1 [0143.830] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.830] SetErrorMode (uMode=0x1) returned 0x0 [0143.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12eb3d1f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x12eb3d1f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x12eb3d1f, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.830] SetErrorMode (uMode=0x0) returned 0x1 [0143.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0143.831] SetErrorMode (uMode=0x1) returned 0x0 [0143.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.833] SetErrorMode (uMode=0x0) returned 0x1 [0143.833] GetFileType (hFile=0x230) returned 0x1 [0143.833] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.834] SetErrorMode (uMode=0x1) returned 0x0 [0143.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12e1b3d4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x12e1b3d4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x582dbf74, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.835] SetErrorMode (uMode=0x0) returned 0x1 [0143.835] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.People_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.people_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0143.836] SetErrorMode (uMode=0x1) returned 0x0 [0143.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.839] SetErrorMode (uMode=0x0) returned 0x1 [0143.839] GetFileType (hFile=0x230) returned 0x1 [0143.839] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.861] SetErrorMode (uMode=0x1) returned 0x0 [0143.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c35299, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe5120117, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x58328f8e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.861] SetErrorMode (uMode=0x0) returned 0x1 [0143.862] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0143.863] SetErrorMode (uMode=0x1) returned 0x0 [0143.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.864] SetErrorMode (uMode=0x0) returned 0x1 [0143.864] GetFileType (hFile=0x230) returned 0x1 [0143.864] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.893] SetErrorMode (uMode=0x1) returned 0x0 [0143.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe4c5b540, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4c5b540, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x583748bf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.893] SetErrorMode (uMode=0x0) returned 0x1 [0143.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0143.895] SetErrorMode (uMode=0x1) returned 0x0 [0143.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.896] SetErrorMode (uMode=0x0) returned 0x1 [0143.896] GetFileType (hFile=0x230) returned 0x1 [0143.896] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.896] SetErrorMode (uMode=0x1) returned 0x0 [0143.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe4ccdc4b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4ccdc4b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe4ccdc4b, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.896] SetErrorMode (uMode=0x0) returned 0x1 [0143.896] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Microsoft.SkypeApp_3.2.1.0_x86__kzf8qxf38zg5c\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\microsoft.skypeapp_3.2.1.0_x86__kzf8qxf38zg5c\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0143.898] SetErrorMode (uMode=0x1) returned 0x0 [0143.898] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.899] SetErrorMode (uMode=0x0) returned 0x1 [0143.899] GetFileType (hFile=0x230) returned 0x1 [0143.899] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.900] SetErrorMode (uMode=0x1) returned 0x0 [0143.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe449bc25, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe449bc25, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe449bc25, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.900] SetErrorMode (uMode=0x0) returned 0x1 [0143.900] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0143.901] SetErrorMode (uMode=0x1) returned 0x0 [0143.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.902] SetErrorMode (uMode=0x0) returned 0x1 [0143.902] GetFileType (hFile=0x230) returned 0x1 [0143.902] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.915] SetErrorMode (uMode=0x1) returned 0x0 [0143.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4403165, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4403165, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x583c0cea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.915] SetErrorMode (uMode=0x0) returned 0x1 [0143.915] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.SkypeApp_kzf8qxf38zg5c\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.skypeapp_kzf8qxf38zg5c\\settings\\settings.dat.partially.cryptonar")) returned 1 [0143.916] SetErrorMode (uMode=0x1) returned 0x0 [0143.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.919] SetErrorMode (uMode=0x0) returned 0x1 [0143.919] GetFileType (hFile=0x230) returned 0x1 [0143.919] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.920] SetErrorMode (uMode=0x1) returned 0x0 [0143.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1ffff5, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd1ffff5, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd1ffff5, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.920] SetErrorMode (uMode=0x0) returned 0x1 [0143.920] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0143.921] SetErrorMode (uMode=0x1) returned 0x0 [0143.921] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.922] SetErrorMode (uMode=0x0) returned 0x1 [0143.922] GetFileType (hFile=0x230) returned 0x1 [0143.922] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.924] SetErrorMode (uMode=0x1) returned 0x0 [0143.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd1d9d90, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7dfe009b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x583c0cea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.925] SetErrorMode (uMode=0x0) returned 0x1 [0143.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0143.927] SetErrorMode (uMode=0x1) returned 0x0 [0143.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.928] SetErrorMode (uMode=0x0) returned 0x1 [0143.928] GetFileType (hFile=0x230) returned 0x1 [0143.928] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.930] SetErrorMode (uMode=0x1) returned 0x0 [0143.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd2bebc7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd2bebc7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x583e6ecf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.931] SetErrorMode (uMode=0x0) returned 0x1 [0143.931] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0143.933] SetErrorMode (uMode=0x1) returned 0x0 [0143.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.934] SetErrorMode (uMode=0x0) returned 0x1 [0143.935] GetFileType (hFile=0x230) returned 0x1 [0143.935] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.935] SetErrorMode (uMode=0x1) returned 0x0 [0143.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcd2bebc7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcd2bebc7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcd2bebc7, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.935] SetErrorMode (uMode=0x0) returned 0x1 [0143.935] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.VCLibs.140.00_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.vclibs.140.00_8wekyb3d8bbwe\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0143.937] SetErrorMode (uMode=0x1) returned 0x0 [0143.937] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.940] SetErrorMode (uMode=0x0) returned 0x1 [0143.940] GetFileType (hFile=0x230) returned 0x1 [0143.940] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.946] SetErrorMode (uMode=0x1) returned 0x0 [0143.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3af73a7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3d33705, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5840d0e4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.946] SetErrorMode (uMode=0x0) returned 0x1 [0143.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0143.948] SetErrorMode (uMode=0x1) returned 0x0 [0143.948] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.950] SetErrorMode (uMode=0x0) returned 0x1 [0143.950] GetFileType (hFile=0x230) returned 0x1 [0143.950] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.962] SetErrorMode (uMode=0x1) returned 0x0 [0143.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb3b1d5e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3b1d5e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x584334c1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.962] SetErrorMode (uMode=0x0) returned 0x1 [0143.962] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0143.964] SetErrorMode (uMode=0x1) returned 0x0 [0143.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.966] SetErrorMode (uMode=0x0) returned 0x1 [0143.966] GetFileType (hFile=0x230) returned 0x1 [0143.966] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.966] SetErrorMode (uMode=0x1) returned 0x0 [0143.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb3b1d5e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb3b1d5e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb3b1d5e4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.966] SetErrorMode (uMode=0x0) returned 0x1 [0143.966] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Microsoft.Windows.AssignedAccessLockApp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\microsoft.windows.assignedaccesslockapp_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0143.968] SetErrorMode (uMode=0x1) returned 0x0 [0143.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.971] SetErrorMode (uMode=0x0) returned 0x1 [0143.971] GetFileType (hFile=0x230) returned 0x1 [0143.971] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0143.971] SetErrorMode (uMode=0x1) returned 0x0 [0143.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2666e80, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb2666e80, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb2666e80, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.971] SetErrorMode (uMode=0x0) returned 0x1 [0143.971] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0143.973] SetErrorMode (uMode=0x1) returned 0x0 [0143.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0143.974] SetErrorMode (uMode=0x0) returned 0x1 [0143.974] GetFileType (hFile=0x230) returned 0x1 [0143.974] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.021] SetErrorMode (uMode=0x1) returned 0x0 [0144.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2640c1e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6a9c106a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x584a5c19, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0144.022] SetErrorMode (uMode=0x0) returned 0x1 [0144.022] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0144.024] SetErrorMode (uMode=0x1) returned 0x0 [0144.024] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.025] SetErrorMode (uMode=0x0) returned 0x1 [0144.025] GetFileType (hFile=0x230) returned 0x1 [0144.025] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.031] SetErrorMode (uMode=0x1) returned 0x0 [0144.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6a90234c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6a90234c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x584cc92f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0144.032] SetErrorMode (uMode=0x0) returned 0x1 [0144.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0144.033] SetErrorMode (uMode=0x1) returned 0x0 [0144.033] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.034] SetErrorMode (uMode=0x0) returned 0x1 [0144.034] GetFileType (hFile=0x230) returned 0x1 [0144.035] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.035] SetErrorMode (uMode=0x1) returned 0x0 [0144.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6a90234c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6a90234c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6a90234c, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.035] SetErrorMode (uMode=0x0) returned 0x1 [0144.035] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.assignedaccesslockapp_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0144.036] SetErrorMode (uMode=0x1) returned 0x0 [0144.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.038] SetErrorMode (uMode=0x0) returned 0x1 [0144.038] GetFileType (hFile=0x230) returned 0x1 [0144.038] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.038] SetErrorMode (uMode=0x1) returned 0x0 [0144.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.038] SetErrorMode (uMode=0x0) returned 0x1 [0144.038] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\container.dat.partially.cryptonar")) returned 1 [0144.048] SetErrorMode (uMode=0x1) returned 0x0 [0144.048] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.049] SetErrorMode (uMode=0x0) returned 0x1 [0144.049] GetFileType (hFile=0x230) returned 0x1 [0144.049] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.050] SetErrorMode (uMode=0x1) returned 0x0 [0144.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.050] SetErrorMode (uMode=0x0) returned 0x1 [0144.050] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\AppCache\\7CSZDG21\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\appcache\\7cszdg21\\container.dat.partially.cryptonar")) returned 1 [0144.051] SetErrorMode (uMode=0x1) returned 0x0 [0144.051] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.055] SetErrorMode (uMode=0x0) returned 0x1 [0144.055] GetFileType (hFile=0x230) returned 0x1 [0144.055] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.055] SetErrorMode (uMode=0x1) returned 0x0 [0144.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe5c47094, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe5c47094, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe5c47094, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.055] SetErrorMode (uMode=0x0) returned 0x1 [0144.055] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcache\\container.dat.partially.cryptonar")) returned 1 [0144.057] SetErrorMode (uMode=0x1) returned 0x0 [0144.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.058] SetErrorMode (uMode=0x0) returned 0x1 [0144.058] GetFileType (hFile=0x230) returned 0x1 [0144.058] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.058] SetErrorMode (uMode=0x1) returned 0x0 [0144.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe67eb057, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe67eb057, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe67eb057, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.058] SetErrorMode (uMode=0x0) returned 0x1 [0144.058] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.partially.cryptonar")) returned 1 [0144.060] SetErrorMode (uMode=0x1) returned 0x0 [0144.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.062] SetErrorMode (uMode=0x0) returned 0x1 [0144.062] GetFileType (hFile=0x230) returned 0x1 [0144.063] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.063] SetErrorMode (uMode=0x1) returned 0x0 [0144.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c89995, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c89995, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.063] SetErrorMode (uMode=0x0) returned 0x1 [0144.063] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0144.064] SetErrorMode (uMode=0x1) returned 0x0 [0144.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.065] SetErrorMode (uMode=0x0) returned 0x1 [0144.065] GetFileType (hFile=0x230) returned 0x1 [0144.066] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.066] SetErrorMode (uMode=0x1) returned 0x0 [0144.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6c3d4ea, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.066] SetErrorMode (uMode=0x0) returned 0x1 [0144.066] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0144.067] SetErrorMode (uMode=0x1) returned 0x0 [0144.067] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.068] SetErrorMode (uMode=0x0) returned 0x1 [0144.068] GetFileType (hFile=0x230) returned 0x1 [0144.068] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.084] SetErrorMode (uMode=0x1) returned 0x0 [0144.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c17295, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c17295, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x5853e447, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0144.084] SetErrorMode (uMode=0x0) returned 0x1 [0144.084] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873.partially.cryptonar")) returned 1 [0144.086] SetErrorMode (uMode=0x1) returned 0x0 [0144.086] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.094] SetErrorMode (uMode=0x0) returned 0x1 [0144.094] GetFileType (hFile=0x230) returned 0x1 [0144.094] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.097] SetErrorMode (uMode=0x1) returned 0x0 [0144.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe73075db, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe73075db, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x58564d43, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0144.098] SetErrorMode (uMode=0x0) returned 0x1 [0144.098] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf.partially.cryptonar")) returned 1 [0144.099] SetErrorMode (uMode=0x1) returned 0x0 [0144.100] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.101] SetErrorMode (uMode=0x0) returned 0x1 [0144.101] GetFileType (hFile=0x230) returned 0x1 [0144.101] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.101] SetErrorMode (uMode=0x1) returned 0x0 [0144.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6cafbe7, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6cafbe7, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0xe6cafbe7, ftLastWriteTime.dwHighDateTime=0x1d2d439, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.101] SetErrorMode (uMode=0x0) returned 0x1 [0144.101] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0144.103] SetErrorMode (uMode=0x1) returned 0x0 [0144.103] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.107] SetErrorMode (uMode=0x0) returned 0x1 [0144.107] GetFileType (hFile=0x230) returned 0x1 [0144.107] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.109] SetErrorMode (uMode=0x1) returned 0x0 [0144.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x5858a90c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0144.109] SetErrorMode (uMode=0x0) returned 0x1 [0144.109] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0144.112] SetErrorMode (uMode=0x1) returned 0x0 [0144.112] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.113] SetErrorMode (uMode=0x0) returned 0x1 [0144.113] GetFileType (hFile=0x230) returned 0x1 [0144.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.114] SetErrorMode (uMode=0x1) returned 0x0 [0144.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c3d4ea, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c3d4ea, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x5858a90c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0144.114] SetErrorMode (uMode=0x0) returned 0x1 [0144.114] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0144.116] SetErrorMode (uMode=0x1) returned 0x0 [0144.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.117] SetErrorMode (uMode=0x0) returned 0x1 [0144.118] GetFileType (hFile=0x230) returned 0x1 [0144.118] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.119] SetErrorMode (uMode=0x1) returned 0x0 [0144.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6c17295, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6c17295, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x585b0b91, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0144.119] SetErrorMode (uMode=0x0) returned 0x1 [0144.119] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873.partially.cryptonar")) returned 1 [0144.120] SetErrorMode (uMode=0x1) returned 0x0 [0144.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.122] SetErrorMode (uMode=0x0) returned 0x1 [0144.122] GetFileType (hFile=0x230) returned 0x1 [0144.122] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.123] SetErrorMode (uMode=0x1) returned 0x0 [0144.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe7306252, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe7306252, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x585b0b91, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0144.123] SetErrorMode (uMode=0x0) returned 0x1 [0144.123] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf.partially.cryptonar")) returned 1 [0144.124] SetErrorMode (uMode=0x1) returned 0x0 [0144.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.125] SetErrorMode (uMode=0x0) returned 0x1 [0144.125] GetFileType (hFile=0x230) returned 0x1 [0144.125] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.126] SetErrorMode (uMode=0x1) returned 0x0 [0144.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe6cafbe7, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe6cafbe7, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x585b0b91, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0144.127] SetErrorMode (uMode=0x0) returned 0x1 [0144.127] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0144.128] SetErrorMode (uMode=0x1) returned 0x0 [0144.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3705566220\\624664733.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.129] SetErrorMode (uMode=0x0) returned 0x1 [0144.129] GetFileType (hFile=0x230) returned 0x1 [0144.129] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.147] SetErrorMode (uMode=0x1) returned 0x0 [0144.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3705566220\\624664733.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5a03174, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe5a03174, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x585d6dc1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1fc8)) returned 1 [0144.151] SetErrorMode (uMode=0x0) returned 0x1 [0144.155] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3705566220\\624664733.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3705566220\\624664733.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3705566220\\624664733.pri.partially.cryptonar")) returned 1 [0144.156] SetErrorMode (uMode=0x1) returned 0x0 [0144.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.160] SetErrorMode (uMode=0x0) returned 0x1 [0144.160] GetFileType (hFile=0x230) returned 0x1 [0144.160] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.162] SetErrorMode (uMode=0x1) returned 0x0 [0144.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb033c27f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x6cdd338, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x58603fd1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0144.163] SetErrorMode (uMode=0x0) returned 0x1 [0144.163] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0144.165] SetErrorMode (uMode=0x1) returned 0x0 [0144.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.168] SetErrorMode (uMode=0x0) returned 0x1 [0144.168] GetFileType (hFile=0x230) returned 0x1 [0144.168] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.177] SetErrorMode (uMode=0x1) returned 0x0 [0144.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb03624ee, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb03624ee, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58625e48, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0144.178] SetErrorMode (uMode=0x0) returned 0x1 [0144.178] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0144.180] SetErrorMode (uMode=0x1) returned 0x0 [0144.180] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.181] SetErrorMode (uMode=0x0) returned 0x1 [0144.181] GetFileType (hFile=0x230) returned 0x1 [0144.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.182] SetErrorMode (uMode=0x1) returned 0x0 [0144.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb03624ee, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb03624ee, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb03624ee, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.182] SetErrorMode (uMode=0x0) returned 0x1 [0144.182] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.CloudExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0144.183] SetErrorMode (uMode=0x1) returned 0x0 [0144.184] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.186] SetErrorMode (uMode=0x0) returned 0x1 [0144.186] GetFileType (hFile=0x230) returned 0x1 [0144.186] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.186] SetErrorMode (uMode=0x1) returned 0x0 [0144.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb027d6c9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb027d6c9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb027d6c9, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.187] SetErrorMode (uMode=0x0) returned 0x1 [0144.187] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0144.188] SetErrorMode (uMode=0x1) returned 0x0 [0144.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.189] SetErrorMode (uMode=0x0) returned 0x1 [0144.189] GetFileType (hFile=0x230) returned 0x1 [0144.189] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.218] SetErrorMode (uMode=0x1) returned 0x0 [0144.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb027d6c9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x70bd043, ftLastAccessTime.dwHighDateTime=0x1d2d446, ftLastWriteTime.dwLowDateTime=0x586958d4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0144.218] SetErrorMode (uMode=0x0) returned 0x1 [0144.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0144.220] SetErrorMode (uMode=0x1) returned 0x0 [0144.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.221] SetErrorMode (uMode=0x0) returned 0x1 [0144.221] GetFileType (hFile=0x230) returned 0x1 [0144.221] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.222] SetErrorMode (uMode=0x1) returned 0x0 [0144.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6aa33640, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6aa33640, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x586958d4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0144.223] SetErrorMode (uMode=0x0) returned 0x1 [0144.223] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0144.224] SetErrorMode (uMode=0x1) returned 0x0 [0144.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.225] SetErrorMode (uMode=0x0) returned 0x1 [0144.226] GetFileType (hFile=0x230) returned 0x1 [0144.226] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.226] SetErrorMode (uMode=0x1) returned 0x0 [0144.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6aa33640, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6aa33640, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x6aa33640, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.226] SetErrorMode (uMode=0x0) returned 0x1 [0144.226] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cloudexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0144.228] SetErrorMode (uMode=0x1) returned 0x0 [0144.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.231] SetErrorMode (uMode=0x0) returned 0x1 [0144.231] GetFileType (hFile=0x230) returned 0x1 [0144.231] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.231] SetErrorMode (uMode=0x1) returned 0x0 [0144.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc60afa72, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc60afa72, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc60afa72, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.231] SetErrorMode (uMode=0x0) returned 0x1 [0144.232] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcache\\container.dat.partially.cryptonar")) returned 1 [0144.233] SetErrorMode (uMode=0x1) returned 0x0 [0144.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.234] SetErrorMode (uMode=0x0) returned 0x1 [0144.234] GetFileType (hFile=0x230) returned 0x1 [0144.234] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.234] SetErrorMode (uMode=0x1) returned 0x0 [0144.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6122008, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc6122008, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc6122008, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.234] SetErrorMode (uMode=0x0) returned 0x1 [0144.234] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.partially.cryptonar")) returned 1 [0144.236] SetErrorMode (uMode=0x1) returned 0x0 [0144.236] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.236] SetErrorMode (uMode=0x0) returned 0x1 [0144.237] GetFileType (hFile=0x230) returned 0x1 [0144.237] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.237] SetErrorMode (uMode=0x1) returned 0x0 [0144.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6ed78de, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc6ed78de, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc6ed78de, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.237] SetErrorMode (uMode=0x0) returned 0x1 [0144.237] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat.partially.cryptonar")) returned 1 [0144.239] SetErrorMode (uMode=0x1) returned 0x0 [0144.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.242] SetErrorMode (uMode=0x0) returned 0x1 [0144.242] GetFileType (hFile=0x230) returned 0x1 [0144.242] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.253] SetErrorMode (uMode=0x1) returned 0x0 [0144.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc63f6e53, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc63f6e53, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x586e23a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0144.253] SetErrorMode (uMode=0x0) returned 0x1 [0144.253] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0144.255] SetErrorMode (uMode=0x1) returned 0x0 [0144.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.256] SetErrorMode (uMode=0x0) returned 0x1 [0144.256] GetFileType (hFile=0x230) returned 0x1 [0144.256] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.256] SetErrorMode (uMode=0x1) returned 0x0 [0144.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc64b58c9, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.256] SetErrorMode (uMode=0x0) returned 0x1 [0144.256] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0144.258] SetErrorMode (uMode=0x1) returned 0x0 [0144.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.259] SetErrorMode (uMode=0x0) returned 0x1 [0144.259] GetFileType (hFile=0x230) returned 0x1 [0144.259] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.259] SetErrorMode (uMode=0x1) returned 0x0 [0144.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc648f76f, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.259] SetErrorMode (uMode=0x0) returned 0x1 [0144.259] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0144.261] SetErrorMode (uMode=0x1) returned 0x0 [0144.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.262] SetErrorMode (uMode=0x0) returned 0x1 [0144.262] GetFileType (hFile=0x230) returned 0x1 [0144.262] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.274] SetErrorMode (uMode=0x1) returned 0x0 [0144.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa48ace9c, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa48ace9c, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x5872e26d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0144.274] SetErrorMode (uMode=0x0) returned 0x1 [0144.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be.partially.cryptonar")) returned 1 [0144.276] SetErrorMode (uMode=0x1) returned 0x0 [0144.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.278] SetErrorMode (uMode=0x0) returned 0x1 [0144.278] GetFileType (hFile=0x230) returned 0x1 [0144.278] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.288] SetErrorMode (uMode=0x1) returned 0x0 [0144.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa47a1dc4, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa47a1dc4, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x5872e26d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0144.288] SetErrorMode (uMode=0x0) returned 0x1 [0144.288] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed.partially.cryptonar")) returned 1 [0144.290] SetErrorMode (uMode=0x1) returned 0x0 [0144.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.291] SetErrorMode (uMode=0x0) returned 0x1 [0144.291] GetFileType (hFile=0x230) returned 0x1 [0144.291] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.292] SetErrorMode (uMode=0x1) returned 0x0 [0144.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc64b58c9, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc64b58c9, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0xc64b58c9, ftLastWriteTime.dwHighDateTime=0x1d2d40c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.292] SetErrorMode (uMode=0x0) returned 0x1 [0144.292] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0144.294] SetErrorMode (uMode=0x1) returned 0x0 [0144.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.297] SetErrorMode (uMode=0x0) returned 0x1 [0144.297] GetFileType (hFile=0x230) returned 0x1 [0144.297] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.298] SetErrorMode (uMode=0x1) returned 0x0 [0144.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc63f6e53, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc63f6e53, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x5875448b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0144.298] SetErrorMode (uMode=0x0) returned 0x1 [0144.299] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0144.300] SetErrorMode (uMode=0x1) returned 0x0 [0144.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.301] SetErrorMode (uMode=0x0) returned 0x1 [0144.301] GetFileType (hFile=0x230) returned 0x1 [0144.301] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.303] SetErrorMode (uMode=0x1) returned 0x0 [0144.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x5875448b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0144.303] SetErrorMode (uMode=0x0) returned 0x1 [0144.303] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0144.305] SetErrorMode (uMode=0x1) returned 0x0 [0144.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.307] SetErrorMode (uMode=0x0) returned 0x1 [0144.307] GetFileType (hFile=0x230) returned 0x1 [0144.307] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.308] SetErrorMode (uMode=0x1) returned 0x0 [0144.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc648f76f, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc648f76f, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x5877c16f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0144.308] SetErrorMode (uMode=0x0) returned 0x1 [0144.308] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0144.309] SetErrorMode (uMode=0x1) returned 0x0 [0144.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.310] SetErrorMode (uMode=0x0) returned 0x1 [0144.310] GetFileType (hFile=0x230) returned 0x1 [0144.310] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.311] SetErrorMode (uMode=0x1) returned 0x0 [0144.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa48ace9c, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa48ace9c, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x5877c16f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18c)) returned 1 [0144.311] SetErrorMode (uMode=0x0) returned 0x1 [0144.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_8C550960E440B9C3B93A6A0AA915C9BE.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_8c550960e440b9c3b93a6a0aa915c9be.partially.cryptonar")) returned 1 [0144.312] SetErrorMode (uMode=0x1) returned 0x0 [0144.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.314] SetErrorMode (uMode=0x0) returned 0x1 [0144.314] GetFileType (hFile=0x230) returned 0x1 [0144.314] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.315] SetErrorMode (uMode=0x1) returned 0x0 [0144.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa47a1dc4, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa47a1dc4, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x5877c16f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ea)) returned 1 [0144.315] SetErrorMode (uMode=0x0) returned 0x1 [0144.315] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_230101012E1733B3199F7763353FFFED.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_230101012e1733b3199f7763353fffed.partially.cryptonar")) returned 1 [0144.340] SetErrorMode (uMode=0x1) returned 0x0 [0144.340] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.341] SetErrorMode (uMode=0x0) returned 0x1 [0144.341] GetFileType (hFile=0x230) returned 0x1 [0144.341] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.342] SetErrorMode (uMode=0x1) returned 0x0 [0144.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc64b58c9, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc64b58c9, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x587c6b6b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0144.342] SetErrorMode (uMode=0x0) returned 0x1 [0144.342] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0144.343] SetErrorMode (uMode=0x1) returned 0x0 [0144.343] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\2577507833\\3967450640.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.344] SetErrorMode (uMode=0x0) returned 0x1 [0144.344] GetFileType (hFile=0x230) returned 0x1 [0144.344] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.347] SetErrorMode (uMode=0x1) returned 0x0 [0144.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\2577507833\\3967450640.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc67fcce1, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc67fcce1, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x587c6b6b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0144.347] SetErrorMode (uMode=0x0) returned 0x1 [0144.347] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\2577507833\\3967450640.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2577507833\\3967450640.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\ac\\microsoft\\windows\\2577507833\\3967450640.pri.partially.cryptonar")) returned 1 [0144.349] SetErrorMode (uMode=0x1) returned 0x0 [0144.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.352] SetErrorMode (uMode=0x0) returned 0x1 [0144.352] GetFileType (hFile=0x230) returned 0x1 [0144.352] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.359] SetErrorMode (uMode=0x1) returned 0x0 [0144.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x587ece2b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ec)) returned 1 [0144.360] SetErrorMode (uMode=0x0) returned 0x1 [0144.360] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\001107b94f5293b397165f26d15a256e62b7d4a8a9228f3093ac37da2be5b24f.partially.cryptonar")) returned 1 [0144.361] SetErrorMode (uMode=0x1) returned 0x0 [0144.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.363] SetErrorMode (uMode=0x0) returned 0x1 [0144.363] GetFileType (hFile=0x230) returned 0x1 [0144.363] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.366] SetErrorMode (uMode=0x1) returned 0x0 [0144.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x587ece2b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x310a8)) returned 1 [0144.366] SetErrorMode (uMode=0x0) returned 0x1 [0144.366] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2bed4133f7a5cd078ac3c621dfa8e6362121ce0928c026612a1f1ddf4f99a370.partially.cryptonar")) returned 1 [0144.369] SetErrorMode (uMode=0x1) returned 0x0 [0144.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.370] SetErrorMode (uMode=0x0) returned 0x1 [0144.370] GetFileType (hFile=0x230) returned 0x1 [0144.370] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.378] SetErrorMode (uMode=0x1) returned 0x0 [0144.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43e8183, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43e8183, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x588130a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4219)) returned 1 [0144.379] SetErrorMode (uMode=0x0) returned 0x1 [0144.379] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\2d8669052d2b7df8dd4b9607f2379c68aea752aafe0def6d5ce226264835a7ca.partially.cryptonar")) returned 1 [0144.381] SetErrorMode (uMode=0x1) returned 0x0 [0144.381] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.382] SetErrorMode (uMode=0x0) returned 0x1 [0144.382] GetFileType (hFile=0x230) returned 0x1 [0144.382] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.399] SetErrorMode (uMode=0x1) returned 0x0 [0144.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x58860ddd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x477)) returned 1 [0144.399] SetErrorMode (uMode=0x0) returned 0x1 [0144.399] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a53c604f9aa7fa34010083e9e398486423e851c704b4d50043aaf2a8574d9b2.partially.cryptonar")) returned 1 [0144.401] SetErrorMode (uMode=0x1) returned 0x0 [0144.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.402] SetErrorMode (uMode=0x0) returned 0x1 [0144.402] GetFileType (hFile=0x230) returned 0x1 [0144.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.415] SetErrorMode (uMode=0x1) returned 0x0 [0144.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43c1f1e, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43c1f1e, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x5888589c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4bb9)) returned 1 [0144.415] SetErrorMode (uMode=0x0) returned 0x1 [0144.415] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\3a65241e49133a96904d70724844acb053dc753d3ab27f93e89f8059cbccdb92.partially.cryptonar")) returned 1 [0144.417] SetErrorMode (uMode=0x1) returned 0x0 [0144.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.418] SetErrorMode (uMode=0x0) returned 0x1 [0144.418] GetFileType (hFile=0x230) returned 0x1 [0144.418] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.419] SetErrorMode (uMode=0x1) returned 0x0 [0144.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42dd0ab, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42dd0ab, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x5888589c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x477)) returned 1 [0144.420] SetErrorMode (uMode=0x0) returned 0x1 [0144.420] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\440989d816ce3a311a914b13a22ba992f95690849d761ffa5caab5959db0c921.partially.cryptonar")) returned 1 [0144.421] SetErrorMode (uMode=0x1) returned 0x0 [0144.421] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.422] SetErrorMode (uMode=0x0) returned 0x1 [0144.422] GetFileType (hFile=0x230) returned 0x1 [0144.422] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.424] SetErrorMode (uMode=0x1) returned 0x0 [0144.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa439bcb0, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa439bcb0, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x5888589c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x477)) returned 1 [0144.424] SetErrorMode (uMode=0x0) returned 0x1 [0144.424] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\7053f8c6068c46e40f1016f56c5a556103340ef5fe7752801b7744069ae0f861.partially.cryptonar")) returned 1 [0144.426] SetErrorMode (uMode=0x1) returned 0x0 [0144.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.427] SetErrorMode (uMode=0x0) returned 0x1 [0144.427] GetFileType (hFile=0x230) returned 0x1 [0144.427] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.429] SetErrorMode (uMode=0x1) returned 0x0 [0144.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43c1f1e, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa43c1f1e, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x5888589c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x475d)) returned 1 [0144.429] SetErrorMode (uMode=0x0) returned 0x1 [0144.429] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\8567d7efc6dd43319b076ebebb98cc2abd2520838a9ebd41597e4052b4bd2a22.partially.cryptonar")) returned 1 [0144.431] SetErrorMode (uMode=0x1) returned 0x0 [0144.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.432] SetErrorMode (uMode=0x0) returned 0x1 [0144.432] GetFileType (hFile=0x230) returned 0x1 [0144.432] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.434] SetErrorMode (uMode=0x1) returned 0x0 [0144.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa426a964, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa426a964, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x588aba44, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x477)) returned 1 [0144.434] SetErrorMode (uMode=0x0) returned 0x1 [0144.434] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\86f03f60d39829e5fba5aa195da9eedb1ad88e99410bf7fa169d1558aaf35bdd.partially.cryptonar")) returned 1 [0144.436] SetErrorMode (uMode=0x1) returned 0x0 [0144.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.437] SetErrorMode (uMode=0x0) returned 0x1 [0144.437] GetFileType (hFile=0x230) returned 0x1 [0144.437] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.450] SetErrorMode (uMode=0x1) returned 0x0 [0144.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4290bcf, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa4290bcf, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x588d1d38, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x41b4)) returned 1 [0144.451] SetErrorMode (uMode=0x0) returned 0x1 [0144.451] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\91dd86d2e068177d1504451bc4f923d177183c305ba3a521ebe87a3ca889ed90.partially.cryptonar")) returned 1 [0144.453] SetErrorMode (uMode=0x1) returned 0x0 [0144.453] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.454] SetErrorMode (uMode=0x0) returned 0x1 [0144.454] GetFileType (hFile=0x230) returned 0x1 [0144.454] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.466] SetErrorMode (uMode=0x1) returned 0x0 [0144.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa42b6e49, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa42b6e49, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x588fafbe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5a8c)) returned 1 [0144.466] SetErrorMode (uMode=0x0) returned 0x1 [0144.466] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\d6f3a2f0c0f5d4ad6cab70713323cac7710e91ff13667b2200b6b800881ac10f.partially.cryptonar")) returned 1 [0144.467] SetErrorMode (uMode=0x1) returned 0x0 [0144.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.469] SetErrorMode (uMode=0x0) returned 0x1 [0144.469] GetFileType (hFile=0x230) returned 0x1 [0144.469] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.613] SetErrorMode (uMode=0x1) returned 0x0 [0144.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4290bcf, ftCreationTime.dwHighDateTime=0x1d2fadb, ftLastAccessTime.dwLowDateTime=0xa4290bcf, ftLastAccessTime.dwHighDateTime=0x1d2fadb, ftLastWriteTime.dwLowDateTime=0x58a4f5ee, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x475c)) returned 1 [0144.613] SetErrorMode (uMode=0x0) returned 0x1 [0144.613] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\Assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\assets\\f7df316937e894c20be9f8a6fc118847e60ea2dfe33cc1924f24346307e2b268.partially.cryptonar")) returned 1 [0144.615] SetErrorMode (uMode=0x1) returned 0x0 [0144.615] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.616] SetErrorMode (uMode=0x0) returned 0x1 [0144.617] GetFileType (hFile=0x230) returned 0x1 [0144.617] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.617] SetErrorMode (uMode=0x1) returned 0x0 [0144.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc753fdc3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc753fdc3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x53fe970b, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.617] SetErrorMode (uMode=0x0) returned 0x1 [0144.617] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\eventbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\eventbeacons.dat.partially.cryptonar")) returned 1 [0144.618] SetErrorMode (uMode=0x1) returned 0x0 [0144.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.619] SetErrorMode (uMode=0x0) returned 0x1 [0144.619] GetFileType (hFile=0x230) returned 0x1 [0144.619] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.619] SetErrorMode (uMode=0x1) returned 0x0 [0144.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc753fdc3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc753fdc3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x53d86e2c, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.619] SetErrorMode (uMode=0x0) returned 0x1 [0144.619] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209562\\imprbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209562\\imprbeacons.dat.partially.cryptonar")) returned 1 [0144.620] SetErrorMode (uMode=0x1) returned 0x0 [0144.620] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.621] SetErrorMode (uMode=0x0) returned 0x1 [0144.621] GetFileType (hFile=0x230) returned 0x1 [0144.621] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.621] SetErrorMode (uMode=0x1) returned 0x0 [0144.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7566172, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7566172, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x546c412c, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.621] SetErrorMode (uMode=0x0) returned 0x1 [0144.621] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\eventbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\eventbeacons.dat.partially.cryptonar")) returned 1 [0144.622] SetErrorMode (uMode=0x1) returned 0x0 [0144.622] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.623] SetErrorMode (uMode=0x0) returned 0x1 [0144.623] GetFileType (hFile=0x230) returned 0x1 [0144.623] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.623] SetErrorMode (uMode=0x1) returned 0x0 [0144.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7566172, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7566172, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x540ce673, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.623] SetErrorMode (uMode=0x0) returned 0x1 [0144.624] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209776\\imprbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209776\\imprbeacons.dat.partially.cryptonar")) returned 1 [0144.625] SetErrorMode (uMode=0x1) returned 0x0 [0144.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.626] SetErrorMode (uMode=0x0) returned 0x1 [0144.626] GetFileType (hFile=0x230) returned 0x1 [0144.626] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.626] SetErrorMode (uMode=0x1) returned 0x0 [0144.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc758c278, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc758c278, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x554c5f5e, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.626] SetErrorMode (uMode=0x0) returned 0x1 [0144.626] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\eventbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\eventbeacons.dat.partially.cryptonar")) returned 1 [0144.627] SetErrorMode (uMode=0x1) returned 0x0 [0144.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.628] SetErrorMode (uMode=0x0) returned 0x1 [0144.628] GetFileType (hFile=0x230) returned 0x1 [0144.628] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.629] SetErrorMode (uMode=0x1) returned 0x0 [0144.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc758c278, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc758c278, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x550e628b, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.629] SetErrorMode (uMode=0x0) returned 0x1 [0144.630] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209809\\imprbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209809\\imprbeacons.dat.partially.cryptonar")) returned 1 [0144.631] SetErrorMode (uMode=0x1) returned 0x0 [0144.631] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\1500601998"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.634] SetErrorMode (uMode=0x0) returned 0x1 [0144.634] GetFileType (hFile=0x230) returned 0x1 [0144.634] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.643] SetErrorMode (uMode=0x1) returned 0x0 [0144.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\1500601998"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fe930bf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x1fe930bf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x58a9b934, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x73ea)) returned 1 [0144.644] SetErrorMode (uMode=0x0) returned 0x1 [0144.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\1500601998"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\1500601998.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\1500601998.partially.cryptonar")) returned 1 [0144.645] SetErrorMode (uMode=0x1) returned 0x0 [0144.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.647] SetErrorMode (uMode=0x0) returned 0x1 [0144.647] GetFileType (hFile=0x230) returned 0x1 [0144.647] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.647] SetErrorMode (uMode=0x1) returned 0x0 [0144.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd776c8, ftCreationTime.dwHighDateTime=0x1d2d40b, ftLastAccessTime.dwLowDateTime=0x7dd776c8, ftLastAccessTime.dwHighDateTime=0x1d2d40b, ftLastWriteTime.dwLowDateTime=0x54c6d910, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.648] SetErrorMode (uMode=0x0) returned 0x1 [0144.648] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\eventbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\eventbeacons.dat.partially.cryptonar")) returned 1 [0144.650] SetErrorMode (uMode=0x1) returned 0x0 [0144.650] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.651] SetErrorMode (uMode=0x0) returned 0x1 [0144.651] GetFileType (hFile=0x230) returned 0x1 [0144.651] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.651] SetErrorMode (uMode=0x1) returned 0x0 [0144.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd776c8, ftCreationTime.dwHighDateTime=0x1d2d40b, ftLastAccessTime.dwLowDateTime=0x7dd776c8, ftLastAccessTime.dwHighDateTime=0x1d2d40b, ftLastWriteTime.dwLowDateTime=0x54baef42, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.652] SetErrorMode (uMode=0x0) returned 0x1 [0144.652] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\209857\\imprbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\209857\\imprbeacons.dat.partially.cryptonar")) returned 1 [0144.653] SetErrorMode (uMode=0x1) returned 0x0 [0144.653] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.654] SetErrorMode (uMode=0x0) returned 0x1 [0144.654] GetFileType (hFile=0x230) returned 0x1 [0144.654] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.654] SetErrorMode (uMode=0x1) returned 0x0 [0144.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7519b61, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7519b61, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x535c7489, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.654] SetErrorMode (uMode=0x0) returned 0x1 [0144.654] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\eventbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\eventbeacons.dat.partially.cryptonar")) returned 1 [0144.656] SetErrorMode (uMode=0x1) returned 0x0 [0144.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.657] SetErrorMode (uMode=0x0) returned 0x1 [0144.657] GetFileType (hFile=0x230) returned 0x1 [0144.657] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.657] SetErrorMode (uMode=0x1) returned 0x0 [0144.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74f390b, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc74f390b, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x53554d30, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.657] SetErrorMode (uMode=0x0) returned 0x1 [0144.657] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210469\\imprbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210469\\imprbeacons.dat.partially.cryptonar")) returned 1 [0144.658] SetErrorMode (uMode=0x1) returned 0x0 [0144.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.659] SetErrorMode (uMode=0x0) returned 0x1 [0144.659] GetFileType (hFile=0x230) returned 0x1 [0144.659] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.659] SetErrorMode (uMode=0x1) returned 0x0 [0144.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7519b61, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7519b61, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x53829aa2, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.660] SetErrorMode (uMode=0x0) returned 0x1 [0144.660] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\eventbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\eventbeacons.dat.partially.cryptonar")) returned 1 [0144.661] SetErrorMode (uMode=0x1) returned 0x0 [0144.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.662] SetErrorMode (uMode=0x0) returned 0x1 [0144.662] GetFileType (hFile=0x230) returned 0x1 [0144.662] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.662] SetErrorMode (uMode=0x1) returned 0x0 [0144.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7519b61, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc7519b61, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x537910c7, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.662] SetErrorMode (uMode=0x0) returned 0x1 [0144.662] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\210509\\imprbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\210509\\imprbeacons.dat.partially.cryptonar")) returned 1 [0144.665] SetErrorMode (uMode=0x1) returned 0x0 [0144.665] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.666] SetErrorMode (uMode=0x0) returned 0x1 [0144.666] GetFileType (hFile=0x230) returned 0x1 [0144.666] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.666] SetErrorMode (uMode=0x1) returned 0x0 [0144.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74cd6a3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc74cd6a3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x534960bb, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.666] SetErrorMode (uMode=0x0) returned 0x1 [0144.666] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\eventbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\eventbeacons.dat.partially.cryptonar")) returned 1 [0144.667] SetErrorMode (uMode=0x1) returned 0x0 [0144.668] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.668] SetErrorMode (uMode=0x0) returned 0x1 [0144.668] GetFileType (hFile=0x230) returned 0x1 [0144.668] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.669] SetErrorMode (uMode=0x1) returned 0x0 [0144.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc74cd6a3, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xc74cd6a3, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x53423baa, ftLastWriteTime.dwHighDateTime=0x1d41fda, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.669] SetErrorMode (uMode=0x0) returned 0x1 [0144.669] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\LocalState\\ContentManagementSDK\\Creatives\\214513\\imprbeacons.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\localstate\\contentmanagementsdk\\creatives\\214513\\imprbeacons.dat.partially.cryptonar")) returned 1 [0144.670] SetErrorMode (uMode=0x1) returned 0x0 [0144.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.671] SetErrorMode (uMode=0x0) returned 0x1 [0144.671] GetFileType (hFile=0x230) returned 0x1 [0144.671] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.672] SetErrorMode (uMode=0x1) returned 0x0 [0144.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xec0e2b6c, ftLastAccessTime.dwHighDateTime=0x1d41fe4, ftLastWriteTime.dwLowDateTime=0x58ae9895, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0144.672] SetErrorMode (uMode=0x0) returned 0x1 [0144.672] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0144.673] SetErrorMode (uMode=0x1) returned 0x0 [0144.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.674] SetErrorMode (uMode=0x0) returned 0x1 [0144.675] GetFileType (hFile=0x230) returned 0x1 [0144.675] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.678] SetErrorMode (uMode=0x1) returned 0x0 [0144.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4d4b542, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58ae9895, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0144.678] SetErrorMode (uMode=0x0) returned 0x1 [0144.678] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0144.681] SetErrorMode (uMode=0x1) returned 0x0 [0144.681] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.682] SetErrorMode (uMode=0x0) returned 0x1 [0144.682] GetFileType (hFile=0x230) returned 0x1 [0144.682] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.682] SetErrorMode (uMode=0x1) returned 0x0 [0144.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4d4b542, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4d4b542, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb4d4b542, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.682] SetErrorMode (uMode=0x0) returned 0x1 [0144.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Microsoft.Windows.ContentDeliveryManager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0144.684] SetErrorMode (uMode=0x1) returned 0x0 [0144.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.686] SetErrorMode (uMode=0x0) returned 0x1 [0144.686] GetFileType (hFile=0x230) returned 0x1 [0144.686] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.686] SetErrorMode (uMode=0x1) returned 0x0 [0144.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c8c995, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4c8c995, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb4c8c995, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.687] SetErrorMode (uMode=0x0) returned 0x1 [0144.687] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0144.688] SetErrorMode (uMode=0x1) returned 0x0 [0144.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.689] SetErrorMode (uMode=0x0) returned 0x1 [0144.689] GetFileType (hFile=0x230) returned 0x1 [0144.689] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.692] SetErrorMode (uMode=0x1) returned 0x0 [0144.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c66726, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xec0e2b6c, ftLastAccessTime.dwHighDateTime=0x1d41fe4, ftLastWriteTime.dwLowDateTime=0x58b0ea4d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0144.692] SetErrorMode (uMode=0x0) returned 0x1 [0144.692] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0144.694] SetErrorMode (uMode=0x1) returned 0x0 [0144.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.696] SetErrorMode (uMode=0x0) returned 0x1 [0144.696] GetFileType (hFile=0x230) returned 0x1 [0144.696] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.698] SetErrorMode (uMode=0x1) returned 0x0 [0144.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58b35049, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0144.699] SetErrorMode (uMode=0x0) returned 0x1 [0144.699] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0144.700] SetErrorMode (uMode=0x1) returned 0x0 [0144.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.701] SetErrorMode (uMode=0x0) returned 0x1 [0144.701] GetFileType (hFile=0x230) returned 0x1 [0144.701] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.717] SetErrorMode (uMode=0x1) returned 0x0 [0144.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc5bbba08, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc5bbba08, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58b5a5e0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0144.718] SetErrorMode (uMode=0x0) returned 0x1 [0144.718] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.contentdeliverymanager_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0144.719] SetErrorMode (uMode=0x1) returned 0x0 [0144.719] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.721] SetErrorMode (uMode=0x0) returned 0x1 [0144.721] GetFileType (hFile=0x230) returned 0x1 [0144.721] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.721] SetErrorMode (uMode=0x1) returned 0x0 [0144.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xce79b56e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xce79b56e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xce79b56e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.721] SetErrorMode (uMode=0x0) returned 0x1 [0144.721] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\container.dat.partially.cryptonar")) returned 1 [0144.722] SetErrorMode (uMode=0x1) returned 0x0 [0144.722] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.723] SetErrorMode (uMode=0x0) returned 0x1 [0144.723] GetFileType (hFile=0x230) returned 0x1 [0144.723] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.724] SetErrorMode (uMode=0x1) returned 0x0 [0144.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xce79b56e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xce79b56e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xce79b56e, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.724] SetErrorMode (uMode=0x0) returned 0x1 [0144.724] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\container.dat.partially.cryptonar")) returned 1 [0144.725] SetErrorMode (uMode=0x1) returned 0x0 [0144.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\appcache[1].man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.727] SetErrorMode (uMode=0x0) returned 0x1 [0144.727] GetFileType (hFile=0x230) returned 0x1 [0144.727] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.728] SetErrorMode (uMode=0x1) returned 0x0 [0144.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8685d06a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x8685d06a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x58b80a26, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c)) returned 1 [0144.728] SetErrorMode (uMode=0x0) returned 0x1 [0144.728] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\appcache[1].man"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\appcache[1].man.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\appcache[1].man.partially.cryptonar")) returned 1 [0144.731] SetErrorMode (uMode=0x1) returned 0x0 [0144.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.732] SetErrorMode (uMode=0x0) returned 0x1 [0144.732] GetFileType (hFile=0x230) returned 0x1 [0144.732] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.733] SetErrorMode (uMode=0x1) returned 0x0 [0144.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x8685bcd9, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x8685bcd9, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x8685bcd9, ftLastWriteTime.dwHighDateTime=0x1d301c4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.733] SetErrorMode (uMode=0x0) returned 0x1 [0144.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\container.dat.partially.cryptonar")) returned 1 [0144.734] SetErrorMode (uMode=0x1) returned 0x0 [0144.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\zinc[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.735] SetErrorMode (uMode=0x0) returned 0x1 [0144.735] GetFileType (hFile=0x230) returned 0x1 [0144.735] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.746] SetErrorMode (uMode=0x1) returned 0x0 [0144.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8693a00c, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x8693a00c, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x58ba6983, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d5d0)) returned 1 [0144.746] SetErrorMode (uMode=0x0) returned 0x1 [0144.746] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\zinc[1].htm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\12\\zinc[1].htm.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\12\\zinc[1].htm.partially.cryptonar")) returned 1 [0144.748] SetErrorMode (uMode=0x1) returned 0x0 [0144.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\045d3532[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\045d3532[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.749] SetErrorMode (uMode=0x0) returned 0x1 [0144.749] GetFileType (hFile=0x230) returned 0x1 [0144.749] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.750] SetErrorMode (uMode=0x1) returned 0x0 [0144.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\045d3532[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\045d3532[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfd0a71f9, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfd0a71f9, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58ba6983, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19b8)) returned 1 [0144.750] SetErrorMode (uMode=0x0) returned 0x1 [0144.750] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\045d3532[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\045d3532[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\045d3532[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\045d3532[1].js.partially.cryptonar")) returned 1 [0144.751] SetErrorMode (uMode=0x1) returned 0x0 [0144.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\26d3daca[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\26d3daca[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.752] SetErrorMode (uMode=0x0) returned 0x1 [0144.752] GetFileType (hFile=0x230) returned 0x1 [0144.752] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.753] SetErrorMode (uMode=0x1) returned 0x0 [0144.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\26d3daca[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\26d3daca[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcf9c41e, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcf9c41e, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58ba6983, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e5e)) returned 1 [0144.753] SetErrorMode (uMode=0x0) returned 0x1 [0144.754] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\26d3daca[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\26d3daca[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\26d3daca[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\26d3daca[1].js.partially.cryptonar")) returned 1 [0144.755] SetErrorMode (uMode=0x1) returned 0x0 [0144.755] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\2a62658f[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\2a62658f[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.756] SetErrorMode (uMode=0x0) returned 0x1 [0144.756] GetFileType (hFile=0x230) returned 0x1 [0144.756] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.757] SetErrorMode (uMode=0x1) returned 0x0 [0144.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\2a62658f[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\2a62658f[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfce1e8f4, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfce1e8f4, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58ba6983, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7ace)) returned 1 [0144.757] SetErrorMode (uMode=0x0) returned 0x1 [0144.757] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\2a62658f[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\2a62658f[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\2a62658f[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\2a62658f[1].js.partially.cryptonar")) returned 1 [0144.759] SetErrorMode (uMode=0x1) returned 0x0 [0144.759] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\3e01bee0[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\3e01bee0[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.760] SetErrorMode (uMode=0x0) returned 0x1 [0144.760] GetFileType (hFile=0x230) returned 0x1 [0144.760] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.761] SetErrorMode (uMode=0x1) returned 0x0 [0144.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\3e01bee0[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\3e01bee0[1].css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcd5fd1a, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcd5fd1a, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58bccd3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbc41)) returned 1 [0144.761] SetErrorMode (uMode=0x0) returned 0x1 [0144.761] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\3e01bee0[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\3e01bee0[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\3e01bee0[1].css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\3e01bee0[1].css.partially.cryptonar")) returned 1 [0144.762] SetErrorMode (uMode=0x1) returned 0x0 [0144.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\424a9e57[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\424a9e57[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.763] SetErrorMode (uMode=0x0) returned 0x1 [0144.763] GetFileType (hFile=0x230) returned 0x1 [0144.763] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.764] SetErrorMode (uMode=0x1) returned 0x0 [0144.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\424a9e57[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\424a9e57[1].css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfccc7432, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfccc7432, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58bccd3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x521)) returned 1 [0144.764] SetErrorMode (uMode=0x0) returned 0x1 [0144.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\424a9e57[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\424a9e57[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\424a9e57[1].css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\424a9e57[1].css.partially.cryptonar")) returned 1 [0144.766] SetErrorMode (uMode=0x1) returned 0x0 [0144.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\4321f978[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\4321f978[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.767] SetErrorMode (uMode=0x0) returned 0x1 [0144.767] GetFileType (hFile=0x230) returned 0x1 [0144.767] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.768] SetErrorMode (uMode=0x1) returned 0x0 [0144.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\4321f978[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\4321f978[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfd119649, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfd119649, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58bccd3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8aaaa)) returned 1 [0144.768] SetErrorMode (uMode=0x0) returned 0x1 [0144.768] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\4321f978[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\4321f978[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\4321f978[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\4321f978[1].js.partially.cryptonar")) returned 1 [0144.769] SetErrorMode (uMode=0x1) returned 0x0 [0144.769] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\4e1cff7c[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\4e1cff7c[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.770] SetErrorMode (uMode=0x0) returned 0x1 [0144.770] GetFileType (hFile=0x230) returned 0x1 [0144.770] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.771] SetErrorMode (uMode=0x1) returned 0x0 [0144.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\4e1cff7c[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\4e1cff7c[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcc0868f, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcc0868f, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58bccd3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc321)) returned 1 [0144.771] SetErrorMode (uMode=0x0) returned 0x1 [0144.771] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\4e1cff7c[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\4e1cff7c[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\4e1cff7c[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\4e1cff7c[1].js.partially.cryptonar")) returned 1 [0144.773] SetErrorMode (uMode=0x1) returned 0x0 [0144.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\5004e7d5[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\5004e7d5[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.786] SetErrorMode (uMode=0x0) returned 0x1 [0144.786] GetFileType (hFile=0x230) returned 0x1 [0144.786] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.787] SetErrorMode (uMode=0x1) returned 0x0 [0144.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\5004e7d5[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\5004e7d5[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcced61d, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcced61d, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58bf2e7c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x86f0)) returned 1 [0144.787] SetErrorMode (uMode=0x0) returned 0x1 [0144.787] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\5004e7d5[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\5004e7d5[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\5004e7d5[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\5004e7d5[1].js.partially.cryptonar")) returned 1 [0144.789] SetErrorMode (uMode=0x1) returned 0x0 [0144.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\5217dcda[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\5217dcda[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.790] SetErrorMode (uMode=0x0) returned 0x1 [0144.790] GetFileType (hFile=0x230) returned 0x1 [0144.790] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.791] SetErrorMode (uMode=0x1) returned 0x0 [0144.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\5217dcda[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\5217dcda[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcf0361e, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcf0361e, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c19240, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x95bd)) returned 1 [0144.791] SetErrorMode (uMode=0x0) returned 0x1 [0144.791] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\5217dcda[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\5217dcda[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\5217dcda[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\5217dcda[1].js.partially.cryptonar")) returned 1 [0144.793] SetErrorMode (uMode=0x1) returned 0x0 [0144.793] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8636b4dd[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8636b4dd[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.794] SetErrorMode (uMode=0x0) returned 0x1 [0144.794] GetFileType (hFile=0x230) returned 0x1 [0144.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.795] SetErrorMode (uMode=0x1) returned 0x0 [0144.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8636b4dd[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8636b4dd[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfd080f1d, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfd080f1d, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c19240, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17264)) returned 1 [0144.795] SetErrorMode (uMode=0x0) returned 0x1 [0144.795] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8636b4dd[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8636b4dd[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8636b4dd[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8636b4dd[1].js.partially.cryptonar")) returned 1 [0144.796] SetErrorMode (uMode=0x1) returned 0x0 [0144.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8740f0a9[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8740f0a9[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.798] SetErrorMode (uMode=0x0) returned 0x1 [0144.798] GetFileType (hFile=0x230) returned 0x1 [0144.798] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.799] SetErrorMode (uMode=0x1) returned 0x0 [0144.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8740f0a9[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8740f0a9[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcfe88e2, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcfe88e2, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c19240, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9e27)) returned 1 [0144.799] SetErrorMode (uMode=0x0) returned 0x1 [0144.799] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8740f0a9[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8740f0a9[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8740f0a9[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8740f0a9[1].js.partially.cryptonar")) returned 1 [0144.802] SetErrorMode (uMode=0x1) returned 0x0 [0144.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\88bf6172[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\88bf6172[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.803] SetErrorMode (uMode=0x0) returned 0x1 [0144.803] GetFileType (hFile=0x230) returned 0x1 [0144.803] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.804] SetErrorMode (uMode=0x1) returned 0x0 [0144.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\88bf6172[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\88bf6172[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfce6add2, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfce6add2, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c19240, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb1e1)) returned 1 [0144.805] SetErrorMode (uMode=0x0) returned 0x1 [0144.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\88bf6172[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\88bf6172[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\88bf6172[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\88bf6172[1].js.partially.cryptonar")) returned 1 [0144.807] SetErrorMode (uMode=0x1) returned 0x0 [0144.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8c38fc21[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8c38fc21[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.808] SetErrorMode (uMode=0x0) returned 0x1 [0144.808] GetFileType (hFile=0x230) returned 0x1 [0144.808] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.809] SetErrorMode (uMode=0x1) returned 0x0 [0144.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8c38fc21[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8c38fc21[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcd39aa2, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcd39aa2, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c3f32d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48d2)) returned 1 [0144.809] SetErrorMode (uMode=0x0) returned 0x1 [0144.809] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8c38fc21[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8c38fc21[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\8c38fc21[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\8c38fc21[1].js.partially.cryptonar")) returned 1 [0144.810] SetErrorMode (uMode=0x1) returned 0x0 [0144.810] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\9d6b7893[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\9d6b7893[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.811] SetErrorMode (uMode=0x0) returned 0x1 [0144.811] GetFileType (hFile=0x230) returned 0x1 [0144.811] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.812] SetErrorMode (uMode=0x1) returned 0x0 [0144.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\9d6b7893[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\9d6b7893[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcdf84b8, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcdf84b8, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c3f32d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ac70)) returned 1 [0144.812] SetErrorMode (uMode=0x0) returned 0x1 [0144.812] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\9d6b7893[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\9d6b7893[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\9d6b7893[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\9d6b7893[1].js.partially.cryptonar")) returned 1 [0144.814] SetErrorMode (uMode=0x1) returned 0x0 [0144.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\appcache[1].man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.815] SetErrorMode (uMode=0x0) returned 0x1 [0144.815] GetFileType (hFile=0x230) returned 0x1 [0144.815] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.825] SetErrorMode (uMode=0x1) returned 0x0 [0144.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcab11f4, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcab11f4, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c65578, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1611)) returned 1 [0144.825] SetErrorMode (uMode=0x0) returned 0x1 [0144.825] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\appcache[1].man"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\appcache[1].man.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\appcache[1].man.partially.cryptonar")) returned 1 [0144.826] SetErrorMode (uMode=0x1) returned 0x0 [0144.826] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\b946a16c[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\b946a16c[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.827] SetErrorMode (uMode=0x0) returned 0x1 [0144.828] GetFileType (hFile=0x230) returned 0x1 [0144.828] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.828] SetErrorMode (uMode=0x1) returned 0x0 [0144.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\b946a16c[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\b946a16c[1].css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcc54cb4, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcc54cb4, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c65578, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4dcd)) returned 1 [0144.829] SetErrorMode (uMode=0x0) returned 0x1 [0144.829] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\b946a16c[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\b946a16c[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\b946a16c[1].css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\b946a16c[1].css.partially.cryptonar")) returned 1 [0144.830] SetErrorMode (uMode=0x1) returned 0x0 [0144.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.831] SetErrorMode (uMode=0x0) returned 0x1 [0144.831] GetFileType (hFile=0x230) returned 0x1 [0144.831] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.832] SetErrorMode (uMode=0x1) returned 0x0 [0144.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xfcab11f4, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcab11f4, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0xfcab11f4, ftLastWriteTime.dwHighDateTime=0x1d41fbe, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.832] SetErrorMode (uMode=0x0) returned 0x1 [0144.832] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\container.dat.partially.cryptonar")) returned 1 [0144.833] SetErrorMode (uMode=0x1) returned 0x0 [0144.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\d5ac23a7[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\d5ac23a7[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.834] SetErrorMode (uMode=0x0) returned 0x1 [0144.835] GetFileType (hFile=0x230) returned 0x1 [0144.835] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.837] SetErrorMode (uMode=0x1) returned 0x0 [0144.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\d5ac23a7[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\d5ac23a7[1].css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfd0a71f9, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfd0a71f9, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c8b7d2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcfda)) returned 1 [0144.837] SetErrorMode (uMode=0x0) returned 0x1 [0144.837] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\d5ac23a7[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\d5ac23a7[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\d5ac23a7[1].css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\d5ac23a7[1].css.partially.cryptonar")) returned 1 [0144.839] SetErrorMode (uMode=0x1) returned 0x0 [0144.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\e1e405d1[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\e1e405d1[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.840] SetErrorMode (uMode=0x0) returned 0x1 [0144.840] GetFileType (hFile=0x230) returned 0x1 [0144.840] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.841] SetErrorMode (uMode=0x1) returned 0x0 [0144.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\e1e405d1[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\e1e405d1[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfd18bed3, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfd18bed3, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c8b7d2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e9ac)) returned 1 [0144.841] SetErrorMode (uMode=0x0) returned 0x1 [0144.841] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\e1e405d1[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\e1e405d1[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\e1e405d1[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\e1e405d1[1].js.partially.cryptonar")) returned 1 [0144.842] SetErrorMode (uMode=0x1) returned 0x0 [0144.842] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\e994e448[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\e994e448[1].css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.843] SetErrorMode (uMode=0x0) returned 0x1 [0144.843] GetFileType (hFile=0x230) returned 0x1 [0144.843] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.844] SetErrorMode (uMode=0x1) returned 0x0 [0144.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\e994e448[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\e994e448[1].css"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfd034d20, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfd034d20, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c8b7d2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a11)) returned 1 [0144.844] SetErrorMode (uMode=0x0) returned 0x1 [0144.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\e994e448[1].css" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\e994e448[1].css"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\e994e448[1].css.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\e994e448[1].css.partially.cryptonar")) returned 1 [0144.846] SetErrorMode (uMode=0x1) returned 0x0 [0144.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\ead33c13[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\ead33c13[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.847] SetErrorMode (uMode=0x0) returned 0x1 [0144.847] GetFileType (hFile=0x230) returned 0x1 [0144.847] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.848] SetErrorMode (uMode=0x1) returned 0x0 [0144.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\ead33c13[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\ead33c13[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfceb7229, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfceb7229, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58c8b7d2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2102f)) returned 1 [0144.848] SetErrorMode (uMode=0x0) returned 0x1 [0144.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\ead33c13[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\ead33c13[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\ead33c13[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\ead33c13[1].js.partially.cryptonar")) returned 1 [0144.849] SetErrorMode (uMode=0x1) returned 0x0 [0144.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\ec2aacce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\ec2aacce[1].js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.850] SetErrorMode (uMode=0x0) returned 0x1 [0144.850] GetFileType (hFile=0x230) returned 0x1 [0144.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.852] SetErrorMode (uMode=0x1) returned 0x0 [0144.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\ec2aacce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\ec2aacce[1].js"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcdac0ac, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfcdac0ac, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58cb1938, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x26851)) returned 1 [0144.852] SetErrorMode (uMode=0x0) returned 0x1 [0144.852] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\ec2aacce[1].js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\ec2aacce[1].js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\ec2aacce[1].js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\ec2aacce[1].js.partially.cryptonar")) returned 1 [0144.854] SetErrorMode (uMode=0x1) returned 0x0 [0144.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\20\\Init[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\20\\init[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0144.859] SetErrorMode (uMode=0x0) returned 0x1 [0144.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0144.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0144.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0144.861] SetErrorMode (uMode=0x1) returned 0x0 [0144.861] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\appcache[1].man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.863] GetFileType (hFile=0x230) returned 0x1 [0144.863] SetErrorMode (uMode=0x0) returned 0x1 [0144.863] GetFileType (hFile=0x230) returned 0x1 [0144.863] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.863] ReadFile (in: hFile=0x230, lpBuffer=0x26ea9d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ea9d0*, lpNumberOfBytesRead=0x5ae8b8*=0x3c, lpOverlapped=0x0) returned 1 [0144.864] ReadFile (in: hFile=0x230, lpBuffer=0x26ea9d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ea9d0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0144.864] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.864] WriteFile (in: hFile=0x230, lpBuffer=0x26ea9d0*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ea9d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x3c, lpOverlapped=0x0) returned 1 [0144.864] CloseHandle (hObject=0x230) returned 1 [0144.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0144.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0144.865] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man.partially.cryptoNar", lpFilePart=0x0) returned 0x8f [0144.865] SetErrorMode (uMode=0x1) returned 0x0 [0144.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e5fed0b, ftCreationTime.dwHighDateTime=0x1d2d437, ftLastAccessTime.dwLowDateTime=0x7e5fed0b, ftLastAccessTime.dwHighDateTime=0x1d2d437, ftLastWriteTime.dwLowDateTime=0x58cb1938, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c)) returned 1 [0144.865] SetErrorMode (uMode=0x0) returned 0x1 [0144.865] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\appcache[1].man"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\appcache[1].man.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\appcache[1].man.partially.cryptonar")) returned 1 [0144.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0144.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0144.868] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0144.868] SetErrorMode (uMode=0x1) returned 0x0 [0144.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.869] GetFileType (hFile=0x230) returned 0x1 [0144.869] SetErrorMode (uMode=0x0) returned 0x1 [0144.869] GetFileType (hFile=0x230) returned 0x1 [0144.869] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.869] ReadFile (in: hFile=0x230, lpBuffer=0x26edff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26edff0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0144.869] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.869] CloseHandle (hObject=0x230) returned 1 [0144.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0144.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat", lpFilePart=0x0) returned 0x79 [0144.870] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x8d [0144.870] SetErrorMode (uMode=0x1) returned 0x0 [0144.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7e5fc62a, ftCreationTime.dwHighDateTime=0x1d2d437, ftLastAccessTime.dwLowDateTime=0x7e5fc62a, ftLastAccessTime.dwHighDateTime=0x1d2d437, ftLastWriteTime.dwLowDateTime=0x7e5fc62a, ftLastWriteTime.dwHighDateTime=0x1d2d437, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.870] SetErrorMode (uMode=0x0) returned 0x1 [0144.870] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\container.dat.partially.cryptonar")) returned 1 [0144.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0144.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0144.871] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0144.872] SetErrorMode (uMode=0x1) returned 0x0 [0144.872] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\zinc[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.872] GetFileType (hFile=0x230) returned 0x1 [0144.872] SetErrorMode (uMode=0x0) returned 0x1 [0144.872] GetFileType (hFile=0x230) returned 0x1 [0144.872] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.873] ReadFile (in: hFile=0x230, lpBuffer=0x26f1568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f1568*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0144.887] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0144.887] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.892] WriteFile (in: hFile=0x230, lpBuffer=0x26f1568*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f1568*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0144.892] CloseHandle (hObject=0x230) returned 1 [0144.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0144.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0144.893] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm.partially.cryptoNar", lpFilePart=0x0) returned 0x8b [0144.893] SetErrorMode (uMode=0x1) returned 0x0 [0144.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e6df7ac, ftCreationTime.dwHighDateTime=0x1d2d437, ftLastAccessTime.dwLowDateTime=0x7e6df7ac, ftLastAccessTime.dwHighDateTime=0x1d2d437, ftLastWriteTime.dwLowDateTime=0x58d15a0e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d46a)) returned 1 [0144.893] SetErrorMode (uMode=0x0) returned 0x1 [0144.894] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\zinc[1].htm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\5\\zinc[1].htm.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\5\\zinc[1].htm.partially.cryptonar")) returned 1 [0144.895] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0144.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0144.896] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0144.896] SetErrorMode (uMode=0x1) returned 0x0 [0144.896] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\appcache[1].man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.897] GetFileType (hFile=0x230) returned 0x1 [0144.897] SetErrorMode (uMode=0x0) returned 0x1 [0144.898] GetFileType (hFile=0x230) returned 0x1 [0144.898] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.898] ReadFile (in: hFile=0x230, lpBuffer=0x26f4ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f4ec0*, lpNumberOfBytesRead=0x5ae8b8*=0x3c, lpOverlapped=0x0) returned 1 [0144.899] ReadFile (in: hFile=0x230, lpBuffer=0x26f4ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f4ec0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0144.899] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.899] WriteFile (in: hFile=0x230, lpBuffer=0x26f4ec0*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f4ec0*, lpNumberOfBytesWritten=0x5ae8a8*=0x3c, lpOverlapped=0x0) returned 1 [0144.899] CloseHandle (hObject=0x230) returned 1 [0144.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0144.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man", lpFilePart=0x0) returned 0x7b [0144.900] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man.partially.cryptoNar", lpFilePart=0x0) returned 0x8f [0144.900] SetErrorMode (uMode=0x1) returned 0x0 [0144.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\appcache[1].man"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65a500e1, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x65a500e1, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x58d26b0d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c)) returned 1 [0144.900] SetErrorMode (uMode=0x0) returned 0x1 [0144.900] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\appcache[1].man"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\appcache[1].man.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\appcache[1].man.partially.cryptonar")) returned 1 [0144.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0144.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0144.915] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0144.915] SetErrorMode (uMode=0x1) returned 0x0 [0144.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.916] GetFileType (hFile=0x230) returned 0x1 [0144.916] SetErrorMode (uMode=0x0) returned 0x1 [0144.916] GetFileType (hFile=0x230) returned 0x1 [0144.916] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.916] ReadFile (in: hFile=0x230, lpBuffer=0x26f84e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f84e0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0144.917] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.917] CloseHandle (hObject=0x230) returned 1 [0144.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0144.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat", lpFilePart=0x0) returned 0x79 [0144.917] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x8d [0144.917] SetErrorMode (uMode=0x1) returned 0x0 [0144.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65a4ed6d, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x65a4ed6d, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x65a4ed6d, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.917] SetErrorMode (uMode=0x0) returned 0x1 [0144.917] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\container.dat.partially.cryptonar")) returned 1 [0144.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0144.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0144.920] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0144.920] SetErrorMode (uMode=0x1) returned 0x0 [0144.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\zinc[1].htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.922] GetFileType (hFile=0x230) returned 0x1 [0144.922] SetErrorMode (uMode=0x0) returned 0x1 [0144.922] GetFileType (hFile=0x230) returned 0x1 [0144.922] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.922] ReadFile (in: hFile=0x230, lpBuffer=0x26fba58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fba58*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0144.927] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0144.927] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.928] WriteFile (in: hFile=0x230, lpBuffer=0x26fba58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26fba58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0144.929] CloseHandle (hObject=0x230) returned 1 [0144.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0144.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm", lpFilePart=0x0) returned 0x77 [0144.929] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm.partially.cryptoNar", lpFilePart=0x0) returned 0x8b [0144.929] SetErrorMode (uMode=0x1) returned 0x0 [0144.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\zinc[1].htm"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65b939ab, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x65b939ab, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x58d55884, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d46a)) returned 1 [0144.930] SetErrorMode (uMode=0x0) returned 0x1 [0144.930] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\zinc[1].htm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\AppCache\\R1UTJCT7\\6\\zinc[1].htm.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\appcache\\r1utjct7\\6\\zinc[1].htm.partially.cryptonar")) returned 1 [0144.931] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0144.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0144.932] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0144.932] SetErrorMode (uMode=0x1) returned 0x0 [0144.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.936] GetFileType (hFile=0x230) returned 0x1 [0144.936] SetErrorMode (uMode=0x0) returned 0x1 [0144.936] GetFileType (hFile=0x230) returned 0x1 [0144.936] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.936] ReadFile (in: hFile=0x230, lpBuffer=0x26ff368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ff368*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0144.936] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.936] CloseHandle (hObject=0x230) returned 1 [0144.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0144.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat", lpFilePart=0x0) returned 0x6f [0144.937] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0144.937] SetErrorMode (uMode=0x1) returned 0x0 [0144.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x5776f565, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5776f565, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5776f565, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.937] SetErrorMode (uMode=0x0) returned 0x1 [0144.937] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcache\\container.dat.partially.cryptonar")) returned 1 [0144.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0144.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0144.939] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0144.939] SetErrorMode (uMode=0x1) returned 0x0 [0144.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.941] GetFileType (hFile=0x230) returned 0x1 [0144.941] SetErrorMode (uMode=0x0) returned 0x1 [0144.941] GetFileType (hFile=0x230) returned 0x1 [0144.941] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.941] ReadFile (in: hFile=0x230, lpBuffer=0x2702850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2702850*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0144.941] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.941] CloseHandle (hObject=0x230) returned 1 [0144.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0144.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat", lpFilePart=0x0) returned 0x71 [0144.942] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0144.942] SetErrorMode (uMode=0x1) returned 0x0 [0144.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xcee29d25, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcee29d25, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcee29d25, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.942] SetErrorMode (uMode=0x0) returned 0x1 [0144.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\container.dat.partially.cryptonar")) returned 1 [0144.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", lpFilePart=0x0) returned 0x70 [0144.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", lpFilePart=0x0) returned 0x70 [0144.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", nBufferLength=0x105, lpBuffer=0x5ae3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", lpFilePart=0x0) returned 0x70 [0144.944] SetErrorMode (uMode=0x1) returned 0x0 [0144.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.945] GetFileType (hFile=0x230) returned 0x1 [0144.945] SetErrorMode (uMode=0x0) returned 0x1 [0144.945] GetFileType (hFile=0x230) returned 0x1 [0144.945] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xd3 [0144.945] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0144.945] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0xd3 [0144.945] ReadFile (in: hFile=0x230, lpBuffer=0x27056e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x27056e8*, lpNumberOfBytesRead=0x5ae898*=0xd3, lpOverlapped=0x0) returned 1 [0144.946] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0144.946] WriteFile (in: hFile=0x230, lpBuffer=0x27056e8*, nNumberOfBytesToWrite=0xd3, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x27056e8*, lpNumberOfBytesWritten=0x5ae888*=0xd3, lpOverlapped=0x0) returned 1 [0144.946] CloseHandle (hObject=0x230) returned 1 [0144.946] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", lpFilePart=0x0) returned 0x70 [0144.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt", lpFilePart=0x0) returned 0x70 [0144.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt.fully.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt.fully.cryptoNar", lpFilePart=0x0) returned 0x80 [0144.947] SetErrorMode (uMode=0x1) returned 0x0 [0144.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x582c287a, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x582c287a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58d7bb1e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd3)) returned 1 [0144.947] SetErrorMode (uMode=0x0) returned 0x1 [0144.947] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\LVKKMMVN.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\lvkkmmvn.txt.fully.cryptonar")) returned 1 [0144.953] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt", lpFilePart=0x0) returned 0x70 [0144.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt", lpFilePart=0x0) returned 0x70 [0144.954] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt", nBufferLength=0x105, lpBuffer=0x5ae3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt", lpFilePart=0x0) returned 0x70 [0144.954] SetErrorMode (uMode=0x1) returned 0x0 [0144.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\rd247dak.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.955] GetFileType (hFile=0x230) returned 0x1 [0144.955] SetErrorMode (uMode=0x0) returned 0x1 [0144.955] GetFileType (hFile=0x230) returned 0x1 [0144.955] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x153 [0144.955] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0144.955] GetFileSize (in: hFile=0x230, lpFileSizeHigh=0x5aea18 | out: lpFileSizeHigh=0x5aea18*=0x0) returned 0x153 [0144.955] ReadFile (in: hFile=0x230, lpBuffer=0x2708728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae898, lpOverlapped=0x0 | out: lpBuffer=0x2708728*, lpNumberOfBytesRead=0x5ae898*=0x153, lpOverlapped=0x0) returned 1 [0144.956] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea20*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea20*=0) returned 0x0 [0144.956] WriteFile (in: hFile=0x230, lpBuffer=0x2708728*, nNumberOfBytesToWrite=0x153, lpNumberOfBytesWritten=0x5ae888, lpOverlapped=0x0 | out: lpBuffer=0x2708728*, lpNumberOfBytesWritten=0x5ae888*=0x153, lpOverlapped=0x0) returned 1 [0144.957] CloseHandle (hObject=0x230) returned 1 [0144.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt", lpFilePart=0x0) returned 0x70 [0144.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt", lpFilePart=0x0) returned 0x70 [0144.957] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt.fully.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt.fully.cryptoNar", lpFilePart=0x0) returned 0x80 [0144.957] SetErrorMode (uMode=0x1) returned 0x0 [0144.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\rd247dak.txt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfd62a7b6, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfd62a7b6, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x58da1cd6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x153)) returned 1 [0144.957] SetErrorMode (uMode=0x0) returned 0x1 [0144.957] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\rd247dak.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetCookies\\RD247DAK.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inetcookies\\rd247dak.txt.fully.cryptonar")) returned 1 [0144.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0144.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0144.959] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0144.959] SetErrorMode (uMode=0x1) returned 0x0 [0144.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.961] GetFileType (hFile=0x230) returned 0x1 [0144.961] SetErrorMode (uMode=0x0) returned 0x1 [0144.961] GetFileType (hFile=0x230) returned 0x1 [0144.961] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.961] ReadFile (in: hFile=0x230, lpBuffer=0x270bdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270bdd8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0144.961] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.961] CloseHandle (hObject=0x230) returned 1 [0144.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0144.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat", lpFilePart=0x0) returned 0x87 [0144.961] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x9b [0144.961] SetErrorMode (uMode=0x1) returned 0x0 [0144.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6813d9f7, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x6813d9f7, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x6813d9f7, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.962] SetErrorMode (uMode=0x0) returned 0x1 [0144.962] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApi\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapi\\container.dat.partially.cryptonar")) returned 1 [0144.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0144.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0144.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0144.964] SetErrorMode (uMode=0x1) returned 0x0 [0144.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.966] GetFileType (hFile=0x230) returned 0x1 [0144.966] SetErrorMode (uMode=0x0) returned 0x1 [0144.966] GetFileType (hFile=0x230) returned 0x1 [0144.966] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.966] ReadFile (in: hFile=0x230, lpBuffer=0x270f488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270f488*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0144.966] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.966] CloseHandle (hObject=0x230) returned 1 [0144.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0144.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat", lpFilePart=0x0) returned 0x8c [0144.966] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0xa0 [0144.966] SetErrorMode (uMode=0x1) returned 0x0 [0144.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x685f51a9, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x685f51a9, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x685f51a9, ftLastWriteTime.dwHighDateTime=0x1d2d438, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.967] SetErrorMode (uMode=0x0) returned 0x1 [0144.967] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\INetHistory\\BackgroundTransferApiGroup\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\inethistory\\backgroundtransferapigroup\\container.dat.partially.cryptonar")) returned 1 [0144.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0144.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0144.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0144.968] SetErrorMode (uMode=0x1) returned 0x0 [0144.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.971] GetFileType (hFile=0x230) returned 0x1 [0144.971] SetErrorMode (uMode=0x0) returned 0x1 [0144.971] GetFileType (hFile=0x230) returned 0x1 [0144.971] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.971] ReadFile (in: hFile=0x230, lpBuffer=0x2712d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2712d30*, lpNumberOfBytesRead=0x5ae8b8*=0xb68, lpOverlapped=0x0) returned 1 [0144.972] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1896, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0144.972] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.972] WriteFile (in: hFile=0x230, lpBuffer=0x2712d30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2712d30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0144.972] CloseHandle (hObject=0x230) returned 1 [0144.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0144.972] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbc [0144.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar", lpFilePart=0x0) returned 0xd0 [0144.973] SetErrorMode (uMode=0x1) returned 0x0 [0144.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf7ff8a1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf7ff8a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58dc879b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0144.973] SetErrorMode (uMode=0x0) returned 0x1 [0144.973] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0144.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9b [0144.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9b [0144.974] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9b [0144.974] SetErrorMode (uMode=0x1) returned 0x0 [0144.974] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.975] GetFileType (hFile=0x230) returned 0x1 [0144.975] SetErrorMode (uMode=0x0) returned 0x1 [0144.975] GetFileType (hFile=0x230) returned 0x1 [0144.975] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.976] ReadFile (in: hFile=0x230, lpBuffer=0x2716aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2716aa8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0144.981] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0144.981] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.981] WriteFile (in: hFile=0x230, lpBuffer=0x2716aa8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2716aa8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0144.981] CloseHandle (hObject=0x230) returned 1 [0144.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9b [0144.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9b [0144.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar", lpFilePart=0x0) returned 0xaf [0144.989] SetErrorMode (uMode=0x1) returned 0x0 [0144.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58dee21d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x19a4)) returned 1 [0144.989] SetErrorMode (uMode=0x0) returned 0x1 [0144.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0144.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0144.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0144.991] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0144.991] SetErrorMode (uMode=0x1) returned 0x0 [0144.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.992] GetFileType (hFile=0x230) returned 0x1 [0144.992] SetErrorMode (uMode=0x0) returned 0x1 [0144.992] GetFileType (hFile=0x230) returned 0x1 [0144.992] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.992] ReadFile (in: hFile=0x230, lpBuffer=0x271a678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271a678*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0144.992] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.992] CloseHandle (hObject=0x230) returned 1 [0144.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0144.992] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9b [0144.993] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar", lpFilePart=0x0) returned 0xaf [0144.993] SetErrorMode (uMode=0x1) returned 0x0 [0144.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xcf825b0a, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0144.993] SetErrorMode (uMode=0x0) returned 0x1 [0144.993] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0144.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0144.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0144.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0144.994] SetErrorMode (uMode=0x1) returned 0x0 [0144.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0144.995] GetFileType (hFile=0x230) returned 0x1 [0144.995] SetErrorMode (uMode=0x0) returned 0x1 [0144.995] GetFileType (hFile=0x230) returned 0x1 [0144.995] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0144.995] ReadFile (in: hFile=0x230, lpBuffer=0x271dfb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271dfb8*, lpNumberOfBytesRead=0x5ae8b8*=0x6e3, lpOverlapped=0x0) returned 1 [0145.005] SetFilePointer (in: hFile=0x230, lDistanceToMove=-739, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.005] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.006] WriteFile (in: hFile=0x230, lpBuffer=0x271dfb8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271dfb8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.006] CloseHandle (hObject=0x230) returned 1 [0145.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0145.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbc [0145.006] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.partially.cryptoNar", lpFilePart=0x0) returned 0xd0 [0145.006] SetErrorMode (uMode=0x1) returned 0x0 [0145.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x78925db3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x78925db3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x58e14427, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1 [0145.006] SetErrorMode (uMode=0x0) returned 0x1 [0145.006] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf.partially.cryptonar")) returned 1 [0145.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9b [0145.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9b [0145.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9b [0145.008] SetErrorMode (uMode=0x1) returned 0x0 [0145.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.009] GetFileType (hFile=0x230) returned 0x1 [0145.009] SetErrorMode (uMode=0x0) returned 0x1 [0145.009] GetFileType (hFile=0x230) returned 0x1 [0145.009] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.009] ReadFile (in: hFile=0x230, lpBuffer=0x2721d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2721d30*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.025] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.026] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.026] WriteFile (in: hFile=0x230, lpBuffer=0x2721d30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2721d30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.026] CloseHandle (hObject=0x230) returned 1 [0145.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9b [0145.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9b [0145.028] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar", lpFilePart=0x0) returned 0xaf [0145.028] SetErrorMode (uMode=0x1) returned 0x0 [0145.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf84bd60, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf84bd60, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58e608c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0145.029] SetErrorMode (uMode=0x0) returned 0x1 [0145.029] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0145.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0145.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0145.031] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0145.031] SetErrorMode (uMode=0x1) returned 0x0 [0145.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.034] GetFileType (hFile=0x230) returned 0x1 [0145.034] SetErrorMode (uMode=0x0) returned 0x1 [0145.034] GetFileType (hFile=0x230) returned 0x1 [0145.034] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.034] ReadFile (in: hFile=0x230, lpBuffer=0x2725a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2725a58*, lpNumberOfBytesRead=0x5ae8b8*=0x190, lpOverlapped=0x0) returned 1 [0145.035] ReadFile (in: hFile=0x230, lpBuffer=0x2725a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2725a58*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0145.035] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.035] WriteFile (in: hFile=0x230, lpBuffer=0x2725a58*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2725a58*, lpNumberOfBytesWritten=0x5ae8a8*=0x190, lpOverlapped=0x0) returned 1 [0145.035] CloseHandle (hObject=0x230) returned 1 [0145.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0145.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", lpFilePart=0x0) returned 0xbd [0145.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar", lpFilePart=0x0) returned 0xd1 [0145.035] SetErrorMode (uMode=0x1) returned 0x0 [0145.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf7ff8a1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf7ff8a1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58e608c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0145.036] SetErrorMode (uMode=0x0) returned 0x1 [0145.036] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0145.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0145.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0145.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0145.037] SetErrorMode (uMode=0x1) returned 0x0 [0145.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.038] GetFileType (hFile=0x230) returned 0x1 [0145.038] SetErrorMode (uMode=0x0) returned 0x1 [0145.038] GetFileType (hFile=0x230) returned 0x1 [0145.038] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.039] ReadFile (in: hFile=0x230, lpBuffer=0x2729720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2729720*, lpNumberOfBytesRead=0x5ae8b8*=0x154, lpOverlapped=0x0) returned 1 [0145.039] ReadFile (in: hFile=0x230, lpBuffer=0x2729720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2729720*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0145.039] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.040] WriteFile (in: hFile=0x230, lpBuffer=0x2729720*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2729720*, lpNumberOfBytesWritten=0x5ae8a8*=0x154, lpOverlapped=0x0) returned 1 [0145.040] CloseHandle (hObject=0x230) returned 1 [0145.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0145.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x9c [0145.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar", lpFilePart=0x0) returned 0xb0 [0145.040] SetErrorMode (uMode=0x1) returned 0x0 [0145.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58e608c5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0145.040] SetErrorMode (uMode=0x0) returned 0x1 [0145.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0145.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0145.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0145.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0145.041] SetErrorMode (uMode=0x1) returned 0x0 [0145.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.042] GetFileType (hFile=0x230) returned 0x1 [0145.042] SetErrorMode (uMode=0x0) returned 0x1 [0145.042] GetFileType (hFile=0x230) returned 0x1 [0145.042] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.043] ReadFile (in: hFile=0x230, lpBuffer=0x272d1f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272d1f8*, lpNumberOfBytesRead=0x5ae8b8*=0x122, lpOverlapped=0x0) returned 1 [0145.053] ReadFile (in: hFile=0x230, lpBuffer=0x272d1f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272d1f8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0145.053] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.053] WriteFile (in: hFile=0x230, lpBuffer=0x272d1f8*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272d1f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x122, lpOverlapped=0x0) returned 1 [0145.053] CloseHandle (hObject=0x230) returned 1 [0145.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0145.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x9c [0145.053] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar", lpFilePart=0x0) returned 0xb0 [0145.053] SetErrorMode (uMode=0x1) returned 0x0 [0145.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf825b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf825b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58e86b9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0145.053] SetErrorMode (uMode=0x0) returned 0x1 [0145.053] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0145.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0145.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0145.055] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0145.055] SetErrorMode (uMode=0x1) returned 0x0 [0145.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.056] GetFileType (hFile=0x230) returned 0x1 [0145.056] SetErrorMode (uMode=0x0) returned 0x1 [0145.056] GetFileType (hFile=0x230) returned 0x1 [0145.056] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.057] ReadFile (in: hFile=0x230, lpBuffer=0x2730db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2730db0*, lpNumberOfBytesRead=0x5ae8b8*=0x18e, lpOverlapped=0x0) returned 1 [0145.057] ReadFile (in: hFile=0x230, lpBuffer=0x2730db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2730db0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0145.057] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.057] WriteFile (in: hFile=0x230, lpBuffer=0x2730db0*, nNumberOfBytesToWrite=0x18e, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2730db0*, lpNumberOfBytesWritten=0x5ae8a8*=0x18e, lpOverlapped=0x0) returned 1 [0145.058] CloseHandle (hObject=0x230) returned 1 [0145.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0145.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", lpFilePart=0x0) returned 0xbd [0145.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.partially.cryptoNar", lpFilePart=0x0) returned 0xd1 [0145.058] SetErrorMode (uMode=0x1) returned 0x0 [0145.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x78925db3, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x78925db3, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x58e86b9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1 [0145.058] SetErrorMode (uMode=0x0) returned 0x1 [0145.058] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf.partially.cryptonar")) returned 1 [0145.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0145.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0145.060] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0145.060] SetErrorMode (uMode=0x1) returned 0x0 [0145.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.061] GetFileType (hFile=0x230) returned 0x1 [0145.061] SetErrorMode (uMode=0x0) returned 0x1 [0145.061] GetFileType (hFile=0x230) returned 0x1 [0145.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.061] ReadFile (in: hFile=0x230, lpBuffer=0x2734a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2734a78*, lpNumberOfBytesRead=0x5ae8b8*=0x14a, lpOverlapped=0x0) returned 1 [0145.062] ReadFile (in: hFile=0x230, lpBuffer=0x2734a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2734a78*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0145.062] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.062] WriteFile (in: hFile=0x230, lpBuffer=0x2734a78*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2734a78*, lpNumberOfBytesWritten=0x5ae8a8*=0x14a, lpOverlapped=0x0) returned 1 [0145.062] CloseHandle (hObject=0x230) returned 1 [0145.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0145.062] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x9c [0145.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar", lpFilePart=0x0) returned 0xb0 [0145.063] SetErrorMode (uMode=0x1) returned 0x0 [0145.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xcf84bd60, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xcf84bd60, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58eace11, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0145.063] SetErrorMode (uMode=0x0) returned 0x1 [0145.063] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0145.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0145.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0145.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0145.064] SetErrorMode (uMode=0x1) returned 0x0 [0145.064] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.065] GetFileType (hFile=0x230) returned 0x1 [0145.066] SetErrorMode (uMode=0x0) returned 0x1 [0145.066] GetFileType (hFile=0x230) returned 0x1 [0145.066] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.066] ReadFile (in: hFile=0x230, lpBuffer=0x27384c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27384c8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0145.066] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.066] CloseHandle (hObject=0x230) returned 1 [0145.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0145.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x8a [0145.066] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x9e [0145.066] SetErrorMode (uMode=0x1) returned 0x0 [0145.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x57b4f2bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x57b4f2bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x57b4f2bd, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.066] SetErrorMode (uMode=0x0) returned 0x1 [0145.066] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\container.dat.partially.cryptonar")) returned 1 [0145.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", lpFilePart=0x0) returned 0x95 [0145.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", lpFilePart=0x0) returned 0x95 [0145.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", lpFilePart=0x0) returned 0x95 [0145.070] SetErrorMode (uMode=0x1) returned 0x0 [0145.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\yzlqlskf\\www.bing[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.071] GetFileType (hFile=0x230) returned 0x1 [0145.071] SetErrorMode (uMode=0x0) returned 0x1 [0145.071] GetFileType (hFile=0x230) returned 0x1 [0145.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.071] ReadFile (in: hFile=0x230, lpBuffer=0x273bbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273bbd8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.072] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.072] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.072] WriteFile (in: hFile=0x230, lpBuffer=0x273bbd8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273bbd8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.072] CloseHandle (hObject=0x230) returned 1 [0145.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", lpFilePart=0x0) returned 0x95 [0145.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml", lpFilePart=0x0) returned 0x95 [0145.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml.partially.cryptoNar", lpFilePart=0x0) returned 0xa9 [0145.073] SetErrorMode (uMode=0x1) returned 0x0 [0145.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\yzlqlskf\\www.bing[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57b4f2bd, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x57b4f2bd, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58eace11, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17be)) returned 1 [0145.073] SetErrorMode (uMode=0x0) returned 0x1 [0145.073] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\yzlqlskf\\www.bing[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Internet Explorer\\DOMStore\\YZLQLSKF\\www.bing[1].xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\internet explorer\\domstore\\yzlqlskf\\www.bing[1].xml.partially.cryptonar")) returned 1 [0145.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x83 [0145.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x83 [0145.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x83 [0145.075] SetErrorMode (uMode=0x1) returned 0x0 [0145.075] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.076] GetFileType (hFile=0x230) returned 0x1 [0145.076] SetErrorMode (uMode=0x0) returned 0x1 [0145.076] GetFileType (hFile=0x230) returned 0x1 [0145.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.076] ReadFile (in: hFile=0x230, lpBuffer=0x273f6e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273f6e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.077] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.077] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.077] WriteFile (in: hFile=0x230, lpBuffer=0x273f6e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273f6e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.077] CloseHandle (hObject=0x230) returned 1 [0145.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x83 [0145.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri", lpFilePart=0x0) returned 0x83 [0145.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri.partially.cryptoNar", lpFilePart=0x0) returned 0x97 [0145.077] SetErrorMode (uMode=0x1) returned 0x0 [0145.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd499050, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd499050, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x58ed3290, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0145.078] SetErrorMode (uMode=0x0) returned 0x1 [0145.078] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri.partially.cryptonar")) returned 1 [0145.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x6f [0145.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x6f [0145.079] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x6f [0145.079] SetErrorMode (uMode=0x1) returned 0x0 [0145.079] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.083] GetFileType (hFile=0x230) returned 0x1 [0145.083] SetErrorMode (uMode=0x0) returned 0x1 [0145.083] GetFileType (hFile=0x230) returned 0x1 [0145.083] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.083] ReadFile (in: hFile=0x230, lpBuffer=0x2743068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2743068*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.085] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.085] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.085] WriteFile (in: hFile=0x230, lpBuffer=0x2743068*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2743068*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.085] CloseHandle (hObject=0x230) returned 1 [0145.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x6f [0145.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk", lpFilePart=0x0) returned 0x6f [0145.085] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0145.085] SetErrorMode (uMode=0x1) returned 0x0 [0145.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba4977a, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba4977a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x58ed3290, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.086] SetErrorMode (uMode=0x0) returned 0x1 [0145.086] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.chk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.chk.partially.cryptonar")) returned 1 [0145.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x6f [0145.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x6f [0145.087] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x6f [0145.088] SetErrorMode (uMode=0x1) returned 0x0 [0145.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.089] GetFileType (hFile=0x230) returned 0x1 [0145.089] SetErrorMode (uMode=0x0) returned 0x1 [0145.089] GetFileType (hFile=0x230) returned 0x1 [0145.089] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.089] ReadFile (in: hFile=0x230, lpBuffer=0x27468f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27468f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.104] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.104] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.104] WriteFile (in: hFile=0x230, lpBuffer=0x27468f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27468f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.105] CloseHandle (hObject=0x230) returned 1 [0145.105] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x6f [0145.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log", lpFilePart=0x0) returned 0x6f [0145.106] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log.partially.cryptoNar", lpFilePart=0x0) returned 0x83 [0145.106] SetErrorMode (uMode=0x1) returned 0x0 [0145.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xd0bdc8aa, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x58ef929f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.106] SetErrorMode (uMode=0x0) returned 0x1 [0145.106] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb.log.partially.cryptonar")) returned 1 [0145.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", lpFilePart=0x0) returned 0x74 [0145.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", lpFilePart=0x0) returned 0x74 [0145.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", lpFilePart=0x0) returned 0x74 [0145.108] SetErrorMode (uMode=0x1) returned 0x0 [0145.108] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00037.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.110] GetFileType (hFile=0x230) returned 0x1 [0145.110] SetErrorMode (uMode=0x0) returned 0x1 [0145.110] GetFileType (hFile=0x230) returned 0x1 [0145.110] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.110] ReadFile (in: hFile=0x230, lpBuffer=0x274a1d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274a1d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.126] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.127] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.127] WriteFile (in: hFile=0x230, lpBuffer=0x274a1d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274a1d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.128] CloseHandle (hObject=0x230) returned 1 [0145.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", lpFilePart=0x0) returned 0x74 [0145.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log", lpFilePart=0x0) returned 0x74 [0145.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0145.128] SetErrorMode (uMode=0x1) returned 0x0 [0145.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00037.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xceb9cf9e, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x58f457d1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.128] SetErrorMode (uMode=0x0) returned 0x1 [0145.128] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00037.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00037.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00037.log.partially.cryptonar")) returned 1 [0145.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", lpFilePart=0x0) returned 0x74 [0145.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", lpFilePart=0x0) returned 0x74 [0145.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", lpFilePart=0x0) returned 0x74 [0145.130] SetErrorMode (uMode=0x1) returned 0x0 [0145.130] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00038.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.131] GetFileType (hFile=0x230) returned 0x1 [0145.131] SetErrorMode (uMode=0x0) returned 0x1 [0145.131] GetFileType (hFile=0x230) returned 0x1 [0145.131] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.132] ReadFile (in: hFile=0x230, lpBuffer=0x274db18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274db18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.143] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.143] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.143] WriteFile (in: hFile=0x230, lpBuffer=0x274db18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274db18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.144] CloseHandle (hObject=0x230) returned 1 [0145.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", lpFilePart=0x0) returned 0x74 [0145.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log", lpFilePart=0x0) returned 0x74 [0145.144] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0145.144] SetErrorMode (uMode=0x1) returned 0x0 [0145.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00038.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcbbfc9cc, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x58f6b9b0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.145] SetErrorMode (uMode=0x0) returned 0x1 [0145.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00038.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00038.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00038.log.partially.cryptonar")) returned 1 [0145.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", lpFilePart=0x0) returned 0x74 [0145.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", lpFilePart=0x0) returned 0x74 [0145.146] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", lpFilePart=0x0) returned 0x74 [0145.146] SetErrorMode (uMode=0x1) returned 0x0 [0145.146] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00039.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.148] GetFileType (hFile=0x230) returned 0x1 [0145.148] SetErrorMode (uMode=0x0) returned 0x1 [0145.148] GetFileType (hFile=0x230) returned 0x1 [0145.148] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.148] ReadFile (in: hFile=0x230, lpBuffer=0x2751458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2751458*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.162] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.162] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.162] WriteFile (in: hFile=0x230, lpBuffer=0x2751458*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2751458*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.162] CloseHandle (hObject=0x230) returned 1 [0145.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", lpFilePart=0x0) returned 0x74 [0145.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log", lpFilePart=0x0) returned 0x74 [0145.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0145.163] SetErrorMode (uMode=0x1) returned 0x0 [0145.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00039.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcebe943a, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x58f91bfd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.163] SetErrorMode (uMode=0x0) returned 0x1 [0145.164] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00039.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb00039.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb00039.log.partially.cryptonar")) returned 1 [0145.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", lpFilePart=0x0) returned 0x74 [0145.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", lpFilePart=0x0) returned 0x74 [0145.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", lpFilePart=0x0) returned 0x74 [0145.166] SetErrorMode (uMode=0x1) returned 0x0 [0145.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003a.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.168] GetFileType (hFile=0x230) returned 0x1 [0145.168] SetErrorMode (uMode=0x0) returned 0x1 [0145.169] GetFileType (hFile=0x230) returned 0x1 [0145.169] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.169] ReadFile (in: hFile=0x230, lpBuffer=0x2754d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2754d98*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.181] WriteFile (in: hFile=0x230, lpBuffer=0x2754d98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2754d98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.181] CloseHandle (hObject=0x230) returned 1 [0145.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", lpFilePart=0x0) returned 0x74 [0145.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log", lpFilePart=0x0) returned 0x74 [0145.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0145.183] SetErrorMode (uMode=0x1) returned 0x0 [0145.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003a.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec0f692, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x58fb804a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.184] SetErrorMode (uMode=0x0) returned 0x1 [0145.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003a.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003A.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003a.log.partially.cryptonar")) returned 1 [0145.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", lpFilePart=0x0) returned 0x74 [0145.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", lpFilePart=0x0) returned 0x74 [0145.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", lpFilePart=0x0) returned 0x74 [0145.185] SetErrorMode (uMode=0x1) returned 0x0 [0145.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003b.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.186] GetFileType (hFile=0x230) returned 0x1 [0145.186] SetErrorMode (uMode=0x0) returned 0x1 [0145.186] GetFileType (hFile=0x230) returned 0x1 [0145.186] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.186] ReadFile (in: hFile=0x230, lpBuffer=0x27586d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27586d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.201] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.201] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.201] WriteFile (in: hFile=0x230, lpBuffer=0x27586d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27586d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.201] CloseHandle (hObject=0x230) returned 1 [0145.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", lpFilePart=0x0) returned 0x74 [0145.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log", lpFilePart=0x0) returned 0x74 [0145.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0145.202] SetErrorMode (uMode=0x1) returned 0x0 [0145.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003b.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec358e8, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x59004313, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.202] SetErrorMode (uMode=0x0) returned 0x1 [0145.202] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003b.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003B.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003b.log.partially.cryptonar")) returned 1 [0145.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", lpFilePart=0x0) returned 0x74 [0145.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", lpFilePart=0x0) returned 0x74 [0145.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", lpFilePart=0x0) returned 0x74 [0145.203] SetErrorMode (uMode=0x1) returned 0x0 [0145.203] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.204] GetFileType (hFile=0x230) returned 0x1 [0145.204] SetErrorMode (uMode=0x0) returned 0x1 [0145.204] GetFileType (hFile=0x230) returned 0x1 [0145.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.204] ReadFile (in: hFile=0x230, lpBuffer=0x275c018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275c018*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.217] WriteFile (in: hFile=0x230, lpBuffer=0x275c018*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275c018*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.217] CloseHandle (hObject=0x230) returned 1 [0145.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", lpFilePart=0x0) returned 0x74 [0145.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log", lpFilePart=0x0) returned 0x74 [0145.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log.partially.cryptoNar", lpFilePart=0x0) returned 0x88 [0145.219] SetErrorMode (uMode=0x1) returned 0x0 [0145.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcec5bb53, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x5902a55f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.219] SetErrorMode (uMode=0x0) returned 0x1 [0145.219] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edb0003C.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edb0003c.log.partially.cryptonar")) returned 1 [0145.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x77 [0145.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x77 [0145.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x77 [0145.221] SetErrorMode (uMode=0x1) returned 0x0 [0145.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.222] GetFileType (hFile=0x230) returned 0x1 [0145.222] SetErrorMode (uMode=0x0) returned 0x1 [0145.222] GetFileType (hFile=0x230) returned 0x1 [0145.222] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.222] ReadFile (in: hFile=0x230, lpBuffer=0x275f958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275f958*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.224] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.224] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.224] WriteFile (in: hFile=0x230, lpBuffer=0x275f958*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275f958*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.224] CloseHandle (hObject=0x230) returned 1 [0145.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x77 [0145.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs", lpFilePart=0x0) returned 0x77 [0145.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs.partially.cryptoNar", lpFilePart=0x0) returned 0x8b [0145.224] SetErrorMode (uMode=0x1) returned 0x0 [0145.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba23525, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba23525, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5902a55f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.225] SetErrorMode (uMode=0x0) returned 0x1 [0145.225] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00001.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00001.jrs.partially.cryptonar")) returned 1 [0145.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x77 [0145.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x77 [0145.226] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x77 [0145.226] SetErrorMode (uMode=0x1) returned 0x0 [0145.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.227] GetFileType (hFile=0x230) returned 0x1 [0145.227] SetErrorMode (uMode=0x0) returned 0x1 [0145.227] GetFileType (hFile=0x230) returned 0x1 [0145.227] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.227] ReadFile (in: hFile=0x230, lpBuffer=0x2763298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2763298*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.229] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.229] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.229] WriteFile (in: hFile=0x230, lpBuffer=0x2763298*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2763298*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.229] CloseHandle (hObject=0x230) returned 1 [0145.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x77 [0145.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs", lpFilePart=0x0) returned 0x77 [0145.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs.partially.cryptoNar", lpFilePart=0x0) returned 0x8b [0145.229] SetErrorMode (uMode=0x1) returned 0x0 [0145.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba23525, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba23525, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5902a55f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.229] SetErrorMode (uMode=0x0) returned 0x1 [0145.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbres00002.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbres00002.jrs.partially.cryptonar")) returned 1 [0145.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x72 [0145.230] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x72 [0145.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x72 [0145.231] SetErrorMode (uMode=0x1) returned 0x0 [0145.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.232] GetFileType (hFile=0x230) returned 0x1 [0145.232] SetErrorMode (uMode=0x0) returned 0x1 [0145.232] GetFileType (hFile=0x230) returned 0x1 [0145.232] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.232] ReadFile (in: hFile=0x230, lpBuffer=0x2766bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2766bb0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.244] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.245] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.245] WriteFile (in: hFile=0x230, lpBuffer=0x2766bb0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2766bb0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.245] CloseHandle (hObject=0x230) returned 1 [0145.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x72 [0145.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log", lpFilePart=0x0) returned 0x72 [0145.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log.partially.cryptoNar", lpFilePart=0x0) returned 0x86 [0145.246] SetErrorMode (uMode=0x1) returned 0x0 [0145.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b9fd2e5, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0xcdf3945e, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x590508a0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.246] SetErrorMode (uMode=0x0) returned 0x1 [0145.247] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\edbtmp.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\edbtmp.log.partially.cryptonar")) returned 1 [0145.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x75 [0145.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x75 [0145.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x75 [0145.250] SetErrorMode (uMode=0x1) returned 0x0 [0145.250] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.252] GetFileType (hFile=0x230) returned 0x1 [0145.252] SetErrorMode (uMode=0x0) returned 0x1 [0145.252] GetFileType (hFile=0x230) returned 0x1 [0145.252] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.252] ReadFile (in: hFile=0x230, lpBuffer=0x276a4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276a4c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.254] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0145.254] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.254] WriteFile (in: hFile=0x230, lpBuffer=0x276a4c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276a4c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0145.254] CloseHandle (hObject=0x230) returned 1 [0145.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x75 [0145.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb", lpFilePart=0x0) returned 0x75 [0145.273] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb.partially.cryptoNar", lpFilePart=0x0) returned 0x89 [0145.273] SetErrorMode (uMode=0x1) returned 0x0 [0145.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7ba6fa81, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ba6fa81, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5909cc61, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd80000)) returned 1 [0145.273] SetErrorMode (uMode=0x0) returned 0x1 [0145.273] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\AppData\\Indexed DB\\IndexedDB.edb.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\appdata\\indexed db\\indexeddb.edb.partially.cryptonar")) returned 1 [0145.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", lpFilePart=0x0) returned 0x75 [0145.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", lpFilePart=0x0) returned 0x75 [0145.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin", lpFilePart=0x0) returned 0x75 [0145.275] SetErrorMode (uMode=0x1) returned 0x0 [0145.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.286] SetErrorMode (uMode=0x0) returned 0x1 [0145.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", lpFilePart=0x0) returned 0x7a [0145.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", lpFilePart=0x0) returned 0x7a [0145.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1", lpFilePart=0x0) returned 0x7a [0145.289] SetErrorMode (uMode=0x1) returned 0x0 [0145.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.298] SetErrorMode (uMode=0x0) returned 0x1 [0145.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", lpFilePart=0x0) returned 0x7a [0145.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", lpFilePart=0x0) returned 0x7a [0145.300] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2", lpFilePart=0x0) returned 0x7a [0145.300] SetErrorMode (uMode=0x1) returned 0x0 [0145.300] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\LocalState\\speech_onecorereg.bin.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\localstate\\speech_onecorereg.bin.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.304] SetErrorMode (uMode=0x0) returned 0x1 [0145.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0145.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0145.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat", lpFilePart=0x0) returned 0xba [0145.311] SetErrorMode (uMode=0x1) returned 0x0 [0145.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.313] SetErrorMode (uMode=0x0) returned 0x1 [0145.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0145.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0145.314] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0145.314] SetErrorMode (uMode=0x1) returned 0x0 [0145.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.316] GetFileType (hFile=0x230) returned 0x1 [0145.316] SetErrorMode (uMode=0x0) returned 0x1 [0145.316] GetFileType (hFile=0x230) returned 0x1 [0145.316] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.316] ReadFile (in: hFile=0x230, lpBuffer=0x2774970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2774970*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0145.316] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.316] CloseHandle (hObject=0x230) returned 1 [0145.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0145.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1", lpFilePart=0x0) returned 0xbf [0145.316] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar", lpFilePart=0x0) returned 0xd3 [0145.317] SetErrorMode (uMode=0x1) returned 0x0 [0145.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb71f38ce, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb71f38ce, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.317] SetErrorMode (uMode=0x0) returned 0x1 [0145.317] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0145.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0145.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0145.320] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0145.320] SetErrorMode (uMode=0x1) returned 0x0 [0145.320] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.321] GetFileType (hFile=0x230) returned 0x1 [0145.321] SetErrorMode (uMode=0x0) returned 0x1 [0145.321] GetFileType (hFile=0x230) returned 0x1 [0145.321] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.321] ReadFile (in: hFile=0x230, lpBuffer=0x2778410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2778410*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0145.321] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.321] CloseHandle (hObject=0x230) returned 1 [0145.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0145.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2", lpFilePart=0x0) returned 0xbf [0145.322] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar", lpFilePart=0x0) returned 0xd3 [0145.322] SetErrorMode (uMode=0x1) returned 0x0 [0145.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb71f38ce, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb71f38ce, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb71f38ce, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.322] SetErrorMode (uMode=0x0) returned 0x1 [0145.322] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Microsoft.Windows.Cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\microsoft.windows.cortana_1.4.8.152_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0145.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0145.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0145.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock", lpFilePart=0x0) returned 0x6a [0145.324] SetErrorMode (uMode=0x1) returned 0x0 [0145.324] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.326] GetFileType (hFile=0x230) returned 0x1 [0145.326] SetErrorMode (uMode=0x0) returned 0x1 [0145.326] GetFileType (hFile=0x230) returned 0x1 [0145.326] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.326] ReadFile (in: hFile=0x230, lpBuffer=0x277bc88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277bc88*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0145.326] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.327] CloseHandle (hObject=0x230) returned 1 [0145.327] SetErrorMode (uMode=0x1) returned 0x0 [0145.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6a5a0a3, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb6a5a0a3, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb6a5a0a3, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.327] SetErrorMode (uMode=0x0) returned 0x1 [0145.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0145.329] SetErrorMode (uMode=0x1) returned 0x0 [0145.329] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.331] SetErrorMode (uMode=0x0) returned 0x1 [0145.332] SetErrorMode (uMode=0x1) returned 0x0 [0145.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.334] SetErrorMode (uMode=0x0) returned 0x1 [0145.335] SetErrorMode (uMode=0x1) returned 0x0 [0145.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.cortana_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.336] SetErrorMode (uMode=0x0) returned 0x1 [0145.338] SetErrorMode (uMode=0x1) returned 0x0 [0145.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.341] SetErrorMode (uMode=0x0) returned 0x1 [0145.341] GetFileType (hFile=0x230) returned 0x1 [0145.341] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.345] SetErrorMode (uMode=0x1) returned 0x0 [0145.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb81bf27f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb833ca01, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5915cba8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0145.345] SetErrorMode (uMode=0x0) returned 0x1 [0145.345] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0145.348] SetErrorMode (uMode=0x1) returned 0x0 [0145.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.350] SetErrorMode (uMode=0x0) returned 0x1 [0145.350] GetFileType (hFile=0x230) returned 0x1 [0145.350] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.353] SetErrorMode (uMode=0x1) returned 0x0 [0145.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb81e54db, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb81e54db, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5915cba8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0145.353] SetErrorMode (uMode=0x0) returned 0x1 [0145.354] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0145.355] SetErrorMode (uMode=0x1) returned 0x0 [0145.355] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.357] SetErrorMode (uMode=0x0) returned 0x1 [0145.357] GetFileType (hFile=0x230) returned 0x1 [0145.357] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.357] SetErrorMode (uMode=0x1) returned 0x0 [0145.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb81e54db, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb81e54db, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb81e54db, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.357] SetErrorMode (uMode=0x0) returned 0x1 [0145.357] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Microsoft.Windows.ParentalControls_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0145.359] SetErrorMode (uMode=0x1) returned 0x0 [0145.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.362] SetErrorMode (uMode=0x0) returned 0x1 [0145.362] GetFileType (hFile=0x230) returned 0x1 [0145.362] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.362] SetErrorMode (uMode=0x1) returned 0x0 [0145.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f5ccde, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb7f5ccde, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xb7f5ccde, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.362] SetErrorMode (uMode=0x0) returned 0x1 [0145.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0145.364] SetErrorMode (uMode=0x1) returned 0x0 [0145.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.365] SetErrorMode (uMode=0x0) returned 0x1 [0145.365] GetFileType (hFile=0x230) returned 0x1 [0145.365] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.367] SetErrorMode (uMode=0x1) returned 0x0 [0145.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f5ccde, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x71793621, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x59183a5d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.367] SetErrorMode (uMode=0x0) returned 0x1 [0145.367] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0145.369] SetErrorMode (uMode=0x1) returned 0x0 [0145.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.370] SetErrorMode (uMode=0x0) returned 0x1 [0145.370] GetFileType (hFile=0x230) returned 0x1 [0145.370] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.373] SetErrorMode (uMode=0x1) returned 0x0 [0145.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7144c26e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7144c26e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x591a7db1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.373] SetErrorMode (uMode=0x0) returned 0x1 [0145.373] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0145.374] SetErrorMode (uMode=0x1) returned 0x0 [0145.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.376] SetErrorMode (uMode=0x0) returned 0x1 [0145.376] GetFileType (hFile=0x230) returned 0x1 [0145.376] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.376] SetErrorMode (uMode=0x1) returned 0x0 [0145.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7144c26e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7144c26e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7144c26e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.376] SetErrorMode (uMode=0x0) returned 0x1 [0145.376] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ParentalControls_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.parentalcontrols_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0145.377] SetErrorMode (uMode=0x1) returned 0x0 [0145.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.380] SetErrorMode (uMode=0x0) returned 0x1 [0145.380] GetFileType (hFile=0x230) returned 0x1 [0145.380] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.389] SetErrorMode (uMode=0x1) returned 0x0 [0145.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bc48d6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34bc48d6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x591cf355, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0145.389] SetErrorMode (uMode=0x0) returned 0x1 [0145.389] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite.partially.cryptonar")) returned 1 [0145.391] SetErrorMode (uMode=0x1) returned 0x0 [0145.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-shm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.392] SetErrorMode (uMode=0x0) returned 0x1 [0145.392] GetFileType (hFile=0x230) returned 0x1 [0145.392] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.408] SetErrorMode (uMode=0x1) returned 0x0 [0145.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-shm"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da6369, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35da6369, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x591f42f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0145.408] SetErrorMode (uMode=0x0) returned 0x1 [0145.409] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-shm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-shm.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-shm.partially.cryptonar")) returned 1 [0145.410] SetErrorMode (uMode=0x1) returned 0x0 [0145.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-wal"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.411] SetErrorMode (uMode=0x0) returned 0x1 [0145.411] GetFileType (hFile=0x230) returned 0x1 [0145.411] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.439] SetErrorMode (uMode=0x1) returned 0x0 [0145.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-wal"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da6369, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35da6369, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5924078f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x65998)) returned 1 [0145.440] SetErrorMode (uMode=0x0) returned 0x1 [0145.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-wal"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\MediaDb.v1.sqlite-wal.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\mediadb.v1.sqlite-wal.partially.cryptonar")) returned 1 [0145.441] SetErrorMode (uMode=0x1) returned 0x0 [0145.441] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.442] SetErrorMode (uMode=0x0) returned 0x1 [0145.442] GetFileType (hFile=0x230) returned 0x1 [0145.443] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.483] SetErrorMode (uMode=0x1) returned 0x0 [0145.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.etl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a3ad7db, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a3ad7db, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x592b2c92, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0145.483] SetErrorMode (uMode=0x0) returned 0x1 [0145.484] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.etl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.etl.partially.cryptonar")) returned 1 [0145.485] SetErrorMode (uMode=0x1) returned 0x0 [0145.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.last.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.486] SetErrorMode (uMode=0x0) returned 0x1 [0145.486] GetFileType (hFile=0x230) returned 0x1 [0145.486] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.498] SetErrorMode (uMode=0x1) returned 0x0 [0145.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.last.etl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf536f66b, ftCreationTime.dwHighDateTime=0x1d2d40c, ftLastAccessTime.dwLowDateTime=0xf536f66b, ftLastAccessTime.dwHighDateTime=0x1d2d40c, ftLastWriteTime.dwLowDateTime=0x592d908a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0145.499] SetErrorMode (uMode=0x0) returned 0x1 [0145.499] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.last.etl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\LocalState\\PhotosAppTracing_BGTask.last.etl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\localstate\\photosapptracing_bgtask.last.etl.partially.cryptonar")) returned 1 [0145.500] SetErrorMode (uMode=0x1) returned 0x0 [0145.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.503] SetErrorMode (uMode=0x0) returned 0x1 [0145.503] GetFileType (hFile=0x230) returned 0x1 [0145.503] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.506] SetErrorMode (uMode=0x1) returned 0x0 [0145.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ae472b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x58dd820d, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x592d908a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0145.506] SetErrorMode (uMode=0x0) returned 0x1 [0145.506] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0145.507] SetErrorMode (uMode=0x1) returned 0x0 [0145.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.509] SetErrorMode (uMode=0x0) returned 0x1 [0145.509] GetFileType (hFile=0x230) returned 0x1 [0145.509] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.509] SetErrorMode (uMode=0x1) returned 0x0 [0145.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x10ba32f4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x10ba32f4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x10ba32f4, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.509] SetErrorMode (uMode=0x0) returned 0x1 [0145.509] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0145.511] SetErrorMode (uMode=0x1) returned 0x0 [0145.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.512] SetErrorMode (uMode=0x0) returned 0x1 [0145.513] GetFileType (hFile=0x230) returned 0x1 [0145.513] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.513] SetErrorMode (uMode=0x1) returned 0x0 [0145.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x10bc9550, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x10bc9550, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x10bc9550, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.513] SetErrorMode (uMode=0x0) returned 0x1 [0145.513] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Microsoft.Windows.Photos_15.618.18170.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\microsoft.windows.photos_15.618.18170.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0145.515] SetErrorMode (uMode=0x1) returned 0x0 [0145.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.518] SetErrorMode (uMode=0x0) returned 0x1 [0145.518] GetFileType (hFile=0x230) returned 0x1 [0145.518] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.518] SetErrorMode (uMode=0x1) returned 0x0 [0145.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103e386d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x103e386d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x103e386d, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.518] SetErrorMode (uMode=0x0) returned 0x1 [0145.518] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0145.520] SetErrorMode (uMode=0x1) returned 0x0 [0145.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.521] SetErrorMode (uMode=0x0) returned 0x1 [0145.521] GetFileType (hFile=0x230) returned 0x1 [0145.521] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.523] SetErrorMode (uMode=0x1) returned 0x0 [0145.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x103bd623, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x5908729e, ftLastAccessTime.dwHighDateTime=0x1d41fda, ftLastWriteTime.dwLowDateTime=0x592ffc0c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.524] SetErrorMode (uMode=0x0) returned 0x1 [0145.524] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0145.525] SetErrorMode (uMode=0x1) returned 0x0 [0145.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.527] SetErrorMode (uMode=0x0) returned 0x1 [0145.527] GetFileType (hFile=0x230) returned 0x1 [0145.527] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.529] SetErrorMode (uMode=0x1) returned 0x0 [0145.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1bf187e3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1bf187e3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59325516, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.529] SetErrorMode (uMode=0x0) returned 0x1 [0145.530] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0145.531] SetErrorMode (uMode=0x1) returned 0x0 [0145.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.532] SetErrorMode (uMode=0x0) returned 0x1 [0145.532] GetFileType (hFile=0x230) returned 0x1 [0145.532] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.533] SetErrorMode (uMode=0x1) returned 0x0 [0145.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1bf187e3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1bf187e3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1bf187e3, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.534] SetErrorMode (uMode=0x0) returned 0x1 [0145.534] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.Photos_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.photos_8wekyb3d8bbwe\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0145.535] SetErrorMode (uMode=0x1) returned 0x0 [0145.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.536] SetErrorMode (uMode=0x0) returned 0x1 [0145.537] GetFileType (hFile=0x230) returned 0x1 [0145.537] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.558] SetErrorMode (uMode=0x1) returned 0x0 [0145.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0627861, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0627861, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5934b74f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16dc8)) returned 1 [0145.558] SetErrorMode (uMode=0x0) returned 0x1 [0145.558] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\1605653898\\4275773285.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\1605653898\\4275773285.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\1605653898\\4275773285.pri.partially.cryptonar")) returned 1 [0145.560] SetErrorMode (uMode=0x1) returned 0x0 [0145.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\2646675675\\806068533.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.562] SetErrorMode (uMode=0x0) returned 0x1 [0145.562] GetFileType (hFile=0x230) returned 0x1 [0145.562] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.563] SetErrorMode (uMode=0x1) returned 0x0 [0145.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\2646675675\\806068533.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a9ff29, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0a9ff29, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x593718f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfd8)) returned 1 [0145.563] SetErrorMode (uMode=0x0) returned 0x1 [0145.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\2646675675\\806068533.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\2646675675\\806068533.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\2646675675\\806068533.pri.partially.cryptonar")) returned 1 [0145.565] SetErrorMode (uMode=0x1) returned 0x0 [0145.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.566] SetErrorMode (uMode=0x0) returned 0x1 [0145.566] GetFileType (hFile=0x230) returned 0x1 [0145.566] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.567] SetErrorMode (uMode=0x1) returned 0x0 [0145.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6158b0a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc6158b0a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x593718f8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb068)) returned 1 [0145.568] SetErrorMode (uMode=0x0) returned 0x1 [0145.568] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3295484897\\2504515037.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3295484897\\2504515037.pri.partially.cryptonar")) returned 1 [0145.569] SetErrorMode (uMode=0x1) returned 0x0 [0145.569] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.570] SetErrorMode (uMode=0x0) returned 0x1 [0145.570] GetFileType (hFile=0x230) returned 0x1 [0145.570] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.584] SetErrorMode (uMode=0x1) returned 0x0 [0145.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a79cc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd0a79cc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x59397be0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0145.585] SetErrorMode (uMode=0x0) returned 0x1 [0145.585] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri.partially.cryptonar")) returned 1 [0145.586] SetErrorMode (uMode=0x1) returned 0x0 [0145.587] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.588] SetErrorMode (uMode=0x0) returned 0x1 [0145.588] GetFileType (hFile=0x230) returned 0x1 [0145.588] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.614] SetErrorMode (uMode=0x1) returned 0x0 [0145.614] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd064dabd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd064dabd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x593e419c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13b60)) returned 1 [0145.615] SetErrorMode (uMode=0x0) returned 0x1 [0145.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3530508098\\2495906576.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\ac\\microsoft\\windows\\3530508098\\2495906576.pri.partially.cryptonar")) returned 1 [0145.616] SetErrorMode (uMode=0x1) returned 0x0 [0145.616] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.618] SetErrorMode (uMode=0x0) returned 0x1 [0145.619] SetErrorMode (uMode=0x1) returned 0x0 [0145.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.620] SetErrorMode (uMode=0x0) returned 0x1 [0145.620] GetFileType (hFile=0x230) returned 0x1 [0145.620] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.622] SetErrorMode (uMode=0x1) returned 0x0 [0145.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbad8e729, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbad8e729, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5940a1f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1 [0145.623] SetErrorMode (uMode=0x0) returned 0x1 [0145.623] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0145.624] SetErrorMode (uMode=0x1) returned 0x0 [0145.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.626] SetErrorMode (uMode=0x0) returned 0x1 [0145.626] GetFileType (hFile=0x230) returned 0x1 [0145.626] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.627] SetErrorMode (uMode=0x1) returned 0x0 [0145.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbadb496c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbadb496c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbadb496c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.627] SetErrorMode (uMode=0x0) returned 0x1 [0145.628] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Microsoft.Windows.ShellExperienceHost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\microsoft.windows.shellexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0145.629] SetErrorMode (uMode=0x1) returned 0x0 [0145.629] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.630] SetErrorMode (uMode=0x0) returned 0x1 [0145.630] GetFileType (hFile=0x230) returned 0x1 [0145.630] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.631] SetErrorMode (uMode=0x1) returned 0x0 [0145.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba772689, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xba772689, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xba772689, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.631] SetErrorMode (uMode=0x0) returned 0x1 [0145.631] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0145.632] SetErrorMode (uMode=0x1) returned 0x0 [0145.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.634] SetErrorMode (uMode=0x0) returned 0x1 [0145.635] SetErrorMode (uMode=0x1) returned 0x0 [0145.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.636] SetErrorMode (uMode=0x0) returned 0x1 [0145.638] SetErrorMode (uMode=0x1) returned 0x0 [0145.638] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.639] SetErrorMode (uMode=0x0) returned 0x1 [0145.640] SetErrorMode (uMode=0x1) returned 0x0 [0145.640] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Data.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_data.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.642] SetErrorMode (uMode=0x0) returned 0x1 [0145.643] SetErrorMode (uMode=0x1) returned 0x0 [0145.643] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\\TempState\\TileCache_100_0_Header.bin" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windows.shellexperiencehost_cw5n1h2txyewy\\tempstate\\tilecache_100_0_header.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.644] SetErrorMode (uMode=0x0) returned 0x1 [0145.645] SetErrorMode (uMode=0x1) returned 0x0 [0145.645] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.649] SetErrorMode (uMode=0x0) returned 0x1 [0145.649] GetFileType (hFile=0x230) returned 0x1 [0145.649] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.754] SetErrorMode (uMode=0x1) returned 0x0 [0145.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae8d621, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe110cb69, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5953c520, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0145.755] SetErrorMode (uMode=0x0) returned 0x1 [0145.755] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0145.756] SetErrorMode (uMode=0x1) returned 0x0 [0145.756] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.758] SetErrorMode (uMode=0x0) returned 0x1 [0145.758] GetFileType (hFile=0x230) returned 0x1 [0145.758] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.772] SetErrorMode (uMode=0x1) returned 0x0 [0145.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdaed9ad6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdaed9ad6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x59561771, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0145.772] SetErrorMode (uMode=0x0) returned 0x1 [0145.772] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0145.774] SetErrorMode (uMode=0x1) returned 0x0 [0145.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.775] SetErrorMode (uMode=0x0) returned 0x1 [0145.775] GetFileType (hFile=0x230) returned 0x1 [0145.775] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.775] SetErrorMode (uMode=0x1) returned 0x0 [0145.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xdaed9ad6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdaed9ad6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xdaed9ad6, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.775] SetErrorMode (uMode=0x0) returned 0x1 [0145.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Microsoft.WindowsAlarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\microsoft.windowsalarms_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0145.777] SetErrorMode (uMode=0x1) returned 0x0 [0145.777] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.789] SetErrorMode (uMode=0x0) returned 0x1 [0145.789] GetFileType (hFile=0x230) returned 0x1 [0145.789] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.789] SetErrorMode (uMode=0x1) returned 0x0 [0145.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4adced3, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd4adced3, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xd4adced3, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.790] SetErrorMode (uMode=0x0) returned 0x1 [0145.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0145.791] SetErrorMode (uMode=0x1) returned 0x0 [0145.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.792] SetErrorMode (uMode=0x0) returned 0x1 [0145.792] GetFileType (hFile=0x230) returned 0x1 [0145.793] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.815] SetErrorMode (uMode=0x1) returned 0x0 [0145.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd110bbca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd110bbca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x595d3f56, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.815] SetErrorMode (uMode=0x0) returned 0x1 [0145.815] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsAlarms_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsalarms_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0145.817] SetErrorMode (uMode=0x1) returned 0x0 [0145.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.820] SetErrorMode (uMode=0x0) returned 0x1 [0145.820] GetFileType (hFile=0x230) returned 0x1 [0145.820] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.833] SetErrorMode (uMode=0x1) returned 0x0 [0145.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb30a7fc, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xca07b29, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x595fa177, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.833] SetErrorMode (uMode=0x0) returned 0x1 [0145.833] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0145.835] SetErrorMode (uMode=0x1) returned 0x0 [0145.835] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.836] SetErrorMode (uMode=0x0) returned 0x1 [0145.836] GetFileType (hFile=0x230) returned 0x1 [0145.836] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.838] SetErrorMode (uMode=0x1) returned 0x0 [0145.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb356dd9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xb356dd9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x595fa177, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.838] SetErrorMode (uMode=0x0) returned 0x1 [0145.838] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0145.840] SetErrorMode (uMode=0x1) returned 0x0 [0145.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.841] SetErrorMode (uMode=0x0) returned 0x1 [0145.841] GetFileType (hFile=0x230) returned 0x1 [0145.841] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.842] SetErrorMode (uMode=0x1) returned 0x0 [0145.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb356dd9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xb356dd9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xb356dd9, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.842] SetErrorMode (uMode=0x0) returned 0x1 [0145.842] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Microsoft.WindowsCalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\microsoft.windowscalculator_10.1506.19010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0145.846] SetErrorMode (uMode=0x1) returned 0x0 [0145.846] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.847] SetErrorMode (uMode=0x0) returned 0x1 [0145.847] GetFileType (hFile=0x230) returned 0x1 [0145.847] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.848] SetErrorMode (uMode=0x1) returned 0x0 [0145.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc80580, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xc80580, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0xc80580, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.848] SetErrorMode (uMode=0x0) returned 0x1 [0145.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0145.849] SetErrorMode (uMode=0x1) returned 0x0 [0145.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.850] SetErrorMode (uMode=0x0) returned 0x1 [0145.850] GetFileType (hFile=0x230) returned 0x1 [0145.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.853] SetErrorMode (uMode=0x1) returned 0x0 [0145.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1880, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xbc1880, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59620398, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.853] SetErrorMode (uMode=0x0) returned 0x1 [0145.853] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCalculator_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscalculator_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0145.855] SetErrorMode (uMode=0x1) returned 0x0 [0145.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.859] SetErrorMode (uMode=0x0) returned 0x1 [0145.859] GetFileType (hFile=0x230) returned 0x1 [0145.859] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.900] SetErrorMode (uMode=0x1) returned 0x0 [0145.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe3f8e4b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe9a2866, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x59692afa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0145.901] SetErrorMode (uMode=0x0) returned 0x1 [0145.901] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0145.902] SetErrorMode (uMode=0x1) returned 0x0 [0145.902] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.904] SetErrorMode (uMode=0x0) returned 0x1 [0145.904] GetFileType (hFile=0x230) returned 0x1 [0145.904] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.907] SetErrorMode (uMode=0x1) returned 0x0 [0145.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe44530c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe44530c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x596b8d31, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0145.907] SetErrorMode (uMode=0x0) returned 0x1 [0145.907] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0145.909] SetErrorMode (uMode=0x1) returned 0x0 [0145.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.910] SetErrorMode (uMode=0x0) returned 0x1 [0145.910] GetFileType (hFile=0x230) returned 0x1 [0145.910] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.910] SetErrorMode (uMode=0x1) returned 0x0 [0145.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfe44530c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe44530c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfe44530c, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.910] SetErrorMode (uMode=0x0) returned 0x1 [0145.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Microsoft.WindowsCamera_5.38.3003.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\microsoft.windowscamera_5.38.3003.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0145.912] SetErrorMode (uMode=0x1) returned 0x0 [0145.912] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.913] SetErrorMode (uMode=0x0) returned 0x1 [0145.913] GetFileType (hFile=0x230) returned 0x1 [0145.913] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.913] SetErrorMode (uMode=0x1) returned 0x0 [0145.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1bc962, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe1bc962, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfe1bc962, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.914] SetErrorMode (uMode=0x0) returned 0x1 [0145.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0145.915] SetErrorMode (uMode=0x1) returned 0x0 [0145.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.916] SetErrorMode (uMode=0x0) returned 0x1 [0145.916] GetFileType (hFile=0x230) returned 0x1 [0145.916] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.919] SetErrorMode (uMode=0x1) returned 0x0 [0145.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe196700, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe196700, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x596deecf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.919] SetErrorMode (uMode=0x0) returned 0x1 [0145.919] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsCamera_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscamera_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0145.920] SetErrorMode (uMode=0x1) returned 0x0 [0145.921] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.923] SetErrorMode (uMode=0x0) returned 0x1 [0145.923] GetFileType (hFile=0x230) returned 0x1 [0145.923] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.942] SetErrorMode (uMode=0x1) returned 0x0 [0145.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee8f44d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7f2af44e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5970519e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0145.942] SetErrorMode (uMode=0x0) returned 0x1 [0145.943] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0145.944] SetErrorMode (uMode=0x1) returned 0x0 [0145.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.945] SetErrorMode (uMode=0x0) returned 0x1 [0145.945] GetFileType (hFile=0x230) returned 0x1 [0145.945] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.946] SetErrorMode (uMode=0x1) returned 0x0 [0145.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7eebda84, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7eebda84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7eebda84, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.946] SetErrorMode (uMode=0x0) returned 0x1 [0145.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0145.950] SetErrorMode (uMode=0x1) returned 0x0 [0145.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.951] SetErrorMode (uMode=0x0) returned 0x1 [0145.951] GetFileType (hFile=0x230) returned 0x1 [0145.951] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.952] SetErrorMode (uMode=0x1) returned 0x0 [0145.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7eebda84, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7eebda84, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7eebda84, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.952] SetErrorMode (uMode=0x0) returned 0x1 [0145.952] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\microsoft.windowscommunicationsapps_17.6002.42251.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0145.954] SetErrorMode (uMode=0x1) returned 0x0 [0145.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.955] SetErrorMode (uMode=0x0) returned 0x1 [0145.955] GetFileType (hFile=0x230) returned 0x1 [0145.955] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.955] SetErrorMode (uMode=0x1) returned 0x0 [0145.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6bfa00, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e6bfa00, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x7e6bfa00, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.956] SetErrorMode (uMode=0x0) returned 0x1 [0145.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0145.957] SetErrorMode (uMode=0x1) returned 0x0 [0145.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.959] SetErrorMode (uMode=0x0) returned 0x1 [0145.959] GetFileType (hFile=0x230) returned 0x1 [0145.959] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0145.966] SetErrorMode (uMode=0x1) returned 0x0 [0145.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e6babf6, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7e6babf6, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5972b46b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0145.968] SetErrorMode (uMode=0x0) returned 0x1 [0145.969] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0145.975] SetErrorMode (uMode=0x1) returned 0x0 [0145.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0145.977] SetErrorMode (uMode=0x0) returned 0x1 [0145.977] GetFileType (hFile=0x230) returned 0x1 [0145.977] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.020] SetErrorMode (uMode=0x1) returned 0x0 [0146.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe438fa4e, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe438fa4e, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x597c632f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7ee0)) returned 1 [0146.020] SetErrorMode (uMode=0x0) returned 0x1 [0146.020] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\AC\\Microsoft\\Windows\\3375042201\\1858609885.pri.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\ac\\microsoft\\windows\\3375042201\\1858609885.pri.partially.cryptonar")) returned 1 [0146.022] SetErrorMode (uMode=0x1) returned 0x0 [0146.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\_sessionstate.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.024] SetErrorMode (uMode=0x0) returned 0x1 [0146.024] GetFileType (hFile=0x230) returned 0x1 [0146.024] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.025] SetErrorMode (uMode=0x1) returned 0x0 [0146.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\_sessionstate.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe863d465, ftCreationTime.dwHighDateTime=0x1d2d439, ftLastAccessTime.dwLowDateTime=0xe863d465, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x597c632f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1cb)) returned 1 [0146.025] SetErrorMode (uMode=0x0) returned 0x1 [0146.026] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\_sessionstate.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\LocalState\\_sessionState.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\localstate\\_sessionstate.xml.partially.cryptonar")) returned 1 [0146.027] SetErrorMode (uMode=0x1) returned 0x0 [0146.027] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.030] SetErrorMode (uMode=0x0) returned 0x1 [0146.030] GetFileType (hFile=0x230) returned 0x1 [0146.030] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.032] SetErrorMode (uMode=0x1) returned 0x0 [0146.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe8748565, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x597e9fbe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0146.032] SetErrorMode (uMode=0x0) returned 0x1 [0146.033] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0146.034] SetErrorMode (uMode=0x1) returned 0x0 [0146.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.035] SetErrorMode (uMode=0x0) returned 0x1 [0146.035] GetFileType (hFile=0x230) returned 0x1 [0146.035] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.090] SetErrorMode (uMode=0x1) returned 0x0 [0146.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc8f9880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5985c6ae, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0146.090] SetErrorMode (uMode=0x0) returned 0x1 [0146.090] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0146.092] SetErrorMode (uMode=0x1) returned 0x0 [0146.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.093] SetErrorMode (uMode=0x0) returned 0x1 [0146.093] GetFileType (hFile=0x230) returned 0x1 [0146.093] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.093] SetErrorMode (uMode=0x1) returned 0x0 [0146.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbc8f9880, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc8f9880, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc8f9880, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.093] SetErrorMode (uMode=0x0) returned 0x1 [0146.094] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Microsoft.WindowsFeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\microsoft.windowsfeedback_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0146.095] SetErrorMode (uMode=0x1) returned 0x0 [0146.095] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.098] SetErrorMode (uMode=0x0) returned 0x1 [0146.098] GetFileType (hFile=0x230) returned 0x1 [0146.098] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.098] SetErrorMode (uMode=0x1) returned 0x0 [0146.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc566002, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbc566002, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbc566002, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.098] SetErrorMode (uMode=0x0) returned 0x1 [0146.098] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0146.099] SetErrorMode (uMode=0x1) returned 0x0 [0146.099] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.100] SetErrorMode (uMode=0x0) returned 0x1 [0146.100] GetFileType (hFile=0x230) returned 0x1 [0146.100] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.102] SetErrorMode (uMode=0x1) returned 0x0 [0146.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc566002, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xe88070d4, ftLastAccessTime.dwHighDateTime=0x1d2d439, ftLastWriteTime.dwLowDateTime=0x59882895, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.102] SetErrorMode (uMode=0x0) returned 0x1 [0146.102] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0146.105] SetErrorMode (uMode=0x1) returned 0x0 [0146.105] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.106] SetErrorMode (uMode=0x0) returned 0x1 [0146.106] GetFileType (hFile=0x230) returned 0x1 [0146.106] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.122] SetErrorMode (uMode=0x1) returned 0x0 [0146.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x598cedfe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.122] SetErrorMode (uMode=0x0) returned 0x1 [0146.122] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0146.124] SetErrorMode (uMode=0x1) returned 0x0 [0146.124] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.125] SetErrorMode (uMode=0x0) returned 0x1 [0146.125] GetFileType (hFile=0x230) returned 0x1 [0146.125] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.125] SetErrorMode (uMode=0x1) returned 0x0 [0146.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78519925, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.126] SetErrorMode (uMode=0x0) returned 0x1 [0146.126] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsFeedback_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsfeedback_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0146.127] SetErrorMode (uMode=0x1) returned 0x0 [0146.127] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.130] SetErrorMode (uMode=0x0) returned 0x1 [0146.130] GetFileType (hFile=0x230) returned 0x1 [0146.130] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.159] SetErrorMode (uMode=0x1) returned 0x0 [0146.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6f86c1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfbb4ab17, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5991b324, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0146.159] SetErrorMode (uMode=0x0) returned 0x1 [0146.159] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0146.161] SetErrorMode (uMode=0x1) returned 0x0 [0146.161] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.162] SetErrorMode (uMode=0x0) returned 0x1 [0146.162] GetFileType (hFile=0x230) returned 0x1 [0146.162] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.163] SetErrorMode (uMode=0x1) returned 0x0 [0146.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb71e8f8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb71e8f8, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5991b324, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc000)) returned 1 [0146.164] SetErrorMode (uMode=0x0) returned 0x1 [0146.164] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0146.165] SetErrorMode (uMode=0x1) returned 0x0 [0146.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.166] SetErrorMode (uMode=0x0) returned 0x1 [0146.166] GetFileType (hFile=0x230) returned 0x1 [0146.166] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.166] SetErrorMode (uMode=0x1) returned 0x0 [0146.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfb71e8f8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb71e8f8, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfb71e8f8, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.166] SetErrorMode (uMode=0x0) returned 0x1 [0146.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Microsoft.WindowsMaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\microsoft.windowsmaps_4.1505.50619.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0146.167] SetErrorMode (uMode=0x1) returned 0x0 [0146.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.169] SetErrorMode (uMode=0x0) returned 0x1 [0146.169] GetFileType (hFile=0x230) returned 0x1 [0146.169] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.169] SetErrorMode (uMode=0x1) returned 0x0 [0146.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfacd6696, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfacd6696, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xfacd6696, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.169] SetErrorMode (uMode=0x0) returned 0x1 [0146.169] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0146.170] SetErrorMode (uMode=0x1) returned 0x0 [0146.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.171] SetErrorMode (uMode=0x0) returned 0x1 [0146.171] GetFileType (hFile=0x230) returned 0x1 [0146.171] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.184] SetErrorMode (uMode=0x1) returned 0x0 [0146.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfab7f004, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfab7f004, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x599676ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.185] SetErrorMode (uMode=0x0) returned 0x1 [0146.185] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsMaps_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsmaps_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0146.186] SetErrorMode (uMode=0x1) returned 0x0 [0146.186] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.189] SetErrorMode (uMode=0x0) returned 0x1 [0146.189] GetFileType (hFile=0x230) returned 0x1 [0146.189] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.192] SetErrorMode (uMode=0x1) returned 0x0 [0146.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf81a8ca8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xadf9d66b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x599676ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0146.192] SetErrorMode (uMode=0x0) returned 0x1 [0146.192] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0146.194] SetErrorMode (uMode=0x1) returned 0x0 [0146.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.196] SetErrorMode (uMode=0x0) returned 0x1 [0146.196] GetFileType (hFile=0x230) returned 0x1 [0146.196] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.198] SetErrorMode (uMode=0x1) returned 0x0 [0146.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf81ceeee, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf81ceeee, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x599676ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0146.198] SetErrorMode (uMode=0x0) returned 0x1 [0146.198] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0146.200] SetErrorMode (uMode=0x1) returned 0x0 [0146.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.201] SetErrorMode (uMode=0x0) returned 0x1 [0146.202] GetFileType (hFile=0x230) returned 0x1 [0146.202] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.202] SetErrorMode (uMode=0x1) returned 0x0 [0146.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf81ceeee, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf81ceeee, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf81ceeee, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.202] SetErrorMode (uMode=0x0) returned 0x1 [0146.202] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Microsoft.WindowsPhone_10.1506.20010.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\microsoft.windowsphone_10.1506.20010.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0146.203] SetErrorMode (uMode=0x1) returned 0x0 [0146.204] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.205] SetErrorMode (uMode=0x0) returned 0x1 [0146.205] GetFileType (hFile=0x230) returned 0x1 [0146.205] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.205] SetErrorMode (uMode=0x1) returned 0x0 [0146.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf77d3241, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf77d3241, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf77d3241, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.205] SetErrorMode (uMode=0x0) returned 0x1 [0146.205] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0146.207] SetErrorMode (uMode=0x1) returned 0x0 [0146.207] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.208] SetErrorMode (uMode=0x0) returned 0x1 [0146.208] GetFileType (hFile=0x230) returned 0x1 [0146.208] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.222] SetErrorMode (uMode=0x1) returned 0x0 [0146.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf76c8073, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf76c8073, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x599b3d19, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.222] SetErrorMode (uMode=0x0) returned 0x1 [0146.222] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsPhone_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsphone_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0146.223] SetErrorMode (uMode=0x1) returned 0x0 [0146.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.226] SetErrorMode (uMode=0x0) returned 0x1 [0146.226] GetFileType (hFile=0x230) returned 0x1 [0146.226] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.251] SetErrorMode (uMode=0x1) returned 0x0 [0146.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5114ca1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf5435f06, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x59a001d5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0146.251] SetErrorMode (uMode=0x0) returned 0x1 [0146.251] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0146.253] SetErrorMode (uMode=0x1) returned 0x0 [0146.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.254] SetErrorMode (uMode=0x0) returned 0x1 [0146.254] GetFileType (hFile=0x230) returned 0x1 [0146.254] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.257] SetErrorMode (uMode=0x1) returned 0x0 [0146.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf5161274, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf5161274, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x59a001d5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0146.257] SetErrorMode (uMode=0x0) returned 0x1 [0146.257] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0146.259] SetErrorMode (uMode=0x1) returned 0x0 [0146.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.260] SetErrorMode (uMode=0x0) returned 0x1 [0146.260] GetFileType (hFile=0x230) returned 0x1 [0146.260] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.260] SetErrorMode (uMode=0x1) returned 0x0 [0146.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf5161274, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf5161274, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf5161274, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.260] SetErrorMode (uMode=0x0) returned 0x1 [0146.260] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Microsoft.WindowsSoundRecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\microsoft.windowssoundrecorder_10.1506.15100.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0146.262] SetErrorMode (uMode=0x1) returned 0x0 [0146.262] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.263] SetErrorMode (uMode=0x0) returned 0x1 [0146.263] GetFileType (hFile=0x230) returned 0x1 [0146.263] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.264] SetErrorMode (uMode=0x1) returned 0x0 [0146.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4823f5f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf4823f5f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf4823f5f, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.264] SetErrorMode (uMode=0x0) returned 0x1 [0146.264] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0146.265] SetErrorMode (uMode=0x1) returned 0x0 [0146.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.266] SetErrorMode (uMode=0x0) returned 0x1 [0146.266] GetFileType (hFile=0x230) returned 0x1 [0146.266] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.270] SetErrorMode (uMode=0x1) returned 0x0 [0146.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf473f0fc, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf473f0fc, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x59a26356, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.270] SetErrorMode (uMode=0x0) returned 0x1 [0146.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowssoundrecorder_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0146.272] SetErrorMode (uMode=0x1) returned 0x0 [0146.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.273] SetErrorMode (uMode=0x0) returned 0x1 [0146.273] GetFileType (hFile=0x230) returned 0x1 [0146.273] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.273] SetErrorMode (uMode=0x1) returned 0x0 [0146.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x32bbad17, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32bbad17, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x32bbad17, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.274] SetErrorMode (uMode=0x0) returned 0x1 [0146.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcache\\container.dat.partially.cryptonar")) returned 1 [0146.275] SetErrorMode (uMode=0x1) returned 0x0 [0146.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.276] SetErrorMode (uMode=0x0) returned 0x1 [0146.277] GetFileType (hFile=0x230) returned 0x1 [0146.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.277] SetErrorMode (uMode=0x1) returned 0x0 [0146.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x32be0f7c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32be0f7c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x32be0f7c, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.277] SetErrorMode (uMode=0x0) returned 0x1 [0146.277] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\INetCookies\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\inetcookies\\container.dat.partially.cryptonar")) returned 1 [0146.279] SetErrorMode (uMode=0x1) returned 0x0 [0146.279] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.282] SetErrorMode (uMode=0x0) returned 0x1 [0146.282] GetFileType (hFile=0x230) returned 0x1 [0146.282] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.312] SetErrorMode (uMode=0x1) returned 0x0 [0146.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32e1d430, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32e1d430, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59a98b06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1 [0146.312] SetErrorMode (uMode=0x0) returned 0x1 [0146.312] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0146.314] SetErrorMode (uMode=0x1) returned 0x0 [0146.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.316] SetErrorMode (uMode=0x0) returned 0x1 [0146.316] GetFileType (hFile=0x230) returned 0x1 [0146.316] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.316] SetErrorMode (uMode=0x1) returned 0x0 [0146.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.317] SetErrorMode (uMode=0x0) returned 0x1 [0146.317] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0146.318] SetErrorMode (uMode=0x1) returned 0x0 [0146.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.319] SetErrorMode (uMode=0x0) returned 0x1 [0146.319] GetFileType (hFile=0x230) returned 0x1 [0146.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.320] SetErrorMode (uMode=0x1) returned 0x0 [0146.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.320] SetErrorMode (uMode=0x0) returned 0x1 [0146.320] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0146.321] SetErrorMode (uMode=0x1) returned 0x0 [0146.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.322] SetErrorMode (uMode=0x0) returned 0x1 [0146.322] GetFileType (hFile=0x230) returned 0x1 [0146.322] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.324] SetErrorMode (uMode=0x1) returned 0x0 [0146.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32f9ab4c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32f9ab4c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59a98b06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0146.324] SetErrorMode (uMode=0x0) returned 0x1 [0146.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1.partially.cryptonar")) returned 1 [0146.326] SetErrorMode (uMode=0x1) returned 0x0 [0146.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.327] SetErrorMode (uMode=0x0) returned 0x1 [0146.327] GetFileType (hFile=0x230) returned 0x1 [0146.327] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.327] SetErrorMode (uMode=0x1) returned 0x0 [0146.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x33059644, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.327] SetErrorMode (uMode=0x0) returned 0x1 [0146.327] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0146.328] SetErrorMode (uMode=0x1) returned 0x0 [0146.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.331] SetErrorMode (uMode=0x0) returned 0x1 [0146.331] GetFileType (hFile=0x230) returned 0x1 [0146.331] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.332] SetErrorMode (uMode=0x1) returned 0x0 [0146.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32e1d430, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32e1d430, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59abebd4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0146.332] SetErrorMode (uMode=0x0) returned 0x1 [0146.332] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.partially.cryptonar")) returned 1 [0146.333] SetErrorMode (uMode=0x1) returned 0x0 [0146.334] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.334] SetErrorMode (uMode=0x0) returned 0x1 [0146.334] GetFileType (hFile=0x230) returned 0x1 [0146.335] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.336] SetErrorMode (uMode=0x1) returned 0x0 [0146.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59abebd4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12e)) returned 1 [0146.336] SetErrorMode (uMode=0x0) returned 0x1 [0146.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0146.337] SetErrorMode (uMode=0x1) returned 0x0 [0146.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.339] SetErrorMode (uMode=0x0) returned 0x1 [0146.339] GetFileType (hFile=0x230) returned 0x1 [0146.339] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.340] SetErrorMode (uMode=0x1) returned 0x0 [0146.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33033535, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33033535, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59abebd4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0146.340] SetErrorMode (uMode=0x0) returned 0x1 [0146.340] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0146.342] SetErrorMode (uMode=0x1) returned 0x0 [0146.342] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.342] SetErrorMode (uMode=0x0) returned 0x1 [0146.343] GetFileType (hFile=0x230) returned 0x1 [0146.343] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.344] SetErrorMode (uMode=0x1) returned 0x0 [0146.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x32f9ab4c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32f9ab4c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59ae4f41, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ea)) returned 1 [0146.344] SetErrorMode (uMode=0x0) returned 0x1 [0146.344] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\B912B2C6928A18B8CD7D50CF08BEA95B_2C7DBF3EF27E31A183ADD6317A482BD1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\b912b2c6928a18b8cd7d50cf08bea95b_2c7dbf3ef27e31a183add6317a482bd1.partially.cryptonar")) returned 1 [0146.442] SetErrorMode (uMode=0x1) returned 0x0 [0146.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.443] SetErrorMode (uMode=0x0) returned 0x1 [0146.443] GetFileType (hFile=0x230) returned 0x1 [0146.443] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.444] SetErrorMode (uMode=0x1) returned 0x0 [0146.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33059644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33059644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59bc9c98, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1 [0146.445] SetErrorMode (uMode=0x0) returned 0x1 [0146.445] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\AC\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\ac\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0146.446] SetErrorMode (uMode=0x1) returned 0x0 [0146.446] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.450] SetErrorMode (uMode=0x0) returned 0x1 [0146.450] GetFileType (hFile=0x230) returned 0x1 [0146.450] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.453] SetErrorMode (uMode=0x1) returned 0x0 [0146.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf281a60e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3b8fe691, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59bf0211, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0146.454] SetErrorMode (uMode=0x0) returned 0x1 [0146.454] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0146.456] SetErrorMode (uMode=0x1) returned 0x0 [0146.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.457] SetErrorMode (uMode=0x0) returned 0x1 [0146.457] GetFileType (hFile=0x230) returned 0x1 [0146.457] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.460] SetErrorMode (uMode=0x1) returned 0x0 [0146.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf2866964, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf2866964, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf2866964, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.460] SetErrorMode (uMode=0x0) returned 0x1 [0146.461] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0146.462] SetErrorMode (uMode=0x1) returned 0x0 [0146.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.464] GetFileType (hFile=0x230) returned 0x1 [0146.464] SetErrorMode (uMode=0x0) returned 0x1 [0146.464] GetFileType (hFile=0x230) returned 0x1 [0146.464] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.464] ReadFile (in: hFile=0x230, lpBuffer=0x26c4ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c4ea8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0146.464] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.464] SetErrorMode (uMode=0x1) returned 0x0 [0146.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf2866964, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf2866964, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf2866964, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.465] SetErrorMode (uMode=0x0) returned 0x1 [0146.465] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Microsoft.WindowsStore_2015.7.1.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\microsoft.windowsstore_2015.7.1.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0146.467] SetErrorMode (uMode=0x1) returned 0x0 [0146.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.471] GetFileType (hFile=0x230) returned 0x1 [0146.471] SetErrorMode (uMode=0x0) returned 0x1 [0146.471] GetFileType (hFile=0x230) returned 0x1 [0146.474] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.474] ReadFile (in: hFile=0x230, lpBuffer=0x26c8648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c8648*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0146.474] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.474] SetErrorMode (uMode=0x1) returned 0x0 [0146.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24ace27, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf24ace27, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf24ace27, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.474] SetErrorMode (uMode=0x0) returned 0x1 [0146.474] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0146.477] SetErrorMode (uMode=0x1) returned 0x0 [0146.477] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.478] GetFileType (hFile=0x230) returned 0x1 [0146.478] SetErrorMode (uMode=0x0) returned 0x1 [0146.478] GetFileType (hFile=0x230) returned 0x1 [0146.478] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.478] ReadFile (in: hFile=0x230, lpBuffer=0x26cba88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cba88*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0146.562] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0146.562] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.563] WriteFile (in: hFile=0x230, lpBuffer=0x26cba88*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cba88*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0146.587] SetErrorMode (uMode=0x1) returned 0x0 [0146.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24ace27, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3c261c50, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59d21313, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.587] SetErrorMode (uMode=0x0) returned 0x1 [0146.587] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0146.589] SetErrorMode (uMode=0x1) returned 0x0 [0146.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.590] GetFileType (hFile=0x230) returned 0x1 [0146.590] SetErrorMode (uMode=0x0) returned 0x1 [0146.590] GetFileType (hFile=0x230) returned 0x1 [0146.590] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.590] ReadFile (in: hFile=0x230, lpBuffer=0x26cf2f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26cf2f0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0146.592] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0146.592] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.592] WriteFile (in: hFile=0x230, lpBuffer=0x26cf2f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26cf2f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0146.593] SetErrorMode (uMode=0x1) returned 0x0 [0146.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1de3d4ad, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1de3d4ad, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x59d4a8d4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.593] SetErrorMode (uMode=0x0) returned 0x1 [0146.593] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0146.594] SetErrorMode (uMode=0x1) returned 0x0 [0146.594] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.595] GetFileType (hFile=0x230) returned 0x1 [0146.595] SetErrorMode (uMode=0x0) returned 0x1 [0146.595] GetFileType (hFile=0x230) returned 0x1 [0146.595] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.595] ReadFile (in: hFile=0x230, lpBuffer=0x26d2bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d2bb0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0146.595] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.595] SetErrorMode (uMode=0x1) returned 0x0 [0146.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1de3d4ad, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1de3d4ad, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x1de3d4ad, ftLastWriteTime.dwHighDateTime=0x1d2d029, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.595] SetErrorMode (uMode=0x0) returned 0x1 [0146.595] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.WindowsStore_8wekyb3d8bbwe\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.windowsstore_8wekyb3d8bbwe\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0146.596] SetErrorMode (uMode=0x1) returned 0x0 [0146.596] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.599] GetFileType (hFile=0x230) returned 0x1 [0146.599] SetErrorMode (uMode=0x0) returned 0x1 [0146.599] GetFileType (hFile=0x230) returned 0x1 [0146.599] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.599] ReadFile (in: hFile=0x230, lpBuffer=0x26d61c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d61c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0146.600] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0146.600] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.600] WriteFile (in: hFile=0x230, lpBuffer=0x26d61c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d61c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0146.601] SetErrorMode (uMode=0x1) returned 0x0 [0146.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf11c9768, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf12ae5a0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x59d4a8d4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0146.602] SetErrorMode (uMode=0x0) returned 0x1 [0146.602] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0146.603] SetErrorMode (uMode=0x1) returned 0x0 [0146.603] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.604] GetFileType (hFile=0x230) returned 0x1 [0146.604] SetErrorMode (uMode=0x0) returned 0x1 [0146.604] GetFileType (hFile=0x230) returned 0x1 [0146.604] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.604] ReadFile (in: hFile=0x230, lpBuffer=0x26d9e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d9e60*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0146.629] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0146.629] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.629] WriteFile (in: hFile=0x230, lpBuffer=0x26d9e60*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d9e60*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0146.630] SetErrorMode (uMode=0x1) returned 0x0 [0146.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf11ef9ca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf11ef9ca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x59d93b6f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1 [0146.630] SetErrorMode (uMode=0x0) returned 0x1 [0146.630] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0146.632] SetErrorMode (uMode=0x1) returned 0x0 [0146.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.633] GetFileType (hFile=0x230) returned 0x1 [0146.633] SetErrorMode (uMode=0x0) returned 0x1 [0146.633] GetFileType (hFile=0x230) returned 0x1 [0146.633] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.633] ReadFile (in: hFile=0x230, lpBuffer=0x26ddb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ddb38*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0146.633] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.633] SetErrorMode (uMode=0x1) returned 0x0 [0146.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf11ef9ca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf11ef9ca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf11ef9ca, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.633] SetErrorMode (uMode=0x0) returned 0x1 [0146.633] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Microsoft.XboxApp_5.6.17000.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\microsoft.xboxapp_5.6.17000.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0146.635] SetErrorMode (uMode=0x1) returned 0x0 [0146.635] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.636] GetFileType (hFile=0x230) returned 0x1 [0146.636] SetErrorMode (uMode=0x0) returned 0x1 [0146.636] GetFileType (hFile=0x230) returned 0x1 [0146.636] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.636] ReadFile (in: hFile=0x230, lpBuffer=0x26e1260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e1260*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0146.636] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.636] SetErrorMode (uMode=0x1) returned 0x0 [0146.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0fb3580, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf0fb3580, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xf0fb3580, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.636] SetErrorMode (uMode=0x0) returned 0x1 [0146.636] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0146.638] SetErrorMode (uMode=0x1) returned 0x0 [0146.638] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.639] GetFileType (hFile=0x230) returned 0x1 [0146.639] SetErrorMode (uMode=0x0) returned 0x1 [0146.639] GetFileType (hFile=0x230) returned 0x1 [0146.639] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.639] ReadFile (in: hFile=0x230, lpBuffer=0x26e4658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e4658*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0146.640] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0146.640] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.640] WriteFile (in: hFile=0x230, lpBuffer=0x26e4658*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e4658*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0146.641] SetErrorMode (uMode=0x1) returned 0x0 [0146.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0fb3580, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf0fb3580, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x59db9bf5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.641] SetErrorMode (uMode=0x0) returned 0x1 [0146.641] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxApp_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxapp_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0146.642] SetErrorMode (uMode=0x1) returned 0x0 [0146.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.644] GetFileType (hFile=0x230) returned 0x1 [0146.644] SetErrorMode (uMode=0x0) returned 0x1 [0146.644] GetFileType (hFile=0x230) returned 0x1 [0146.644] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.644] ReadFile (in: hFile=0x230, lpBuffer=0x26e80b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e80b8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0146.646] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0146.646] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.646] WriteFile (in: hFile=0x230, lpBuffer=0x26e80b8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e80b8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0146.646] SetErrorMode (uMode=0x1) returned 0x0 [0146.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbfbc677, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x59db9bf5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0146.646] SetErrorMode (uMode=0x0) returned 0x1 [0146.646] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0146.647] SetErrorMode (uMode=0x1) returned 0x0 [0146.647] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.648] GetFileType (hFile=0x230) returned 0x1 [0146.648] SetErrorMode (uMode=0x0) returned 0x1 [0146.648] GetFileType (hFile=0x230) returned 0x1 [0146.648] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.648] ReadFile (in: hFile=0x230, lpBuffer=0x26ec028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ec028*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0146.924] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0146.924] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.924] WriteFile (in: hFile=0x230, lpBuffer=0x26ec028*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ec028*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0146.982] SetErrorMode (uMode=0x1) returned 0x0 [0146.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbf49f6c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5a1010eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0146.982] SetErrorMode (uMode=0x0) returned 0x1 [0146.982] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0146.985] SetErrorMode (uMode=0x1) returned 0x0 [0146.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.986] GetFileType (hFile=0x230) returned 0x1 [0146.986] SetErrorMode (uMode=0x0) returned 0x1 [0146.986] GetFileType (hFile=0x230) returned 0x1 [0146.986] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.986] ReadFile (in: hFile=0x230, lpBuffer=0x26effd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26effd0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0146.987] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.987] SetErrorMode (uMode=0x1) returned 0x0 [0146.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbbf49f6c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbf49f6c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbf49f6c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.987] SetErrorMode (uMode=0x0) returned 0x1 [0146.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Microsoft.XboxGameCallableUI_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0146.988] SetErrorMode (uMode=0x1) returned 0x0 [0146.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.991] GetFileType (hFile=0x230) returned 0x1 [0146.991] SetErrorMode (uMode=0x0) returned 0x1 [0146.991] GetFileType (hFile=0x230) returned 0x1 [0146.991] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.992] ReadFile (in: hFile=0x230, lpBuffer=0x26f3920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f3920*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0146.992] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.992] SetErrorMode (uMode=0x1) returned 0x0 [0146.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe18c8f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbbe18c8f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbbe18c8f, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.992] SetErrorMode (uMode=0x0) returned 0x1 [0146.992] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0146.994] SetErrorMode (uMode=0x1) returned 0x0 [0146.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0146.995] GetFileType (hFile=0x230) returned 0x1 [0146.995] SetErrorMode (uMode=0x0) returned 0x1 [0146.995] GetFileType (hFile=0x230) returned 0x1 [0146.995] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.995] ReadFile (in: hFile=0x230, lpBuffer=0x26f6df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f6df0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0146.997] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0146.997] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0146.997] WriteFile (in: hFile=0x230, lpBuffer=0x26f6df0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f6df0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0146.997] SetErrorMode (uMode=0x1) returned 0x0 [0146.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbe18c8f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78860cef, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a127108, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0146.997] SetErrorMode (uMode=0x0) returned 0x1 [0146.997] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0146.999] SetErrorMode (uMode=0x1) returned 0x0 [0146.999] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.000] GetFileType (hFile=0x230) returned 0x1 [0147.000] SetErrorMode (uMode=0x0) returned 0x1 [0147.000] GetFileType (hFile=0x230) returned 0x1 [0147.000] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.000] ReadFile (in: hFile=0x230, lpBuffer=0x26fa6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fa6d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.002] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0147.002] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.002] WriteFile (in: hFile=0x230, lpBuffer=0x26fa6d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26fa6d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0147.002] SetErrorMode (uMode=0x1) returned 0x0 [0147.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x787a2105, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x787a2105, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a127108, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.002] SetErrorMode (uMode=0x0) returned 0x1 [0147.003] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0147.004] SetErrorMode (uMode=0x1) returned 0x0 [0147.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.005] GetFileType (hFile=0x230) returned 0x1 [0147.005] SetErrorMode (uMode=0x0) returned 0x1 [0147.005] GetFileType (hFile=0x230) returned 0x1 [0147.005] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.005] ReadFile (in: hFile=0x230, lpBuffer=0x26fdfe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fdfe0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0147.005] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.005] SetErrorMode (uMode=0x1) returned 0x0 [0147.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x787a2105, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x787a2105, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x787a2105, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.005] SetErrorMode (uMode=0x0) returned 0x1 [0147.006] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxGameCallableUI_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxgamecallableui_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0147.006] SetErrorMode (uMode=0x1) returned 0x0 [0147.006] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.009] GetFileType (hFile=0x230) returned 0x1 [0147.009] SetErrorMode (uMode=0x0) returned 0x1 [0147.009] GetFileType (hFile=0x230) returned 0x1 [0147.009] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.009] ReadFile (in: hFile=0x230, lpBuffer=0x2701730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2701730*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.010] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0147.010] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.011] WriteFile (in: hFile=0x230, lpBuffer=0x2701730*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2701730*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0147.011] SetErrorMode (uMode=0x1) returned 0x0 [0147.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd21082d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5a127108, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0147.011] SetErrorMode (uMode=0x0) returned 0x1 [0147.011] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0147.012] SetErrorMode (uMode=0x1) returned 0x0 [0147.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.013] GetFileType (hFile=0x230) returned 0x1 [0147.013] SetErrorMode (uMode=0x0) returned 0x1 [0147.013] GetFileType (hFile=0x230) returned 0x1 [0147.013] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.013] ReadFile (in: hFile=0x230, lpBuffer=0x27056e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27056e8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.014] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0147.014] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.014] WriteFile (in: hFile=0x230, lpBuffer=0x27056e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27056e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0147.015] SetErrorMode (uMode=0x1) returned 0x0 [0147.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd177ec1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5a14d36b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0147.015] SetErrorMode (uMode=0x0) returned 0x1 [0147.015] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0147.016] SetErrorMode (uMode=0x1) returned 0x0 [0147.016] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.017] GetFileType (hFile=0x230) returned 0x1 [0147.017] SetErrorMode (uMode=0x0) returned 0x1 [0147.017] GetFileType (hFile=0x230) returned 0x1 [0147.017] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.017] ReadFile (in: hFile=0x230, lpBuffer=0x27096d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27096d8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0147.017] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.017] SetErrorMode (uMode=0x1) returned 0x0 [0147.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbd177ec1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd177ec1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd177ec1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.017] SetErrorMode (uMode=0x0) returned 0x1 [0147.017] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Microsoft.XboxIdentityProvider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0147.018] SetErrorMode (uMode=0x1) returned 0x0 [0147.018] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.020] GetFileType (hFile=0x230) returned 0x1 [0147.020] SetErrorMode (uMode=0x0) returned 0x1 [0147.020] GetFileType (hFile=0x230) returned 0x1 [0147.020] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.020] ReadFile (in: hFile=0x230, lpBuffer=0x270d058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270d058*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0147.020] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.021] SetErrorMode (uMode=0x1) returned 0x0 [0147.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06ce4f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd06ce4f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd06ce4f, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.021] SetErrorMode (uMode=0x0) returned 0x1 [0147.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0147.022] SetErrorMode (uMode=0x1) returned 0x0 [0147.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.022] GetFileType (hFile=0x230) returned 0x1 [0147.022] SetErrorMode (uMode=0x0) returned 0x1 [0147.022] GetFileType (hFile=0x230) returned 0x1 [0147.022] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.022] ReadFile (in: hFile=0x230, lpBuffer=0x2710528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2710528*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.024] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0147.024] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.024] WriteFile (in: hFile=0x230, lpBuffer=0x2710528*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2710528*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0147.024] SetErrorMode (uMode=0x1) returned 0x0 [0147.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd06ce4f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7896bd4f, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a14d36b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.024] SetErrorMode (uMode=0x0) returned 0x1 [0147.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0147.025] SetErrorMode (uMode=0x1) returned 0x0 [0147.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.026] GetFileType (hFile=0x230) returned 0x1 [0147.026] SetErrorMode (uMode=0x0) returned 0x1 [0147.026] GetFileType (hFile=0x230) returned 0x1 [0147.026] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.026] ReadFile (in: hFile=0x230, lpBuffer=0x2713e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2713e20*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.039] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0147.039] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.040] WriteFile (in: hFile=0x230, lpBuffer=0x2713e20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2713e20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0147.040] SetErrorMode (uMode=0x1) returned 0x0 [0147.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x788d33ed, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x788d33ed, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a17363b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.040] SetErrorMode (uMode=0x0) returned 0x1 [0147.041] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0147.042] SetErrorMode (uMode=0x1) returned 0x0 [0147.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.052] GetFileType (hFile=0x230) returned 0x1 [0147.052] SetErrorMode (uMode=0x0) returned 0x1 [0147.052] GetFileType (hFile=0x230) returned 0x1 [0147.052] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.052] ReadFile (in: hFile=0x230, lpBuffer=0x2717770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2717770*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0147.052] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.053] SetErrorMode (uMode=0x1) returned 0x0 [0147.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x788d33ed, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x788d33ed, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x788d33ed, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.053] SetErrorMode (uMode=0x0) returned 0x1 [0147.053] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.XboxIdentityProvider_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.xboxidentityprovider_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0147.055] SetErrorMode (uMode=0x1) returned 0x0 [0147.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.058] GetFileType (hFile=0x230) returned 0x1 [0147.058] SetErrorMode (uMode=0x0) returned 0x1 [0147.058] GetFileType (hFile=0x230) returned 0x1 [0147.058] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.058] ReadFile (in: hFile=0x230, lpBuffer=0x271adf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271adf8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.059] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0147.060] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.060] WriteFile (in: hFile=0x230, lpBuffer=0x271adf8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271adf8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0147.060] SetErrorMode (uMode=0x1) returned 0x0 [0147.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebdc15d5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xee9b57e9, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5a1bfa8e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0147.061] SetErrorMode (uMode=0x0) returned 0x1 [0147.061] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0147.062] SetErrorMode (uMode=0x1) returned 0x0 [0147.062] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.063] GetFileType (hFile=0x230) returned 0x1 [0147.063] SetErrorMode (uMode=0x0) returned 0x1 [0147.064] GetFileType (hFile=0x230) returned 0x1 [0147.064] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.064] ReadFile (in: hFile=0x230, lpBuffer=0x271eae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271eae0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.065] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0147.065] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.065] WriteFile (in: hFile=0x230, lpBuffer=0x271eae0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271eae0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0147.084] SetErrorMode (uMode=0x1) returned 0x0 [0147.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xebe0da96, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xebe0da96, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5a1e5d99, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0147.085] SetErrorMode (uMode=0x0) returned 0x1 [0147.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0147.087] SetErrorMode (uMode=0x1) returned 0x0 [0147.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.088] GetFileType (hFile=0x230) returned 0x1 [0147.088] SetErrorMode (uMode=0x0) returned 0x1 [0147.088] GetFileType (hFile=0x230) returned 0x1 [0147.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.088] ReadFile (in: hFile=0x230, lpBuffer=0x2722800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2722800*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0147.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.088] SetErrorMode (uMode=0x1) returned 0x0 [0147.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xebe0da96, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xebe0da96, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xebe0da96, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.088] SetErrorMode (uMode=0x0) returned 0x1 [0147.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Microsoft.ZuneMusic_3.6.10841.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\microsoft.zunemusic_3.6.10841.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0147.090] SetErrorMode (uMode=0x1) returned 0x0 [0147.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.091] GetFileType (hFile=0x230) returned 0x1 [0147.091] SetErrorMode (uMode=0x0) returned 0x1 [0147.091] GetFileType (hFile=0x230) returned 0x1 [0147.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.091] ReadFile (in: hFile=0x230, lpBuffer=0x2725f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2725f70*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0147.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.092] SetErrorMode (uMode=0x1) returned 0x0 [0147.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb627dc0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeb627dc0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xeb627dc0, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.092] SetErrorMode (uMode=0x0) returned 0x1 [0147.092] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0147.094] SetErrorMode (uMode=0x1) returned 0x0 [0147.094] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.095] GetFileType (hFile=0x230) returned 0x1 [0147.095] SetErrorMode (uMode=0x0) returned 0x1 [0147.095] GetFileType (hFile=0x230) returned 0x1 [0147.095] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.095] ReadFile (in: hFile=0x230, lpBuffer=0x27293a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27293a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.099] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0147.099] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.099] WriteFile (in: hFile=0x230, lpBuffer=0x27293a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27293a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0147.099] SetErrorMode (uMode=0x1) returned 0x0 [0147.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb58f443, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeb58f443, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5a20bfdf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.099] SetErrorMode (uMode=0x0) returned 0x1 [0147.099] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneMusic_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunemusic_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0147.101] SetErrorMode (uMode=0x1) returned 0x0 [0147.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.104] GetFileType (hFile=0x230) returned 0x1 [0147.104] SetErrorMode (uMode=0x0) returned 0x1 [0147.104] GetFileType (hFile=0x230) returned 0x1 [0147.104] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.104] ReadFile (in: hFile=0x230, lpBuffer=0x272cd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272cd58*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.121] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0147.121] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.121] WriteFile (in: hFile=0x230, lpBuffer=0x272cd58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272cd58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0147.171] SetErrorMode (uMode=0x1) returned 0x0 [0147.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ed0ff0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe93496a2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5a2cac50, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0147.172] SetErrorMode (uMode=0x0) returned 0x1 [0147.172] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0147.174] SetErrorMode (uMode=0x1) returned 0x0 [0147.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.176] GetFileType (hFile=0x230) returned 0x1 [0147.176] SetErrorMode (uMode=0x0) returned 0x1 [0147.176] GetFileType (hFile=0x230) returned 0x1 [0147.176] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.176] ReadFile (in: hFile=0x230, lpBuffer=0x2730a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2730a40*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.205] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0147.205] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.205] WriteFile (in: hFile=0x230, lpBuffer=0x2730a40*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2730a40*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0147.206] SetErrorMode (uMode=0x1) returned 0x0 [0147.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe8ef7262, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe8ef7262, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5a317180, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9000)) returned 1 [0147.206] SetErrorMode (uMode=0x0) returned 0x1 [0147.206] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0147.208] SetErrorMode (uMode=0x1) returned 0x0 [0147.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.209] GetFileType (hFile=0x230) returned 0x1 [0147.209] SetErrorMode (uMode=0x0) returned 0x1 [0147.209] GetFileType (hFile=0x230) returned 0x1 [0147.209] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.209] ReadFile (in: hFile=0x230, lpBuffer=0x2734760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2734760*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0147.210] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.210] SetErrorMode (uMode=0x1) returned 0x0 [0147.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe8ef7262, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe8ef7262, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe8ef7262, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.210] SetErrorMode (uMode=0x0) returned 0x1 [0147.210] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Microsoft.ZuneVideo_3.6.10811.0_x64__8wekyb3d8bbwe\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\microsoft.zunevideo_3.6.10811.0_x64__8wekyb3d8bbwe\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0147.212] SetErrorMode (uMode=0x1) returned 0x0 [0147.212] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.213] GetFileType (hFile=0x230) returned 0x1 [0147.213] SetErrorMode (uMode=0x0) returned 0x1 [0147.213] GetFileType (hFile=0x230) returned 0x1 [0147.213] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.213] ReadFile (in: hFile=0x230, lpBuffer=0x2737ed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2737ed0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0147.213] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.213] SetErrorMode (uMode=0x1) returned 0x0 [0147.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7d87e92, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7d87e92, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0xe7d87e92, ftLastWriteTime.dwHighDateTime=0x1d2d028, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.213] SetErrorMode (uMode=0x0) returned 0x1 [0147.214] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0147.215] SetErrorMode (uMode=0x1) returned 0x0 [0147.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.216] GetFileType (hFile=0x230) returned 0x1 [0147.216] SetErrorMode (uMode=0x0) returned 0x1 [0147.216] GetFileType (hFile=0x230) returned 0x1 [0147.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.216] ReadFile (in: hFile=0x230, lpBuffer=0x273b308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273b308*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.218] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0147.218] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.218] WriteFile (in: hFile=0x230, lpBuffer=0x273b308*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273b308*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0147.219] SetErrorMode (uMode=0x1) returned 0x0 [0147.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7cef538, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7cef538, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5a33d3bc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.219] SetErrorMode (uMode=0x0) returned 0x1 [0147.219] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Microsoft.ZuneVideo_8wekyb3d8bbwe\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\microsoft.zunevideo_8wekyb3d8bbwe\\settings\\settings.dat.partially.cryptonar")) returned 1 [0147.220] SetErrorMode (uMode=0x1) returned 0x0 [0147.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.224] GetFileType (hFile=0x230) returned 0x1 [0147.224] SetErrorMode (uMode=0x0) returned 0x1 [0147.224] GetFileType (hFile=0x230) returned 0x1 [0147.224] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.226] ReadFile (in: hFile=0x230, lpBuffer=0x273eb28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273eb28*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0147.226] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.226] SetErrorMode (uMode=0x1) returned 0x0 [0147.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9d02ae, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbd9d02ae, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbd9d02ae, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.227] SetErrorMode (uMode=0x0) returned 0x1 [0147.227] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0147.228] SetErrorMode (uMode=0x1) returned 0x0 [0147.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.230] SetErrorMode (uMode=0x0) returned 0x1 [0147.230] GetFileType (hFile=0x230) returned 0x1 [0147.230] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.255] SetErrorMode (uMode=0x1) returned 0x0 [0147.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd9d02ae, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78b0f724, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a38993c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.255] SetErrorMode (uMode=0x0) returned 0x1 [0147.255] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0147.257] SetErrorMode (uMode=0x1) returned 0x0 [0147.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.259] SetErrorMode (uMode=0x0) returned 0x1 [0147.259] GetFileType (hFile=0x230) returned 0x1 [0147.259] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.261] SetErrorMode (uMode=0x1) returned 0x0 [0147.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78a76dc2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78a76dc2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a38993c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.262] SetErrorMode (uMode=0x0) returned 0x1 [0147.262] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0147.271] SetErrorMode (uMode=0x1) returned 0x0 [0147.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.274] SetErrorMode (uMode=0x0) returned 0x1 [0147.274] GetFileType (hFile=0x230) returned 0x1 [0147.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.274] SetErrorMode (uMode=0x1) returned 0x0 [0147.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78a76dc2, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78a76dc2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78a76dc2, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.274] SetErrorMode (uMode=0x0) returned 0x1 [0147.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0147.276] SetErrorMode (uMode=0x1) returned 0x0 [0147.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.279] SetErrorMode (uMode=0x0) returned 0x1 [0147.279] GetFileType (hFile=0x230) returned 0x1 [0147.279] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.281] SetErrorMode (uMode=0x1) returned 0x0 [0147.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdbe63d2, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5a3d5c0c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0147.281] SetErrorMode (uMode=0x0) returned 0x1 [0147.281] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0147.283] SetErrorMode (uMode=0x1) returned 0x0 [0147.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.285] SetErrorMode (uMode=0x0) returned 0x1 [0147.285] GetFileType (hFile=0x230) returned 0x1 [0147.285] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.287] SetErrorMode (uMode=0x1) returned 0x0 [0147.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdb99efe, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5a3d5c0c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0147.287] SetErrorMode (uMode=0x0) returned 0x1 [0147.287] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0147.289] SetErrorMode (uMode=0x1) returned 0x0 [0147.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.294] SetErrorMode (uMode=0x0) returned 0x1 [0147.294] GetFileType (hFile=0x230) returned 0x1 [0147.294] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.294] SetErrorMode (uMode=0x1) returned 0x0 [0147.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbdb99efe, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbdb99efe, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbdb99efe, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.295] SetErrorMode (uMode=0x0) returned 0x1 [0147.295] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.ContactSupport_cw5n1h2txyewy\\Windows.ContactSupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.contactsupport_cw5n1h2txyewy\\windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0147.298] SetErrorMode (uMode=0x1) returned 0x0 [0147.298] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.301] SetErrorMode (uMode=0x0) returned 0x1 [0147.301] GetFileType (hFile=0x230) returned 0x1 [0147.301] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.301] SetErrorMode (uMode=0x1) returned 0x0 [0147.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715efc49, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715efc49, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x715efc49, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0147.301] SetErrorMode (uMode=0x0) returned 0x1 [0147.302] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0147.304] SetErrorMode (uMode=0x1) returned 0x0 [0147.304] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.305] SetErrorMode (uMode=0x0) returned 0x1 [0147.305] GetFileType (hFile=0x230) returned 0x1 [0147.305] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.347] SetErrorMode (uMode=0x1) returned 0x0 [0147.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715572e3, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715572e3, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a46e643, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0147.348] SetErrorMode (uMode=0x0) returned 0x1 [0147.348] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.devicesflow_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.devicesflow_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0147.349] SetErrorMode (uMode=0x1) returned 0x0 [0147.349] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.352] SetErrorMode (uMode=0x0) returned 0x1 [0147.352] GetFileType (hFile=0x230) returned 0x1 [0147.352] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.354] SetErrorMode (uMode=0x1) returned 0x0 [0147.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6694e0f7, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6694e0f7, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a46e643, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b5)) returned 1 [0147.354] SetErrorMode (uMode=0x0) returned 0x1 [0147.354] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{241d7c96-f8bf-4f85-b01f-e2b043341a4b}.settingcontent-ms.partially.cryptonar")) returned 1 [0147.356] SetErrorMode (uMode=0x1) returned 0x0 [0147.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{33C56305-BA7B-48E0-9784-2D05E3F5D27E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{33c56305-ba7b-48e0-9784-2d05e3f5d27e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.357] SetErrorMode (uMode=0x0) returned 0x1 [0147.357] GetFileType (hFile=0x230) returned 0x1 [0147.358] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.412] SetErrorMode (uMode=0x1) returned 0x0 [0147.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{33C56305-BA7B-48E0-9784-2D05E3F5D27E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{33c56305-ba7b-48e0-9784-2d05e3f5d27e}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x684208ac, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x684208ac, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a506f4f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x411)) returned 1 [0147.412] SetErrorMode (uMode=0x0) returned 0x1 [0147.413] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{33C56305-BA7B-48E0-9784-2D05E3F5D27E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{33c56305-ba7b-48e0-9784-2d05e3f5d27e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{33C56305-BA7B-48E0-9784-2D05E3F5D27E}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{33c56305-ba7b-48e0-9784-2d05e3f5d27e}.settingcontent-ms.partially.cryptonar")) returned 1 [0147.414] SetErrorMode (uMode=0x1) returned 0x0 [0147.414] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{728047C0-00D2-4FDB-A069-06338B92E93B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{728047c0-00d2-4fdb-a069-06338b92e93b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.415] SetErrorMode (uMode=0x0) returned 0x1 [0147.416] GetFileType (hFile=0x230) returned 0x1 [0147.416] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.649] SetErrorMode (uMode=0x1) returned 0x0 [0147.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{728047C0-00D2-4FDB-A069-06338B92E93B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{728047c0-00d2-4fdb-a069-06338b92e93b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x693538da, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x693538da, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a743345, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f3)) returned 1 [0147.649] SetErrorMode (uMode=0x0) returned 0x1 [0147.649] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{728047C0-00D2-4FDB-A069-06338B92E93B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{728047c0-00d2-4fdb-a069-06338b92e93b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{728047C0-00D2-4FDB-A069-06338B92E93B}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{728047c0-00d2-4fdb-a069-06338b92e93b}.settingcontent-ms.partially.cryptonar")) returned 1 [0147.651] SetErrorMode (uMode=0x1) returned 0x0 [0147.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{7940ACF8-60BA-4213-A7C3-F3B400EE266D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{7940acf8-60ba-4213-a7c3-f3b400ee266d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.652] SetErrorMode (uMode=0x0) returned 0x1 [0147.652] GetFileType (hFile=0x230) returned 0x1 [0147.652] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.665] SetErrorMode (uMode=0x1) returned 0x0 [0147.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{7940ACF8-60BA-4213-A7C3-F3B400EE266D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{7940acf8-60ba-4213-a7c3-f3b400ee266d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f19337, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x69f19337, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a770af2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3df)) returned 1 [0147.665] SetErrorMode (uMode=0x0) returned 0x1 [0147.665] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{7940ACF8-60BA-4213-A7C3-F3B400EE266D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{7940acf8-60ba-4213-a7c3-f3b400ee266d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{7940ACF8-60BA-4213-A7C3-F3B400EE266D}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{7940acf8-60ba-4213-a7c3-f3b400ee266d}.settingcontent-ms.partially.cryptonar")) returned 1 [0147.667] SetErrorMode (uMode=0x1) returned 0x0 [0147.667] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{A88F43D0-B9C8-42F2-B9F3-90902FC0B22B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{a88f43d0-b9c8-42f2-b9f3-90902fc0b22b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.668] SetErrorMode (uMode=0x0) returned 0x1 [0147.668] GetFileType (hFile=0x230) returned 0x1 [0147.668] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.670] SetErrorMode (uMode=0x1) returned 0x0 [0147.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{A88F43D0-B9C8-42F2-B9F3-90902FC0B22B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{a88f43d0-b9c8-42f2-b9f3-90902fc0b22b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a666647, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6a666647, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a78f801, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ed)) returned 1 [0147.670] SetErrorMode (uMode=0x0) returned 0x1 [0147.670] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{A88F43D0-B9C8-42F2-B9F3-90902FC0B22B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{a88f43d0-b9c8-42f2-b9f3-90902fc0b22b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{A88F43D0-B9C8-42F2-B9F3-90902FC0B22B}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{a88f43d0-b9c8-42f2-b9f3-90902fc0b22b}.settingcontent-ms.partially.cryptonar")) returned 1 [0147.672] SetErrorMode (uMode=0x1) returned 0x0 [0147.672] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{E2E2F6CF-9D1A-4004-8999-8AB81010B5AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{e2e2f6cf-9d1a-4004-8999-8ab81010b5ac}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.673] SetErrorMode (uMode=0x0) returned 0x1 [0147.673] GetFileType (hFile=0x230) returned 0x1 [0147.673] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.685] SetErrorMode (uMode=0x1) returned 0x0 [0147.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{E2E2F6CF-9D1A-4004-8999-8AB81010B5AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{e2e2f6cf-9d1a-4004-8999-8ab81010b5ac}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a90234c, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6a90234c, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a78f801, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x422)) returned 1 [0147.685] SetErrorMode (uMode=0x0) returned 0x1 [0147.685] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{E2E2F6CF-9D1A-4004-8999-8AB81010B5AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{e2e2f6cf-9d1a-4004-8999-8ab81010b5ac}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\aaa_Classic_{E2E2F6CF-9D1A-4004-8999-8AB81010B5AC}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_classic_{e2e2f6cf-9d1a-4004-8999-8ab81010b5ac}.settingcontent-ms.partially.cryptonar")) returned 1 [0147.687] SetErrorMode (uMode=0x1) returned 0x0 [0147.687] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Proxy_Automatic_Config_Group.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_proxy_automatic_config_group.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.688] SetErrorMode (uMode=0x0) returned 0x1 [0147.688] GetFileType (hFile=0x230) returned 0x1 [0147.689] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.751] SetErrorMode (uMode=0x1) returned 0x0 [0147.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Proxy_Automatic_Config_Group.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_proxy_automatic_config_group.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6abb0db0, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x6abb0db0, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a853333, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x472)) returned 1 [0147.751] SetErrorMode (uMode=0x0) returned 0x1 [0147.751] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Proxy_Automatic_Config_Group.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_proxy_automatic_config_group.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Proxy_Automatic_Config_Group.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_proxy_automatic_config_group.settingcontent-ms.partially.cryptonar")) returned 1 [0147.752] SetErrorMode (uMode=0x1) returned 0x0 [0147.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsChangeAccountPicture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingschangeaccountpicture.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.753] SetErrorMode (uMode=0x0) returned 0x1 [0147.753] GetFileType (hFile=0x230) returned 0x1 [0147.753] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.755] SetErrorMode (uMode=0x1) returned 0x0 [0147.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsChangeAccountPicture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingschangeaccountpicture.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x715efc49, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x715efc49, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a853333, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x475)) returned 1 [0147.755] SetErrorMode (uMode=0x0) returned 0x1 [0147.755] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsChangeAccountPicture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingschangeaccountpicture.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsChangeAccountPicture.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingschangeaccountpicture.settingcontent-ms.partially.cryptonar")) returned 1 [0147.757] SetErrorMode (uMode=0x1) returned 0x0 [0147.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAppSizesList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupappsizeslist.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.758] SetErrorMode (uMode=0x0) returned 0x1 [0147.758] GetFileType (hFile=0x230) returned 0x1 [0147.758] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.759] SetErrorMode (uMode=0x1) returned 0x0 [0147.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAppSizesList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupappsizeslist.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7182bf97, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7182bf97, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a853333, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0147.760] SetErrorMode (uMode=0x0) returned 0x1 [0147.760] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAppSizesList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupappsizeslist.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAppSizesList.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupappsizeslist.settingcontent-ms.partially.cryptonar")) returned 1 [0147.762] SetErrorMode (uMode=0x1) returned 0x0 [0147.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAutoplayDefaults.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupautoplaydefaults.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.763] SetErrorMode (uMode=0x0) returned 0x1 [0147.763] GetFileType (hFile=0x230) returned 0x1 [0147.764] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.765] SetErrorMode (uMode=0x1) returned 0x0 [0147.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAutoplayDefaults.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupautoplaydefaults.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718c48f3, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x718c48f3, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a8744ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47b)) returned 1 [0147.765] SetErrorMode (uMode=0x0) returned 0x1 [0147.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAutoplayDefaults.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupautoplaydefaults.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupAutoplayDefaults.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupautoplaydefaults.settingcontent-ms.partially.cryptonar")) returned 1 [0147.766] SetErrorMode (uMode=0x1) returned 0x0 [0147.766] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpageoverview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.767] SetErrorMode (uMode=0x0) returned 0x1 [0147.767] GetFileType (hFile=0x230) returned 0x1 [0147.767] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.769] SetErrorMode (uMode=0x1) returned 0x0 [0147.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpageoverview.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7195d26b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7195d26b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a8744ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4a9)) returned 1 [0147.769] SetErrorMode (uMode=0x0) returned 0x1 [0147.769] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpageoverview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageOverview.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpageoverview.settingcontent-ms.partially.cryptonar")) returned 1 [0147.770] SetErrorMode (uMode=0x1) returned 0x0 [0147.770] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpagesettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.771] SetErrorMode (uMode=0x0) returned 0x1 [0147.772] GetFileType (hFile=0x230) returned 0x1 [0147.772] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.791] SetErrorMode (uMode=0x1) returned 0x0 [0147.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpagesettings.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71b00c72, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x71b00c72, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a8744ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4a9)) returned 1 [0147.791] SetErrorMode (uMode=0x0) returned 0x1 [0147.791] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpagesettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupDataSenseMainPageSettings.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupdatasensemainpagesettings.settingcontent-ms.partially.cryptonar")) returned 1 [0147.792] SetErrorMode (uMode=0x1) returned 0x0 [0147.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessFilterKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessfilterkeys.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.794] SetErrorMode (uMode=0x0) returned 0x1 [0147.794] GetFileType (hFile=0x230) returned 0x1 [0147.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.816] SetErrorMode (uMode=0x1) returned 0x0 [0147.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessFilterKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessfilterkeys.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78519925, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78519925, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a8e6c5a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49d)) returned 1 [0147.817] SetErrorMode (uMode=0x0) returned 0x1 [0147.817] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessFilterKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessfilterkeys.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessFilterKeys.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessfilterkeys.settingcontent-ms.partially.cryptonar")) returned 1 [0147.818] SetErrorMode (uMode=0x1) returned 0x0 [0147.818] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessNarrator.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessnarrator.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.819] SetErrorMode (uMode=0x0) returned 0x1 [0147.819] GetFileType (hFile=0x230) returned 0x1 [0147.819] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.820] SetErrorMode (uMode=0x1) returned 0x0 [0147.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessNarrator.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessnarrator.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x788d33ed, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x788d33ed, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a8e6c5a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x493)) returned 1 [0147.821] SetErrorMode (uMode=0x0) returned 0x1 [0147.821] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessNarrator.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessnarrator.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessNarrator.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessnarrator.settingcontent-ms.partially.cryptonar")) returned 1 [0147.822] SetErrorMode (uMode=0x1) returned 0x0 [0147.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOSK.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessosk.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.823] SetErrorMode (uMode=0x0) returned 0x1 [0147.823] GetFileType (hFile=0x230) returned 0x1 [0147.823] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.851] SetErrorMode (uMode=0x1) returned 0x0 [0147.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOSK.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessosk.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ae83d65, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7ae83d65, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a933284, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0147.851] SetErrorMode (uMode=0x0) returned 0x1 [0147.851] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOSK.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessosk.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOSK.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessosk.settingcontent-ms.partially.cryptonar")) returned 1 [0147.853] SetErrorMode (uMode=0x1) returned 0x0 [0147.853] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOther.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessother.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.854] SetErrorMode (uMode=0x0) returned 0x1 [0147.854] GetFileType (hFile=0x230) returned 0x1 [0147.854] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.856] SetErrorMode (uMode=0x1) returned 0x0 [0147.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOther.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessother.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f642cc9, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7f642cc9, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a9593cb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0147.856] SetErrorMode (uMode=0x0) returned 0x1 [0147.856] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOther.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessother.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessOther.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessother.settingcontent-ms.partially.cryptonar")) returned 1 [0147.858] SetErrorMode (uMode=0x1) returned 0x0 [0147.858] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessStickyKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessstickykeys.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.859] SetErrorMode (uMode=0x0) returned 0x1 [0147.859] GetFileType (hFile=0x230) returned 0x1 [0147.859] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.916] SetErrorMode (uMode=0x1) returned 0x0 [0147.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessStickyKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessstickykeys.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fcf76b8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x7fcf76b8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a9cbad6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49d)) returned 1 [0147.916] SetErrorMode (uMode=0x0) returned 0x1 [0147.916] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessStickyKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessstickykeys.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessStickyKeys.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccessstickykeys.settingcontent-ms.partially.cryptonar")) returned 1 [0147.918] SetErrorMode (uMode=0x1) returned 0x0 [0147.918] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessToggleKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccesstogglekeys.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.919] SetErrorMode (uMode=0x0) returned 0x1 [0147.920] GetFileType (hFile=0x230) returned 0x1 [0147.920] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.921] SetErrorMode (uMode=0x1) returned 0x0 [0147.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessToggleKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccesstogglekeys.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x803ac248, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x803ac248, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a9f1c45, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49d)) returned 1 [0147.921] SetErrorMode (uMode=0x0) returned 0x1 [0147.922] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessToggleKeys.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccesstogglekeys.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupEaseOfAccessToggleKeys.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupeaseofaccesstogglekeys.settingcontent-ms.partially.cryptonar")) returned 1 [0147.923] SetErrorMode (uMode=0x1) returned 0x0 [0147.923] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupFamilyUsers.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupfamilyusers.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.924] SetErrorMode (uMode=0x0) returned 0x1 [0147.924] GetFileType (hFile=0x230) returned 0x1 [0147.924] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.926] SetErrorMode (uMode=0x1) returned 0x0 [0147.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupFamilyUsers.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupfamilyusers.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x804dd516, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x804dd516, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5a9f1c45, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45f)) returned 1 [0147.926] SetErrorMode (uMode=0x0) returned 0x1 [0147.926] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupFamilyUsers.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupfamilyusers.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupFamilyUsers.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupfamilyusers.settingcontent-ms.partially.cryptonar")) returned 1 [0147.927] SetErrorMode (uMode=0x1) returned 0x0 [0147.927] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupInputMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupinputmouse.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.928] SetErrorMode (uMode=0x0) returned 0x1 [0147.928] GetFileType (hFile=0x230) returned 0x1 [0147.928] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.951] SetErrorMode (uMode=0x1) returned 0x0 [0147.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupInputMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupinputmouse.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x805e85b4, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x805e85b4, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5aa3e167, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x463)) returned 1 [0147.951] SetErrorMode (uMode=0x0) returned 0x1 [0147.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupInputMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupinputmouse.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupInputMouse.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupinputmouse.settingcontent-ms.partially.cryptonar")) returned 1 [0147.953] SetErrorMode (uMode=0x1) returned 0x0 [0147.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupLockScreenPreview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouplockscreenpreview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.954] SetErrorMode (uMode=0x0) returned 0x1 [0147.954] GetFileType (hFile=0x230) returned 0x1 [0147.954] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.956] SetErrorMode (uMode=0x1) returned 0x0 [0147.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupLockScreenPreview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouplockscreenpreview.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x255402b4, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x255402b4, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5aa3e167, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0147.956] SetErrorMode (uMode=0x0) returned 0x1 [0147.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupLockScreenPreview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouplockscreenpreview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupLockScreenPreview.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouplockscreenpreview.settingcontent-ms.partially.cryptonar")) returned 1 [0147.957] SetErrorMode (uMode=0x1) returned 0x0 [0147.957] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupMapsUpdates.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupmapsupdates.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.958] SetErrorMode (uMode=0x0) returned 0x1 [0147.958] GetFileType (hFile=0x230) returned 0x1 [0147.958] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0147.967] SetErrorMode (uMode=0x1) returned 0x0 [0147.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupMapsUpdates.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupmapsupdates.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x255d8c39, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x255d8c39, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5aa65bff, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x456)) returned 1 [0147.967] SetErrorMode (uMode=0x0) returned 0x1 [0147.967] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupMapsUpdates.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupmapsupdates.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupMapsUpdates.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupmapsupdates.settingcontent-ms.partially.cryptonar")) returned 1 [0147.969] SetErrorMode (uMode=0x1) returned 0x0 [0147.969] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupNotificationsAppList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupnotificationsapplist.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0147.970] SetErrorMode (uMode=0x0) returned 0x1 [0147.970] GetFileType (hFile=0x230) returned 0x1 [0147.970] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.011] SetErrorMode (uMode=0x1) returned 0x0 [0148.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupNotificationsAppList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupnotificationsapplist.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x256715b1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x256715b1, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5aab0871, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0148.012] SetErrorMode (uMode=0x0) returned 0x1 [0148.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupNotificationsAppList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupnotificationsapplist.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupNotificationsAppList.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupnotificationsapplist.settingcontent-ms.partially.cryptonar")) returned 1 [0148.014] SetErrorMode (uMode=0x1) returned 0x0 [0148.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemDeviceEncryption.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemdeviceencryption.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.015] SetErrorMode (uMode=0x0) returned 0x1 [0148.015] GetFileType (hFile=0x230) returned 0x1 [0148.015] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.053] SetErrorMode (uMode=0x1) returned 0x0 [0148.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemDeviceEncryption.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemdeviceencryption.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2588c45a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2588c45a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ab23026, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49f)) returned 1 [0148.053] SetErrorMode (uMode=0x0) returned 0x1 [0148.054] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemDeviceEncryption.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemdeviceencryption.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemDeviceEncryption.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemdeviceencryption.settingcontent-ms.partially.cryptonar")) returned 1 [0148.055] SetErrorMode (uMode=0x1) returned 0x0 [0148.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemSupportInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemsupportinfo.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.056] SetErrorMode (uMode=0x0) returned 0x1 [0148.056] GetFileType (hFile=0x230) returned 0x1 [0148.056] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.058] SetErrorMode (uMode=0x1) returned 0x0 [0148.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemSupportInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemsupportinfo.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25924d82, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x25924d82, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ab23026, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x486)) returned 1 [0148.058] SetErrorMode (uMode=0x0) returned 0x1 [0148.058] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemSupportInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemsupportinfo.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemSupportInfo.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemsupportinfo.settingcontent-ms.partially.cryptonar")) returned 1 [0148.060] SetErrorMode (uMode=0x1) returned 0x0 [0148.060] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemWindowsInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemwindowsinfo.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.061] SetErrorMode (uMode=0x0) returned 0x1 [0148.061] GetFileType (hFile=0x230) returned 0x1 [0148.061] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.075] SetErrorMode (uMode=0x1) returned 0x0 [0148.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemWindowsInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemwindowsinfo.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25ca6775, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x25ca6775, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ab70182, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x482)) returned 1 [0148.076] SetErrorMode (uMode=0x0) returned 0x1 [0148.076] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemWindowsInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemwindowsinfo.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPCSystemWindowsInfo.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppcsystemwindowsinfo.settingcontent-ms.partially.cryptonar")) returned 1 [0148.077] SetErrorMode (uMode=0x1) returned 0x0 [0148.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppen.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.079] SetErrorMode (uMode=0x0) returned 0x1 [0148.079] GetFileType (hFile=0x230) returned 0x1 [0148.079] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.080] SetErrorMode (uMode=0x1) returned 0x0 [0148.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppen.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25e967da, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x25e967da, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ab70182, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x434)) returned 1 [0148.080] SetErrorMode (uMode=0x0) returned 0x1 [0148.081] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppen.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPen.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppen.settingcontent-ms.partially.cryptonar")) returned 1 [0148.082] SetErrorMode (uMode=0x1) returned 0x0 [0148.082] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPersonalizeColorChoose.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppersonalizecolorchoose.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.084] SetErrorMode (uMode=0x0) returned 0x1 [0148.084] GetFileType (hFile=0x230) returned 0x1 [0148.084] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.085] SetErrorMode (uMode=0x1) returned 0x0 [0148.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPersonalizeColorChoose.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppersonalizecolorchoose.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25f2f0a4, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x25f2f0a4, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ab70182, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48f)) returned 1 [0148.085] SetErrorMode (uMode=0x0) returned 0x1 [0148.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPersonalizeColorChoose.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppersonalizecolorchoose.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPersonalizeColorChoose.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppersonalizecolorchoose.settingcontent-ms.partially.cryptonar")) returned 1 [0148.087] SetErrorMode (uMode=0x1) returned 0x0 [0148.087] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPicturePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppicturepassword.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.088] SetErrorMode (uMode=0x0) returned 0x1 [0148.088] GetFileType (hFile=0x230) returned 0x1 [0148.088] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.089] SetErrorMode (uMode=0x1) returned 0x0 [0148.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPicturePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppicturepassword.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25fc797e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x25fc797e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ab70182, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x474)) returned 1 [0148.089] SetErrorMode (uMode=0x0) returned 0x1 [0148.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPicturePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppicturepassword.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPicturePassword.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppicturepassword.settingcontent-ms.partially.cryptonar")) returned 1 [0148.091] SetErrorMode (uMode=0x1) returned 0x0 [0148.091] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOff.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoff.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.092] SetErrorMode (uMode=0x0) returned 0x1 [0148.092] GetFileType (hFile=0x230) returned 0x1 [0148.093] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.094] SetErrorMode (uMode=0x1) returned 0x0 [0148.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOff.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoff.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x261dd9f6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x261dd9f6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ab9721a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4a1)) returned 1 [0148.094] SetErrorMode (uMode=0x0) returned 0x1 [0148.094] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOff.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoff.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOff.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoff.settingcontent-ms.partially.cryptonar")) returned 1 [0148.096] SetErrorMode (uMode=0x1) returned 0x0 [0148.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOffAoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoffaoac.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.097] SetErrorMode (uMode=0x0) returned 0x1 [0148.097] GetFileType (hFile=0x230) returned 0x1 [0148.097] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.118] SetErrorMode (uMode=0x1) returned 0x0 [0148.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOffAoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoffaoac.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26276364, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x26276364, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5abbb8fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b5)) returned 1 [0148.118] SetErrorMode (uMode=0x0) returned 0x1 [0148.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOffAoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoffaoac.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepDisplayOffAoAc.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepdisplayoffaoac.settingcontent-ms.partially.cryptonar")) returned 1 [0148.120] SetErrorMode (uMode=0x1) returned 0x0 [0148.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepSleep.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepsleep.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.122] SetErrorMode (uMode=0x0) returned 0x1 [0148.122] GetFileType (hFile=0x230) returned 0x1 [0148.122] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.135] SetErrorMode (uMode=0x1) returned 0x0 [0148.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepSleep.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepsleep.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x264d88fd, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x264d88fd, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5abe1be8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x488)) returned 1 [0148.135] SetErrorMode (uMode=0x0) returned 0x1 [0148.135] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepSleep.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepsleep.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPowerAndSleepSleep.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgrouppowerandsleepsleep.settingcontent-ms.partially.cryptonar")) returned 1 [0148.137] SetErrorMode (uMode=0x1) returned 0x0 [0148.137] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPrivacyLocationHistory.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupprivacylocationhistory.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.138] SetErrorMode (uMode=0x0) returned 0x1 [0148.138] GetFileType (hFile=0x230) returned 0x1 [0148.138] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.140] SetErrorMode (uMode=0x1) returned 0x0 [0148.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPrivacyLocationHistory.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupprivacylocationhistory.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x267f9a8d, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x267f9a8d, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ac07d1d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x498)) returned 1 [0148.141] SetErrorMode (uMode=0x0) returned 0x1 [0148.141] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPrivacyLocationHistory.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupprivacylocationhistory.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupPrivacyLocationHistory.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupprivacylocationhistory.settingcontent-ms.partially.cryptonar")) returned 1 [0148.142] SetErrorMode (uMode=0x1) returned 0x0 [0148.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupRegionDateTimeFormats.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupregiondatetimeformats.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.144] SetErrorMode (uMode=0x0) returned 0x1 [0148.144] GetFileType (hFile=0x230) returned 0x1 [0148.144] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.145] SetErrorMode (uMode=0x1) returned 0x0 [0148.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupRegionDateTimeFormats.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupregiondatetimeformats.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26951026, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x26951026, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ac07d1d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x496)) returned 1 [0148.146] SetErrorMode (uMode=0x0) returned 0x1 [0148.146] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupRegionDateTimeFormats.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupregiondatetimeformats.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupRegionDateTimeFormats.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupregiondatetimeformats.settingcontent-ms.partially.cryptonar")) returned 1 [0148.147] SetErrorMode (uMode=0x1) returned 0x0 [0148.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupSpeechMicrophone.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupspeechmicrophone.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.149] SetErrorMode (uMode=0x0) returned 0x1 [0148.149] GetFileType (hFile=0x230) returned 0x1 [0148.149] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.150] SetErrorMode (uMode=0x1) returned 0x0 [0148.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupSpeechMicrophone.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupspeechmicrophone.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x269e9adf, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x269e9adf, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ac07d1d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x471)) returned 1 [0148.151] SetErrorMode (uMode=0x0) returned 0x1 [0148.151] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupSpeechMicrophone.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupspeechmicrophone.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupSpeechMicrophone.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupspeechmicrophone.settingcontent-ms.partially.cryptonar")) returned 1 [0148.153] SetErrorMode (uMode=0x1) returned 0x0 [0148.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupVirtualDesktops.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupvirtualdesktops.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.154] SetErrorMode (uMode=0x0) returned 0x1 [0148.154] GetFileType (hFile=0x230) returned 0x1 [0148.154] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.181] SetErrorMode (uMode=0x1) returned 0x0 [0148.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupVirtualDesktops.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupvirtualdesktops.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a8237d, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x26a8237d, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ac54316, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x472)) returned 1 [0148.182] SetErrorMode (uMode=0x0) returned 0x1 [0148.182] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupVirtualDesktops.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupvirtualdesktops.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupVirtualDesktops.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupvirtualdesktops.settingcontent-ms.partially.cryptonar")) returned 1 [0148.183] SetErrorMode (uMode=0x1) returned 0x0 [0148.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupYourAccount.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupyouraccount.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.185] SetErrorMode (uMode=0x0) returned 0x1 [0148.185] GetFileType (hFile=0x230) returned 0x1 [0148.185] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.206] SetErrorMode (uMode=0x1) returned 0x0 [0148.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupYourAccount.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupyouraccount.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26c7211d, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x26c7211d, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5aca0727, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x461)) returned 1 [0148.206] SetErrorMode (uMode=0x0) returned 0x1 [0148.207] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupYourAccount.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupyouraccount.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsGroupYourAccount.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingsgroupyouraccount.settingcontent-ms.partially.cryptonar")) returned 1 [0148.208] SetErrorMode (uMode=0x1) returned 0x0 [0148.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsManage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsmanage.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.209] SetErrorMode (uMode=0x0) returned 0x1 [0148.209] GetFileType (hFile=0x230) returned 0x1 [0148.209] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.211] SetErrorMode (uMode=0x1) returned 0x0 [0148.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsManage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsmanage.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d0aac1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x26d0aac1, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5aca0727, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x435)) returned 1 [0148.211] SetErrorMode (uMode=0x0) returned 0x1 [0148.211] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsManage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsmanage.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsManage.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsmanage.settingcontent-ms.partially.cryptonar")) returned 1 [0148.213] SetErrorMode (uMode=0x1) returned 0x0 [0148.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsPicture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountspicture.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.214] SetErrorMode (uMode=0x0) returned 0x1 [0148.214] GetFileType (hFile=0x230) returned 0x1 [0148.214] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.216] SetErrorMode (uMode=0x1) returned 0x0 [0148.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsPicture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountspicture.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f20b7a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x26f20b7a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5acc680e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43a)) returned 1 [0148.216] SetErrorMode (uMode=0x0) returned 0x1 [0148.216] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsPicture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountspicture.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsPicture.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountspicture.settingcontent-ms.partially.cryptonar")) returned 1 [0148.218] SetErrorMode (uMode=0x1) returned 0x0 [0148.218] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsSync.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountssync.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.219] SetErrorMode (uMode=0x0) returned 0x1 [0148.219] GetFileType (hFile=0x230) returned 0x1 [0148.219] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.221] SetErrorMode (uMode=0x1) returned 0x0 [0148.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsSync.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountssync.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27005a19, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x27005a19, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5acc680e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42b)) returned 1 [0148.221] SetErrorMode (uMode=0x0) returned 0x1 [0148.221] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsSync.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountssync.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsSync.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountssync.settingcontent-ms.partially.cryptonar")) returned 1 [0148.223] SetErrorMode (uMode=0x1) returned 0x0 [0148.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsUsers.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsusers.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.224] SetErrorMode (uMode=0x0) returned 0x1 [0148.224] GetFileType (hFile=0x230) returned 0x1 [0148.224] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.226] SetErrorMode (uMode=0x1) returned 0x0 [0148.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsUsers.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsusers.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2753cc01, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2753cc01, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5acc680e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0148.226] SetErrorMode (uMode=0x0) returned 0x1 [0148.226] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsUsers.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsusers.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAccountsUsers.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageaccountsusers.settingcontent-ms.partially.cryptonar")) returned 1 [0148.228] SetErrorMode (uMode=0x1) returned 0x0 [0148.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageActivate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageactivate.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.229] SetErrorMode (uMode=0x0) returned 0x1 [0148.229] GetFileType (hFile=0x230) returned 0x1 [0148.229] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.230] SetErrorMode (uMode=0x1) returned 0x0 [0148.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageActivate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageactivate.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x277c541e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x277c541e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5acc680e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x417)) returned 1 [0148.231] SetErrorMode (uMode=0x0) returned 0x1 [0148.231] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageActivate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageactivate.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageActivate.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageactivate.settingcontent-ms.partially.cryptonar")) returned 1 [0148.232] SetErrorMode (uMode=0x1) returned 0x0 [0148.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaults.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaults.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.234] SetErrorMode (uMode=0x0) returned 0x1 [0148.234] GetFileType (hFile=0x230) returned 0x1 [0148.234] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.259] SetErrorMode (uMode=0x1) returned 0x0 [0148.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaults.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaults.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27884024, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x27884024, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ad12eb3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42b)) returned 1 [0148.259] SetErrorMode (uMode=0x0) returned 0x1 [0148.259] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaults.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaults.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaults.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaults.settingcontent-ms.partially.cryptonar")) returned 1 [0148.261] SetErrorMode (uMode=0x1) returned 0x0 [0148.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsFileExtensionView.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsfileextensionview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.262] SetErrorMode (uMode=0x0) returned 0x1 [0148.262] GetFileType (hFile=0x230) returned 0x1 [0148.262] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.264] SetErrorMode (uMode=0x1) returned 0x0 [0148.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsFileExtensionView.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsfileextensionview.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279b5407, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x279b5407, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ad39054, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ea)) returned 1 [0148.264] SetErrorMode (uMode=0x0) returned 0x1 [0148.264] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsFileExtensionView.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsfileextensionview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsFileExtensionView.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsfileextensionview.settingcontent-ms.partially.cryptonar")) returned 1 [0148.265] SetErrorMode (uMode=0x1) returned 0x0 [0148.265] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsProtocolView.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsprotocolview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.266] SetErrorMode (uMode=0x0) returned 0x1 [0148.266] GetFileType (hFile=0x230) returned 0x1 [0148.266] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.271] SetErrorMode (uMode=0x1) returned 0x0 [0148.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsProtocolView.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsprotocolview.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27a4dcce, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x27a4dcce, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ad39054, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d1)) returned 1 [0148.271] SetErrorMode (uMode=0x0) returned 0x1 [0148.271] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsProtocolView.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsprotocolview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsDefaultsProtocolView.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsdefaultsprotocolview.settingcontent-ms.partially.cryptonar")) returned 1 [0148.273] SetErrorMode (uMode=0x1) returned 0x0 [0148.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsNotifications.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsnotifications.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.274] SetErrorMode (uMode=0x0) returned 0x1 [0148.274] GetFileType (hFile=0x230) returned 0x1 [0148.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.276] SetErrorMode (uMode=0x1) returned 0x0 [0148.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsNotifications.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsnotifications.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b0d79de, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2b0d79de, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ad39054, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x444)) returned 1 [0148.276] SetErrorMode (uMode=0x0) returned 0x1 [0148.276] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsNotifications.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsnotifications.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageAppsNotifications.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageappsnotifications.settingcontent-ms.partially.cryptonar")) returned 1 [0148.278] SetErrorMode (uMode=0x1) returned 0x0 [0148.278] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebackground.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.279] SetErrorMode (uMode=0x0) returned 0x1 [0148.279] GetFileType (hFile=0x230) returned 0x1 [0148.279] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.281] SetErrorMode (uMode=0x1) returned 0x0 [0148.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebackground.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b170343, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2b170343, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ad5f3e1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x421)) returned 1 [0148.281] SetErrorMode (uMode=0x0) returned 0x1 [0148.281] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebackground.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBackground.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebackground.settingcontent-ms.partially.cryptonar")) returned 1 [0148.284] SetErrorMode (uMode=0x1) returned 0x0 [0148.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBatterySaver.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebatterysaver.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.286] SetErrorMode (uMode=0x0) returned 0x1 [0148.286] GetFileType (hFile=0x230) returned 0x1 [0148.286] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.300] SetErrorMode (uMode=0x1) returned 0x0 [0148.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBatterySaver.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebatterysaver.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b208cbb, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2b208cbb, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ad855a0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42b)) returned 1 [0148.300] SetErrorMode (uMode=0x0) returned 0x1 [0148.300] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBatterySaver.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebatterysaver.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageBatterySaver.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagebatterysaver.settingcontent-ms.partially.cryptonar")) returned 1 [0148.302] SetErrorMode (uMode=0x1) returned 0x0 [0148.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageColors.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagecolors.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.304] SetErrorMode (uMode=0x0) returned 0x1 [0148.304] GetFileType (hFile=0x230) returned 0x1 [0148.304] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.309] SetErrorMode (uMode=0x1) returned 0x0 [0148.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageColors.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagecolors.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b2a161e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2b2a161e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5adab704, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40d)) returned 1 [0148.310] SetErrorMode (uMode=0x0) returned 0x1 [0148.310] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageColors.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagecolors.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageColors.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagecolors.settingcontent-ms.partially.cryptonar")) returned 1 [0148.312] SetErrorMode (uMode=0x1) returned 0x0 [0148.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDataSenseOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedatasenseoverview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.313] SetErrorMode (uMode=0x0) returned 0x1 [0148.313] GetFileType (hFile=0x230) returned 0x1 [0148.313] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.315] SetErrorMode (uMode=0x1) returned 0x0 [0148.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDataSenseOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedatasenseoverview.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b339f89, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2b339f89, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5adab704, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x444)) returned 1 [0148.315] SetErrorMode (uMode=0x0) returned 0x1 [0148.315] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDataSenseOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedatasenseoverview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDataSenseOverview.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedatasenseoverview.settingcontent-ms.partially.cryptonar")) returned 1 [0148.317] SetErrorMode (uMode=0x1) returned 0x0 [0148.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicespen.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.318] SetErrorMode (uMode=0x0) returned 0x1 [0148.319] GetFileType (hFile=0x230) returned 0x1 [0148.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.324] SetErrorMode (uMode=0x1) returned 0x0 [0148.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicespen.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b3d28fe, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2b3d28fe, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5adab704, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x421)) returned 1 [0148.324] SetErrorMode (uMode=0x0) returned 0x1 [0148.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicespen.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPen.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicespen.settingcontent-ms.partially.cryptonar")) returned 1 [0148.326] SetErrorMode (uMode=0x1) returned 0x0 [0148.326] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPrinters.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicesprinters.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.328] SetErrorMode (uMode=0x0) returned 0x1 [0148.328] GetFileType (hFile=0x230) returned 0x1 [0148.328] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.357] SetErrorMode (uMode=0x1) returned 0x0 [0148.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPrinters.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicesprinters.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b46b264, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2b46b264, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ae1e076, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43a)) returned 1 [0148.357] SetErrorMode (uMode=0x0) returned 0x1 [0148.358] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPrinters.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicesprinters.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageDevicesPrinters.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagedevicesprinters.settingcontent-ms.partially.cryptonar")) returned 1 [0148.359] SetErrorMode (uMode=0x1) returned 0x0 [0148.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessClosedCaptioning.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessclosedcaptioning.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.360] SetErrorMode (uMode=0x0) returned 0x1 [0148.360] GetFileType (hFile=0x230) returned 0x1 [0148.360] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.362] SetErrorMode (uMode=0x1) returned 0x0 [0148.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessClosedCaptioning.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessclosedcaptioning.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b55008a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2b55008a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ae1e076, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47b)) returned 1 [0148.362] SetErrorMode (uMode=0x0) returned 0x1 [0148.362] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessClosedCaptioning.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessclosedcaptioning.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessClosedCaptioning.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessclosedcaptioning.settingcontent-ms.partially.cryptonar")) returned 1 [0148.364] SetErrorMode (uMode=0x1) returned 0x0 [0148.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessHighContrast.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesshighcontrast.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.365] SetErrorMode (uMode=0x0) returned 0x1 [0148.365] GetFileType (hFile=0x230) returned 0x1 [0148.365] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.366] SetErrorMode (uMode=0x1) returned 0x0 [0148.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessHighContrast.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesshighcontrast.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f7fa886, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2f7fa886, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ae1e076, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x467)) returned 1 [0148.366] SetErrorMode (uMode=0x0) returned 0x1 [0148.367] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessHighContrast.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesshighcontrast.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessHighContrast.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesshighcontrast.settingcontent-ms.partially.cryptonar")) returned 1 [0148.368] SetErrorMode (uMode=0x1) returned 0x0 [0148.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessKeyboard.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesskeyboard.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.369] SetErrorMode (uMode=0x0) returned 0x1 [0148.369] GetFileType (hFile=0x230) returned 0x1 [0148.369] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.401] SetErrorMode (uMode=0x1) returned 0x0 [0148.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessKeyboard.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesskeyboard.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f9058ff, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2f9058ff, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ae6a3c0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x453)) returned 1 [0148.401] SetErrorMode (uMode=0x0) returned 0x1 [0148.401] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessKeyboard.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesskeyboard.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessKeyboard.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccesskeyboard.settingcontent-ms.partially.cryptonar")) returned 1 [0148.404] SetErrorMode (uMode=0x1) returned 0x0 [0148.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMagnifier.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmagnifier.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.406] SetErrorMode (uMode=0x0) returned 0x1 [0148.406] GetFileType (hFile=0x230) returned 0x1 [0148.406] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.443] SetErrorMode (uMode=0x1) returned 0x0 [0148.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMagnifier.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmagnifier.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f99e264, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2f99e264, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5aedecbf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x458)) returned 1 [0148.443] SetErrorMode (uMode=0x0) returned 0x1 [0148.443] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMagnifier.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmagnifier.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMagnifier.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmagnifier.settingcontent-ms.partially.cryptonar")) returned 1 [0148.445] SetErrorMode (uMode=0x1) returned 0x0 [0148.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMoreOptions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmoreoptions.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.446] SetErrorMode (uMode=0x0) returned 0x1 [0148.446] GetFileType (hFile=0x230) returned 0x1 [0148.446] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.448] SetErrorMode (uMode=0x1) returned 0x0 [0148.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMoreOptions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmoreoptions.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa36bcd, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2fa36bcd, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5aedecbf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x462)) returned 1 [0148.448] SetErrorMode (uMode=0x0) returned 0x1 [0148.448] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMoreOptions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmoreoptions.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMoreOptions.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmoreoptions.settingcontent-ms.partially.cryptonar")) returned 1 [0148.451] SetErrorMode (uMode=0x1) returned 0x0 [0148.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmouse.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.452] SetErrorMode (uMode=0x0) returned 0x1 [0148.452] GetFileType (hFile=0x230) returned 0x1 [0148.452] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.454] SetErrorMode (uMode=0x1) returned 0x0 [0148.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmouse.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2facf542, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2facf542, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5af044ad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x444)) returned 1 [0148.454] SetErrorMode (uMode=0x0) returned 0x1 [0148.454] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmouse.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessMouse.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessmouse.settingcontent-ms.partially.cryptonar")) returned 1 [0148.456] SetErrorMode (uMode=0x1) returned 0x0 [0148.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessNarrator.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessnarrator.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.457] SetErrorMode (uMode=0x0) returned 0x1 [0148.457] GetFileType (hFile=0x230) returned 0x1 [0148.457] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.459] SetErrorMode (uMode=0x1) returned 0x0 [0148.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessNarrator.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessnarrator.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb67ea1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2fb67ea1, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5af044ad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x453)) returned 1 [0148.459] SetErrorMode (uMode=0x0) returned 0x1 [0148.459] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessNarrator.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessnarrator.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageEaseOfAccessNarrator.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageeaseofaccessnarrator.settingcontent-ms.partially.cryptonar")) returned 1 [0148.462] SetErrorMode (uMode=0x1) returned 0x0 [0148.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen-2.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.463] SetErrorMode (uMode=0x0) returned 0x1 [0148.463] GetFileType (hFile=0x230) returned 0x1 [0148.463] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.466] SetErrorMode (uMode=0x1) returned 0x0 [0148.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen-2.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc00813, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2fc00813, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5af29229, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x429)) returned 1 [0148.466] SetErrorMode (uMode=0x0) returned 0x1 [0148.467] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen-2.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen-2.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen-2.settingcontent-ms.partially.cryptonar")) returned 1 [0148.468] SetErrorMode (uMode=0x1) returned 0x0 [0148.468] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.470] SetErrorMode (uMode=0x0) returned 0x1 [0148.470] GetFileType (hFile=0x230) returned 0x1 [0148.470] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.471] SetErrorMode (uMode=0x1) returned 0x0 [0148.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fce5646, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x2fce5646, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5af29229, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x421)) returned 1 [0148.472] SetErrorMode (uMode=0x0) returned 0x1 [0148.472] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageLockScreen.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagelockscreen.settingcontent-ms.partially.cryptonar")) returned 1 [0148.474] SetErrorMode (uMode=0x1) returned 0x0 [0148.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMaps.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemaps.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.475] SetErrorMode (uMode=0x0) returned 0x1 [0148.475] GetFileType (hFile=0x230) returned 0x1 [0148.475] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.477] SetErrorMode (uMode=0x1) returned 0x0 [0148.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMaps.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemaps.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3304f78c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3304f78c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5af29229, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x403)) returned 1 [0148.477] SetErrorMode (uMode=0x0) returned 0x1 [0148.477] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMaps.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemaps.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMaps.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemaps.settingcontent-ms.partially.cryptonar")) returned 1 [0148.479] SetErrorMode (uMode=0x1) returned 0x0 [0148.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMultiTasking.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemultitasking.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.490] SetErrorMode (uMode=0x0) returned 0x1 [0148.490] GetFileType (hFile=0x230) returned 0x1 [0148.490] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.577] SetErrorMode (uMode=0x1) returned 0x0 [0148.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMultiTasking.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemultitasking.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330e80f5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x330e80f5, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b033ded, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42b)) returned 1 [0148.615] SetErrorMode (uMode=0x0) returned 0x1 [0148.615] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMultiTasking.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemultitasking.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageMultiTasking.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagemultitasking.settingcontent-ms.partially.cryptonar")) returned 1 [0148.646] SetErrorMode (uMode=0x1) returned 0x0 [0148.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkAirplaneMode.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkairplanemode.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.686] SetErrorMode (uMode=0x0) returned 0x1 [0148.687] GetFileType (hFile=0x230) returned 0x1 [0148.687] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.691] SetErrorMode (uMode=0x1) returned 0x0 [0148.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkAirplaneMode.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkairplanemode.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33180a57, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x33180a57, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b13eed0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x44e)) returned 1 [0148.691] SetErrorMode (uMode=0x0) returned 0x1 [0148.691] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkAirplaneMode.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkairplanemode.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkAirplaneMode.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkairplanemode.settingcontent-ms.partially.cryptonar")) returned 1 [0148.692] SetErrorMode (uMode=0x1) returned 0x0 [0148.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDialup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdialup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.693] SetErrorMode (uMode=0x0) returned 0x1 [0148.694] GetFileType (hFile=0x230) returned 0x1 [0148.694] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.695] SetErrorMode (uMode=0x1) returned 0x0 [0148.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDialup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdialup.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332193d2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x332193d2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b13eed0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0148.695] SetErrorMode (uMode=0x0) returned 0x1 [0148.695] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDialup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdialup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDialup.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdialup.settingcontent-ms.partially.cryptonar")) returned 1 [0148.697] SetErrorMode (uMode=0x1) returned 0x0 [0148.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDirectAccess.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdirectaccess.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.698] SetErrorMode (uMode=0x0) returned 0x1 [0148.698] GetFileType (hFile=0x230) returned 0x1 [0148.698] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.699] SetErrorMode (uMode=0x1) returned 0x0 [0148.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDirectAccess.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdirectaccess.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332b1d2c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x332b1d2c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b13eed0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x44e)) returned 1 [0148.699] SetErrorMode (uMode=0x0) returned 0x1 [0148.699] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDirectAccess.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdirectaccess.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkDirectAccess.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkdirectaccess.settingcontent-ms.partially.cryptonar")) returned 1 [0148.700] SetErrorMode (uMode=0x1) returned 0x0 [0148.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkEthernet.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkethernet.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.701] SetErrorMode (uMode=0x0) returned 0x1 [0148.701] GetFileType (hFile=0x230) returned 0x1 [0148.701] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.703] SetErrorMode (uMode=0x1) returned 0x0 [0148.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkEthernet.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkethernet.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3334a694, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3334a694, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b165164, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43a)) returned 1 [0148.703] SetErrorMode (uMode=0x0) returned 0x1 [0148.703] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkEthernet.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkethernet.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkEthernet.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkethernet.settingcontent-ms.partially.cryptonar")) returned 1 [0148.704] SetErrorMode (uMode=0x1) returned 0x0 [0148.704] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileBroadband.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilebroadband.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.705] SetErrorMode (uMode=0x0) returned 0x1 [0148.705] GetFileType (hFile=0x230) returned 0x1 [0148.705] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.706] SetErrorMode (uMode=0x1) returned 0x0 [0148.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileBroadband.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilebroadband.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333e300c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x333e300c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b165164, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45d)) returned 1 [0148.706] SetErrorMode (uMode=0x0) returned 0x1 [0148.706] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileBroadband.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilebroadband.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileBroadband.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilebroadband.settingcontent-ms.partially.cryptonar")) returned 1 [0148.708] SetErrorMode (uMode=0x1) returned 0x0 [0148.708] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileHotspot.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilehotspot.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.709] SetErrorMode (uMode=0x0) returned 0x1 [0148.709] GetFileType (hFile=0x230) returned 0x1 [0148.709] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.710] SetErrorMode (uMode=0x1) returned 0x0 [0148.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileHotspot.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilehotspot.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334a1bd1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x334a1bd1, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b165164, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x453)) returned 1 [0148.710] SetErrorMode (uMode=0x0) returned 0x1 [0148.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileHotspot.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilehotspot.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkMobileHotspot.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkmobilehotspot.settingcontent-ms.partially.cryptonar")) returned 1 [0148.712] SetErrorMode (uMode=0x1) returned 0x0 [0148.712] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkProxy.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkproxy.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.713] SetErrorMode (uMode=0x0) returned 0x1 [0148.713] GetFileType (hFile=0x230) returned 0x1 [0148.713] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.732] SetErrorMode (uMode=0x1) returned 0x0 [0148.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkProxy.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkproxy.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x368ef66d, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x368ef66d, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b1b1882, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42b)) returned 1 [0148.732] SetErrorMode (uMode=0x0) returned 0x1 [0148.732] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkProxy.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkproxy.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkProxy.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkproxy.settingcontent-ms.partially.cryptonar")) returned 1 [0148.733] SetErrorMode (uMode=0x1) returned 0x0 [0148.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkVPN.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkvpn.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.734] SetErrorMode (uMode=0x0) returned 0x1 [0148.734] GetFileType (hFile=0x230) returned 0x1 [0148.734] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.736] SetErrorMode (uMode=0x1) returned 0x0 [0148.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkVPN.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkvpn.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36987fd3, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x36987fd3, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b1b1882, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x421)) returned 1 [0148.736] SetErrorMode (uMode=0x0) returned 0x1 [0148.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkVPN.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkvpn.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkVPN.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkvpn.settingcontent-ms.partially.cryptonar")) returned 1 [0148.737] SetErrorMode (uMode=0x1) returned 0x0 [0148.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWiFi.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkwifi.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.738] SetErrorMode (uMode=0x0) returned 0x1 [0148.738] GetFileType (hFile=0x230) returned 0x1 [0148.738] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.739] SetErrorMode (uMode=0x1) returned 0x0 [0148.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWiFi.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkwifi.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a2095b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x36a2095b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b1b1882, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x426)) returned 1 [0148.740] SetErrorMode (uMode=0x0) returned 0x1 [0148.740] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWiFi.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkwifi.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWiFi.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkwifi.settingcontent-ms.partially.cryptonar")) returned 1 [0148.741] SetErrorMode (uMode=0x1) returned 0x0 [0148.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWorkplace.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkworkplace.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.742] SetErrorMode (uMode=0x0) returned 0x1 [0148.742] GetFileType (hFile=0x230) returned 0x1 [0148.742] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.743] SetErrorMode (uMode=0x1) returned 0x0 [0148.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWorkplace.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkworkplace.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36adf500, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x36adf500, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b1b1882, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43f)) returned 1 [0148.743] SetErrorMode (uMode=0x0) returned 0x1 [0148.743] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWorkplace.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkworkplace.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageNetworkWorkplace.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagenetworkworkplace.settingcontent-ms.partially.cryptonar")) returned 1 [0148.745] SetErrorMode (uMode=0x1) returned 0x0 [0148.745] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemAutoPlay.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemautoplay.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.745] SetErrorMode (uMode=0x0) returned 0x1 [0148.745] GetFileType (hFile=0x230) returned 0x1 [0148.746] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.747] SetErrorMode (uMode=0x1) returned 0x0 [0148.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemAutoPlay.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemautoplay.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36bea594, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x36bea594, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b1d78e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43f)) returned 1 [0148.747] SetErrorMode (uMode=0x0) returned 0x1 [0148.747] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemAutoPlay.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemautoplay.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemAutoPlay.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemautoplay.settingcontent-ms.partially.cryptonar")) returned 1 [0148.748] SetErrorMode (uMode=0x1) returned 0x0 [0148.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemBluetooth.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystembluetooth.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.749] SetErrorMode (uMode=0x0) returned 0x1 [0148.749] GetFileType (hFile=0x230) returned 0x1 [0148.749] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.751] SetErrorMode (uMode=0x1) returned 0x0 [0148.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemBluetooth.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystembluetooth.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ccf3b4, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x36ccf3b4, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b1d78e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x444)) returned 1 [0148.751] SetErrorMode (uMode=0x0) returned 0x1 [0148.751] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemBluetooth.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystembluetooth.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemBluetooth.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystembluetooth.settingcontent-ms.partially.cryptonar")) returned 1 [0148.752] SetErrorMode (uMode=0x1) returned 0x0 [0148.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDevices.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevices.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.753] SetErrorMode (uMode=0x0) returned 0x1 [0148.753] GetFileType (hFile=0x230) returned 0x1 [0148.753] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.777] SetErrorMode (uMode=0x1) returned 0x0 [0148.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDevices.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevices.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d67d3c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x36d67d3c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b1fdb5a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43a)) returned 1 [0148.790] SetErrorMode (uMode=0x0) returned 0x1 [0148.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDevices.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevices.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDevices.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevices.settingcontent-ms.partially.cryptonar")) returned 1 [0148.792] SetErrorMode (uMode=0x1) returned 0x0 [0148.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDeviceSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevicesettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.794] SetErrorMode (uMode=0x0) returned 0x1 [0148.794] GetFileType (hFile=0x230) returned 0x1 [0148.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.800] SetErrorMode (uMode=0x1) returned 0x0 [0148.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDeviceSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevicesettings.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36e4cb18, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x36e4cb18, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b24aac0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45d)) returned 1 [0148.800] SetErrorMode (uMode=0x0) returned 0x1 [0148.800] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDeviceSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevicesettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDeviceSettings.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdevicesettings.settingcontent-ms.partially.cryptonar")) returned 1 [0148.802] SetErrorMode (uMode=0x1) returned 0x0 [0148.802] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDisplay.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdisplay.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.803] SetErrorMode (uMode=0x0) returned 0x1 [0148.803] GetFileType (hFile=0x230) returned 0x1 [0148.803] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.804] SetErrorMode (uMode=0x1) returned 0x0 [0148.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDisplay.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdisplay.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37468bb2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x37468bb2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b24aac0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43a)) returned 1 [0148.804] SetErrorMode (uMode=0x0) returned 0x1 [0148.804] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDisplay.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdisplay.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemDisplay.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemdisplay.settingcontent-ms.partially.cryptonar")) returned 1 [0148.805] SetErrorMode (uMode=0x1) returned 0x0 [0148.806] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsysteminfo.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.806] SetErrorMode (uMode=0x0) returned 0x1 [0148.806] GetFileType (hFile=0x230) returned 0x1 [0148.806] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.814] SetErrorMode (uMode=0x1) returned 0x0 [0148.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsysteminfo.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c22a48c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3c22a48c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b27023e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42b)) returned 1 [0148.814] SetErrorMode (uMode=0x0) returned 0x1 [0148.814] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsysteminfo.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemInfo.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsysteminfo.settingcontent-ms.partially.cryptonar")) returned 1 [0148.816] SetErrorMode (uMode=0x1) returned 0x0 [0148.816] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemShellMode.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemshellmode.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.818] SetErrorMode (uMode=0x0) returned 0x1 [0148.818] GetFileType (hFile=0x230) returned 0x1 [0148.818] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.834] SetErrorMode (uMode=0x1) returned 0x0 [0148.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemShellMode.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemshellmode.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d45822c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x3d45822c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b2965cd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x444)) returned 1 [0148.835] SetErrorMode (uMode=0x0) returned 0x1 [0148.835] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemShellMode.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemshellmode.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePCSystemShellMode.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagepcsystemshellmode.settingcontent-ms.partially.cryptonar")) returned 1 [0148.836] SetErrorMode (uMode=0x1) returned 0x0 [0148.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyaccountinfo.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.837] SetErrorMode (uMode=0x0) returned 0x1 [0148.837] GetFileType (hFile=0x230) returned 0x1 [0148.837] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.839] SetErrorMode (uMode=0x1) returned 0x0 [0148.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyaccountinfo.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4088126f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4088126f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b2965cd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x449)) returned 1 [0148.839] SetErrorMode (uMode=0x0) returned 0x1 [0148.839] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyaccountinfo.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyaccountinfo.settingcontent-ms.partially.cryptonar")) returned 1 [0148.841] SetErrorMode (uMode=0x1) returned 0x0 [0148.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCalendar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycalendar.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.841] SetErrorMode (uMode=0x0) returned 0x1 [0148.841] GetFileType (hFile=0x230) returned 0x1 [0148.842] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.843] SetErrorMode (uMode=0x1) returned 0x0 [0148.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCalendar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycalendar.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40919bd7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x40919bd7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b2bc9e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43a)) returned 1 [0148.843] SetErrorMode (uMode=0x0) returned 0x1 [0148.843] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCalendar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycalendar.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCalendar.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycalendar.settingcontent-ms.partially.cryptonar")) returned 1 [0148.844] SetErrorMode (uMode=0x1) returned 0x0 [0148.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyContacts.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycontacts.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.845] SetErrorMode (uMode=0x0) returned 0x1 [0148.845] GetFileType (hFile=0x230) returned 0x1 [0148.845] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.846] SetErrorMode (uMode=0x1) returned 0x0 [0148.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyContacts.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycontacts.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40a4aea9, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x40a4aea9, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b2bc9e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43a)) returned 1 [0148.846] SetErrorMode (uMode=0x0) returned 0x1 [0148.846] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyContacts.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycontacts.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyContacts.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycontacts.settingcontent-ms.partially.cryptonar")) returned 1 [0148.848] SetErrorMode (uMode=0x1) returned 0x0 [0148.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCustomPeripherals.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycustomperipherals.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.849] SetErrorMode (uMode=0x0) returned 0x1 [0148.849] GetFileType (hFile=0x230) returned 0x1 [0148.849] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.850] SetErrorMode (uMode=0x1) returned 0x0 [0148.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCustomPeripherals.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycustomperipherals.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ae3824, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x40ae3824, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b2bc9e5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x467)) returned 1 [0148.850] SetErrorMode (uMode=0x0) returned 0x1 [0148.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCustomPeripherals.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycustomperipherals.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyCustomPeripherals.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacycustomperipherals.settingcontent-ms.partially.cryptonar")) returned 1 [0148.852] SetErrorMode (uMode=0x1) returned 0x0 [0148.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyGeneral.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacygeneral.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.852] SetErrorMode (uMode=0x0) returned 0x1 [0148.853] GetFileType (hFile=0x230) returned 0x1 [0148.853] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.903] SetErrorMode (uMode=0x1) returned 0x0 [0148.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyGeneral.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacygeneral.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40bee896, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x40bee896, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b354f8d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x435)) returned 1 [0148.903] SetErrorMode (uMode=0x0) returned 0x1 [0148.903] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyGeneral.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacygeneral.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyGeneral.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacygeneral.settingcontent-ms.partially.cryptonar")) returned 1 [0148.905] SetErrorMode (uMode=0x1) returned 0x0 [0148.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyLocation.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacylocation.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.906] SetErrorMode (uMode=0x0) returned 0x1 [0148.906] GetFileType (hFile=0x230) returned 0x1 [0148.906] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.936] SetErrorMode (uMode=0x1) returned 0x0 [0148.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyLocation.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacylocation.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40d45dc3, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x40d45dc3, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b3a16da, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43a)) returned 1 [0148.936] SetErrorMode (uMode=0x0) returned 0x1 [0148.936] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyLocation.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacylocation.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyLocation.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacylocation.settingcontent-ms.partially.cryptonar")) returned 1 [0148.938] SetErrorMode (uMode=0x1) returned 0x0 [0148.938] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMessaging.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymessaging.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.939] SetErrorMode (uMode=0x0) returned 0x1 [0148.939] GetFileType (hFile=0x230) returned 0x1 [0148.939] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.951] SetErrorMode (uMode=0x1) returned 0x0 [0148.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMessaging.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymessaging.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40e2abfc, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x40e2abfc, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b3c780e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43f)) returned 1 [0148.951] SetErrorMode (uMode=0x0) returned 0x1 [0148.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMessaging.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymessaging.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMessaging.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymessaging.settingcontent-ms.partially.cryptonar")) returned 1 [0148.953] SetErrorMode (uMode=0x1) returned 0x0 [0148.953] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMicrophone.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymicrophone.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.954] SetErrorMode (uMode=0x0) returned 0x1 [0148.954] GetFileType (hFile=0x230) returned 0x1 [0148.954] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.987] SetErrorMode (uMode=0x1) returned 0x0 [0148.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMicrophone.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymicrophone.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d4455a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x43d4455a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b413df8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x444)) returned 1 [0148.987] SetErrorMode (uMode=0x0) returned 0x1 [0148.988] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMicrophone.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymicrophone.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMicrophone.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymicrophone.settingcontent-ms.partially.cryptonar")) returned 1 [0148.989] SetErrorMode (uMode=0x1) returned 0x0 [0148.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMotionData.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymotiondata.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.990] SetErrorMode (uMode=0x0) returned 0x1 [0148.990] GetFileType (hFile=0x230) returned 0x1 [0148.991] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.992] SetErrorMode (uMode=0x1) returned 0x0 [0148.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMotionData.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymotiondata.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x478b90e7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x478b90e7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b413df8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x444)) returned 1 [0148.992] SetErrorMode (uMode=0x0) returned 0x1 [0148.992] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMotionData.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymotiondata.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyMotionData.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacymotiondata.settingcontent-ms.partially.cryptonar")) returned 1 [0148.994] SetErrorMode (uMode=0x1) returned 0x0 [0148.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyPersonalization.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacypersonalization.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.995] SetErrorMode (uMode=0x0) returned 0x1 [0148.995] GetFileType (hFile=0x230) returned 0x1 [0148.995] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0148.996] SetErrorMode (uMode=0x1) returned 0x0 [0148.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyPersonalization.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacypersonalization.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47951a5f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x47951a5f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b413df8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45d)) returned 1 [0148.996] SetErrorMode (uMode=0x0) returned 0x1 [0148.996] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyPersonalization.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacypersonalization.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyPersonalization.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacypersonalization.settingcontent-ms.partially.cryptonar")) returned 1 [0148.998] SetErrorMode (uMode=0x1) returned 0x0 [0148.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyRadios.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyradios.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0148.999] SetErrorMode (uMode=0x0) returned 0x1 [0148.999] GetFileType (hFile=0x230) returned 0x1 [0148.999] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.025] SetErrorMode (uMode=0x1) returned 0x0 [0149.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyRadios.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyradios.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b67b4a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x47b67b4a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b46035b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0149.025] SetErrorMode (uMode=0x0) returned 0x1 [0149.025] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyRadios.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyradios.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyRadios.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacyradios.settingcontent-ms.partially.cryptonar")) returned 1 [0149.026] SetErrorMode (uMode=0x1) returned 0x0 [0149.026] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacysiufsettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.027] SetErrorMode (uMode=0x0) returned 0x1 [0149.027] GetFileType (hFile=0x230) returned 0x1 [0149.027] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.030] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc4 [0149.030] SetErrorMode (uMode=0x1) returned 0x0 [0149.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacysiufsettings.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c004e1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x47c004e1, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b486309, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x44e)) returned 1 [0149.030] SetErrorMode (uMode=0x0) returned 0x1 [0149.030] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacysiufsettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacySIUFSettings.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacysiufsettings.settingcontent-ms.partially.cryptonar")) returned 1 [0149.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms", lpFilePart=0x0) returned 0xaa [0149.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms", lpFilePart=0x0) returned 0xaa [0149.032] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms", lpFilePart=0x0) returned 0xaa [0149.032] SetErrorMode (uMode=0x1) returned 0x0 [0149.032] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacywebcam.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.033] GetFileType (hFile=0x230) returned 0x1 [0149.033] SetErrorMode (uMode=0x0) returned 0x1 [0149.033] GetFileType (hFile=0x230) returned 0x1 [0149.033] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.033] ReadFile (in: hFile=0x230, lpBuffer=0x26c4f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c4f28*, lpNumberOfBytesRead=0x5ae8b8*=0x430, lpOverlapped=0x0) returned 1 [0149.034] SetFilePointer (in: hFile=0x230, lDistanceToMove=-48, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.034] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.034] WriteFile (in: hFile=0x230, lpBuffer=0x26c4f28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c4f28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.035] CloseHandle (hObject=0x230) returned 1 [0149.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms", lpFilePart=0x0) returned 0xaa [0149.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms", lpFilePart=0x0) returned 0xaa [0149.035] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xbe [0149.035] SetErrorMode (uMode=0x1) returned 0x0 [0149.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacywebcam.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47c98e1e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x47c98e1e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b486309, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0149.035] SetErrorMode (uMode=0x0) returned 0x1 [0149.035] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacywebcam.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPagePrivacyWebcam.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspageprivacywebcam.settingcontent-ms.partially.cryptonar")) returned 1 [0149.036] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", lpFilePart=0x0) returned 0xb4 [0149.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", lpFilePart=0x0) returned 0xb4 [0149.037] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", lpFilePart=0x0) returned 0xb4 [0149.037] SetErrorMode (uMode=0x1) returned 0x0 [0149.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoredeveloperoptions.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.038] GetFileType (hFile=0x230) returned 0x1 [0149.038] SetErrorMode (uMode=0x0) returned 0x1 [0149.038] GetFileType (hFile=0x230) returned 0x1 [0149.038] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.038] ReadFile (in: hFile=0x230, lpBuffer=0x26c8d38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c8d38*, lpNumberOfBytesRead=0x5ae8b8*=0x462, lpOverlapped=0x0) returned 1 [0149.039] SetFilePointer (in: hFile=0x230, lDistanceToMove=-98, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.039] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.039] WriteFile (in: hFile=0x230, lpBuffer=0x26c8d38*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c8d38*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.040] CloseHandle (hObject=0x230) returned 1 [0149.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", lpFilePart=0x0) returned 0xb4 [0149.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms", lpFilePart=0x0) returned 0xb4 [0149.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc8 [0149.040] SetErrorMode (uMode=0x1) returned 0x0 [0149.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoredeveloperoptions.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47d31793, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x47d31793, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b486309, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x462)) returned 1 [0149.040] SetErrorMode (uMode=0x0) returned 0x1 [0149.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoredeveloperoptions.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreDeveloperOptions.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoredeveloperoptions.settingcontent-ms.partially.cryptonar")) returned 1 [0149.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", lpFilePart=0x0) returned 0xad [0149.042] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", lpFilePart=0x0) returned 0xad [0149.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", lpFilePart=0x0) returned 0xad [0149.043] SetErrorMode (uMode=0x1) returned 0x0 [0149.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoremusupdate.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.053] GetFileType (hFile=0x230) returned 0x1 [0149.053] SetErrorMode (uMode=0x0) returned 0x1 [0149.053] GetFileType (hFile=0x230) returned 0x1 [0149.053] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.053] ReadFile (in: hFile=0x230, lpBuffer=0x26ccb88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ccb88*, lpNumberOfBytesRead=0x5ae8b8*=0x43f, lpOverlapped=0x0) returned 1 [0149.058] SetFilePointer (in: hFile=0x230, lDistanceToMove=-63, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.058] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.058] WriteFile (in: hFile=0x230, lpBuffer=0x26ccb88*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ccb88*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.059] CloseHandle (hObject=0x230) returned 1 [0149.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", lpFilePart=0x0) returned 0xad [0149.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms", lpFilePart=0x0) returned 0xad [0149.059] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc1 [0149.059] SetErrorMode (uMode=0x1) returned 0x0 [0149.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoremusupdate.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2b04e8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4b2b04e8, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b4ac625, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43f)) returned 1 [0149.060] SetErrorMode (uMode=0x0) returned 0x1 [0149.060] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoremusupdate.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreMusUpdate.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoremusupdate.settingcontent-ms.partially.cryptonar")) returned 1 [0149.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms", lpFilePart=0x0) returned 0xad [0149.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms", lpFilePart=0x0) returned 0xad [0149.061] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms", lpFilePart=0x0) returned 0xad [0149.061] SetErrorMode (uMode=0x1) returned 0x0 [0149.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoreonebackup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.062] GetFileType (hFile=0x230) returned 0x1 [0149.062] SetErrorMode (uMode=0x0) returned 0x1 [0149.062] GetFileType (hFile=0x230) returned 0x1 [0149.062] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.062] ReadFile (in: hFile=0x230, lpBuffer=0x26d0978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d0978*, lpNumberOfBytesRead=0x5ae8b8*=0x43f, lpOverlapped=0x0) returned 1 [0149.063] SetFilePointer (in: hFile=0x230, lDistanceToMove=-63, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.063] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.064] WriteFile (in: hFile=0x230, lpBuffer=0x26d0978*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d0978*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.064] CloseHandle (hObject=0x230) returned 1 [0149.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms", lpFilePart=0x0) returned 0xad [0149.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms", lpFilePart=0x0) returned 0xad [0149.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc1 [0149.064] SetErrorMode (uMode=0x1) returned 0x0 [0149.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoreonebackup.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b393a97, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4b393a97, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b4d275d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43f)) returned 1 [0149.064] SetErrorMode (uMode=0x0) returned 0x1 [0149.064] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoreonebackup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreOneBackup.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestoreonebackup.settingcontent-ms.partially.cryptonar")) returned 1 [0149.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms", lpFilePart=0x0) returned 0xab [0149.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms", lpFilePart=0x0) returned 0xab [0149.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms", lpFilePart=0x0) returned 0xab [0149.066] SetErrorMode (uMode=0x1) returned 0x0 [0149.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestorerestore.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.066] GetFileType (hFile=0x230) returned 0x1 [0149.066] SetErrorMode (uMode=0x0) returned 0x1 [0149.066] GetFileType (hFile=0x230) returned 0x1 [0149.066] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.066] ReadFile (in: hFile=0x230, lpBuffer=0x26d4750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d4750*, lpNumberOfBytesRead=0x5ae8b8*=0x435, lpOverlapped=0x0) returned 1 [0149.068] SetFilePointer (in: hFile=0x230, lDistanceToMove=-53, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.068] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.068] WriteFile (in: hFile=0x230, lpBuffer=0x26d4750*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d4750*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.068] CloseHandle (hObject=0x230) returned 1 [0149.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms", lpFilePart=0x0) returned 0xab [0149.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms", lpFilePart=0x0) returned 0xab [0149.068] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xbf [0149.068] SetErrorMode (uMode=0x1) returned 0x0 [0149.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestorerestore.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb02f85, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4eb02f85, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b4d275d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x435)) returned 1 [0149.068] SetErrorMode (uMode=0x0) returned 0x1 [0149.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestorerestore.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageRestoreRestore.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagerestorerestore.settingcontent-ms.partially.cryptonar")) returned 1 [0149.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", lpFilePart=0x0) returned 0xb0 [0149.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", lpFilePart=0x0) returned 0xb0 [0149.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", lpFilePart=0x0) returned 0xb0 [0149.070] SetErrorMode (uMode=0x1) returned 0x0 [0149.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagescreenpowerandsleep.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.071] GetFileType (hFile=0x230) returned 0x1 [0149.071] SetErrorMode (uMode=0x0) returned 0x1 [0149.071] GetFileType (hFile=0x230) returned 0x1 [0149.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.071] ReadFile (in: hFile=0x230, lpBuffer=0x26d8540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d8540*, lpNumberOfBytesRead=0x5ae8b8*=0x44e, lpOverlapped=0x0) returned 1 [0149.072] SetFilePointer (in: hFile=0x230, lDistanceToMove=-78, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.072] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.072] WriteFile (in: hFile=0x230, lpBuffer=0x26d8540*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d8540*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.072] CloseHandle (hObject=0x230) returned 1 [0149.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", lpFilePart=0x0) returned 0xb0 [0149.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms", lpFilePart=0x0) returned 0xb0 [0149.072] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc4 [0149.072] SetErrorMode (uMode=0x1) returned 0x0 [0149.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagescreenpowerandsleep.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ec34256, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4ec34256, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b4d275d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x44e)) returned 1 [0149.072] SetErrorMode (uMode=0x0) returned 0x1 [0149.072] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagescreenpowerandsleep.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageScreenPowerAndSleep.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagescreenpowerandsleep.settingcontent-ms.partially.cryptonar")) returned 1 [0149.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms", lpFilePart=0x0) returned 0xa3 [0149.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms", lpFilePart=0x0) returned 0xa3 [0149.074] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms", lpFilePart=0x0) returned 0xa3 [0149.074] SetErrorMode (uMode=0x1) returned 0x0 [0149.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagespeech.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.075] GetFileType (hFile=0x230) returned 0x1 [0149.075] SetErrorMode (uMode=0x0) returned 0x1 [0149.075] GetFileType (hFile=0x230) returned 0x1 [0149.075] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.075] ReadFile (in: hFile=0x230, lpBuffer=0x26dc2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26dc2f8*, lpNumberOfBytesRead=0x5ae8b8*=0x40d, lpOverlapped=0x0) returned 1 [0149.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=-13, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.076] WriteFile (in: hFile=0x230, lpBuffer=0x26dc2f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26dc2f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.076] CloseHandle (hObject=0x230) returned 1 [0149.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms", lpFilePart=0x0) returned 0xa3 [0149.076] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms", lpFilePart=0x0) returned 0xa3 [0149.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xb7 [0149.077] SetErrorMode (uMode=0x1) returned 0x0 [0149.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagespeech.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed3f2cf, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4ed3f2cf, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b4f9529, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40d)) returned 1 [0149.077] SetErrorMode (uMode=0x0) returned 0x1 [0149.077] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagespeech.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageSpeech.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagespeech.settingcontent-ms.partially.cryptonar")) returned 1 [0149.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms", lpFilePart=0x0) returned 0xa2 [0149.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms", lpFilePart=0x0) returned 0xa2 [0149.078] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms", lpFilePart=0x0) returned 0xa2 [0149.078] SetErrorMode (uMode=0x1) returned 0x0 [0149.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestart.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.079] GetFileType (hFile=0x230) returned 0x1 [0149.079] SetErrorMode (uMode=0x0) returned 0x1 [0149.079] GetFileType (hFile=0x230) returned 0x1 [0149.079] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.079] ReadFile (in: hFile=0x230, lpBuffer=0x26dffe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26dffe8*, lpNumberOfBytesRead=0x5ae8b8*=0x408, lpOverlapped=0x0) returned 1 [0149.080] SetFilePointer (in: hFile=0x230, lDistanceToMove=-8, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.080] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.081] WriteFile (in: hFile=0x230, lpBuffer=0x26dffe8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26dffe8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.081] CloseHandle (hObject=0x230) returned 1 [0149.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms", lpFilePart=0x0) returned 0xa2 [0149.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms", lpFilePart=0x0) returned 0xa2 [0149.081] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xb6 [0149.081] SetErrorMode (uMode=0x1) returned 0x0 [0149.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestart.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4edd7c3a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4edd7c3a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b4f9529, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x408)) returned 1 [0149.081] SetErrorMode (uMode=0x0) returned 0x1 [0149.081] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestart.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStart.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestart.settingcontent-ms.partially.cryptonar")) returned 1 [0149.082] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", lpFilePart=0x0) returned 0xb6 [0149.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", lpFilePart=0x0) returned 0xb6 [0149.083] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", lpFilePart=0x0) returned 0xb6 [0149.083] SetErrorMode (uMode=0x1) returned 0x0 [0149.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensesavelocations.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.084] GetFileType (hFile=0x230) returned 0x1 [0149.084] SetErrorMode (uMode=0x0) returned 0x1 [0149.084] GetFileType (hFile=0x230) returned 0x1 [0149.084] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.084] ReadFile (in: hFile=0x230, lpBuffer=0x26e3d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e3d98*, lpNumberOfBytesRead=0x5ae8b8*=0x4ae, lpOverlapped=0x0) returned 1 [0149.107] SetFilePointer (in: hFile=0x230, lDistanceToMove=-174, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.107] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.108] WriteFile (in: hFile=0x230, lpBuffer=0x26e3d98*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e3d98*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.108] CloseHandle (hObject=0x230) returned 1 [0149.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", lpFilePart=0x0) returned 0xb6 [0149.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms", lpFilePart=0x0) returned 0xb6 [0149.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xca [0149.108] SetErrorMode (uMode=0x1) returned 0x0 [0149.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensesavelocations.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5507d320, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5507d320, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b545118, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ae)) returned 1 [0149.108] SetErrorMode (uMode=0x0) returned 0x1 [0149.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensesavelocations.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseSaveLocations.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensesavelocations.settingcontent-ms.partially.cryptonar")) returned 1 [0149.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", lpFilePart=0x0) returned 0xb8 [0149.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", lpFilePart=0x0) returned 0xb8 [0149.110] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", lpFilePart=0x0) returned 0xb8 [0149.110] SetErrorMode (uMode=0x1) returned 0x0 [0149.110] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensestorageoverview.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.111] GetFileType (hFile=0x230) returned 0x1 [0149.111] SetErrorMode (uMode=0x0) returned 0x1 [0149.111] GetFileType (hFile=0x230) returned 0x1 [0149.111] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.111] ReadFile (in: hFile=0x230, lpBuffer=0x26e7c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e7c60*, lpNumberOfBytesRead=0x5ae8b8*=0x476, lpOverlapped=0x0) returned 1 [0149.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=-118, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.113] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.113] WriteFile (in: hFile=0x230, lpBuffer=0x26e7c60*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e7c60*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.113] CloseHandle (hObject=0x230) returned 1 [0149.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", lpFilePart=0x0) returned 0xb8 [0149.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms", lpFilePart=0x0) returned 0xb8 [0149.115] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xcc [0149.115] SetErrorMode (uMode=0x1) returned 0x0 [0149.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensestorageoverview.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55409333, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x55409333, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b545118, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x476)) returned 1 [0149.116] SetErrorMode (uMode=0x0) returned 0x1 [0149.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensestorageoverview.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageStorageSenseStorageOverview.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagestoragesensestorageoverview.settingcontent-ms.partially.cryptonar")) returned 1 [0149.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms", lpFilePart=0x0) returned 0xa3 [0149.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms", lpFilePart=0x0) returned 0xa3 [0149.118] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms", lpFilePart=0x0) returned 0xa3 [0149.118] SetErrorMode (uMode=0x1) returned 0x0 [0149.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagethemes.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.119] GetFileType (hFile=0x230) returned 0x1 [0149.119] SetErrorMode (uMode=0x0) returned 0x1 [0149.119] GetFileType (hFile=0x230) returned 0x1 [0149.119] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.119] ReadFile (in: hFile=0x230, lpBuffer=0x26eba78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26eba78*, lpNumberOfBytesRead=0x5ae8b8*=0x40d, lpOverlapped=0x0) returned 1 [0149.120] SetFilePointer (in: hFile=0x230, lDistanceToMove=-13, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.120] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.121] WriteFile (in: hFile=0x230, lpBuffer=0x26eba78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26eba78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.121] CloseHandle (hObject=0x230) returned 1 [0149.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms", lpFilePart=0x0) returned 0xa3 [0149.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms", lpFilePart=0x0) returned 0xa3 [0149.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xb7 [0149.121] SetErrorMode (uMode=0x1) returned 0x0 [0149.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagethemes.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554a1d0f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x554a1d0f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b545118, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40d)) returned 1 [0149.122] SetErrorMode (uMode=0x0) returned 0x1 [0149.122] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagethemes.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageThemes.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagethemes.settingcontent-ms.partially.cryptonar")) returned 1 [0149.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.123] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.123] SetErrorMode (uMode=0x1) returned 0x0 [0149.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregiondatetime.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.124] GetFileType (hFile=0x230) returned 0x1 [0149.124] SetErrorMode (uMode=0x0) returned 0x1 [0149.124] GetFileType (hFile=0x230) returned 0x1 [0149.124] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.124] ReadFile (in: hFile=0x230, lpBuffer=0x26ef7f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ef7f0*, lpNumberOfBytesRead=0x5ae8b8*=0x449, lpOverlapped=0x0) returned 1 [0149.125] SetFilePointer (in: hFile=0x230, lDistanceToMove=-73, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.125] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.125] WriteFile (in: hFile=0x230, lpBuffer=0x26ef7f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ef7f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.125] CloseHandle (hObject=0x230) returned 1 [0149.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.126] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc3 [0149.126] SetErrorMode (uMode=0x1) returned 0x0 [0149.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregiondatetime.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5553a5fb, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5553a5fb, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b56b12c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x449)) returned 1 [0149.126] SetErrorMode (uMode=0x0) returned 0x1 [0149.126] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregiondatetime.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionDateTime.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregiondatetime.settingcontent-ms.partially.cryptonar")) returned 1 [0149.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.127] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.128] SetErrorMode (uMode=0x1) returned 0x0 [0149.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionlanguage.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.129] GetFileType (hFile=0x230) returned 0x1 [0149.129] SetErrorMode (uMode=0x0) returned 0x1 [0149.129] GetFileType (hFile=0x230) returned 0x1 [0149.129] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.129] ReadFile (in: hFile=0x230, lpBuffer=0x26f35f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f35f8*, lpNumberOfBytesRead=0x5ae8b8*=0x449, lpOverlapped=0x0) returned 1 [0149.130] SetFilePointer (in: hFile=0x230, lDistanceToMove=-73, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.130] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.130] WriteFile (in: hFile=0x230, lpBuffer=0x26f35f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f35f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.130] CloseHandle (hObject=0x230) returned 1 [0149.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.130] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc3 [0149.130] SetErrorMode (uMode=0x1) returned 0x0 [0149.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionlanguage.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55691b2b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x55691b2b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b56b12c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x449)) returned 1 [0149.131] SetErrorMode (uMode=0x0) returned 0x1 [0149.131] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionlanguage.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionLanguage.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionlanguage.settingcontent-ms.partially.cryptonar")) returned 1 [0149.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.132] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.132] SetErrorMode (uMode=0x1) returned 0x0 [0149.132] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionspelling.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.134] GetFileType (hFile=0x230) returned 0x1 [0149.134] SetErrorMode (uMode=0x0) returned 0x1 [0149.134] GetFileType (hFile=0x230) returned 0x1 [0149.134] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.134] ReadFile (in: hFile=0x230, lpBuffer=0x26f7400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f7400*, lpNumberOfBytesRead=0x5ae8b8*=0x449, lpOverlapped=0x0) returned 1 [0149.150] SetFilePointer (in: hFile=0x230, lDistanceToMove=-73, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.150] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.150] WriteFile (in: hFile=0x230, lpBuffer=0x26f7400*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f7400*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.150] CloseHandle (hObject=0x230) returned 1 [0149.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms", lpFilePart=0x0) returned 0xaf [0149.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc3 [0149.152] SetErrorMode (uMode=0x1) returned 0x0 [0149.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionspelling.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55750743, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x55750743, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b5913c3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x449)) returned 1 [0149.152] SetErrorMode (uMode=0x0) returned 0x1 [0149.152] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionspelling.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageTimeRegionSpelling.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagetimeregionspelling.settingcontent-ms.partially.cryptonar")) returned 1 [0149.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms", lpFilePart=0x0) returned 0xac [0149.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms", lpFilePart=0x0) returned 0xac [0149.154] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms", lpFilePart=0x0) returned 0xac [0149.154] SetErrorMode (uMode=0x1) returned 0x0 [0149.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsdefender.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.156] GetFileType (hFile=0x230) returned 0x1 [0149.156] SetErrorMode (uMode=0x0) returned 0x1 [0149.156] GetFileType (hFile=0x230) returned 0x1 [0149.156] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.156] ReadFile (in: hFile=0x230, lpBuffer=0x26fb1f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fb1f8*, lpNumberOfBytesRead=0x5ae8b8*=0x43a, lpOverlapped=0x0) returned 1 [0149.157] SetFilePointer (in: hFile=0x230, lDistanceToMove=-58, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.157] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.157] WriteFile (in: hFile=0x230, lpBuffer=0x26fb1f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26fb1f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.157] CloseHandle (hObject=0x230) returned 1 [0149.157] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms", lpFilePart=0x0) returned 0xac [0149.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms", lpFilePart=0x0) returned 0xac [0149.158] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc0 [0149.158] SetErrorMode (uMode=0x1) returned 0x0 [0149.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsdefender.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b627d67, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5b627d67, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b5b759d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43a)) returned 1 [0149.158] SetErrorMode (uMode=0x0) returned 0x1 [0149.158] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsdefender.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsDefender.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsdefender.settingcontent-ms.partially.cryptonar")) returned 1 [0149.159] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms", lpFilePart=0x0) returned 0xb2 [0149.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms", lpFilePart=0x0) returned 0xb2 [0149.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms", lpFilePart=0x0) returned 0xb2 [0149.160] SetErrorMode (uMode=0x1) returned 0x0 [0149.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsserverdefender.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.161] GetFileType (hFile=0x230) returned 0x1 [0149.161] SetErrorMode (uMode=0x0) returned 0x1 [0149.161] GetFileType (hFile=0x230) returned 0x1 [0149.161] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.161] ReadFile (in: hFile=0x230, lpBuffer=0x26ff010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ff010*, lpNumberOfBytesRead=0x5ae8b8*=0x458, lpOverlapped=0x0) returned 1 [0149.163] SetFilePointer (in: hFile=0x230, lDistanceToMove=-88, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.163] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.163] WriteFile (in: hFile=0x230, lpBuffer=0x26ff010*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ff010*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.163] CloseHandle (hObject=0x230) returned 1 [0149.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms", lpFilePart=0x0) returned 0xb2 [0149.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms", lpFilePart=0x0) returned 0xb2 [0149.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc6 [0149.163] SetErrorMode (uMode=0x1) returned 0x0 [0149.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsserverdefender.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b732de5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5b732de5, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b5b759d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x458)) returned 1 [0149.163] SetErrorMode (uMode=0x0) returned 0x1 [0149.163] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsserverdefender.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SettingsPageWindowsServerDefender.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settingspagewindowsserverdefender.settingcontent-ms.partially.cryptonar")) returned 1 [0149.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms", lpFilePart=0x0) returned 0xac [0149.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms", lpFilePart=0x0) returned 0xac [0149.165] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms", lpFilePart=0x0) returned 0xac [0149.165] SetErrorMode (uMode=0x1) returned 0x0 [0149.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_developermodegroup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.166] GetFileType (hFile=0x230) returned 0x1 [0149.167] SetErrorMode (uMode=0x0) returned 0x1 [0149.167] GetFileType (hFile=0x230) returned 0x1 [0149.167] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.167] ReadFile (in: hFile=0x230, lpBuffer=0x2702e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2702e30*, lpNumberOfBytesRead=0x5ae8b8*=0x478, lpOverlapped=0x0) returned 1 [0149.168] SetFilePointer (in: hFile=0x230, lDistanceToMove=-120, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.168] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.168] WriteFile (in: hFile=0x230, lpBuffer=0x2702e30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2702e30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.168] CloseHandle (hObject=0x230) returned 1 [0149.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms", lpFilePart=0x0) returned 0xac [0149.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms", lpFilePart=0x0) returned 0xac [0149.169] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc0 [0149.169] SetErrorMode (uMode=0x1) returned 0x0 [0149.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_developermodegroup.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b817bff, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5b817bff, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b5dd7c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x478)) returned 1 [0149.169] SetErrorMode (uMode=0x0) returned 0x1 [0149.169] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_developermodegroup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeveloperModeGroup.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_developermodegroup.settingcontent-ms.partially.cryptonar")) returned 1 [0149.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", lpFilePart=0x0) returned 0xae [0149.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", lpFilePart=0x0) returned 0xae [0149.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", lpFilePart=0x0) returned 0xae [0149.171] SetErrorMode (uMode=0x1) returned 0x0 [0149.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_devicediscoverygroup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.173] GetFileType (hFile=0x230) returned 0x1 [0149.173] SetErrorMode (uMode=0x0) returned 0x1 [0149.173] GetFileType (hFile=0x230) returned 0x1 [0149.173] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.173] ReadFile (in: hFile=0x230, lpBuffer=0x2706c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2706c20*, lpNumberOfBytesRead=0x5ae8b8*=0x482, lpOverlapped=0x0) returned 1 [0149.174] SetFilePointer (in: hFile=0x230, lDistanceToMove=-130, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.174] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.174] WriteFile (in: hFile=0x230, lpBuffer=0x2706c20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2706c20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.174] CloseHandle (hObject=0x230) returned 1 [0149.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", lpFilePart=0x0) returned 0xae [0149.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms", lpFilePart=0x0) returned 0xae [0149.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xc2 [0149.175] SetErrorMode (uMode=0x1) returned 0x0 [0149.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_devicediscoverygroup.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ba53f58, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5ba53f58, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b5dd7c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x482)) returned 1 [0149.175] SetErrorMode (uMode=0x0) returned 0x1 [0149.175] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_devicediscoverygroup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_Settings_DeviceDiscoveryGroup.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_settings_devicediscoverygroup.settingcontent-ms.partially.cryptonar")) returned 1 [0149.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", lpFilePart=0x0) returned 0xbd [0149.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", lpFilePart=0x0) returned 0xbd [0149.177] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", lpFilePart=0x0) returned 0xbd [0149.177] SetErrorMode (uMode=0x1) returned 0x0 [0149.177] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_cursorthickness.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.178] GetFileType (hFile=0x230) returned 0x1 [0149.178] SetErrorMode (uMode=0x0) returned 0x1 [0149.178] GetFileType (hFile=0x230) returned 0x1 [0149.178] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.178] ReadFile (in: hFile=0x230, lpBuffer=0x270aab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270aab0*, lpNumberOfBytesRead=0x5ae8b8*=0x510, lpOverlapped=0x0) returned 1 [0149.182] SetFilePointer (in: hFile=0x230, lDistanceToMove=-272, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.182] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.182] WriteFile (in: hFile=0x230, lpBuffer=0x270aab0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270aab0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.182] CloseHandle (hObject=0x230) returned 1 [0149.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", lpFilePart=0x0) returned 0xbd [0149.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms", lpFilePart=0x0) returned 0xbd [0149.183] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xd1 [0149.183] SetErrorMode (uMode=0x1) returned 0x0 [0149.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_cursorthickness.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be59eeb, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5be59eeb, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b5dd7c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0149.183] SetErrorMode (uMode=0x0) returned 0x1 [0149.183] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_cursorthickness.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_CursorThickness.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_cursorthickness.settingcontent-ms.partially.cryptonar")) returned 1 [0149.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc1 [0149.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc1 [0149.185] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc1 [0149.185] SetErrorMode (uMode=0x1) returned 0x0 [0149.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isanimationsenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.186] GetFileType (hFile=0x230) returned 0x1 [0149.186] SetErrorMode (uMode=0x0) returned 0x1 [0149.186] GetFileType (hFile=0x230) returned 0x1 [0149.186] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.186] ReadFile (in: hFile=0x230, lpBuffer=0x270ea28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270ea28*, lpNumberOfBytesRead=0x5ae8b8*=0x524, lpOverlapped=0x0) returned 1 [0149.187] SetFilePointer (in: hFile=0x230, lDistanceToMove=-292, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.187] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.188] WriteFile (in: hFile=0x230, lpBuffer=0x270ea28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270ea28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.188] CloseHandle (hObject=0x230) returned 1 [0149.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc1 [0149.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc1 [0149.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xd5 [0149.188] SetErrorMode (uMode=0x1) returned 0x0 [0149.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isanimationsenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ef0ae3b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5ef0ae3b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b605274, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x524)) returned 1 [0149.188] SetErrorMode (uMode=0x0) returned 0x1 [0149.188] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isanimationsenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsAnimationsEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isanimationsenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc0 [0149.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc0 [0149.190] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc0 [0149.190] SetErrorMode (uMode=0x1) returned 0x0 [0149.190] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_ismousekeysenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.191] GetFileType (hFile=0x230) returned 0x1 [0149.191] SetErrorMode (uMode=0x0) returned 0x1 [0149.191] GetFileType (hFile=0x230) returned 0x1 [0149.191] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.191] ReadFile (in: hFile=0x230, lpBuffer=0x27129d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27129d0*, lpNumberOfBytesRead=0x5ae8b8*=0x517, lpOverlapped=0x0) returned 1 [0149.192] SetFilePointer (in: hFile=0x230, lDistanceToMove=-279, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.192] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.193] WriteFile (in: hFile=0x230, lpBuffer=0x27129d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27129d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.193] CloseHandle (hObject=0x230) returned 1 [0149.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc0 [0149.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc0 [0149.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0149.193] SetErrorMode (uMode=0x1) returned 0x0 [0149.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_ismousekeysenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f310dd1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f310dd1, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b605274, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x517)) returned 1 [0149.193] SetErrorMode (uMode=0x0) returned 0x1 [0149.193] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_ismousekeysenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsMouseKeysEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_ismousekeysenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc8 [0149.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc8 [0149.195] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc8 [0149.195] SetErrorMode (uMode=0x1) returned 0x0 [0149.195] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isoverlappedcontentenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.196] GetFileType (hFile=0x230) returned 0x1 [0149.196] SetErrorMode (uMode=0x0) returned 0x1 [0149.196] GetFileType (hFile=0x230) returned 0x1 [0149.196] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.196] ReadFile (in: hFile=0x230, lpBuffer=0x27169c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27169c8*, lpNumberOfBytesRead=0x5ae8b8*=0x547, lpOverlapped=0x0) returned 1 [0149.198] SetFilePointer (in: hFile=0x230, lDistanceToMove=-327, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.198] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.198] WriteFile (in: hFile=0x230, lpBuffer=0x27169c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27169c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.198] CloseHandle (hObject=0x230) returned 1 [0149.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc8 [0149.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc8 [0149.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xdc [0149.198] SetErrorMode (uMode=0x1) returned 0x0 [0149.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isoverlappedcontentenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f48e55d, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f48e55d, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b605274, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x547)) returned 1 [0149.198] SetErrorMode (uMode=0x0) returned 0x1 [0149.199] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isoverlappedcontentenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_IsOverlappedContentEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_isoverlappedcontentenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xca [0149.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xca [0149.201] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xca [0149.201] SetErrorMode (uMode=0x1) returned 0x0 [0149.201] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isautostartenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.202] GetFileType (hFile=0x230) returned 0x1 [0149.202] SetErrorMode (uMode=0x0) returned 0x1 [0149.202] GetFileType (hFile=0x230) returned 0x1 [0149.202] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.202] ReadFile (in: hFile=0x230, lpBuffer=0x271aa20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271aa20*, lpNumberOfBytesRead=0x5ae8b8*=0x54d, lpOverlapped=0x0) returned 1 [0149.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=-333, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.204] WriteFile (in: hFile=0x230, lpBuffer=0x271aa20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271aa20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.204] CloseHandle (hObject=0x230) returned 1 [0149.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xca [0149.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xca [0149.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xde [0149.204] SetErrorMode (uMode=0x1) returned 0x0 [0149.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isautostartenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f526f5a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f526f5a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b62c1e4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x54d)) returned 1 [0149.205] SetErrorMode (uMode=0x0) returned 0x1 [0149.205] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isautostartenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsAutoStartEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isautostartenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc1 [0149.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc1 [0149.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc1 [0149.206] SetErrorMode (uMode=0x1) returned 0x0 [0149.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.207] GetFileType (hFile=0x230) returned 0x1 [0149.207] SetErrorMode (uMode=0x0) returned 0x1 [0149.208] GetFileType (hFile=0x230) returned 0x1 [0149.208] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.208] ReadFile (in: hFile=0x230, lpBuffer=0x271ea28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271ea28*, lpNumberOfBytesRead=0x5ae8b8*=0x520, lpOverlapped=0x0) returned 1 [0149.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=-288, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.223] WriteFile (in: hFile=0x230, lpBuffer=0x271ea28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271ea28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.223] CloseHandle (hObject=0x230) returned 1 [0149.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc1 [0149.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc1 [0149.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xd5 [0149.223] SetErrorMode (uMode=0x1) returned 0x0 [0149.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f5bf837, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f5bf837, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b64ffd0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0149.223] SetErrorMode (uMode=0x0) returned 0x1 [0149.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xd2 [0149.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xd2 [0149.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xd2 [0149.225] SetErrorMode (uMode=0x1) returned 0x0 [0149.225] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowinsertpointenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.226] GetFileType (hFile=0x230) returned 0x1 [0149.226] SetErrorMode (uMode=0x0) returned 0x1 [0149.226] GetFileType (hFile=0x230) returned 0x1 [0149.226] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.226] ReadFile (in: hFile=0x230, lpBuffer=0x2722a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2722a70*, lpNumberOfBytesRead=0x5ae8b8*=0x584, lpOverlapped=0x0) returned 1 [0149.239] SetFilePointer (in: hFile=0x230, lDistanceToMove=-388, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.239] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.240] WriteFile (in: hFile=0x230, lpBuffer=0x2722a70*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2722a70*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.240] CloseHandle (hObject=0x230) returned 1 [0149.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xd2 [0149.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xd2 [0149.240] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xe6 [0149.240] SetErrorMode (uMode=0x1) returned 0x0 [0149.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowinsertpointenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f6a464e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x5f6a464e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b6761b7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x584)) returned 1 [0149.240] SetErrorMode (uMode=0x0) returned 0x1 [0149.240] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowinsertpointenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowInsertPointEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowinsertpointenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.242] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.242] SetErrorMode (uMode=0x1) returned 0x0 [0149.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowkeyfocusenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.243] GetFileType (hFile=0x230) returned 0x1 [0149.243] SetErrorMode (uMode=0x0) returned 0x1 [0149.243] GetFileType (hFile=0x230) returned 0x1 [0149.243] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.244] ReadFile (in: hFile=0x230, lpBuffer=0x2726b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2726b60*, lpNumberOfBytesRead=0x5ae8b8*=0x575, lpOverlapped=0x0) returned 1 [0149.247] SetFilePointer (in: hFile=0x230, lDistanceToMove=-373, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.247] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.247] WriteFile (in: hFile=0x230, lpBuffer=0x2726b60*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2726b60*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.247] CloseHandle (hObject=0x230) returned 1 [0149.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xe3 [0149.247] SetErrorMode (uMode=0x1) returned 0x0 [0149.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowkeyfocusenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6545ef7a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6545ef7a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b69c3a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x575)) returned 1 [0149.247] SetErrorMode (uMode=0x0) returned 0x1 [0149.247] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowkeyfocusenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsFollowKeyFocusEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isfollowkeyfocusenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.249] SetErrorMode (uMode=0x1) returned 0x0 [0149.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isinversioncolorenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.250] GetFileType (hFile=0x230) returned 0x1 [0149.250] SetErrorMode (uMode=0x0) returned 0x1 [0149.250] GetFileType (hFile=0x230) returned 0x1 [0149.250] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.251] ReadFile (in: hFile=0x230, lpBuffer=0x272ac28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272ac28*, lpNumberOfBytesRead=0x5ae8b8*=0x566, lpOverlapped=0x0) returned 1 [0149.252] SetFilePointer (in: hFile=0x230, lDistanceToMove=-358, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.252] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.252] WriteFile (in: hFile=0x230, lpBuffer=0x272ac28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272ac28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.252] CloseHandle (hObject=0x230) returned 1 [0149.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xe3 [0149.252] SetErrorMode (uMode=0x1) returned 0x0 [0149.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isinversioncolorenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6567507b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6567507b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b69c3a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x566)) returned 1 [0149.253] SetErrorMode (uMode=0x0) returned 0x1 [0149.253] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isinversioncolorenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Magnifier_IsInversionColorEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_magnifier_isinversioncolorenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", lpFilePart=0x0) returned 0xbe [0149.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", lpFilePart=0x0) returned 0xbe [0149.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", lpFilePart=0x0) returned 0xbe [0149.254] SetErrorMode (uMode=0x1) returned 0x0 [0149.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorcolor.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.256] GetFileType (hFile=0x230) returned 0x1 [0149.256] SetErrorMode (uMode=0x0) returned 0x1 [0149.256] GetFileType (hFile=0x230) returned 0x1 [0149.256] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.256] ReadFile (in: hFile=0x230, lpBuffer=0x272ec40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272ec40*, lpNumberOfBytesRead=0x5ae8b8*=0x514, lpOverlapped=0x0) returned 1 [0149.257] SetFilePointer (in: hFile=0x230, lDistanceToMove=-276, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.257] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.257] WriteFile (in: hFile=0x230, lpBuffer=0x272ec40*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272ec40*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.257] CloseHandle (hObject=0x230) returned 1 [0149.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", lpFilePart=0x0) returned 0xbe [0149.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms", lpFilePart=0x0) returned 0xbe [0149.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xd2 [0149.258] SetErrorMode (uMode=0x1) returned 0x0 [0149.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorcolor.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6570d9f0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6570d9f0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b69c3a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1 [0149.258] SetErrorMode (uMode=0x0) returned 0x1 [0149.258] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorcolor.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorColor.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorcolor.settingcontent-ms.partially.cryptonar")) returned 1 [0149.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", lpFilePart=0x0) returned 0xbd [0149.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", lpFilePart=0x0) returned 0xbd [0149.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", lpFilePart=0x0) returned 0xbd [0149.259] SetErrorMode (uMode=0x1) returned 0x0 [0149.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorsize.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.261] GetFileType (hFile=0x230) returned 0x1 [0149.261] SetErrorMode (uMode=0x0) returned 0x1 [0149.261] GetFileType (hFile=0x230) returned 0x1 [0149.261] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.261] ReadFile (in: hFile=0x230, lpBuffer=0x2732b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2732b90*, lpNumberOfBytesRead=0x5ae8b8*=0x50e, lpOverlapped=0x0) returned 1 [0149.271] SetFilePointer (in: hFile=0x230, lDistanceToMove=-270, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.271] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.271] WriteFile (in: hFile=0x230, lpBuffer=0x2732b90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2732b90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.271] CloseHandle (hObject=0x230) returned 1 [0149.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", lpFilePart=0x0) returned 0xbd [0149.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms", lpFilePart=0x0) returned 0xbd [0149.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xd1 [0149.272] SetErrorMode (uMode=0x1) returned 0x0 [0149.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorsize.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x657cc5ae, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x657cc5ae, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b6c2633, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50e)) returned 1 [0149.272] SetErrorMode (uMode=0x0) returned 0x1 [0149.272] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorsize.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_MouseCursorSize.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_mousecursorsize.settingcontent-ms.partially.cryptonar")) returned 1 [0149.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.274] SetErrorMode (uMode=0x1) returned 0x0 [0149.274] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isautostartenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.275] GetFileType (hFile=0x230) returned 0x1 [0149.275] SetErrorMode (uMode=0x0) returned 0x1 [0149.275] GetFileType (hFile=0x230) returned 0x1 [0149.276] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.276] ReadFile (in: hFile=0x230, lpBuffer=0x2736b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2736b58*, lpNumberOfBytesRead=0x5ae8b8*=0x546, lpOverlapped=0x0) returned 1 [0149.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=-326, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.277] WriteFile (in: hFile=0x230, lpBuffer=0x2736b58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2736b58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.277] CloseHandle (hObject=0x230) returned 1 [0149.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xdd [0149.278] SetErrorMode (uMode=0x1) returned 0x0 [0149.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isautostartenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65864f1a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x65864f1a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b6c2633, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x546)) returned 1 [0149.278] SetErrorMode (uMode=0x0) returned 0x1 [0149.278] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isautostartenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsAutoStartEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isautostartenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.280] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.280] SetErrorMode (uMode=0x1) returned 0x0 [0149.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isduckaudioenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.281] GetFileType (hFile=0x230) returned 0x1 [0149.282] SetErrorMode (uMode=0x0) returned 0x1 [0149.282] GetFileType (hFile=0x230) returned 0x1 [0149.282] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.282] ReadFile (in: hFile=0x230, lpBuffer=0x273abb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273abb0*, lpNumberOfBytesRead=0x5ae8b8*=0x54b, lpOverlapped=0x0) returned 1 [0149.283] SetFilePointer (in: hFile=0x230, lDistanceToMove=-331, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.283] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.283] WriteFile (in: hFile=0x230, lpBuffer=0x273abb0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273abb0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.283] CloseHandle (hObject=0x230) returned 1 [0149.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xdd [0149.284] SetErrorMode (uMode=0x1) returned 0x0 [0149.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isduckaudioenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65923ad8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x65923ad8, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b6e88a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x54b)) returned 1 [0149.284] SetErrorMode (uMode=0x0) returned 0x1 [0149.284] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isduckaudioenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsDuckAudioEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isduckaudioenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcd [0149.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcd [0149.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcd [0149.286] SetErrorMode (uMode=0x1) returned 0x0 [0149.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechocharacterenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.287] GetFileType (hFile=0x230) returned 0x1 [0149.287] SetErrorMode (uMode=0x0) returned 0x1 [0149.287] GetFileType (hFile=0x230) returned 0x1 [0149.287] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.287] ReadFile (in: hFile=0x230, lpBuffer=0x273ec30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273ec30*, lpNumberOfBytesRead=0x5ae8b8*=0x55f, lpOverlapped=0x0) returned 1 [0149.288] SetFilePointer (in: hFile=0x230, lDistanceToMove=-351, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.288] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.288] WriteFile (in: hFile=0x230, lpBuffer=0x273ec30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273ec30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.289] CloseHandle (hObject=0x230) returned 1 [0149.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcd [0149.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcd [0149.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xe1 [0149.289] SetErrorMode (uMode=0x1) returned 0x0 [0149.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechocharacterenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65a7b01e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x65a7b01e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b6e88a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x55f)) returned 1 [0149.289] SetErrorMode (uMode=0x0) returned 0x1 [0149.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechocharacterenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoCharacterEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechocharacterenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc8 [0149.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc8 [0149.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc8 [0149.291] SetErrorMode (uMode=0x1) returned 0x0 [0149.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechowordenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.292] GetFileType (hFile=0x230) returned 0x1 [0149.292] SetErrorMode (uMode=0x0) returned 0x1 [0149.292] GetFileType (hFile=0x230) returned 0x1 [0149.292] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.292] ReadFile (in: hFile=0x230, lpBuffer=0x2742cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2742cb8*, lpNumberOfBytesRead=0x5ae8b8*=0x546, lpOverlapped=0x0) returned 1 [0149.293] SetFilePointer (in: hFile=0x230, lDistanceToMove=-326, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.293] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.293] WriteFile (in: hFile=0x230, lpBuffer=0x2742cb8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2742cb8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.293] CloseHandle (hObject=0x230) returned 1 [0149.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc8 [0149.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc8 [0149.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xdc [0149.294] SetErrorMode (uMode=0x1) returned 0x0 [0149.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechowordenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65bf87ac, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x65bf87ac, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b70eae9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x546)) returned 1 [0149.294] SetErrorMode (uMode=0x0) returned 0x1 [0149.294] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechowordenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEchoWordEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isechowordenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc0 [0149.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc0 [0149.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc0 [0149.296] SetErrorMode (uMode=0x1) returned 0x0 [0149.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.297] GetFileType (hFile=0x230) returned 0x1 [0149.297] SetErrorMode (uMode=0x0) returned 0x1 [0149.297] GetFileType (hFile=0x230) returned 0x1 [0149.297] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.297] ReadFile (in: hFile=0x230, lpBuffer=0x2746cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2746cc0*, lpNumberOfBytesRead=0x5ae8b8*=0x519, lpOverlapped=0x0) returned 1 [0149.299] SetFilePointer (in: hFile=0x230, lDistanceToMove=-281, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.299] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.299] WriteFile (in: hFile=0x230, lpBuffer=0x2746cc0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2746cc0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.299] CloseHandle (hObject=0x230) returned 1 [0149.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc0 [0149.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc0 [0149.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xd4 [0149.299] SetErrorMode (uMode=0x1) returned 0x0 [0149.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a9e5760, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6a9e5760, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b70eae9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x519)) returned 1 [0149.299] SetErrorMode (uMode=0x0) returned 0x1 [0149.299] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcc [0149.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcc [0149.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcc [0149.301] SetErrorMode (uMode=0x1) returned 0x0 [0149.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfastkeyentryenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.302] GetFileType (hFile=0x230) returned 0x1 [0149.302] SetErrorMode (uMode=0x0) returned 0x1 [0149.303] GetFileType (hFile=0x230) returned 0x1 [0149.303] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.303] ReadFile (in: hFile=0x230, lpBuffer=0x274ace0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274ace0*, lpNumberOfBytesRead=0x5ae8b8*=0x55b, lpOverlapped=0x0) returned 1 [0149.325] SetFilePointer (in: hFile=0x230, lDistanceToMove=-347, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.325] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.325] WriteFile (in: hFile=0x230, lpBuffer=0x274ace0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274ace0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.325] CloseHandle (hObject=0x230) returned 1 [0149.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcc [0149.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcc [0149.326] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xe0 [0149.326] SetErrorMode (uMode=0x1) returned 0x0 [0149.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfastkeyentryenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6af1c9ca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6af1c9ca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b75b1af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x55b)) returned 1 [0149.326] SetErrorMode (uMode=0x0) returned 0x1 [0149.326] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfastkeyentryenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFastKeyEntryEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfastkeyentryenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.328] SetErrorMode (uMode=0x1) returned 0x0 [0149.328] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfollowinsertionenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.329] GetFileType (hFile=0x230) returned 0x1 [0149.329] SetErrorMode (uMode=0x0) returned 0x1 [0149.329] GetFileType (hFile=0x230) returned 0x1 [0149.329] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.329] ReadFile (in: hFile=0x230, lpBuffer=0x274eda0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274eda0*, lpNumberOfBytesRead=0x5ae8b8*=0x56a, lpOverlapped=0x0) returned 1 [0149.342] SetFilePointer (in: hFile=0x230, lDistanceToMove=-362, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.342] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.342] WriteFile (in: hFile=0x230, lpBuffer=0x274eda0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274eda0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.342] CloseHandle (hObject=0x230) returned 1 [0149.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xe3 [0149.342] SetErrorMode (uMode=0x1) returned 0x0 [0149.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfollowinsertionenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6afb5333, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6afb5333, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b781312, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x56a)) returned 1 [0149.343] SetErrorMode (uMode=0x0) returned 0x1 [0149.343] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfollowinsertionenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsFollowInsertionEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isfollowinsertionenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.344] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.345] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.345] SetErrorMode (uMode=0x1) returned 0x0 [0149.345] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_ishighlightcursorenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.346] GetFileType (hFile=0x230) returned 0x1 [0149.346] SetErrorMode (uMode=0x0) returned 0x1 [0149.346] GetFileType (hFile=0x230) returned 0x1 [0149.346] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.346] ReadFile (in: hFile=0x230, lpBuffer=0x2752e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2752e68*, lpNumberOfBytesRead=0x5ae8b8*=0x56a, lpOverlapped=0x0) returned 1 [0149.363] SetFilePointer (in: hFile=0x230, lDistanceToMove=-362, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.363] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.363] WriteFile (in: hFile=0x230, lpBuffer=0x2752e68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2752e68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.363] CloseHandle (hObject=0x230) returned 1 [0149.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcf [0149.363] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xe3 [0149.364] SetErrorMode (uMode=0x1) returned 0x0 [0149.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_ishighlightcursorenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b04dcc4, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6b04dcc4, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b7a758a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x56a)) returned 1 [0149.364] SetErrorMode (uMode=0x0) returned 0x1 [0149.364] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_ishighlightcursorenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsHighlightCursorEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_ishighlightcursorenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcd [0149.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcd [0149.366] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcd [0149.366] SetErrorMode (uMode=0x1) returned 0x0 [0149.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isplayaudiocuesenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.367] GetFileType (hFile=0x230) returned 0x1 [0149.367] SetErrorMode (uMode=0x0) returned 0x1 [0149.367] GetFileType (hFile=0x230) returned 0x1 [0149.367] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.367] ReadFile (in: hFile=0x230, lpBuffer=0x2756f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2756f20*, lpNumberOfBytesRead=0x5ae8b8*=0x55f, lpOverlapped=0x0) returned 1 [0149.368] SetFilePointer (in: hFile=0x230, lDistanceToMove=-351, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.369] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.369] WriteFile (in: hFile=0x230, lpBuffer=0x2756f20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2756f20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.369] CloseHandle (hObject=0x230) returned 1 [0149.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcd [0149.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xcd [0149.369] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xe1 [0149.369] SetErrorMode (uMode=0x1) returned 0x0 [0149.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isplayaudiocuesenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0e6607, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6b0e6607, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b7a758a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x55f)) returned 1 [0149.369] SetErrorMode (uMode=0x0) returned 0x1 [0149.369] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isplayaudiocuesenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsPlayAudioCuesEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isplayaudiocuesenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.371] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.371] SetErrorMode (uMode=0x1) returned 0x0 [0149.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isreadhintsenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.373] GetFileType (hFile=0x230) returned 0x1 [0149.373] SetErrorMode (uMode=0x0) returned 0x1 [0149.373] GetFileType (hFile=0x230) returned 0x1 [0149.373] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.373] ReadFile (in: hFile=0x230, lpBuffer=0x275afa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275afa8*, lpNumberOfBytesRead=0x5ae8b8*=0x54b, lpOverlapped=0x0) returned 1 [0149.423] SetFilePointer (in: hFile=0x230, lDistanceToMove=-331, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.423] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.423] WriteFile (in: hFile=0x230, lpBuffer=0x275afa8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275afa8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.423] CloseHandle (hObject=0x230) returned 1 [0149.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms", lpFilePart=0x0) returned 0xc9 [0149.424] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xdd [0149.424] SetErrorMode (uMode=0x1) returned 0x0 [0149.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isreadhintsenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b2fc701, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6b2fc701, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b83ff05, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x54b)) returned 1 [0149.424] SetErrorMode (uMode=0x0) returned 0x1 [0149.424] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isreadhintsenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_IsReadHintsEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_isreadhintsenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", lpFilePart=0x0) returned 0xc2 [0149.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", lpFilePart=0x0) returned 0xc2 [0149.426] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", lpFilePart=0x0) returned 0xc2 [0149.426] SetErrorMode (uMode=0x1) returned 0x0 [0149.426] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechpitch.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.427] GetFileType (hFile=0x230) returned 0x1 [0149.427] SetErrorMode (uMode=0x0) returned 0x1 [0149.427] GetFileType (hFile=0x230) returned 0x1 [0149.427] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.427] ReadFile (in: hFile=0x230, lpBuffer=0x275efb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275efb0*, lpNumberOfBytesRead=0x5ae8b8*=0x528, lpOverlapped=0x0) returned 1 [0149.429] SetFilePointer (in: hFile=0x230, lDistanceToMove=-296, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.429] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.429] WriteFile (in: hFile=0x230, lpBuffer=0x275efb0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275efb0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.429] CloseHandle (hObject=0x230) returned 1 [0149.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", lpFilePart=0x0) returned 0xc2 [0149.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms", lpFilePart=0x0) returned 0xc2 [0149.429] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xd6 [0149.429] SetErrorMode (uMode=0x1) returned 0x0 [0149.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechpitch.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b68ff78, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6b68ff78, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b83ff05, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0149.429] SetErrorMode (uMode=0x0) returned 0x1 [0149.430] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechpitch.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechPitch.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechpitch.settingcontent-ms.partially.cryptonar")) returned 1 [0149.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", lpFilePart=0x0) returned 0xc2 [0149.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", lpFilePart=0x0) returned 0xc2 [0149.431] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", lpFilePart=0x0) returned 0xc2 [0149.431] SetErrorMode (uMode=0x1) returned 0x0 [0149.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechspeed.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.432] GetFileType (hFile=0x230) returned 0x1 [0149.432] SetErrorMode (uMode=0x0) returned 0x1 [0149.432] GetFileType (hFile=0x230) returned 0x1 [0149.432] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.432] ReadFile (in: hFile=0x230, lpBuffer=0x2762f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2762f58*, lpNumberOfBytesRead=0x5ae8b8*=0x528, lpOverlapped=0x0) returned 1 [0149.455] SetFilePointer (in: hFile=0x230, lDistanceToMove=-296, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0149.455] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.455] WriteFile (in: hFile=0x230, lpBuffer=0x2762f58*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2762f58*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0149.455] CloseHandle (hObject=0x230) returned 1 [0149.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", lpFilePart=0x0) returned 0xc2 [0149.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms", lpFilePart=0x0) returned 0xc2 [0149.455] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms.partially.cryptoNar", lpFilePart=0x0) returned 0xd6 [0149.455] SetErrorMode (uMode=0x1) returned 0x0 [0149.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechspeed.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b80d716, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x6b80d716, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b88c420, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0149.455] SetErrorMode (uMode=0x0) returned 0x1 [0149.455] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechspeed.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechSpeed.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechspeed.settingcontent-ms.partially.cryptonar")) returned 1 [0149.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms", lpFilePart=0x0) returned 0xc3 [0149.457] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms", lpFilePart=0x0) returned 0xc3 [0149.457] SetErrorMode (uMode=0x1) returned 0x0 [0149.457] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechvoices.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.458] SetErrorMode (uMode=0x0) returned 0x1 [0149.459] GetFileType (hFile=0x230) returned 0x1 [0149.459] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.462] SetErrorMode (uMode=0x1) returned 0x0 [0149.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechvoices.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc09da191, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc09da191, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b88c420, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52d)) returned 1 [0149.462] SetErrorMode (uMode=0x0) returned 0x1 [0149.462] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechvoices.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_Narrator_SpeechVoices.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_narrator_speechvoices.settingcontent-ms.partially.cryptonar")) returned 1 [0149.463] SetErrorMode (uMode=0x1) returned 0x0 [0149.463] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_NotificationDuration.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_notificationduration.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.464] SetErrorMode (uMode=0x0) returned 0x1 [0149.465] GetFileType (hFile=0x230) returned 0x1 [0149.465] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.467] SetErrorMode (uMode=0x1) returned 0x0 [0149.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_NotificationDuration.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_notificationduration.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0f83b0a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc0f83b0a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b8b2776, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x529)) returned 1 [0149.468] SetErrorMode (uMode=0x0) returned 0x1 [0149.468] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_NotificationDuration.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_notificationduration.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Accessibility_NotificationDuration.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_accessibility_notificationduration.settingcontent-ms.partially.cryptonar")) returned 1 [0149.469] SetErrorMode (uMode=0x1) returned 0x0 [0149.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Autoplay_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_autoplay_isenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.471] SetErrorMode (uMode=0x0) returned 0x1 [0149.471] GetFileType (hFile=0x230) returned 0x1 [0149.471] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.472] SetErrorMode (uMode=0x1) returned 0x0 [0149.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Autoplay_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_autoplay_isenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc46a62e4, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc46a62e4, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b8b2776, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c3)) returned 1 [0149.472] SetErrorMode (uMode=0x0) returned 0x1 [0149.473] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Autoplay_IsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_autoplay_isenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Autoplay_IsEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_autoplay_isenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.474] SetErrorMode (uMode=0x1) returned 0x0 [0149.474] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_OverrideControl.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_overridecontrol.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.475] SetErrorMode (uMode=0x0) returned 0x1 [0149.475] GetFileType (hFile=0x230) returned 0x1 [0149.475] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.477] SetErrorMode (uMode=0x1) returned 0x0 [0149.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_OverrideControl.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_overridecontrol.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc473b110, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc473b110, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b8b2776, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x546)) returned 1 [0149.477] SetErrorMode (uMode=0x0) returned 0x1 [0149.477] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_OverrideControl.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_overridecontrol.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_OverrideControl.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_overridecontrol.settingcontent-ms.partially.cryptonar")) returned 1 [0149.478] SetErrorMode (uMode=0x1) returned 0x0 [0149.478] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink-2.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.479] SetErrorMode (uMode=0x0) returned 0x1 [0149.479] GetFileType (hFile=0x230) returned 0x1 [0149.479] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.481] SetErrorMode (uMode=0x1) returned 0x0 [0149.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink-2.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47d4f05, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc47d4f05, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b8d86b9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x53f)) returned 1 [0149.481] SetErrorMode (uMode=0x0) returned 0x1 [0149.481] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink-2.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink-2.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink-2.settingcontent-ms.partially.cryptonar")) returned 1 [0149.483] SetErrorMode (uMode=0x1) returned 0x0 [0149.483] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.484] SetErrorMode (uMode=0x0) returned 0x1 [0149.484] GetFileType (hFile=0x230) returned 0x1 [0149.484] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.485] SetErrorMode (uMode=0x1) returned 0x0 [0149.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc486f498, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc486f498, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b8d86b9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x537)) returned 1 [0149.485] SetErrorMode (uMode=0x0) returned 0x1 [0149.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_SettingsLink.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_settingslink.settingcontent-ms.partially.cryptonar")) returned 1 [0149.487] SetErrorMode (uMode=0x1) returned 0x0 [0149.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink-2.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.489] SetErrorMode (uMode=0x0) returned 0x1 [0149.489] GetFileType (hFile=0x230) returned 0x1 [0149.489] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.497] SetErrorMode (uMode=0x1) returned 0x0 [0149.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink-2.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4913e28, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc4913e28, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b8d86b9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x54e)) returned 1 [0149.497] SetErrorMode (uMode=0x0) returned 0x1 [0149.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink-2.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink-2.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink-2.settingcontent-ms.partially.cryptonar")) returned 1 [0149.499] SetErrorMode (uMode=0x1) returned 0x0 [0149.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.500] SetErrorMode (uMode=0x0) returned 0x1 [0149.500] GetFileType (hFile=0x230) returned 0x1 [0149.500] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.501] SetErrorMode (uMode=0x1) returned 0x0 [0149.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49f8c46, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc49f8c46, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b8fe99e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x546)) returned 1 [0149.502] SetErrorMode (uMode=0x0) returned 0x1 [0149.502] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_BatterySaver_LandingPage_UsageDetailsLink.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_batterysaver_landingpage_usagedetailslink.settingcontent-ms.partially.cryptonar")) returned 1 [0149.503] SetErrorMode (uMode=0x1) returned 0x0 [0149.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DataSense_ConfigureSetLimitButton.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datasense_configuresetlimitbutton.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.504] SetErrorMode (uMode=0x0) returned 0x1 [0149.504] GetFileType (hFile=0x230) returned 0x1 [0149.504] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.507] SetErrorMode (uMode=0x1) returned 0x0 [0149.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DataSense_ConfigureSetLimitButton.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datasense_configuresetlimitbutton.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4ab77fc, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc4ab77fc, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b8fe99e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0149.507] SetErrorMode (uMode=0x0) returned 0x1 [0149.507] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DataSense_ConfigureSetLimitButton.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datasense_configuresetlimitbutton.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DataSense_ConfigureSetLimitButton.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datasense_configuresetlimitbutton.settingcontent-ms.partially.cryptonar")) returned 1 [0149.508] SetErrorMode (uMode=0x1) returned 0x0 [0149.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_CountryRegion.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_countryregion.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.509] SetErrorMode (uMode=0x0) returned 0x1 [0149.510] GetFileType (hFile=0x230) returned 0x1 [0149.510] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.529] SetErrorMode (uMode=0x1) returned 0x0 [0149.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_CountryRegion.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_countryregion.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9c643, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc4b9c643, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b94af43, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e3)) returned 1 [0149.529] SetErrorMode (uMode=0x0) returned 0x1 [0149.529] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_CountryRegion.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_countryregion.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_CountryRegion.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_countryregion.settingcontent-ms.partially.cryptonar")) returned 1 [0149.531] SetErrorMode (uMode=0x1) returned 0x0 [0149.531] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsAutomaticDSTAdjustEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_isautomaticdstadjustenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.532] SetErrorMode (uMode=0x0) returned 0x1 [0149.532] GetFileType (hFile=0x230) returned 0x1 [0149.532] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.533] SetErrorMode (uMode=0x1) returned 0x0 [0149.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsAutomaticDSTAdjustEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_isautomaticdstadjustenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5335e5f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc5335e5f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b94af43, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51f)) returned 1 [0149.533] SetErrorMode (uMode=0x0) returned 0x1 [0149.533] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsAutomaticDSTAdjustEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_isautomaticdstadjustenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsAutomaticDSTAdjustEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_isautomaticdstadjustenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.535] SetErrorMode (uMode=0x1) returned 0x0 [0149.535] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsTimeSetAutomaticallyEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_istimesetautomaticallyenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.536] SetErrorMode (uMode=0x0) returned 0x1 [0149.536] GetFileType (hFile=0x230) returned 0x1 [0149.536] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.573] SetErrorMode (uMode=0x1) returned 0x0 [0149.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsTimeSetAutomaticallyEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_istimesetautomaticallyenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc55be6a0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc55be6a0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5b99754b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x529)) returned 1 [0149.573] SetErrorMode (uMode=0x0) returned 0x1 [0149.573] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsTimeSetAutomaticallyEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_istimesetautomaticallyenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_IsTimeSetAutomaticallyEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_istimesetautomaticallyenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.575] SetErrorMode (uMode=0x1) returned 0x0 [0149.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_Set.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_set.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.576] SetErrorMode (uMode=0x0) returned 0x1 [0149.576] GetFileType (hFile=0x230) returned 0x1 [0149.576] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.607] SetErrorMode (uMode=0x1) returned 0x0 [0149.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_Set.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_set.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9576333, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc9576333, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ba09bf9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4a7)) returned 1 [0149.607] SetErrorMode (uMode=0x0) returned 0x1 [0149.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_Set.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_set.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_Set.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_set.settingcontent-ms.partially.cryptonar")) returned 1 [0149.609] SetErrorMode (uMode=0x1) returned 0x0 [0149.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_SetFormats.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_setformats.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.610] SetErrorMode (uMode=0x0) returned 0x1 [0149.610] GetFileType (hFile=0x230) returned 0x1 [0149.610] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.624] SetErrorMode (uMode=0x1) returned 0x0 [0149.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_SetFormats.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_setformats.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b2659, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc97b2659, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ba2fdd8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d7)) returned 1 [0149.624] SetErrorMode (uMode=0x0) returned 0x1 [0149.624] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_SetFormats.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_setformats.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_SetFormats.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_setformats.settingcontent-ms.partially.cryptonar")) returned 1 [0149.626] SetErrorMode (uMode=0x1) returned 0x0 [0149.626] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_TimezoneInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_timezoneinfo.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.627] SetErrorMode (uMode=0x0) returned 0x1 [0149.627] GetFileType (hFile=0x230) returned 0x1 [0149.627] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.650] SetErrorMode (uMode=0x1) returned 0x0 [0149.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_TimezoneInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_timezoneinfo.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc984afb0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc984afb0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ba55f0e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0149.650] SetErrorMode (uMode=0x0) returned 0x1 [0149.651] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_TimezoneInfo.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_timezoneinfo.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DateTime_TimezoneInfo.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_datetime_timezoneinfo.settingcontent-ms.partially.cryptonar")) returned 1 [0149.652] SetErrorMode (uMode=0x1) returned 0x0 [0149.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Audio.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_audio.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.654] SetErrorMode (uMode=0x0) returned 0x1 [0149.654] GetFileType (hFile=0x230) returned 0x1 [0149.654] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.675] SetErrorMode (uMode=0x1) returned 0x0 [0149.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Audio.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_audio.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ce98ec, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc9ce98ec, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5baa251d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4bd)) returned 1 [0149.676] SetErrorMode (uMode=0x0) returned 0x1 [0149.676] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Audio.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_audio.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Audio.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_audio.settingcontent-ms.partially.cryptonar")) returned 1 [0149.677] SetErrorMode (uMode=0x1) returned 0x0 [0149.677] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Browser.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_browser.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.679] SetErrorMode (uMode=0x0) returned 0x1 [0149.679] GetFileType (hFile=0x230) returned 0x1 [0149.679] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.703] SetErrorMode (uMode=0x1) returned 0x0 [0149.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Browser.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_browser.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d82262, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xc9d82262, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5baf4a94, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c7)) returned 1 [0149.703] SetErrorMode (uMode=0x0) returned 0x1 [0149.703] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Browser.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_browser.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Browser.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_browser.settingcontent-ms.partially.cryptonar")) returned 1 [0149.705] SetErrorMode (uMode=0x1) returned 0x0 [0149.705] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Calendar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_calendar.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.706] SetErrorMode (uMode=0x0) returned 0x1 [0149.706] GetFileType (hFile=0x230) returned 0x1 [0149.707] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.746] SetErrorMode (uMode=0x1) returned 0x0 [0149.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Calendar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_calendar.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb2d1324, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xcb2d1324, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bb3ae11, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1 [0149.747] SetErrorMode (uMode=0x0) returned 0x1 [0149.747] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Calendar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_calendar.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Calendar.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_calendar.settingcontent-ms.partially.cryptonar")) returned 1 [0149.748] SetErrorMode (uMode=0x1) returned 0x0 [0149.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Email.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_email.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.750] SetErrorMode (uMode=0x0) returned 0x1 [0149.750] GetFileType (hFile=0x230) returned 0x1 [0149.750] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.751] SetErrorMode (uMode=0x1) returned 0x0 [0149.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Email.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_email.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1fdebb, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xcc1fdebb, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bb60fb6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4bd)) returned 1 [0149.751] SetErrorMode (uMode=0x0) returned 0x1 [0149.752] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Email.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_email.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Email.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_email.settingcontent-ms.partially.cryptonar")) returned 1 [0149.753] SetErrorMode (uMode=0x1) returned 0x0 [0149.754] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Map.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_map.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.755] SetErrorMode (uMode=0x0) returned 0x1 [0149.755] GetFileType (hFile=0x230) returned 0x1 [0149.755] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.792] SetErrorMode (uMode=0x1) returned 0x0 [0149.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Map.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_map.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc7a785d, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xcc7a785d, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bbad52e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b3)) returned 1 [0149.792] SetErrorMode (uMode=0x0) returned 0x1 [0149.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Map.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_map.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Map.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_map.settingcontent-ms.partially.cryptonar")) returned 1 [0149.794] SetErrorMode (uMode=0x1) returned 0x0 [0149.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Photos.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_photos.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.795] SetErrorMode (uMode=0x0) returned 0x1 [0149.795] GetFileType (hFile=0x230) returned 0x1 [0149.795] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.810] SetErrorMode (uMode=0x1) returned 0x0 [0149.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Photos.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_photos.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc971616, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xcc971616, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bbf9a2a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c2)) returned 1 [0149.810] SetErrorMode (uMode=0x0) returned 0x1 [0149.810] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Photos.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_photos.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Photos.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_photos.settingcontent-ms.partially.cryptonar")) returned 1 [0149.812] SetErrorMode (uMode=0x1) returned 0x0 [0149.812] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Video.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_video.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.813] SetErrorMode (uMode=0x0) returned 0x1 [0149.813] GetFileType (hFile=0x230) returned 0x1 [0149.813] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.849] SetErrorMode (uMode=0x1) returned 0x0 [0149.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Video.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_video.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfd14076, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xcfd14076, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bc45dd8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4bd)) returned 1 [0149.849] SetErrorMode (uMode=0x0) returned 0x1 [0149.849] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Video.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_video.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_DefaultApps_Video.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_defaultapps_video.settingcontent-ms.partially.cryptonar")) returned 1 [0149.851] SetErrorMode (uMode=0x1) returned 0x0 [0149.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnablePixie.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enablepixie.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.852] SetErrorMode (uMode=0x0) returned 0x1 [0149.852] GetFileType (hFile=0x230) returned 0x1 [0149.852] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.854] SetErrorMode (uMode=0x1) returned 0x0 [0149.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnablePixie.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enablepixie.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfeddcb3, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xcfeddcb3, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bc45dd8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d1)) returned 1 [0149.854] SetErrorMode (uMode=0x0) returned 0x1 [0149.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnablePixie.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enablepixie.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnablePixie.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enablepixie.settingcontent-ms.partially.cryptonar")) returned 1 [0149.855] SetErrorMode (uMode=0x1) returned 0x0 [0149.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnableRipple.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enableripple.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.857] SetErrorMode (uMode=0x0) returned 0x1 [0149.857] GetFileType (hFile=0x230) returned 0x1 [0149.857] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.858] SetErrorMode (uMode=0x1) returned 0x0 [0149.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnableRipple.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enableripple.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcff76630, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xcff76630, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bc6bfaa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d6)) returned 1 [0149.859] SetErrorMode (uMode=0x0) returned 0x1 [0149.859] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnableRipple.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enableripple.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_EnableRipple.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_enableripple.settingcontent-ms.partially.cryptonar")) returned 1 [0149.861] SetErrorMode (uMode=0x1) returned 0x0 [0149.861] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_SetHandedness.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_sethandedness.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.862] SetErrorMode (uMode=0x0) returned 0x1 [0149.862] GetFileType (hFile=0x230) returned 0x1 [0149.862] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.864] SetErrorMode (uMode=0x1) returned 0x0 [0149.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_SetHandedness.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_sethandedness.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd00351d0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd00351d0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bc6bfaa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4db)) returned 1 [0149.864] SetErrorMode (uMode=0x0) returned 0x1 [0149.864] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_SetHandedness.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_sethandedness.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Devices_Pen_SetHandedness.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_devices_pen_sethandedness.settingcontent-ms.partially.cryptonar")) returned 1 [0149.866] SetErrorMode (uMode=0x1) returned 0x0 [0149.866] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Device_Add.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_device_add.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.867] SetErrorMode (uMode=0x0) returned 0x1 [0149.867] GetFileType (hFile=0x230) returned 0x1 [0149.867] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.868] SetErrorMode (uMode=0x1) returned 0x0 [0149.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Device_Add.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_device_add.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd00cdb5f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd00cdb5f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bc6bfaa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4a1)) returned 1 [0149.869] SetErrorMode (uMode=0x0) returned 0x1 [0149.869] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Device_Add.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_device_add.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Device_Add.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_device_add.settingcontent-ms.partially.cryptonar")) returned 1 [0149.875] SetErrorMode (uMode=0x1) returned 0x0 [0149.875] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_AdvancedSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_advancedsettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.880] SetErrorMode (uMode=0x0) returned 0x1 [0149.880] GetFileType (hFile=0x230) returned 0x1 [0149.880] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.882] SetErrorMode (uMode=0x1) returned 0x0 [0149.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_AdvancedSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_advancedsettings.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd018c6ea, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd018c6ea, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bc9424d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ee)) returned 1 [0149.882] SetErrorMode (uMode=0x0) returned 0x1 [0149.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_AdvancedSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_advancedsettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_AdvancedSettings.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_advancedsettings.settingcontent-ms.partially.cryptonar")) returned 1 [0149.884] SetErrorMode (uMode=0x1) returned 0x0 [0149.884] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_DPI_Override.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_dpi_override.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.885] SetErrorMode (uMode=0x0) returned 0x1 [0149.885] GetFileType (hFile=0x230) returned 0x1 [0149.885] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.886] SetErrorMode (uMode=0x1) returned 0x0 [0149.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_DPI_Override.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_dpi_override.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0f8e454, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd0f8e454, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bc9424d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4da)) returned 1 [0149.886] SetErrorMode (uMode=0x0) returned 0x1 [0149.886] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_DPI_Override.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_dpi_override.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_DPI_Override.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_dpi_override.settingcontent-ms.partially.cryptonar")) returned 1 [0149.888] SetErrorMode (uMode=0x1) returned 0x0 [0149.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Duplicate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_duplicate.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.889] SetErrorMode (uMode=0x0) returned 0x1 [0149.889] GetFileType (hFile=0x230) returned 0x1 [0149.889] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.919] SetErrorMode (uMode=0x1) returned 0x0 [0149.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Duplicate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_duplicate.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1131e3e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd1131e3e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bd05c03, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4cb)) returned 1 [0149.920] SetErrorMode (uMode=0x0) returned 0x1 [0149.920] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Duplicate.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_duplicate.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Duplicate.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_duplicate.settingcontent-ms.partially.cryptonar")) returned 1 [0149.922] SetErrorMode (uMode=0x1) returned 0x0 [0149.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IdentifyDetectWireless.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_identifydetectwireless.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.924] SetErrorMode (uMode=0x0) returned 0x1 [0149.925] GetFileType (hFile=0x230) returned 0x1 [0149.925] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.926] SetErrorMode (uMode=0x1) returned 0x0 [0149.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IdentifyDetectWireless.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_identifydetectwireless.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4c807e7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd4c807e7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bd11f98, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50c)) returned 1 [0149.927] SetErrorMode (uMode=0x0) returned 0x1 [0149.927] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IdentifyDetectWireless.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_identifydetectwireless.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IdentifyDetectWireless.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_identifydetectwireless.settingcontent-ms.partially.cryptonar")) returned 1 [0149.930] SetErrorMode (uMode=0x1) returned 0x0 [0149.930] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsAutoBrightnessEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isautobrightnessenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.931] SetErrorMode (uMode=0x0) returned 0x1 [0149.931] GetFileType (hFile=0x230) returned 0x1 [0149.931] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.933] SetErrorMode (uMode=0x1) returned 0x0 [0149.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsAutoBrightnessEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isautobrightnessenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4dd7d33, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd4dd7d33, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bd27cc4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x511)) returned 1 [0149.933] SetErrorMode (uMode=0x0) returned 0x1 [0149.933] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsAutoBrightnessEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isautobrightnessenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsAutoBrightnessEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isautobrightnessenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0149.935] SetErrorMode (uMode=0x1) returned 0x0 [0149.935] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsRotationLocked.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isrotationlocked.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.936] SetErrorMode (uMode=0x0) returned 0x1 [0149.936] GetFileType (hFile=0x230) returned 0x1 [0149.936] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.942] SetErrorMode (uMode=0x1) returned 0x0 [0149.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsRotationLocked.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isrotationlocked.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd66e0aa0, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xd66e0aa0, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bd33fd5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ee)) returned 1 [0149.942] SetErrorMode (uMode=0x0) returned 0x1 [0149.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsRotationLocked.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isrotationlocked.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_IsRotationLocked.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_isrotationlocked.settingcontent-ms.partially.cryptonar")) returned 1 [0149.944] SetErrorMode (uMode=0x1) returned 0x0 [0149.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_MainMonitor.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_mainmonitor.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.945] SetErrorMode (uMode=0x0) returned 0x1 [0149.945] GetFileType (hFile=0x230) returned 0x1 [0149.945] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.947] SetErrorMode (uMode=0x1) returned 0x0 [0149.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_MainMonitor.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_mainmonitor.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda550402, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xda550402, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bd33fd5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d5)) returned 1 [0149.947] SetErrorMode (uMode=0x0) returned 0x1 [0149.947] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_MainMonitor.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_mainmonitor.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_MainMonitor.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_mainmonitor.settingcontent-ms.partially.cryptonar")) returned 1 [0149.949] SetErrorMode (uMode=0x1) returned 0x0 [0149.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Monitors.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_monitors.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.951] SetErrorMode (uMode=0x0) returned 0x1 [0149.951] GetFileType (hFile=0x230) returned 0x1 [0149.951] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.965] SetErrorMode (uMode=0x1) returned 0x0 [0149.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Monitors.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_monitors.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7d8c11, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xda7d8c11, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bd5a452, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c6)) returned 1 [0149.965] SetErrorMode (uMode=0x0) returned 0x1 [0149.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Monitors.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_monitors.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Monitors.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_monitors.settingcontent-ms.partially.cryptonar")) returned 1 [0149.967] SetErrorMode (uMode=0x1) returned 0x0 [0149.967] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Orientation.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_orientation.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.969] SetErrorMode (uMode=0x0) returned 0x1 [0149.969] GetFileType (hFile=0x230) returned 0x1 [0149.969] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.971] SetErrorMode (uMode=0x1) returned 0x0 [0149.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Orientation.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_orientation.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaa61405, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdaa61405, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bd807e2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d5)) returned 1 [0149.971] SetErrorMode (uMode=0x0) returned 0x1 [0149.976] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Orientation.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_orientation.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Display_Orientation.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_display_orientation.settingcontent-ms.partially.cryptonar")) returned 1 [0149.978] SetErrorMode (uMode=0x1) returned 0x0 [0149.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetButtonConfiguration.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setbuttonconfiguration.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.979] SetErrorMode (uMode=0x0) returned 0x1 [0149.979] GetFileType (hFile=0x230) returned 0x1 [0149.979] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0149.981] SetErrorMode (uMode=0x1) returned 0x0 [0149.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetButtonConfiguration.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setbuttonconfiguration.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdab926f4, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdab926f4, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bd807e2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51b)) returned 1 [0149.981] SetErrorMode (uMode=0x0) returned 0x1 [0149.981] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetButtonConfiguration.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setbuttonconfiguration.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetButtonConfiguration.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setbuttonconfiguration.settingcontent-ms.partially.cryptonar")) returned 1 [0149.983] SetErrorMode (uMode=0x1) returned 0x0 [0149.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetScrollPage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setscrollpage.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0149.984] SetErrorMode (uMode=0x0) returned 0x1 [0149.984] GetFileType (hFile=0x230) returned 0x1 [0149.984] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.013] SetErrorMode (uMode=0x1) returned 0x0 [0150.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetScrollPage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setscrollpage.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb115e3a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdb115e3a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bdcccaa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ee)) returned 1 [0150.013] SetErrorMode (uMode=0x0) returned 0x1 [0150.014] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetScrollPage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setscrollpage.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Mouse_SetScrollPage.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_mouse_setscrollpage.settingcontent-ms.partially.cryptonar")) returned 1 [0150.015] SetErrorMode (uMode=0x1) returned 0x0 [0150.015] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_CursorSpeed.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_cursorspeed.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.017] SetErrorMode (uMode=0x0) returned 0x1 [0150.017] GetFileType (hFile=0x230) returned 0x1 [0150.017] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.018] SetErrorMode (uMode=0x1) returned 0x0 [0150.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_CursorSpeed.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_cursorspeed.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9480f9, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdb9480f9, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bdf4cad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e7)) returned 1 [0150.018] SetErrorMode (uMode=0x0) returned 0x1 [0150.019] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_CursorSpeed.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_cursorspeed.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_CursorSpeed.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_cursorspeed.settingcontent-ms.partially.cryptonar")) returned 1 [0150.020] SetErrorMode (uMode=0x1) returned 0x0 [0150.020] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableEdgeGesture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enableedgegesture.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.022] SetErrorMode (uMode=0x0) returned 0x1 [0150.022] GetFileType (hFile=0x230) returned 0x1 [0150.022] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.023] SetErrorMode (uMode=0x1) returned 0x0 [0150.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableEdgeGesture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enableedgegesture.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde91d420, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xde91d420, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bdf4cad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x505)) returned 1 [0150.023] SetErrorMode (uMode=0x0) returned 0x1 [0150.024] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableEdgeGesture.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enableedgegesture.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableEdgeGesture.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enableedgegesture.settingcontent-ms.partially.cryptonar")) returned 1 [0150.025] SetErrorMode (uMode=0x1) returned 0x0 [0150.025] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableTouchPad.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enabletouchpad.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.026] SetErrorMode (uMode=0x0) returned 0x1 [0150.026] GetFileType (hFile=0x230) returned 0x1 [0150.026] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.028] SetErrorMode (uMode=0x1) returned 0x0 [0150.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableTouchPad.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enabletouchpad.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc563ff, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdfc563ff, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bdf4cad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f6)) returned 1 [0150.028] SetErrorMode (uMode=0x0) returned 0x1 [0150.028] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableTouchPad.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enabletouchpad.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableTouchPad.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enabletouchpad.settingcontent-ms.partially.cryptonar")) returned 1 [0150.030] SetErrorMode (uMode=0x1) returned 0x0 [0150.030] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedback.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedback.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.031] SetErrorMode (uMode=0x0) returned 0x1 [0150.031] GetFileType (hFile=0x230) returned 0x1 [0150.031] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.033] SetErrorMode (uMode=0x1) returned 0x0 [0150.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedback.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedback.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdff04e48, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdff04e48, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5be19295, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x512)) returned 1 [0150.034] SetErrorMode (uMode=0x0) returned 0x1 [0150.034] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedback.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedback.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedback.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedback.settingcontent-ms.partially.cryptonar")) returned 1 [0150.037] SetErrorMode (uMode=0x1) returned 0x0 [0150.037] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedbackPM.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedbackpm.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.038] SetErrorMode (uMode=0x0) returned 0x1 [0150.038] GetFileType (hFile=0x230) returned 0x1 [0150.038] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.040] SetErrorMode (uMode=0x1) returned 0x0 [0150.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedbackPM.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedbackpm.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdff9d7ae, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xdff9d7ae, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5be19295, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51c)) returned 1 [0150.040] SetErrorMode (uMode=0x0) returned 0x1 [0150.040] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedbackPM.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedbackpm.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_EnableVisualFeedbackPM.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_enablevisualfeedbackpm.settingcontent-ms.partially.cryptonar")) returned 1 [0150.042] SetErrorMode (uMode=0x1) returned 0x0 [0150.042] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_FourFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_fourfingertapenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.043] SetErrorMode (uMode=0x0) returned 0x1 [0150.043] GetFileType (hFile=0x230) returned 0x1 [0150.043] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.055] SetErrorMode (uMode=0x1) returned 0x0 [0150.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_FourFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_fourfingertapenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe005c36b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe005c36b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5be4c898, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1 [0150.055] SetErrorMode (uMode=0x0) returned 0x1 [0150.055] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_FourFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_fourfingertapenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_FourFingerTapEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_fourfingertapenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.057] SetErrorMode (uMode=0x1) returned 0x0 [0150.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_LeaveOnWithMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_leaveonwithmouse.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.058] SetErrorMode (uMode=0x0) returned 0x1 [0150.058] GetFileType (hFile=0x230) returned 0x1 [0150.058] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.060] SetErrorMode (uMode=0x1) returned 0x0 [0150.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_LeaveOnWithMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_leaveonwithmouse.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe00f4cde, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe00f4cde, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5be4c898, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0150.060] SetErrorMode (uMode=0x0) returned 0x1 [0150.060] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_LeaveOnWithMouse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_leaveonwithmouse.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_LeaveOnWithMouse.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_leaveonwithmouse.settingcontent-ms.partially.cryptonar")) returned 1 [0150.061] SetErrorMode (uMode=0x1) returned 0x0 [0150.061] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_PanEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_panenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.062] SetErrorMode (uMode=0x0) returned 0x1 [0150.062] GetFileType (hFile=0x230) returned 0x1 [0150.062] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.079] SetErrorMode (uMode=0x1) returned 0x0 [0150.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_PanEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_panenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe018d664, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe018d664, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5be8b8ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e2)) returned 1 [0150.080] SetErrorMode (uMode=0x0) returned 0x1 [0150.080] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_PanEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_panenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_PanEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_panenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.081] SetErrorMode (uMode=0x1) returned 0x0 [0150.081] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_RightClickZoneEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_rightclickzoneenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.082] SetErrorMode (uMode=0x0) returned 0x1 [0150.082] GetFileType (hFile=0x230) returned 0x1 [0150.082] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.084] SetErrorMode (uMode=0x1) returned 0x0 [0150.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_RightClickZoneEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_rightclickzoneenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0225fca, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe0225fca, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5be8b8ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x519)) returned 1 [0150.084] SetErrorMode (uMode=0x0) returned 0x1 [0150.084] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_RightClickZoneEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_rightclickzoneenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_RightClickZoneEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_rightclickzoneenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.085] SetErrorMode (uMode=0x1) returned 0x0 [0150.085] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetActivationTimeout.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setactivationtimeout.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.086] SetErrorMode (uMode=0x0) returned 0x1 [0150.086] GetFileType (hFile=0x230) returned 0x1 [0150.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.087] SetErrorMode (uMode=0x1) returned 0x0 [0150.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetActivationTimeout.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setactivationtimeout.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe02beaa6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe02beaa6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5be8b8ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x514)) returned 1 [0150.087] SetErrorMode (uMode=0x0) returned 0x1 [0150.088] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetActivationTimeout.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setactivationtimeout.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetActivationTimeout.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setactivationtimeout.settingcontent-ms.partially.cryptonar")) returned 1 [0150.089] SetErrorMode (uMode=0x1) returned 0x0 [0150.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetScrollDirection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setscrolldirection.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.090] SetErrorMode (uMode=0x0) returned 0x1 [0150.090] GetFileType (hFile=0x230) returned 0x1 [0150.090] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.100] SetErrorMode (uMode=0x1) returned 0x0 [0150.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetScrollDirection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setscrolldirection.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe075d30c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe075d30c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5beb1988, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50a)) returned 1 [0150.101] SetErrorMode (uMode=0x0) returned 0x1 [0150.101] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetScrollDirection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setscrolldirection.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_SetScrollDirection.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_setscrolldirection.settingcontent-ms.partially.cryptonar")) returned 1 [0150.102] SetErrorMode (uMode=0x1) returned 0x0 [0150.102] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapAndDrag.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapanddrag.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.103] SetErrorMode (uMode=0x0) returned 0x1 [0150.103] GetFileType (hFile=0x230) returned 0x1 [0150.103] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.104] SetErrorMode (uMode=0x1) returned 0x0 [0150.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapAndDrag.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapanddrag.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0baf6e6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe0baf6e6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5beb1988, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e2)) returned 1 [0150.104] SetErrorMode (uMode=0x0) returned 0x1 [0150.105] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapAndDrag.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapanddrag.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapAndDrag.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapanddrag.settingcontent-ms.partially.cryptonar")) returned 1 [0150.106] SetErrorMode (uMode=0x1) returned 0x0 [0150.106] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapsenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.107] SetErrorMode (uMode=0x0) returned 0x1 [0150.107] GetFileType (hFile=0x230) returned 0x1 [0150.107] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.108] SetErrorMode (uMode=0x1) returned 0x0 [0150.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapsenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1538d8e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe1538d8e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5beb1988, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e7)) returned 1 [0150.108] SetErrorMode (uMode=0x0) returned 0x1 [0150.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapsEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapsenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TapsEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_tapsenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.110] SetErrorMode (uMode=0x1) returned 0x0 [0150.110] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerSlideEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingerslideenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.111] SetErrorMode (uMode=0x0) returned 0x1 [0150.111] GetFileType (hFile=0x230) returned 0x1 [0150.111] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.121] SetErrorMode (uMode=0x1) returned 0x0 [0150.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerSlideEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingerslideenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1fcd498, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe1fcd498, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bed7c02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x523)) returned 1 [0150.121] SetErrorMode (uMode=0x0) returned 0x1 [0150.121] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerSlideEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingerslideenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerSlideEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingerslideenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.123] SetErrorMode (uMode=0x1) returned 0x0 [0150.123] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingertapenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.124] SetErrorMode (uMode=0x0) returned 0x1 [0150.124] GetFileType (hFile=0x230) returned 0x1 [0150.124] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.142] SetErrorMode (uMode=0x1) returned 0x0 [0150.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingertapenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe23ad200, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe23ad200, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bf24244, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x519)) returned 1 [0150.142] SetErrorMode (uMode=0x0) returned 0x1 [0150.142] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingertapenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ThreeFingerTapEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_threefingertapenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.144] SetErrorMode (uMode=0x1) returned 0x0 [0150.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TwoFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_twofingertapenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.145] SetErrorMode (uMode=0x0) returned 0x1 [0150.145] GetFileType (hFile=0x230) returned 0x1 [0150.145] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.163] SetErrorMode (uMode=0x1) returned 0x0 [0150.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TwoFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_twofingertapenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2b6cdf3, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe2b6cdf3, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bf4a752, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50f)) returned 1 [0150.163] SetErrorMode (uMode=0x0) returned 0x1 [0150.164] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TwoFingerTapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_twofingertapenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_TwoFingerTapEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_twofingertapenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.166] SetErrorMode (uMode=0x1) returned 0x0 [0150.166] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ZoomEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_zoomenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.169] SetErrorMode (uMode=0x0) returned 0x1 [0150.169] GetFileType (hFile=0x230) returned 0x1 [0150.169] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.188] SetErrorMode (uMode=0x1) returned 0x0 [0150.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ZoomEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_zoomenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2d36a58, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe2d36a58, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bf9688a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e7)) returned 1 [0150.189] SetErrorMode (uMode=0x0) returned 0x1 [0150.189] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ZoomEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_zoomenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Input_Touch_ZoomEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_input_touch_zoomenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.192] SetErrorMode (uMode=0x1) returned 0x0 [0150.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoCorrectionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautocorrectionenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.194] SetErrorMode (uMode=0x0) returned 0x1 [0150.194] GetFileType (hFile=0x230) returned 0x1 [0150.194] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.196] SetErrorMode (uMode=0x1) returned 0x0 [0150.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoCorrectionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautocorrectionenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e67d00, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe2e67d00, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bf9688a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x515)) returned 1 [0150.196] SetErrorMode (uMode=0x0) returned 0x1 [0150.196] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoCorrectionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautocorrectionenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoCorrectionEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautocorrectionenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.198] SetErrorMode (uMode=0x1) returned 0x0 [0150.198] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoShiftEngageEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautoshiftengageenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.200] SetErrorMode (uMode=0x0) returned 0x1 [0150.200] GetFileType (hFile=0x230) returned 0x1 [0150.200] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.202] SetErrorMode (uMode=0x1) returned 0x0 [0150.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoShiftEngageEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautoshiftengageenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe300b653, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe300b653, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bf9688a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51d)) returned 1 [0150.202] SetErrorMode (uMode=0x0) returned 0x1 [0150.203] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoShiftEngageEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautoshiftengageenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsAutoShiftEngageEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isautoshiftengageenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.205] SetErrorMode (uMode=0x1) returned 0x0 [0150.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsCompatibilityKeyboardEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iscompatibilitykeyboardenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.207] SetErrorMode (uMode=0x0) returned 0x1 [0150.207] GetFileType (hFile=0x230) returned 0x1 [0150.207] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.209] SetErrorMode (uMode=0x1) returned 0x0 [0150.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsCompatibilityKeyboardEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iscompatibilitykeyboardenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe33c5148, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe33c5148, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bfc07d5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x53b)) returned 1 [0150.209] SetErrorMode (uMode=0x0) returned 0x1 [0150.209] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsCompatibilityKeyboardEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iscompatibilitykeyboardenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsCompatibilityKeyboardEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iscompatibilitykeyboardenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.211] SetErrorMode (uMode=0x1) returned 0x0 [0150.211] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsDoubleTapSpaceEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isdoubletapspaceenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.213] SetErrorMode (uMode=0x0) returned 0x1 [0150.213] GetFileType (hFile=0x230) returned 0x1 [0150.213] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.231] SetErrorMode (uMode=0x1) returned 0x0 [0150.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsDoubleTapSpaceEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isdoubletapspaceenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe36276bd, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe36276bd, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5bfe2f0d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x519)) returned 1 [0150.232] SetErrorMode (uMode=0x0) returned 0x1 [0150.232] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsDoubleTapSpaceEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isdoubletapspaceenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsDoubleTapSpaceEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isdoubletapspaceenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.234] SetErrorMode (uMode=0x1) returned 0x0 [0150.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsKeyAudioFeedbackEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iskeyaudiofeedbackenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.236] SetErrorMode (uMode=0x0) returned 0x1 [0150.236] GetFileType (hFile=0x230) returned 0x1 [0150.236] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.238] SetErrorMode (uMode=0x1) returned 0x0 [0150.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsKeyAudioFeedbackEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iskeyaudiofeedbackenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3b5e86e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe3b5e86e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c00b119, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x522)) returned 1 [0150.238] SetErrorMode (uMode=0x0) returned 0x1 [0150.238] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsKeyAudioFeedbackEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iskeyaudiofeedbackenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsKeyAudioFeedbackEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_iskeyaudiofeedbackenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.240] SetErrorMode (uMode=0x1) returned 0x0 [0150.240] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsPredictionSpaceInsertionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_ispredictionspaceinsertionenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.241] SetErrorMode (uMode=0x0) returned 0x1 [0150.241] GetFileType (hFile=0x230) returned 0x1 [0150.241] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.243] SetErrorMode (uMode=0x1) returned 0x0 [0150.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsPredictionSpaceInsertionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_ispredictionspaceinsertionenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3e0d33d, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe3e0d33d, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c00b119, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x54b)) returned 1 [0150.243] SetErrorMode (uMode=0x0) returned 0x1 [0150.243] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsPredictionSpaceInsertionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_ispredictionspaceinsertionenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsPredictionSpaceInsertionEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_ispredictionspaceinsertionenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.245] SetErrorMode (uMode=0x1) returned 0x0 [0150.245] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsShiftLockEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isshiftlockenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.246] SetErrorMode (uMode=0x0) returned 0x1 [0150.246] GetFileType (hFile=0x230) returned 0x1 [0150.246] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.272] SetErrorMode (uMode=0x1) returned 0x0 [0150.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsShiftLockEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isshiftlockenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe42d1e94, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe42d1e94, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c0555a3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0150.272] SetErrorMode (uMode=0x0) returned 0x1 [0150.273] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsShiftLockEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isshiftlockenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsShiftLockEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isshiftlockenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.274] SetErrorMode (uMode=0x1) returned 0x0 [0150.275] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsSpellcheckingEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isspellcheckingenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.276] SetErrorMode (uMode=0x0) returned 0x1 [0150.276] GetFileType (hFile=0x230) returned 0x1 [0150.276] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.285] SetErrorMode (uMode=0x1) returned 0x0 [0150.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsSpellcheckingEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isspellcheckingenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46192a2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe46192a2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c07b695, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0150.285] SetErrorMode (uMode=0x0) returned 0x1 [0150.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsSpellcheckingEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isspellcheckingenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsSpellcheckingEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_isspellcheckingenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.287] SetErrorMode (uMode=0x1) returned 0x0 [0150.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsTextPredictionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_istextpredictionenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.288] SetErrorMode (uMode=0x0) returned 0x1 [0150.288] GetFileType (hFile=0x230) returned 0x1 [0150.288] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.289] SetErrorMode (uMode=0x1) returned 0x0 [0150.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsTextPredictionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_istextpredictionenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e7160d, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe4e7160d, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c07b695, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x519)) returned 1 [0150.289] SetErrorMode (uMode=0x0) returned 0x1 [0150.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsTextPredictionEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_istextpredictionenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Keyboard_IsTextPredictionEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_keyboard_istextpredictionenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.290] SetErrorMode (uMode=0x1) returned 0x0 [0150.291] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Add_Profile.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_add_profile.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.292] SetErrorMode (uMode=0x0) returned 0x1 [0150.292] GetFileType (hFile=0x230) returned 0x1 [0150.292] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.293] SetErrorMode (uMode=0x1) returned 0x0 [0150.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Add_Profile.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_add_profile.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe548d6a6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe548d6a6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c07b695, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d9)) returned 1 [0150.293] SetErrorMode (uMode=0x0) returned 0x1 [0150.293] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Add_Profile.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_add_profile.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Add_Profile.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_add_profile.settingcontent-ms.partially.cryptonar")) returned 1 [0150.295] SetErrorMode (uMode=0x1) returned 0x0 [0150.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Installed_Profiles_Collection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_installed_profiles_collection.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.297] SetErrorMode (uMode=0x0) returned 0x1 [0150.297] GetFileType (hFile=0x230) returned 0x1 [0150.297] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.298] SetErrorMode (uMode=0x1) returned 0x0 [0150.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Installed_Profiles_Collection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_installed_profiles_collection.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5893670, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe5893670, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c0a18b9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x533)) returned 1 [0150.299] SetErrorMode (uMode=0x0) returned 0x1 [0150.299] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Installed_Profiles_Collection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_installed_profiles_collection.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Installed_Profiles_Collection.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_installed_profiles_collection.settingcontent-ms.partially.cryptonar")) returned 1 [0150.301] SetErrorMode (uMode=0x1) returned 0x0 [0150.301] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Personal_Data_Control.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_personal_data_control.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.302] SetErrorMode (uMode=0x0) returned 0x1 [0150.302] GetFileType (hFile=0x230) returned 0x1 [0150.302] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.345] SetErrorMode (uMode=0x1) returned 0x0 [0150.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Personal_Data_Control.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_personal_data_control.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5bdaabe, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe5bdaabe, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c114154, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4fc)) returned 1 [0150.346] SetErrorMode (uMode=0x0) returned 0x1 [0150.346] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Personal_Data_Control.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_personal_data_control.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Personal_Data_Control.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_personal_data_control.settingcontent-ms.partially.cryptonar")) returned 1 [0150.349] SetErrorMode (uMode=0x1) returned 0x0 [0150.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Web_Content_Control.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_web_content_control.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.351] SetErrorMode (uMode=0x0) returned 0x1 [0150.351] GetFileType (hFile=0x230) returned 0x1 [0150.351] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.352] SetErrorMode (uMode=0x1) returned 0x0 [0150.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Web_Content_Control.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_web_content_control.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe67a0420, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe67a0420, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c114154, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f2)) returned 1 [0150.353] SetErrorMode (uMode=0x0) returned 0x1 [0150.353] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Web_Content_Control.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_web_content_control.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Language_Web_Content_Control.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_language_web_content_control.settingcontent-ms.partially.cryptonar")) returned 1 [0150.354] SetErrorMode (uMode=0x1) returned 0x0 [0150.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_DeleteAll.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_deleteall.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.356] SetErrorMode (uMode=0x0) returned 0x1 [0150.356] GetFileType (hFile=0x230) returned 0x1 [0150.356] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.368] SetErrorMode (uMode=0x1) returned 0x0 [0150.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_DeleteAll.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_deleteall.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6bf2872, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe6bf2872, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c13a200, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4a8)) returned 1 [0150.369] SetErrorMode (uMode=0x0) returned 0x1 [0150.369] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_DeleteAll.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_deleteall.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_DeleteAll.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_deleteall.settingcontent-ms.partially.cryptonar")) returned 1 [0150.370] SetErrorMode (uMode=0x1) returned 0x0 [0150.370] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_Download_Add_Package.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_download_add_package.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.372] SetErrorMode (uMode=0x0) returned 0x1 [0150.372] GetFileType (hFile=0x230) returned 0x1 [0150.372] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.373] SetErrorMode (uMode=0x1) returned 0x0 [0150.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_Download_Add_Package.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_download_add_package.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe75a21b2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe75a21b2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c13a200, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4df)) returned 1 [0150.373] SetErrorMode (uMode=0x0) returned 0x1 [0150.373] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_Download_Add_Package.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_download_add_package.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Maps_Download_Add_Package.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_maps_download_add_package.settingcontent-ms.partially.cryptonar")) returned 1 [0150.374] SetErrorMode (uMode=0x1) returned 0x0 [0150.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_ResetYourPC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_resetyourpc.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.375] SetErrorMode (uMode=0x0) returned 0x1 [0150.375] GetFileType (hFile=0x230) returned 0x1 [0150.375] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.377] SetErrorMode (uMode=0x1) returned 0x0 [0150.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_ResetYourPC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_resetyourpc.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe771fadb, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe771fadb, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c1605b3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c4)) returned 1 [0150.377] SetErrorMode (uMode=0x0) returned 0x1 [0150.377] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_ResetYourPC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_resetyourpc.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_ResetYourPC.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_resetyourpc.settingcontent-ms.partially.cryptonar")) returned 1 [0150.378] SetErrorMode (uMode=0x1) returned 0x0 [0150.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_PreviewBuild.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_previewbuild.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.379] SetErrorMode (uMode=0x0) returned 0x1 [0150.379] GetFileType (hFile=0x230) returned 0x1 [0150.379] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.399] SetErrorMode (uMode=0x1) returned 0x0 [0150.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_PreviewBuild.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_previewbuild.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7935ace, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7935ace, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c18686d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x523)) returned 1 [0150.399] SetErrorMode (uMode=0x0) returned 0x1 [0150.399] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_PreviewBuild.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_previewbuild.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_PreviewBuild.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_previewbuild.settingcontent-ms.partially.cryptonar")) returned 1 [0150.401] SetErrorMode (uMode=0x1) returned 0x0 [0150.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows7.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows7.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.402] SetErrorMode (uMode=0x0) returned 0x1 [0150.402] GetFileType (hFile=0x230) returned 0x1 [0150.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.405] SetErrorMode (uMode=0x1) returned 0x0 [0150.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows7.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows7.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7e6cc9e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe7e6cc9e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c18686d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50b)) returned 1 [0150.405] SetErrorMode (uMode=0x0) returned 0x1 [0150.405] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows7.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows7.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows7.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows7.settingcontent-ms.partially.cryptonar")) returned 1 [0150.407] SetErrorMode (uMode=0x1) returned 0x0 [0150.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.409] SetErrorMode (uMode=0x0) returned 0x1 [0150.409] GetFileType (hFile=0x230) returned 0x1 [0150.409] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.412] SetErrorMode (uMode=0x1) returned 0x0 [0150.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe81419df, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe81419df, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c1adee3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50b)) returned 1 [0150.412] SetErrorMode (uMode=0x0) returned 0x1 [0150.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8.settingcontent-ms.partially.cryptonar")) returned 1 [0150.414] SetErrorMode (uMode=0x1) returned 0x0 [0150.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8_1.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.416] SetErrorMode (uMode=0x0) returned 0x1 [0150.416] GetFileType (hFile=0x230) returned 0x1 [0150.416] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.434] SetErrorMode (uMode=0x1) returned 0x0 [0150.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8_1.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe852182c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe852182c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c1d2bec, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x517)) returned 1 [0150.434] SetErrorMode (uMode=0x0) returned 0x1 [0150.434] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8_1.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Misc_RollbackYourPC_Windows8_1.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_misc_rollbackyourpc_windows8_1.settingcontent-ms.partially.cryptonar")) returned 1 [0150.436] SetErrorMode (uMode=0x1) returned 0x0 [0150.436] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_AeroSnapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_aerosnapenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.438] SetErrorMode (uMode=0x0) returned 0x1 [0150.438] GetFileType (hFile=0x230) returned 0x1 [0150.438] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.440] SetErrorMode (uMode=0x1) returned 0x0 [0150.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_AeroSnapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_aerosnapenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8678d4f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe8678d4f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c1f98da, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f9)) returned 1 [0150.440] SetErrorMode (uMode=0x0) returned 0x1 [0150.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_AeroSnapEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_aerosnapenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_AeroSnapEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_aerosnapenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.443] SetErrorMode (uMode=0x1) returned 0x0 [0150.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapAssistEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapassistenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.445] SetErrorMode (uMode=0x0) returned 0x1 [0150.445] GetFileType (hFile=0x230) returned 0x1 [0150.445] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.472] SetErrorMode (uMode=0x1) returned 0x0 [0150.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapAssistEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapassistenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8b89e0a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe8b89e0a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c245370, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x503)) returned 1 [0150.473] SetErrorMode (uMode=0x0) returned 0x1 [0150.473] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapAssistEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapassistenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapAssistEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapassistenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.475] SetErrorMode (uMode=0x1) returned 0x0 [0150.475] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapFillEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapfillenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.476] SetErrorMode (uMode=0x0) returned 0x1 [0150.476] GetFileType (hFile=0x230) returned 0x1 [0150.477] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.478] SetErrorMode (uMode=0x1) returned 0x0 [0150.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapFillEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapfillenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90e70ba, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe90e70ba, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c245370, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f9)) returned 1 [0150.478] SetErrorMode (uMode=0x0) returned 0x1 [0150.479] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapFillEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapfillenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MultiTasking_SnapFillEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_multitasking_snapfillenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.481] SetErrorMode (uMode=0x1) returned 0x0 [0150.481] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_AdvancedSettingsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_advancedsettingslink.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.483] SetErrorMode (uMode=0x0) returned 0x1 [0150.483] GetFileType (hFile=0x230) returned 0x1 [0150.483] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.485] SetErrorMode (uMode=0x1) returned 0x0 [0150.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_AdvancedSettingsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_advancedsettingslink.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe923e77b, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe923e77b, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c245370, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0150.485] SetErrorMode (uMode=0x0) returned 0x1 [0150.485] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_AdvancedSettingsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_advancedsettingslink.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_AdvancedSettingsLink.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_advancedsettingslink.settingcontent-ms.partially.cryptonar")) returned 1 [0150.487] SetErrorMode (uMode=0x1) returned 0x0 [0150.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_UpdateActionButton.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_updateactionbutton.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.489] SetErrorMode (uMode=0x0) returned 0x1 [0150.489] GetFileType (hFile=0x230) returned 0x1 [0150.489] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.491] SetErrorMode (uMode=0x1) returned 0x0 [0150.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_UpdateActionButton.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_updateactionbutton.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe955f804, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe955f804, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c26b467, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f6)) returned 1 [0150.491] SetErrorMode (uMode=0x0) returned 0x1 [0150.491] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_UpdateActionButton.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_updateactionbutton.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_MusUpdate_UpdateActionButton.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_musupdate_updateactionbutton.settingcontent-ms.partially.cryptonar")) returned 1 [0150.493] SetErrorMode (uMode=0x1) returned 0x0 [0150.493] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_PinnedQuickActions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_pinnedquickactions.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.495] SetErrorMode (uMode=0x0) returned 0x1 [0150.495] GetFileType (hFile=0x230) returned 0x1 [0150.495] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.496] SetErrorMode (uMode=0x1) returned 0x0 [0150.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_PinnedQuickActions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_pinnedquickactions.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9b7b821, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xe9b7b821, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c26b467, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50e)) returned 1 [0150.497] SetErrorMode (uMode=0x0) returned 0x1 [0150.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_PinnedQuickActions.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_pinnedquickactions.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_PinnedQuickActions.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_pinnedquickactions.settingcontent-ms.partially.cryptonar")) returned 1 [0150.499] SetErrorMode (uMode=0x1) returned 0x0 [0150.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SelectIconsToAppearOnTaskbar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_selecticonstoappearontaskbar.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.501] SetErrorMode (uMode=0x0) returned 0x1 [0150.501] GetFileType (hFile=0x230) returned 0x1 [0150.501] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.527] SetErrorMode (uMode=0x1) returned 0x0 [0150.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SelectIconsToAppearOnTaskbar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_selecticonstoappearontaskbar.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaf00c9f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeaf00c9f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c2b7aae, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0150.527] SetErrorMode (uMode=0x0) returned 0x1 [0150.527] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SelectIconsToAppearOnTaskbar.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_selecticonstoappearontaskbar.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SelectIconsToAppearOnTaskbar.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_selecticonstoappearontaskbar.settingcontent-ms.partially.cryptonar")) returned 1 [0150.529] SetErrorMode (uMode=0x1) returned 0x0 [0150.530] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_ShowAppNotifications.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_showappnotifications.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.531] SetErrorMode (uMode=0x0) returned 0x1 [0150.531] GetFileType (hFile=0x230) returned 0x1 [0150.531] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.559] SetErrorMode (uMode=0x1) returned 0x0 [0150.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_ShowAppNotifications.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_showappnotifications.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb5db902, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeb5db902, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c303f4e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0150.559] SetErrorMode (uMode=0x0) returned 0x1 [0150.560] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_ShowAppNotifications.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_showappnotifications.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_ShowAppNotifications.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_showappnotifications.settingcontent-ms.partially.cryptonar")) returned 1 [0150.561] SetErrorMode (uMode=0x1) returned 0x0 [0150.562] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SoftLandingEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_softlandingenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.563] SetErrorMode (uMode=0x0) returned 0x1 [0150.564] GetFileType (hFile=0x230) returned 0x1 [0150.564] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.574] SetErrorMode (uMode=0x1) returned 0x0 [0150.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SoftLandingEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_softlandingenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec239c90, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xec239c90, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c32abd4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x516)) returned 1 [0150.574] SetErrorMode (uMode=0x0) returned 0x1 [0150.574] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SoftLandingEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_softlandingenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SoftLandingEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_softlandingenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.576] SetErrorMode (uMode=0x1) returned 0x0 [0150.576] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SystemIcons.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_systemicons.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.577] SetErrorMode (uMode=0x0) returned 0x1 [0150.577] GetFileType (hFile=0x230) returned 0x1 [0150.577] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.579] SetErrorMode (uMode=0x1) returned 0x0 [0150.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SystemIcons.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_systemicons.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3a0480, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xed3a0480, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c3501d7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4eb)) returned 1 [0150.579] SetErrorMode (uMode=0x0) returned 0x1 [0150.579] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SystemIcons.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_systemicons.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Notifications_SystemIcons.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_notifications_systemicons.settingcontent-ms.partially.cryptonar")) returned 1 [0150.581] SetErrorMode (uMode=0x1) returned 0x0 [0150.581] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ActivateWindowsLicense.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_activatewindowslicense.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.582] SetErrorMode (uMode=0x0) returned 0x1 [0150.582] GetFileType (hFile=0x230) returned 0x1 [0150.582] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.584] SetErrorMode (uMode=0x1) returned 0x0 [0150.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ActivateWindowsLicense.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_activatewindowslicense.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedb858cf, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xedb858cf, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c3501d7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x507)) returned 1 [0150.584] SetErrorMode (uMode=0x0) returned 0x1 [0150.584] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ActivateWindowsLicense.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_activatewindowslicense.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ActivateWindowsLicense.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_activatewindowslicense.settingcontent-ms.partially.cryptonar")) returned 1 [0150.586] SetErrorMode (uMode=0x1) returned 0x0 [0150.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_GetPCName.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_getpcname.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.588] SetErrorMode (uMode=0x0) returned 0x1 [0150.588] GetFileType (hFile=0x230) returned 0x1 [0150.588] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.589] SetErrorMode (uMode=0x1) returned 0x0 [0150.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_GetPCName.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_getpcname.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb48b68, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeeb48b68, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c3501d7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c6)) returned 1 [0150.590] SetErrorMode (uMode=0x0) returned 0x1 [0150.590] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_GetPCName.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_getpcname.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_GetPCName.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_getpcname.settingcontent-ms.partially.cryptonar")) returned 1 [0150.592] SetErrorMode (uMode=0x1) returned 0x0 [0150.592] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_InstalledRamStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_installedramstatus.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.595] SetErrorMode (uMode=0x0) returned 0x1 [0150.595] GetFileType (hFile=0x230) returned 0x1 [0150.595] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.607] SetErrorMode (uMode=0x1) returned 0x0 [0150.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_InstalledRamStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_installedramstatus.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeef1113e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xeef1113e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c3783c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0150.607] SetErrorMode (uMode=0x0) returned 0x1 [0150.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_InstalledRamStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_installedramstatus.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_InstalledRamStatus.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_installedramstatus.settingcontent-ms.partially.cryptonar")) returned 1 [0150.609] SetErrorMode (uMode=0x1) returned 0x0 [0150.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinCloudDomain.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joinclouddomain.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.611] SetErrorMode (uMode=0x0) returned 0x1 [0150.611] GetFileType (hFile=0x230) returned 0x1 [0150.611] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.649] SetErrorMode (uMode=0x1) returned 0x0 [0150.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinCloudDomain.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joinclouddomain.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef25850a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xef25850a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c3e8cea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e4)) returned 1 [0150.649] SetErrorMode (uMode=0x0) returned 0x1 [0150.649] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinCloudDomain.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joinclouddomain.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinCloudDomain.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joinclouddomain.settingcontent-ms.partially.cryptonar")) returned 1 [0150.651] SetErrorMode (uMode=0x1) returned 0x0 [0150.651] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinDomain.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joindomain.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.652] SetErrorMode (uMode=0x0) returned 0x1 [0150.652] GetFileType (hFile=0x230) returned 0x1 [0150.652] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.655] SetErrorMode (uMode=0x1) returned 0x0 [0150.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinDomain.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joindomain.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9593c2, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xef9593c2, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c3e8cea, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4cb)) returned 1 [0150.655] SetErrorMode (uMode=0x0) returned 0x1 [0150.656] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinDomain.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joindomain.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_JoinDomain.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_joindomain.settingcontent-ms.partially.cryptonar")) returned 1 [0150.658] SetErrorMode (uMode=0x1) returned 0x0 [0150.658] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_LeaveOrganization.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_leaveorganization.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.659] SetErrorMode (uMode=0x0) returned 0x1 [0150.659] GetFileType (hFile=0x230) returned 0x1 [0150.659] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.661] SetErrorMode (uMode=0x1) returned 0x0 [0150.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_LeaveOrganization.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_leaveorganization.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0355197, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf0355197, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c410c23, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ee)) returned 1 [0150.661] SetErrorMode (uMode=0x0) returned 0x1 [0150.661] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_LeaveOrganization.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_leaveorganization.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_LeaveOrganization.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_leaveorganization.settingcontent-ms.partially.cryptonar")) returned 1 [0150.663] SetErrorMode (uMode=0x1) returned 0x0 [0150.663] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_PenAndTouchStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_penandtouchstatus.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.664] SetErrorMode (uMode=0x0) returned 0x1 [0150.664] GetFileType (hFile=0x230) returned 0x1 [0150.665] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.666] SetErrorMode (uMode=0x1) returned 0x0 [0150.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_PenAndTouchStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_penandtouchstatus.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf07a75de, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf07a75de, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c410c23, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ee)) returned 1 [0150.666] SetErrorMode (uMode=0x0) returned 0x1 [0150.667] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_PenAndTouchStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_penandtouchstatus.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_PenAndTouchStatus.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_penandtouchstatus.settingcontent-ms.partially.cryptonar")) returned 1 [0150.668] SetErrorMode (uMode=0x1) returned 0x0 [0150.669] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProcessorStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_processorstatus.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.670] SetErrorMode (uMode=0x0) returned 0x1 [0150.670] GetFileType (hFile=0x230) returned 0x1 [0150.670] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.671] SetErrorMode (uMode=0x1) returned 0x0 [0150.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProcessorStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_processorstatus.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0c9239d, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf0c9239d, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c410c23, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e4)) returned 1 [0150.672] SetErrorMode (uMode=0x0) returned 0x1 [0150.672] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProcessorStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_processorstatus.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProcessorStatus.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_processorstatus.settingcontent-ms.partially.cryptonar")) returned 1 [0150.674] SetErrorMode (uMode=0x1) returned 0x0 [0150.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProductIdStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_productidstatus.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.675] SetErrorMode (uMode=0x0) returned 0x1 [0150.675] GetFileType (hFile=0x230) returned 0x1 [0150.675] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.676] SetErrorMode (uMode=0x1) returned 0x0 [0150.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProductIdStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_productidstatus.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1772fa7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf1772fa7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c435077, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e4)) returned 1 [0150.677] SetErrorMode (uMode=0x0) returned 0x1 [0150.677] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProductIdStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_productidstatus.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_ProductIdStatus.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_productidstatus.settingcontent-ms.partially.cryptonar")) returned 1 [0150.678] SetErrorMode (uMode=0x1) returned 0x0 [0150.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_RenamePC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_renamepc.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.680] SetErrorMode (uMode=0x0) returned 0x1 [0150.680] GetFileType (hFile=0x230) returned 0x1 [0150.680] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.681] SetErrorMode (uMode=0x1) returned 0x0 [0150.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_RenamePC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_renamepc.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25b7eab, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf25b7eab, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c435077, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c1)) returned 1 [0150.682] SetErrorMode (uMode=0x0) returned 0x1 [0150.682] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_RenamePC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_renamepc.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_RenamePC.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_renamepc.settingcontent-ms.partially.cryptonar")) returned 1 [0150.684] SetErrorMode (uMode=0x1) returned 0x0 [0150.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_SystemTypeStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_systemtypestatus.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.685] SetErrorMode (uMode=0x0) returned 0x1 [0150.685] GetFileType (hFile=0x230) returned 0x1 [0150.685] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.692] SetErrorMode (uMode=0x1) returned 0x0 [0150.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_SystemTypeStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_systemtypestatus.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2d77935, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf2d77935, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c45b36d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e9)) returned 1 [0150.692] SetErrorMode (uMode=0x0) returned 0x1 [0150.693] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_SystemTypeStatus.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_systemtypestatus.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PCSystem_SystemTypeStatus.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_pcsystem_systemtypestatus.settingcontent-ms.partially.cryptonar")) returned 1 [0150.695] SetErrorMode (uMode=0x1) returned 0x0 [0150.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosebackground.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.696] SetErrorMode (uMode=0x0) returned 0x1 [0150.696] GetFileType (hFile=0x230) returned 0x1 [0150.696] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.698] SetErrorMode (uMode=0x1) returned 0x0 [0150.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosebackground.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3832442, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf3832442, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c45b36d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1 [0150.698] SetErrorMode (uMode=0x0) returned 0x1 [0150.698] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosebackground.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseBackground.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosebackground.settingcontent-ms.partially.cryptonar")) returned 1 [0150.700] SetErrorMode (uMode=0x1) returned 0x0 [0150.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseFit.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosefit.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.701] SetErrorMode (uMode=0x0) returned 0x1 [0150.701] GetFileType (hFile=0x230) returned 0x1 [0150.701] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.723] SetErrorMode (uMode=0x1) returned 0x0 [0150.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseFit.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosefit.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf42c6a15, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf42c6a15, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c4a78f2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50f)) returned 1 [0150.723] SetErrorMode (uMode=0x0) returned 0x1 [0150.723] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseFit.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosefit.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Background_ChooseFit.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_background_choosefit.settingcontent-ms.partially.cryptonar")) returned 1 [0150.726] SetErrorMode (uMode=0x1) returned 0x0 [0150.727] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_ColorPrevalence.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_colorprevalence.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.729] SetErrorMode (uMode=0x0) returned 0x1 [0150.729] GetFileType (hFile=0x230) returned 0x1 [0150.729] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.730] SetErrorMode (uMode=0x1) returned 0x0 [0150.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_ColorPrevalence.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_colorprevalence.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf43d1c21, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf43d1c21, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c4a78f2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x512)) returned 1 [0150.731] SetErrorMode (uMode=0x0) returned 0x1 [0150.731] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_ColorPrevalence.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_colorprevalence.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_ColorPrevalence.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_colorprevalence.settingcontent-ms.partially.cryptonar")) returned 1 [0150.732] SetErrorMode (uMode=0x1) returned 0x0 [0150.733] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_EnableTransparency.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_enabletransparency.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.734] SetErrorMode (uMode=0x0) returned 0x1 [0150.734] GetFileType (hFile=0x230) returned 0x1 [0150.734] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.736] SetErrorMode (uMode=0x1) returned 0x0 [0150.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_EnableTransparency.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_enabletransparency.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf47652fe, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf47652fe, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c4cff5d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x521)) returned 1 [0150.736] SetErrorMode (uMode=0x0) returned 0x1 [0150.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_EnableTransparency.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_enabletransparency.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_Color_EnableTransparency.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_color_enabletransparency.settingcontent-ms.partially.cryptonar")) returned 1 [0150.740] SetErrorMode (uMode=0x1) returned 0x0 [0150.740] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsBadge.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappsbadge.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.742] SetErrorMode (uMode=0x0) returned 0x1 [0150.742] GetFileType (hFile=0x230) returned 0x1 [0150.742] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.743] SetErrorMode (uMode=0x1) returned 0x0 [0150.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsBadge.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappsbadge.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4c03c2e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf4c03c2e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c4e254b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1 [0150.744] SetErrorMode (uMode=0x0) returned 0x1 [0150.744] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsBadge.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappsbadge.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsBadge.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappsbadge.settingcontent-ms.partially.cryptonar")) returned 1 [0150.746] SetErrorMode (uMode=0x1) returned 0x0 [0150.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsTile.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappstile.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.747] SetErrorMode (uMode=0x0) returned 0x1 [0150.747] GetFileType (hFile=0x230) returned 0x1 [0150.747] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.774] SetErrorMode (uMode=0x1) returned 0x0 [0150.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsTile.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappstile.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf50560f4, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf50560f4, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c51d439, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0150.774] SetErrorMode (uMode=0x0) returned 0x1 [0150.774] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsTile.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappstile.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenAppsTile.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenappstile.settingcontent-ms.partially.cryptonar")) returned 1 [0150.776] SetErrorMode (uMode=0x1) returned 0x0 [0150.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenbackground.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.777] SetErrorMode (uMode=0x0) returned 0x1 [0150.777] GetFileType (hFile=0x230) returned 0x1 [0150.777] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.778] SetErrorMode (uMode=0x1) returned 0x0 [0150.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenbackground.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf53c36bb, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf53c36bb, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c51d439, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50c)) returned 1 [0150.778] SetErrorMode (uMode=0x0) returned 0x1 [0150.778] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenBackground.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenbackground.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenBackground.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenbackground.settingcontent-ms.partially.cryptonar")) returned 1 [0150.780] SetErrorMode (uMode=0x1) returned 0x0 [0150.780] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenChooseBackgroundType.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenchoosebackgroundtype.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.782] SetErrorMode (uMode=0x0) returned 0x1 [0150.782] GetFileType (hFile=0x230) returned 0x1 [0150.782] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.783] SetErrorMode (uMode=0x1) returned 0x0 [0150.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenChooseBackgroundType.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenchoosebackgroundtype.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf56721d5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf56721d5, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c51d439, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x53e)) returned 1 [0150.783] SetErrorMode (uMode=0x0) returned 0x1 [0150.783] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenChooseBackgroundType.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenchoosebackgroundtype.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenChooseBackgroundType.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenchoosebackgroundtype.settingcontent-ms.partially.cryptonar")) returned 1 [0150.785] SetErrorMode (uMode=0x1) returned 0x0 [0150.785] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenSlideshowSource_CloudBrandName.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenslideshowsource_cloudbrandname.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.786] SetErrorMode (uMode=0x0) returned 0x1 [0150.786] GetFileType (hFile=0x230) returned 0x1 [0150.786] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.787] SetErrorMode (uMode=0x1) returned 0x0 [0150.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenSlideshowSource_CloudBrandName.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenslideshowsource_cloudbrandname.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf583bdac, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf583bdac, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c5438a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0150.788] SetErrorMode (uMode=0x0) returned 0x1 [0150.788] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenSlideshowSource_CloudBrandName.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenslideshowsource_cloudbrandname.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Personalize_LockScreenSlideshowSource_CloudBrandName.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_personalize_lockscreenslideshowsource_cloudbrandname.settingcontent-ms.partially.cryptonar")) returned 1 [0150.789] SetErrorMode (uMode=0x1) returned 0x0 [0150.789] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.790] SetErrorMode (uMode=0x0) returned 0x1 [0150.790] GetFileType (hFile=0x230) returned 0x1 [0150.790] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.791] SetErrorMode (uMode=0x1) returned 0x0 [0150.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5c67f77, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf5c67f77, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c5438a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0150.792] SetErrorMode (uMode=0x0) returned 0x1 [0150.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac.settingcontent-ms.partially.cryptonar")) returned 1 [0150.793] SetErrorMode (uMode=0x1) returned 0x0 [0150.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC_AoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac_aoac.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.795] SetErrorMode (uMode=0x0) returned 0x1 [0150.795] GetFileType (hFile=0x230) returned 0x1 [0150.795] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.796] SetErrorMode (uMode=0x1) returned 0x0 [0150.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC_AoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac_aoac.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf64279c6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf64279c6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c5438a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x53d)) returned 1 [0150.796] SetErrorMode (uMode=0x0) returned 0x1 [0150.796] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC_AoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac_aoac.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutAC_AoAc.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutac_aoac.settingcontent-ms.partially.cryptonar")) returned 1 [0150.798] SetErrorMode (uMode=0x1) returned 0x0 [0150.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.807] SetErrorMode (uMode=0x0) returned 0x1 [0150.808] GetFileType (hFile=0x230) returned 0x1 [0150.808] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.827] SetErrorMode (uMode=0x1) returned 0x0 [0150.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf65cb56e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf65cb56e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c58fe32, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0150.827] SetErrorMode (uMode=0x0) returned 0x1 [0150.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc.settingcontent-ms.partially.cryptonar")) returned 1 [0150.829] SetErrorMode (uMode=0x1) returned 0x0 [0150.829] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC_AoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc_aoac.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.831] SetErrorMode (uMode=0x0) returned 0x1 [0150.831] GetFileType (hFile=0x230) returned 0x1 [0150.831] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.832] SetErrorMode (uMode=0x1) returned 0x0 [0150.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC_AoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc_aoac.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6d64bd6, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf6d64bd6, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c5b7fbe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x53d)) returned 1 [0150.832] SetErrorMode (uMode=0x0) returned 0x1 [0150.833] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC_AoAc.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc_aoac.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_DisplayOffTimeoutDC_AoAc.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_displayofftimeoutdc_aoac.settingcontent-ms.partially.cryptonar")) returned 1 [0150.834] SetErrorMode (uMode=0x1) returned 0x0 [0150.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutAC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutac.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.836] SetErrorMode (uMode=0x0) returned 0x1 [0150.836] GetFileType (hFile=0x230) returned 0x1 [0150.836] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.837] SetErrorMode (uMode=0x1) returned 0x0 [0150.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutAC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutac.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7275c0a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf7275c0a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c5b7fbe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x502)) returned 1 [0150.837] SetErrorMode (uMode=0x0) returned 0x1 [0150.837] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutAC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutac.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutAC.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutac.settingcontent-ms.partially.cryptonar")) returned 1 [0150.839] SetErrorMode (uMode=0x1) returned 0x0 [0150.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutDC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutdc.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.840] SetErrorMode (uMode=0x0) returned 0x1 [0150.840] GetFileType (hFile=0x230) returned 0x1 [0150.840] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.843] SetErrorMode (uMode=0x1) returned 0x0 [0150.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutDC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutdc.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7334939, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf7334939, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c5b7fbe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x502)) returned 1 [0150.843] SetErrorMode (uMode=0x0) returned 0x1 [0150.843] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutDC.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutdc.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_PowerAndSleep_SleepTimeoutDC.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_powerandsleep_sleeptimeoutdc.settingcontent-ms.partially.cryptonar")) returned 1 [0150.845] SetErrorMode (uMode=0x1) returned 0x0 [0150.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_AdvertisingIdEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_advertisingidenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.846] SetErrorMode (uMode=0x0) returned 0x1 [0150.846] GetFileType (hFile=0x230) returned 0x1 [0150.846] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.848] SetErrorMode (uMode=0x1) returned 0x0 [0150.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_AdvertisingIdEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_advertisingidenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7465c44, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf7465c44, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c5dd40b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f2)) returned 1 [0150.848] SetErrorMode (uMode=0x0) returned 0x1 [0150.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_AdvertisingIdEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_advertisingidenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_AdvertisingIdEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_advertisingidenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0150.850] SetErrorMode (uMode=0x1) returned 0x0 [0150.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_EnableCollectionOfUrlsAppsUse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_enablecollectionofurlsappsuse.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.851] SetErrorMode (uMode=0x0) returned 0x1 [0150.851] GetFileType (hFile=0x230) returned 0x1 [0150.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.852] SetErrorMode (uMode=0x1) returned 0x0 [0150.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_EnableCollectionOfUrlsAppsUse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_enablecollectionofurlsappsuse.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7bff2db, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf7bff2db, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c5dd40b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51f)) returned 1 [0150.853] SetErrorMode (uMode=0x0) returned 0x1 [0150.853] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_EnableCollectionOfUrlsAppsUse.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_enablecollectionofurlsappsuse.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_EnableCollectionOfUrlsAppsUse.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_enablecollectionofurlsappsuse.settingcontent-ms.partially.cryptonar")) returned 1 [0150.854] SetErrorMode (uMode=0x1) returned 0x0 [0150.855] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_OpenPrivacyStatementLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_openprivacystatementlink.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.856] SetErrorMode (uMode=0x0) returned 0x1 [0150.856] GetFileType (hFile=0x230) returned 0x1 [0150.856] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.880] SetErrorMode (uMode=0x1) returned 0x0 [0150.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_OpenPrivacyStatementLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_openprivacystatementlink.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7f6ca6c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf7f6ca6c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c62874b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x506)) returned 1 [0150.880] SetErrorMode (uMode=0x0) returned 0x1 [0150.880] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_OpenPrivacyStatementLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_openprivacystatementlink.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Privacy_OpenPrivacyStatementLink.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_privacy_openprivacystatementlink.settingcontent-ms.partially.cryptonar")) returned 1 [0150.882] SetErrorMode (uMode=0x1) returned 0x0 [0150.882] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticConfigScript.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticconfigscript.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.883] SetErrorMode (uMode=0x0) returned 0x1 [0150.883] GetFileType (hFile=0x230) returned 0x1 [0150.883] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.884] SetErrorMode (uMode=0x1) returned 0x0 [0150.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticConfigScript.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticconfigscript.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf84f001a, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf84f001a, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c62874b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0150.884] SetErrorMode (uMode=0x0) returned 0x1 [0150.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticConfigScript.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticconfigscript.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticConfigScript.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticconfigscript.settingcontent-ms.partially.cryptonar")) returned 1 [0150.886] SetErrorMode (uMode=0x1) returned 0x0 [0150.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticDetection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticdetection.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.887] SetErrorMode (uMode=0x0) returned 0x1 [0150.887] GetFileType (hFile=0x230) returned 0x1 [0150.887] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.922] SetErrorMode (uMode=0x1) returned 0x0 [0150.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticDetection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticdetection.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf872c3f7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf872c3f7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c69672f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e4)) returned 1 [0150.922] SetErrorMode (uMode=0x0) returned 0x1 [0150.922] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticDetection.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticdetection.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_AutomaticDetection.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_automaticdetection.settingcontent-ms.partially.cryptonar")) returned 1 [0150.924] SetErrorMode (uMode=0x1) returned 0x0 [0150.924] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_ManualProxyAddress.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_manualproxyaddress.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0150.926] SetErrorMode (uMode=0x0) returned 0x1 [0150.926] GetFileType (hFile=0x230) returned 0x1 [0150.926] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0150.927] SetErrorMode (uMode=0x1) returned 0x0 [0150.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_ManualProxyAddress.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_manualproxyaddress.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8bcac8c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf8bcac8c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5c6a2a09, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e1)) returned 1 [0150.927] SetErrorMode (uMode=0x0) returned 0x1 [0150.927] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_ManualProxyAddress.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_manualproxyaddress.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Proxy_ManualProxyAddress.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_proxy_manualproxyaddress.settingcontent-ms.partially.cryptonar")) returned 1 [0150.928] SetErrorMode (uMode=0x1) returned 0x0 [0150.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_DeviceList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_devicelist.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.758] SetErrorMode (uMode=0x0) returned 0x1 [0151.758] GetFileType (hFile=0x230) returned 0x1 [0151.758] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.891] SetErrorMode (uMode=0x1) returned 0x0 [0151.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_DeviceList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_devicelist.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9aca32c, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf9aca32c, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5cfc11f2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0151.891] SetErrorMode (uMode=0x0) returned 0x1 [0151.891] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_DeviceList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_devicelist.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_DeviceList.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_devicelist.settingcontent-ms.partially.cryptonar")) returned 1 [0151.894] SetErrorMode (uMode=0x1) returned 0x0 [0151.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_IsAirplaneModeEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_isairplanemodeenabled.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.895] SetErrorMode (uMode=0x0) returned 0x1 [0151.895] GetFileType (hFile=0x230) returned 0x1 [0151.895] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.897] SetErrorMode (uMode=0x1) returned 0x0 [0151.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_IsAirplaneModeEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_isairplanemodeenabled.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9ee4e89, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xf9ee4e89, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5cfc11f2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f7)) returned 1 [0151.897] SetErrorMode (uMode=0x0) returned 0x1 [0151.897] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_IsAirplaneModeEnabled.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_isairplanemodeenabled.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Radio_IsAirplaneModeEnabled.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_radio_isairplanemodeenabled.settingcontent-ms.partially.cryptonar")) returned 1 [0151.899] SetErrorMode (uMode=0x1) returned 0x0 [0151.899] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_ModeChangeConfig.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_modechangeconfig.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.901] SetErrorMode (uMode=0x0) returned 0x1 [0151.901] GetFileType (hFile=0x230) returned 0x1 [0151.901] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.903] SetErrorMode (uMode=0x1) returned 0x0 [0151.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_ModeChangeConfig.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_modechangeconfig.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa2b4646, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfa2b4646, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5cfe8532, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0151.903] SetErrorMode (uMode=0x0) returned 0x1 [0151.903] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_ModeChangeConfig.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_modechangeconfig.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_ModeChangeConfig.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_modechangeconfig.settingcontent-ms.partially.cryptonar")) returned 1 [0151.905] SetErrorMode (uMode=0x1) returned 0x0 [0151.905] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Preference.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_preference.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.907] SetErrorMode (uMode=0x0) returned 0x1 [0151.907] GetFileType (hFile=0x230) returned 0x1 [0151.907] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.908] SetErrorMode (uMode=0x1) returned 0x0 [0151.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Preference.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_preference.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa3e592f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfa3e592f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5cfe8532, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4cf)) returned 1 [0151.908] SetErrorMode (uMode=0x0) returned 0x1 [0151.908] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Preference.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_preference.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Preference.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_preference.settingcontent-ms.partially.cryptonar")) returned 1 [0151.910] SetErrorMode (uMode=0x1) returned 0x0 [0151.910] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_TaskbarAppsVisibility.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_taskbarappsvisibility.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.911] SetErrorMode (uMode=0x0) returned 0x1 [0151.911] GetFileType (hFile=0x230) returned 0x1 [0151.911] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.925] SetErrorMode (uMode=0x1) returned 0x0 [0151.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_TaskbarAppsVisibility.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_taskbarappsvisibility.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa752f66, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfa752f66, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d00d5d6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x506)) returned 1 [0151.926] SetErrorMode (uMode=0x0) returned 0x1 [0151.926] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_TaskbarAppsVisibility.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_taskbarappsvisibility.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_TaskbarAppsVisibility.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_taskbarappsvisibility.settingcontent-ms.partially.cryptonar")) returned 1 [0151.928] SetErrorMode (uMode=0x1) returned 0x0 [0151.928] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.930] SetErrorMode (uMode=0x0) returned 0x1 [0151.930] GetFileType (hFile=0x230) returned 0x1 [0151.930] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.931] SetErrorMode (uMode=0x1) returned 0x0 [0151.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_toggle.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa88421e, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfa88421e, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d0338d8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4bb)) returned 1 [0151.932] SetErrorMode (uMode=0x0) returned 0x1 [0151.932] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_ShellMode_Toggle.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_shellmode_toggle.settingcontent-ms.partially.cryptonar")) returned 1 [0151.933] SetErrorMode (uMode=0x1) returned 0x0 [0151.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Startup_AdvancedStartup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_startup_advancedstartup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.935] SetErrorMode (uMode=0x0) returned 0x1 [0151.935] GetFileType (hFile=0x230) returned 0x1 [0151.935] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.936] SetErrorMode (uMode=0x1) returned 0x0 [0151.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Startup_AdvancedStartup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_startup_advancedstartup.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaa01a19, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfaa01a19, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d0338d8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ef)) returned 1 [0151.937] SetErrorMode (uMode=0x0) returned 0x1 [0151.937] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Startup_AdvancedStartup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_startup_advancedstartup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Startup_AdvancedStartup.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_startup_advancedstartup.settingcontent-ms.partially.cryptonar")) returned 1 [0151.938] SetErrorMode (uMode=0x1) returned 0x0 [0151.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_LinkToPlacesPage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_linktoplacespage.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.940] SetErrorMode (uMode=0x0) returned 0x1 [0151.940] GetFileType (hFile=0x230) returned 0x1 [0151.940] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.942] SetErrorMode (uMode=0x1) returned 0x0 [0151.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_LinkToPlacesPage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_linktoplacespage.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb0b6269, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb0b6269, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d0338d8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d3)) returned 1 [0151.942] SetErrorMode (uMode=0x0) returned 0x1 [0151.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_LinkToPlacesPage.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_linktoplacespage.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_LinkToPlacesPage.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_linktoplacespage.settingcontent-ms.partially.cryptonar")) returned 1 [0151.944] SetErrorMode (uMode=0x1) returned 0x0 [0151.944] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowRecentlyAddedAppsGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showrecentlyaddedappsgroup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.945] SetErrorMode (uMode=0x0) returned 0x1 [0151.945] GetFileType (hFile=0x230) returned 0x1 [0151.945] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.947] SetErrorMode (uMode=0x1) returned 0x0 [0151.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowRecentlyAddedAppsGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showrecentlyaddedappsgroup.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb33ea75, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb33ea75, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d059b15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x505)) returned 1 [0151.947] SetErrorMode (uMode=0x0) returned 0x1 [0151.947] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowRecentlyAddedAppsGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showrecentlyaddedappsgroup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowRecentlyAddedAppsGroup.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showrecentlyaddedappsgroup.settingcontent-ms.partially.cryptonar")) returned 1 [0151.949] SetErrorMode (uMode=0x1) returned 0x0 [0151.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowSuggestedAppsGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showsuggestedappsgroup.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.950] SetErrorMode (uMode=0x0) returned 0x1 [0151.950] GetFileType (hFile=0x230) returned 0x1 [0151.950] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.951] SetErrorMode (uMode=0x1) returned 0x0 [0151.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowSuggestedAppsGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showsuggestedappsgroup.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb6f86c1, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb6f86c1, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d059b15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f1)) returned 1 [0151.951] SetErrorMode (uMode=0x0) returned 0x1 [0151.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowSuggestedAppsGroup.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showsuggestedappsgroup.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_ShowSuggestedAppsGroup.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_showsuggestedappsgroup.settingcontent-ms.partially.cryptonar")) returned 1 [0151.952] SetErrorMode (uMode=0x1) returned 0x0 [0151.952] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_Size.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_size.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.953] SetErrorMode (uMode=0x0) returned 0x1 [0151.954] GetFileType (hFile=0x230) returned 0x1 [0151.954] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.956] SetErrorMode (uMode=0x1) returned 0x0 [0151.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_Size.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_size.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb9f347f, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfb9f347f, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d059b15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x497)) returned 1 [0151.956] SetErrorMode (uMode=0x0) returned 0x1 [0151.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_Size.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_size.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_Size.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_size.settingcontent-ms.partially.cryptonar")) returned 1 [0151.958] SetErrorMode (uMode=0x1) returned 0x0 [0151.958] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreMFUApps.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storemfuapps.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.959] SetErrorMode (uMode=0x0) returned 0x1 [0151.959] GetFileType (hFile=0x230) returned 0x1 [0151.959] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.960] SetErrorMode (uMode=0x1) returned 0x0 [0151.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreMFUApps.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storemfuapps.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbbe34c5, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfbbe34c5, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d059b15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4bf)) returned 1 [0151.960] SetErrorMode (uMode=0x0) returned 0x1 [0151.960] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreMFUApps.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storemfuapps.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreMFUApps.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storemfuapps.settingcontent-ms.partially.cryptonar")) returned 1 [0151.962] SetErrorMode (uMode=0x1) returned 0x0 [0151.962] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreRecentlyOpenedItems.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storerecentlyopeneditems.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.963] SetErrorMode (uMode=0x0) returned 0x1 [0151.963] GetFileType (hFile=0x230) returned 0x1 [0151.963] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.964] SetErrorMode (uMode=0x1) returned 0x0 [0151.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreRecentlyOpenedItems.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storerecentlyopeneditems.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfc3051, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfbfc3051, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d081870, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4fb)) returned 1 [0151.964] SetErrorMode (uMode=0x0) returned 0x1 [0151.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreRecentlyOpenedItems.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storerecentlyopeneditems.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Start_StoreRecentlyOpenedItems.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_start_storerecentlyopeneditems.settingcontent-ms.partially.cryptonar")) returned 1 [0151.966] SetErrorMode (uMode=0x1) returned 0x0 [0151.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-2.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.967] SetErrorMode (uMode=0x0) returned 0x1 [0151.967] GetFileType (hFile=0x230) returned 0x1 [0151.967] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.969] SetErrorMode (uMode=0x1) returned 0x0 [0151.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-2.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc18ccf8, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfc18ccf8, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d081870, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x545)) returned 1 [0151.969] SetErrorMode (uMode=0x0) returned 0x1 [0151.969] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-2.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-2.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-2.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-2.settingcontent-ms.partially.cryptonar")) returned 1 [0151.971] SetErrorMode (uMode=0x1) returned 0x0 [0151.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-3.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-3.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.972] SetErrorMode (uMode=0x0) returned 0x1 [0151.972] GetFileType (hFile=0x230) returned 0x1 [0151.972] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0151.974] SetErrorMode (uMode=0x1) returned 0x0 [0151.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-3.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-3.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcaf02c3, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfcaf02c3, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d081870, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x545)) returned 1 [0151.974] SetErrorMode (uMode=0x0) returned 0x1 [0151.974] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-3.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-3.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink-3.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink-3.settingcontent-ms.partially.cryptonar")) returned 1 [0151.975] SetErrorMode (uMode=0x1) returned 0x0 [0151.975] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0151.976] SetErrorMode (uMode=0x0) returned 0x1 [0151.977] GetFileType (hFile=0x230) returned 0x1 [0151.977] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.032] SetErrorMode (uMode=0x1) returned 0x0 [0152.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcfdaeb3, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfcfdaeb3, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d1187ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x53d)) returned 1 [0152.033] SetErrorMode (uMode=0x0) returned 0x1 [0152.033] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_StorageSense_AppSizesOptionalComponentsLink.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_storagesense_appsizesoptionalcomponentslink.settingcontent-ms.partially.cryptonar")) returned 1 [0152.035] SetErrorMode (uMode=0x1) returned 0x0 [0152.035] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncAccessibility_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncaccessibility_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.036] SetErrorMode (uMode=0x0) returned 0x1 [0152.036] GetFileType (hFile=0x230) returned 0x1 [0152.036] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.038] SetErrorMode (uMode=0x1) returned 0x0 [0152.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncAccessibility_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncaccessibility_toggle.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd68f8c3, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfd68f8c3, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d1187ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52b)) returned 1 [0152.038] SetErrorMode (uMode=0x0) returned 0x1 [0152.038] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncAccessibility_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncaccessibility_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncAccessibility_Toggle.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncaccessibility_toggle.settingcontent-ms.partially.cryptonar")) returned 1 [0152.040] SetErrorMode (uMode=0x1) returned 0x0 [0152.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncBrowserSettings_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncbrowsersettings_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.042] SetErrorMode (uMode=0x0) returned 0x1 [0152.042] GetFileType (hFile=0x230) returned 0x1 [0152.042] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.113] SetErrorMode (uMode=0x1) returned 0x0 [0152.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncBrowserSettings_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncbrowsersettings_toggle.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe22f086, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0xfe22f086, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5d1d7310, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x535)) returned 1 [0152.114] SetErrorMode (uMode=0x0) returned 0x1 [0152.114] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncBrowserSettings_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncbrowsersettings_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncBrowserSettings_Toggle.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncbrowsersettings_toggle.settingcontent-ms.partially.cryptonar")) returned 1 [0152.115] SetErrorMode (uMode=0x1) returned 0x0 [0152.115] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncCredentials_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synccredentials_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.117] SetErrorMode (uMode=0x0) returned 0x1 [0152.117] GetFileType (hFile=0x230) returned 0x1 [0152.117] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.118] SetErrorMode (uMode=0x1) returned 0x0 [0152.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncCredentials_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synccredentials_toggle.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e1bca, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x7e1bca, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d1fd5be, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x521)) returned 1 [0152.119] SetErrorMode (uMode=0x0) returned 0x1 [0152.119] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncCredentials_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synccredentials_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncCredentials_Toggle.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synccredentials_toggle.settingcontent-ms.partially.cryptonar")) returned 1 [0152.121] SetErrorMode (uMode=0x1) returned 0x0 [0152.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncLanguage_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synclanguage_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.122] SetErrorMode (uMode=0x0) returned 0x1 [0152.123] GetFileType (hFile=0x230) returned 0x1 [0152.123] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.127] SetErrorMode (uMode=0x1) returned 0x0 [0152.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncLanguage_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synclanguage_toggle.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6a5b3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xa6a5b3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d1fd5be, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x512)) returned 1 [0152.127] SetErrorMode (uMode=0x0) returned 0x1 [0152.127] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncLanguage_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synclanguage_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncLanguage_Toggle.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_synclanguage_toggle.settingcontent-ms.partially.cryptonar")) returned 1 [0152.129] SetErrorMode (uMode=0x1) returned 0x0 [0152.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncMaster_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncmaster_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.131] SetErrorMode (uMode=0x0) returned 0x1 [0152.131] GetFileType (hFile=0x230) returned 0x1 [0152.131] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.132] SetErrorMode (uMode=0x1) returned 0x0 [0152.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncMaster_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncmaster_toggle.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8b4c1, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xd8b4c1, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d1fd5be, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50d)) returned 1 [0152.133] SetErrorMode (uMode=0x0) returned 0x1 [0152.133] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncMaster_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncmaster_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncMaster_Toggle.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncmaster_toggle.settingcontent-ms.partially.cryptonar")) returned 1 [0152.135] SetErrorMode (uMode=0x1) returned 0x0 [0152.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncPersonalization_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncpersonalization_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.137] SetErrorMode (uMode=0x0) returned 0x1 [0152.137] GetFileType (hFile=0x230) returned 0x1 [0152.137] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.138] SetErrorMode (uMode=0x1) returned 0x0 [0152.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncPersonalization_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncpersonalization_toggle.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14660e5, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x14660e5, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d22372e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x535)) returned 1 [0152.139] SetErrorMode (uMode=0x0) returned 0x1 [0152.139] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncPersonalization_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncpersonalization_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_SyncPersonalization_Toggle.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_syncpersonalization_toggle.settingcontent-ms.partially.cryptonar")) returned 1 [0152.141] SetErrorMode (uMode=0x1) returned 0x0 [0152.141] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_Windows_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_windows_toggle.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.142] SetErrorMode (uMode=0x0) returned 0x1 [0152.142] GetFileType (hFile=0x230) returned 0x1 [0152.142] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.152] SetErrorMode (uMode=0x1) returned 0x0 [0152.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_Windows_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_windows_toggle.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a8bc0c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a8bc0c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d249a22, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f9)) returned 1 [0152.153] SetErrorMode (uMode=0x0) returned 0x1 [0152.153] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_Windows_Toggle.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_windows_toggle.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_SyncSettings_Windows_Toggle.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_syncsettings_windows_toggle.settingcontent-ms.partially.cryptonar")) returned 1 [0152.155] SetErrorMode (uMode=0x1) returned 0x0 [0152.155] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_AssignedAccess.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_assignedaccess.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.157] SetErrorMode (uMode=0x0) returned 0x1 [0152.157] GetFileType (hFile=0x230) returned 0x1 [0152.157] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.181] SetErrorMode (uMode=0x1) returned 0x0 [0152.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_AssignedAccess.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_assignedaccess.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c5aa6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x54c5aa6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d29606b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1 [0152.181] SetErrorMode (uMode=0x0) returned 0x1 [0152.182] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_AssignedAccess.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_assignedaccess.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_AssignedAccess.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_assignedaccess.settingcontent-ms.partially.cryptonar")) returned 1 [0152.183] SetErrorMode (uMode=0x1) returned 0x0 [0152.183] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_ChangePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_changepassword.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.184] SetErrorMode (uMode=0x0) returned 0x1 [0152.184] GetFileType (hFile=0x230) returned 0x1 [0152.184] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.186] SetErrorMode (uMode=0x1) returned 0x0 [0152.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_ChangePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_changepassword.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71073b8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x71073b8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d29606b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4cb)) returned 1 [0152.186] SetErrorMode (uMode=0x0) returned 0x1 [0152.186] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_ChangePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_changepassword.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_ChangePassword.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_changepassword.settingcontent-ms.partially.cryptonar")) returned 1 [0152.188] SetErrorMode (uMode=0x1) returned 0x0 [0152.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_DelayLock.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_delaylock.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.189] SetErrorMode (uMode=0x0) returned 0x1 [0152.189] GetFileType (hFile=0x230) returned 0x1 [0152.189] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.202] SetErrorMode (uMode=0x1) returned 0x0 [0152.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_DelayLock.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_delaylock.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa233d71, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xa233d71, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d2bc0c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0152.203] SetErrorMode (uMode=0x0) returned 0x1 [0152.203] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_DelayLock.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_delaylock.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_DelayLock.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_delaylock.settingcontent-ms.partially.cryptonar")) returned 1 [0152.204] SetErrorMode (uMode=0x1) returned 0x0 [0152.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFace.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentface.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.206] SetErrorMode (uMode=0x0) returned 0x1 [0152.206] GetFileType (hFile=0x230) returned 0x1 [0152.206] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.218] SetErrorMode (uMode=0x1) returned 0x0 [0152.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFace.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentface.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7b75cb, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xa7b75cb, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d2e242b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4cb)) returned 1 [0152.218] SetErrorMode (uMode=0x0) returned 0x1 [0152.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFace.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentface.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFace.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentface.settingcontent-ms.partially.cryptonar")) returned 1 [0152.220] SetErrorMode (uMode=0x1) returned 0x0 [0152.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFingerprint.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentfingerprint.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.221] SetErrorMode (uMode=0x0) returned 0x1 [0152.221] GetFileType (hFile=0x230) returned 0x1 [0152.221] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.234] SetErrorMode (uMode=0x1) returned 0x0 [0152.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFingerprint.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentfingerprint.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a81d6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xb0a81d6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d3085e7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ee)) returned 1 [0152.234] SetErrorMode (uMode=0x0) returned 0x1 [0152.235] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFingerprint.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentfingerprint.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentFingerprint.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentfingerprint.settingcontent-ms.partially.cryptonar")) returned 1 [0152.237] SetErrorMode (uMode=0x1) returned 0x0 [0152.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentIris.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentiris.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.238] SetErrorMode (uMode=0x0) returned 0x1 [0152.238] GetFileType (hFile=0x230) returned 0x1 [0152.239] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.259] SetErrorMode (uMode=0x1) returned 0x0 [0152.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentIris.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentiris.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb43bad9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xb43bad9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d354ac5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4cb)) returned 1 [0152.259] SetErrorMode (uMode=0x0) returned 0x1 [0152.259] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentIris.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentiris.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_EnrollmentIris.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_enrollmentiris.settingcontent-ms.partially.cryptonar")) returned 1 [0152.261] SetErrorMode (uMode=0x1) returned 0x0 [0152.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PicturePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_picturepassword.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.262] SetErrorMode (uMode=0x0) returned 0x1 [0152.262] GetFileType (hFile=0x230) returned 0x1 [0152.262] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.264] SetErrorMode (uMode=0x1) returned 0x0 [0152.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PicturePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_picturepassword.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc17ed67, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xc17ed67, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d354ac5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d7)) returned 1 [0152.264] SetErrorMode (uMode=0x0) returned 0x1 [0152.264] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PicturePassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_picturepassword.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PicturePassword.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_picturepassword.settingcontent-ms.partially.cryptonar")) returned 1 [0152.266] SetErrorMode (uMode=0x1) returned 0x0 [0152.266] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PINPassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_pinpassword.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.268] SetErrorMode (uMode=0x0) returned 0x1 [0152.268] GetFileType (hFile=0x230) returned 0x1 [0152.268] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.281] SetErrorMode (uMode=0x1) returned 0x0 [0152.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PINPassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_pinpassword.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa050c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xcaa050c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d37af99, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b7)) returned 1 [0152.281] SetErrorMode (uMode=0x0) returned 0x1 [0152.281] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PINPassword.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_pinpassword.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_PINPassword.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_pinpassword.settingcontent-ms.partially.cryptonar")) returned 1 [0152.283] SetErrorMode (uMode=0x1) returned 0x0 [0152.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_SingleSignOnAccountList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_singlesignonaccountlist.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.284] SetErrorMode (uMode=0x0) returned 0x1 [0152.284] GetFileType (hFile=0x230) returned 0x1 [0152.284] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.290] SetErrorMode (uMode=0x1) returned 0x0 [0152.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_SingleSignOnAccountList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_singlesignonaccountlist.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcef2933, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xcef2933, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d3a0de6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4fd)) returned 1 [0152.290] SetErrorMode (uMode=0x0) returned 0x1 [0152.290] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_SingleSignOnAccountList.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_singlesignonaccountlist.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Users_SingleSignOnAccountList.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_users_singlesignonaccountlist.settingcontent-ms.partially.cryptonar")) returned 1 [0152.292] SetErrorMode (uMode=0x1) returned 0x0 [0152.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_AltTabFilter.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_alttabfilter.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.293] SetErrorMode (uMode=0x0) returned 0x1 [0152.293] GetFileType (hFile=0x230) returned 0x1 [0152.293] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.373] SetErrorMode (uMode=0x1) returned 0x0 [0152.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_AltTabFilter.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_alttabfilter.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40389e, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xd40389e, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d460123, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f8)) returned 1 [0152.373] SetErrorMode (uMode=0x0) returned 0x1 [0152.373] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_AltTabFilter.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_alttabfilter.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_AltTabFilter.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_alttabfilter.settingcontent-ms.partially.cryptonar")) returned 1 [0152.375] SetErrorMode (uMode=0x1) returned 0x0 [0152.375] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_TaskbarFilter.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_taskbarfilter.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.376] SetErrorMode (uMode=0x0) returned 0x1 [0152.376] GetFileType (hFile=0x230) returned 0x1 [0152.376] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.378] SetErrorMode (uMode=0x1) returned 0x0 [0152.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_TaskbarFilter.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_taskbarfilter.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8ee65d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xd8ee65d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d460123, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4fd)) returned 1 [0152.378] SetErrorMode (uMode=0x0) returned 0x1 [0152.378] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_TaskbarFilter.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_taskbarfilter.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_VirtualDesktops_TaskbarFilter.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_virtualdesktops_taskbarfilter.settingcontent-ms.partially.cryptonar")) returned 1 [0152.380] SetErrorMode (uMode=0x1) returned 0x0 [0152.380] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_CorpDeviceManagement.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_corpdevicemanagement.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.381] SetErrorMode (uMode=0x0) returned 0x1 [0152.381] GetFileType (hFile=0x230) returned 0x1 [0152.381] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.598] SetErrorMode (uMode=0x1) returned 0x0 [0152.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_CorpDeviceManagement.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_corpdevicemanagement.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddff7c0, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xddff7c0, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d675bdf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50d)) returned 1 [0152.598] SetErrorMode (uMode=0x0) returned 0x1 [0152.598] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_CorpDeviceManagement.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_corpdevicemanagement.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_CorpDeviceManagement.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_corpdevicemanagement.settingcontent-ms.partially.cryptonar")) returned 1 [0152.600] SetErrorMode (uMode=0x1) returned 0x0 [0152.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_RelatedSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_relatedsettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.601] SetErrorMode (uMode=0x0) returned 0x1 [0152.602] GetFileType (hFile=0x230) returned 0x1 [0152.602] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.603] SetErrorMode (uMode=0x1) returned 0x0 [0152.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_RelatedSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_relatedsettings.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0fa5b8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xe0fa5b8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d69bdf4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ec)) returned 1 [0152.603] SetErrorMode (uMode=0x0) returned 0x1 [0152.603] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_RelatedSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_relatedsettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AAA_SystemSettings_Workplace_RelatedSettings.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\aaa_systemsettings_workplace_relatedsettings.settingcontent-ms.partially.cryptonar")) returned 1 [0152.605] SetErrorMode (uMode=0x1) returned 0x0 [0152.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AddOrRemovePrograms.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\addorremoveprograms.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.607] SetErrorMode (uMode=0x0) returned 0x1 [0152.607] GetFileType (hFile=0x230) returned 0x1 [0152.607] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.608] SetErrorMode (uMode=0x1) returned 0x0 [0152.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AddOrRemovePrograms.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\addorremoveprograms.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5bf23a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xe5bf23a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d69bdf4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x332)) returned 1 [0152.608] SetErrorMode (uMode=0x0) returned 0x1 [0152.609] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AddOrRemovePrograms.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\addorremoveprograms.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\AddOrRemovePrograms.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\addorremoveprograms.settingcontent-ms.partially.cryptonar")) returned 1 [0152.610] SetErrorMode (uMode=0x1) returned 0x0 [0152.610] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0042AE00-17CC-42EC-B5AD-B8F08A025D71}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0042ae00-17cc-42ec-b5ad-b8f08a025d71}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.611] SetErrorMode (uMode=0x0) returned 0x1 [0152.611] GetFileType (hFile=0x230) returned 0x1 [0152.611] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.612] SetErrorMode (uMode=0x1) returned 0x0 [0152.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0042AE00-17CC-42EC-B5AD-B8F08A025D71}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0042ae00-17cc-42ec-b5ad-b8f08a025d71}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe86dce7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xe86dce7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d69bdf4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ee)) returned 1 [0152.613] SetErrorMode (uMode=0x0) returned 0x1 [0152.613] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0042AE00-17CC-42EC-B5AD-B8F08A025D71}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0042ae00-17cc-42ec-b5ad-b8f08a025d71}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0042AE00-17CC-42EC-B5AD-B8F08A025D71}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0042ae00-17cc-42ec-b5ad-b8f08a025d71}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.614] SetErrorMode (uMode=0x1) returned 0x0 [0152.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{01ACC6BC-9A3D-49c5-AC7D-0FB9E026C424}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{01acc6bc-9a3d-49c5-ac7d-0fb9e026c424}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.615] SetErrorMode (uMode=0x0) returned 0x1 [0152.615] GetFileType (hFile=0x230) returned 0x1 [0152.616] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.617] SetErrorMode (uMode=0x1) returned 0x0 [0152.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{01ACC6BC-9A3D-49c5-AC7D-0FB9E026C424}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{01acc6bc-9a3d-49c5-ac7d-0fb9e026c424}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebdb2cb, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xebdb2cb, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d69bdf4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b2)) returned 1 [0152.617] SetErrorMode (uMode=0x0) returned 0x1 [0152.618] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{01ACC6BC-9A3D-49c5-AC7D-0FB9E026C424}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{01acc6bc-9a3d-49c5-ac7d-0fb9e026c424}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{01ACC6BC-9A3D-49c5-AC7D-0FB9E026C424}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{01acc6bc-9a3d-49c5-ac7d-0fb9e026c424}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.619] SetErrorMode (uMode=0x1) returned 0x0 [0152.619] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{028DE9F5-65F3-4A06-A048-421056F3E421}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{028de9f5-65f3-4a06-a048-421056f3e421}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.620] SetErrorMode (uMode=0x0) returned 0x1 [0152.620] GetFileType (hFile=0x230) returned 0x1 [0152.620] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.622] SetErrorMode (uMode=0x1) returned 0x0 [0152.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{028DE9F5-65F3-4A06-A048-421056F3E421}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{028de9f5-65f3-4a06-a048-421056f3e421}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf244f9e, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xf244f9e, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d6c2010, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49d)) returned 1 [0152.622] SetErrorMode (uMode=0x0) returned 0x1 [0152.622] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{028DE9F5-65F3-4A06-A048-421056F3E421}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{028de9f5-65f3-4a06-a048-421056f3e421}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{028DE9F5-65F3-4A06-A048-421056F3E421}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{028de9f5-65f3-4a06-a048-421056f3e421}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.624] SetErrorMode (uMode=0x1) returned 0x0 [0152.624] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{030C20F0-E20B-417A-B7AD-CEC6EE955CD3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{030c20f0-e20b-417a-b7ad-cec6ee955cd3}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.626] SetErrorMode (uMode=0x0) returned 0x1 [0152.626] GetFileType (hFile=0x230) returned 0x1 [0152.626] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.627] SetErrorMode (uMode=0x1) returned 0x0 [0152.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{030C20F0-E20B-417A-B7AD-CEC6EE955CD3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{030c20f0-e20b-417a-b7ad-cec6ee955cd3}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c0fdf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xf3c0fdf, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d6c2010, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x415)) returned 1 [0152.627] SetErrorMode (uMode=0x0) returned 0x1 [0152.627] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{030C20F0-E20B-417A-B7AD-CEC6EE955CD3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{030c20f0-e20b-417a-b7ad-cec6ee955cd3}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{030C20F0-E20B-417A-B7AD-CEC6EE955CD3}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{030c20f0-e20b-417a-b7ad-cec6ee955cd3}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.629] SetErrorMode (uMode=0x1) returned 0x0 [0152.629] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{059ECE57-19D1-4112-B05C-86F8ED5DA6B0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{059ece57-19d1-4112-b05c-86f8ed5da6b0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.630] SetErrorMode (uMode=0x0) returned 0x1 [0152.631] GetFileType (hFile=0x230) returned 0x1 [0152.631] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.632] SetErrorMode (uMode=0x1) returned 0x0 [0152.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{059ECE57-19D1-4112-B05C-86F8ED5DA6B0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{059ece57-19d1-4112-b05c-86f8ed5da6b0}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc23dd6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0xfc23dd6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d6c2010, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b4)) returned 1 [0152.632] SetErrorMode (uMode=0x0) returned 0x1 [0152.632] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{059ECE57-19D1-4112-B05C-86F8ED5DA6B0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{059ece57-19d1-4112-b05c-86f8ed5da6b0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{059ECE57-19D1-4112-B05C-86F8ED5DA6B0}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{059ece57-19d1-4112-b05c-86f8ed5da6b0}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.634] SetErrorMode (uMode=0x1) returned 0x0 [0152.634] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06628900-13DD-4fc3-A18B-0E9CE7B663ED}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06628900-13dd-4fc3-a18b-0e9ce7b663ed}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.636] SetErrorMode (uMode=0x0) returned 0x1 [0152.636] GetFileType (hFile=0x230) returned 0x1 [0152.636] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.637] SetErrorMode (uMode=0x1) returned 0x0 [0152.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06628900-13DD-4fc3-A18B-0E9CE7B663ED}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06628900-13dd-4fc3-a18b-0e9ce7b663ed}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10219c93, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x10219c93, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d6e8206, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46f)) returned 1 [0152.637] SetErrorMode (uMode=0x0) returned 0x1 [0152.638] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06628900-13DD-4fc3-A18B-0E9CE7B663ED}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06628900-13dd-4fc3-a18b-0e9ce7b663ed}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06628900-13DD-4fc3-A18B-0E9CE7B663ED}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06628900-13dd-4fc3-a18b-0e9ce7b663ed}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.639] SetErrorMode (uMode=0x1) returned 0x0 [0152.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06D12455-F35D-44D6-8E00-3F6A360CC030}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06d12455-f35d-44d6-8e00-3f6a360cc030}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.641] SetErrorMode (uMode=0x0) returned 0x1 [0152.641] GetFileType (hFile=0x230) returned 0x1 [0152.641] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.735] SetErrorMode (uMode=0x1) returned 0x0 [0152.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06D12455-F35D-44D6-8E00-3F6A360CC030}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06d12455-f35d-44d6-8e00-3f6a360cc030}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10cd45bb, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x10cd45bb, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d7cd1b1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fb)) returned 1 [0152.735] SetErrorMode (uMode=0x0) returned 0x1 [0152.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06D12455-F35D-44D6-8E00-3F6A360CC030}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06d12455-f35d-44d6-8e00-3f6a360cc030}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06D12455-F35D-44D6-8E00-3F6A360CC030}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06d12455-f35d-44d6-8e00-3f6a360cc030}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.738] SetErrorMode (uMode=0x1) returned 0x0 [0152.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06FF5AE9-8F7C-41AD-B71B-62137DE26715}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06ff5ae9-8f7c-41ad-b71b-62137de26715}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.744] SetErrorMode (uMode=0x0) returned 0x1 [0152.745] GetFileType (hFile=0x230) returned 0x1 [0152.745] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.770] SetErrorMode (uMode=0x1) returned 0x0 [0152.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06FF5AE9-8F7C-41AD-B71B-62137DE26715}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06ff5ae9-8f7c-41ad-b71b-62137de26715}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110da55f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x110da55f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d819806, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d7)) returned 1 [0152.770] SetErrorMode (uMode=0x0) returned 0x1 [0152.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06FF5AE9-8F7C-41AD-B71B-62137DE26715}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06ff5ae9-8f7c-41ad-b71b-62137de26715}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{06FF5AE9-8F7C-41AD-B71B-62137DE26715}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{06ff5ae9-8f7c-41ad-b71b-62137de26715}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.772] SetErrorMode (uMode=0x1) returned 0x0 [0152.773] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{082594D9-8481-43F0-AE8F-62EA920A4220}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{082594d9-8481-43f0-ae8f-62ea920a4220}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.774] SetErrorMode (uMode=0x0) returned 0x1 [0152.774] GetFileType (hFile=0x230) returned 0x1 [0152.774] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.786] SetErrorMode (uMode=0x1) returned 0x0 [0152.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{082594D9-8481-43F0-AE8F-62EA920A4220}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{082594d9-8481-43f0-ae8f-62ea920a4220}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x122094c2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x122094c2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d8406b3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d5)) returned 1 [0152.786] SetErrorMode (uMode=0x0) returned 0x1 [0152.786] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{082594D9-8481-43F0-AE8F-62EA920A4220}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{082594d9-8481-43f0-ae8f-62ea920a4220}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{082594D9-8481-43F0-AE8F-62EA920A4220}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{082594d9-8481-43f0-ae8f-62ea920a4220}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.788] SetErrorMode (uMode=0x1) returned 0x0 [0152.788] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{083D5202-600A-4f38-981B-2D138FBDC4D1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{083d5202-600a-4f38-981b-2d138fbdc4d1}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.790] SetErrorMode (uMode=0x0) returned 0x1 [0152.790] GetFileType (hFile=0x230) returned 0x1 [0152.790] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.791] SetErrorMode (uMode=0x1) returned 0x0 [0152.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{083D5202-600A-4f38-981B-2D138FBDC4D1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{083d5202-600a-4f38-981b-2d138fbdc4d1}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x126a7dd9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x126a7dd9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d8665ad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x481)) returned 1 [0152.792] SetErrorMode (uMode=0x0) returned 0x1 [0152.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{083D5202-600A-4f38-981B-2D138FBDC4D1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{083d5202-600a-4f38-981b-2d138fbdc4d1}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{083D5202-600A-4f38-981B-2D138FBDC4D1}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{083d5202-600a-4f38-981b-2d138fbdc4d1}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.794] SetErrorMode (uMode=0x1) returned 0x0 [0152.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08D48377-1C06-416D-B382-61E8D5F6CD18}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08d48377-1c06-416d-b382-61e8d5f6cd18}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.795] SetErrorMode (uMode=0x0) returned 0x1 [0152.795] GetFileType (hFile=0x230) returned 0x1 [0152.795] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.797] SetErrorMode (uMode=0x1) returned 0x0 [0152.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08D48377-1C06-416D-B382-61E8D5F6CD18}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08d48377-1c06-416d-b382-61e8d5f6cd18}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x127ff375, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x127ff375, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d8665ad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fb)) returned 1 [0152.797] SetErrorMode (uMode=0x0) returned 0x1 [0152.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08D48377-1C06-416D-B382-61E8D5F6CD18}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08d48377-1c06-416d-b382-61e8d5f6cd18}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08D48377-1C06-416D-B382-61E8D5F6CD18}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08d48377-1c06-416d-b382-61e8d5f6cd18}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.799] SetErrorMode (uMode=0x1) returned 0x0 [0152.799] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08EB53B7-3384-473A-8D2C-6C0E71F3BF34}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08eb53b7-3384-473a-8d2c-6c0e71f3bf34}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.801] SetErrorMode (uMode=0x0) returned 0x1 [0152.801] GetFileType (hFile=0x230) returned 0x1 [0152.801] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.802] SetErrorMode (uMode=0x1) returned 0x0 [0152.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08EB53B7-3384-473A-8D2C-6C0E71F3BF34}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08eb53b7-3384-473a-8d2c-6c0e71f3bf34}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12930799, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x12930799, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d8665ad, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c6)) returned 1 [0152.803] SetErrorMode (uMode=0x0) returned 0x1 [0152.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08EB53B7-3384-473A-8D2C-6C0E71F3BF34}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08eb53b7-3384-473a-8d2c-6c0e71f3bf34}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{08EB53B7-3384-473A-8D2C-6C0E71F3BF34}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{08eb53b7-3384-473a-8d2c-6c0e71f3bf34}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.804] SetErrorMode (uMode=0x1) returned 0x0 [0152.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.816] SetErrorMode (uMode=0x0) returned 0x1 [0152.816] GetFileType (hFile=0x230) returned 0x1 [0152.816] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.817] SetErrorMode (uMode=0x1) returned 0x0 [0152.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12b92cfb, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x12b92cfb, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d88bc1a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b5)) returned 1 [0152.818] SetErrorMode (uMode=0x0) returned 0x1 [0152.818] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{09bf6a57-7bf7-4389-8d6f-2bcf6a26bb4e}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.819] SetErrorMode (uMode=0x1) returned 0x0 [0152.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0CDC534D-A9FF-450D-91D8-96C341ED44AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0cdc534d-a9ff-450d-91d8-96c341ed44aa}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.821] SetErrorMode (uMode=0x0) returned 0x1 [0152.821] GetFileType (hFile=0x230) returned 0x1 [0152.821] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.836] SetErrorMode (uMode=0x1) returned 0x0 [0152.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0CDC534D-A9FF-450D-91D8-96C341ED44AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0cdc534d-a9ff-450d-91d8-96c341ed44aa}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1300b3a4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1300b3a4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d8b2ba0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c2)) returned 1 [0152.836] SetErrorMode (uMode=0x0) returned 0x1 [0152.836] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0CDC534D-A9FF-450D-91D8-96C341ED44AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0cdc534d-a9ff-450d-91d8-96c341ed44aa}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0CDC534D-A9FF-450D-91D8-96C341ED44AA}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0cdc534d-a9ff-450d-91d8-96c341ed44aa}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.838] SetErrorMode (uMode=0x1) returned 0x0 [0152.838] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.840] SetErrorMode (uMode=0x0) returned 0x1 [0152.840] GetFileType (hFile=0x230) returned 0x1 [0152.840] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.841] SetErrorMode (uMode=0x1) returned 0x0 [0152.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1332c501, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1332c501, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d8d80f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x37c)) returned 1 [0152.842] SetErrorMode (uMode=0x0) returned 0x1 [0152.842] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df44eaa-ff21-4412-828e-260a8728e7f1}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.844] SetErrorMode (uMode=0x1) returned 0x0 [0152.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0DF721FA-F921-4416-A491-1924F212C705}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df721fa-f921-4416-a491-1924f212c705}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.845] SetErrorMode (uMode=0x0) returned 0x1 [0152.845] GetFileType (hFile=0x230) returned 0x1 [0152.845] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.847] SetErrorMode (uMode=0x1) returned 0x0 [0152.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0DF721FA-F921-4416-A491-1924F212C705}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df721fa-f921-4416-a491-1924f212c705}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13732493, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x13732493, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d8d80f1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c1)) returned 1 [0152.847] SetErrorMode (uMode=0x0) returned 0x1 [0152.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0DF721FA-F921-4416-A491-1924F212C705}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df721fa-f921-4416-a491-1924f212c705}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0DF721FA-F921-4416-A491-1924F212C705}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0df721fa-f921-4416-a491-1924f212c705}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.849] SetErrorMode (uMode=0x1) returned 0x0 [0152.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.851] SetErrorMode (uMode=0x0) returned 0x1 [0152.851] GetFileType (hFile=0x230) returned 0x1 [0152.851] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.865] SetErrorMode (uMode=0x1) returned 0x0 [0152.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x138d5ede, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x138d5ede, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d8fe390, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x396)) returned 1 [0152.866] SetErrorMode (uMode=0x0) returned 0x1 [0152.866] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0e1d43a6-f261-491c-84ea-8bfcc6a4b70b}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.868] SetErrorMode (uMode=0x1) returned 0x0 [0152.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0F1B68F6-B72D-4229-BC9C-A87F0B16B17B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0f1b68f6-b72d-4229-bc9c-a87f0b16b17b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.870] SetErrorMode (uMode=0x0) returned 0x1 [0152.870] GetFileType (hFile=0x230) returned 0x1 [0152.870] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.891] SetErrorMode (uMode=0x1) returned 0x0 [0152.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0F1B68F6-B72D-4229-BC9C-A87F0B16B17B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0f1b68f6-b72d-4229-bc9c-a87f0b16b17b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13de6ee4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x13de6ee4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d94abb5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b6)) returned 1 [0152.892] SetErrorMode (uMode=0x0) returned 0x1 [0152.892] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0F1B68F6-B72D-4229-BC9C-A87F0B16B17B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0f1b68f6-b72d-4229-bc9c-a87f0b16b17b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{0F1B68F6-B72D-4229-BC9C-A87F0B16B17B}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{0f1b68f6-b72d-4229-bc9c-a87f0b16b17b}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.894] SetErrorMode (uMode=0x1) returned 0x0 [0152.894] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1011988D-12F9-446b-85FF-A1579CCD1678}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1011988d-12f9-446b-85ff-a1579ccd1678}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.896] SetErrorMode (uMode=0x0) returned 0x1 [0152.896] GetFileType (hFile=0x230) returned 0x1 [0152.896] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.918] SetErrorMode (uMode=0x1) returned 0x0 [0152.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1011988D-12F9-446b-85FF-A1579CCD1678}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1011988d-12f9-446b-85ff-a1579ccd1678}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f3e42f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x13f3e42f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d996fcc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f3)) returned 1 [0152.918] SetErrorMode (uMode=0x0) returned 0x1 [0152.918] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1011988D-12F9-446b-85FF-A1579CCD1678}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1011988d-12f9-446b-85ff-a1579ccd1678}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1011988D-12F9-446b-85FF-A1579CCD1678}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1011988d-12f9-446b-85ff-a1579ccd1678}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.920] SetErrorMode (uMode=0x1) returned 0x0 [0152.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.922] SetErrorMode (uMode=0x0) returned 0x1 [0152.922] GetFileType (hFile=0x230) returned 0x1 [0152.922] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.942] SetErrorMode (uMode=0x1) returned 0x0 [0152.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141eccfa, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x141eccfa, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d9bd041, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46b)) returned 1 [0152.942] SetErrorMode (uMode=0x0) returned 0x1 [0152.942] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{10cbe5dd-9921-4090-b412-361339a230ad}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.945] SetErrorMode (uMode=0x1) returned 0x0 [0152.945] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11135AE0-7372-4f85-8D1B-93D6EFBE5A99}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11135ae0-7372-4f85-8d1b-93d6efbe5a99}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.946] SetErrorMode (uMode=0x0) returned 0x1 [0152.947] GetFileType (hFile=0x230) returned 0x1 [0152.947] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.948] SetErrorMode (uMode=0x1) returned 0x0 [0152.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11135AE0-7372-4f85-8D1B-93D6EFBE5A99}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11135ae0-7372-4f85-8d1b-93d6efbe5a99}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14913dfb, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x14913dfb, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5d9e546d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x391)) returned 1 [0152.949] SetErrorMode (uMode=0x0) returned 0x1 [0152.949] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11135AE0-7372-4f85-8D1B-93D6EFBE5A99}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11135ae0-7372-4f85-8d1b-93d6efbe5a99}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11135AE0-7372-4f85-8D1B-93D6EFBE5A99}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11135ae0-7372-4f85-8d1b-93d6efbe5a99}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.951] SetErrorMode (uMode=0x1) returned 0x0 [0152.951] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11E71674-7556-4E27-8D59-03B2FA846204}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11e71674-7556-4e27-8d59-03b2fa846204}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.952] SetErrorMode (uMode=0x0) returned 0x1 [0152.953] GetFileType (hFile=0x230) returned 0x1 [0152.953] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.974] SetErrorMode (uMode=0x1) returned 0x0 [0152.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11E71674-7556-4E27-8D59-03B2FA846204}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11e71674-7556-4e27-8d59-03b2fa846204}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d662b8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x14d662b8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5da094ff, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x417)) returned 1 [0152.974] SetErrorMode (uMode=0x0) returned 0x1 [0152.975] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11E71674-7556-4E27-8D59-03B2FA846204}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11e71674-7556-4e27-8d59-03b2fa846204}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{11E71674-7556-4E27-8D59-03B2FA846204}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{11e71674-7556-4e27-8d59-03b2fa846204}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.978] SetErrorMode (uMode=0x1) returned 0x0 [0152.978] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.980] SetErrorMode (uMode=0x0) returned 0x1 [0152.980] GetFileType (hFile=0x230) returned 0x1 [0152.980] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.982] SetErrorMode (uMode=0x1) returned 0x0 [0152.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1503b0bd, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1503b0bd, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5da3082e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x391)) returned 1 [0152.982] SetErrorMode (uMode=0x0) returned 0x1 [0152.982] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1206f5f1-0569-412c-8fec-3204630dfb70}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.985] SetErrorMode (uMode=0x1) returned 0x0 [0152.985] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{12BBBD91-8E16-4C3F-9715-16E5C8299244}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{12bbbd91-8e16-4c3f-9715-16e5c8299244}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.987] SetErrorMode (uMode=0x0) returned 0x1 [0152.987] GetFileType (hFile=0x230) returned 0x1 [0152.987] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0152.989] SetErrorMode (uMode=0x1) returned 0x0 [0152.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{12BBBD91-8E16-4C3F-9715-16E5C8299244}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{12bbbd91-8e16-4c3f-9715-16e5c8299244}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15204cfd, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x15204cfd, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5da3082e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48c)) returned 1 [0152.989] SetErrorMode (uMode=0x0) returned 0x1 [0152.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{12BBBD91-8E16-4C3F-9715-16E5C8299244}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{12bbbd91-8e16-4c3f-9715-16e5c8299244}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{12BBBD91-8E16-4C3F-9715-16E5C8299244}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{12bbbd91-8e16-4c3f-9715-16e5c8299244}.settingcontent-ms.partially.cryptonar")) returned 1 [0152.992] SetErrorMode (uMode=0x1) returned 0x0 [0152.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{141D98AD-3E07-4C44-A578-4DCA078286A4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{141d98ad-3e07-4c44-a578-4dca078286a4}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0152.995] SetErrorMode (uMode=0x0) returned 0x1 [0152.995] GetFileType (hFile=0x230) returned 0x1 [0152.995] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.010] SetErrorMode (uMode=0x1) returned 0x0 [0153.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{141D98AD-3E07-4C44-A578-4DCA078286A4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{141d98ad-3e07-4c44-a578-4dca078286a4}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15905b6b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x15905b6b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5da7bc32, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0153.010] SetErrorMode (uMode=0x0) returned 0x1 [0153.010] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{141D98AD-3E07-4C44-A578-4DCA078286A4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{141d98ad-3e07-4c44-a578-4dca078286a4}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{141D98AD-3E07-4C44-A578-4DCA078286A4}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{141d98ad-3e07-4c44-a578-4dca078286a4}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.012] SetErrorMode (uMode=0x1) returned 0x0 [0153.012] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{14DEC75C-D6CE-44A9-8349-AD0F46EF96BE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{14dec75c-d6ce-44a9-8349-ad0f46ef96be}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.014] SetErrorMode (uMode=0x0) returned 0x1 [0153.014] GetFileType (hFile=0x230) returned 0x1 [0153.014] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.042] SetErrorMode (uMode=0x1) returned 0x0 [0153.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{14DEC75C-D6CE-44A9-8349-AD0F46EF96BE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{14dec75c-d6ce-44a9-8349-ad0f46ef96be}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15acf834, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x15acf834, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dac80fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43e)) returned 1 [0153.042] SetErrorMode (uMode=0x0) returned 0x1 [0153.042] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{14DEC75C-D6CE-44A9-8349-AD0F46EF96BE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{14dec75c-d6ce-44a9-8349-ad0f46ef96be}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{14DEC75C-D6CE-44A9-8349-AD0F46EF96BE}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{14dec75c-d6ce-44a9-8349-ad0f46ef96be}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.044] SetErrorMode (uMode=0x1) returned 0x0 [0153.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1515BA81-68EB-4143-A29F-51A40A65DAE6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1515ba81-68eb-4143-a29f-51a40a65dae6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.046] SetErrorMode (uMode=0x0) returned 0x1 [0153.046] GetFileType (hFile=0x230) returned 0x1 [0153.046] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.048] SetErrorMode (uMode=0x1) returned 0x0 [0153.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1515BA81-68EB-4143-A29F-51A40A65DAE6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1515ba81-68eb-4143-a29f-51a40a65dae6}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x161d0526, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x161d0526, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dac80fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ad)) returned 1 [0153.048] SetErrorMode (uMode=0x0) returned 0x1 [0153.048] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1515BA81-68EB-4143-A29F-51A40A65DAE6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1515ba81-68eb-4143-a29f-51a40a65dae6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1515BA81-68EB-4143-A29F-51A40A65DAE6}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1515ba81-68eb-4143-a29f-51a40a65dae6}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.050] SetErrorMode (uMode=0x1) returned 0x0 [0153.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{16C327FA-D8A8-41C0-B022-64AC67715327}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{16c327fa-d8a8-41c0-b022-64ac67715327}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.052] SetErrorMode (uMode=0x0) returned 0x1 [0153.052] GetFileType (hFile=0x230) returned 0x1 [0153.052] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.054] SetErrorMode (uMode=0x1) returned 0x0 [0153.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{16C327FA-D8A8-41C0-B022-64AC67715327}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{16c327fa-d8a8-41c0-b022-64ac67715327}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16695077, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x16695077, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dac80fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39e)) returned 1 [0153.054] SetErrorMode (uMode=0x0) returned 0x1 [0153.054] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{16C327FA-D8A8-41C0-B022-64AC67715327}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{16c327fa-d8a8-41c0-b022-64ac67715327}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{16C327FA-D8A8-41C0-B022-64AC67715327}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{16c327fa-d8a8-41c0-b022-64ac67715327}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.066] SetErrorMode (uMode=0x1) returned 0x0 [0153.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17468BC4-3ACB-4D2A-98C2-B0B7B4EF29E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17468bc4-3acb-4d2a-98c2-b0b7b4ef29e6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.067] SetErrorMode (uMode=0x0) returned 0x1 [0153.067] GetFileType (hFile=0x230) returned 0x1 [0153.067] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.069] SetErrorMode (uMode=0x1) returned 0x0 [0153.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17468BC4-3ACB-4D2A-98C2-B0B7B4EF29E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17468bc4-3acb-4d2a-98c2-b0b7b4ef29e6}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x168129a9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x168129a9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5daee226, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d9)) returned 1 [0153.069] SetErrorMode (uMode=0x0) returned 0x1 [0153.069] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17468BC4-3ACB-4D2A-98C2-B0B7B4EF29E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17468bc4-3acb-4d2a-98c2-b0b7b4ef29e6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17468BC4-3ACB-4D2A-98C2-B0B7B4EF29E6}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17468bc4-3acb-4d2a-98c2-b0b7b4ef29e6}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.071] SetErrorMode (uMode=0x1) returned 0x0 [0153.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.073] SetErrorMode (uMode=0x0) returned 0x1 [0153.073] GetFileType (hFile=0x230) returned 0x1 [0153.073] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.074] SetErrorMode (uMode=0x1) returned 0x0 [0153.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16c3eb87, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x16c3eb87, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5db15cda, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x38e)) returned 1 [0153.074] SetErrorMode (uMode=0x0) returned 0x1 [0153.075] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{17cd9488-1228-4b2f-88ce-4298e93e0966}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.076] SetErrorMode (uMode=0x1) returned 0x0 [0153.076] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1845AA13-3644-4FBC-B766-EEEF29683256}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1845aa13-3644-4fbc-b766-eeef29683256}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.078] SetErrorMode (uMode=0x0) returned 0x1 [0153.078] GetFileType (hFile=0x230) returned 0x1 [0153.078] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.102] SetErrorMode (uMode=0x1) returned 0x0 [0153.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1845AA13-3644-4FBC-B766-EEEF29683256}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1845aa13-3644-4fbc-b766-eeef29683256}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17090e8a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x17090e8a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5db609e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0153.102] SetErrorMode (uMode=0x0) returned 0x1 [0153.103] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1845AA13-3644-4FBC-B766-EEEF29683256}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1845aa13-3644-4fbc-b766-eeef29683256}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1845AA13-3644-4FBC-B766-EEEF29683256}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1845aa13-3644-4fbc-b766-eeef29683256}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.104] SetErrorMode (uMode=0x1) returned 0x0 [0153.104] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1928DA28-C5A7-4F13-AF81-8238D57A793F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1928da28-c5a7-4f13-af81-8238d57a793f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.106] SetErrorMode (uMode=0x0) returned 0x1 [0153.106] GetFileType (hFile=0x230) returned 0x1 [0153.106] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.107] SetErrorMode (uMode=0x1) returned 0x0 [0153.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1928DA28-C5A7-4F13-AF81-8238D57A793F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1928da28-c5a7-4f13-af81-8238d57a793f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x171e8408, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x171e8408, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5db609e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0153.108] SetErrorMode (uMode=0x0) returned 0x1 [0153.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1928DA28-C5A7-4F13-AF81-8238D57A793F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1928da28-c5a7-4f13-af81-8238d57a793f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1928DA28-C5A7-4F13-AF81-8238D57A793F}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1928da28-c5a7-4f13-af81-8238d57a793f}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.109] SetErrorMode (uMode=0x1) returned 0x0 [0153.110] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.111] SetErrorMode (uMode=0x0) returned 0x1 [0153.111] GetFileType (hFile=0x230) returned 0x1 [0153.111] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.113] SetErrorMode (uMode=0x1) returned 0x0 [0153.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x177b80bd, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x177b80bd, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5db609e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x382)) returned 1 [0153.113] SetErrorMode (uMode=0x0) returned 0x1 [0153.113] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a4635ec-181d-45ae-b691-bc75bec02756}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.115] SetErrorMode (uMode=0x1) returned 0x0 [0153.115] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1A5712E4-AAD7-4717-B22A-CF0B8438E2E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a5712e4-aad7-4717-b22a-cf0b8438e2e6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.116] SetErrorMode (uMode=0x0) returned 0x1 [0153.116] GetFileType (hFile=0x230) returned 0x1 [0153.116] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.119] SetErrorMode (uMode=0x1) returned 0x0 [0153.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1A5712E4-AAD7-4717-B22A-CF0B8438E2E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a5712e4-aad7-4717-b22a-cf0b8438e2e6}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17d15437, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x17d15437, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5db86b97, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3df)) returned 1 [0153.119] SetErrorMode (uMode=0x0) returned 0x1 [0153.119] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1A5712E4-AAD7-4717-B22A-CF0B8438E2E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a5712e4-aad7-4717-b22a-cf0b8438e2e6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1A5712E4-AAD7-4717-B22A-CF0B8438E2E6}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1a5712e4-aad7-4717-b22a-cf0b8438e2e6}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.121] SetErrorMode (uMode=0x1) returned 0x0 [0153.122] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1BDB99DF-3832-49D6-9AE0-52105DB568DA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1bdb99df-3832-49d6-9ae0-52105db568da}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.123] SetErrorMode (uMode=0x0) returned 0x1 [0153.123] GetFileType (hFile=0x230) returned 0x1 [0153.123] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.125] SetErrorMode (uMode=0x1) returned 0x0 [0153.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1BDB99DF-3832-49D6-9AE0-52105DB568DA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1bdb99df-3832-49d6-9ae0-52105db568da}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f05378, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x17f05378, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5db86b97, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ca)) returned 1 [0153.125] SetErrorMode (uMode=0x0) returned 0x1 [0153.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1BDB99DF-3832-49D6-9AE0-52105DB568DA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1bdb99df-3832-49d6-9ae0-52105db568da}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1BDB99DF-3832-49D6-9AE0-52105DB568DA}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1bdb99df-3832-49d6-9ae0-52105db568da}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.128] SetErrorMode (uMode=0x1) returned 0x0 [0153.128] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1DD03EE3-FC46-456A-8632-B0717A9D497D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1dd03ee3-fc46-456a-8632-b0717a9d497d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.129] SetErrorMode (uMode=0x0) returned 0x1 [0153.129] GetFileType (hFile=0x230) returned 0x1 [0153.130] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.131] SetErrorMode (uMode=0x1) returned 0x0 [0153.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1DD03EE3-FC46-456A-8632-B0717A9D497D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1dd03ee3-fc46-456a-8632-b0717a9d497d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18082c79, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x18082c79, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5db86b97, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e1)) returned 1 [0153.132] SetErrorMode (uMode=0x0) returned 0x1 [0153.132] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1DD03EE3-FC46-456A-8632-B0717A9D497D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1dd03ee3-fc46-456a-8632-b0717a9d497d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{1DD03EE3-FC46-456A-8632-B0717A9D497D}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{1dd03ee3-fc46-456a-8632-b0717a9d497d}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.134] SetErrorMode (uMode=0x1) returned 0x0 [0153.134] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{201CEF4B-7444-4B2F-B885-5E8F0AA1D614}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{201cef4b-7444-4b2f-b885-5e8f0aa1d614}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.136] SetErrorMode (uMode=0x0) returned 0x1 [0153.136] GetFileType (hFile=0x230) returned 0x1 [0153.136] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.138] SetErrorMode (uMode=0x1) returned 0x0 [0153.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{201CEF4B-7444-4B2F-B885-5E8F0AA1D614}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{201cef4b-7444-4b2f-b885-5e8f0aa1d614}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18462817, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x18462817, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dbaf81c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b6)) returned 1 [0153.138] SetErrorMode (uMode=0x0) returned 0x1 [0153.138] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{201CEF4B-7444-4B2F-B885-5E8F0AA1D614}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{201cef4b-7444-4b2f-b885-5e8f0aa1d614}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{201CEF4B-7444-4B2F-B885-5E8F0AA1D614}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{201cef4b-7444-4b2f-b885-5e8f0aa1d614}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.140] SetErrorMode (uMode=0x1) returned 0x0 [0153.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{207D6BD2-A09B-406f-8A72-BC90C49FC152}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{207d6bd2-a09b-406f-8a72-bc90c49fc152}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.142] SetErrorMode (uMode=0x0) returned 0x1 [0153.142] GetFileType (hFile=0x230) returned 0x1 [0153.142] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.143] SetErrorMode (uMode=0x1) returned 0x0 [0153.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{207D6BD2-A09B-406f-8A72-BC90C49FC152}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{207d6bd2-a09b-406f-8a72-bc90c49fc152}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1936f75b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1936f75b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dbaf81c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5e8)) returned 1 [0153.143] SetErrorMode (uMode=0x0) returned 0x1 [0153.143] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{207D6BD2-A09B-406f-8A72-BC90C49FC152}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{207d6bd2-a09b-406f-8a72-bc90c49fc152}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{207D6BD2-A09B-406f-8A72-BC90C49FC152}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{207d6bd2-a09b-406f-8a72-bc90c49fc152}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.145] SetErrorMode (uMode=0x1) returned 0x0 [0153.145] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{21A5437E-D266-4F56-A146-06744A8BC071}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{21a5437e-d266-4f56-a146-06744a8bc071}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.147] SetErrorMode (uMode=0x0) returned 0x1 [0153.147] GetFileType (hFile=0x230) returned 0x1 [0153.147] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.149] SetErrorMode (uMode=0x1) returned 0x0 [0153.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{21A5437E-D266-4F56-A146-06744A8BC071}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{21a5437e-d266-4f56-a146-06744a8bc071}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1945444f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1945444f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dbd2f9f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0153.149] SetErrorMode (uMode=0x0) returned 0x1 [0153.149] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{21A5437E-D266-4F56-A146-06744A8BC071}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{21a5437e-d266-4f56-a146-06744a8bc071}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{21A5437E-D266-4F56-A146-06744A8BC071}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{21a5437e-d266-4f56-a146-06744a8bc071}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.151] SetErrorMode (uMode=0x1) returned 0x0 [0153.152] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{232A1851-808C-4B44-A92A-38E862989CE5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{232a1851-808c-4b44-a92a-38e862989ce5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.153] SetErrorMode (uMode=0x0) returned 0x1 [0153.153] GetFileType (hFile=0x230) returned 0x1 [0153.153] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.159] SetErrorMode (uMode=0x1) returned 0x0 [0153.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{232A1851-808C-4B44-A92A-38E862989CE5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{232a1851-808c-4b44-a92a-38e862989ce5}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x196908a6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x196908a6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dbd2f9f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x491)) returned 1 [0153.159] SetErrorMode (uMode=0x0) returned 0x1 [0153.160] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{232A1851-808C-4B44-A92A-38E862989CE5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{232a1851-808c-4b44-a92a-38e862989ce5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{232A1851-808C-4B44-A92A-38E862989CE5}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{232a1851-808c-4b44-a92a-38e862989ce5}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.162] SetErrorMode (uMode=0x1) returned 0x0 [0153.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{29B87534-19A8-4A39-AA81-2148E7DE5894}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{29b87534-19a8-4a39-aa81-2148e7de5894}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.163] SetErrorMode (uMode=0x0) returned 0x1 [0153.164] GetFileType (hFile=0x230) returned 0x1 [0153.164] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.174] SetErrorMode (uMode=0x1) returned 0x0 [0153.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{29B87534-19A8-4A39-AA81-2148E7DE5894}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{29b87534-19a8-4a39-aa81-2148e7de5894}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a24056, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19a24056, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dbf92bf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4be)) returned 1 [0153.174] SetErrorMode (uMode=0x0) returned 0x1 [0153.174] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{29B87534-19A8-4A39-AA81-2148E7DE5894}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{29b87534-19a8-4a39-aa81-2148e7de5894}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{29B87534-19A8-4A39-AA81-2148E7DE5894}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{29b87534-19a8-4a39-aa81-2148e7de5894}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.178] SetErrorMode (uMode=0x1) returned 0x0 [0153.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2B6FE85A-C7AA-440F-B9A3-3F5EDCA3F6C2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2b6fe85a-c7aa-440f-b9a3-3f5edca3f6c2}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.180] SetErrorMode (uMode=0x0) returned 0x1 [0153.180] GetFileType (hFile=0x230) returned 0x1 [0153.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.188] SetErrorMode (uMode=0x1) returned 0x0 [0153.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2B6FE85A-C7AA-440F-B9A3-3F5EDCA3F6C2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2b6fe85a-c7aa-440f-b9a3-3f5edca3f6c2}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19db785e, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19db785e, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dc21d55, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b1)) returned 1 [0153.189] SetErrorMode (uMode=0x0) returned 0x1 [0153.189] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2B6FE85A-C7AA-440F-B9A3-3F5EDCA3F6C2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2b6fe85a-c7aa-440f-b9a3-3f5edca3f6c2}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2B6FE85A-C7AA-440F-B9A3-3F5EDCA3F6C2}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2b6fe85a-c7aa-440f-b9a3-3f5edca3f6c2}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.194] SetErrorMode (uMode=0x1) returned 0x0 [0153.194] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2D06D17B-2A5F-4835-AF30-6D2D58A4A66C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2d06d17b-2a5f-4835-af30-6d2d58a4a66c}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.197] SetErrorMode (uMode=0x0) returned 0x1 [0153.197] GetFileType (hFile=0x230) returned 0x1 [0153.198] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.200] SetErrorMode (uMode=0x1) returned 0x0 [0153.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2D06D17B-2A5F-4835-AF30-6D2D58A4A66C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2d06d17b-2a5f-4835-af30-6d2d58a4a66c}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19f0edce, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x19f0edce, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dc49250, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d6)) returned 1 [0153.200] SetErrorMode (uMode=0x0) returned 0x1 [0153.200] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2D06D17B-2A5F-4835-AF30-6D2D58A4A66C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2d06d17b-2a5f-4835-af30-6d2d58a4a66c}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{2D06D17B-2A5F-4835-AF30-6D2D58A4A66C}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{2d06d17b-2a5f-4835-af30-6d2d58a4a66c}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.203] SetErrorMode (uMode=0x1) returned 0x0 [0153.203] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{30137454-0E1F-43bb-9CB8-AEF452964B0B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{30137454-0e1f-43bb-9cb8-aef452964b0b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.206] SetErrorMode (uMode=0x0) returned 0x1 [0153.206] GetFileType (hFile=0x230) returned 0x1 [0153.206] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.209] SetErrorMode (uMode=0x1) returned 0x0 [0153.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{30137454-0E1F-43bb-9CB8-AEF452964B0B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{30137454-0e1f-43bb-9cb8-aef452964b0b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a5c3774, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a5c3774, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dc49250, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a9)) returned 1 [0153.209] SetErrorMode (uMode=0x0) returned 0x1 [0153.209] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{30137454-0E1F-43bb-9CB8-AEF452964B0B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{30137454-0e1f-43bb-9cb8-aef452964b0b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{30137454-0E1F-43bb-9CB8-AEF452964B0B}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{30137454-0e1f-43bb-9cb8-aef452964b0b}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.212] SetErrorMode (uMode=0x1) returned 0x0 [0153.213] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{31DD3DA1-ED44-4BA8-A67B-6EA93DEA77E7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{31dd3da1-ed44-4ba8-a67b-6ea93dea77e7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.214] SetErrorMode (uMode=0x0) returned 0x1 [0153.214] GetFileType (hFile=0x230) returned 0x1 [0153.214] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.216] SetErrorMode (uMode=0x1) returned 0x0 [0153.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{31DD3DA1-ED44-4BA8-A67B-6EA93DEA77E7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{31dd3da1-ed44-4ba8-a67b-6ea93dea77e7}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a956fec, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1a956fec, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dc6d870, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x418)) returned 1 [0153.217] SetErrorMode (uMode=0x0) returned 0x1 [0153.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{31DD3DA1-ED44-4BA8-A67B-6EA93DEA77E7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{31dd3da1-ed44-4ba8-a67b-6ea93dea77e7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{31DD3DA1-ED44-4BA8-A67B-6EA93DEA77E7}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{31dd3da1-ed44-4ba8-a67b-6ea93dea77e7}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.220] SetErrorMode (uMode=0x1) returned 0x0 [0153.220] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33843DB0-24E7-4682-A019-5393D7F2BFFA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33843db0-24e7-4682-a019-5393d7f2bffa}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.222] SetErrorMode (uMode=0x0) returned 0x1 [0153.222] GetFileType (hFile=0x230) returned 0x1 [0153.222] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.224] SetErrorMode (uMode=0x1) returned 0x0 [0153.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33843DB0-24E7-4682-A019-5393D7F2BFFA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33843db0-24e7-4682-a019-5393d7f2bffa}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1acea87f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1acea87f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dc6d870, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39c)) returned 1 [0153.224] SetErrorMode (uMode=0x0) returned 0x1 [0153.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33843DB0-24E7-4682-A019-5393D7F2BFFA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33843db0-24e7-4682-a019-5393d7f2bffa}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33843DB0-24E7-4682-A019-5393D7F2BFFA}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33843db0-24e7-4682-a019-5393d7f2bffa}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.226] SetErrorMode (uMode=0x1) returned 0x0 [0153.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33F1F9B5-BD94-4D77-96AE-62F10E4A010A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33f1f9b5-bd94-4d77-96ae-62f10e4a010a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.228] SetErrorMode (uMode=0x0) returned 0x1 [0153.228] GetFileType (hFile=0x230) returned 0x1 [0153.229] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.232] SetErrorMode (uMode=0x1) returned 0x0 [0153.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33F1F9B5-BD94-4D77-96AE-62F10E4A010A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33f1f9b5-bd94-4d77-96ae-62f10e4a010a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ada95a4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1ada95a4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dc91c05, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3cd)) returned 1 [0153.232] SetErrorMode (uMode=0x0) returned 0x1 [0153.232] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33F1F9B5-BD94-4D77-96AE-62F10E4A010A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33f1f9b5-bd94-4d77-96ae-62f10e4a010a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{33F1F9B5-BD94-4D77-96AE-62F10E4A010A}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{33f1f9b5-bd94-4d77-96ae-62f10e4a010a}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.235] SetErrorMode (uMode=0x1) returned 0x0 [0153.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36C8B34B-83F9-4704-B817-9AB1A723705A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36c8b34b-83f9-4704-b817-9ab1a723705a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.237] SetErrorMode (uMode=0x0) returned 0x1 [0153.238] GetFileType (hFile=0x230) returned 0x1 [0153.238] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.242] SetErrorMode (uMode=0x1) returned 0x0 [0153.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36C8B34B-83F9-4704-B817-9AB1A723705A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36c8b34b-83f9-4704-b817-9ab1a723705a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b294390, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1b294390, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dc91c05, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x382)) returned 1 [0153.243] SetErrorMode (uMode=0x0) returned 0x1 [0153.243] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36C8B34B-83F9-4704-B817-9AB1A723705A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36c8b34b-83f9-4704-b817-9ab1a723705a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36C8B34B-83F9-4704-B817-9AB1A723705A}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36c8b34b-83f9-4704-b817-9ab1a723705a}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.247] SetErrorMode (uMode=0x1) returned 0x0 [0153.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.249] SetErrorMode (uMode=0x0) returned 0x1 [0153.249] GetFileType (hFile=0x230) returned 0x1 [0153.249] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.251] SetErrorMode (uMode=0x1) returned 0x0 [0153.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bb128a5, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1bb128a5, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dcc096a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a9)) returned 1 [0153.252] SetErrorMode (uMode=0x0) returned 0x1 [0153.252] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{36fb1658-3a23-4d62-9bfd-37f4b18a85e9}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.254] SetErrorMode (uMode=0x1) returned 0x0 [0153.254] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37092408-D49C-451D-B56D-78B243DC475C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37092408-d49c-451d-b56d-78b243dc475c}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.256] SetErrorMode (uMode=0x0) returned 0x1 [0153.256] GetFileType (hFile=0x230) returned 0x1 [0153.256] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.258] SetErrorMode (uMode=0x1) returned 0x0 [0153.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37092408-D49C-451D-B56D-78B243DC475C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37092408-d49c-451d-b56d-78b243dc475c}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c0bc1fc, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1c0bc1fc, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dcde03d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3bc)) returned 1 [0153.259] SetErrorMode (uMode=0x0) returned 0x1 [0153.259] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37092408-D49C-451D-B56D-78B243DC475C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37092408-d49c-451d-b56d-78b243dc475c}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37092408-D49C-451D-B56D-78B243DC475C}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37092408-d49c-451d-b56d-78b243dc475c}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.261] SetErrorMode (uMode=0x1) returned 0x0 [0153.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37C361D8-51CD-40fa-A797-8FC1EA28F9F4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37c361d8-51cd-40fa-a797-8fc1ea28f9f4}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.263] SetErrorMode (uMode=0x0) returned 0x1 [0153.263] GetFileType (hFile=0x230) returned 0x1 [0153.263] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.266] SetErrorMode (uMode=0x1) returned 0x0 [0153.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37C361D8-51CD-40fa-A797-8FC1EA28F9F4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37c361d8-51cd-40fa-a797-8fc1ea28f9f4}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c68bf08, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1c68bf08, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dcde03d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b2)) returned 1 [0153.266] SetErrorMode (uMode=0x0) returned 0x1 [0153.266] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37C361D8-51CD-40fa-A797-8FC1EA28F9F4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37c361d8-51cd-40fa-a797-8fc1ea28f9f4}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37C361D8-51CD-40fa-A797-8FC1EA28F9F4}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37c361d8-51cd-40fa-a797-8fc1ea28f9f4}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.271] SetErrorMode (uMode=0x1) returned 0x0 [0153.271] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37E2F32E-C821-4094-B429-2B4E8EA810AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37e2f32e-c821-4094-b429-2b4e8ea810aa}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.273] SetErrorMode (uMode=0x0) returned 0x1 [0153.273] GetFileType (hFile=0x230) returned 0x1 [0153.273] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.276] SetErrorMode (uMode=0x1) returned 0x0 [0153.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37E2F32E-C821-4094-B429-2B4E8EA810AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37e2f32e-c821-4094-b429-2b4e8ea810aa}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c9f93ed, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1c9f93ed, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dd04460, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x406)) returned 1 [0153.277] SetErrorMode (uMode=0x0) returned 0x1 [0153.277] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37E2F32E-C821-4094-B429-2B4E8EA810AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37e2f32e-c821-4094-b429-2b4e8ea810aa}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{37E2F32E-C821-4094-B429-2B4E8EA810AA}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{37e2f32e-c821-4094-b429-2b4e8ea810aa}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.278] SetErrorMode (uMode=0x1) returned 0x0 [0153.278] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.279] SetErrorMode (uMode=0x0) returned 0x1 [0153.280] GetFileType (hFile=0x230) returned 0x1 [0153.280] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.281] SetErrorMode (uMode=0x1) returned 0x0 [0153.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cbc3199, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1cbc3199, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dd04460, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x482)) returned 1 [0153.281] SetErrorMode (uMode=0x0) returned 0x1 [0153.281] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{38bd6d6e-bf78-4c31-b05a-7447ee37669f}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.283] SetErrorMode (uMode=0x1) returned 0x0 [0153.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3911D4F8-AD61-4911-A151-5682C26A7427}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3911d4f8-ad61-4911-a151-5682c26a7427}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.285] SetErrorMode (uMode=0x0) returned 0x1 [0153.285] GetFileType (hFile=0x230) returned 0x1 [0153.285] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.286] SetErrorMode (uMode=0x1) returned 0x0 [0153.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3911D4F8-AD61-4911-A151-5682C26A7427}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3911d4f8-ad61-4911-a151-5682c26a7427}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cdb307a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1cdb307a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dd04460, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x418)) returned 1 [0153.286] SetErrorMode (uMode=0x0) returned 0x1 [0153.286] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3911D4F8-AD61-4911-A151-5682C26A7427}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3911d4f8-ad61-4911-a151-5682c26a7427}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3911D4F8-AD61-4911-A151-5682C26A7427}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3911d4f8-ad61-4911-a151-5682c26a7427}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.289] SetErrorMode (uMode=0x1) returned 0x0 [0153.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A100872-EC27-46A5-BBCC-92C90635AE3B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a100872-ec27-46a5-bbcc-92c90635ae3b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.291] SetErrorMode (uMode=0x0) returned 0x1 [0153.291] GetFileType (hFile=0x230) returned 0x1 [0153.291] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.308] SetErrorMode (uMode=0x1) returned 0x0 [0153.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A100872-EC27-46A5-BBCC-92C90635AE3B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a100872-ec27-46a5-bbcc-92c90635ae3b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d146773, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d146773, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dd51438, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d2)) returned 1 [0153.308] SetErrorMode (uMode=0x0) returned 0x1 [0153.308] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A100872-EC27-46A5-BBCC-92C90635AE3B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a100872-ec27-46a5-bbcc-92c90635ae3b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A100872-EC27-46A5-BBCC-92C90635AE3B}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a100872-ec27-46a5-bbcc-92c90635ae3b}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.311] SetErrorMode (uMode=0x1) returned 0x0 [0153.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A4140C8-50D3-44E9-BF50-C878204DE0F5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a4140c8-50d3-44e9-bf50-c878204de0f5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.313] SetErrorMode (uMode=0x0) returned 0x1 [0153.313] GetFileType (hFile=0x230) returned 0x1 [0153.313] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.334] SetErrorMode (uMode=0x1) returned 0x0 [0153.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A4140C8-50D3-44E9-BF50-C878204DE0F5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a4140c8-50d3-44e9-bf50-c878204de0f5}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d8e0004, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1d8e0004, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dd76b4d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d9)) returned 1 [0153.335] SetErrorMode (uMode=0x0) returned 0x1 [0153.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A4140C8-50D3-44E9-BF50-C878204DE0F5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a4140c8-50d3-44e9-bf50-c878204de0f5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3A4140C8-50D3-44E9-BF50-C878204DE0F5}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3a4140c8-50d3-44e9-bf50-c878204de0f5}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.337] SetErrorMode (uMode=0x1) returned 0x0 [0153.337] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3F0AD6DB-3246-48E4-ACD7-696FF62AE68D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3f0ad6db-3246-48e4-acd7-696ff62ae68d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.339] SetErrorMode (uMode=0x0) returned 0x1 [0153.339] GetFileType (hFile=0x230) returned 0x1 [0153.339] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.355] SetErrorMode (uMode=0x1) returned 0x0 [0153.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3F0AD6DB-3246-48E4-ACD7-696FF62AE68D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3f0ad6db-3246-48e4-acd7-696ff62ae68d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1de3d4ad, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1de3d4ad, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ddc8916, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f3)) returned 1 [0153.355] SetErrorMode (uMode=0x0) returned 0x1 [0153.355] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3F0AD6DB-3246-48E4-ACD7-696FF62AE68D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3f0ad6db-3246-48e4-acd7-696ff62ae68d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{3F0AD6DB-3246-48E4-ACD7-696FF62AE68D}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{3f0ad6db-3246-48e4-acd7-696ff62ae68d}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.358] SetErrorMode (uMode=0x1) returned 0x0 [0153.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.359] SetErrorMode (uMode=0x0) returned 0x1 [0153.359] GetFileType (hFile=0x230) returned 0x1 [0153.359] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.365] SetErrorMode (uMode=0x1) returned 0x0 [0153.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e6959bf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1e6959bf, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ddc8916, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x498)) returned 1 [0153.366] SetErrorMode (uMode=0x0) returned 0x1 [0153.366] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4026492f-2f69-46b8-b9bf-5654fc07e423}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.368] SetErrorMode (uMode=0x1) returned 0x0 [0153.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.370] SetErrorMode (uMode=0x0) returned 0x1 [0153.370] GetFileType (hFile=0x230) returned 0x1 [0153.370] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.373] SetErrorMode (uMode=0x1) returned 0x0 [0153.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ee08df7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1ee08df7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ddea13f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39b)) returned 1 [0153.373] SetErrorMode (uMode=0x0) returned 0x1 [0153.374] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{40419485-c444-4567-851a-2dd7bfa1684d}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.376] SetErrorMode (uMode=0x1) returned 0x0 [0153.376] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{420C524A-2A76-43F7-B1B2-C3CF736557C7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{420c524a-2a76-43f7-b1b2-c3cf736557c7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.378] SetErrorMode (uMode=0x0) returned 0x1 [0153.378] GetFileType (hFile=0x230) returned 0x1 [0153.378] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.379] SetErrorMode (uMode=0x1) returned 0x0 [0153.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{420C524A-2A76-43F7-B1B2-C3CF736557C7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{420c524a-2a76-43f7-b1b2-c3cf736557c7}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2f3bb0, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1f2f3bb0, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ddea13f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45c)) returned 1 [0153.380] SetErrorMode (uMode=0x0) returned 0x1 [0153.380] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{420C524A-2A76-43F7-B1B2-C3CF736557C7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{420c524a-2a76-43f7-b1b2-c3cf736557c7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{420C524A-2A76-43F7-B1B2-C3CF736557C7}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{420c524a-2a76-43f7-b1b2-c3cf736557c7}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.382] SetErrorMode (uMode=0x1) returned 0x0 [0153.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4228F99D-227F-4058-9EA3-BB2B616D7444}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4228f99d-227f-4058-9ea3-bb2b616d7444}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.384] SetErrorMode (uMode=0x0) returned 0x1 [0153.384] GetFileType (hFile=0x230) returned 0x1 [0153.384] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.401] SetErrorMode (uMode=0x1) returned 0x0 [0153.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4228F99D-227F-4058-9EA3-BB2B616D7444}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4228f99d-227f-4058-9ea3-bb2b616d7444}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fcefb3c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x1fcefb3c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5de362ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0153.402] SetErrorMode (uMode=0x0) returned 0x1 [0153.402] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4228F99D-227F-4058-9EA3-BB2B616D7444}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4228f99d-227f-4058-9ea3-bb2b616d7444}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4228F99D-227F-4058-9EA3-BB2B616D7444}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4228f99d-227f-4058-9ea3-bb2b616d7444}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.405] SetErrorMode (uMode=0x1) returned 0x0 [0153.405] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{45FDB5DF-1457-4A41-A824-7AD9C75767BC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{45fdb5df-1457-4a41-a824-7ad9c75767bc}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.406] SetErrorMode (uMode=0x0) returned 0x1 [0153.406] GetFileType (hFile=0x230) returned 0x1 [0153.407] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.412] SetErrorMode (uMode=0x1) returned 0x0 [0153.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{45FDB5DF-1457-4A41-A824-7AD9C75767BC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{45fdb5df-1457-4a41-a824-7ad9c75767bc}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2088f15b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2088f15b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5de362ba, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e8)) returned 1 [0153.412] SetErrorMode (uMode=0x0) returned 0x1 [0153.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{45FDB5DF-1457-4A41-A824-7AD9C75767BC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{45fdb5df-1457-4a41-a824-7ad9c75767bc}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{45FDB5DF-1457-4A41-A824-7AD9C75767BC}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{45fdb5df-1457-4a41-a824-7ad9c75767bc}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.415] SetErrorMode (uMode=0x1) returned 0x0 [0153.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{46E84184-51CC-4A7B-A40A-6D3E86D402DE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{46e84184-51cc-4a7b-a40a-6d3e86d402de}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.416] SetErrorMode (uMode=0x0) returned 0x1 [0153.416] GetFileType (hFile=0x230) returned 0x1 [0153.416] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.418] SetErrorMode (uMode=0x1) returned 0x0 [0153.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{46E84184-51CC-4A7B-A40A-6D3E86D402DE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{46e84184-51cc-4a7b-a40a-6d3e86d402de}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x219fe69a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x219fe69a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5de5be31, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ef)) returned 1 [0153.418] SetErrorMode (uMode=0x0) returned 0x1 [0153.418] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{46E84184-51CC-4A7B-A40A-6D3E86D402DE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{46e84184-51cc-4a7b-a40a-6d3e86d402de}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{46E84184-51CC-4A7B-A40A-6D3E86D402DE}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{46e84184-51cc-4a7b-a40a-6d3e86d402de}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.420] SetErrorMode (uMode=0x1) returned 0x0 [0153.420] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4A2F952E-0618-467F-ADC5-FEBB66AEB82F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4a2f952e-0618-467f-adc5-febb66aeb82f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.421] SetErrorMode (uMode=0x0) returned 0x1 [0153.421] GetFileType (hFile=0x230) returned 0x1 [0153.424] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.426] SetErrorMode (uMode=0x1) returned 0x0 [0153.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4A2F952E-0618-467F-ADC5-FEBB66AEB82F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4a2f952e-0618-467f-adc5-febb66aeb82f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21ff4349, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x21ff4349, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5de5be31, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c9)) returned 1 [0153.427] SetErrorMode (uMode=0x0) returned 0x1 [0153.427] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4A2F952E-0618-467F-ADC5-FEBB66AEB82F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4a2f952e-0618-467f-adc5-febb66aeb82f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4A2F952E-0618-467F-ADC5-FEBB66AEB82F}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4a2f952e-0618-467f-adc5-febb66aeb82f}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.429] SetErrorMode (uMode=0x1) returned 0x0 [0153.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4BCD16D0-BA72-4F0D-88F9-50D912BFA2B2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4bcd16d0-ba72-4f0d-88f9-50d912bfa2b2}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.431] SetErrorMode (uMode=0x0) returned 0x1 [0153.431] GetFileType (hFile=0x230) returned 0x1 [0153.431] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.448] SetErrorMode (uMode=0x1) returned 0x0 [0153.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4BCD16D0-BA72-4F0D-88F9-50D912BFA2B2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4bcd16d0-ba72-4f0d-88f9-50d912bfa2b2}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22df60b3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x22df60b3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dea7f3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45c)) returned 1 [0153.448] SetErrorMode (uMode=0x0) returned 0x1 [0153.448] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4BCD16D0-BA72-4F0D-88F9-50D912BFA2B2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4bcd16d0-ba72-4f0d-88f9-50d912bfa2b2}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4BCD16D0-BA72-4F0D-88F9-50D912BFA2B2}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4bcd16d0-ba72-4f0d-88f9-50d912bfa2b2}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.451] SetErrorMode (uMode=0x1) returned 0x0 [0153.451] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4F9B0706-0A8F-45B0-BFA6-C66CD45246D7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4f9b0706-0a8f-45b0-bfa6-c66cd45246d7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.453] SetErrorMode (uMode=0x0) returned 0x1 [0153.453] GetFileType (hFile=0x230) returned 0x1 [0153.453] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.455] SetErrorMode (uMode=0x1) returned 0x0 [0153.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4F9B0706-0A8F-45B0-BFA6-C66CD45246D7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4f9b0706-0a8f-45b0-bfa6-c66cd45246d7}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x231d5f6e, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x231d5f6e, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dea7f3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39e)) returned 1 [0153.456] SetErrorMode (uMode=0x0) returned 0x1 [0153.456] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4F9B0706-0A8F-45B0-BFA6-C66CD45246D7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4f9b0706-0a8f-45b0-bfa6-c66cd45246d7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{4F9B0706-0A8F-45B0-BFA6-C66CD45246D7}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{4f9b0706-0a8f-45b0-bfa6-c66cd45246d7}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.458] SetErrorMode (uMode=0x1) returned 0x0 [0153.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{50DF4F13-4188-49C3-B2FB-A76404DC0ACF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{50df4f13-4188-49c3-b2fb-a76404dc0acf}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.460] SetErrorMode (uMode=0x0) returned 0x1 [0153.460] GetFileType (hFile=0x230) returned 0x1 [0153.460] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.462] SetErrorMode (uMode=0x1) returned 0x0 [0153.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{50DF4F13-4188-49C3-B2FB-A76404DC0ACF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{50df4f13-4188-49c3-b2fb-a76404dc0acf}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2351d25a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2351d25a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dece8f4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3df)) returned 1 [0153.463] SetErrorMode (uMode=0x0) returned 0x1 [0153.463] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{50DF4F13-4188-49C3-B2FB-A76404DC0ACF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{50df4f13-4188-49c3-b2fb-a76404dc0acf}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{50DF4F13-4188-49C3-B2FB-A76404DC0ACF}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{50df4f13-4188-49c3-b2fb-a76404dc0acf}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.465] SetErrorMode (uMode=0x1) returned 0x0 [0153.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5163E94E-4C07-420B-B173-320232B8AFB7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5163e94e-4c07-420b-b173-320232b8afb7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.467] SetErrorMode (uMode=0x0) returned 0x1 [0153.467] GetFileType (hFile=0x230) returned 0x1 [0153.467] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.469] SetErrorMode (uMode=0x1) returned 0x0 [0153.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5163E94E-4C07-420B-B173-320232B8AFB7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5163e94e-4c07-420b-b173-320232b8afb7}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x236c0da7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x236c0da7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dece8f4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x487)) returned 1 [0153.469] SetErrorMode (uMode=0x0) returned 0x1 [0153.469] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5163E94E-4C07-420B-B173-320232B8AFB7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5163e94e-4c07-420b-b173-320232b8afb7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5163E94E-4C07-420B-B173-320232B8AFB7}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5163e94e-4c07-420b-b173-320232b8afb7}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.471] SetErrorMode (uMode=0x1) returned 0x0 [0153.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{53440D79-CD2D-4013-B192-D478AE882E53}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{53440d79-cd2d-4013-b192-d478ae882e53}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.473] SetErrorMode (uMode=0x0) returned 0x1 [0153.473] GetFileType (hFile=0x230) returned 0x1 [0153.473] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.476] SetErrorMode (uMode=0x1) returned 0x0 [0153.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{53440D79-CD2D-4013-B192-D478AE882E53}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{53440d79-cd2d-4013-b192-d478ae882e53}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23c907a3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x23c907a3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dece8f4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ae)) returned 1 [0153.476] SetErrorMode (uMode=0x0) returned 0x1 [0153.476] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{53440D79-CD2D-4013-B192-D478AE882E53}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{53440d79-cd2d-4013-b192-d478ae882e53}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{53440D79-CD2D-4013-B192-D478AE882E53}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{53440d79-cd2d-4013-b192-d478ae882e53}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.479] SetErrorMode (uMode=0x1) returned 0x0 [0153.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54692DB7-FC98-4D5E-AC15-CC5095FA5669}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54692db7-fc98-4d5e-ac15-cc5095fa5669}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.480] SetErrorMode (uMode=0x0) returned 0x1 [0153.480] GetFileType (hFile=0x230) returned 0x1 [0153.480] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.500] SetErrorMode (uMode=0x1) returned 0x0 [0153.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54692DB7-FC98-4D5E-AC15-CC5095FA5669}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54692db7-fc98-4d5e-ac15-cc5095fa5669}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x241c7a24, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x241c7a24, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5df1b14f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40c)) returned 1 [0153.500] SetErrorMode (uMode=0x0) returned 0x1 [0153.501] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54692DB7-FC98-4D5E-AC15-CC5095FA5669}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54692db7-fc98-4d5e-ac15-cc5095fa5669}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54692DB7-FC98-4D5E-AC15-CC5095FA5669}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54692db7-fc98-4d5e-ac15-cc5095fa5669}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.503] SetErrorMode (uMode=0x1) returned 0x0 [0153.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54D8069E-E75A-4437-B45B-8EB3B8C97434}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54d8069e-e75a-4437-b45b-8eb3b8c97434}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.505] SetErrorMode (uMode=0x0) returned 0x1 [0153.505] GetFileType (hFile=0x230) returned 0x1 [0153.505] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.507] SetErrorMode (uMode=0x1) returned 0x0 [0153.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54D8069E-E75A-4437-B45B-8EB3B8C97434}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54d8069e-e75a-4437-b45b-8eb3b8c97434}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x243ddbd1, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x243ddbd1, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5df1b14f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f6)) returned 1 [0153.507] SetErrorMode (uMode=0x0) returned 0x1 [0153.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54D8069E-E75A-4437-B45B-8EB3B8C97434}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54d8069e-e75a-4437-b45b-8eb3b8c97434}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{54D8069E-E75A-4437-B45B-8EB3B8C97434}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{54d8069e-e75a-4437-b45b-8eb3b8c97434}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.511] SetErrorMode (uMode=0x1) returned 0x0 [0153.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5530E8CC-1B9E-4798-A880-BA719ADFBBBD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5530e8cc-1b9e-4798-a880-ba719adfbbbd}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.513] SetErrorMode (uMode=0x0) returned 0x1 [0153.513] GetFileType (hFile=0x230) returned 0x1 [0153.513] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.515] SetErrorMode (uMode=0x1) returned 0x0 [0153.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5530E8CC-1B9E-4798-A880-BA719ADFBBBD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5530e8cc-1b9e-4798-a880-ba719adfbbbd}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24a6c2b4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x24a6c2b4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5df40847, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x390)) returned 1 [0153.515] SetErrorMode (uMode=0x0) returned 0x1 [0153.515] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5530E8CC-1B9E-4798-A880-BA719ADFBBBD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5530e8cc-1b9e-4798-a880-ba719adfbbbd}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5530E8CC-1B9E-4798-A880-BA719ADFBBBD}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5530e8cc-1b9e-4798-a880-ba719adfbbbd}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.519] SetErrorMode (uMode=0x1) returned 0x0 [0153.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{55E51B6E-7D17-4C80-859E-3007A1F2B6AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{55e51b6e-7d17-4c80-859e-3007a1f2b6aa}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.521] SetErrorMode (uMode=0x0) returned 0x1 [0153.521] GetFileType (hFile=0x230) returned 0x1 [0153.521] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.531] SetErrorMode (uMode=0x1) returned 0x0 [0153.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{55E51B6E-7D17-4C80-859E-3007A1F2B6AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{55e51b6e-7d17-4c80-859e-3007a1f2b6aa}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c0fdf8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x24c0fdf8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5df768db, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0153.532] SetErrorMode (uMode=0x0) returned 0x1 [0153.532] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{55E51B6E-7D17-4C80-859E-3007A1F2B6AA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{55e51b6e-7d17-4c80-859e-3007a1f2b6aa}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{55E51B6E-7D17-4C80-859E-3007A1F2B6AA}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{55e51b6e-7d17-4c80-859e-3007a1f2b6aa}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.534] SetErrorMode (uMode=0x1) returned 0x0 [0153.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.535] SetErrorMode (uMode=0x0) returned 0x1 [0153.535] GetFileType (hFile=0x230) returned 0x1 [0153.535] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.541] SetErrorMode (uMode=0x1) returned 0x0 [0153.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x251b9644, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x251b9644, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5df8cb90, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ad)) returned 1 [0153.541] SetErrorMode (uMode=0x0) returned 0x1 [0153.541] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{58e3c745-d971-4081-9034-86e34b30836a}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.543] SetErrorMode (uMode=0x1) returned 0x0 [0153.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5902614C-D9C7-4902-9F7F-BAF85454D0B2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5902614c-d9c7-4902-9f7f-baf85454d0b2}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.545] SetErrorMode (uMode=0x0) returned 0x1 [0153.545] GetFileType (hFile=0x230) returned 0x1 [0153.545] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.558] SetErrorMode (uMode=0x1) returned 0x0 [0153.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5902614C-D9C7-4902-9F7F-BAF85454D0B2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5902614c-d9c7-4902-9f7f-baf85454d0b2}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25631ccd, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x25631ccd, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dfb2e7c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c6)) returned 1 [0153.558] SetErrorMode (uMode=0x0) returned 0x1 [0153.558] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5902614C-D9C7-4902-9F7F-BAF85454D0B2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5902614c-d9c7-4902-9f7f-baf85454d0b2}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5902614C-D9C7-4902-9F7F-BAF85454D0B2}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5902614c-d9c7-4902-9f7f-baf85454d0b2}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.560] SetErrorMode (uMode=0x1) returned 0x0 [0153.560] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5A2C0E5E-5974-4E44-B4C6-AD4C2B6BAF53}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5a2c0e5e-5974-4e44-b4c6-ad4c2b6baf53}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.562] SetErrorMode (uMode=0x0) returned 0x1 [0153.562] GetFileType (hFile=0x230) returned 0x1 [0153.562] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.564] SetErrorMode (uMode=0x1) returned 0x0 [0153.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5A2C0E5E-5974-4E44-B4C6-AD4C2B6BAF53}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5a2c0e5e-5974-4e44-b4c6-ad4c2b6baf53}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25789263, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x25789263, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dfb2e7c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42b)) returned 1 [0153.564] SetErrorMode (uMode=0x0) returned 0x1 [0153.564] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5A2C0E5E-5974-4E44-B4C6-AD4C2B6BAF53}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5a2c0e5e-5974-4e44-b4c6-ad4c2b6baf53}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5A2C0E5E-5974-4E44-B4C6-AD4C2B6BAF53}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5a2c0e5e-5974-4e44-b4c6-ad4c2b6baf53}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.566] SetErrorMode (uMode=0x1) returned 0x0 [0153.566] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5BB16858-F647-465E-BCFD-010EE9DD41B7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5bb16858-f647-465e-bcfd-010ee9dd41b7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.568] SetErrorMode (uMode=0x0) returned 0x1 [0153.568] GetFileType (hFile=0x230) returned 0x1 [0153.568] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.570] SetErrorMode (uMode=0x1) returned 0x0 [0153.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5BB16858-F647-465E-BCFD-010EE9DD41B7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5bb16858-f647-465e-bcfd-010ee9dd41b7}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x260ec7b2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x260ec7b2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dfb2e7c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3dc)) returned 1 [0153.570] SetErrorMode (uMode=0x0) returned 0x1 [0153.570] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5BB16858-F647-465E-BCFD-010EE9DD41B7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5bb16858-f647-465e-bcfd-010ee9dd41b7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5BB16858-F647-465E-BCFD-010EE9DD41B7}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5bb16858-f647-465e-bcfd-010ee9dd41b7}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.572] SetErrorMode (uMode=0x1) returned 0x0 [0153.573] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D461B44-2753-4DD7-B2C0-BAB71B1F4C1A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d461b44-2753-4dd7-b2c0-bab71b1f4c1a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.574] SetErrorMode (uMode=0x0) returned 0x1 [0153.574] GetFileType (hFile=0x230) returned 0x1 [0153.574] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.576] SetErrorMode (uMode=0x1) returned 0x0 [0153.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D461B44-2753-4DD7-B2C0-BAB71B1F4C1A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d461b44-2753-4dd7-b2c0-bab71b1f4c1a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26754bc9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x26754bc9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dfd8f3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e6)) returned 1 [0153.576] SetErrorMode (uMode=0x0) returned 0x1 [0153.576] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D461B44-2753-4DD7-B2C0-BAB71B1F4C1A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d461b44-2753-4dd7-b2c0-bab71b1f4c1a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D461B44-2753-4DD7-B2C0-BAB71B1F4C1A}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d461b44-2753-4dd7-b2c0-bab71b1f4c1a}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.578] SetErrorMode (uMode=0x1) returned 0x0 [0153.578] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D611F64-7985-459B-BDFF-AEC069CB2625}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d611f64-7985-459b-bdff-aec069cb2625}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.579] SetErrorMode (uMode=0x0) returned 0x1 [0153.579] GetFileType (hFile=0x230) returned 0x1 [0153.579] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.581] SetErrorMode (uMode=0x1) returned 0x0 [0153.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D611F64-7985-459B-BDFF-AEC069CB2625}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d611f64-7985-459b-bdff-aec069cb2625}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26944a94, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x26944a94, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dfd8f3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x41f)) returned 1 [0153.581] SetErrorMode (uMode=0x0) returned 0x1 [0153.581] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D611F64-7985-459B-BDFF-AEC069CB2625}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d611f64-7985-459b-bdff-aec069cb2625}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5D611F64-7985-459B-BDFF-AEC069CB2625}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5d611f64-7985-459b-bdff-aec069cb2625}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.583] SetErrorMode (uMode=0x1) returned 0x0 [0153.583] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DD91132-02E8-43F6-88BD-E50B7BE2EF29}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5dd91132-02e8-43f6-88bd-e50b7be2ef29}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.585] SetErrorMode (uMode=0x0) returned 0x1 [0153.585] GetFileType (hFile=0x230) returned 0x1 [0153.585] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.587] SetErrorMode (uMode=0x1) returned 0x0 [0153.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DD91132-02E8-43F6-88BD-E50B7BE2EF29}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5dd91132-02e8-43f6-88bd-e50b7be2ef29}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26e7bcd7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x26e7bcd7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dfff2ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x416)) returned 1 [0153.587] SetErrorMode (uMode=0x0) returned 0x1 [0153.587] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DD91132-02E8-43F6-88BD-E50B7BE2EF29}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5dd91132-02e8-43f6-88bd-e50b7be2ef29}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DD91132-02E8-43F6-88BD-E50B7BE2EF29}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5dd91132-02e8-43f6-88bd-e50b7be2ef29}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.589] SetErrorMode (uMode=0x1) returned 0x0 [0153.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DE5B491-2CEA-4AD9-824A-982A22C0B64E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5de5b491-2cea-4ad9-824a-982a22c0b64e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.591] SetErrorMode (uMode=0x0) returned 0x1 [0153.591] GetFileType (hFile=0x230) returned 0x1 [0153.591] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.592] SetErrorMode (uMode=0x1) returned 0x0 [0153.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DE5B491-2CEA-4AD9-824A-982A22C0B64E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5de5b491-2cea-4ad9-824a-982a22c0b64e}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x277b8f82, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x277b8f82, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5dfff2ab, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c6)) returned 1 [0153.593] SetErrorMode (uMode=0x0) returned 0x1 [0153.593] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DE5B491-2CEA-4AD9-824A-982A22C0B64E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5de5b491-2cea-4ad9-824a-982a22c0b64e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5DE5B491-2CEA-4AD9-824A-982A22C0B64E}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5de5b491-2cea-4ad9-824a-982a22c0b64e}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.595] SetErrorMode (uMode=0x1) returned 0x0 [0153.595] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.596] SetErrorMode (uMode=0x0) returned 0x1 [0153.597] GetFileType (hFile=0x230) returned 0x1 [0153.597] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.603] SetErrorMode (uMode=0x1) returned 0x0 [0153.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x283cadb7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x283cadb7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e0254ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3bd)) returned 1 [0153.603] SetErrorMode (uMode=0x0) returned 0x1 [0153.604] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ea4f148-308c-46d7-98a9-49041b1dd468}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.605] SetErrorMode (uMode=0x1) returned 0x0 [0153.605] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5FFAA809-0961-40CF-90A4-58037867FA50}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ffaa809-0961-40cf-90a4-58037867fa50}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.607] SetErrorMode (uMode=0x0) returned 0x1 [0153.607] GetFileType (hFile=0x230) returned 0x1 [0153.607] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.619] SetErrorMode (uMode=0x1) returned 0x0 [0153.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5FFAA809-0961-40CF-90A4-58037867FA50}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ffaa809-0961-40cf-90a4-58037867fa50}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x288dbdd6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x288dbdd6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e04b767, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3df)) returned 1 [0153.619] SetErrorMode (uMode=0x0) returned 0x1 [0153.619] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5FFAA809-0961-40CF-90A4-58037867FA50}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ffaa809-0961-40cf-90a4-58037867fa50}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{5FFAA809-0961-40CF-90A4-58037867FA50}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{5ffaa809-0961-40cf-90a4-58037867fa50}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.622] SetErrorMode (uMode=0x1) returned 0x0 [0153.622] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60AC7FA0-A928-4D45-B4DD-AC70A6175E67}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60ac7fa0-a928-4d45-b4dd-ac70a6175e67}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.623] SetErrorMode (uMode=0x0) returned 0x1 [0153.623] GetFileType (hFile=0x230) returned 0x1 [0153.623] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.625] SetErrorMode (uMode=0x1) returned 0x0 [0153.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60AC7FA0-A928-4D45-B4DD-AC70A6175E67}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60ac7fa0-a928-4d45-b4dd-ac70a6175e67}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f1e0c2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x28f1e0c2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e04b767, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x431)) returned 1 [0153.625] SetErrorMode (uMode=0x0) returned 0x1 [0153.625] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60AC7FA0-A928-4D45-B4DD-AC70A6175E67}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60ac7fa0-a928-4d45-b4dd-ac70a6175e67}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60AC7FA0-A928-4D45-B4DD-AC70A6175E67}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60ac7fa0-a928-4d45-b4dd-ac70a6175e67}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.627] SetErrorMode (uMode=0x1) returned 0x0 [0153.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60C811E8-C857-404E-98BB-EE5D83C1DF5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60c811e8-c857-404e-98bb-ee5d83c1df5a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.629] SetErrorMode (uMode=0x0) returned 0x1 [0153.629] GetFileType (hFile=0x230) returned 0x1 [0153.629] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.639] SetErrorMode (uMode=0x1) returned 0x0 [0153.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60C811E8-C857-404E-98BB-EE5D83C1DF5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60c811e8-c857-404e-98bb-ee5d83c1df5a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a27d463, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a27d463, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e071910, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1 [0153.640] SetErrorMode (uMode=0x0) returned 0x1 [0153.640] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60C811E8-C857-404E-98BB-EE5D83C1DF5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60c811e8-c857-404e-98bb-ee5d83c1df5a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{60C811E8-C857-404E-98BB-EE5D83C1DF5A}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{60c811e8-c857-404e-98bb-ee5d83c1df5a}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.642] SetErrorMode (uMode=0x1) returned 0x0 [0153.642] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.644] SetErrorMode (uMode=0x0) returned 0x1 [0153.644] GetFileType (hFile=0x230) returned 0x1 [0153.644] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.646] SetErrorMode (uMode=0x1) returned 0x0 [0153.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a46d244, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a46d244, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e071910, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x38f)) returned 1 [0153.646] SetErrorMode (uMode=0x0) returned 0x1 [0153.646] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{62d8ed13-c9d0-4ce8-a914-47dd628fb1b0}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.649] SetErrorMode (uMode=0x1) returned 0x0 [0153.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.651] SetErrorMode (uMode=0x0) returned 0x1 [0153.651] GetFileType (hFile=0x230) returned 0x1 [0153.651] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.653] SetErrorMode (uMode=0x1) returned 0x0 [0153.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a71bca0, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2a71bca0, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e097d37, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fb)) returned 1 [0153.653] SetErrorMode (uMode=0x0) returned 0x1 [0153.653] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{638f8e21-e157-40d7-97e0-a0c8e4c4e2b5}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.655] SetErrorMode (uMode=0x1) returned 0x0 [0153.655] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{63929D0B-AAAC-4DCA-AE8A-222EC37F7A88}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{63929d0b-aaac-4dca-ae8a-222ec37f7a88}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.657] SetErrorMode (uMode=0x0) returned 0x1 [0153.657] GetFileType (hFile=0x230) returned 0x1 [0153.657] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.658] SetErrorMode (uMode=0x1) returned 0x0 [0153.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{63929D0B-AAAC-4DCA-AE8A-222EC37F7A88}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{63929d0b-aaac-4dca-ae8a-222ec37f7a88}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ae1cadf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2ae1cadf, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e097d37, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x421)) returned 1 [0153.659] SetErrorMode (uMode=0x0) returned 0x1 [0153.659] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{63929D0B-AAAC-4DCA-AE8A-222EC37F7A88}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{63929d0b-aaac-4dca-ae8a-222ec37f7a88}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{63929D0B-AAAC-4DCA-AE8A-222EC37F7A88}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{63929d0b-aaac-4dca-ae8a-222ec37f7a88}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.661] SetErrorMode (uMode=0x1) returned 0x0 [0153.661] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{641102EF-6463-46E9-842D-176013D7ACC8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{641102ef-6463-46e9-842d-176013d7acc8}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.662] SetErrorMode (uMode=0x0) returned 0x1 [0153.663] GetFileType (hFile=0x230) returned 0x1 [0153.663] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.684] SetErrorMode (uMode=0x1) returned 0x0 [0153.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{641102EF-6463-46E9-842D-176013D7ACC8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{641102ef-6463-46e9-842d-176013d7acc8}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b26f0c0, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2b26f0c0, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e0e4155, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x441)) returned 1 [0153.685] SetErrorMode (uMode=0x0) returned 0x1 [0153.685] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{641102EF-6463-46E9-842D-176013D7ACC8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{641102ef-6463-46e9-842d-176013d7acc8}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{641102EF-6463-46E9-842D-176013D7ACC8}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{641102ef-6463-46e9-842d-176013d7acc8}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.687] SetErrorMode (uMode=0x1) returned 0x0 [0153.688] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6775CCA4-CC42-44F7-800C-4E94FF1EA8C0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6775cca4-cc42-44f7-800c-4e94ff1ea8c0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.690] SetErrorMode (uMode=0x0) returned 0x1 [0153.690] GetFileType (hFile=0x230) returned 0x1 [0153.690] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.691] SetErrorMode (uMode=0x1) returned 0x0 [0153.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6775CCA4-CC42-44F7-800C-4E94FF1EA8C0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6775cca4-cc42-44f7-800c-4e94ff1ea8c0}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b4f7894, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2b4f7894, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e0e4155, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c6)) returned 1 [0153.692] SetErrorMode (uMode=0x0) returned 0x1 [0153.692] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6775CCA4-CC42-44F7-800C-4E94FF1EA8C0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6775cca4-cc42-44f7-800c-4e94ff1ea8c0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6775CCA4-CC42-44F7-800C-4E94FF1EA8C0}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6775cca4-cc42-44f7-800c-4e94ff1ea8c0}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.694] SetErrorMode (uMode=0x1) returned 0x0 [0153.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.696] SetErrorMode (uMode=0x0) returned 0x1 [0153.696] GetFileType (hFile=0x230) returned 0x1 [0153.696] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.698] SetErrorMode (uMode=0x1) returned 0x0 [0153.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ba08751, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2ba08751, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e10a73a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x453)) returned 1 [0153.698] SetErrorMode (uMode=0x0) returned 0x1 [0153.698] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{67ca7650-96e6-4fdd-bb43-a8e774f73a57}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.700] SetErrorMode (uMode=0x1) returned 0x0 [0153.700] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.703] SetErrorMode (uMode=0x0) returned 0x1 [0153.704] GetFileType (hFile=0x230) returned 0x1 [0153.704] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.706] SetErrorMode (uMode=0x1) returned 0x0 [0153.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb16d72, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2bb16d72, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e10a73a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45e)) returned 1 [0153.706] SetErrorMode (uMode=0x0) returned 0x1 [0153.707] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{685e7dc2-db57-4ed0-8b6d-5fe44d78d4f0}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.709] SetErrorMode (uMode=0x1) returned 0x0 [0153.709] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{68F4F33C-658C-4278-94C1-22B8E653F3E8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{68f4f33c-658c-4278-94c1-22b8e653f3e8}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.710] SetErrorMode (uMode=0x0) returned 0x1 [0153.710] GetFileType (hFile=0x230) returned 0x1 [0153.710] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.712] SetErrorMode (uMode=0x1) returned 0x0 [0153.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{68F4F33C-658C-4278-94C1-22B8E653F3E8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{68f4f33c-658c-4278-94c1-22b8e653f3e8}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c17bd42, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2c17bd42, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e1307ed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45a)) returned 1 [0153.713] SetErrorMode (uMode=0x0) returned 0x1 [0153.713] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{68F4F33C-658C-4278-94C1-22B8E653F3E8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{68f4f33c-658c-4278-94c1-22b8e653f3e8}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{68F4F33C-658C-4278-94C1-22B8E653F3E8}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{68f4f33c-658c-4278-94c1-22b8e653f3e8}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.716] SetErrorMode (uMode=0x1) returned 0x0 [0153.716] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF4-9060-469B-AB2E-948B6B68A883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef4-9060-469b-ab2e-948b6b68a883}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.719] SetErrorMode (uMode=0x0) returned 0x1 [0153.719] GetFileType (hFile=0x230) returned 0x1 [0153.719] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.721] SetErrorMode (uMode=0x1) returned 0x0 [0153.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF4-9060-469B-AB2E-948B6B68A883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef4-9060-469b-ab2e-948b6b68a883}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c5a8083, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2c5a8083, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e1307ed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39b)) returned 1 [0153.722] SetErrorMode (uMode=0x0) returned 0x1 [0153.722] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF4-9060-469B-AB2E-948B6B68A883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef4-9060-469b-ab2e-948b6b68a883}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF4-9060-469B-AB2E-948B6B68A883}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef4-9060-469b-ab2e-948b6b68a883}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.725] SetErrorMode (uMode=0x1) returned 0x0 [0153.725] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF5-9060-469B-AB2E-948B6B68A883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef5-9060-469b-ab2e-948b6b68a883}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.726] SetErrorMode (uMode=0x0) returned 0x1 [0153.726] GetFileType (hFile=0x230) returned 0x1 [0153.726] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.728] SetErrorMode (uMode=0x1) returned 0x0 [0153.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF5-9060-469B-AB2E-948B6B68A883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef5-9060-469b-ab2e-948b6b68a883}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cbc3fa4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2cbc3fa4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e1567c6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39d)) returned 1 [0153.729] SetErrorMode (uMode=0x0) returned 0x1 [0153.729] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF5-9060-469B-AB2E-948B6B68A883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef5-9060-469b-ab2e-948b6b68a883}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{693E4EF5-9060-469B-AB2E-948B6B68A883}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{693e4ef5-9060-469b-ab2e-948b6b68a883}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.731] SetErrorMode (uMode=0x1) returned 0x0 [0153.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6A10BC7B-2586-4B57-A5AA-C14BDE743DC4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6a10bc7b-2586-4b57-a5aa-c14bde743dc4}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.732] SetErrorMode (uMode=0x0) returned 0x1 [0153.732] GetFileType (hFile=0x230) returned 0x1 [0153.732] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.747] SetErrorMode (uMode=0x1) returned 0x0 [0153.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6A10BC7B-2586-4B57-A5AA-C14BDE743DC4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6a10bc7b-2586-4b57-a5aa-c14bde743dc4}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cd8dd88, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2cd8dd88, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e183540, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3bf)) returned 1 [0153.747] SetErrorMode (uMode=0x0) returned 0x1 [0153.747] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6A10BC7B-2586-4B57-A5AA-C14BDE743DC4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6a10bc7b-2586-4b57-a5aa-c14bde743dc4}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6A10BC7B-2586-4B57-A5AA-C14BDE743DC4}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6a10bc7b-2586-4b57-a5aa-c14bde743dc4}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.749] SetErrorMode (uMode=0x1) returned 0x0 [0153.749] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6AE88B06-50B2-46B0-93EA-4B5C73D3A0B5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ae88b06-50b2-46b0-93ea-4b5c73d3a0b5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.751] SetErrorMode (uMode=0x0) returned 0x1 [0153.751] GetFileType (hFile=0x230) returned 0x1 [0153.751] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.753] SetErrorMode (uMode=0x1) returned 0x0 [0153.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6AE88B06-50B2-46B0-93EA-4B5C73D3A0B5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ae88b06-50b2-46b0-93ea-4b5c73d3a0b5}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cebf07e, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2cebf07e, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e183540, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c1)) returned 1 [0153.753] SetErrorMode (uMode=0x0) returned 0x1 [0153.753] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6AE88B06-50B2-46B0-93EA-4B5C73D3A0B5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ae88b06-50b2-46b0-93ea-4b5c73d3a0b5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6AE88B06-50B2-46B0-93EA-4B5C73D3A0B5}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ae88b06-50b2-46b0-93ea-4b5c73d3a0b5}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.756] SetErrorMode (uMode=0x1) returned 0x0 [0153.756] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CA1F1CE-1FED-4D96-A82E-08CEDB139AA3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ca1f1ce-1fed-4d96-a82e-08cedb139aa3}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.757] SetErrorMode (uMode=0x0) returned 0x1 [0153.757] GetFileType (hFile=0x230) returned 0x1 [0153.757] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.777] SetErrorMode (uMode=0x1) returned 0x0 [0153.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CA1F1CE-1FED-4D96-A82E-08CEDB139AA3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ca1f1ce-1fed-4d96-a82e-08cedb139aa3}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d73d50b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d73d50b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e1c8fa7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e8)) returned 1 [0153.777] SetErrorMode (uMode=0x0) returned 0x1 [0153.777] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CA1F1CE-1FED-4D96-A82E-08CEDB139AA3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ca1f1ce-1fed-4d96-a82e-08cedb139aa3}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CA1F1CE-1FED-4D96-A82E-08CEDB139AA3}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6ca1f1ce-1fed-4d96-a82e-08cedb139aa3}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.779] SetErrorMode (uMode=0x1) returned 0x0 [0153.779] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CBA2898-2EFE-4604-9933-F1F64DAE2A32}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6cba2898-2efe-4604-9933-f1f64dae2a32}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.781] SetErrorMode (uMode=0x0) returned 0x1 [0153.781] GetFileType (hFile=0x230) returned 0x1 [0153.781] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.782] SetErrorMode (uMode=0x1) returned 0x0 [0153.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CBA2898-2EFE-4604-9933-F1F64DAE2A32}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6cba2898-2efe-4604-9933-f1f64dae2a32}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d8e10a3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2d8e10a3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e1c8fa7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b6)) returned 1 [0153.782] SetErrorMode (uMode=0x0) returned 0x1 [0153.783] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CBA2898-2EFE-4604-9933-F1F64DAE2A32}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6cba2898-2efe-4604-9933-f1f64dae2a32}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6CBA2898-2EFE-4604-9933-F1F64DAE2A32}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6cba2898-2efe-4604-9933-f1f64dae2a32}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.784] SetErrorMode (uMode=0x1) returned 0x0 [0153.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.786] SetErrorMode (uMode=0x0) returned 0x1 [0153.786] GetFileType (hFile=0x230) returned 0x1 [0153.786] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.787] SetErrorMode (uMode=0x1) returned 0x0 [0153.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd0d271, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2dd0d271, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e1c8fa7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x383)) returned 1 [0153.788] SetErrorMode (uMode=0x0) returned 0x1 [0153.788] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{6dfd7c5c-2451-11d3-a299-00c04f8ef6af}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.790] SetErrorMode (uMode=0x1) returned 0x0 [0153.790] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{71D0780F-10D2-459C-983B-94A642161220}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{71d0780f-10d2-459c-983b-94a642161220}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.791] SetErrorMode (uMode=0x0) returned 0x1 [0153.791] GetFileType (hFile=0x230) returned 0x1 [0153.791] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.804] SetErrorMode (uMode=0x1) returned 0x0 [0153.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{71D0780F-10D2-459C-983B-94A642161220}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{71d0780f-10d2-459c-983b-94a642161220}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dfe1f7a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2dfe1f7a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e1eff36, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3df)) returned 1 [0153.804] SetErrorMode (uMode=0x0) returned 0x1 [0153.805] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{71D0780F-10D2-459C-983B-94A642161220}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{71d0780f-10d2-459c-983b-94a642161220}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{71D0780F-10D2-459C-983B-94A642161220}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{71d0780f-10d2-459c-983b-94a642161220}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.817] SetErrorMode (uMode=0x1) returned 0x0 [0153.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.818] SetErrorMode (uMode=0x0) returned 0x1 [0153.818] GetFileType (hFile=0x230) returned 0x1 [0153.818] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.820] SetErrorMode (uMode=0x1) returned 0x0 [0153.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e2b6bf3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2e2b6bf3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e2152ed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x38c)) returned 1 [0153.820] SetErrorMode (uMode=0x0) returned 0x1 [0153.820] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{725be8f7-668e-4c7b-8f90-46bdb0936430}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.822] SetErrorMode (uMode=0x1) returned 0x0 [0153.822] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{73C9C58C-2E01-4F68-B1B9-7A4DD2EF71F7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{73c9c58c-2e01-4f68-b1b9-7a4dd2ef71f7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.824] SetErrorMode (uMode=0x0) returned 0x1 [0153.824] GetFileType (hFile=0x230) returned 0x1 [0153.824] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.825] SetErrorMode (uMode=0x1) returned 0x0 [0153.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{73C9C58C-2E01-4F68-B1B9-7A4DD2EF71F7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{73c9c58c-2e01-4f68-b1b9-7a4dd2ef71f7}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e5fdfb9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2e5fdfb9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e23b506, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a1)) returned 1 [0153.826] SetErrorMode (uMode=0x0) returned 0x1 [0153.826] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{73C9C58C-2E01-4F68-B1B9-7A4DD2EF71F7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{73c9c58c-2e01-4f68-b1b9-7a4dd2ef71f7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{73C9C58C-2E01-4F68-B1B9-7A4DD2EF71F7}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{73c9c58c-2e01-4f68-b1b9-7a4dd2ef71f7}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.828] SetErrorMode (uMode=0x1) returned 0x0 [0153.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7429F4F9-AE58-401a-82AD-723F3C6BDDD6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7429f4f9-ae58-401a-82ad-723f3c6bddd6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.829] SetErrorMode (uMode=0x0) returned 0x1 [0153.829] GetFileType (hFile=0x230) returned 0x1 [0153.829] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.831] SetErrorMode (uMode=0x1) returned 0x0 [0153.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7429F4F9-AE58-401a-82AD-723F3C6BDDD6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7429f4f9-ae58-401a-82ad-723f3c6bddd6}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eb815a2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2eb815a2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e23b506, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d3)) returned 1 [0153.831] SetErrorMode (uMode=0x0) returned 0x1 [0153.831] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7429F4F9-AE58-401a-82AD-723F3C6BDDD6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7429f4f9-ae58-401a-82ad-723f3c6bddd6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7429F4F9-AE58-401a-82AD-723F3C6BDDD6}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7429f4f9-ae58-401a-82ad-723f3c6bddd6}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.833] SetErrorMode (uMode=0x1) returned 0x0 [0153.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{75AC9145-7EC9-4883-82A7-AD3429020AA0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{75ac9145-7ec9-4883-82a7-ad3429020aa0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.835] SetErrorMode (uMode=0x0) returned 0x1 [0153.835] GetFileType (hFile=0x230) returned 0x1 [0153.835] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.837] SetErrorMode (uMode=0x1) returned 0x0 [0153.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{75AC9145-7EC9-4883-82A7-AD3429020AA0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{75ac9145-7ec9-4883-82a7-ad3429020aa0}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f092714, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2f092714, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e26176a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x425)) returned 1 [0153.837] SetErrorMode (uMode=0x0) returned 0x1 [0153.837] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{75AC9145-7EC9-4883-82A7-AD3429020AA0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{75ac9145-7ec9-4883-82a7-ad3429020aa0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{75AC9145-7EC9-4883-82A7-AD3429020AA0}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{75ac9145-7ec9-4883-82a7-ad3429020aa0}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.839] SetErrorMode (uMode=0x1) returned 0x0 [0153.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{76F31A78-3FDA-4F80-B015-95CFD81463AD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{76f31a78-3fda-4f80-b015-95cfd81463ad}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.840] SetErrorMode (uMode=0x0) returned 0x1 [0153.840] GetFileType (hFile=0x230) returned 0x1 [0153.840] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.842] SetErrorMode (uMode=0x1) returned 0x0 [0153.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{76F31A78-3FDA-4F80-B015-95CFD81463AD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{76f31a78-3fda-4f80-b015-95cfd81463ad}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3673f8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2f3673f8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e26176a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0153.842] SetErrorMode (uMode=0x0) returned 0x1 [0153.842] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{76F31A78-3FDA-4F80-B015-95CFD81463AD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{76f31a78-3fda-4f80-b015-95cfd81463ad}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{76F31A78-3FDA-4F80-B015-95CFD81463AD}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{76f31a78-3fda-4f80-b015-95cfd81463ad}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.844] SetErrorMode (uMode=0x1) returned 0x0 [0153.844] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.846] SetErrorMode (uMode=0x0) returned 0x1 [0153.846] GetFileType (hFile=0x230) returned 0x1 [0153.846] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.847] SetErrorMode (uMode=0x1) returned 0x0 [0153.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f615ccf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2f615ccf, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e26176a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46b)) returned 1 [0153.848] SetErrorMode (uMode=0x0) returned 0x1 [0153.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7a4d0c5d-51ad-443e-87c7-66b757586c56}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.850] SetErrorMode (uMode=0x1) returned 0x0 [0153.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7ABBE8E6-757F-419A-B2E0-07D5694F8E0F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7abbe8e6-757f-419a-b2e0-07d5694f8e0f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.852] SetErrorMode (uMode=0x0) returned 0x1 [0153.852] GetFileType (hFile=0x230) returned 0x1 [0153.852] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.853] SetErrorMode (uMode=0x1) returned 0x0 [0153.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7ABBE8E6-757F-419A-B2E0-07D5694F8E0F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7abbe8e6-757f-419a-b2e0-07d5694f8e0f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f98345f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2f98345f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e288ac7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0153.854] SetErrorMode (uMode=0x0) returned 0x1 [0153.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7ABBE8E6-757F-419A-B2E0-07D5694F8E0F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7abbe8e6-757f-419a-b2e0-07d5694f8e0f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7ABBE8E6-757F-419A-B2E0-07D5694F8E0F}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7abbe8e6-757f-419a-b2e0-07d5694f8e0f}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.856] SetErrorMode (uMode=0x1) returned 0x0 [0153.856] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7B086E4E-366C-454A-85CC-B8B533482B10}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7b086e4e-366c-454a-85cc-b8b533482b10}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.858] SetErrorMode (uMode=0x0) returned 0x1 [0153.858] GetFileType (hFile=0x230) returned 0x1 [0153.858] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.860] SetErrorMode (uMode=0x1) returned 0x0 [0153.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7B086E4E-366C-454A-85CC-B8B533482B10}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7b086e4e-366c-454a-85cc-b8b533482b10}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fdaf500, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x2fdaf500, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e288ac7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3db)) returned 1 [0153.860] SetErrorMode (uMode=0x0) returned 0x1 [0153.860] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7B086E4E-366C-454A-85CC-B8B533482B10}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7b086e4e-366c-454a-85cc-b8b533482b10}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7B086E4E-366C-454A-85CC-B8B533482B10}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7b086e4e-366c-454a-85cc-b8b533482b10}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.862] SetErrorMode (uMode=0x1) returned 0x0 [0153.863] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7C3E0552-96E2-4069-AC1C-208C146683CA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7c3e0552-96e2-4069-ac1c-208c146683ca}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.864] SetErrorMode (uMode=0x0) returned 0x1 [0153.864] GetFileType (hFile=0x230) returned 0x1 [0153.864] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.873] SetErrorMode (uMode=0x1) returned 0x0 [0153.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7C3E0552-96E2-4069-AC1C-208C146683CA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7c3e0552-96e2-4069-ac1c-208c146683ca}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3005df68, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3005df68, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e2add7b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49f)) returned 1 [0153.874] SetErrorMode (uMode=0x0) returned 0x1 [0153.874] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7C3E0552-96E2-4069-AC1C-208C146683CA}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7c3e0552-96e2-4069-ac1c-208c146683ca}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7C3E0552-96E2-4069-AC1C-208C146683CA}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7c3e0552-96e2-4069-ac1c-208c146683ca}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.876] SetErrorMode (uMode=0x1) returned 0x0 [0153.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7D13A5DB-6081-48BD-8EA3-A9D7FE67A335}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7d13a5db-6081-48bd-8ea3-a9d7fe67a335}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.877] SetErrorMode (uMode=0x0) returned 0x1 [0153.877] GetFileType (hFile=0x230) returned 0x1 [0153.878] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.879] SetErrorMode (uMode=0x1) returned 0x0 [0153.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7D13A5DB-6081-48BD-8EA3-A9D7FE67A335}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7d13a5db-6081-48bd-8ea3-a9d7fe67a335}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30417a4b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x30417a4b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e2add7b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e3)) returned 1 [0153.879] SetErrorMode (uMode=0x0) returned 0x1 [0153.879] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7D13A5DB-6081-48BD-8EA3-A9D7FE67A335}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7d13a5db-6081-48bd-8ea3-a9d7fe67a335}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7D13A5DB-6081-48BD-8EA3-A9D7FE67A335}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7d13a5db-6081-48bd-8ea3-a9d7fe67a335}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.881] SetErrorMode (uMode=0x1) returned 0x0 [0153.881] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7DE6CF7C-B699-421B-A808-139E798E6C64}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7de6cf7c-b699-421b-a808-139e798e6c64}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.883] SetErrorMode (uMode=0x0) returned 0x1 [0153.883] GetFileType (hFile=0x230) returned 0x1 [0153.884] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.885] SetErrorMode (uMode=0x1) returned 0x0 [0153.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7DE6CF7C-B699-421B-A808-139E798E6C64}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7de6cf7c-b699-421b-a808-139e798e6c64}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30738d68, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x30738d68, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e2d3f4a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x451)) returned 1 [0153.886] SetErrorMode (uMode=0x0) returned 0x1 [0153.886] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7DE6CF7C-B699-421B-A808-139E798E6C64}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7de6cf7c-b699-421b-a808-139e798e6c64}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7DE6CF7C-B699-421B-A808-139E798E6C64}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7de6cf7c-b699-421b-a808-139e798e6c64}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.888] SetErrorMode (uMode=0x1) returned 0x0 [0153.888] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7E5BC096-F558-419A-9326-BC6414D592C3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7e5bc096-f558-419a-9326-bc6414d592c3}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.890] SetErrorMode (uMode=0x0) returned 0x1 [0153.890] GetFileType (hFile=0x230) returned 0x1 [0153.890] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.892] SetErrorMode (uMode=0x1) returned 0x0 [0153.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7E5BC096-F558-419A-9326-BC6414D592C3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7e5bc096-f558-419a-9326-bc6414d592c3}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30af26b7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x30af26b7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e2d3f4a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fe)) returned 1 [0153.892] SetErrorMode (uMode=0x0) returned 0x1 [0153.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7E5BC096-F558-419A-9326-BC6414D592C3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7e5bc096-f558-419a-9326-bc6414d592c3}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7E5BC096-F558-419A-9326-BC6414D592C3}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7e5bc096-f558-419a-9326-bc6414d592c3}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.895] SetErrorMode (uMode=0x1) returned 0x0 [0153.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7F8B6C83-2A89-47A0-B334-AA58D042CDEC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7f8b6c83-2a89-47a0-b334-aa58d042cdec}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.896] SetErrorMode (uMode=0x0) returned 0x1 [0153.896] GetFileType (hFile=0x230) returned 0x1 [0153.896] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.898] SetErrorMode (uMode=0x1) returned 0x0 [0153.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7F8B6C83-2A89-47A0-B334-AA58D042CDEC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7f8b6c83-2a89-47a0-b334-aa58d042cdec}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30da1113, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x30da1113, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e2d3f4a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d7)) returned 1 [0153.898] SetErrorMode (uMode=0x0) returned 0x1 [0153.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7F8B6C83-2A89-47A0-B334-AA58D042CDEC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7f8b6c83-2a89-47a0-b334-aa58d042cdec}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{7F8B6C83-2A89-47A0-B334-AA58D042CDEC}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{7f8b6c83-2a89-47a0-b334-aa58d042cdec}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.900] SetErrorMode (uMode=0x1) returned 0x0 [0153.901] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8050502B-9B94-408C-BF49-D2D8887C1BCF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8050502b-9b94-408c-bf49-d2d8887c1bcf}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.902] SetErrorMode (uMode=0x0) returned 0x1 [0153.902] GetFileType (hFile=0x230) returned 0x1 [0153.902] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.914] SetErrorMode (uMode=0x1) returned 0x0 [0153.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8050502B-9B94-408C-BF49-D2D8887C1BCF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8050502b-9b94-408c-bf49-d2d8887c1bcf}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3104fb81, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3104fb81, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e3203f4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0153.915] SetErrorMode (uMode=0x0) returned 0x1 [0153.915] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8050502B-9B94-408C-BF49-D2D8887C1BCF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8050502b-9b94-408c-bf49-d2d8887c1bcf}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8050502B-9B94-408C-BF49-D2D8887C1BCF}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8050502b-9b94-408c-bf49-d2d8887c1bcf}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.917] SetErrorMode (uMode=0x1) returned 0x0 [0153.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.918] SetErrorMode (uMode=0x0) returned 0x1 [0153.918] GetFileType (hFile=0x230) returned 0x1 [0153.918] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.920] SetErrorMode (uMode=0x1) returned 0x0 [0153.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3153a938, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3153a938, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e3203f4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c2)) returned 1 [0153.920] SetErrorMode (uMode=0x0) returned 0x1 [0153.920] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{80f3f1d5-feca-45f3-bc32-752c152e456e}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.922] SetErrorMode (uMode=0x1) returned 0x0 [0153.922] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{821FB666-D307-4865-86BB-68725A30999C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{821fb666-d307-4865-86bb-68725a30999c}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.924] SetErrorMode (uMode=0x0) returned 0x1 [0153.924] GetFileType (hFile=0x230) returned 0x1 [0153.924] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.931] SetErrorMode (uMode=0x1) returned 0x0 [0153.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{821FB666-D307-4865-86BB-68725A30999C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{821fb666-d307-4865-86bb-68725a30999c}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x317e93ad, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x317e93ad, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e346628, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b6)) returned 1 [0153.931] SetErrorMode (uMode=0x0) returned 0x1 [0153.931] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{821FB666-D307-4865-86BB-68725A30999C}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{821fb666-d307-4865-86bb-68725a30999c}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{821FB666-D307-4865-86BB-68725A30999C}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{821fb666-d307-4865-86bb-68725a30999c}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.933] SetErrorMode (uMode=0x1) returned 0x0 [0153.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{84C9670E-825D-4128-B173-2963886C5A3E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{84c9670e-825d-4128-b173-2963886c5a3e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.935] SetErrorMode (uMode=0x0) returned 0x1 [0153.935] GetFileType (hFile=0x230) returned 0x1 [0153.935] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.937] SetErrorMode (uMode=0x1) returned 0x0 [0153.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{84C9670E-825D-4128-B173-2963886C5A3E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{84c9670e-825d-4128-b173-2963886c5a3e}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31a97e08, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x31a97e08, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e346628, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40f)) returned 1 [0153.937] SetErrorMode (uMode=0x0) returned 0x1 [0153.937] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{84C9670E-825D-4128-B173-2963886C5A3E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{84c9670e-825d-4128-b173-2963886c5a3e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{84C9670E-825D-4128-B173-2963886C5A3E}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{84c9670e-825d-4128-b173-2963886c5a3e}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.939] SetErrorMode (uMode=0x1) returned 0x0 [0153.939] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8562B9B8-812D-420C-9189-DC216D788A49}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8562b9b8-812d-420c-9189-dc216d788a49}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.940] SetErrorMode (uMode=0x0) returned 0x1 [0153.940] GetFileType (hFile=0x230) returned 0x1 [0153.940] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.969] SetErrorMode (uMode=0x1) returned 0x0 [0153.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8562B9B8-812D-420C-9189-DC216D788A49}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8562b9b8-812d-420c-9189-dc216d788a49}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31e77b4e, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x31e77b4e, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e392bd5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ba)) returned 1 [0153.969] SetErrorMode (uMode=0x0) returned 0x1 [0153.969] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8562B9B8-812D-420C-9189-DC216D788A49}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8562b9b8-812d-420c-9189-dc216d788a49}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8562B9B8-812D-420C-9189-DC216D788A49}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8562b9b8-812d-420c-9189-dc216d788a49}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.971] SetErrorMode (uMode=0x1) returned 0x0 [0153.971] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{875FE7D6-5BDF-496F-B349-91E5E3625B86}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{875fe7d6-5bdf-496f-b349-91e5e3625b86}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.973] SetErrorMode (uMode=0x0) returned 0x1 [0153.973] GetFileType (hFile=0x230) returned 0x1 [0153.973] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.993] SetErrorMode (uMode=0x1) returned 0x0 [0153.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{875FE7D6-5BDF-496F-B349-91E5E3625B86}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{875fe7d6-5bdf-496f-b349-91e5e3625b86}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32126607, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32126607, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e3defed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x418)) returned 1 [0153.993] SetErrorMode (uMode=0x0) returned 0x1 [0153.993] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{875FE7D6-5BDF-496F-B349-91E5E3625B86}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{875fe7d6-5bdf-496f-b349-91e5e3625b86}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{875FE7D6-5BDF-496F-B349-91E5E3625B86}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{875fe7d6-5bdf-496f-b349-91e5e3625b86}.settingcontent-ms.partially.cryptonar")) returned 1 [0153.996] SetErrorMode (uMode=0x1) returned 0x0 [0153.996] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0153.997] SetErrorMode (uMode=0x0) returned 0x1 [0153.997] GetFileType (hFile=0x230) returned 0x1 [0153.997] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0153.999] SetErrorMode (uMode=0x1) returned 0x0 [0153.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3259ed99, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3259ed99, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e3defed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e4)) returned 1 [0153.999] SetErrorMode (uMode=0x0) returned 0x1 [0154.000] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8774b87d-a2b4-49a0-8237-bfefd00646c2}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.002] SetErrorMode (uMode=0x1) returned 0x0 [0154.002] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87842A7E-D784-458d-BEF4-CFDC632DCF3E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87842a7e-d784-458d-bef4-cfdc632dcf3e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.004] SetErrorMode (uMode=0x0) returned 0x1 [0154.004] GetFileType (hFile=0x230) returned 0x1 [0154.004] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.005] SetErrorMode (uMode=0x1) returned 0x0 [0154.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87842A7E-D784-458d-BEF4-CFDC632DCF3E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87842a7e-d784-458d-bef4-cfdc632dcf3e}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3263773a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3263773a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e3defed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0154.006] SetErrorMode (uMode=0x0) returned 0x1 [0154.006] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87842A7E-D784-458d-BEF4-CFDC632DCF3E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87842a7e-d784-458d-bef4-cfdc632dcf3e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87842A7E-D784-458d-BEF4-CFDC632DCF3E}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87842a7e-d784-458d-bef4-cfdc632dcf3e}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.008] SetErrorMode (uMode=0x1) returned 0x0 [0154.009] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.010] SetErrorMode (uMode=0x0) returned 0x1 [0154.010] GetFileType (hFile=0x230) returned 0x1 [0154.010] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.012] SetErrorMode (uMode=0x1) returned 0x0 [0154.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x326d0076, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x326d0076, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e4058b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46b)) returned 1 [0154.012] SetErrorMode (uMode=0x0) returned 0x1 [0154.012] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{87d66a43-7b11-4a28-9811-c86ee395acf7}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.014] SetErrorMode (uMode=0x1) returned 0x0 [0154.014] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{886EDAFC-1051-483F-8AE2-904087A7E580}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{886edafc-1051-483f-8ae2-904087a7e580}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.016] SetErrorMode (uMode=0x0) returned 0x1 [0154.016] GetFileType (hFile=0x230) returned 0x1 [0154.016] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.085] SetErrorMode (uMode=0x1) returned 0x0 [0154.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{886EDAFC-1051-483F-8AE2-904087A7E580}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{886edafc-1051-483f-8ae2-904087a7e580}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32873aa5, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32873aa5, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e49db08, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45e)) returned 1 [0154.085] SetErrorMode (uMode=0x0) returned 0x1 [0154.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{886EDAFC-1051-483F-8AE2-904087A7E580}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{886edafc-1051-483f-8ae2-904087a7e580}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{886EDAFC-1051-483F-8AE2-904087A7E580}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{886edafc-1051-483f-8ae2-904087a7e580}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.087] SetErrorMode (uMode=0x1) returned 0x0 [0154.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{88C9D04D-39DD-41EE-A63B-23218D69717F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{88c9d04d-39dd-41ee-a63b-23218d69717f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.089] SetErrorMode (uMode=0x0) returned 0x1 [0154.089] GetFileType (hFile=0x230) returned 0x1 [0154.089] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.090] SetErrorMode (uMode=0x1) returned 0x0 [0154.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{88C9D04D-39DD-41EE-A63B-23218D69717F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{88c9d04d-39dd-41ee-a63b-23218d69717f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32ad5ebd, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32ad5ebd, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e4c3e61, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ce)) returned 1 [0154.090] SetErrorMode (uMode=0x0) returned 0x1 [0154.091] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{88C9D04D-39DD-41EE-A63B-23218D69717F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{88c9d04d-39dd-41ee-a63b-23218d69717f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{88C9D04D-39DD-41EE-A63B-23218D69717F}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{88c9d04d-39dd-41ee-a63b-23218d69717f}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.092] SetErrorMode (uMode=0x1) returned 0x0 [0154.092] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8902C92D-5AB7-433B-9065-3F55F8334E29}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8902c92d-5ab7-433b-9065-3f55f8334e29}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.093] SetErrorMode (uMode=0x0) returned 0x1 [0154.093] GetFileType (hFile=0x230) returned 0x1 [0154.093] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.095] SetErrorMode (uMode=0x1) returned 0x0 [0154.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8902C92D-5AB7-433B-9065-3F55F8334E29}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8902c92d-5ab7-433b-9065-3f55f8334e29}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b6e9a0, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32b6e9a0, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e4c3e61, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4db)) returned 1 [0154.095] SetErrorMode (uMode=0x0) returned 0x1 [0154.095] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8902C92D-5AB7-433B-9065-3F55F8334E29}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8902c92d-5ab7-433b-9065-3f55f8334e29}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8902C92D-5AB7-433B-9065-3F55F8334E29}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8902c92d-5ab7-433b-9065-3f55f8334e29}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.097] SetErrorMode (uMode=0x1) returned 0x0 [0154.097] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{895607E0-D0F9-48bd-B19E-96FBE9BBDCF9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{895607e0-d0f9-48bd-b19e-96fbe9bbdcf9}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.098] SetErrorMode (uMode=0x0) returned 0x1 [0154.098] GetFileType (hFile=0x230) returned 0x1 [0154.098] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.129] SetErrorMode (uMode=0x1) returned 0x0 [0154.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{895607E0-D0F9-48bd-B19E-96FBE9BBDCF9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{895607e0-d0f9-48bd-b19e-96fbe9bbdcf9}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32c79a43, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32c79a43, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e5102a6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f8)) returned 1 [0154.129] SetErrorMode (uMode=0x0) returned 0x1 [0154.129] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{895607E0-D0F9-48bd-B19E-96FBE9BBDCF9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{895607e0-d0f9-48bd-b19e-96fbe9bbdcf9}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{895607E0-D0F9-48bd-B19E-96FBE9BBDCF9}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{895607e0-d0f9-48bd-b19e-96fbe9bbdcf9}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.131] SetErrorMode (uMode=0x1) returned 0x0 [0154.131] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{89A2270D-DF2E-4172-8BA5-159D6AD00C15}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{89a2270d-df2e-4172-8ba5-159d6ad00c15}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.132] SetErrorMode (uMode=0x0) returned 0x1 [0154.132] GetFileType (hFile=0x230) returned 0x1 [0154.132] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.140] SetErrorMode (uMode=0x1) returned 0x0 [0154.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{89A2270D-DF2E-4172-8BA5-159D6AD00C15}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{89a2270d-df2e-4172-8ba5-159d6ad00c15}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32d1227f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32d1227f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e536600, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b4)) returned 1 [0154.141] SetErrorMode (uMode=0x0) returned 0x1 [0154.141] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{89A2270D-DF2E-4172-8BA5-159D6AD00C15}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{89a2270d-df2e-4172-8ba5-159d6ad00c15}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{89A2270D-DF2E-4172-8BA5-159D6AD00C15}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{89a2270d-df2e-4172-8ba5-159d6ad00c15}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.144] SetErrorMode (uMode=0x1) returned 0x0 [0154.144] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.146] SetErrorMode (uMode=0x0) returned 0x1 [0154.146] GetFileType (hFile=0x230) returned 0x1 [0154.146] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.148] SetErrorMode (uMode=0x1) returned 0x0 [0154.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32daabb3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32daabb3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e536600, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a2)) returned 1 [0154.148] SetErrorMode (uMode=0x0) returned 0x1 [0154.148] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8bb27ec5-5cb3-4781-baee-3439df4806e4}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.151] SetErrorMode (uMode=0x1) returned 0x0 [0154.151] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8D58F804-9520-4208-A527-7C2B6CB77B33}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8d58f804-9520-4208-a527-7c2b6cb77b33}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.153] SetErrorMode (uMode=0x0) returned 0x1 [0154.153] GetFileType (hFile=0x230) returned 0x1 [0154.153] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.165] SetErrorMode (uMode=0x1) returned 0x0 [0154.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8D58F804-9520-4208-A527-7C2B6CB77B33}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8d58f804-9520-4208-a527-7c2b6cb77b33}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32eb5d75, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32eb5d75, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e58289b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x52d)) returned 1 [0154.165] SetErrorMode (uMode=0x0) returned 0x1 [0154.165] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8D58F804-9520-4208-A527-7C2B6CB77B33}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8d58f804-9520-4208-a527-7c2b6cb77b33}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8D58F804-9520-4208-A527-7C2B6CB77B33}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8d58f804-9520-4208-a527-7c2b6cb77b33}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.167] SetErrorMode (uMode=0x1) returned 0x0 [0154.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E0C279D-0BD1-43C3-9EBD-31C3DC5B8A77}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e0c279d-0bd1-43c3-9ebd-31c3dc5b8a77}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.169] SetErrorMode (uMode=0x0) returned 0x1 [0154.169] GetFileType (hFile=0x230) returned 0x1 [0154.169] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.171] SetErrorMode (uMode=0x1) returned 0x0 [0154.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E0C279D-0BD1-43C3-9EBD-31C3DC5B8A77}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e0c279d-0bd1-43c3-9ebd-31c3dc5b8a77}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f4e70d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x32f4e70d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e58289b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x454)) returned 1 [0154.171] SetErrorMode (uMode=0x0) returned 0x1 [0154.171] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E0C279D-0BD1-43C3-9EBD-31C3DC5B8A77}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e0c279d-0bd1-43c3-9ebd-31c3dc5b8a77}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E0C279D-0BD1-43C3-9EBD-31C3DC5B8A77}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e0c279d-0bd1-43c3-9ebd-31c3dc5b8a77}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.173] SetErrorMode (uMode=0x1) returned 0x0 [0154.173] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E21794E-9303-44C5-A493-C3DC53C0E463}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e21794e-9303-44c5-a493-c3dc53c0e463}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.175] SetErrorMode (uMode=0x0) returned 0x1 [0154.175] GetFileType (hFile=0x230) returned 0x1 [0154.175] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.176] SetErrorMode (uMode=0x1) returned 0x0 [0154.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E21794E-9303-44C5-A493-C3DC53C0E463}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e21794e-9303-44c5-a493-c3dc53c0e463}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33033535, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33033535, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e58289b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1 [0154.177] SetErrorMode (uMode=0x0) returned 0x1 [0154.177] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E21794E-9303-44C5-A493-C3DC53C0E463}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e21794e-9303-44c5-a493-c3dc53c0e463}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8E21794E-9303-44C5-A493-C3DC53C0E463}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e21794e-9303-44c5-a493-c3dc53c0e463}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.179] SetErrorMode (uMode=0x1) returned 0x0 [0154.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.187] SetErrorMode (uMode=0x0) returned 0x1 [0154.187] GetFileType (hFile=0x230) returned 0x1 [0154.187] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.191] SetErrorMode (uMode=0x1) returned 0x0 [0154.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330f2174, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x330f2174, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e5a9f4a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a7)) returned 1 [0154.192] SetErrorMode (uMode=0x0) returned 0x1 [0154.192] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{8e908fc9-becc-40f6-915b-f4ca0e70d03d}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.195] SetErrorMode (uMode=0x1) returned 0x0 [0154.195] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{906435EC-336D-4B77-BCD6-397DE8318852}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{906435ec-336d-4b77-bcd6-397de8318852}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.197] SetErrorMode (uMode=0x0) returned 0x1 [0154.197] GetFileType (hFile=0x230) returned 0x1 [0154.197] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.198] SetErrorMode (uMode=0x1) returned 0x0 [0154.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{906435EC-336D-4B77-BCD6-397DE8318852}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{906435ec-336d-4b77-bcd6-397de8318852}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3318aa6b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3318aa6b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e5d1814, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42c)) returned 1 [0154.198] SetErrorMode (uMode=0x0) returned 0x1 [0154.199] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{906435EC-336D-4B77-BCD6-397DE8318852}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{906435ec-336d-4b77-bcd6-397de8318852}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{906435EC-336D-4B77-BCD6-397DE8318852}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{906435ec-336d-4b77-bcd6-397de8318852}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.200] SetErrorMode (uMode=0x1) returned 0x0 [0154.200] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{907F262A-012A-4F6A-94C9-F479F3E6EE16}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{907f262a-012a-4f6a-94c9-f479f3e6ee16}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.201] SetErrorMode (uMode=0x0) returned 0x1 [0154.201] GetFileType (hFile=0x230) returned 0x1 [0154.201] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.213] SetErrorMode (uMode=0x1) returned 0x0 [0154.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{907F262A-012A-4F6A-94C9-F479F3E6EE16}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{907f262a-012a-4f6a-94c9-f479f3e6ee16}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332233bf, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x332233bf, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e5f520a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46a)) returned 1 [0154.214] SetErrorMode (uMode=0x0) returned 0x1 [0154.214] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{907F262A-012A-4F6A-94C9-F479F3E6EE16}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{907f262a-012a-4f6a-94c9-f479f3e6ee16}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{907F262A-012A-4F6A-94C9-F479F3E6EE16}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{907f262a-012a-4f6a-94c9-f479f3e6ee16}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.215] SetErrorMode (uMode=0x1) returned 0x0 [0154.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.216] SetErrorMode (uMode=0x0) returned 0x1 [0154.216] GetFileType (hFile=0x230) returned 0x1 [0154.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.218] SetErrorMode (uMode=0x1) returned 0x0 [0154.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x332bbd16, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x332bbd16, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e5f520a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3aa)) returned 1 [0154.218] SetErrorMode (uMode=0x0) returned 0x1 [0154.218] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{90ab71ce-bab6-4ca2-84fe-629338405756}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.219] SetErrorMode (uMode=0x1) returned 0x0 [0154.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{91BA8E01-F854-4418-A108-E63323DDAE60}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{91ba8e01-f854-4418-a108-e63323ddae60}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.220] SetErrorMode (uMode=0x0) returned 0x1 [0154.220] GetFileType (hFile=0x230) returned 0x1 [0154.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.221] SetErrorMode (uMode=0x1) returned 0x0 [0154.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{91BA8E01-F854-4418-A108-E63323DDAE60}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{91ba8e01-f854-4418-a108-e63323ddae60}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333546d0, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x333546d0, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e5f520a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d5)) returned 1 [0154.221] SetErrorMode (uMode=0x0) returned 0x1 [0154.221] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{91BA8E01-F854-4418-A108-E63323DDAE60}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{91ba8e01-f854-4418-a108-e63323ddae60}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{91BA8E01-F854-4418-A108-E63323DDAE60}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{91ba8e01-f854-4418-a108-e63323ddae60}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.222] SetErrorMode (uMode=0x1) returned 0x0 [0154.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9389633E-8BCB-4448-93CD-EBFFA0759257}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9389633e-8bcb-4448-93cd-ebffa0759257}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.223] SetErrorMode (uMode=0x0) returned 0x1 [0154.223] GetFileType (hFile=0x230) returned 0x1 [0154.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.224] SetErrorMode (uMode=0x1) returned 0x0 [0154.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9389633E-8BCB-4448-93CD-EBFFA0759257}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9389633e-8bcb-4448-93cd-ebffa0759257}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x333ed008, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x333ed008, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e5f520a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47d)) returned 1 [0154.224] SetErrorMode (uMode=0x0) returned 0x1 [0154.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9389633E-8BCB-4448-93CD-EBFFA0759257}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9389633e-8bcb-4448-93cd-ebffa0759257}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9389633E-8BCB-4448-93CD-EBFFA0759257}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9389633e-8bcb-4448-93cd-ebffa0759257}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.226] SetErrorMode (uMode=0x1) returned 0x0 [0154.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9430DB91-B966-4971-A955-E3DBA1F889E7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9430db91-b966-4971-a955-e3dba1f889e7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.227] SetErrorMode (uMode=0x0) returned 0x1 [0154.227] GetFileType (hFile=0x230) returned 0x1 [0154.227] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.228] SetErrorMode (uMode=0x1) returned 0x0 [0154.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9430DB91-B966-4971-A955-E3DBA1F889E7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9430db91-b966-4971-a955-e3dba1f889e7}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33485997, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33485997, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e61b292, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x432)) returned 1 [0154.228] SetErrorMode (uMode=0x0) returned 0x1 [0154.228] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9430DB91-B966-4971-A955-E3DBA1F889E7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9430db91-b966-4971-a955-e3dba1f889e7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9430DB91-B966-4971-A955-E3DBA1F889E7}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9430db91-b966-4971-a955-e3dba1f889e7}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.229] SetErrorMode (uMode=0x1) returned 0x0 [0154.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{944A41B9-C0FD-41AE-A6DF-5AC4FE5A59B4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{944a41b9-c0fd-41ae-a6df-5ac4fe5a59b4}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.230] SetErrorMode (uMode=0x0) returned 0x1 [0154.230] GetFileType (hFile=0x230) returned 0x1 [0154.231] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.232] SetErrorMode (uMode=0x1) returned 0x0 [0154.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{944A41B9-C0FD-41AE-A6DF-5AC4FE5A59B4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{944a41b9-c0fd-41ae-a6df-5ac4fe5a59b4}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3351e2ba, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3351e2ba, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e61b292, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3bf)) returned 1 [0154.232] SetErrorMode (uMode=0x0) returned 0x1 [0154.232] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{944A41B9-C0FD-41AE-A6DF-5AC4FE5A59B4}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{944a41b9-c0fd-41ae-a6df-5ac4fe5a59b4}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{944A41B9-C0FD-41AE-A6DF-5AC4FE5A59B4}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{944a41b9-c0fd-41ae-a6df-5ac4fe5a59b4}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.233] SetErrorMode (uMode=0x1) returned 0x0 [0154.233] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.234] SetErrorMode (uMode=0x0) returned 0x1 [0154.234] GetFileType (hFile=0x230) returned 0x1 [0154.234] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.235] SetErrorMode (uMode=0x1) returned 0x0 [0154.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335b6d76, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x335b6d76, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e61b292, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3bc)) returned 1 [0154.235] SetErrorMode (uMode=0x0) returned 0x1 [0154.235] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{950fd00b-c4a9-4465-852a-b1eb51e2e7f6}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.237] SetErrorMode (uMode=0x1) returned 0x0 [0154.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{955E7FFD-4DD9-4124-96FC-86C3C653DD33}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{955e7ffd-4dd9-4124-96fc-86c3c653dd33}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.237] SetErrorMode (uMode=0x0) returned 0x1 [0154.237] GetFileType (hFile=0x230) returned 0x1 [0154.237] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.267] SetErrorMode (uMode=0x1) returned 0x0 [0154.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{955E7FFD-4DD9-4124-96FC-86C3C653DD33}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{955e7ffd-4dd9-4124-96fc-86c3c653dd33}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3364f593, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3364f593, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e667885, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x40b)) returned 1 [0154.268] SetErrorMode (uMode=0x0) returned 0x1 [0154.268] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{955E7FFD-4DD9-4124-96FC-86C3C653DD33}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{955e7ffd-4dd9-4124-96fc-86c3c653dd33}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{955E7FFD-4DD9-4124-96FC-86C3C653DD33}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{955e7ffd-4dd9-4124-96fc-86c3c653dd33}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.269] SetErrorMode (uMode=0x1) returned 0x0 [0154.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96BC4455-FDA3-4DE2-8B71-9D1953F0B32D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96bc4455-fda3-4de2-8b71-9d1953f0b32d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.270] SetErrorMode (uMode=0x0) returned 0x1 [0154.270] GetFileType (hFile=0x230) returned 0x1 [0154.270] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.272] SetErrorMode (uMode=0x1) returned 0x0 [0154.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96BC4455-FDA3-4DE2-8B71-9D1953F0B32D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96bc4455-fda3-4de2-8b71-9d1953f0b32d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x336e7f0a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x336e7f0a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e667885, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x397)) returned 1 [0154.272] SetErrorMode (uMode=0x0) returned 0x1 [0154.272] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96BC4455-FDA3-4DE2-8B71-9D1953F0B32D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96bc4455-fda3-4de2-8b71-9d1953f0b32d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96BC4455-FDA3-4DE2-8B71-9D1953F0B32D}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96bc4455-fda3-4de2-8b71-9d1953f0b32d}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.273] SetErrorMode (uMode=0x1) returned 0x0 [0154.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96DF8B78-8299-4BC1-B56B-6C375FBEC228}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96df8b78-8299-4bc1-b56b-6c375fbec228}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.274] SetErrorMode (uMode=0x0) returned 0x1 [0154.274] GetFileType (hFile=0x230) returned 0x1 [0154.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.275] SetErrorMode (uMode=0x1) returned 0x0 [0154.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96DF8B78-8299-4BC1-B56B-6C375FBEC228}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96df8b78-8299-4bc1-b56b-6c375fbec228}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33780870, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33780870, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e68eb97, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad)) returned 1 [0154.275] SetErrorMode (uMode=0x0) returned 0x1 [0154.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96DF8B78-8299-4BC1-B56B-6C375FBEC228}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96df8b78-8299-4bc1-b56b-6c375fbec228}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{96DF8B78-8299-4BC1-B56B-6C375FBEC228}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{96df8b78-8299-4bc1-b56b-6c375fbec228}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.277] SetErrorMode (uMode=0x1) returned 0x0 [0154.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9891D47B-7E37-4265-BAD2-1FA991543B90}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9891d47b-7e37-4265-bad2-1fa991543b90}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.277] SetErrorMode (uMode=0x0) returned 0x1 [0154.277] GetFileType (hFile=0x230) returned 0x1 [0154.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.278] SetErrorMode (uMode=0x1) returned 0x0 [0154.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9891D47B-7E37-4265-BAD2-1FA991543B90}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9891d47b-7e37-4265-bad2-1fa991543b90}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3381923a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3381923a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e68eb97, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b6)) returned 1 [0154.279] SetErrorMode (uMode=0x0) returned 0x1 [0154.279] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9891D47B-7E37-4265-BAD2-1FA991543B90}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9891d47b-7e37-4265-bad2-1fa991543b90}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9891D47B-7E37-4265-BAD2-1FA991543B90}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9891d47b-7e37-4265-bad2-1fa991543b90}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.280] SetErrorMode (uMode=0x1) returned 0x0 [0154.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{98CCA0B9-CF6C-4FFD-98E1-87BFEDDD4D21}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{98cca0b9-cf6c-4ffd-98e1-87bfeddd4d21}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.281] SetErrorMode (uMode=0x0) returned 0x1 [0154.281] GetFileType (hFile=0x230) returned 0x1 [0154.281] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.282] SetErrorMode (uMode=0x1) returned 0x0 [0154.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{98CCA0B9-CF6C-4FFD-98E1-87BFEDDD4D21}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{98cca0b9-cf6c-4ffd-98e1-87bfeddd4d21}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x338b1bae, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x338b1bae, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e68eb97, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0154.282] SetErrorMode (uMode=0x0) returned 0x1 [0154.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{98CCA0B9-CF6C-4FFD-98E1-87BFEDDD4D21}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{98cca0b9-cf6c-4ffd-98e1-87bfeddd4d21}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{98CCA0B9-CF6C-4FFD-98E1-87BFEDDD4D21}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{98cca0b9-cf6c-4ffd-98e1-87bfeddd4d21}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.283] SetErrorMode (uMode=0x1) returned 0x0 [0154.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9B802EF5-59B7-4974-9022-06DC2A9B1677}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9b802ef5-59b7-4974-9022-06dc2a9b1677}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.284] SetErrorMode (uMode=0x0) returned 0x1 [0154.284] GetFileType (hFile=0x230) returned 0x1 [0154.284] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.285] SetErrorMode (uMode=0x1) returned 0x0 [0154.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9B802EF5-59B7-4974-9022-06DC2A9B1677}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9b802ef5-59b7-4974-9022-06dc2a9b1677}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3394a50b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3394a50b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e68eb97, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ee)) returned 1 [0154.285] SetErrorMode (uMode=0x0) returned 0x1 [0154.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9B802EF5-59B7-4974-9022-06DC2A9B1677}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9b802ef5-59b7-4974-9022-06dc2a9b1677}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9B802EF5-59B7-4974-9022-06DC2A9B1677}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9b802ef5-59b7-4974-9022-06dc2a9b1677}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.286] SetErrorMode (uMode=0x1) returned 0x0 [0154.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9BA8A9A5-F1C1-4F09-AE9A-EFEAA5961BE3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ba8a9a5-f1c1-4f09-ae9a-efeaa5961be3}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.287] SetErrorMode (uMode=0x0) returned 0x1 [0154.287] GetFileType (hFile=0x230) returned 0x1 [0154.287] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.289] SetErrorMode (uMode=0x1) returned 0x0 [0154.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9BA8A9A5-F1C1-4F09-AE9A-EFEAA5961BE3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ba8a9a5-f1c1-4f09-ae9a-efeaa5961be3}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x339e2e33, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x339e2e33, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e68eb97, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0154.289] SetErrorMode (uMode=0x0) returned 0x1 [0154.289] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9BA8A9A5-F1C1-4F09-AE9A-EFEAA5961BE3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ba8a9a5-f1c1-4f09-ae9a-efeaa5961be3}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9BA8A9A5-F1C1-4F09-AE9A-EFEAA5961BE3}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ba8a9a5-f1c1-4f09-ae9a-efeaa5961be3}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.290] SetErrorMode (uMode=0x1) returned 0x0 [0154.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9C39057F-5CE5-4BAB-BE61-2957A12EEC52}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c39057f-5ce5-4bab-be61-2957a12eec52}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.291] SetErrorMode (uMode=0x0) returned 0x1 [0154.291] GetFileType (hFile=0x230) returned 0x1 [0154.291] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.356] SetErrorMode (uMode=0x1) returned 0x0 [0154.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9C39057F-5CE5-4BAB-BE61-2957A12EEC52}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c39057f-5ce5-4bab-be61-2957a12eec52}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a7b8b5, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33a7b8b5, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e74c68d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a5)) returned 1 [0154.356] SetErrorMode (uMode=0x0) returned 0x1 [0154.356] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9C39057F-5CE5-4BAB-BE61-2957A12EEC52}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c39057f-5ce5-4bab-be61-2957a12eec52}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9C39057F-5CE5-4BAB-BE61-2957A12EEC52}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c39057f-5ce5-4bab-be61-2957a12eec52}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.358] SetErrorMode (uMode=0x1) returned 0x0 [0154.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.360] SetErrorMode (uMode=0x0) returned 0x1 [0154.360] GetFileType (hFile=0x230) returned 0x1 [0154.360] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.389] SetErrorMode (uMode=0x1) returned 0x0 [0154.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33b14139, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33b14139, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e798c9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x394)) returned 1 [0154.389] SetErrorMode (uMode=0x0) returned 0x1 [0154.389] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c60de1e-e5fc-40f4-a487-460851a8d915}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.391] SetErrorMode (uMode=0x1) returned 0x0 [0154.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.392] SetErrorMode (uMode=0x0) returned 0x1 [0154.392] GetFileType (hFile=0x230) returned 0x1 [0154.392] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.394] SetErrorMode (uMode=0x1) returned 0x0 [0154.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33bacace, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x33bacace, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e798c9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ec)) returned 1 [0154.394] SetErrorMode (uMode=0x0) returned 0x1 [0154.394] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9c73f5e5-7ae7-4e32-a8e8-8d23b85255bf}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.396] SetErrorMode (uMode=0x1) returned 0x0 [0154.396] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9EF86966-2F35-49BE-A9F6-398E0B844411}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ef86966-2f35-49be-a9f6-398e0b844411}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.397] SetErrorMode (uMode=0x0) returned 0x1 [0154.397] GetFileType (hFile=0x230) returned 0x1 [0154.397] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.409] SetErrorMode (uMode=0x1) returned 0x0 [0154.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9EF86966-2F35-49BE-A9F6-398E0B844411}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ef86966-2f35-49be-a9f6-398e0b844411}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34320033, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34320033, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e7bec62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x41f)) returned 1 [0154.409] SetErrorMode (uMode=0x0) returned 0x1 [0154.410] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9EF86966-2F35-49BE-A9F6-398E0B844411}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ef86966-2f35-49be-a9f6-398e0b844411}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9EF86966-2F35-49BE-A9F6-398E0B844411}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9ef86966-2f35-49be-a9f6-398e0b844411}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.411] SetErrorMode (uMode=0x1) returned 0x0 [0154.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.412] SetErrorMode (uMode=0x0) returned 0x1 [0154.412] GetFileType (hFile=0x230) returned 0x1 [0154.412] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.413] SetErrorMode (uMode=0x1) returned 0x0 [0154.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x343b892d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x343b892d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e7bec62, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45f)) returned 1 [0154.414] SetErrorMode (uMode=0x0) returned 0x1 [0154.414] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{9fe63afd-59cf-4419-9775-abcc3849f861}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.415] SetErrorMode (uMode=0x1) returned 0x0 [0154.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.416] SetErrorMode (uMode=0x0) returned 0x1 [0154.416] GetFileType (hFile=0x230) returned 0x1 [0154.416] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.418] SetErrorMode (uMode=0x1) returned 0x0 [0154.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34451358, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34451358, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e7e4dd8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad)) returned 1 [0154.418] SetErrorMode (uMode=0x0) returned 0x1 [0154.418] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a0275511-0e86-4eca-97c2-ecd8f1221d08}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.419] SetErrorMode (uMode=0x1) returned 0x0 [0154.419] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A10DFF38-B2D2-44AC-952B-A2B5DC5D0C9F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a10dff38-b2d2-44ac-952b-a2b5dc5d0c9f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.420] SetErrorMode (uMode=0x0) returned 0x1 [0154.420] GetFileType (hFile=0x230) returned 0x1 [0154.420] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.422] SetErrorMode (uMode=0x1) returned 0x0 [0154.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A10DFF38-B2D2-44AC-952B-A2B5DC5D0C9F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a10dff38-b2d2-44ac-952b-a2b5dc5d0c9f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x344e9c90, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x344e9c90, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e7e4dd8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42b)) returned 1 [0154.422] SetErrorMode (uMode=0x0) returned 0x1 [0154.422] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A10DFF38-B2D2-44AC-952B-A2B5DC5D0C9F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a10dff38-b2d2-44ac-952b-a2b5dc5d0c9f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A10DFF38-B2D2-44AC-952B-A2B5DC5D0C9F}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a10dff38-b2d2-44ac-952b-a2b5dc5d0c9f}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.423] SetErrorMode (uMode=0x1) returned 0x0 [0154.423] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.425] SetErrorMode (uMode=0x0) returned 0x1 [0154.425] GetFileType (hFile=0x230) returned 0x1 [0154.425] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.436] SetErrorMode (uMode=0x1) returned 0x0 [0154.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x345825cb, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x345825cb, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e80b13e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a3)) returned 1 [0154.436] SetErrorMode (uMode=0x0) returned 0x1 [0154.436] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a3dd4f92-658a-410f-84fd-6fbbbef2fffe}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.437] SetErrorMode (uMode=0x1) returned 0x0 [0154.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A42E8D99-83E6-4D12-B403-F46059D02CF0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a42e8d99-83e6-4d12-b403-f46059d02cf0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.439] SetErrorMode (uMode=0x0) returned 0x1 [0154.439] GetFileType (hFile=0x230) returned 0x1 [0154.439] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.459] SetErrorMode (uMode=0x1) returned 0x0 [0154.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A42E8D99-83E6-4D12-B403-F46059D02CF0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a42e8d99-83e6-4d12-b403-f46059d02cf0}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3461af9b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3461af9b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e831538, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ea)) returned 1 [0154.459] SetErrorMode (uMode=0x0) returned 0x1 [0154.459] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A42E8D99-83E6-4D12-B403-F46059D02CF0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a42e8d99-83e6-4d12-b403-f46059d02cf0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A42E8D99-83E6-4D12-B403-F46059D02CF0}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a42e8d99-83e6-4d12-b403-f46059d02cf0}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.461] SetErrorMode (uMode=0x1) returned 0x0 [0154.461] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A7160DE5-E591-4D98-9BB0-0CAC99D5F2D5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a7160de5-e591-4d98-9bb0-0cac99d5f2d5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.462] SetErrorMode (uMode=0x0) returned 0x1 [0154.462] GetFileType (hFile=0x230) returned 0x1 [0154.462] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.464] SetErrorMode (uMode=0x1) returned 0x0 [0154.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A7160DE5-E591-4D98-9BB0-0CAC99D5F2D5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a7160de5-e591-4d98-9bb0-0cac99d5f2d5}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x349d4a65, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x349d4a65, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e857597, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d3)) returned 1 [0154.464] SetErrorMode (uMode=0x0) returned 0x1 [0154.464] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A7160DE5-E591-4D98-9BB0-0CAC99D5F2D5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a7160de5-e591-4d98-9bb0-0cac99d5f2d5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A7160DE5-E591-4D98-9BB0-0CAC99D5F2D5}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a7160de5-e591-4d98-9bb0-0cac99d5f2d5}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.465] SetErrorMode (uMode=0x1) returned 0x0 [0154.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A73DCDB5-E233-4FC2-8083-6E431939002A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a73dcdb5-e233-4fc2-8083-6e431939002a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.466] SetErrorMode (uMode=0x0) returned 0x1 [0154.466] GetFileType (hFile=0x230) returned 0x1 [0154.466] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.467] SetErrorMode (uMode=0x1) returned 0x0 [0154.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A73DCDB5-E233-4FC2-8083-6E431939002A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a73dcdb5-e233-4fc2-8083-6e431939002a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a935ed, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34a935ed, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e857597, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47d)) returned 1 [0154.467] SetErrorMode (uMode=0x0) returned 0x1 [0154.467] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A73DCDB5-E233-4FC2-8083-6E431939002A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a73dcdb5-e233-4fc2-8083-6e431939002a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{A73DCDB5-E233-4FC2-8083-6E431939002A}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a73dcdb5-e233-4fc2-8083-6e431939002a}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.469] SetErrorMode (uMode=0x1) returned 0x0 [0154.469] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.470] SetErrorMode (uMode=0x0) returned 0x1 [0154.470] GetFileType (hFile=0x230) returned 0x1 [0154.470] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.471] SetErrorMode (uMode=0x1) returned 0x0 [0154.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34b2bfb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34b2bfb4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e857597, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b7)) returned 1 [0154.471] SetErrorMode (uMode=0x0) returned 0x1 [0154.471] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{a8a91a66-3a7d-4424-8d24-04e180695c7a}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.472] SetErrorMode (uMode=0x1) returned 0x0 [0154.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AA9D2032-E8FB-4f8c-99C9-09F539AEBD59}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aa9d2032-e8fb-4f8c-99c9-09f539aebd59}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.473] SetErrorMode (uMode=0x0) returned 0x1 [0154.473] GetFileType (hFile=0x230) returned 0x1 [0154.473] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.503] SetErrorMode (uMode=0x1) returned 0x0 [0154.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AA9D2032-E8FB-4f8c-99C9-09F539AEBD59}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aa9d2032-e8fb-4f8c-99c9-09f539aebd59}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34bc48d6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34bc48d6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e8a3c21, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3bd)) returned 1 [0154.503] SetErrorMode (uMode=0x0) returned 0x1 [0154.503] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AA9D2032-E8FB-4f8c-99C9-09F539AEBD59}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aa9d2032-e8fb-4f8c-99c9-09f539aebd59}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AA9D2032-E8FB-4f8c-99C9-09F539AEBD59}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aa9d2032-e8fb-4f8c-99c9-09f539aebd59}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.505] SetErrorMode (uMode=0x1) returned 0x0 [0154.505] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AACA901F-E74F-4894-B074-F55059532853}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaca901f-e74f-4894-b074-f55059532853}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.506] SetErrorMode (uMode=0x0) returned 0x1 [0154.506] GetFileType (hFile=0x230) returned 0x1 [0154.506] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.507] SetErrorMode (uMode=0x1) returned 0x0 [0154.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AACA901F-E74F-4894-B074-F55059532853}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaca901f-e74f-4894-b074-f55059532853}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34c5d252, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34c5d252, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e8a3c21, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42c)) returned 1 [0154.508] SetErrorMode (uMode=0x0) returned 0x1 [0154.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AACA901F-E74F-4894-B074-F55059532853}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaca901f-e74f-4894-b074-f55059532853}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AACA901F-E74F-4894-B074-F55059532853}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaca901f-e74f-4894-b074-f55059532853}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.509] SetErrorMode (uMode=0x1) returned 0x0 [0154.509] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AAF384A9-978C-41B6-B394-0C40C2EAAA4B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaf384a9-978c-41b6-b394-0c40c2eaaa4b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.510] SetErrorMode (uMode=0x0) returned 0x1 [0154.510] GetFileType (hFile=0x230) returned 0x1 [0154.510] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.513] SetErrorMode (uMode=0x1) returned 0x0 [0154.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AAF384A9-978C-41B6-B394-0C40C2EAAA4B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaf384a9-978c-41b6-b394-0c40c2eaaa4b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34cf5bd5, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34cf5bd5, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e8c9c15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c4)) returned 1 [0154.513] SetErrorMode (uMode=0x0) returned 0x1 [0154.513] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AAF384A9-978C-41B6-B394-0C40C2EAAA4B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaf384a9-978c-41b6-b394-0c40c2eaaa4b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AAF384A9-978C-41B6-B394-0C40C2EAAA4B}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{aaf384a9-978c-41b6-b394-0c40c2eaaa4b}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.515] SetErrorMode (uMode=0x1) returned 0x0 [0154.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ABB4509D-9043-4EF2-8796-E4646ECF951D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{abb4509d-9043-4ef2-8796-e4646ecf951d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.517] SetErrorMode (uMode=0x0) returned 0x1 [0154.517] GetFileType (hFile=0x230) returned 0x1 [0154.517] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.534] SetErrorMode (uMode=0x1) returned 0x0 [0154.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ABB4509D-9043-4EF2-8796-E4646ECF951D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{abb4509d-9043-4ef2-8796-e4646ecf951d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d8e5da, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34d8e5da, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e8eff35, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b5)) returned 1 [0154.534] SetErrorMode (uMode=0x0) returned 0x1 [0154.534] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ABB4509D-9043-4EF2-8796-E4646ECF951D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{abb4509d-9043-4ef2-8796-e4646ecf951d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ABB4509D-9043-4EF2-8796-E4646ECF951D}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{abb4509d-9043-4ef2-8796-e4646ecf951d}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.536] SetErrorMode (uMode=0x1) returned 0x0 [0154.536] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AF3BA0EC-B240-401E-B4EE-3E89F275205B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{af3ba0ec-b240-401e-b4ee-3e89f275205b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.537] SetErrorMode (uMode=0x0) returned 0x1 [0154.537] GetFileType (hFile=0x230) returned 0x1 [0154.537] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.538] SetErrorMode (uMode=0x1) returned 0x0 [0154.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AF3BA0EC-B240-401E-B4EE-3E89F275205B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{af3ba0ec-b240-401e-b4ee-3e89f275205b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e26e6a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34e26e6a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e8eff35, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42a)) returned 1 [0154.539] SetErrorMode (uMode=0x0) returned 0x1 [0154.539] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AF3BA0EC-B240-401E-B4EE-3E89F275205B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{af3ba0ec-b240-401e-b4ee-3e89f275205b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{AF3BA0EC-B240-401E-B4EE-3E89F275205B}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{af3ba0ec-b240-401e-b4ee-3e89f275205b}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.541] SetErrorMode (uMode=0x1) returned 0x0 [0154.541] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B0B4886C-4B31-4824-ADCD-0DAF5C8BAFF6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b0b4886c-4b31-4824-adcd-0daf5c8baff6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.542] SetErrorMode (uMode=0x0) returned 0x1 [0154.542] GetFileType (hFile=0x230) returned 0x1 [0154.542] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.566] SetErrorMode (uMode=0x1) returned 0x0 [0154.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B0B4886C-4B31-4824-ADCD-0DAF5C8BAFF6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b0b4886c-4b31-4824-adcd-0daf5c8baff6}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ebf7f6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34ebf7f6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e93c4b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ad)) returned 1 [0154.567] SetErrorMode (uMode=0x0) returned 0x1 [0154.567] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B0B4886C-4B31-4824-ADCD-0DAF5C8BAFF6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b0b4886c-4b31-4824-adcd-0daf5c8baff6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B0B4886C-4B31-4824-ADCD-0DAF5C8BAFF6}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b0b4886c-4b31-4824-adcd-0daf5c8baff6}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.570] SetErrorMode (uMode=0x1) returned 0x0 [0154.570] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1207959-FFBF-4417-A6B1-4BF0EDA51F5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1207959-ffbf-4417-a6b1-4bf0eda51f5a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.571] SetErrorMode (uMode=0x0) returned 0x1 [0154.571] GetFileType (hFile=0x230) returned 0x1 [0154.571] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.573] SetErrorMode (uMode=0x1) returned 0x0 [0154.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1207959-FFBF-4417-A6B1-4BF0EDA51F5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1207959-ffbf-4417-a6b1-4bf0eda51f5a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34f58157, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34f58157, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e96482e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x392)) returned 1 [0154.573] SetErrorMode (uMode=0x0) returned 0x1 [0154.573] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1207959-FFBF-4417-A6B1-4BF0EDA51F5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1207959-ffbf-4417-a6b1-4bf0eda51f5a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1207959-FFBF-4417-A6B1-4BF0EDA51F5A}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1207959-ffbf-4417-a6b1-4bf0eda51f5a}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.575] SetErrorMode (uMode=0x1) returned 0x0 [0154.575] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B123B0AB-2E4E-4325-804A-32F99784DA0B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b123b0ab-2e4e-4325-804a-32f99784da0b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.576] SetErrorMode (uMode=0x0) returned 0x1 [0154.576] GetFileType (hFile=0x230) returned 0x1 [0154.576] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.578] SetErrorMode (uMode=0x1) returned 0x0 [0154.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B123B0AB-2E4E-4325-804A-32F99784DA0B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b123b0ab-2e4e-4325-804a-32f99784da0b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ff0b24, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x34ff0b24, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e96482e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e7)) returned 1 [0154.578] SetErrorMode (uMode=0x0) returned 0x1 [0154.578] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B123B0AB-2E4E-4325-804A-32F99784DA0B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b123b0ab-2e4e-4325-804a-32f99784da0b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B123B0AB-2E4E-4325-804A-32F99784DA0B}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b123b0ab-2e4e-4325-804a-32f99784da0b}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.580] SetErrorMode (uMode=0x1) returned 0x0 [0154.580] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1FE5142-DEDD-409B-BCC8-547EC08DE84E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1fe5142-dedd-409b-bcc8-547ec08de84e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.582] SetErrorMode (uMode=0x0) returned 0x1 [0154.582] GetFileType (hFile=0x230) returned 0x1 [0154.582] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.583] SetErrorMode (uMode=0x1) returned 0x0 [0154.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1FE5142-DEDD-409B-BCC8-547EC08DE84E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1fe5142-dedd-409b-bcc8-547ec08de84e}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35089453, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35089453, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e96482e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a9)) returned 1 [0154.583] SetErrorMode (uMode=0x0) returned 0x1 [0154.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1FE5142-DEDD-409B-BCC8-547EC08DE84E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1fe5142-dedd-409b-bcc8-547ec08de84e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B1FE5142-DEDD-409B-BCC8-547EC08DE84E}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b1fe5142-dedd-409b-bcc8-547ec08de84e}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.585] SetErrorMode (uMode=0x1) returned 0x0 [0154.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.586] SetErrorMode (uMode=0x0) returned 0x1 [0154.586] GetFileType (hFile=0x230) returned 0x1 [0154.586] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.587] SetErrorMode (uMode=0x1) returned 0x0 [0154.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x357b0557, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x357b0557, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e988843, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39b)) returned 1 [0154.587] SetErrorMode (uMode=0x0) returned 0x1 [0154.587] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b2c761c6-29bc-4f19-9251-e6195265baf1}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.589] SetErrorMode (uMode=0x1) returned 0x0 [0154.589] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B3C577FA-7C51-4259-A1C4-088BD0B0932E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b3c577fa-7c51-4259-a1c4-088bd0b0932e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.590] SetErrorMode (uMode=0x0) returned 0x1 [0154.590] GetFileType (hFile=0x230) returned 0x1 [0154.590] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.591] SetErrorMode (uMode=0x1) returned 0x0 [0154.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B3C577FA-7C51-4259-A1C4-088BD0B0932E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b3c577fa-7c51-4259-a1c4-088bd0b0932e}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35a5efb3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35a5efb3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e988843, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c7)) returned 1 [0154.591] SetErrorMode (uMode=0x0) returned 0x1 [0154.591] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B3C577FA-7C51-4259-A1C4-088BD0B0932E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b3c577fa-7c51-4259-a1c4-088bd0b0932e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B3C577FA-7C51-4259-A1C4-088BD0B0932E}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b3c577fa-7c51-4259-a1c4-088bd0b0932e}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.592] SetErrorMode (uMode=0x1) returned 0x0 [0154.593] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B6B2793F-F4B9-49FD-B578-212C3C020892}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b6b2793f-f4b9-49fd-b578-212c3c020892}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.594] SetErrorMode (uMode=0x0) returned 0x1 [0154.594] GetFileType (hFile=0x230) returned 0x1 [0154.594] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.595] SetErrorMode (uMode=0x1) returned 0x0 [0154.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B6B2793F-F4B9-49FD-B578-212C3C020892}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b6b2793f-f4b9-49fd-b578-212c3c020892}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35bb64fe, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35bb64fe, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e988843, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x441)) returned 1 [0154.595] SetErrorMode (uMode=0x0) returned 0x1 [0154.595] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B6B2793F-F4B9-49FD-B578-212C3C020892}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b6b2793f-f4b9-49fd-b578-212c3c020892}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B6B2793F-F4B9-49FD-B578-212C3C020892}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b6b2793f-f4b9-49fd-b578-212c3c020892}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.596] SetErrorMode (uMode=0x1) returned 0x0 [0154.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B7622F10-9A47-4BF2-B6EF-2C20B4510254}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b7622f10-9a47-4bf2-b6ef-2c20b4510254}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.597] SetErrorMode (uMode=0x0) returned 0x1 [0154.597] GetFileType (hFile=0x230) returned 0x1 [0154.598] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.599] SetErrorMode (uMode=0x1) returned 0x0 [0154.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B7622F10-9A47-4BF2-B6EF-2C20B4510254}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b7622f10-9a47-4bf2-b6ef-2c20b4510254}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d0da12, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35d0da12, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e988843, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c3)) returned 1 [0154.599] SetErrorMode (uMode=0x0) returned 0x1 [0154.599] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B7622F10-9A47-4BF2-B6EF-2C20B4510254}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b7622f10-9a47-4bf2-b6ef-2c20b4510254}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B7622F10-9A47-4BF2-B6EF-2C20B4510254}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b7622f10-9a47-4bf2-b6ef-2c20b4510254}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.600] SetErrorMode (uMode=0x1) returned 0x0 [0154.600] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B896819B-CF73-4da0-8F59-6E744A6BCD5F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b896819b-cf73-4da0-8f59-6e744a6bcd5f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.601] SetErrorMode (uMode=0x0) returned 0x1 [0154.601] GetFileType (hFile=0x230) returned 0x1 [0154.601] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.602] SetErrorMode (uMode=0x1) returned 0x0 [0154.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B896819B-CF73-4da0-8F59-6E744A6BCD5F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b896819b-cf73-4da0-8f59-6e744a6bcd5f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35da6369, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35da6369, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e9aea9b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e6)) returned 1 [0154.602] SetErrorMode (uMode=0x0) returned 0x1 [0154.603] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B896819B-CF73-4da0-8F59-6E744A6BCD5F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b896819b-cf73-4da0-8f59-6e744a6bcd5f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B896819B-CF73-4da0-8F59-6E744A6BCD5F}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b896819b-cf73-4da0-8f59-6e744a6bcd5f}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.604] SetErrorMode (uMode=0x1) returned 0x0 [0154.604] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B935C3B6-969C-4FC2-B96C-7F06794471AF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b935c3b6-969c-4fc2-b96c-7f06794471af}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.605] SetErrorMode (uMode=0x0) returned 0x1 [0154.605] GetFileType (hFile=0x230) returned 0x1 [0154.605] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.607] SetErrorMode (uMode=0x1) returned 0x0 [0154.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B935C3B6-969C-4FC2-B96C-7F06794471AF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b935c3b6-969c-4fc2-b96c-7f06794471af}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35e3ed49, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35e3ed49, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e9aea9b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fe)) returned 1 [0154.607] SetErrorMode (uMode=0x0) returned 0x1 [0154.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B935C3B6-969C-4FC2-B96C-7F06794471AF}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b935c3b6-969c-4fc2-b96c-7f06794471af}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B935C3B6-969C-4FC2-B96C-7F06794471AF}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b935c3b6-969c-4fc2-b96c-7f06794471af}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.609] SetErrorMode (uMode=0x1) returned 0x0 [0154.609] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B98AD935-426A-482B-9383-ED7D8BB99A6F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b98ad935-426a-482b-9383-ed7d8bb99a6f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.610] SetErrorMode (uMode=0x0) returned 0x1 [0154.610] GetFileType (hFile=0x230) returned 0x1 [0154.610] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.612] SetErrorMode (uMode=0x1) returned 0x0 [0154.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B98AD935-426A-482B-9383-ED7D8BB99A6F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b98ad935-426a-482b-9383-ed7d8bb99a6f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35ed76c9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35ed76c9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e9aea9b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3de)) returned 1 [0154.612] SetErrorMode (uMode=0x0) returned 0x1 [0154.612] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B98AD935-426A-482B-9383-ED7D8BB99A6F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b98ad935-426a-482b-9383-ed7d8bb99a6f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{B98AD935-426A-482B-9383-ED7D8BB99A6F}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{b98ad935-426a-482b-9383-ed7d8bb99a6f}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.613] SetErrorMode (uMode=0x1) returned 0x0 [0154.614] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BABB24A6-0242-4AE5-BD83-C5816526F63D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{babb24a6-0242-4ae5-bd83-c5816526f63d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.615] SetErrorMode (uMode=0x0) returned 0x1 [0154.615] GetFileType (hFile=0x230) returned 0x1 [0154.615] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.616] SetErrorMode (uMode=0x1) returned 0x0 [0154.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BABB24A6-0242-4AE5-BD83-C5816526F63D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{babb24a6-0242-4ae5-bd83-c5816526f63d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35f70026, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x35f70026, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e9aea9b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47d)) returned 1 [0154.616] SetErrorMode (uMode=0x0) returned 0x1 [0154.616] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BABB24A6-0242-4AE5-BD83-C5816526F63D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{babb24a6-0242-4ae5-bd83-c5816526f63d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BABB24A6-0242-4AE5-BD83-C5816526F63D}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{babb24a6-0242-4ae5-bd83-c5816526f63d}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.618] SetErrorMode (uMode=0x1) returned 0x0 [0154.618] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.619] SetErrorMode (uMode=0x0) returned 0x1 [0154.619] GetFileType (hFile=0x230) returned 0x1 [0154.619] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.620] SetErrorMode (uMode=0x1) returned 0x0 [0154.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3602ebb7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3602ebb7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e9d5875, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x397)) returned 1 [0154.620] SetErrorMode (uMode=0x0) returned 0x1 [0154.620] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb06c0e4-d293-4f75-8a90-cb05b6477eee}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.622] SetErrorMode (uMode=0x1) returned 0x0 [0154.622] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.624] SetErrorMode (uMode=0x0) returned 0x1 [0154.624] GetFileType (hFile=0x230) returned 0x1 [0154.624] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.625] SetErrorMode (uMode=0x1) returned 0x0 [0154.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x360c765e, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x360c765e, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e9d5875, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b4)) returned 1 [0154.625] SetErrorMode (uMode=0x0) returned 0x1 [0154.625] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bb64f8a7-bee7-4e1a-ab8d-7d8273f7fdb6}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.627] SetErrorMode (uMode=0x1) returned 0x0 [0154.627] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BD256B65-94BE-4194-84BF-41D50D0EF26E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd256b65-94be-4194-84bf-41d50d0ef26e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.628] SetErrorMode (uMode=0x0) returned 0x1 [0154.628] GetFileType (hFile=0x230) returned 0x1 [0154.628] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.629] SetErrorMode (uMode=0x1) returned 0x0 [0154.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BD256B65-94BE-4194-84BF-41D50D0EF26E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd256b65-94be-4194-84bf-41d50d0ef26e}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3615fe6e, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3615fe6e, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e9d5875, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d4)) returned 1 [0154.630] SetErrorMode (uMode=0x0) returned 0x1 [0154.630] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BD256B65-94BE-4194-84BF-41D50D0EF26E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd256b65-94be-4194-84bf-41d50d0ef26e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BD256B65-94BE-4194-84BF-41D50D0EF26E}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd256b65-94be-4194-84bf-41d50d0ef26e}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.632] SetErrorMode (uMode=0x1) returned 0x0 [0154.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.634] SetErrorMode (uMode=0x0) returned 0x1 [0154.634] GetFileType (hFile=0x230) returned 0x1 [0154.634] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.636] SetErrorMode (uMode=0x1) returned 0x0 [0154.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x362911a5, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x362911a5, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e9fd585, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x375)) returned 1 [0154.636] SetErrorMode (uMode=0x0) returned 0x1 [0154.636] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bd84b380-8ca2-1069-ab1d-08000948f534}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.639] SetErrorMode (uMode=0x1) returned 0x0 [0154.639] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.641] SetErrorMode (uMode=0x0) returned 0x1 [0154.641] GetFileType (hFile=0x230) returned 0x1 [0154.641] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.643] SetErrorMode (uMode=0x1) returned 0x0 [0154.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36329abb, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x36329abb, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5e9fd585, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0154.643] SetErrorMode (uMode=0x0) returned 0x1 [0154.643] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{be122a0e-4503-11da-8bde-f66bad1e3f3a}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.645] SetErrorMode (uMode=0x1) returned 0x0 [0154.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BEC9E135-14C1-4e00-B5C8-899F26833A5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bec9e135-14c1-4e00-b5c8-899f26833a5a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.647] SetErrorMode (uMode=0x0) returned 0x1 [0154.647] GetFileType (hFile=0x230) returned 0x1 [0154.647] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.649] SetErrorMode (uMode=0x1) returned 0x0 [0154.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BEC9E135-14C1-4e00-B5C8-899F26833A5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bec9e135-14c1-4e00-b5c8-899f26833a5a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x363c2431, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x363c2431, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ea21137, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3aa)) returned 1 [0154.650] SetErrorMode (uMode=0x0) returned 0x1 [0154.650] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BEC9E135-14C1-4e00-B5C8-899F26833A5A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bec9e135-14c1-4e00-b5c8-899f26833a5a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{BEC9E135-14C1-4e00-B5C8-899F26833A5A}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bec9e135-14c1-4e00-b5c8-899f26833a5a}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.652] SetErrorMode (uMode=0x1) returned 0x0 [0154.652] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.653] SetErrorMode (uMode=0x0) returned 0x1 [0154.653] GetFileType (hFile=0x230) returned 0x1 [0154.653] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.654] SetErrorMode (uMode=0x1) returned 0x0 [0154.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3645adf2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3645adf2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ea21137, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b4)) returned 1 [0154.654] SetErrorMode (uMode=0x0) returned 0x1 [0154.654] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{bf782cc9-5a52-4a17-806c-2a894ffeeac5}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.656] SetErrorMode (uMode=0x1) returned 0x0 [0154.656] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C16A18A2-DC4F-4B7D-92F1-14C430AD17DC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c16a18a2-dc4f-4b7d-92f1-14c430ad17dc}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.657] SetErrorMode (uMode=0x0) returned 0x1 [0154.657] GetFileType (hFile=0x230) returned 0x1 [0154.657] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.671] SetErrorMode (uMode=0x1) returned 0x0 [0154.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C16A18A2-DC4F-4B7D-92F1-14C430AD17DC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c16a18a2-dc4f-4b7d-92f1-14c430ad17dc}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x364f3702, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x364f3702, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ea4755a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b3)) returned 1 [0154.671] SetErrorMode (uMode=0x0) returned 0x1 [0154.671] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C16A18A2-DC4F-4B7D-92F1-14C430AD17DC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c16a18a2-dc4f-4b7d-92f1-14c430ad17dc}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C16A18A2-DC4F-4B7D-92F1-14C430AD17DC}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c16a18a2-dc4f-4b7d-92f1-14c430ad17dc}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.673] SetErrorMode (uMode=0x1) returned 0x0 [0154.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3915CF9-A3D9-4EFD-B209-62C05793EE0F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3915cf9-a3d9-4efd-b209-62c05793ee0f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.675] SetErrorMode (uMode=0x0) returned 0x1 [0154.675] GetFileType (hFile=0x230) returned 0x1 [0154.675] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.676] SetErrorMode (uMode=0x1) returned 0x0 [0154.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3915CF9-A3D9-4EFD-B209-62C05793EE0F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3915cf9-a3d9-4efd-b209-62c05793ee0f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3658c07e, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3658c07e, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ea4755a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d3)) returned 1 [0154.676] SetErrorMode (uMode=0x0) returned 0x1 [0154.676] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3915CF9-A3D9-4EFD-B209-62C05793EE0F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3915cf9-a3d9-4efd-b209-62c05793ee0f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3915CF9-A3D9-4EFD-B209-62C05793EE0F}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3915cf9-a3d9-4efd-b209-62c05793ee0f}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.678] SetErrorMode (uMode=0x1) returned 0x0 [0154.678] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3F521C1-249F-48FD-9D9D-731EA4568776}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3f521c1-249f-48fd-9d9d-731ea4568776}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.679] SetErrorMode (uMode=0x0) returned 0x1 [0154.679] GetFileType (hFile=0x230) returned 0x1 [0154.679] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.681] SetErrorMode (uMode=0x1) returned 0x0 [0154.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3F521C1-249F-48FD-9D9D-731EA4568776}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3f521c1-249f-48fd-9d9d-731ea4568776}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x366249db, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x366249db, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ea6d695, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fe)) returned 1 [0154.681] SetErrorMode (uMode=0x0) returned 0x1 [0154.681] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3F521C1-249F-48FD-9D9D-731EA4568776}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3f521c1-249f-48fd-9d9d-731ea4568776}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C3F521C1-249F-48FD-9D9D-731EA4568776}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c3f521c1-249f-48fd-9d9d-731ea4568776}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.682] SetErrorMode (uMode=0x1) returned 0x0 [0154.682] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5361E07-6AA3-4453-81BC-93E8F85EABED}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5361e07-6aa3-4453-81bc-93e8f85eabed}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.683] SetErrorMode (uMode=0x0) returned 0x1 [0154.683] GetFileType (hFile=0x230) returned 0x1 [0154.684] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.685] SetErrorMode (uMode=0x1) returned 0x0 [0154.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5361E07-6AA3-4453-81BC-93E8F85EABED}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5361e07-6aa3-4453-81bc-93e8f85eabed}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x366bd33c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x366bd33c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ea6d695, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0154.685] SetErrorMode (uMode=0x0) returned 0x1 [0154.685] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5361E07-6AA3-4453-81BC-93E8F85EABED}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5361e07-6aa3-4453-81bc-93e8f85eabed}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5361E07-6AA3-4453-81BC-93E8F85EABED}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5361e07-6aa3-4453-81bc-93e8f85eabed}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.686] SetErrorMode (uMode=0x1) returned 0x0 [0154.686] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.687] SetErrorMode (uMode=0x0) returned 0x1 [0154.687] GetFileType (hFile=0x230) returned 0x1 [0154.687] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.689] SetErrorMode (uMode=0x1) returned 0x0 [0154.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36755d0c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x36755d0c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ea6d695, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x38f)) returned 1 [0154.689] SetErrorMode (uMode=0x0) returned 0x1 [0154.689] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c555438b-3c23-4769-a71f-b6d3d9b6053a}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.691] SetErrorMode (uMode=0x1) returned 0x0 [0154.691] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.692] SetErrorMode (uMode=0x0) returned 0x1 [0154.692] GetFileType (hFile=0x230) returned 0x1 [0154.692] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.693] SetErrorMode (uMode=0x1) returned 0x0 [0154.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36886fb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x36886fb4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ea6d695, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x398)) returned 1 [0154.693] SetErrorMode (uMode=0x0) returned 0x1 [0154.693] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c58c4893-3be0-4b45-abb5-a63e4b8c8651}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.695] SetErrorMode (uMode=0x1) returned 0x0 [0154.695] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5AE651D-D027-4D11-8125-595B9933C78B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5ae651d-d027-4d11-8125-595b9933c78b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.696] SetErrorMode (uMode=0x0) returned 0x1 [0154.696] GetFileType (hFile=0x230) returned 0x1 [0154.696] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.697] SetErrorMode (uMode=0x1) returned 0x0 [0154.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5AE651D-D027-4D11-8125-595B9933C78B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5ae651d-d027-4d11-8125-595b9933c78b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3691f8dd, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3691f8dd, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ea949bb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x406)) returned 1 [0154.698] SetErrorMode (uMode=0x0) returned 0x1 [0154.698] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5AE651D-D027-4D11-8125-595B9933C78B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5ae651d-d027-4d11-8125-595b9933c78b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C5AE651D-D027-4D11-8125-595B9933C78B}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c5ae651d-d027-4d11-8125-595b9933c78b}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.699] SetErrorMode (uMode=0x1) returned 0x0 [0154.699] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C7C81DAD-835C-45B0-9632-60F3EB5D55AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c7c81dad-835c-45b0-9632-60f3eb5d55ac}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.700] SetErrorMode (uMode=0x0) returned 0x1 [0154.700] GetFileType (hFile=0x230) returned 0x1 [0154.700] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.701] SetErrorMode (uMode=0x1) returned 0x0 [0154.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C7C81DAD-835C-45B0-9632-60F3EB5D55AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c7c81dad-835c-45b0-9632-60f3eb5d55ac}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369b828b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x369b828b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ea949bb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3dc)) returned 1 [0154.701] SetErrorMode (uMode=0x0) returned 0x1 [0154.702] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C7C81DAD-835C-45B0-9632-60F3EB5D55AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c7c81dad-835c-45b0-9632-60f3eb5d55ac}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C7C81DAD-835C-45B0-9632-60F3EB5D55AC}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c7c81dad-835c-45b0-9632-60f3eb5d55ac}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.703] SetErrorMode (uMode=0x1) returned 0x0 [0154.703] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C86B1923-8E1F-414B-83DB-94B09BA73E15}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c86b1923-8e1f-414b-83db-94b09ba73e15}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.704] SetErrorMode (uMode=0x0) returned 0x1 [0154.704] GetFileType (hFile=0x230) returned 0x1 [0154.704] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.731] SetErrorMode (uMode=0x1) returned 0x0 [0154.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C86B1923-8E1F-414B-83DB-94B09BA73E15}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c86b1923-8e1f-414b-83db-94b09ba73e15}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36a50be8, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x36a50be8, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eadff10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e6)) returned 1 [0154.731] SetErrorMode (uMode=0x0) returned 0x1 [0154.731] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C86B1923-8E1F-414B-83DB-94B09BA73E15}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c86b1923-8e1f-414b-83db-94b09ba73e15}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{C86B1923-8E1F-414B-83DB-94B09BA73E15}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{c86b1923-8e1f-414b-83db-94b09ba73e15}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.734] SetErrorMode (uMode=0x1) returned 0x0 [0154.734] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD2A5953-36A2-427D-B762-3610F37A5D89}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd2a5953-36a2-427d-b762-3610f37a5d89}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.736] SetErrorMode (uMode=0x0) returned 0x1 [0154.736] GetFileType (hFile=0x230) returned 0x1 [0154.736] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.738] SetErrorMode (uMode=0x1) returned 0x0 [0154.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD2A5953-36A2-427D-B762-3610F37A5D89}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd2a5953-36a2-427d-b762-3610f37a5d89}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36ae953c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x36ae953c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eadff10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f6)) returned 1 [0154.738] SetErrorMode (uMode=0x0) returned 0x1 [0154.738] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD2A5953-36A2-427D-B762-3610F37A5D89}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd2a5953-36a2-427d-b762-3610f37a5d89}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD2A5953-36A2-427D-B762-3610F37A5D89}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd2a5953-36a2-427d-b762-3610f37a5d89}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.740] SetErrorMode (uMode=0x1) returned 0x0 [0154.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD95D0E3-6B3A-495B-9FDA-57FAD586304D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd95d0e3-6b3a-495b-9fda-57fad586304d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.742] SetErrorMode (uMode=0x0) returned 0x1 [0154.742] GetFileType (hFile=0x230) returned 0x1 [0154.743] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.746] SetErrorMode (uMode=0x1) returned 0x0 [0154.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD95D0E3-6B3A-495B-9FDA-57FAD586304D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd95d0e3-6b3a-495b-9fda-57fad586304d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36b81ea3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x36b81ea3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eb06073, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c1)) returned 1 [0154.746] SetErrorMode (uMode=0x0) returned 0x1 [0154.746] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD95D0E3-6B3A-495B-9FDA-57FAD586304D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd95d0e3-6b3a-495b-9fda-57fad586304d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CD95D0E3-6B3A-495B-9FDA-57FAD586304D}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cd95d0e3-6b3a-495b-9fda-57fad586304d}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.748] SetErrorMode (uMode=0x1) returned 0x0 [0154.748] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CE4F7091-EEC0-400E-A019-38503D525293}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ce4f7091-eec0-400e-a019-38503d525293}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.750] SetErrorMode (uMode=0x0) returned 0x1 [0154.750] GetFileType (hFile=0x230) returned 0x1 [0154.750] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.765] SetErrorMode (uMode=0x1) returned 0x0 [0154.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CE4F7091-EEC0-400E-A019-38503D525293}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ce4f7091-eec0-400e-a019-38503d525293}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36c66d15, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x36c66d15, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eb2eea6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d5)) returned 1 [0154.765] SetErrorMode (uMode=0x0) returned 0x1 [0154.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CE4F7091-EEC0-400E-A019-38503D525293}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ce4f7091-eec0-400e-a019-38503d525293}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CE4F7091-EEC0-400E-A019-38503D525293}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ce4f7091-eec0-400e-a019-38503d525293}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.767] SetErrorMode (uMode=0x1) returned 0x0 [0154.767] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CF081448-68EC-4969-9F8B-BB23B329B712}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cf081448-68ec-4969-9f8b-bb23b329b712}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.769] SetErrorMode (uMode=0x0) returned 0x1 [0154.769] GetFileType (hFile=0x230) returned 0x1 [0154.769] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.770] SetErrorMode (uMode=0x1) returned 0x0 [0154.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CF081448-68EC-4969-9F8B-BB23B329B712}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cf081448-68ec-4969-9f8b-bb23b329b712}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36d97f95, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x36d97f95, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eb2eea6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d2)) returned 1 [0154.771] SetErrorMode (uMode=0x0) returned 0x1 [0154.771] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CF081448-68EC-4969-9F8B-BB23B329B712}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cf081448-68ec-4969-9f8b-bb23b329b712}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{CF081448-68EC-4969-9F8B-BB23B329B712}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{cf081448-68ec-4969-9f8b-bb23b329b712}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.774] SetErrorMode (uMode=0x1) returned 0x0 [0154.774] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.776] SetErrorMode (uMode=0x0) returned 0x1 [0154.776] GetFileType (hFile=0x230) returned 0x1 [0154.776] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.785] SetErrorMode (uMode=0x1) returned 0x0 [0154.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36e56bae, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x36e56bae, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eb525b6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3de)) returned 1 [0154.785] SetErrorMode (uMode=0x0) returned 0x1 [0154.785] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d17d1d6d-cc3f-4815-8fe3-607e7d5d10b3}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.787] SetErrorMode (uMode=0x1) returned 0x0 [0154.787] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D1AF7F5F-18C1-4143-81E5-EDAF02255883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d1af7f5f-18c1-4143-81e5-edaf02255883}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.789] SetErrorMode (uMode=0x0) returned 0x1 [0154.789] GetFileType (hFile=0x230) returned 0x1 [0154.789] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.791] SetErrorMode (uMode=0x1) returned 0x0 [0154.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D1AF7F5F-18C1-4143-81E5-EDAF02255883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d1af7f5f-18c1-4143-81e5-edaf02255883}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36eef54a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x36eef54a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eb789b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3bd)) returned 1 [0154.792] SetErrorMode (uMode=0x0) returned 0x1 [0154.792] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D1AF7F5F-18C1-4143-81E5-EDAF02255883}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d1af7f5f-18c1-4143-81e5-edaf02255883}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D1AF7F5F-18C1-4143-81E5-EDAF02255883}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d1af7f5f-18c1-4143-81e5-edaf02255883}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.793] SetErrorMode (uMode=0x1) returned 0x0 [0154.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.795] SetErrorMode (uMode=0x0) returned 0x1 [0154.795] GetFileType (hFile=0x230) returned 0x1 [0154.795] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.796] SetErrorMode (uMode=0x1) returned 0x0 [0154.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36f87e4a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x36f87e4a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eb789b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x389)) returned 1 [0154.797] SetErrorMode (uMode=0x0) returned 0x1 [0154.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d20ea4e1-3957-11d2-a40b-0c5020524153}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.798] SetErrorMode (uMode=0x1) returned 0x0 [0154.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D4690CFE-6A59-4BAB-BFF7-9ED0D083E798}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d4690cfe-6a59-4bab-bff7-9ed0d083e798}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.799] SetErrorMode (uMode=0x0) returned 0x1 [0154.799] GetFileType (hFile=0x230) returned 0x1 [0154.800] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.801] SetErrorMode (uMode=0x1) returned 0x0 [0154.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D4690CFE-6A59-4BAB-BFF7-9ED0D083E798}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d4690cfe-6a59-4bab-bff7-9ed0d083e798}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x370207b4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x370207b4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eb789b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x481)) returned 1 [0154.801] SetErrorMode (uMode=0x0) returned 0x1 [0154.801] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D4690CFE-6A59-4BAB-BFF7-9ED0D083E798}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d4690cfe-6a59-4bab-bff7-9ed0d083e798}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D4690CFE-6A59-4BAB-BFF7-9ED0D083E798}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d4690cfe-6a59-4bab-bff7-9ed0d083e798}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.803] SetErrorMode (uMode=0x1) returned 0x0 [0154.803] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.813] SetErrorMode (uMode=0x0) returned 0x1 [0154.813] GetFileType (hFile=0x230) returned 0x1 [0154.813] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.815] SetErrorMode (uMode=0x1) returned 0x0 [0154.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3750b551, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3750b551, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eb9ea54, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c1)) returned 1 [0154.815] SetErrorMode (uMode=0x0) returned 0x1 [0154.815] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d555645e-d4f8-4c29-a827-d93c859c4f2a}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.817] SetErrorMode (uMode=0x1) returned 0x0 [0154.817] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5BAC999-E706-4311-9DB0-86E117B1FD25}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5bac999-e706-4311-9db0-86e117b1fd25}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.818] SetErrorMode (uMode=0x0) returned 0x1 [0154.818] GetFileType (hFile=0x230) returned 0x1 [0154.818] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.831] SetErrorMode (uMode=0x1) returned 0x0 [0154.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5BAC999-E706-4311-9DB0-86E117B1FD25}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5bac999-e706-4311-9db0-86e117b1fd25}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x375a3f31, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x375a3f31, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ebc9922, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45a)) returned 1 [0154.831] SetErrorMode (uMode=0x0) returned 0x1 [0154.831] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5BAC999-E706-4311-9DB0-86E117B1FD25}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5bac999-e706-4311-9db0-86e117b1fd25}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5BAC999-E706-4311-9DB0-86E117B1FD25}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5bac999-e706-4311-9db0-86e117b1fd25}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.834] SetErrorMode (uMode=0x1) returned 0x0 [0154.834] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5D5B38A-0FD8-43B6-8C7D-372D84BD357D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5d5b38a-0fd8-43b6-8c7d-372d84bd357d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.837] SetErrorMode (uMode=0x0) returned 0x1 [0154.837] GetFileType (hFile=0x230) returned 0x1 [0154.837] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.839] SetErrorMode (uMode=0x1) returned 0x0 [0154.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5D5B38A-0FD8-43B6-8C7D-372D84BD357D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5d5b38a-0fd8-43b6-8c7d-372d84bd357d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3763c8ab, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3763c8ab, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ebecd1c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ef)) returned 1 [0154.840] SetErrorMode (uMode=0x0) returned 0x1 [0154.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5D5B38A-0FD8-43B6-8C7D-372D84BD357D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5d5b38a-0fd8-43b6-8c7d-372d84bd357d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D5D5B38A-0FD8-43B6-8C7D-372D84BD357D}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d5d5b38a-0fd8-43b6-8c7d-372d84bd357d}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.843] SetErrorMode (uMode=0x1) returned 0x0 [0154.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D652F9E4-08FD-4A24-8EAC-05715188233E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d652f9e4-08fd-4a24-8eac-05715188233e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.845] SetErrorMode (uMode=0x0) returned 0x1 [0154.845] GetFileType (hFile=0x230) returned 0x1 [0154.845] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.847] SetErrorMode (uMode=0x1) returned 0x0 [0154.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D652F9E4-08FD-4A24-8EAC-05715188233E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d652f9e4-08fd-4a24-8eac-05715188233e}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377e0273, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x377e0273, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ebecd1c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x399)) returned 1 [0154.847] SetErrorMode (uMode=0x0) returned 0x1 [0154.847] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D652F9E4-08FD-4A24-8EAC-05715188233E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d652f9e4-08fd-4a24-8eac-05715188233e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D652F9E4-08FD-4A24-8EAC-05715188233E}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d652f9e4-08fd-4a24-8eac-05715188233e}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.850] SetErrorMode (uMode=0x1) returned 0x0 [0154.850] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D679D992-D843-4D3C-BFEA-5EDF4D37EE9F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d679d992-d843-4d3c-bfea-5edf4d37ee9f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.851] SetErrorMode (uMode=0x0) returned 0x1 [0154.852] GetFileType (hFile=0x230) returned 0x1 [0154.852] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.854] SetErrorMode (uMode=0x1) returned 0x0 [0154.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D679D992-D843-4D3C-BFEA-5EDF4D37EE9F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d679d992-d843-4d3c-bfea-5edf4d37ee9f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37878b98, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x37878b98, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ec11166, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0154.854] SetErrorMode (uMode=0x0) returned 0x1 [0154.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D679D992-D843-4D3C-BFEA-5EDF4D37EE9F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d679d992-d843-4d3c-bfea-5edf4d37ee9f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D679D992-D843-4D3C-BFEA-5EDF4D37EE9F}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d679d992-d843-4d3c-bfea-5edf4d37ee9f}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.857] SetErrorMode (uMode=0x1) returned 0x0 [0154.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D825FEC7-DA3D-456A-BEF2-20F07BA0449E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d825fec7-da3d-456a-bef2-20f07ba0449e}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.859] SetErrorMode (uMode=0x0) returned 0x1 [0154.859] GetFileType (hFile=0x230) returned 0x1 [0154.859] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.873] SetErrorMode (uMode=0x1) returned 0x0 [0154.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D825FEC7-DA3D-456A-BEF2-20F07BA0449E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d825fec7-da3d-456a-bef2-20f07ba0449e}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37911556, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x37911556, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ec37517, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f7)) returned 1 [0154.874] SetErrorMode (uMode=0x0) returned 0x1 [0154.874] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D825FEC7-DA3D-456A-BEF2-20F07BA0449E}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d825fec7-da3d-456a-bef2-20f07ba0449e}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D825FEC7-DA3D-456A-BEF2-20F07BA0449E}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d825fec7-da3d-456a-bef2-20f07ba0449e}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.876] SetErrorMode (uMode=0x1) returned 0x0 [0154.876] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D995F7E9-727D-4AD6-83F3-A4A753965A8F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d995f7e9-727d-4ad6-83f3-a4a753965a8f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.878] SetErrorMode (uMode=0x0) returned 0x1 [0154.878] GetFileType (hFile=0x230) returned 0x1 [0154.878] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.880] SetErrorMode (uMode=0x1) returned 0x0 [0154.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D995F7E9-727D-4AD6-83F3-A4A753965A8F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d995f7e9-727d-4ad6-83f3-a4a753965a8f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379a9e72, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x379a9e72, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ec37517, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3dc)) returned 1 [0154.880] SetErrorMode (uMode=0x0) returned 0x1 [0154.880] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D995F7E9-727D-4AD6-83F3-A4A753965A8F}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d995f7e9-727d-4ad6-83f3-a4a753965a8f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{D995F7E9-727D-4AD6-83F3-A4A753965A8F}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d995f7e9-727d-4ad6-83f3-a4a753965a8f}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.892] SetErrorMode (uMode=0x1) returned 0x0 [0154.892] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.894] SetErrorMode (uMode=0x0) returned 0x1 [0154.894] GetFileType (hFile=0x230) returned 0x1 [0154.894] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.896] SetErrorMode (uMode=0x1) returned 0x0 [0154.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37b99ba5, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x37b99ba5, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ec686a6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x405)) returned 1 [0154.896] SetErrorMode (uMode=0x0) returned 0x1 [0154.897] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{d9ef8727-cac2-4e60-809e-86f80a666c91}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.903] SetErrorMode (uMode=0x1) returned 0x0 [0154.903] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.906] SetErrorMode (uMode=0x0) returned 0x1 [0154.906] GetFileType (hFile=0x230) returned 0x1 [0154.906] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.913] SetErrorMode (uMode=0x1) returned 0x0 [0154.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ccb026, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x37ccb026, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ec84a4f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3dc)) returned 1 [0154.914] SetErrorMode (uMode=0x0) returned 0x1 [0154.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{da9f1e02-aa94-40bf-b3cd-030231a10acc}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.917] SetErrorMode (uMode=0x1) returned 0x0 [0154.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DAF32862-EF3D-4D61-AB92-47AEB51DDC80}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{daf32862-ef3d-4d61-ab92-47aeb51ddc80}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.919] SetErrorMode (uMode=0x0) returned 0x1 [0154.919] GetFileType (hFile=0x230) returned 0x1 [0154.919] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.922] SetErrorMode (uMode=0x1) returned 0x0 [0154.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DAF32862-EF3D-4D61-AB92-47AEB51DDC80}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{daf32862-ef3d-4d61-ab92-47aeb51ddc80}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37d6395b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x37d6395b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eca9a34, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b6)) returned 1 [0154.922] SetErrorMode (uMode=0x0) returned 0x1 [0154.922] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DAF32862-EF3D-4D61-AB92-47AEB51DDC80}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{daf32862-ef3d-4d61-ab92-47aeb51ddc80}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DAF32862-EF3D-4D61-AB92-47AEB51DDC80}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{daf32862-ef3d-4d61-ab92-47aeb51ddc80}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.925] SetErrorMode (uMode=0x1) returned 0x0 [0154.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DD338333-7000-45CC-A84D-64680D6E683D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{dd338333-7000-45cc-a84d-64680d6e683d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.927] SetErrorMode (uMode=0x0) returned 0x1 [0154.927] GetFileType (hFile=0x230) returned 0x1 [0154.927] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.930] SetErrorMode (uMode=0x1) returned 0x0 [0154.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DD338333-7000-45CC-A84D-64680D6E683D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{dd338333-7000-45cc-a84d-64680d6e683d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37dfc325, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x37dfc325, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eccfbb1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47f)) returned 1 [0154.930] SetErrorMode (uMode=0x0) returned 0x1 [0154.931] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DD338333-7000-45CC-A84D-64680D6E683D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{dd338333-7000-45cc-a84d-64680d6e683d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DD338333-7000-45CC-A84D-64680D6E683D}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{dd338333-7000-45cc-a84d-64680d6e683d}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.933] SetErrorMode (uMode=0x1) returned 0x0 [0154.933] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DDF23EF5-6677-42C1-92CB-29BDCB7375B8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ddf23ef5-6677-42c1-92cb-29bdcb7375b8}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.935] SetErrorMode (uMode=0x0) returned 0x1 [0154.935] GetFileType (hFile=0x230) returned 0x1 [0154.935] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.947] SetErrorMode (uMode=0x1) returned 0x0 [0154.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DDF23EF5-6677-42C1-92CB-29BDCB7375B8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ddf23ef5-6677-42c1-92cb-29bdcb7375b8}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37e94c19, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x37e94c19, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ecf88c9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42f)) returned 1 [0154.947] SetErrorMode (uMode=0x0) returned 0x1 [0154.947] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DDF23EF5-6677-42C1-92CB-29BDCB7375B8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ddf23ef5-6677-42c1-92cb-29bdcb7375b8}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DDF23EF5-6677-42C1-92CB-29BDCB7375B8}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ddf23ef5-6677-42c1-92cb-29bdcb7375b8}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.950] SetErrorMode (uMode=0x1) returned 0x0 [0154.950] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DF7B19EF-DEA5-47D7-BBA5-9FCBE400A59D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{df7b19ef-dea5-47d7-bba5-9fcbe400a59d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.952] SetErrorMode (uMode=0x0) returned 0x1 [0154.952] GetFileType (hFile=0x230) returned 0x1 [0154.952] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.956] SetErrorMode (uMode=0x1) returned 0x0 [0154.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DF7B19EF-DEA5-47D7-BBA5-9FCBE400A59D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{df7b19ef-dea5-47d7-bba5-9fcbe400a59d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f2d5ef, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x37f2d5ef, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ed0ec8d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e1)) returned 1 [0154.956] SetErrorMode (uMode=0x0) returned 0x1 [0154.956] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DF7B19EF-DEA5-47D7-BBA5-9FCBE400A59D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{df7b19ef-dea5-47d7-bba5-9fcbe400a59d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{DF7B19EF-DEA5-47D7-BBA5-9FCBE400A59D}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{df7b19ef-dea5-47d7-bba5-9fcbe400a59d}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.959] SetErrorMode (uMode=0x1) returned 0x0 [0154.959] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E00117F3-53BA-4E06-B9BF-B8E22A1469E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e00117f3-53ba-4e06-b9bf-b8e22a1469e6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.960] SetErrorMode (uMode=0x0) returned 0x1 [0154.961] GetFileType (hFile=0x230) returned 0x1 [0154.961] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.962] SetErrorMode (uMode=0x1) returned 0x0 [0154.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E00117F3-53BA-4E06-B9BF-B8E22A1469E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e00117f3-53ba-4e06-b9bf-b8e22a1469e6}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37fc5f0b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x37fc5f0b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ed1ea89, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x377)) returned 1 [0154.963] SetErrorMode (uMode=0x0) returned 0x1 [0154.963] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E00117F3-53BA-4E06-B9BF-B8E22A1469E6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e00117f3-53ba-4e06-b9bf-b8e22a1469e6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E00117F3-53BA-4E06-B9BF-B8E22A1469E6}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e00117f3-53ba-4e06-b9bf-b8e22a1469e6}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.966] SetErrorMode (uMode=0x1) returned 0x0 [0154.966] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E07F215A-6022-40E0-A109-17078992E5F9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e07f215a-6022-40e0-a109-17078992e5f9}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.968] SetErrorMode (uMode=0x0) returned 0x1 [0154.968] GetFileType (hFile=0x230) returned 0x1 [0154.969] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.970] SetErrorMode (uMode=0x1) returned 0x0 [0154.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E07F215A-6022-40E0-A109-17078992E5F9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e07f215a-6022-40e0-a109-17078992e5f9}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3805e8e2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3805e8e2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ed25fa0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x424)) returned 1 [0154.972] SetErrorMode (uMode=0x0) returned 0x1 [0154.972] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E07F215A-6022-40E0-A109-17078992E5F9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e07f215a-6022-40e0-a109-17078992e5f9}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E07F215A-6022-40E0-A109-17078992E5F9}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e07f215a-6022-40e0-a109-17078992e5f9}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.977] SetErrorMode (uMode=0x1) returned 0x0 [0154.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E2394C16-F45A-496F-83CC-49E163281662}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2394c16-f45a-496f-83cc-49e163281662}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.979] SetErrorMode (uMode=0x0) returned 0x1 [0154.979] GetFileType (hFile=0x230) returned 0x1 [0154.979] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.981] SetErrorMode (uMode=0x1) returned 0x0 [0154.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E2394C16-F45A-496F-83CC-49E163281662}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2394c16-f45a-496f-83cc-49e163281662}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x380f724f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x380f724f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ed25fa0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a9)) returned 1 [0154.981] SetErrorMode (uMode=0x0) returned 0x1 [0154.981] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E2394C16-F45A-496F-83CC-49E163281662}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2394c16-f45a-496f-83cc-49e163281662}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E2394C16-F45A-496F-83CC-49E163281662}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2394c16-f45a-496f-83cc-49e163281662}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.984] SetErrorMode (uMode=0x1) returned 0x0 [0154.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.985] SetErrorMode (uMode=0x0) returned 0x1 [0154.985] GetFileType (hFile=0x230) returned 0x1 [0154.985] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.987] SetErrorMode (uMode=0x1) returned 0x0 [0154.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3818fba0, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3818fba0, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ed4c416, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39b)) returned 1 [0154.987] SetErrorMode (uMode=0x0) returned 0x1 [0154.987] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e2e7934b-dce5-43c4-9576-7fe4f75e7480}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.989] SetErrorMode (uMode=0x1) returned 0x0 [0154.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E4B554C8-B067-4540-A478-0565BB1F76B9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e4b554c8-b067-4540-a478-0565bb1f76b9}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.991] SetErrorMode (uMode=0x0) returned 0x1 [0154.991] GetFileType (hFile=0x230) returned 0x1 [0154.991] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.993] SetErrorMode (uMode=0x1) returned 0x0 [0154.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E4B554C8-B067-4540-A478-0565BB1F76B9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e4b554c8-b067-4540-a478-0565bb1f76b9}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x382c0d77, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x382c0d77, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ed4c416, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x390)) returned 1 [0154.993] SetErrorMode (uMode=0x0) returned 0x1 [0154.993] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E4B554C8-B067-4540-A478-0565BB1F76B9}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e4b554c8-b067-4540-a478-0565bb1f76b9}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E4B554C8-B067-4540-A478-0565BB1F76B9}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e4b554c8-b067-4540-a478-0565bb1f76b9}.settingcontent-ms.partially.cryptonar")) returned 1 [0154.995] SetErrorMode (uMode=0x1) returned 0x0 [0154.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E6243488-3449-4D4D-98AA-FFC14E3FF0F8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e6243488-3449-4d4d-98aa-ffc14e3ff0f8}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0154.997] SetErrorMode (uMode=0x0) returned 0x1 [0154.997] GetFileType (hFile=0x230) returned 0x1 [0154.997] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0154.999] SetErrorMode (uMode=0x1) returned 0x0 [0154.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E6243488-3449-4D4D-98AA-FFC14E3FF0F8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e6243488-3449-4d4d-98aa-ffc14e3ff0f8}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38595b4a, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x38595b4a, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ed73abb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b1)) returned 1 [0155.000] SetErrorMode (uMode=0x0) returned 0x1 [0155.000] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E6243488-3449-4D4D-98AA-FFC14E3FF0F8}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e6243488-3449-4d4d-98aa-ffc14e3ff0f8}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E6243488-3449-4D4D-98AA-FFC14E3FF0F8}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e6243488-3449-4d4d-98aa-ffc14e3ff0f8}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.003] SetErrorMode (uMode=0x1) returned 0x0 [0155.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E79BCB1B-EEB7-4180-98FD-BD47F6DCFF79}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e79bcb1b-eeb7-4180-98fd-bd47f6dcff79}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.005] SetErrorMode (uMode=0x0) returned 0x1 [0155.005] GetFileType (hFile=0x230) returned 0x1 [0155.005] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.007] SetErrorMode (uMode=0x1) returned 0x0 [0155.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E79BCB1B-EEB7-4180-98FD-BD47F6DCFF79}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e79bcb1b-eeb7-4180-98fd-bd47f6dcff79}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38902fa9, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x38902fa9, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ed73abb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f3)) returned 1 [0155.007] SetErrorMode (uMode=0x0) returned 0x1 [0155.007] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E79BCB1B-EEB7-4180-98FD-BD47F6DCFF79}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e79bcb1b-eeb7-4180-98fd-bd47f6dcff79}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E79BCB1B-EEB7-4180-98FD-BD47F6DCFF79}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e79bcb1b-eeb7-4180-98fd-bd47f6dcff79}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.009] SetErrorMode (uMode=0x1) returned 0x0 [0155.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.012] SetErrorMode (uMode=0x0) returned 0x1 [0155.012] GetFileType (hFile=0x230) returned 0x1 [0155.012] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.014] SetErrorMode (uMode=0x1) returned 0x0 [0155.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38a0e183, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x38a0e183, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ed98954, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x46a)) returned 1 [0155.014] SetErrorMode (uMode=0x0) returned 0x1 [0155.014] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9950154-c418-419e-a90a-20c5287ae24b}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.016] SetErrorMode (uMode=0x1) returned 0x0 [0155.016] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E9C71548-B580-43B2-ACDB-1BA924002754}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9c71548-b580-43b2-acdb-1ba924002754}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.018] SetErrorMode (uMode=0x0) returned 0x1 [0155.018] GetFileType (hFile=0x230) returned 0x1 [0155.018] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.020] SetErrorMode (uMode=0x1) returned 0x0 [0155.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E9C71548-B580-43B2-ACDB-1BA924002754}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9c71548-b580-43b2-acdb-1ba924002754}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38aa6b41, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x38aa6b41, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ed98954, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39b)) returned 1 [0155.020] SetErrorMode (uMode=0x0) returned 0x1 [0155.020] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E9C71548-B580-43B2-ACDB-1BA924002754}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9c71548-b580-43b2-acdb-1ba924002754}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{E9C71548-B580-43B2-ACDB-1BA924002754}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{e9c71548-b580-43b2-acdb-1ba924002754}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.022] SetErrorMode (uMode=0x1) returned 0x0 [0155.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EBEC2956-F512-474D-8631-9E753CC40653}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ebec2956-f512-474d-8631-9e753cc40653}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.024] SetErrorMode (uMode=0x0) returned 0x1 [0155.024] GetFileType (hFile=0x230) returned 0x1 [0155.024] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.026] SetErrorMode (uMode=0x1) returned 0x0 [0155.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EBEC2956-F512-474D-8631-9E753CC40653}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ebec2956-f512-474d-8631-9e753cc40653}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38c2414e, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x38c2414e, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ed98954, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ec)) returned 1 [0155.026] SetErrorMode (uMode=0x0) returned 0x1 [0155.026] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EBEC2956-F512-474D-8631-9E753CC40653}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ebec2956-f512-474d-8631-9e753cc40653}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EBEC2956-F512-474D-8631-9E753CC40653}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ebec2956-f512-474d-8631-9e753cc40653}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.028] SetErrorMode (uMode=0x1) returned 0x0 [0155.028] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.030] SetErrorMode (uMode=0x0) returned 0x1 [0155.030] GetFileType (hFile=0x230) returned 0x1 [0155.030] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.032] SetErrorMode (uMode=0x1) returned 0x0 [0155.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38cbcaca, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x38cbcaca, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5edbf706, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x462)) returned 1 [0155.032] SetErrorMode (uMode=0x0) returned 0x1 [0155.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ecdb0924-4208-451e-8ee0-373c0956de16}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.034] SetErrorMode (uMode=0x1) returned 0x0 [0155.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ED0FF627-BFD1-4F68-9A74-974E73F41A3A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed0ff627-bfd1-4f68-9a74-974e73f41a3a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.036] SetErrorMode (uMode=0x0) returned 0x1 [0155.036] GetFileType (hFile=0x230) returned 0x1 [0155.036] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.037] SetErrorMode (uMode=0x1) returned 0x0 [0155.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ED0FF627-BFD1-4F68-9A74-974E73F41A3A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed0ff627-bfd1-4f68-9a74-974e73f41a3a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d55577, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x38d55577, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5edbf706, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42f)) returned 1 [0155.038] SetErrorMode (uMode=0x0) returned 0x1 [0155.038] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ED0FF627-BFD1-4F68-9A74-974E73F41A3A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed0ff627-bfd1-4f68-9a74-974e73f41a3a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ED0FF627-BFD1-4F68-9A74-974E73F41A3A}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed0ff627-bfd1-4f68-9a74-974e73f41a3a}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.039] SetErrorMode (uMode=0x1) returned 0x0 [0155.039] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.041] SetErrorMode (uMode=0x0) returned 0x1 [0155.041] GetFileType (hFile=0x230) returned 0x1 [0155.041] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.042] SetErrorMode (uMode=0x1) returned 0x0 [0155.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38eac963, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x38eac963, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5edbf706, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x39b)) returned 1 [0155.043] SetErrorMode (uMode=0x0) returned 0x1 [0155.043] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ed834ed6-4b5a-4bfe-8f11-a626dcb6a921}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.045] SetErrorMode (uMode=0x1) returned 0x0 [0155.045] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE423D17-7ED8-4B33-9555-C23DEEAFB4B6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee423d17-7ed8-4b33-9555-c23deeafb4b6}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.046] SetErrorMode (uMode=0x0) returned 0x1 [0155.046] GetFileType (hFile=0x230) returned 0x1 [0155.046] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.047] SetErrorMode (uMode=0x1) returned 0x0 [0155.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE423D17-7ED8-4B33-9555-C23DEEAFB4B6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee423d17-7ed8-4b33-9555-c23deeafb4b6}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391cdafc, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x391cdafc, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ede4d7f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4a8)) returned 1 [0155.048] SetErrorMode (uMode=0x0) returned 0x1 [0155.048] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE423D17-7ED8-4B33-9555-C23DEEAFB4B6}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee423d17-7ed8-4b33-9555-c23deeafb4b6}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE423D17-7ED8-4B33-9555-C23DEEAFB4B6}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee423d17-7ed8-4b33-9555-c23deeafb4b6}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.050] SetErrorMode (uMode=0x1) returned 0x0 [0155.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE439E7E-CE1E-4ABE-9EA8-50F12ED01FE0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee439e7e-ce1e-4abe-9ea8-50f12ed01fe0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.052] SetErrorMode (uMode=0x0) returned 0x1 [0155.052] GetFileType (hFile=0x230) returned 0x1 [0155.052] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.053] SetErrorMode (uMode=0x1) returned 0x0 [0155.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE439E7E-CE1E-4ABE-9EA8-50F12ED01FE0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee439e7e-ce1e-4abe-9ea8-50f12ed01fe0}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39c6226c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x39c6226c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ede4d7f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3da)) returned 1 [0155.053] SetErrorMode (uMode=0x0) returned 0x1 [0155.053] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE439E7E-CE1E-4ABE-9EA8-50F12ED01FE0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee439e7e-ce1e-4abe-9ea8-50f12ed01fe0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EE439E7E-CE1E-4ABE-9EA8-50F12ED01FE0}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ee439e7e-ce1e-4abe-9ea8-50f12ed01fe0}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.055] SetErrorMode (uMode=0x1) returned 0x0 [0155.055] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF462183-352B-4DCF-811C-07FA7CFCD5AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef462183-352b-4dcf-811c-07fa7cfcd5ac}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.057] SetErrorMode (uMode=0x0) returned 0x1 [0155.057] GetFileType (hFile=0x230) returned 0x1 [0155.057] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.064] SetErrorMode (uMode=0x1) returned 0x0 [0155.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF462183-352B-4DCF-811C-07FA7CFCD5AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef462183-352b-4dcf-811c-07fa7cfcd5ac}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39d6d431, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x39d6d431, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ee14ce4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d9)) returned 1 [0155.064] SetErrorMode (uMode=0x0) returned 0x1 [0155.064] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF462183-352B-4DCF-811C-07FA7CFCD5AC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef462183-352b-4dcf-811c-07fa7cfcd5ac}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF462183-352B-4DCF-811C-07FA7CFCD5AC}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef462183-352b-4dcf-811c-07fa7cfcd5ac}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.066] SetErrorMode (uMode=0x1) returned 0x0 [0155.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF8F379B-747B-4C8E-B3D1-4A29E6CF45AE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef8f379b-747b-4c8e-b3d1-4a29e6cf45ae}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.067] SetErrorMode (uMode=0x0) returned 0x1 [0155.067] GetFileType (hFile=0x230) returned 0x1 [0155.067] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.070] SetErrorMode (uMode=0x1) returned 0x0 [0155.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF8F379B-747B-4C8E-B3D1-4A29E6CF45AE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef8f379b-747b-4c8e-b3d1-4a29e6cf45ae}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e05db6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x39e05db6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ee14ce4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c8)) returned 1 [0155.070] SetErrorMode (uMode=0x0) returned 0x1 [0155.070] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF8F379B-747B-4C8E-B3D1-4A29E6CF45AE}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef8f379b-747b-4c8e-b3d1-4a29e6cf45ae}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EF8F379B-747B-4C8E-B3D1-4A29E6CF45AE}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ef8f379b-747b-4c8e-b3d1-4a29e6cf45ae}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.074] SetErrorMode (uMode=0x1) returned 0x0 [0155.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EFACECBA-BCCD-468B-BAB3-7CA40A898982}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{efacecba-bccd-468b-bab3-7ca40a898982}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.076] SetErrorMode (uMode=0x0) returned 0x1 [0155.076] GetFileType (hFile=0x230) returned 0x1 [0155.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.117] SetErrorMode (uMode=0x1) returned 0x0 [0155.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EFACECBA-BCCD-468B-BAB3-7CA40A898982}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{efacecba-bccd-468b-bab3-7ca40a898982}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39e9e6a7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x39e9e6a7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ee7d854, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x495)) returned 1 [0155.118] SetErrorMode (uMode=0x0) returned 0x1 [0155.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EFACECBA-BCCD-468B-BAB3-7CA40A898982}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{efacecba-bccd-468b-bab3-7ca40a898982}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{EFACECBA-BCCD-468B-BAB3-7CA40A898982}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{efacecba-bccd-468b-bab3-7ca40a898982}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.120] SetErrorMode (uMode=0x1) returned 0x0 [0155.120] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F025B6FD-D1CA-4a32-9BEB-DBEF1D2F6926}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f025b6fd-d1ca-4a32-9beb-dbef1d2f6926}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.121] SetErrorMode (uMode=0x0) returned 0x1 [0155.121] GetFileType (hFile=0x230) returned 0x1 [0155.122] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.151] SetErrorMode (uMode=0x1) returned 0x0 [0155.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F025B6FD-D1CA-4a32-9BEB-DBEF1D2F6926}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f025b6fd-d1ca-4a32-9beb-dbef1d2f6926}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39f3700d, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x39f3700d, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eec9de9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x389)) returned 1 [0155.151] SetErrorMode (uMode=0x0) returned 0x1 [0155.151] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F025B6FD-D1CA-4a32-9BEB-DBEF1D2F6926}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f025b6fd-d1ca-4a32-9beb-dbef1d2f6926}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F025B6FD-D1CA-4a32-9BEB-DBEF1D2F6926}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f025b6fd-d1ca-4a32-9beb-dbef1d2f6926}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.153] SetErrorMode (uMode=0x1) returned 0x0 [0155.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F0E02D62-6C1D-4eb3-AC47-F8401425C6BC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f0e02d62-6c1d-4eb3-ac47-f8401425c6bc}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.155] SetErrorMode (uMode=0x0) returned 0x1 [0155.155] GetFileType (hFile=0x230) returned 0x1 [0155.155] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.157] SetErrorMode (uMode=0x1) returned 0x0 [0155.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F0E02D62-6C1D-4eb3-AC47-F8401425C6BC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f0e02d62-6c1d-4eb3-ac47-f8401425c6bc}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fcf9a6, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x39fcf9a6, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5eef0b1a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e2)) returned 1 [0155.157] SetErrorMode (uMode=0x0) returned 0x1 [0155.157] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F0E02D62-6C1D-4eb3-AC47-F8401425C6BC}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f0e02d62-6c1d-4eb3-ac47-f8401425c6bc}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F0E02D62-6C1D-4eb3-AC47-F8401425C6BC}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f0e02d62-6c1d-4eb3-ac47-f8401425c6bc}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.159] SetErrorMode (uMode=0x1) returned 0x0 [0155.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F120B10E-C882-4613-955F-B4DF13C6E803}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f120b10e-c882-4613-955f-b4df13c6e803}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.161] SetErrorMode (uMode=0x0) returned 0x1 [0155.161] GetFileType (hFile=0x230) returned 0x1 [0155.161] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.175] SetErrorMode (uMode=0x1) returned 0x0 [0155.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F120B10E-C882-4613-955F-B4DF13C6E803}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f120b10e-c882-4613-955f-b4df13c6e803}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a06830c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a06830c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ef161c6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ec)) returned 1 [0155.176] SetErrorMode (uMode=0x0) returned 0x1 [0155.176] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F120B10E-C882-4613-955F-B4DF13C6E803}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f120b10e-c882-4613-955f-b4df13c6e803}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F120B10E-C882-4613-955F-B4DF13C6E803}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f120b10e-c882-4613-955f-b4df13c6e803}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.179] SetErrorMode (uMode=0x1) returned 0x0 [0155.179] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.181] SetErrorMode (uMode=0x0) returned 0x1 [0155.181] GetFileType (hFile=0x230) returned 0x1 [0155.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.217] SetErrorMode (uMode=0x1) returned 0x0 [0155.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a100cec, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a100cec, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ef88880, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x38d)) returned 1 [0155.217] SetErrorMode (uMode=0x0) returned 0x1 [0155.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2ddfc82-8f12-4cdd-b7dc-d4fe1425aa4d}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.219] SetErrorMode (uMode=0x1) returned 0x0 [0155.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F2E71049-6F88-4A3B-9475-5A2B40B36092}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2e71049-6f88-4a3b-9475-5a2b40b36092}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.221] SetErrorMode (uMode=0x0) returned 0x1 [0155.221] GetFileType (hFile=0x230) returned 0x1 [0155.221] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.222] SetErrorMode (uMode=0x1) returned 0x0 [0155.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F2E71049-6F88-4A3B-9475-5A2B40B36092}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2e71049-6f88-4a3b-9475-5a2b40b36092}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a1995e3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a1995e3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ef88880, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x498)) returned 1 [0155.222] SetErrorMode (uMode=0x0) returned 0x1 [0155.222] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F2E71049-6F88-4A3B-9475-5A2B40B36092}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2e71049-6f88-4a3b-9475-5a2b40b36092}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F2E71049-6F88-4A3B-9475-5A2B40B36092}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f2e71049-6f88-4a3b-9475-5a2b40b36092}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.224] SetErrorMode (uMode=0x1) returned 0x0 [0155.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F3FD1F8E-B34A-49AE-95B9-5DBEAB5BFB49}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f3fd1f8e-b34a-49ae-95b9-5dbeab5bfb49}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.226] SetErrorMode (uMode=0x0) returned 0x1 [0155.226] GetFileType (hFile=0x230) returned 0x1 [0155.226] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.228] SetErrorMode (uMode=0x1) returned 0x0 [0155.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F3FD1F8E-B34A-49AE-95B9-5DBEAB5BFB49}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f3fd1f8e-b34a-49ae-95b9-5dbeab5bfb49}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a231f2b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a231f2b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5ef88880, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0155.228] SetErrorMode (uMode=0x0) returned 0x1 [0155.228] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F3FD1F8E-B34A-49AE-95B9-5DBEAB5BFB49}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f3fd1f8e-b34a-49ae-95b9-5dbeab5bfb49}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F3FD1F8E-B34A-49AE-95B9-5DBEAB5BFB49}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f3fd1f8e-b34a-49ae-95b9-5dbeab5bfb49}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.230] SetErrorMode (uMode=0x1) returned 0x0 [0155.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.232] SetErrorMode (uMode=0x0) returned 0x1 [0155.232] GetFileType (hFile=0x230) returned 0x1 [0155.232] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.234] SetErrorMode (uMode=0x1) returned 0x0 [0155.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a579341, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a579341, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5efae9e9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b3)) returned 1 [0155.235] SetErrorMode (uMode=0x0) returned 0x1 [0155.235] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f56fbb39-e6d9-4b6d-9c29-ae82cff2925f}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.237] SetErrorMode (uMode=0x1) returned 0x0 [0155.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.238] SetErrorMode (uMode=0x0) returned 0x1 [0155.239] GetFileType (hFile=0x230) returned 0x1 [0155.239] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.240] SetErrorMode (uMode=0x1) returned 0x0 [0155.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a611cb7, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a611cb7, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5efae9e9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x454)) returned 1 [0155.240] SetErrorMode (uMode=0x0) returned 0x1 [0155.240] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f6b6e965-e9b2-444b-9286-10c9152edbc5}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.242] SetErrorMode (uMode=0x1) returned 0x0 [0155.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.244] SetErrorMode (uMode=0x0) returned 0x1 [0155.244] GetFileType (hFile=0x230) returned 0x1 [0155.244] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.245] SetErrorMode (uMode=0x1) returned 0x0 [0155.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a6aa643, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a6aa643, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5efae9e9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3bd)) returned 1 [0155.246] SetErrorMode (uMode=0x0) returned 0x1 [0155.246] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f82df8f7-8b9f-442e-a48c-818ea735ff9b}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.249] SetErrorMode (uMode=0x1) returned 0x0 [0155.249] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F96E2F30-2018-4F0E-BBEE-7CCBEE8CE714}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f96e2f30-2018-4f0e-bbee-7ccbee8ce714}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.250] SetErrorMode (uMode=0x0) returned 0x1 [0155.250] GetFileType (hFile=0x230) returned 0x1 [0155.250] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.251] SetErrorMode (uMode=0x1) returned 0x0 [0155.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F96E2F30-2018-4F0E-BBEE-7CCBEE8CE714}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f96e2f30-2018-4f0e-bbee-7ccbee8ce714}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a742f7b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a742f7b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5efd4c40, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b8)) returned 1 [0155.252] SetErrorMode (uMode=0x0) returned 0x1 [0155.252] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F96E2F30-2018-4F0E-BBEE-7CCBEE8CE714}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f96e2f30-2018-4f0e-bbee-7ccbee8ce714}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{F96E2F30-2018-4F0E-BBEE-7CCBEE8CE714}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{f96e2f30-2018-4f0e-bbee-7ccbee8ce714}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.253] SetErrorMode (uMode=0x1) returned 0x0 [0155.253] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FADA4BFB-4853-4547-B70F-1B565E7D907B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fada4bfb-4853-4547-b70f-1b565e7d907b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.255] SetErrorMode (uMode=0x0) returned 0x1 [0155.255] GetFileType (hFile=0x230) returned 0x1 [0155.255] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.321] SetErrorMode (uMode=0x1) returned 0x0 [0155.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FADA4BFB-4853-4547-B70F-1B565E7D907B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fada4bfb-4853-4547-b70f-1b565e7d907b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a84dea3, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a84dea3, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5f06d75c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3aa)) returned 1 [0155.321] SetErrorMode (uMode=0x0) returned 0x1 [0155.321] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FADA4BFB-4853-4547-B70F-1B565E7D907B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fada4bfb-4853-4547-b70f-1b565e7d907b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FADA4BFB-4853-4547-B70F-1B565E7D907B}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fada4bfb-4853-4547-b70f-1b565e7d907b}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.323] SetErrorMode (uMode=0x1) returned 0x0 [0155.323] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FD4FB8FA-F752-4E78-933B-8969E18BC9B5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fd4fb8fa-f752-4e78-933b-8969e18bc9b5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.325] SetErrorMode (uMode=0x0) returned 0x1 [0155.325] GetFileType (hFile=0x230) returned 0x1 [0155.325] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.338] SetErrorMode (uMode=0x1) returned 0x0 [0155.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FD4FB8FA-F752-4E78-933B-8969E18BC9B5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fd4fb8fa-f752-4e78-933b-8969e18bc9b5}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a932e4c, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a932e4c, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5f093ae5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47c)) returned 1 [0155.338] SetErrorMode (uMode=0x0) returned 0x1 [0155.339] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FD4FB8FA-F752-4E78-933B-8969E18BC9B5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fd4fb8fa-f752-4e78-933b-8969e18bc9b5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FD4FB8FA-F752-4E78-933B-8969E18BC9B5}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fd4fb8fa-f752-4e78-933b-8969e18bc9b5}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.341] SetErrorMode (uMode=0x1) returned 0x0 [0155.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FE777427-D33C-485B-A414-3BD5A2943162}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fe777427-d33c-485b-a414-3bd5a2943162}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.342] SetErrorMode (uMode=0x0) returned 0x1 [0155.342] GetFileType (hFile=0x230) returned 0x1 [0155.343] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.361] SetErrorMode (uMode=0x1) returned 0x0 [0155.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FE777427-D33C-485B-A414-3BD5A2943162}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fe777427-d33c-485b-a414-3bd5a2943162}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9cb76f, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3a9cb76f, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5f0dfe55, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d7)) returned 1 [0155.361] SetErrorMode (uMode=0x0) returned 0x1 [0155.362] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FE777427-D33C-485B-A414-3BD5A2943162}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fe777427-d33c-485b-a414-3bd5a2943162}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FE777427-D33C-485B-A414-3BD5A2943162}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{fe777427-d33c-485b-a414-3bd5a2943162}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.364] SetErrorMode (uMode=0x1) returned 0x0 [0155.364] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEBB9292-6110-4B9E-8565-91C4076E0A43}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{febb9292-6110-4b9e-8565-91c4076e0a43}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.365] SetErrorMode (uMode=0x0) returned 0x1 [0155.365] GetFileType (hFile=0x230) returned 0x1 [0155.365] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.379] SetErrorMode (uMode=0x1) returned 0x0 [0155.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEBB9292-6110-4B9E-8565-91C4076E0A43}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{febb9292-6110-4b9e-8565-91c4076e0a43}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab6f013, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3ab6f013, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5f106067, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x408)) returned 1 [0155.379] SetErrorMode (uMode=0x0) returned 0x1 [0155.379] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEBB9292-6110-4B9E-8565-91C4076E0A43}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{febb9292-6110-4b9e-8565-91c4076e0a43}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEBB9292-6110-4B9E-8565-91C4076E0A43}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{febb9292-6110-4b9e-8565-91c4076e0a43}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.382] SetErrorMode (uMode=0x1) returned 0x0 [0155.382] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEFF8F5D-EB40-485d-AC2A-EB7942DDF624}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{feff8f5d-eb40-485d-ac2a-eb7942ddf624}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.383] SetErrorMode (uMode=0x0) returned 0x1 [0155.383] GetFileType (hFile=0x230) returned 0x1 [0155.383] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.396] SetErrorMode (uMode=0x1) returned 0x0 [0155.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEFF8F5D-EB40-485d-AC2A-EB7942DDF624}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{feff8f5d-eb40-485d-ac2a-eb7942ddf624}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ac7a1d4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3ac7a1d4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5f12c1e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x38f)) returned 1 [0155.396] SetErrorMode (uMode=0x0) returned 0x1 [0155.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEFF8F5D-EB40-485d-AC2A-EB7942DDF624}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{feff8f5d-eb40-485d-ac2a-eb7942ddf624}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FEFF8F5D-EB40-485d-AC2A-EB7942DDF624}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{feff8f5d-eb40-485d-ac2a-eb7942ddf624}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.398] SetErrorMode (uMode=0x1) returned 0x0 [0155.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FFA33B6C-DC4D-438C-893F-EBF44A09BFC0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ffa33b6c-dc4d-438c-893f-ebf44a09bfc0}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.400] SetErrorMode (uMode=0x0) returned 0x1 [0155.400] GetFileType (hFile=0x230) returned 0x1 [0155.400] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.428] SetErrorMode (uMode=0x1) returned 0x0 [0155.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FFA33B6C-DC4D-438C-893F-EBF44A09BFC0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ffa33b6c-dc4d-438c-893f-ebf44a09bfc0}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ad12b3b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3ad12b3b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5f1786fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x37f)) returned 1 [0155.428] SetErrorMode (uMode=0x0) returned 0x1 [0155.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FFA33B6C-DC4D-438C-893F-EBF44A09BFC0}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ffa33b6c-dc4d-438c-893f-ebf44a09bfc0}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\Classic_{FFA33B6C-DC4D-438C-893F-EBF44A09BFC0}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\classic_{ffa33b6c-dc4d-438c-893f-ebf44a09bfc0}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.430] SetErrorMode (uMode=0x1) returned 0x0 [0155.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\ControlPanel.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\controlpanel.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.432] SetErrorMode (uMode=0x0) returned 0x1 [0155.432] GetFileType (hFile=0x230) returned 0x1 [0155.432] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.453] SetErrorMode (uMode=0x1) returned 0x0 [0155.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\ControlPanel.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\controlpanel.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ae69f46, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3ae69f46, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5f1c4bcf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2e7)) returned 1 [0155.453] SetErrorMode (uMode=0x0) returned 0x1 [0155.453] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\ControlPanel.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\controlpanel.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\ControlPanel.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\controlpanel.settingcontent-ms.partially.cryptonar")) returned 1 [0155.455] SetErrorMode (uMode=0x1) returned 0x0 [0155.455] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\CortanaSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\cortanasettings.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.456] SetErrorMode (uMode=0x0) returned 0x1 [0155.456] GetFileType (hFile=0x230) returned 0x1 [0155.456] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.486] SetErrorMode (uMode=0x1) returned 0x0 [0155.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\CortanaSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\cortanasettings.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af029e0, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3af029e0, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5f2110f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x306)) returned 1 [0155.487] SetErrorMode (uMode=0x0) returned 0x1 [0155.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\CortanaSettings.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\cortanasettings.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\CortanaSettings.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\cortanasettings.settingcontent-ms.partially.cryptonar")) returned 1 [0155.488] SetErrorMode (uMode=0x1) returned 0x0 [0155.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_0_FlashPlayerCPLApp.cpl.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_0_flashplayercplapp.cpl.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.489] SetErrorMode (uMode=0x0) returned 0x1 [0155.489] GetFileType (hFile=0x230) returned 0x1 [0155.489] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.491] SetErrorMode (uMode=0x1) returned 0x0 [0155.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_0_FlashPlayerCPLApp.cpl.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_0_flashplayercplapp.cpl.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26efee7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd26efee7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5f2110f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f8)) returned 1 [0155.491] SetErrorMode (uMode=0x0) returned 0x1 [0155.491] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_0_FlashPlayerCPLApp.cpl.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_0_flashplayercplapp.cpl.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_0_FlashPlayerCPLApp.cpl.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_0_flashplayercplapp.cpl.settingcontent-ms.partially.cryptonar")) returned 1 [0155.492] SetErrorMode (uMode=0x1) returned 0x0 [0155.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{025A5937-A6BE-4686-A844-36FE4BEC8B6D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{025a5937-a6be-4686-a844-36fe4bec8b6d}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.493] SetErrorMode (uMode=0x0) returned 0x1 [0155.493] GetFileType (hFile=0x230) returned 0x1 [0155.493] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.495] SetErrorMode (uMode=0x1) returned 0x0 [0155.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{025A5937-A6BE-4686-A844-36FE4BEC8B6D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{025a5937-a6be-4686-a844-36fe4bec8b6d}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd27d4cc4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xd27d4cc4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5f2110f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45c)) returned 1 [0155.495] SetErrorMode (uMode=0x0) returned 0x1 [0155.495] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{025A5937-A6BE-4686-A844-36FE4BEC8B6D}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{025a5937-a6be-4686-a844-36fe4bec8b6d}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{025A5937-A6BE-4686-A844-36FE4BEC8B6D}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{025a5937-a6be-4686-a844-36fe4bec8b6d}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.496] SetErrorMode (uMode=0x1) returned 0x0 [0155.496] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.497] SetErrorMode (uMode=0x0) returned 0x1 [0155.497] GetFileType (hFile=0x230) returned 0x1 [0155.497] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.512] SetErrorMode (uMode=0x1) returned 0x0 [0155.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f63e989, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5f63e989, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f237261, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x458)) returned 1 [0155.512] SetErrorMode (uMode=0x0) returned 0x1 [0155.512] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{60632754-c523-4b62-b45c-4172da012619}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.514] SetErrorMode (uMode=0x1) returned 0x0 [0155.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{6C8EEC18-8D75-41B2-A177-8831D59D2D50}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{6c8eec18-8d75-41b2-a177-8831d59d2d50}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.517] SetErrorMode (uMode=0x0) returned 0x1 [0155.517] GetFileType (hFile=0x230) returned 0x1 [0155.517] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.535] SetErrorMode (uMode=0x1) returned 0x0 [0155.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{6C8EEC18-8D75-41B2-A177-8831D59D2D50}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{6c8eec18-8d75-41b2-a177-8831d59d2d50}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fcf4257, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5fcf4257, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f283811, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x44d)) returned 1 [0155.536] SetErrorMode (uMode=0x0) returned 0x1 [0155.536] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{6C8EEC18-8D75-41B2-A177-8831D59D2D50}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{6c8eec18-8d75-41b2-a177-8831d59d2d50}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{6C8EEC18-8D75-41B2-A177-8831D59D2D50}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{6c8eec18-8d75-41b2-a177-8831d59d2d50}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.538] SetErrorMode (uMode=0x1) returned 0x0 [0155.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.540] SetErrorMode (uMode=0x0) returned 0x1 [0155.541] GetFileType (hFile=0x230) returned 0x1 [0155.541] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.553] SetErrorMode (uMode=0x1) returned 0x0 [0155.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x601b8e8d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x601b8e8d, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f2a9990, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x464)) returned 1 [0155.553] SetErrorMode (uMode=0x0) returned 0x1 [0155.553] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{7b81be6a-ce2b-4676-a29e-eb907a5126c5}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.555] SetErrorMode (uMode=0x1) returned 0x0 [0155.556] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{96AE8D84-A250-4520-95A5-A47A7E3C548B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{96ae8d84-a250-4520-95a5-a47a7e3c548b}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.557] SetErrorMode (uMode=0x0) returned 0x1 [0155.557] GetFileType (hFile=0x230) returned 0x1 [0155.557] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.583] SetErrorMode (uMode=0x1) returned 0x0 [0155.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{96AE8D84-A250-4520-95A5-A47A7E3C548B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{96ae8d84-a250-4520-95a5-a47a7e3c548b}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63a11650, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x63a11650, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f2f5e3a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43d)) returned 1 [0155.583] SetErrorMode (uMode=0x0) returned 0x1 [0155.583] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{96AE8D84-A250-4520-95A5-A47A7E3C548B}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{96ae8d84-a250-4520-95a5-a47a7e3c548b}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{96AE8D84-A250-4520-95A5-A47A7E3C548B}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{96ae8d84-a250-4520-95a5-a47a7e3c548b}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.585] SetErrorMode (uMode=0x1) returned 0x0 [0155.585] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{b98a2bea-7d42-4558-8bd1-832f41bac6fd}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.586] SetErrorMode (uMode=0x0) returned 0x1 [0155.587] GetFileType (hFile=0x230) returned 0x1 [0155.587] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.595] SetErrorMode (uMode=0x1) returned 0x0 [0155.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{b98a2bea-7d42-4558-8bd1-832f41bac6fd}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b68b67, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x63b68b67, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f31c04b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45a)) returned 1 [0155.596] SetErrorMode (uMode=0x0) returned 0x1 [0155.596] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{b98a2bea-7d42-4558-8bd1-832f41bac6fd}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{b98a2bea-7d42-4558-8bd1-832f41bac6fd}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.599] SetErrorMode (uMode=0x1) returned 0x0 [0155.599] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{d8559eb9-20c0-410e-beda-7ed416aecc2a}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.601] SetErrorMode (uMode=0x0) returned 0x1 [0155.601] GetFileType (hFile=0x230) returned 0x1 [0155.601] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.673] SetErrorMode (uMode=0x1) returned 0x0 [0155.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{d8559eb9-20c0-410e-beda-7ed416aecc2a}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63ce6306, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x63ce6306, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f3dc6bf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x479)) returned 1 [0155.673] SetErrorMode (uMode=0x0) returned 0x1 [0155.673] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{d8559eb9-20c0-410e-beda-7ed416aecc2a}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{d8559eb9-20c0-410e-beda-7ed416aecc2a}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.676] SetErrorMode (uMode=0x1) returned 0x0 [0155.676] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{F942C606-0914-47AB-BE56-1321B8035096}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{f942c606-0914-47ab-be56-1321b8035096}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.677] SetErrorMode (uMode=0x0) returned 0x1 [0155.677] GetFileType (hFile=0x230) returned 0x1 [0155.677] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.881] SetErrorMode (uMode=0x1) returned 0x0 [0155.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{F942C606-0914-47AB-BE56-1321B8035096}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{f942c606-0914-47ab-be56-1321b8035096}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63da4ec8, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x63da4ec8, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f5cab10, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x444)) returned 1 [0155.882] SetErrorMode (uMode=0x0) returned 0x1 [0155.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{F942C606-0914-47AB-BE56-1321B8035096}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{f942c606-0914-47ab-be56-1321b8035096}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\NameSpace_Classic_{F942C606-0914-47AB-BE56-1321B8035096}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\namespace_classic_{f942c606-0914-47ab-be56-1321b8035096}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.884] SetErrorMode (uMode=0x1) returned 0x0 [0155.884] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\SettingsPane_{4B719A8A-CE18-4033-BE59-1083B40F25B7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\settingspane_{4b719a8a-ce18-4033-be59-1083b40f25b7}.settingcontent-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.886] SetErrorMode (uMode=0x0) returned 0x1 [0155.886] GetFileType (hFile=0x230) returned 0x1 [0155.886] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.888] SetErrorMode (uMode=0x1) returned 0x0 [0155.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\SettingsPane_{4B719A8A-CE18-4033-BE59-1083B40F25B7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\settingspane_{4b719a8a-ce18-4033-be59-1083b40f25b7}.settingcontent-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af9b32b, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3af9b32b, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x5f5f0bff, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x34e)) returned 1 [0155.888] SetErrorMode (uMode=0x0) returned 0x1 [0155.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\SettingsPane_{4B719A8A-CE18-4033-BE59-1083B40F25B7}.settingcontent-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\settingspane_{4b719a8a-ce18-4033-be59-1083b40f25b7}.settingcontent-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\LocalState\\Indexed\\Settings\\en-US\\SettingsPane_{4B719A8A-CE18-4033-BE59-1083B40F25B7}.settingcontent-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\localstate\\indexed\\settings\\en-us\\settingspane_{4b719a8a-ce18-4033-be59-1083b40f25b7}.settingcontent-ms.partially.cryptonar")) returned 1 [0155.889] SetErrorMode (uMode=0x1) returned 0x0 [0155.890] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.892] SetErrorMode (uMode=0x0) returned 0x1 [0155.892] GetFileType (hFile=0x230) returned 0x1 [0155.893] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.893] SetErrorMode (uMode=0x1) returned 0x0 [0155.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe084cc1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbe084cc1, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbe084cc1, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0155.893] SetErrorMode (uMode=0x0) returned 0x1 [0155.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0155.895] SetErrorMode (uMode=0x1) returned 0x0 [0155.895] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.896] SetErrorMode (uMode=0x0) returned 0x1 [0155.896] GetFileType (hFile=0x230) returned 0x1 [0155.896] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.908] SetErrorMode (uMode=0x1) returned 0x0 [0155.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe084cc1, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78cb3125, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f622795, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0155.909] SetErrorMode (uMode=0x0) returned 0x1 [0155.909] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0155.911] SetErrorMode (uMode=0x1) returned 0x0 [0155.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.912] SetErrorMode (uMode=0x0) returned 0x1 [0155.912] GetFileType (hFile=0x230) returned 0x1 [0155.912] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.914] SetErrorMode (uMode=0x1) returned 0x0 [0155.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78c1a7b9, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78c1a7b9, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f622795, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0155.914] SetErrorMode (uMode=0x0) returned 0x1 [0155.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0155.916] SetErrorMode (uMode=0x1) returned 0x0 [0155.916] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.917] SetErrorMode (uMode=0x0) returned 0x1 [0155.917] GetFileType (hFile=0x230) returned 0x1 [0155.918] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.918] SetErrorMode (uMode=0x1) returned 0x0 [0155.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78c1a7b9, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78c1a7b9, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78c1a7b9, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0155.918] SetErrorMode (uMode=0x0) returned 0x1 [0155.918] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.immersivecontrolpanel_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0155.920] SetErrorMode (uMode=0x1) returned 0x0 [0155.920] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.923] SetErrorMode (uMode=0x0) returned 0x1 [0155.923] GetFileType (hFile=0x230) returned 0x1 [0155.923] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0155.923] SetErrorMode (uMode=0x1) returned 0x0 [0155.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe549815, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbe549815, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbe549815, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0155.923] SetErrorMode (uMode=0x0) returned 0x1 [0155.923] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0155.925] SetErrorMode (uMode=0x1) returned 0x0 [0155.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0155.926] SetErrorMode (uMode=0x0) returned 0x1 [0155.926] GetFileType (hFile=0x230) returned 0x1 [0155.926] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.067] SetErrorMode (uMode=0x1) returned 0x0 [0156.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe549815, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78e0a646, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f79481d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.067] SetErrorMode (uMode=0x0) returned 0x1 [0156.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0156.069] SetErrorMode (uMode=0x1) returned 0x0 [0156.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.070] SetErrorMode (uMode=0x0) returned 0x1 [0156.071] GetFileType (hFile=0x230) returned 0x1 [0156.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.072] SetErrorMode (uMode=0x1) returned 0x0 [0156.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78d4ba7b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78d4ba7b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f79481d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.072] SetErrorMode (uMode=0x0) returned 0x1 [0156.072] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0156.074] SetErrorMode (uMode=0x1) returned 0x0 [0156.074] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.076] SetErrorMode (uMode=0x0) returned 0x1 [0156.076] GetFileType (hFile=0x230) returned 0x1 [0156.076] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.077] SetErrorMode (uMode=0x1) returned 0x0 [0156.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78d4ba7b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78d4ba7b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78d4ba7b, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0156.077] SetErrorMode (uMode=0x0) returned 0x1 [0156.077] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.MiracastView_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.miracastview_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0156.080] SetErrorMode (uMode=0x1) returned 0x0 [0156.080] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.086] SetErrorMode (uMode=0x0) returned 0x1 [0156.086] GetFileType (hFile=0x230) returned 0x1 [0156.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.086] SetErrorMode (uMode=0x1) returned 0x0 [0156.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe9c1ed4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbe9c1ed4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbe9c1ed4, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0156.087] SetErrorMode (uMode=0x0) returned 0x1 [0156.087] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0156.088] SetErrorMode (uMode=0x1) returned 0x0 [0156.088] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.090] SetErrorMode (uMode=0x0) returned 0x1 [0156.090] GetFileType (hFile=0x230) returned 0x1 [0156.090] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.156] SetErrorMode (uMode=0x1) returned 0x0 [0156.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe9c1ed4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x78f156c2, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f879690, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.157] SetErrorMode (uMode=0x0) returned 0x1 [0156.157] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0156.159] SetErrorMode (uMode=0x1) returned 0x0 [0156.159] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.160] SetErrorMode (uMode=0x0) returned 0x1 [0156.160] GetFileType (hFile=0x230) returned 0x1 [0156.160] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.161] SetErrorMode (uMode=0x1) returned 0x0 [0156.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78e7cd4d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78e7cd4d, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f879690, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.162] SetErrorMode (uMode=0x0) returned 0x1 [0156.162] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0156.163] SetErrorMode (uMode=0x1) returned 0x0 [0156.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.165] SetErrorMode (uMode=0x0) returned 0x1 [0156.165] GetFileType (hFile=0x230) returned 0x1 [0156.165] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.165] SetErrorMode (uMode=0x1) returned 0x0 [0156.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78e7cd4d, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78e7cd4d, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78e7cd4d, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0156.165] SetErrorMode (uMode=0x0) returned 0x1 [0156.165] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PrintDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.printdialog_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0156.167] SetErrorMode (uMode=0x1) returned 0x0 [0156.167] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\roaming.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.171] SetErrorMode (uMode=0x0) returned 0x1 [0156.171] GetFileType (hFile=0x230) returned 0x1 [0156.171] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.171] SetErrorMode (uMode=0x1) returned 0x0 [0156.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\roaming.lock"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbedc7e72, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbedc7e72, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbedc7e72, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0156.171] SetErrorMode (uMode=0x0) returned 0x1 [0156.171] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\roaming.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\roaming.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\roaming.lock.partially.cryptonar")) returned 1 [0156.173] SetErrorMode (uMode=0x1) returned 0x0 [0156.174] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.175] SetErrorMode (uMode=0x0) returned 0x1 [0156.175] GetFileType (hFile=0x230) returned 0x1 [0156.175] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.219] SetErrorMode (uMode=0x1) returned 0x0 [0156.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbedc7e72, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0x7904698a, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f911f11, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.219] SetErrorMode (uMode=0x0) returned 0x1 [0156.220] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.partially.cryptonar")) returned 1 [0156.221] SetErrorMode (uMode=0x1) returned 0x0 [0156.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.223] SetErrorMode (uMode=0x0) returned 0x1 [0156.223] GetFileType (hFile=0x230) returned 0x1 [0156.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.224] SetErrorMode (uMode=0x1) returned 0x0 [0156.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78fae02e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78fae02e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5f911f11, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.224] SetErrorMode (uMode=0x0) returned 0x1 [0156.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log1.partially.cryptonar")) returned 1 [0156.226] SetErrorMode (uMode=0x1) returned 0x0 [0156.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.227] SetErrorMode (uMode=0x0) returned 0x1 [0156.227] GetFileType (hFile=0x230) returned 0x1 [0156.227] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.227] SetErrorMode (uMode=0x1) returned 0x0 [0156.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x78fae02e, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x78fae02e, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x78fae02e, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0156.227] SetErrorMode (uMode=0x0) returned 0x1 [0156.227] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Settings\\settings.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\settings\\settings.dat.log2.partially.cryptonar")) returned 1 [0156.228] SetErrorMode (uMode=0x1) returned 0x0 [0156.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.231] SetErrorMode (uMode=0x0) returned 0x1 [0156.231] GetFileType (hFile=0x230) returned 0x1 [0156.231] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.233] SetErrorMode (uMode=0x1) returned 0x0 [0156.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef91a8d, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5f938bf8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0156.233] SetErrorMode (uMode=0x0) returned 0x1 [0156.233] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.partially.cryptonar")) returned 1 [0156.235] SetErrorMode (uMode=0x1) returned 0x0 [0156.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.236] SetErrorMode (uMode=0x0) returned 0x1 [0156.236] GetFileType (hFile=0x230) returned 0x1 [0156.236] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.365] SetErrorMode (uMode=0x1) returned 0x0 [0156.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef1f37c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5fa695af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0156.365] SetErrorMode (uMode=0x0) returned 0x1 [0156.365] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log1.partially.cryptonar")) returned 1 [0156.366] SetErrorMode (uMode=0x1) returned 0x0 [0156.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.368] SetErrorMode (uMode=0x0) returned 0x1 [0156.368] GetFileType (hFile=0x230) returned 0x1 [0156.368] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.368] SetErrorMode (uMode=0x1) returned 0x0 [0156.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xbef1f37c, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xbef1f37c, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0xbef1f37c, ftLastWriteTime.dwHighDateTime=0x1d2d079, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0156.368] SetErrorMode (uMode=0x0) returned 0x1 [0156.368] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Packages\\Windows.PurchaseDialog_cw5n1h2txyewy\\Windows.PurchaseDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\ActivationStore\\ActivationStore.dat.LOG2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\packages\\windows.purchasedialog_cw5n1h2txyewy\\windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\\activationstore\\activationstore.dat.log2.partially.cryptonar")) returned 1 [0156.369] SetErrorMode (uMode=0x1) returned 0x0 [0156.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\-_f5SrbxRGd3MT.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\-_f5srbxrgd3mt.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.370] SetErrorMode (uMode=0x0) returned 0x1 [0156.370] GetFileType (hFile=0x230) returned 0x1 [0156.370] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.371] SetErrorMode (uMode=0x1) returned 0x0 [0156.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\-_f5SrbxRGd3MT.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\-_f5srbxrgd3mt.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87445810, ftCreationTime.dwHighDateTime=0x1d41a86, ftLastAccessTime.dwLowDateTime=0x94d4fe30, ftLastAccessTime.dwHighDateTime=0x1d41338, ftLastWriteTime.dwLowDateTime=0x5fa695af, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12441)) returned 1 [0156.371] SetErrorMode (uMode=0x0) returned 0x1 [0156.371] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\-_f5SrbxRGd3MT.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\-_f5srbxrgd3mt.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\-_f5SrbxRGd3MT.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\-_f5srbxrgd3mt.gif.partially.cryptonar")) returned 1 [0156.373] SetErrorMode (uMode=0x1) returned 0x0 [0156.373] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\0 p00AkWEgnqgnXzoQ.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\0 p00akwegnqgnxzoq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.374] SetErrorMode (uMode=0x0) returned 0x1 [0156.374] GetFileType (hFile=0x230) returned 0x1 [0156.374] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.375] SetErrorMode (uMode=0x1) returned 0x0 [0156.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\0 p00AkWEgnqgnXzoQ.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\0 p00akwegnqgnxzoq.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d2f2310, ftCreationTime.dwHighDateTime=0x1d41c3b, ftLastAccessTime.dwLowDateTime=0xb1186390, ftLastAccessTime.dwHighDateTime=0x1d41192, ftLastWriteTime.dwLowDateTime=0x5fa8f602, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15672)) returned 1 [0156.376] SetErrorMode (uMode=0x0) returned 0x1 [0156.376] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\0 p00AkWEgnqgnXzoQ.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\0 p00akwegnqgnxzoq.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\0 p00AkWEgnqgnXzoQ.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\0 p00akwegnqgnxzoq.wav.partially.cryptonar")) returned 1 [0156.378] SetErrorMode (uMode=0x1) returned 0x0 [0156.378] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\4D2dPL8yU0pu7r.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\4d2dpl8yu0pu7r.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.379] SetErrorMode (uMode=0x0) returned 0x1 [0156.379] GetFileType (hFile=0x230) returned 0x1 [0156.380] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.381] SetErrorMode (uMode=0x1) returned 0x0 [0156.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\4D2dPL8yU0pu7r.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\4d2dpl8yu0pu7r.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa167f10, ftCreationTime.dwHighDateTime=0x1d419cf, ftLastAccessTime.dwLowDateTime=0x51aba5d0, ftLastAccessTime.dwHighDateTime=0x1d4162d, ftLastWriteTime.dwLowDateTime=0x5fa8f602, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x57d8)) returned 1 [0156.381] SetErrorMode (uMode=0x0) returned 0x1 [0156.381] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\4D2dPL8yU0pu7r.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\4d2dpl8yu0pu7r.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\4D2dPL8yU0pu7r.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\4d2dpl8yu0pu7r.bmp.partially.cryptonar")) returned 1 [0156.384] SetErrorMode (uMode=0x1) returned 0x0 [0156.384] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\51O0SCVmAC0PzLaXS.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\51o0scvmac0pzlaxs.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.386] SetErrorMode (uMode=0x0) returned 0x1 [0156.387] GetFileType (hFile=0x230) returned 0x1 [0156.387] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.390] SetErrorMode (uMode=0x1) returned 0x0 [0156.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\51O0SCVmAC0PzLaXS.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\51o0scvmac0pzlaxs.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef5c6430, ftCreationTime.dwHighDateTime=0x1d41309, ftLastAccessTime.dwLowDateTime=0xfbaeb0c0, ftLastAccessTime.dwHighDateTime=0x1d4185a, ftLastWriteTime.dwLowDateTime=0x5fabb1d6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x180cf)) returned 1 [0156.390] SetErrorMode (uMode=0x0) returned 0x1 [0156.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\51O0SCVmAC0PzLaXS.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\51o0scvmac0pzlaxs.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\51O0SCVmAC0PzLaXS.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\51o0scvmac0pzlaxs.swf.partially.cryptonar")) returned 1 [0156.393] SetErrorMode (uMode=0x1) returned 0x0 [0156.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8J SlfuqTaQI.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8j slfuqtaqi.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.396] SetErrorMode (uMode=0x0) returned 0x1 [0156.396] GetFileType (hFile=0x230) returned 0x1 [0156.396] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.396] SetErrorMode (uMode=0x1) returned 0x0 [0156.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8J SlfuqTaQI.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8j slfuqtaqi.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd331630, ftCreationTime.dwHighDateTime=0x1d41f7a, ftLastAccessTime.dwLowDateTime=0x3d3a46e0, ftLastAccessTime.dwHighDateTime=0x1d41904, ftLastWriteTime.dwLowDateTime=0x5fabb1d6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14fb9)) returned 1 [0156.397] SetErrorMode (uMode=0x0) returned 0x1 [0156.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8J SlfuqTaQI.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8j slfuqtaqi.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8J SlfuqTaQI.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8j slfuqtaqi.wav.partially.cryptonar")) returned 1 [0156.398] SetErrorMode (uMode=0x1) returned 0x0 [0156.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8uTccVzZ27RTaHi5bXYy.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8utccvzz27rtahi5bxyy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.400] SetErrorMode (uMode=0x0) returned 0x1 [0156.400] GetFileType (hFile=0x230) returned 0x1 [0156.400] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.400] SetErrorMode (uMode=0x1) returned 0x0 [0156.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8uTccVzZ27RTaHi5bXYy.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8utccvzz27rtahi5bxyy.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5354230, ftCreationTime.dwHighDateTime=0x1d419d2, ftLastAccessTime.dwLowDateTime=0x7b4ea9b0, ftLastAccessTime.dwHighDateTime=0x1d41e65, ftLastWriteTime.dwLowDateTime=0x5fabb1d6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9312)) returned 1 [0156.401] SetErrorMode (uMode=0x0) returned 0x1 [0156.401] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8uTccVzZ27RTaHi5bXYy.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8utccvzz27rtahi5bxyy.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\8uTccVzZ27RTaHi5bXYy.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\8utccvzz27rtahi5bxyy.png.partially.cryptonar")) returned 1 [0156.403] SetErrorMode (uMode=0x1) returned 0x0 [0156.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\9MF22.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\9mf22.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.405] SetErrorMode (uMode=0x0) returned 0x1 [0156.405] GetFileType (hFile=0x230) returned 0x1 [0156.405] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.406] SetErrorMode (uMode=0x1) returned 0x0 [0156.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\9MF22.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\9mf22.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80008c40, ftCreationTime.dwHighDateTime=0x1d41220, ftLastAccessTime.dwLowDateTime=0xb681c800, ftLastAccessTime.dwHighDateTime=0x1d41ad2, ftLastWriteTime.dwLowDateTime=0x5fadbb64, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1202c)) returned 1 [0156.406] SetErrorMode (uMode=0x0) returned 0x1 [0156.406] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\9MF22.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\9mf22.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\9MF22.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\9mf22.bmp.partially.cryptonar")) returned 1 [0156.408] SetErrorMode (uMode=0x1) returned 0x0 [0156.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\b-fcakPzOJRm PnKn8.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\b-fcakpzojrm pnkn8.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.411] SetErrorMode (uMode=0x0) returned 0x1 [0156.411] GetFileType (hFile=0x230) returned 0x1 [0156.411] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.412] SetErrorMode (uMode=0x1) returned 0x0 [0156.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\b-fcakPzOJRm PnKn8.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\b-fcakpzojrm pnkn8.odp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3445f7b0, ftCreationTime.dwHighDateTime=0x1d41e4e, ftLastAccessTime.dwLowDateTime=0xa82aa270, ftLastAccessTime.dwHighDateTime=0x1d41c1e, ftLastWriteTime.dwLowDateTime=0x5fadbb64, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12a05)) returned 1 [0156.412] SetErrorMode (uMode=0x0) returned 0x1 [0156.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\b-fcakPzOJRm PnKn8.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\b-fcakpzojrm pnkn8.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\b-fcakPzOJRm PnKn8.odp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\b-fcakpzojrm pnkn8.odp.partially.cryptonar")) returned 1 [0156.415] SetErrorMode (uMode=0x1) returned 0x0 [0156.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\CqnT7Ga4MoIVz_a3H.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\cqnt7ga4moivz_a3h.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.417] SetErrorMode (uMode=0x0) returned 0x1 [0156.417] GetFileType (hFile=0x230) returned 0x1 [0156.417] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.418] SetErrorMode (uMode=0x1) returned 0x0 [0156.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\CqnT7Ga4MoIVz_a3H.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\cqnt7ga4moivz_a3h.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50434b90, ftCreationTime.dwHighDateTime=0x1d41843, ftLastAccessTime.dwLowDateTime=0x968a9dc0, ftLastAccessTime.dwHighDateTime=0x1d411d5, ftLastWriteTime.dwLowDateTime=0x5fadbb64, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10c34)) returned 1 [0156.420] SetErrorMode (uMode=0x0) returned 0x1 [0156.421] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\CqnT7Ga4MoIVz_a3H.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\cqnt7ga4moivz_a3h.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\CqnT7Ga4MoIVz_a3H.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\cqnt7ga4moivz_a3h.m4a.partially.cryptonar")) returned 1 [0156.422] SetErrorMode (uMode=0x1) returned 0x0 [0156.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\EGvzUrIec.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\egvzuriec.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.424] SetErrorMode (uMode=0x0) returned 0x1 [0156.424] GetFileType (hFile=0x230) returned 0x1 [0156.424] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.425] SetErrorMode (uMode=0x1) returned 0x0 [0156.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\EGvzUrIec.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\egvzuriec.odt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a90b660, ftCreationTime.dwHighDateTime=0x1d41576, ftLastAccessTime.dwLowDateTime=0x2a644220, ftLastAccessTime.dwHighDateTime=0x1d41b0f, ftLastWriteTime.dwLowDateTime=0x5fb01fd7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42e6)) returned 1 [0156.425] SetErrorMode (uMode=0x0) returned 0x1 [0156.425] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\EGvzUrIec.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\egvzuriec.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\EGvzUrIec.odt.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\egvzuriec.odt.partially.cryptonar")) returned 1 [0156.427] SetErrorMode (uMode=0x1) returned 0x0 [0156.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\lc-57v3JcaleFIV.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\lc-57v3jcalefiv.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.428] SetErrorMode (uMode=0x0) returned 0x1 [0156.428] GetFileType (hFile=0x230) returned 0x1 [0156.428] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.429] SetErrorMode (uMode=0x1) returned 0x0 [0156.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\lc-57v3JcaleFIV.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\lc-57v3jcalefiv.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd49a70, ftCreationTime.dwHighDateTime=0x1d413c7, ftLastAccessTime.dwLowDateTime=0xbf23c330, ftLastAccessTime.dwHighDateTime=0x1d41cb4, ftLastWriteTime.dwLowDateTime=0x5fb01fd7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c89)) returned 1 [0156.429] SetErrorMode (uMode=0x0) returned 0x1 [0156.429] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\lc-57v3JcaleFIV.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\lc-57v3jcalefiv.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\lc-57v3JcaleFIV.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\lc-57v3jcalefiv.m4a.partially.cryptonar")) returned 1 [0156.431] SetErrorMode (uMode=0x1) returned 0x0 [0156.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\mEwNZ6-316Nh9OXSxN.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\mewnz6-316nh9oxsxn.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.432] SetErrorMode (uMode=0x0) returned 0x1 [0156.432] GetFileType (hFile=0x230) returned 0x1 [0156.432] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.433] SetErrorMode (uMode=0x1) returned 0x0 [0156.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\mEwNZ6-316Nh9OXSxN.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\mewnz6-316nh9oxsxn.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e1ed270, ftCreationTime.dwHighDateTime=0x1d41824, ftLastAccessTime.dwLowDateTime=0x9fddf680, ftLastAccessTime.dwHighDateTime=0x1d41b29, ftLastWriteTime.dwLowDateTime=0x5fb01fd7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11132)) returned 1 [0156.433] SetErrorMode (uMode=0x0) returned 0x1 [0156.433] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\mEwNZ6-316Nh9OXSxN.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\mewnz6-316nh9oxsxn.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\mEwNZ6-316Nh9OXSxN.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\mewnz6-316nh9oxsxn.avi.partially.cryptonar")) returned 1 [0156.435] SetErrorMode (uMode=0x1) returned 0x0 [0156.435] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\oHKVIjRhITd0A78.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ohkvijrhitd0a78.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.436] SetErrorMode (uMode=0x0) returned 0x1 [0156.436] GetFileType (hFile=0x230) returned 0x1 [0156.436] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.437] SetErrorMode (uMode=0x1) returned 0x0 [0156.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\oHKVIjRhITd0A78.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ohkvijrhitd0a78.odp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0a7b270, ftCreationTime.dwHighDateTime=0x1d412ee, ftLastAccessTime.dwLowDateTime=0xe0df7e90, ftLastAccessTime.dwHighDateTime=0x1d4154f, ftLastWriteTime.dwLowDateTime=0x5fb29d05, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd799)) returned 1 [0156.437] SetErrorMode (uMode=0x0) returned 0x1 [0156.437] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\oHKVIjRhITd0A78.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ohkvijrhitd0a78.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\oHKVIjRhITd0A78.odp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ohkvijrhitd0a78.odp.partially.cryptonar")) returned 1 [0156.438] SetErrorMode (uMode=0x1) returned 0x0 [0156.439] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\orz_QfMvcEDt5l_Z3.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\orz_qfmvcedt5l_z3.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.440] SetErrorMode (uMode=0x0) returned 0x1 [0156.440] GetFileType (hFile=0x230) returned 0x1 [0156.440] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.441] SetErrorMode (uMode=0x1) returned 0x0 [0156.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\orz_QfMvcEDt5l_Z3.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\orz_qfmvcedt5l_z3.mp4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4190fb0, ftCreationTime.dwHighDateTime=0x1d41187, ftLastAccessTime.dwLowDateTime=0xc7a0b6d0, ftLastAccessTime.dwHighDateTime=0x1d4166a, ftLastWriteTime.dwLowDateTime=0x5fb29d05, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1b0b)) returned 1 [0156.441] SetErrorMode (uMode=0x0) returned 0x1 [0156.441] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\orz_QfMvcEDt5l_Z3.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\orz_qfmvcedt5l_z3.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\orz_QfMvcEDt5l_Z3.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\orz_qfmvcedt5l_z3.mp4.partially.cryptonar")) returned 1 [0156.443] SetErrorMode (uMode=0x1) returned 0x0 [0156.443] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\PkrpyegHqesb4TNTv g.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\pkrpyeghqesb4tntv g.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.445] SetErrorMode (uMode=0x0) returned 0x1 [0156.445] GetFileType (hFile=0x230) returned 0x1 [0156.445] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.446] SetErrorMode (uMode=0x1) returned 0x0 [0156.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\PkrpyegHqesb4TNTv g.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\pkrpyeghqesb4tntv g.mp4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce329920, ftCreationTime.dwHighDateTime=0x1d41f0f, ftLastAccessTime.dwLowDateTime=0xa75f78c0, ftLastAccessTime.dwHighDateTime=0x1d41ba6, ftLastWriteTime.dwLowDateTime=0x5fb29d05, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xddc7)) returned 1 [0156.446] SetErrorMode (uMode=0x0) returned 0x1 [0156.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\PkrpyegHqesb4TNTv g.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\pkrpyeghqesb4tntv g.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\PkrpyegHqesb4TNTv g.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\pkrpyeghqesb4tntv g.mp4.partially.cryptonar")) returned 1 [0156.448] SetErrorMode (uMode=0x1) returned 0x0 [0156.448] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\PMwMoLNT.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\pmwmolnt.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.450] SetErrorMode (uMode=0x0) returned 0x1 [0156.451] GetFileType (hFile=0x230) returned 0x1 [0156.451] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.452] SetErrorMode (uMode=0x1) returned 0x0 [0156.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\PMwMoLNT.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\pmwmolnt.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866603c0, ftCreationTime.dwHighDateTime=0x1d418ca, ftLastAccessTime.dwLowDateTime=0xd67435e0, ftLastAccessTime.dwHighDateTime=0x1d41d01, ftLastWriteTime.dwLowDateTime=0x5fb4f59b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc504)) returned 1 [0156.452] SetErrorMode (uMode=0x0) returned 0x1 [0156.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\PMwMoLNT.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\pmwmolnt.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\PMwMoLNT.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\pmwmolnt.m4a.partially.cryptonar")) returned 1 [0156.455] SetErrorMode (uMode=0x1) returned 0x0 [0156.455] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Q6BRLvL4y1ipol7S2.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\q6brlvl4y1ipol7s2.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.457] SetErrorMode (uMode=0x0) returned 0x1 [0156.457] GetFileType (hFile=0x230) returned 0x1 [0156.457] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.458] SetErrorMode (uMode=0x1) returned 0x0 [0156.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Q6BRLvL4y1ipol7S2.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\q6brlvl4y1ipol7s2.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8d77b50, ftCreationTime.dwHighDateTime=0x1d41be4, ftLastAccessTime.dwLowDateTime=0x80dcf600, ftLastAccessTime.dwHighDateTime=0x1d41eb7, ftLastWriteTime.dwLowDateTime=0x5fb4f59b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x136f9)) returned 1 [0156.458] SetErrorMode (uMode=0x0) returned 0x1 [0156.458] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Q6BRLvL4y1ipol7S2.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\q6brlvl4y1ipol7s2.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Q6BRLvL4y1ipol7S2.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\q6brlvl4y1ipol7s2.wav.partially.cryptonar")) returned 1 [0156.460] SetErrorMode (uMode=0x1) returned 0x0 [0156.460] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\RE0kIdfjSE9k8z.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\re0kidfjse9k8z.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.462] SetErrorMode (uMode=0x0) returned 0x1 [0156.462] GetFileType (hFile=0x230) returned 0x1 [0156.462] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.462] SetErrorMode (uMode=0x1) returned 0x0 [0156.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\RE0kIdfjSE9k8z.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\re0kidfjse9k8z.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1d3c8f0, ftCreationTime.dwHighDateTime=0x1d41b4a, ftLastAccessTime.dwLowDateTime=0x65bd4c30, ftLastAccessTime.dwHighDateTime=0x1d41390, ftLastWriteTime.dwLowDateTime=0x5fb4f59b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4882)) returned 1 [0156.463] SetErrorMode (uMode=0x0) returned 0x1 [0156.463] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\RE0kIdfjSE9k8z.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\re0kidfjse9k8z.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\RE0kIdfjSE9k8z.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\re0kidfjse9k8z.gif.partially.cryptonar")) returned 1 [0156.465] SetErrorMode (uMode=0x1) returned 0x0 [0156.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\rr4EmkvJ30L.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rr4emkvj30l.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.466] SetErrorMode (uMode=0x0) returned 0x1 [0156.466] GetFileType (hFile=0x230) returned 0x1 [0156.466] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.467] SetErrorMode (uMode=0x1) returned 0x0 [0156.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\rr4EmkvJ30L.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rr4emkvj30l.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94f6fb20, ftCreationTime.dwHighDateTime=0x1d41617, ftLastAccessTime.dwLowDateTime=0xa06fd900, ftLastAccessTime.dwHighDateTime=0x1d41454, ftLastWriteTime.dwLowDateTime=0x5fb7674c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x624)) returned 1 [0156.467] SetErrorMode (uMode=0x0) returned 0x1 [0156.467] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\rr4EmkvJ30L.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rr4emkvj30l.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\rr4EmkvJ30L.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\rr4emkvj30l.bmp.partially.cryptonar")) returned 1 [0156.469] SetErrorMode (uMode=0x1) returned 0x0 [0156.469] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\tpHu.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\tphu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.470] SetErrorMode (uMode=0x0) returned 0x1 [0156.470] GetFileType (hFile=0x230) returned 0x1 [0156.470] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.471] SetErrorMode (uMode=0x1) returned 0x0 [0156.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\tpHu.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\tphu.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b75b720, ftCreationTime.dwHighDateTime=0x1d4146f, ftLastAccessTime.dwLowDateTime=0x153a2d70, ftLastAccessTime.dwHighDateTime=0x1d41b68, ftLastWriteTime.dwLowDateTime=0x5fb7674c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3c24)) returned 1 [0156.471] SetErrorMode (uMode=0x0) returned 0x1 [0156.471] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\tpHu.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\tphu.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\tpHu.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\tphu.wav.partially.cryptonar")) returned 1 [0156.472] SetErrorMode (uMode=0x1) returned 0x0 [0156.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\TW6cZRdYqjd KcDhHm.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\tw6czrdyqjd kcdhhm.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.473] SetErrorMode (uMode=0x0) returned 0x1 [0156.473] GetFileType (hFile=0x230) returned 0x1 [0156.473] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.474] SetErrorMode (uMode=0x1) returned 0x0 [0156.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\TW6cZRdYqjd KcDhHm.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\tw6czrdyqjd kcdhhm.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a804b0, ftCreationTime.dwHighDateTime=0x1d41c8a, ftLastAccessTime.dwLowDateTime=0x2f8c9210, ftLastAccessTime.dwHighDateTime=0x1d41c50, ftLastWriteTime.dwLowDateTime=0x5fb7674c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1695a)) returned 1 [0156.474] SetErrorMode (uMode=0x0) returned 0x1 [0156.474] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\TW6cZRdYqjd KcDhHm.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\tw6czrdyqjd kcdhhm.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\TW6cZRdYqjd KcDhHm.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\tw6czrdyqjd kcdhhm.swf.partially.cryptonar")) returned 1 [0156.476] SetErrorMode (uMode=0x1) returned 0x0 [0156.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\T_NGAQjgwVGAX.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\t_ngaqjgwvgax.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.477] SetErrorMode (uMode=0x0) returned 0x1 [0156.477] GetFileType (hFile=0x230) returned 0x1 [0156.477] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.477] SetErrorMode (uMode=0x1) returned 0x0 [0156.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\T_NGAQjgwVGAX.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\t_ngaqjgwvgax.docx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdd464f0, ftCreationTime.dwHighDateTime=0x1d41d8d, ftLastAccessTime.dwLowDateTime=0x9a80fea0, ftLastAccessTime.dwHighDateTime=0x1d419bf, ftLastWriteTime.dwLowDateTime=0x5fb7674c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfd55)) returned 1 [0156.478] SetErrorMode (uMode=0x0) returned 0x1 [0156.478] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\T_NGAQjgwVGAX.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\t_ngaqjgwvgax.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\T_NGAQjgwVGAX.docx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\t_ngaqjgwvgax.docx.partially.cryptonar")) returned 1 [0156.479] SetErrorMode (uMode=0x1) returned 0x0 [0156.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\UE76e4Gk5xvI1TzT.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ue76e4gk5xvi1tzt.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.480] SetErrorMode (uMode=0x0) returned 0x1 [0156.480] GetFileType (hFile=0x230) returned 0x1 [0156.480] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.480] SetErrorMode (uMode=0x1) returned 0x0 [0156.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\UE76e4Gk5xvI1TzT.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ue76e4gk5xvi1tzt.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b0861e0, ftCreationTime.dwHighDateTime=0x1d41132, ftLastAccessTime.dwLowDateTime=0xeeac55e0, ftLastAccessTime.dwHighDateTime=0x1d41ec1, ftLastWriteTime.dwLowDateTime=0x5fb7674c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe65d)) returned 1 [0156.481] SetErrorMode (uMode=0x0) returned 0x1 [0156.481] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\UE76e4Gk5xvI1TzT.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ue76e4gk5xvi1tzt.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\UE76e4Gk5xvI1TzT.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\ue76e4gk5xvi1tzt.mp3.partially.cryptonar")) returned 1 [0156.485] SetErrorMode (uMode=0x1) returned 0x0 [0156.485] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\usuf.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\usuf.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.487] SetErrorMode (uMode=0x0) returned 0x1 [0156.487] GetFileType (hFile=0x230) returned 0x1 [0156.487] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.487] SetErrorMode (uMode=0x1) returned 0x0 [0156.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\usuf.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\usuf.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bc9b0f0, ftCreationTime.dwHighDateTime=0x1d412f1, ftLastAccessTime.dwLowDateTime=0xb5c67790, ftLastAccessTime.dwHighDateTime=0x1d4116c, ftLastWriteTime.dwLowDateTime=0x5fb9a73c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xee4d)) returned 1 [0156.487] SetErrorMode (uMode=0x0) returned 0x1 [0156.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\usuf.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\usuf.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\usuf.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\usuf.m4a.partially.cryptonar")) returned 1 [0156.489] SetErrorMode (uMode=0x1) returned 0x0 [0156.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\vNT0uIToevBsJu.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\vnt0uitoevbsju.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.490] SetErrorMode (uMode=0x0) returned 0x1 [0156.490] GetFileType (hFile=0x230) returned 0x1 [0156.490] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.490] SetErrorMode (uMode=0x1) returned 0x0 [0156.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\vNT0uIToevBsJu.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\vnt0uitoevbsju.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3349b10, ftCreationTime.dwHighDateTime=0x1d419f6, ftLastAccessTime.dwLowDateTime=0x55410200, ftLastAccessTime.dwHighDateTime=0x1d410d1, ftLastWriteTime.dwLowDateTime=0x5fb9a73c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17260)) returned 1 [0156.491] SetErrorMode (uMode=0x0) returned 0x1 [0156.491] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\vNT0uIToevBsJu.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\vnt0uitoevbsju.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\vNT0uIToevBsJu.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\vnt0uitoevbsju.flv.partially.cryptonar")) returned 1 [0156.492] SetErrorMode (uMode=0x1) returned 0x0 [0156.492] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\We-ZuiO.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\we-zuio.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.493] SetErrorMode (uMode=0x0) returned 0x1 [0156.493] GetFileType (hFile=0x230) returned 0x1 [0156.493] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.493] SetErrorMode (uMode=0x1) returned 0x0 [0156.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\We-ZuiO.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\we-zuio.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a120, ftCreationTime.dwHighDateTime=0x1d41eee, ftLastAccessTime.dwLowDateTime=0x430a1ac0, ftLastAccessTime.dwHighDateTime=0x1d40f6b, ftLastWriteTime.dwLowDateTime=0x5fb9a73c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x583a)) returned 1 [0156.493] SetErrorMode (uMode=0x0) returned 0x1 [0156.494] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\We-ZuiO.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\we-zuio.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\We-ZuiO.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\we-zuio.flv.partially.cryptonar")) returned 1 [0156.495] SetErrorMode (uMode=0x1) returned 0x0 [0156.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\xHZ5SDB23vy0.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xhz5sdb23vy0.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.496] SetErrorMode (uMode=0x0) returned 0x1 [0156.496] GetFileType (hFile=0x230) returned 0x1 [0156.496] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.497] SetErrorMode (uMode=0x1) returned 0x0 [0156.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\xHZ5SDB23vy0.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xhz5sdb23vy0.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38120570, ftCreationTime.dwHighDateTime=0x1d415eb, ftLastAccessTime.dwLowDateTime=0x69aa8260, ftLastAccessTime.dwHighDateTime=0x1d41866, ftLastWriteTime.dwLowDateTime=0x5fb9a73c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16afd)) returned 1 [0156.497] SetErrorMode (uMode=0x0) returned 0x1 [0156.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\xHZ5SDB23vy0.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xhz5sdb23vy0.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\xHZ5SDB23vy0.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xhz5sdb23vy0.wav.partially.cryptonar")) returned 1 [0156.499] SetErrorMode (uMode=0x1) returned 0x0 [0156.499] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\XIqqtBBrqd.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xiqqtbbrqd.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.500] SetErrorMode (uMode=0x0) returned 0x1 [0156.500] GetFileType (hFile=0x230) returned 0x1 [0156.500] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.501] SetErrorMode (uMode=0x1) returned 0x0 [0156.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\XIqqtBBrqd.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xiqqtbbrqd.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65a2de20, ftCreationTime.dwHighDateTime=0x1d41bda, ftLastAccessTime.dwLowDateTime=0x847eb4f0, ftLastAccessTime.dwHighDateTime=0x1d41ce2, ftLastWriteTime.dwLowDateTime=0x5fbc297f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfd9f)) returned 1 [0156.501] SetErrorMode (uMode=0x0) returned 0x1 [0156.501] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\XIqqtBBrqd.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xiqqtbbrqd.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\XIqqtBBrqd.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xiqqtbbrqd.gif.partially.cryptonar")) returned 1 [0156.503] SetErrorMode (uMode=0x1) returned 0x0 [0156.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\xmT0bWNsGXUaUzA.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xmt0bwnsgxuauza.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.505] SetErrorMode (uMode=0x0) returned 0x1 [0156.505] GetFileType (hFile=0x230) returned 0x1 [0156.505] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.505] SetErrorMode (uMode=0x1) returned 0x0 [0156.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\xmT0bWNsGXUaUzA.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xmt0bwnsgxuauza.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec877fd0, ftCreationTime.dwHighDateTime=0x1d41cad, ftLastAccessTime.dwLowDateTime=0x674dc900, ftLastAccessTime.dwHighDateTime=0x1d419ab, ftLastWriteTime.dwLowDateTime=0x5fbc297f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2317)) returned 1 [0156.506] SetErrorMode (uMode=0x0) returned 0x1 [0156.506] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\xmT0bWNsGXUaUzA.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xmt0bwnsgxuauza.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\xmT0bWNsGXUaUzA.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\xmt0bwnsgxuauza.flv.partially.cryptonar")) returned 1 [0156.508] SetErrorMode (uMode=0x1) returned 0x0 [0156.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Yg B2pdyrB-ZYN-y.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\yg b2pdyrb-zyn-y.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.509] SetErrorMode (uMode=0x0) returned 0x1 [0156.509] GetFileType (hFile=0x230) returned 0x1 [0156.509] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.510] SetErrorMode (uMode=0x1) returned 0x0 [0156.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Yg B2pdyrB-ZYN-y.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\yg b2pdyrb-zyn-y.mkv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf33bfd60, ftCreationTime.dwHighDateTime=0x1d41d93, ftLastAccessTime.dwLowDateTime=0x6056a510, ftLastAccessTime.dwHighDateTime=0x1d41931, ftLastWriteTime.dwLowDateTime=0x5fbc297f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf3d6)) returned 1 [0156.510] SetErrorMode (uMode=0x0) returned 0x1 [0156.511] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Yg B2pdyrB-ZYN-y.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\yg b2pdyrb-zyn-y.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\Yg B2pdyrB-ZYN-y.mkv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\yg b2pdyrb-zyn-y.mkv.partially.cryptonar")) returned 1 [0156.514] SetErrorMode (uMode=0x1) returned 0x0 [0156.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\yUDH9m28fb40bCZ3ebM.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\yudh9m28fb40bcz3ebm.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.516] SetErrorMode (uMode=0x0) returned 0x1 [0156.516] GetFileType (hFile=0x230) returned 0x1 [0156.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.517] SetErrorMode (uMode=0x1) returned 0x0 [0156.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\yUDH9m28fb40bCZ3ebM.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\yudh9m28fb40bcz3ebm.mkv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1e79e0, ftCreationTime.dwHighDateTime=0x1d414c1, ftLastAccessTime.dwLowDateTime=0x781e4230, ftLastAccessTime.dwHighDateTime=0x1d41e21, ftLastWriteTime.dwLowDateTime=0x5fbe9e42, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb401)) returned 1 [0156.517] SetErrorMode (uMode=0x0) returned 0x1 [0156.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\yUDH9m28fb40bCZ3ebM.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\yudh9m28fb40bcz3ebm.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\Temp\\yUDH9m28fb40bCZ3ebM.mkv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\temp\\yudh9m28fb40bcz3ebm.mkv.partially.cryptonar")) returned 1 [0156.519] SetErrorMode (uMode=0x1) returned 0x0 [0156.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.520] SetErrorMode (uMode=0x0) returned 0x1 [0156.520] GetFileType (hFile=0x230) returned 0x1 [0156.520] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.521] SetErrorMode (uMode=0x1) returned 0x0 [0156.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacec856a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacec856a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5fbe9e42, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0156.521] SetErrorMode (uMode=0x0) returned 0x1 [0156.521] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb.chk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB.chk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb.chk.partially.cryptonar")) returned 1 [0156.523] SetErrorMode (uMode=0x1) returned 0x0 [0156.523] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0156.532] SetErrorMode (uMode=0x0) returned 0x1 [0156.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", lpFilePart=0x0) returned 0x47 [0156.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", lpFilePart=0x0) returned 0x47 [0156.534] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", lpFilePart=0x0) returned 0x47 [0156.534] SetErrorMode (uMode=0x1) returned 0x0 [0156.534] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.536] GetFileType (hFile=0x230) returned 0x1 [0156.536] SetErrorMode (uMode=0x0) returned 0x1 [0156.537] GetFileType (hFile=0x230) returned 0x1 [0156.537] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.537] ReadFile (in: hFile=0x230, lpBuffer=0x2895d68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2895d68*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.719] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0156.719] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.719] WriteFile (in: hFile=0x230, lpBuffer=0x2895d68*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2895d68*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0156.720] CloseHandle (hObject=0x230) returned 1 [0156.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", lpFilePart=0x0) returned 0x47 [0156.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log", lpFilePart=0x0) returned 0x47 [0156.833] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log.partially.cryptoNar", lpFilePart=0x0) returned 0x5b [0156.833] SetErrorMode (uMode=0x1) returned 0x0 [0156.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace55e12, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5fee1b36, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0156.834] SetErrorMode (uMode=0x0) returned 0x1 [0156.834] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDB00005.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edb00005.log.partially.cryptonar")) returned 1 [0156.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", lpFilePart=0x0) returned 0x4a [0156.835] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", lpFilePart=0x0) returned 0x4a [0156.836] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", lpFilePart=0x0) returned 0x4a [0156.836] SetErrorMode (uMode=0x1) returned 0x0 [0156.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.837] GetFileType (hFile=0x230) returned 0x1 [0156.837] SetErrorMode (uMode=0x0) returned 0x1 [0156.837] GetFileType (hFile=0x230) returned 0x1 [0156.837] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.837] ReadFile (in: hFile=0x230, lpBuffer=0x2899368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2899368*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.839] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0156.839] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.839] WriteFile (in: hFile=0x230, lpBuffer=0x2899368*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2899368*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0156.839] CloseHandle (hObject=0x230) returned 1 [0156.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", lpFilePart=0x0) returned 0x4a [0156.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs", lpFilePart=0x0) returned 0x4a [0156.839] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs.partially.cryptoNar", lpFilePart=0x0) returned 0x5e [0156.839] SetErrorMode (uMode=0x1) returned 0x0 [0156.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacea230e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5fee1b36, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0156.839] SetErrorMode (uMode=0x0) returned 0x1 [0156.839] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00001.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00001.jrs.partially.cryptonar")) returned 1 [0156.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", lpFilePart=0x0) returned 0x4a [0156.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", lpFilePart=0x0) returned 0x4a [0156.841] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", lpFilePart=0x0) returned 0x4a [0156.841] SetErrorMode (uMode=0x1) returned 0x0 [0156.841] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.842] GetFileType (hFile=0x230) returned 0x1 [0156.842] SetErrorMode (uMode=0x0) returned 0x1 [0156.842] GetFileType (hFile=0x230) returned 0x1 [0156.842] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.842] ReadFile (in: hFile=0x230, lpBuffer=0x289c990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x289c990*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.844] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0156.844] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.844] WriteFile (in: hFile=0x230, lpBuffer=0x289c990*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x289c990*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0156.844] CloseHandle (hObject=0x230) returned 1 [0156.844] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", lpFilePart=0x0) returned 0x4a [0156.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs", lpFilePart=0x0) returned 0x4a [0156.845] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs.partially.cryptoNar", lpFilePart=0x0) returned 0x5e [0156.845] SetErrorMode (uMode=0x1) returned 0x0 [0156.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacea230e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xacea230e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5ff09440, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0156.845] SetErrorMode (uMode=0x0) returned 0x1 [0156.845] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBres00002.jrs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbres00002.jrs.partially.cryptonar")) returned 1 [0156.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", lpFilePart=0x0) returned 0x45 [0156.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", lpFilePart=0x0) returned 0x45 [0156.846] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", lpFilePart=0x0) returned 0x45 [0156.847] SetErrorMode (uMode=0x1) returned 0x0 [0156.847] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.848] GetFileType (hFile=0x230) returned 0x1 [0156.848] SetErrorMode (uMode=0x0) returned 0x1 [0156.848] GetFileType (hFile=0x230) returned 0x1 [0156.848] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.848] ReadFile (in: hFile=0x230, lpBuffer=0x289ff90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x289ff90*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.849] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0156.849] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.849] WriteFile (in: hFile=0x230, lpBuffer=0x289ff90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x289ff90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0156.849] CloseHandle (hObject=0x230) returned 1 [0156.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", lpFilePart=0x0) returned 0x45 [0156.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log", lpFilePart=0x0) returned 0x45 [0156.861] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log.partially.cryptoNar", lpFilePart=0x0) returned 0x59 [0156.862] SetErrorMode (uMode=0x1) returned 0x0 [0156.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace55e12, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xace55e12, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x5ff2e1b9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x200000)) returned 1 [0156.862] SetErrorMode (uMode=0x0) returned 0x1 [0156.862] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\EDBtmp.log.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\edbtmp.log.partially.cryptonar")) returned 1 [0156.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", lpFilePart=0x0) returned 0x4a [0156.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", lpFilePart=0x0) returned 0x4a [0156.864] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb", lpFilePart=0x0) returned 0x4a [0156.864] SetErrorMode (uMode=0x1) returned 0x0 [0156.864] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Local\\TileDataLayer\\Database\\vedatamodel.edb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\local\\tiledatalayer\\database\\vedatamodel.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0156.871] SetErrorMode (uMode=0x0) returned 0x1 [0156.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", lpFilePart=0x0) returned 0x46 [0156.872] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", lpFilePart=0x0) returned 0x46 [0156.873] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", lpFilePart=0x0) returned 0x46 [0156.873] SetErrorMode (uMode=0x1) returned 0x0 [0156.873] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.874] GetFileType (hFile=0x230) returned 0x1 [0156.874] SetErrorMode (uMode=0x0) returned 0x1 [0156.874] GetFileType (hFile=0x230) returned 0x1 [0156.874] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.874] ReadFile (in: hFile=0x230, lpBuffer=0x28a4aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a4aa8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.876] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0156.876] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.876] WriteFile (in: hFile=0x230, lpBuffer=0x28a4aa8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a4aa8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0156.876] CloseHandle (hObject=0x230) returned 1 [0156.876] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", lpFilePart=0x0) returned 0x46 [0156.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", lpFilePart=0x0) returned 0x46 [0156.877] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages.partially.cryptoNar", lpFilePart=0x0) returned 0x5a [0156.877] SetErrorMode (uMode=0x1) returned 0x0 [0156.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7d46a2f1, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x7d46a2f1, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x5ff55b13, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9800)) returned 1 [0156.877] SetErrorMode (uMode=0x0) returned 0x1 [0156.877] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages.partially.cryptonar")) returned 1 [0156.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x6a [0156.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x6a [0156.879] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x6a [0156.879] SetErrorMode (uMode=0x1) returned 0x0 [0156.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.882] GetFileType (hFile=0x230) returned 0x1 [0156.882] SetErrorMode (uMode=0x0) returned 0x1 [0156.882] GetFileType (hFile=0x230) returned 0x1 [0156.882] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.882] ReadFile (in: hFile=0x230, lpBuffer=0x28a8160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28a8160*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.890] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0156.890] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.890] WriteFile (in: hFile=0x230, lpBuffer=0x28a8160*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28a8160*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0156.891] CloseHandle (hObject=0x230) returned 1 [0156.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x6a [0156.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x6a [0156.913] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar", lpFilePart=0x0) returned 0x7e [0156.913] SetErrorMode (uMode=0x1) returned 0x0 [0156.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4990efe7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4990efe7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ffa06eb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x196d)) returned 1 [0156.914] SetErrorMode (uMode=0x0) returned 0x1 [0156.914] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0156.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x6a [0156.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x6a [0156.916] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x6a [0156.917] SetErrorMode (uMode=0x1) returned 0x0 [0156.917] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.919] GetFileType (hFile=0x230) returned 0x1 [0156.919] SetErrorMode (uMode=0x0) returned 0x1 [0156.919] GetFileType (hFile=0x230) returned 0x1 [0156.919] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.919] ReadFile (in: hFile=0x230, lpBuffer=0x28ab9d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28ab9d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.943] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0156.943] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.944] WriteFile (in: hFile=0x230, lpBuffer=0x28ab9d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28ab9d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0156.944] CloseHandle (hObject=0x230) returned 1 [0156.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x6a [0156.944] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x6a [0156.945] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar", lpFilePart=0x0) returned 0x7e [0156.945] SetErrorMode (uMode=0x1) returned 0x0 [0156.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4990efe7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4990efe7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x5ffecdf0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd2da)) returned 1 [0156.945] SetErrorMode (uMode=0x0) returned 0x1 [0156.945] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0156.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x6a [0156.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x6a [0156.947] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x6a [0156.947] SetErrorMode (uMode=0x1) returned 0x0 [0156.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.949] GetFileType (hFile=0x230) returned 0x1 [0156.949] SetErrorMode (uMode=0x0) returned 0x1 [0156.949] GetFileType (hFile=0x230) returned 0x1 [0156.949] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.949] ReadFile (in: hFile=0x230, lpBuffer=0x28af240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28af240*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.958] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0156.958] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.958] WriteFile (in: hFile=0x230, lpBuffer=0x28af240*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28af240*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0156.958] CloseHandle (hObject=0x230) returned 1 [0156.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x6a [0156.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x6a [0156.964] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar", lpFilePart=0x0) returned 0x7e [0156.964] SetErrorMode (uMode=0x1) returned 0x0 [0156.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4990efe7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4990efe7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x60016af7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0156.965] SetErrorMode (uMode=0x0) returned 0x1 [0156.965] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0156.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x6b [0156.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x6b [0156.968] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x6b [0156.968] SetErrorMode (uMode=0x1) returned 0x0 [0156.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.971] GetFileType (hFile=0x230) returned 0x1 [0156.972] SetErrorMode (uMode=0x0) returned 0x1 [0156.972] GetFileType (hFile=0x230) returned 0x1 [0156.972] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.972] ReadFile (in: hFile=0x230, lpBuffer=0x28b2ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b2ab0*, lpNumberOfBytesRead=0x5ae8b8*=0x156, lpOverlapped=0x0) returned 1 [0156.973] ReadFile (in: hFile=0x230, lpBuffer=0x28b2ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b2ab0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0156.973] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.973] WriteFile (in: hFile=0x230, lpBuffer=0x28b2ab0*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b2ab0*, lpNumberOfBytesWritten=0x5ae8a8*=0x156, lpOverlapped=0x0) returned 1 [0156.973] CloseHandle (hObject=0x230) returned 1 [0156.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x6b [0156.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x6b [0156.973] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar", lpFilePart=0x0) returned 0x7f [0156.973] SetErrorMode (uMode=0x1) returned 0x0 [0156.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4990efe7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4990efe7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x60039190, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1 [0156.974] SetErrorMode (uMode=0x0) returned 0x1 [0156.974] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157.partially.cryptonar")) returned 1 [0156.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x6b [0156.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x6b [0156.975] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x6b [0156.976] SetErrorMode (uMode=0x1) returned 0x0 [0156.976] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.977] GetFileType (hFile=0x230) returned 0x1 [0156.977] SetErrorMode (uMode=0x0) returned 0x1 [0156.977] GetFileType (hFile=0x230) returned 0x1 [0156.977] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.977] ReadFile (in: hFile=0x230, lpBuffer=0x28b61e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b61e8*, lpNumberOfBytesRead=0x5ae8b8*=0x148, lpOverlapped=0x0) returned 1 [0156.978] ReadFile (in: hFile=0x230, lpBuffer=0x28b61e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b61e8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0156.978] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.978] WriteFile (in: hFile=0x230, lpBuffer=0x28b61e8*, nNumberOfBytesToWrite=0x148, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b61e8*, lpNumberOfBytesWritten=0x5ae8a8*=0x148, lpOverlapped=0x0) returned 1 [0156.978] CloseHandle (hObject=0x230) returned 1 [0156.978] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x6b [0156.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x6b [0156.979] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar", lpFilePart=0x0) returned 0x7f [0156.979] SetErrorMode (uMode=0x1) returned 0x0 [0156.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4990efe7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4990efe7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x60039190, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x148)) returned 1 [0156.979] SetErrorMode (uMode=0x0) returned 0x1 [0156.979] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506.partially.cryptonar")) returned 1 [0156.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x6b [0156.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x6b [0156.980] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x6b [0156.980] SetErrorMode (uMode=0x1) returned 0x0 [0156.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.981] GetFileType (hFile=0x230) returned 0x1 [0156.981] SetErrorMode (uMode=0x0) returned 0x1 [0156.982] GetFileType (hFile=0x230) returned 0x1 [0156.982] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.982] ReadFile (in: hFile=0x230, lpBuffer=0x28b9900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b9900*, lpNumberOfBytesRead=0x5ae8b8*=0x14a, lpOverlapped=0x0) returned 1 [0156.982] ReadFile (in: hFile=0x230, lpBuffer=0x28b9900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28b9900*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0156.982] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.983] WriteFile (in: hFile=0x230, lpBuffer=0x28b9900*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28b9900*, lpNumberOfBytesWritten=0x5ae8a8*=0x14a, lpOverlapped=0x0) returned 1 [0156.983] CloseHandle (hObject=0x230) returned 1 [0156.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x6b [0156.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x6b [0156.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar", lpFilePart=0x0) returned 0x7f [0156.983] SetErrorMode (uMode=0x1) returned 0x0 [0156.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4990efe7, ftCreationTime.dwHighDateTime=0x1d2d028, ftLastAccessTime.dwLowDateTime=0x4990efe7, ftLastAccessTime.dwHighDateTime=0x1d2d028, ftLastWriteTime.dwLowDateTime=0x6005f201, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0156.983] SetErrorMode (uMode=0x0) returned 0x1 [0156.983] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749.partially.cryptonar")) returned 1 [0156.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x59 [0156.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x59 [0156.984] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x59 [0156.984] SetErrorMode (uMode=0x1) returned 0x0 [0156.984] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.986] GetFileType (hFile=0x230) returned 0x1 [0156.986] SetErrorMode (uMode=0x0) returned 0x1 [0156.986] GetFileType (hFile=0x230) returned 0x1 [0156.986] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.986] ReadFile (in: hFile=0x230, lpBuffer=0x28bcfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28bcfc8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0156.986] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.986] CloseHandle (hObject=0x230) returned 1 [0156.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x59 [0156.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat", lpFilePart=0x0) returned 0x59 [0156.986] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x6d [0156.986] SetErrorMode (uMode=0x1) returned 0x0 [0156.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x91c726fd, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x91c726fd, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x91c726fd, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0156.986] SetErrorMode (uMode=0x0) returned 0x1 [0156.986] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\container.dat.partially.cryptonar")) returned 1 [0156.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml", lpFilePart=0x0) returned 0x64 [0156.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml", lpFilePart=0x0) returned 0x64 [0156.989] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml", lpFilePart=0x0) returned 0x64 [0156.989] SetErrorMode (uMode=0x1) returned 0x0 [0156.989] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\8euradbc\\c.betrad[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0156.990] GetFileType (hFile=0x230) returned 0x1 [0156.990] SetErrorMode (uMode=0x0) returned 0x1 [0156.990] GetFileType (hFile=0x230) returned 0x1 [0156.990] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0156.990] ReadFile (in: hFile=0x230, lpBuffer=0x28c0370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28c0370*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.007] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.007] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.007] WriteFile (in: hFile=0x230, lpBuffer=0x28c0370*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28c0370*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.007] CloseHandle (hObject=0x230) returned 1 [0157.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml", lpFilePart=0x0) returned 0x64 [0157.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml", lpFilePart=0x0) returned 0x64 [0157.008] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml.partially.cryptoNar", lpFilePart=0x0) returned 0x78 [0157.008] SetErrorMode (uMode=0x1) returned 0x0 [0157.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\8euradbc\\c.betrad[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9472c0b6, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9472c0b6, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x6008546b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcb4e)) returned 1 [0157.009] SetErrorMode (uMode=0x0) returned 0x1 [0157.009] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\8euradbc\\c.betrad[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\8EURADBC\\c.betrad[1].xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\8euradbc\\c.betrad[1].xml.partially.cryptonar")) returned 1 [0157.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x6c [0157.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x6c [0157.010] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x6c [0157.010] SetErrorMode (uMode=0x1) returned 0x0 [0157.010] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\au4uqgep\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.011] GetFileType (hFile=0x230) returned 0x1 [0157.011] SetErrorMode (uMode=0x0) returned 0x1 [0157.011] GetFileType (hFile=0x230) returned 0x1 [0157.011] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.011] ReadFile (in: hFile=0x230, lpBuffer=0x28c3be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28c3be0*, lpNumberOfBytesRead=0x5ae8b8*=0x63, lpOverlapped=0x0) returned 1 [0157.012] ReadFile (in: hFile=0x230, lpBuffer=0x28c3be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x28c3be0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0157.012] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.012] WriteFile (in: hFile=0x230, lpBuffer=0x28c3be0*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x28c3be0*, lpNumberOfBytesWritten=0x5ae8a8*=0x63, lpOverlapped=0x0) returned 1 [0157.012] CloseHandle (hObject=0x230) returned 1 [0157.013] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x6c [0157.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml", lpFilePart=0x0) returned 0x6c [0157.015] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml.partially.cryptoNar", lpFilePart=0x0) returned 0x80 [0157.015] SetErrorMode (uMode=0x1) returned 0x0 [0157.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\au4uqgep\\imagesrv.adition[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x988abf69, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x988abf69, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x6008546b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x63)) returned 1 [0157.015] SetErrorMode (uMode=0x0) returned 0x1 [0157.015] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\au4uqgep\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\AU4UQGEP\\imagesrv.adition[1].xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\au4uqgep\\imagesrv.adition[1].xml.partially.cryptonar")) returned 1 [0157.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml", lpFilePart=0x0) returned 0x66 [0157.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml", lpFilePart=0x0) returned 0x66 [0157.017] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml", lpFilePart=0x0) returned 0x66 [0157.017] SetErrorMode (uMode=0x1) returned 0x0 [0157.017] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ct0f6tc1\\c9.skadtec[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.018] GetFileType (hFile=0x230) returned 0x1 [0157.018] SetErrorMode (uMode=0x0) returned 0x1 [0157.018] GetFileType (hFile=0x230) returned 0x1 [0157.018] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.019] ReadFile (in: hFile=0x230, lpBuffer=0x26bd450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26bd450*, lpNumberOfBytesRead=0x5ae8b8*=0x153, lpOverlapped=0x0) returned 1 [0157.020] ReadFile (in: hFile=0x230, lpBuffer=0x26bd450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26bd450*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0157.020] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.020] WriteFile (in: hFile=0x230, lpBuffer=0x26bd450*, nNumberOfBytesToWrite=0x153, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26bd450*, lpNumberOfBytesWritten=0x5ae8a8*=0x153, lpOverlapped=0x0) returned 1 [0157.020] CloseHandle (hObject=0x230) returned 1 [0157.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml", lpFilePart=0x0) returned 0x66 [0157.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml", lpFilePart=0x0) returned 0x66 [0157.020] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml.partially.cryptoNar", lpFilePart=0x0) returned 0x7a [0157.020] SetErrorMode (uMode=0x1) returned 0x0 [0157.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ct0f6tc1\\c9.skadtec[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f706ce1, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x9f706ce1, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x600af2d3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x153)) returned 1 [0157.021] SetErrorMode (uMode=0x0) returned 0x1 [0157.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ct0f6tc1\\c9.skadtec[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\c9.skadtec[1].xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ct0f6tc1\\c9.skadtec[1].xml.partially.cryptonar")) returned 1 [0157.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml", lpFilePart=0x0) returned 0x63 [0157.022] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml", lpFilePart=0x0) returned 0x63 [0157.023] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml", lpFilePart=0x0) returned 0x63 [0157.023] SetErrorMode (uMode=0x1) returned 0x0 [0157.023] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ct0f6tc1\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.024] GetFileType (hFile=0x230) returned 0x1 [0157.024] SetErrorMode (uMode=0x0) returned 0x1 [0157.024] GetFileType (hFile=0x230) returned 0x1 [0157.024] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.024] ReadFile (in: hFile=0x230, lpBuffer=0x26c0b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c0b28*, lpNumberOfBytesRead=0x5ae8b8*=0x5db, lpOverlapped=0x0) returned 1 [0157.040] SetFilePointer (in: hFile=0x230, lDistanceToMove=-475, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.040] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.040] WriteFile (in: hFile=0x230, lpBuffer=0x26c0b28*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c0b28*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.040] CloseHandle (hObject=0x230) returned 1 [0157.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml", lpFilePart=0x0) returned 0x63 [0157.040] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml", lpFilePart=0x0) returned 0x63 [0157.041] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml.partially.cryptoNar", lpFilePart=0x0) returned 0x77 [0157.041] SetErrorMode (uMode=0x1) returned 0x0 [0157.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ct0f6tc1\\www.msn[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x91c98953, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x91c98953, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x600d18c3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5db)) returned 1 [0157.041] SetErrorMode (uMode=0x0) returned 0x1 [0157.041] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ct0f6tc1\\www.msn[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\CT0F6TC1\\www.msn[1].xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\ct0f6tc1\\www.msn[1].xml.partially.cryptonar")) returned 1 [0157.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml", lpFilePart=0x0) returned 0x71 [0157.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml", lpFilePart=0x0) returned 0x71 [0157.043] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml", lpFilePart=0x0) returned 0x71 [0157.043] SetErrorMode (uMode=0x1) returned 0x0 [0157.043] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\jukmmx7p\\secure-ds.serving-sys[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.045] GetFileType (hFile=0x230) returned 0x1 [0157.045] SetErrorMode (uMode=0x0) returned 0x1 [0157.045] GetFileType (hFile=0x230) returned 0x1 [0157.045] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.045] ReadFile (in: hFile=0x230, lpBuffer=0x26c43a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c43a8*, lpNumberOfBytesRead=0x5ae8b8*=0xd, lpOverlapped=0x0) returned 1 [0157.046] ReadFile (in: hFile=0x230, lpBuffer=0x26c43a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c43a8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0157.046] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.046] WriteFile (in: hFile=0x230, lpBuffer=0x26c43a8*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26c43a8*, lpNumberOfBytesWritten=0x5ae8a8*=0xd, lpOverlapped=0x0) returned 1 [0157.047] CloseHandle (hObject=0x230) returned 1 [0157.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml", lpFilePart=0x0) returned 0x71 [0157.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml", lpFilePart=0x0) returned 0x71 [0157.047] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml.partially.cryptoNar", lpFilePart=0x0) returned 0x85 [0157.047] SetErrorMode (uMode=0x1) returned 0x0 [0157.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\jukmmx7p\\secure-ds.serving-sys[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96c54178, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x96c54178, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x600f7ceb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1 [0157.047] SetErrorMode (uMode=0x0) returned 0x1 [0157.047] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\jukmmx7p\\secure-ds.serving-sys[1].xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\JUKMMX7P\\secure-ds.serving-sys[1].xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\jukmmx7p\\secure-ds.serving-sys[1].xml.partially.cryptonar")) returned 1 [0157.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x64 [0157.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x64 [0157.049] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x64 [0157.049] SetErrorMode (uMode=0x1) returned 0x0 [0157.050] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.051] GetFileType (hFile=0x230) returned 0x1 [0157.051] SetErrorMode (uMode=0x0) returned 0x1 [0157.051] GetFileType (hFile=0x230) returned 0x1 [0157.051] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.051] ReadFile (in: hFile=0x230, lpBuffer=0x26c7898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26c7898*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0157.051] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.052] CloseHandle (hObject=0x230) returned 1 [0157.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x64 [0157.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat", lpFilePart=0x0) returned 0x64 [0157.052] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x78 [0157.052] SetErrorMode (uMode=0x1) returned 0x0 [0157.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x99f01b36, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x99f01b36, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x99f01b36, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.052] SetErrorMode (uMode=0x0) returned 0x1 [0157.052] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieBrowserModeList\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiebrowsermodelist\\container.dat.partially.cryptonar")) returned 1 [0157.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5d [0157.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5d [0157.054] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5d [0157.054] SetErrorMode (uMode=0x1) returned 0x0 [0157.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiesitelist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.055] GetFileType (hFile=0x230) returned 0x1 [0157.055] SetErrorMode (uMode=0x0) returned 0x1 [0157.056] GetFileType (hFile=0x230) returned 0x1 [0157.056] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.056] ReadFile (in: hFile=0x230, lpBuffer=0x26caca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26caca0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0157.056] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.056] CloseHandle (hObject=0x230) returned 1 [0157.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5d [0157.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x5d [0157.056] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x71 [0157.056] SetErrorMode (uMode=0x1) returned 0x0 [0157.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiesitelist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90ee30ec, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x99eee2c2, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x99eee2c2, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.056] SetErrorMode (uMode=0x0) returned 0x1 [0157.056] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiesitelist\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieSiteList\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emiesitelist\\container.dat.partially.cryptonar")) returned 1 [0157.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5d [0157.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5d [0157.058] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5d [0157.058] SetErrorMode (uMode=0x1) returned 0x0 [0157.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emieuserlist\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.066] GetFileType (hFile=0x230) returned 0x1 [0157.066] SetErrorMode (uMode=0x0) returned 0x1 [0157.067] GetFileType (hFile=0x230) returned 0x1 [0157.067] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.067] ReadFile (in: hFile=0x230, lpBuffer=0x26ce048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ce048*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0157.067] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.067] CloseHandle (hObject=0x230) returned 1 [0157.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5d [0157.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat", lpFilePart=0x0) returned 0x5d [0157.067] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x71 [0157.067] SetErrorMode (uMode=0x1) returned 0x0 [0157.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emieuserlist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x99ef7efb, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x99ef7efb, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x99ef7efb, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.067] SetErrorMode (uMode=0x0) returned 0x1 [0157.067] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emieuserlist\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\EmieUserList\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\internet explorer\\emieuserlist\\container.dat.partially.cryptonar")) returned 1 [0157.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4f [0157.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4f [0157.069] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4f [0157.069] SetErrorMode (uMode=0x1) returned 0x0 [0157.069] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.071] GetFileType (hFile=0x230) returned 0x1 [0157.071] SetErrorMode (uMode=0x0) returned 0x1 [0157.071] GetFileType (hFile=0x230) returned 0x1 [0157.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.071] ReadFile (in: hFile=0x230, lpBuffer=0x26d1390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d1390*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0157.071] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.071] CloseHandle (hObject=0x230) returned 1 [0157.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4f [0157.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat", lpFilePart=0x0) returned 0x4f [0157.071] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x63 [0157.071] SetErrorMode (uMode=0x1) returned 0x0 [0157.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90f2f588, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90f2f588, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90f2f588, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.071] SetErrorMode (uMode=0x0) returned 0x1 [0157.071] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\container.dat.partially.cryptonar")) returned 1 [0157.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat", lpFilePart=0x0) returned 0x58 [0157.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat", lpFilePart=0x0) returned 0x58 [0157.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat", lpFilePart=0x0) returned 0x58 [0157.073] SetErrorMode (uMode=0x1) returned 0x0 [0157.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\w91w3ib2\\container.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.075] GetFileType (hFile=0x230) returned 0x1 [0157.075] SetErrorMode (uMode=0x0) returned 0x1 [0157.075] GetFileType (hFile=0x230) returned 0x1 [0157.075] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.075] ReadFile (in: hFile=0x230, lpBuffer=0x26d4668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d4668*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0157.075] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.075] CloseHandle (hObject=0x230) returned 1 [0157.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat", lpFilePart=0x0) returned 0x58 [0157.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat", lpFilePart=0x0) returned 0x58 [0157.075] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat.partially.cryptoNar", lpFilePart=0x0) returned 0x6c [0157.075] SetErrorMode (uMode=0x1) returned 0x0 [0157.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\w91w3ib2\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x90f2f588, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x90f2f588, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x90f2f588, ftLastWriteTime.dwHighDateTime=0x1d2fc22, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.076] SetErrorMode (uMode=0x0) returned 0x1 [0157.076] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\w91w3ib2\\container.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Microsoft\\Windows\\AppCache\\W91W3IB2\\container.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\microsoft\\windows\\appcache\\w91w3ib2\\container.dat.partially.cryptonar")) returned 1 [0157.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", lpFilePart=0x0) returned 0x50 [0157.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", lpFilePart=0x0) returned 0x50 [0157.077] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", lpFilePart=0x0) returned 0x50 [0157.077] SetErrorMode (uMode=0x1) returned 0x0 [0157.077] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.079] GetFileType (hFile=0x230) returned 0x1 [0157.079] SetErrorMode (uMode=0x0) returned 0x1 [0157.079] GetFileType (hFile=0x230) returned 0x1 [0157.079] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.079] ReadFile (in: hFile=0x230, lpBuffer=0x26d79c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d79c8*, lpNumberOfBytesRead=0x5ae8b8*=0x2eb, lpOverlapped=0x0) returned 1 [0157.198] ReadFile (in: hFile=0x230, lpBuffer=0x26d79c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26d79c8*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0157.198] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.198] WriteFile (in: hFile=0x230, lpBuffer=0x26d79c8*, nNumberOfBytesToWrite=0x2eb, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26d79c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x2eb, lpOverlapped=0x0) returned 1 [0157.199] CloseHandle (hObject=0x230) returned 1 [0157.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", lpFilePart=0x0) returned 0x50 [0157.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", lpFilePart=0x0) returned 0x50 [0157.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.partially.cryptoNar", lpFilePart=0x0) returned 0x64 [0157.199] SetErrorMode (uMode=0x1) returned 0x0 [0157.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x930ff94a, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x930ff94a, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x6024f1a9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2eb)) returned 1 [0157.200] SetErrorMode (uMode=0x0) returned 0x1 [0157.200] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties.partially.cryptonar")) returned 1 [0157.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav", lpFilePart=0x0) returned 0x2f [0157.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav", lpFilePart=0x0) returned 0x2f [0157.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav", lpFilePart=0x0) returned 0x2f [0157.202] SetErrorMode (uMode=0x1) returned 0x0 [0157.202] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\-7pnq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.203] GetFileType (hFile=0x230) returned 0x1 [0157.203] SetErrorMode (uMode=0x0) returned 0x1 [0157.203] GetFileType (hFile=0x230) returned 0x1 [0157.203] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.203] ReadFile (in: hFile=0x230, lpBuffer=0x26db190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26db190*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.204] WriteFile (in: hFile=0x230, lpBuffer=0x26db190*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26db190*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.204] CloseHandle (hObject=0x230) returned 1 [0157.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav", lpFilePart=0x0) returned 0x2f [0157.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav", lpFilePart=0x0) returned 0x2f [0157.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav.partially.cryptoNar", lpFilePart=0x0) returned 0x43 [0157.204] SetErrorMode (uMode=0x1) returned 0x0 [0157.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\-7pnq.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ecf0e00, ftCreationTime.dwHighDateTime=0x1d410bc, ftLastAccessTime.dwLowDateTime=0xa5a96db0, ftLastAccessTime.dwHighDateTime=0x1d411c9, ftLastWriteTime.dwLowDateTime=0x6027525e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xca8b)) returned 1 [0157.205] SetErrorMode (uMode=0x0) returned 0x1 [0157.205] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\-7pnq.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\-7pnQ.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\-7pnq.wav.partially.cryptonar")) returned 1 [0157.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv", lpFilePart=0x0) returned 0x34 [0157.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv", lpFilePart=0x0) returned 0x34 [0157.206] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv", lpFilePart=0x0) returned 0x34 [0157.206] SetErrorMode (uMode=0x1) returned 0x0 [0157.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\1_obpdlrfv.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.207] GetFileType (hFile=0x230) returned 0x1 [0157.207] SetErrorMode (uMode=0x0) returned 0x1 [0157.207] GetFileType (hFile=0x230) returned 0x1 [0157.207] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.207] ReadFile (in: hFile=0x230, lpBuffer=0x26de5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26de5f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.207] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.208] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.208] WriteFile (in: hFile=0x230, lpBuffer=0x26de5f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26de5f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.208] CloseHandle (hObject=0x230) returned 1 [0157.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv", lpFilePart=0x0) returned 0x34 [0157.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv", lpFilePart=0x0) returned 0x34 [0157.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv.partially.cryptoNar", lpFilePart=0x0) returned 0x48 [0157.208] SetErrorMode (uMode=0x1) returned 0x0 [0157.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\1_obpdlrfv.mkv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6848f3f0, ftCreationTime.dwHighDateTime=0x1d418d1, ftLastAccessTime.dwLowDateTime=0x4672af20, ftLastAccessTime.dwHighDateTime=0x1d41d2a, ftLastWriteTime.dwLowDateTime=0x6027525e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11c8b)) returned 1 [0157.208] SetErrorMode (uMode=0x0) returned 0x1 [0157.208] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\1_obpdlrfv.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\1_ObPDLrFV.mkv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\1_obpdlrfv.mkv.partially.cryptonar")) returned 1 [0157.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3", lpFilePart=0x0) returned 0x30 [0157.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3", lpFilePart=0x0) returned 0x30 [0157.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3", lpFilePart=0x0) returned 0x30 [0157.210] SetErrorMode (uMode=0x1) returned 0x0 [0157.210] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\20pyog.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.211] GetFileType (hFile=0x230) returned 0x1 [0157.211] SetErrorMode (uMode=0x0) returned 0x1 [0157.211] GetFileType (hFile=0x230) returned 0x1 [0157.211] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.211] ReadFile (in: hFile=0x230, lpBuffer=0x26e1a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e1a90*, lpNumberOfBytesRead=0x5ae8b8*=0x8bd, lpOverlapped=0x0) returned 1 [0157.212] SetFilePointer (in: hFile=0x230, lDistanceToMove=-1213, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.212] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.212] WriteFile (in: hFile=0x230, lpBuffer=0x26e1a90*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e1a90*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.212] CloseHandle (hObject=0x230) returned 1 [0157.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3", lpFilePart=0x0) returned 0x30 [0157.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3", lpFilePart=0x0) returned 0x30 [0157.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3.partially.cryptoNar", lpFilePart=0x0) returned 0x44 [0157.213] SetErrorMode (uMode=0x1) returned 0x0 [0157.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\20pyog.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e76e780, ftCreationTime.dwHighDateTime=0x1d4103c, ftLastAccessTime.dwLowDateTime=0x45892e0, ftLastAccessTime.dwHighDateTime=0x1d41e69, ftLastWriteTime.dwLowDateTime=0x6027525e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8bd)) returned 1 [0157.213] SetErrorMode (uMode=0x0) returned 0x1 [0157.213] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\20pyog.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\20PYog.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\20pyog.mp3.partially.cryptonar")) returned 1 [0157.214] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf", lpFilePart=0x0) returned 0x36 [0157.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf", lpFilePart=0x0) returned 0x36 [0157.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf", lpFilePart=0x0) returned 0x36 [0157.215] SetErrorMode (uMode=0x1) returned 0x0 [0157.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\21dlo8b1sscy.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.216] GetFileType (hFile=0x230) returned 0x1 [0157.216] SetErrorMode (uMode=0x0) returned 0x1 [0157.216] GetFileType (hFile=0x230) returned 0x1 [0157.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.216] ReadFile (in: hFile=0x230, lpBuffer=0x26e4f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e4f30*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.217] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.217] WriteFile (in: hFile=0x230, lpBuffer=0x26e4f30*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e4f30*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.217] CloseHandle (hObject=0x230) returned 1 [0157.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf", lpFilePart=0x0) returned 0x36 [0157.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf", lpFilePart=0x0) returned 0x36 [0157.217] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf.partially.cryptoNar", lpFilePart=0x0) returned 0x4a [0157.217] SetErrorMode (uMode=0x1) returned 0x0 [0157.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\21dlo8b1sscy.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x329a5c50, ftCreationTime.dwHighDateTime=0x1d41834, ftLastAccessTime.dwLowDateTime=0xa77dbf20, ftLastAccessTime.dwHighDateTime=0x1d413a3, ftLastWriteTime.dwLowDateTime=0x6029b50a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x179ef)) returned 1 [0157.217] SetErrorMode (uMode=0x0) returned 0x1 [0157.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\21dlo8b1sscy.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\21DlO8b1SSCy.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\21dlo8b1sscy.swf.partially.cryptonar")) returned 1 [0157.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods", lpFilePart=0x0) returned 0x33 [0157.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods", lpFilePart=0x0) returned 0x33 [0157.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods", lpFilePart=0x0) returned 0x33 [0157.219] SetErrorMode (uMode=0x1) returned 0x0 [0157.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6fiaa982n.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.220] GetFileType (hFile=0x230) returned 0x1 [0157.220] SetErrorMode (uMode=0x0) returned 0x1 [0157.220] GetFileType (hFile=0x230) returned 0x1 [0157.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.220] ReadFile (in: hFile=0x230, lpBuffer=0x26e83e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26e83e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.221] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.221] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.221] WriteFile (in: hFile=0x230, lpBuffer=0x26e83e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26e83e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.221] CloseHandle (hObject=0x230) returned 1 [0157.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods", lpFilePart=0x0) returned 0x33 [0157.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods", lpFilePart=0x0) returned 0x33 [0157.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods.partially.cryptoNar", lpFilePart=0x0) returned 0x47 [0157.222] SetErrorMode (uMode=0x1) returned 0x0 [0157.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6fiaa982n.ods"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7f45af0, ftCreationTime.dwHighDateTime=0x1d41518, ftLastAccessTime.dwLowDateTime=0xd7dd8ed0, ftLastAccessTime.dwHighDateTime=0x1d413ca, ftLastWriteTime.dwLowDateTime=0x6029b50a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x156bc)) returned 1 [0157.222] SetErrorMode (uMode=0x0) returned 0x1 [0157.222] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6fiaa982n.ods"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fiAa982N.ods.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6fiaa982n.ods.partially.cryptonar")) returned 1 [0157.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a", lpFilePart=0x0) returned 0x3e [0157.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a", lpFilePart=0x0) returned 0x3e [0157.223] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a", lpFilePart=0x0) returned 0x3e [0157.224] SetErrorMode (uMode=0x1) returned 0x0 [0157.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6fkxonmrsjfyl0harzxk.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.224] GetFileType (hFile=0x230) returned 0x1 [0157.225] SetErrorMode (uMode=0x0) returned 0x1 [0157.225] GetFileType (hFile=0x230) returned 0x1 [0157.225] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.225] ReadFile (in: hFile=0x230, lpBuffer=0x26eb8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26eb8d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.225] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.225] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.225] WriteFile (in: hFile=0x230, lpBuffer=0x26eb8d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26eb8d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.225] CloseHandle (hObject=0x230) returned 1 [0157.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a", lpFilePart=0x0) returned 0x3e [0157.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a", lpFilePart=0x0) returned 0x3e [0157.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a.partially.cryptoNar", lpFilePart=0x0) returned 0x52 [0157.226] SetErrorMode (uMode=0x1) returned 0x0 [0157.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6fkxonmrsjfyl0harzxk.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a18fc20, ftCreationTime.dwHighDateTime=0x1d41728, ftLastAccessTime.dwLowDateTime=0x3d49730, ftLastAccessTime.dwHighDateTime=0x1d414e4, ftLastWriteTime.dwLowDateTime=0x6029b50a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x152f3)) returned 1 [0157.226] SetErrorMode (uMode=0x0) returned 0x1 [0157.226] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6fkxonmrsjfyl0harzxk.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6fKXonmrSJfYl0haRZXk.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6fkxonmrsjfyl0harzxk.m4a.partially.cryptonar")) returned 1 [0157.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png", lpFilePart=0x0) returned 0x3d [0157.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png", lpFilePart=0x0) returned 0x3d [0157.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png", lpFilePart=0x0) returned 0x3d [0157.227] SetErrorMode (uMode=0x1) returned 0x0 [0157.227] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6pukgutag-lox3dvlpx.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.228] GetFileType (hFile=0x230) returned 0x1 [0157.228] SetErrorMode (uMode=0x0) returned 0x1 [0157.228] GetFileType (hFile=0x230) returned 0x1 [0157.228] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.228] ReadFile (in: hFile=0x230, lpBuffer=0x26eee50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26eee50*, lpNumberOfBytesRead=0x5ae8b8*=0x5d3, lpOverlapped=0x0) returned 1 [0157.229] SetFilePointer (in: hFile=0x230, lDistanceToMove=-467, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.229] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.229] WriteFile (in: hFile=0x230, lpBuffer=0x26eee50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26eee50*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.229] CloseHandle (hObject=0x230) returned 1 [0157.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png", lpFilePart=0x0) returned 0x3d [0157.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png", lpFilePart=0x0) returned 0x3d [0157.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png.partially.cryptoNar", lpFilePart=0x0) returned 0x51 [0157.229] SetErrorMode (uMode=0x1) returned 0x0 [0157.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6pukgutag-lox3dvlpx.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a1106d0, ftCreationTime.dwHighDateTime=0x1d41a2a, ftLastAccessTime.dwLowDateTime=0x582a1b20, ftLastAccessTime.dwHighDateTime=0x1d418c7, ftLastWriteTime.dwLowDateTime=0x6029b50a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d3)) returned 1 [0157.229] SetErrorMode (uMode=0x0) returned 0x1 [0157.230] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6pukgutag-lox3dvlpx.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\6PUKGutAg-loX3DVLpx.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\6pukgutag-lox3dvlpx.png.partially.cryptonar")) returned 1 [0157.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav", lpFilePart=0x0) returned 0x32 [0157.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav", lpFilePart=0x0) returned 0x32 [0157.232] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav", lpFilePart=0x0) returned 0x32 [0157.232] SetErrorMode (uMode=0x1) returned 0x0 [0157.232] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\8gavnkpi.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.233] GetFileType (hFile=0x230) returned 0x1 [0157.233] SetErrorMode (uMode=0x0) returned 0x1 [0157.233] GetFileType (hFile=0x230) returned 0x1 [0157.233] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.233] ReadFile (in: hFile=0x230, lpBuffer=0x26f2358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f2358*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.233] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.233] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.233] WriteFile (in: hFile=0x230, lpBuffer=0x26f2358*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f2358*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.233] CloseHandle (hObject=0x230) returned 1 [0157.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav", lpFilePart=0x0) returned 0x32 [0157.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav", lpFilePart=0x0) returned 0x32 [0157.234] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav.partially.cryptoNar", lpFilePart=0x0) returned 0x46 [0157.234] SetErrorMode (uMode=0x1) returned 0x0 [0157.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\8gavnkpi.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b23330, ftCreationTime.dwHighDateTime=0x1d4198c, ftLastAccessTime.dwLowDateTime=0x2e422070, ftLastAccessTime.dwHighDateTime=0x1d4100a, ftLastWriteTime.dwLowDateTime=0x602c1968, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16b72)) returned 1 [0157.234] SetErrorMode (uMode=0x0) returned 0x1 [0157.234] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\8gavnkpi.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\8gavnkPI.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\8gavnkpi.wav.partially.cryptonar")) returned 1 [0157.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg", lpFilePart=0x0) returned 0x37 [0157.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg", lpFilePart=0x0) returned 0x37 [0157.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg", lpFilePart=0x0) returned 0x37 [0157.236] SetErrorMode (uMode=0x1) returned 0x0 [0157.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\afpue98rh1vja.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.238] GetFileType (hFile=0x230) returned 0x1 [0157.238] SetErrorMode (uMode=0x0) returned 0x1 [0157.238] GetFileType (hFile=0x230) returned 0x1 [0157.238] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.238] ReadFile (in: hFile=0x230, lpBuffer=0x26f5800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f5800*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.238] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.238] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.238] WriteFile (in: hFile=0x230, lpBuffer=0x26f5800*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f5800*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.239] CloseHandle (hObject=0x230) returned 1 [0157.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg", lpFilePart=0x0) returned 0x37 [0157.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg", lpFilePart=0x0) returned 0x37 [0157.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x4b [0157.239] SetErrorMode (uMode=0x1) returned 0x0 [0157.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\afpue98rh1vja.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dc0f910, ftCreationTime.dwHighDateTime=0x1d41098, ftLastAccessTime.dwLowDateTime=0xe1a984b0, ftLastAccessTime.dwHighDateTime=0x1d41f68, ftLastWriteTime.dwLowDateTime=0x602c1968, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15817)) returned 1 [0157.239] SetErrorMode (uMode=0x0) returned 0x1 [0157.239] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\afpue98rh1vja.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AFPUE98rH1VJA.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\afpue98rh1vja.jpg.partially.cryptonar")) returned 1 [0157.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png", lpFilePart=0x0) returned 0x2f [0157.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png", lpFilePart=0x0) returned 0x2f [0157.241] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png", lpFilePart=0x0) returned 0x2f [0157.241] SetErrorMode (uMode=0x1) returned 0x0 [0157.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ajban.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.242] GetFileType (hFile=0x230) returned 0x1 [0157.242] SetErrorMode (uMode=0x0) returned 0x1 [0157.243] GetFileType (hFile=0x230) returned 0x1 [0157.243] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.243] ReadFile (in: hFile=0x230, lpBuffer=0x26f8c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26f8c88*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.243] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.243] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.243] WriteFile (in: hFile=0x230, lpBuffer=0x26f8c88*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26f8c88*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.243] CloseHandle (hObject=0x230) returned 1 [0157.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png", lpFilePart=0x0) returned 0x2f [0157.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png", lpFilePart=0x0) returned 0x2f [0157.243] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png.partially.cryptoNar", lpFilePart=0x0) returned 0x43 [0157.244] SetErrorMode (uMode=0x1) returned 0x0 [0157.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ajban.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28103720, ftCreationTime.dwHighDateTime=0x1d41508, ftLastAccessTime.dwLowDateTime=0xb8734510, ftLastAccessTime.dwHighDateTime=0x1d41b51, ftLastWriteTime.dwLowDateTime=0x602c1968, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x784c)) returned 1 [0157.244] SetErrorMode (uMode=0x0) returned 0x1 [0157.244] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ajban.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\AJbAN.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ajban.png.partially.cryptonar")) returned 1 [0157.245] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf", lpFilePart=0x0) returned 0x39 [0157.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf", lpFilePart=0x0) returned 0x39 [0157.246] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf", lpFilePart=0x0) returned 0x39 [0157.246] SetErrorMode (uMode=0x1) returned 0x0 [0157.246] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\az4uyowftrnzujr.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.248] GetFileType (hFile=0x230) returned 0x1 [0157.248] SetErrorMode (uMode=0x0) returned 0x1 [0157.248] GetFileType (hFile=0x230) returned 0x1 [0157.248] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.248] ReadFile (in: hFile=0x230, lpBuffer=0x26fc118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26fc118*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.248] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.249] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.249] WriteFile (in: hFile=0x230, lpBuffer=0x26fc118*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26fc118*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.249] CloseHandle (hObject=0x230) returned 1 [0157.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf", lpFilePart=0x0) returned 0x39 [0157.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf", lpFilePart=0x0) returned 0x39 [0157.249] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf.partially.cryptoNar", lpFilePart=0x0) returned 0x4d [0157.249] SetErrorMode (uMode=0x1) returned 0x0 [0157.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\az4uyowftrnzujr.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf899f4e0, ftCreationTime.dwHighDateTime=0x1d41b06, ftLastAccessTime.dwLowDateTime=0x30780fd0, ftLastAccessTime.dwHighDateTime=0x1d417f8, ftLastWriteTime.dwLowDateTime=0x602e8f06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15a6a)) returned 1 [0157.250] SetErrorMode (uMode=0x0) returned 0x1 [0157.250] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\az4uyowftrnzujr.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\aZ4UyoWFtRNZUJr.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\az4uyowftrnzujr.swf.partially.cryptonar")) returned 1 [0157.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a", lpFilePart=0x0) returned 0x2e [0157.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a", lpFilePart=0x0) returned 0x2e [0157.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a", lpFilePart=0x0) returned 0x2e [0157.251] SetErrorMode (uMode=0x1) returned 0x0 [0157.251] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\b-bn.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.252] GetFileType (hFile=0x230) returned 0x1 [0157.252] SetErrorMode (uMode=0x0) returned 0x1 [0157.252] GetFileType (hFile=0x230) returned 0x1 [0157.252] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.252] ReadFile (in: hFile=0x230, lpBuffer=0x26ff5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x26ff5c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.253] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.253] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.253] WriteFile (in: hFile=0x230, lpBuffer=0x26ff5c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26ff5c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.253] CloseHandle (hObject=0x230) returned 1 [0157.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a", lpFilePart=0x0) returned 0x2e [0157.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a", lpFilePart=0x0) returned 0x2e [0157.253] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a.partially.cryptoNar", lpFilePart=0x0) returned 0x42 [0157.253] SetErrorMode (uMode=0x1) returned 0x0 [0157.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\b-bn.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ab35e0, ftCreationTime.dwHighDateTime=0x1d412a1, ftLastAccessTime.dwLowDateTime=0xd1c00a10, ftLastAccessTime.dwHighDateTime=0x1d40fc3, ftLastWriteTime.dwLowDateTime=0x602e8f06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xedbc)) returned 1 [0157.254] SetErrorMode (uMode=0x0) returned 0x1 [0157.254] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\b-bn.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\b-bN.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\b-bn.m4a.partially.cryptonar")) returned 1 [0157.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp", lpFilePart=0x0) returned 0x37 [0157.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp", lpFilePart=0x0) returned 0x37 [0157.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp", lpFilePart=0x0) returned 0x37 [0157.255] SetErrorMode (uMode=0x1) returned 0x0 [0157.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ba6vb_xkst-on.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.256] GetFileType (hFile=0x230) returned 0x1 [0157.256] SetErrorMode (uMode=0x0) returned 0x1 [0157.256] GetFileType (hFile=0x230) returned 0x1 [0157.256] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.257] ReadFile (in: hFile=0x230, lpBuffer=0x2702a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2702a40*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.257] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.257] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.257] WriteFile (in: hFile=0x230, lpBuffer=0x2702a40*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2702a40*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.257] CloseHandle (hObject=0x230) returned 1 [0157.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp", lpFilePart=0x0) returned 0x37 [0157.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp", lpFilePart=0x0) returned 0x37 [0157.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp.partially.cryptoNar", lpFilePart=0x0) returned 0x4b [0157.257] SetErrorMode (uMode=0x1) returned 0x0 [0157.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ba6vb_xkst-on.odp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3ef5f70, ftCreationTime.dwHighDateTime=0x1d41def, ftLastAccessTime.dwLowDateTime=0x58da9540, ftLastAccessTime.dwHighDateTime=0x1d4147b, ftLastWriteTime.dwLowDateTime=0x602e8f06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe04c)) returned 1 [0157.258] SetErrorMode (uMode=0x0) returned 0x1 [0157.258] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ba6vb_xkst-on.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\ba6vb_XKst-ON.odp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ba6vb_xkst-on.odp.partially.cryptonar")) returned 1 [0157.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a", lpFilePart=0x0) returned 0x30 [0157.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a", lpFilePart=0x0) returned 0x30 [0157.259] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a", lpFilePart=0x0) returned 0x30 [0157.259] SetErrorMode (uMode=0x1) returned 0x0 [0157.259] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\e-r2p5.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.260] GetFileType (hFile=0x230) returned 0x1 [0157.260] SetErrorMode (uMode=0x0) returned 0x1 [0157.261] GetFileType (hFile=0x230) returned 0x1 [0157.261] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.261] ReadFile (in: hFile=0x230, lpBuffer=0x2705ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2705ee0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.261] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.261] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.261] WriteFile (in: hFile=0x230, lpBuffer=0x2705ee0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2705ee0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.261] CloseHandle (hObject=0x230) returned 1 [0157.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a", lpFilePart=0x0) returned 0x30 [0157.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a", lpFilePart=0x0) returned 0x30 [0157.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a.partially.cryptoNar", lpFilePart=0x0) returned 0x44 [0157.261] SetErrorMode (uMode=0x1) returned 0x0 [0157.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\e-r2p5.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8a7a2c0, ftCreationTime.dwHighDateTime=0x1d41fe3, ftLastAccessTime.dwLowDateTime=0x6ae07c30, ftLastAccessTime.dwHighDateTime=0x1d41b99, ftLastWriteTime.dwLowDateTime=0x602e8f06, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x334f)) returned 1 [0157.262] SetErrorMode (uMode=0x0) returned 0x1 [0157.262] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\e-r2p5.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\E-r2P5.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\e-r2p5.m4a.partially.cryptonar")) returned 1 [0157.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4", lpFilePart=0x0) returned 0x32 [0157.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4", lpFilePart=0x0) returned 0x32 [0157.264] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4", lpFilePart=0x0) returned 0x32 [0157.264] SetErrorMode (uMode=0x1) returned 0x0 [0157.264] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fe5kcjks.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.265] GetFileType (hFile=0x230) returned 0x1 [0157.265] SetErrorMode (uMode=0x0) returned 0x1 [0157.265] GetFileType (hFile=0x230) returned 0x1 [0157.265] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.265] ReadFile (in: hFile=0x230, lpBuffer=0x2709358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2709358*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.265] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.265] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.265] WriteFile (in: hFile=0x230, lpBuffer=0x2709358*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2709358*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.265] CloseHandle (hObject=0x230) returned 1 [0157.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4", lpFilePart=0x0) returned 0x32 [0157.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4", lpFilePart=0x0) returned 0x32 [0157.266] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4.partially.cryptoNar", lpFilePart=0x0) returned 0x46 [0157.266] SetErrorMode (uMode=0x1) returned 0x0 [0157.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fe5kcjks.mp4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387dce20, ftCreationTime.dwHighDateTime=0x1d410de, ftLastAccessTime.dwLowDateTime=0x4f35e370, ftLastAccessTime.dwHighDateTime=0x1d41965, ftLastWriteTime.dwLowDateTime=0x6030dc30, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14e21)) returned 1 [0157.266] SetErrorMode (uMode=0x0) returned 0x1 [0157.266] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fe5kcjks.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\fE5kcJks.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\fe5kcjks.mp4.partially.cryptonar")) returned 1 [0157.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3", lpFilePart=0x0) returned 0x37 [0157.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3", lpFilePart=0x0) returned 0x37 [0157.267] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3", lpFilePart=0x0) returned 0x37 [0157.267] SetErrorMode (uMode=0x1) returned 0x0 [0157.267] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\gntgfktuy1yvy.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.268] GetFileType (hFile=0x230) returned 0x1 [0157.268] SetErrorMode (uMode=0x0) returned 0x1 [0157.268] GetFileType (hFile=0x230) returned 0x1 [0157.268] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.269] ReadFile (in: hFile=0x230, lpBuffer=0x270c800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270c800*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.269] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.269] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.269] WriteFile (in: hFile=0x230, lpBuffer=0x270c800*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270c800*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.269] CloseHandle (hObject=0x230) returned 1 [0157.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3", lpFilePart=0x0) returned 0x37 [0157.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3", lpFilePart=0x0) returned 0x37 [0157.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3.partially.cryptoNar", lpFilePart=0x0) returned 0x4b [0157.269] SetErrorMode (uMode=0x1) returned 0x0 [0157.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\gntgfktuy1yvy.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc1a60a0, ftCreationTime.dwHighDateTime=0x1d418cb, ftLastAccessTime.dwLowDateTime=0x668e32e0, ftLastAccessTime.dwHighDateTime=0x1d416d4, ftLastWriteTime.dwLowDateTime=0x6030dc30, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfc99)) returned 1 [0157.269] SetErrorMode (uMode=0x0) returned 0x1 [0157.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\gntgfktuy1yvy.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\GNtgFKtuY1Yvy.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\gntgfktuy1yvy.mp3.partially.cryptonar")) returned 1 [0157.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt", lpFilePart=0x0) returned 0x3b [0157.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt", lpFilePart=0x0) returned 0x3b [0157.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt", lpFilePart=0x0) returned 0x3b [0157.272] SetErrorMode (uMode=0x1) returned 0x0 [0157.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ha8ijrs4lsuqvvxay.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.273] GetFileType (hFile=0x230) returned 0x1 [0157.273] SetErrorMode (uMode=0x0) returned 0x1 [0157.273] GetFileType (hFile=0x230) returned 0x1 [0157.273] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.273] ReadFile (in: hFile=0x230, lpBuffer=0x270fd00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270fd00*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.274] WriteFile (in: hFile=0x230, lpBuffer=0x270fd00*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270fd00*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.274] CloseHandle (hObject=0x230) returned 1 [0157.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt", lpFilePart=0x0) returned 0x3b [0157.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt", lpFilePart=0x0) returned 0x3b [0157.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt.partially.cryptoNar", lpFilePart=0x0) returned 0x4f [0157.274] SetErrorMode (uMode=0x1) returned 0x0 [0157.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ha8ijrs4lsuqvvxay.ppt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc43db420, ftCreationTime.dwHighDateTime=0x1d41fca, ftLastAccessTime.dwLowDateTime=0xb6602e10, ftLastAccessTime.dwHighDateTime=0x1d41d76, ftLastWriteTime.dwLowDateTime=0x6030dc30, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8ebb)) returned 1 [0157.275] SetErrorMode (uMode=0x0) returned 0x1 [0157.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ha8ijrs4lsuqvvxay.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\hA8IjRs4LsuqVvXAy.ppt.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ha8ijrs4lsuqvvxay.ppt.partially.cryptonar")) returned 1 [0157.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt", lpFilePart=0x0) returned 0x3c [0157.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt", lpFilePart=0x0) returned 0x3c [0157.276] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt", lpFilePart=0x0) returned 0x3c [0157.276] SetErrorMode (uMode=0x1) returned 0x0 [0157.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\idl1nh6fhh3b7tete1.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.277] GetFileType (hFile=0x230) returned 0x1 [0157.277] SetErrorMode (uMode=0x0) returned 0x1 [0157.277] GetFileType (hFile=0x230) returned 0x1 [0157.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.277] ReadFile (in: hFile=0x230, lpBuffer=0x2713248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2713248*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0157.278] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.278] WriteFile (in: hFile=0x230, lpBuffer=0x2713248*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2713248*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0157.278] CloseHandle (hObject=0x230) returned 1 [0157.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt", lpFilePart=0x0) returned 0x3c [0157.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt", lpFilePart=0x0) returned 0x3c [0157.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt.partially.cryptoNar", lpFilePart=0x0) returned 0x50 [0157.278] SetErrorMode (uMode=0x1) returned 0x0 [0157.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\idl1nh6fhh3b7tete1.odt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77697e60, ftCreationTime.dwHighDateTime=0x1d415a0, ftLastAccessTime.dwLowDateTime=0xd4034f40, ftLastAccessTime.dwHighDateTime=0x1d41c38, ftLastWriteTime.dwLowDateTime=0x6030dc30, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc)) returned 1 [0157.278] SetErrorMode (uMode=0x0) returned 0x1 [0157.278] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\idl1nh6fhh3b7tete1.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\IDL1nh6fHh3B7TetE1.odt.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\idl1nh6fhh3b7tete1.odt.partially.cryptonar")) returned 1 [0157.280] SetErrorMode (uMode=0x1) returned 0x0 [0157.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kUudyf2.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kuudyf2.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.281] SetErrorMode (uMode=0x0) returned 0x1 [0157.281] GetFileType (hFile=0x230) returned 0x1 [0157.281] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.283] SetErrorMode (uMode=0x1) returned 0x0 [0157.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kUudyf2.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kuudyf2.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b8c2700, ftCreationTime.dwHighDateTime=0x1d41261, ftLastAccessTime.dwLowDateTime=0x8f5d58f0, ftLastAccessTime.dwHighDateTime=0x1d41bbf, ftLastWriteTime.dwLowDateTime=0x60338451, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x135b3)) returned 1 [0157.283] SetErrorMode (uMode=0x0) returned 0x1 [0157.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kUudyf2.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kuudyf2.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\kUudyf2.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\kuudyf2.avi.partially.cryptonar")) returned 1 [0157.284] SetErrorMode (uMode=0x1) returned 0x0 [0157.284] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L0gyW.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\l0gyw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.285] SetErrorMode (uMode=0x0) returned 0x1 [0157.285] GetFileType (hFile=0x230) returned 0x1 [0157.285] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.286] SetErrorMode (uMode=0x1) returned 0x0 [0157.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L0gyW.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\l0gyw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc95c370, ftCreationTime.dwHighDateTime=0x1d4148b, ftLastAccessTime.dwLowDateTime=0xa3b4d4e0, ftLastAccessTime.dwHighDateTime=0x1d41f57, ftLastWriteTime.dwLowDateTime=0x60338451, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc293)) returned 1 [0157.286] SetErrorMode (uMode=0x0) returned 0x1 [0157.286] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L0gyW.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\l0gyw.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\L0gyW.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\l0gyw.mp3.partially.cryptonar")) returned 1 [0157.287] SetErrorMode (uMode=0x1) returned 0x0 [0157.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Ly4aoHH1yNDWJ.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ly4aohh1yndwj.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.288] SetErrorMode (uMode=0x0) returned 0x1 [0157.288] GetFileType (hFile=0x230) returned 0x1 [0157.288] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.288] SetErrorMode (uMode=0x1) returned 0x0 [0157.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Ly4aoHH1yNDWJ.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ly4aohh1yndwj.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c114400, ftCreationTime.dwHighDateTime=0x1d4189f, ftLastAccessTime.dwLowDateTime=0xb3455490, ftLastAccessTime.dwHighDateTime=0x1d41ce9, ftLastWriteTime.dwLowDateTime=0x60338451, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6339)) returned 1 [0157.288] SetErrorMode (uMode=0x0) returned 0x1 [0157.288] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Ly4aoHH1yNDWJ.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ly4aohh1yndwj.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Ly4aoHH1yNDWJ.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\ly4aohh1yndwj.swf.partially.cryptonar")) returned 1 [0157.289] SetErrorMode (uMode=0x1) returned 0x0 [0157.289] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mg0nanXxTeL.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mg0nanxxtel.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.290] SetErrorMode (uMode=0x0) returned 0x1 [0157.290] GetFileType (hFile=0x230) returned 0x1 [0157.290] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.291] SetErrorMode (uMode=0x1) returned 0x0 [0157.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mg0nanXxTeL.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mg0nanxxtel.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bada40, ftCreationTime.dwHighDateTime=0x1d4148c, ftLastAccessTime.dwLowDateTime=0x7f5f6350, ftLastAccessTime.dwHighDateTime=0x1d411a9, ftLastWriteTime.dwLowDateTime=0x60338451, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdf55)) returned 1 [0157.291] SetErrorMode (uMode=0x0) returned 0x1 [0157.291] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mg0nanXxTeL.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mg0nanxxtel.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mg0nanXxTeL.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mg0nanxxtel.png.partially.cryptonar")) returned 1 [0157.292] SetErrorMode (uMode=0x1) returned 0x0 [0157.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\mRuk86UyzOMlkI7 4K.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mruk86uyzomlki7 4k.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.293] SetErrorMode (uMode=0x0) returned 0x1 [0157.293] GetFileType (hFile=0x230) returned 0x1 [0157.293] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.293] SetErrorMode (uMode=0x1) returned 0x0 [0157.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\mRuk86UyzOMlkI7 4K.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mruk86uyzomlki7 4k.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e7e880, ftCreationTime.dwHighDateTime=0x1d41762, ftLastAccessTime.dwLowDateTime=0x3aeafbe0, ftLastAccessTime.dwHighDateTime=0x1d416e4, ftLastWriteTime.dwLowDateTime=0x60338451, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1197c)) returned 1 [0157.293] SetErrorMode (uMode=0x0) returned 0x1 [0157.293] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\mRuk86UyzOMlkI7 4K.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mruk86uyzomlki7 4k.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\mRuk86UyzOMlkI7 4K.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mruk86uyzomlki7 4k.wav.partially.cryptonar")) returned 1 [0157.295] SetErrorMode (uMode=0x1) returned 0x0 [0157.295] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nqqZiMwgKbc8tG6-8y.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\nqqzimwgkbc8tg6-8y.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.296] SetErrorMode (uMode=0x0) returned 0x1 [0157.296] GetFileType (hFile=0x230) returned 0x1 [0157.296] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.296] SetErrorMode (uMode=0x1) returned 0x0 [0157.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nqqZiMwgKbc8tG6-8y.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\nqqzimwgkbc8tg6-8y.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb114cd0, ftCreationTime.dwHighDateTime=0x1d41a10, ftLastAccessTime.dwLowDateTime=0x47adbd80, ftLastAccessTime.dwHighDateTime=0x1d41ea6, ftLastWriteTime.dwLowDateTime=0x6035a122, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf5d6)) returned 1 [0157.296] SetErrorMode (uMode=0x0) returned 0x1 [0157.296] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nqqZiMwgKbc8tG6-8y.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\nqqzimwgkbc8tg6-8y.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\nqqZiMwgKbc8tG6-8y.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\nqqzimwgkbc8tg6-8y.avi.partially.cryptonar")) returned 1 [0157.297] SetErrorMode (uMode=0x1) returned 0x0 [0157.297] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\p9xj5P.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\p9xj5p.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.298] SetErrorMode (uMode=0x0) returned 0x1 [0157.298] GetFileType (hFile=0x230) returned 0x1 [0157.298] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.298] SetErrorMode (uMode=0x1) returned 0x0 [0157.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\p9xj5P.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\p9xj5p.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca9e9300, ftCreationTime.dwHighDateTime=0x1d419d7, ftLastAccessTime.dwLowDateTime=0xadff8530, ftLastAccessTime.dwHighDateTime=0x1d40fad, ftLastWriteTime.dwLowDateTime=0x6035a122, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x69e6)) returned 1 [0157.298] SetErrorMode (uMode=0x0) returned 0x1 [0157.298] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\p9xj5P.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\p9xj5p.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\p9xj5P.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\p9xj5p.flv.partially.cryptonar")) returned 1 [0157.299] SetErrorMode (uMode=0x1) returned 0x0 [0157.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\qHi3fuWr1xwJPy0.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qhi3fuwr1xwjpy0.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.300] SetErrorMode (uMode=0x0) returned 0x1 [0157.300] GetFileType (hFile=0x230) returned 0x1 [0157.300] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.300] SetErrorMode (uMode=0x1) returned 0x0 [0157.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\qHi3fuWr1xwJPy0.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qhi3fuwr1xwjpy0.odt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26dabc30, ftCreationTime.dwHighDateTime=0x1d417ac, ftLastAccessTime.dwLowDateTime=0x19f3b2d0, ftLastAccessTime.dwHighDateTime=0x1d41a34, ftLastWriteTime.dwLowDateTime=0x6035a122, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x98a)) returned 1 [0157.301] SetErrorMode (uMode=0x0) returned 0x1 [0157.301] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\qHi3fuWr1xwJPy0.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qhi3fuwr1xwjpy0.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\qHi3fuWr1xwJPy0.odt.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qhi3fuwr1xwjpy0.odt.partially.cryptonar")) returned 1 [0157.302] SetErrorMode (uMode=0x1) returned 0x0 [0157.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\qYqC7m.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qyqc7m.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.303] SetErrorMode (uMode=0x0) returned 0x1 [0157.303] GetFileType (hFile=0x230) returned 0x1 [0157.303] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.303] SetErrorMode (uMode=0x1) returned 0x0 [0157.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\qYqC7m.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qyqc7m.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb691e430, ftCreationTime.dwHighDateTime=0x1d41e6d, ftLastAccessTime.dwLowDateTime=0xaaff8e0, ftLastAccessTime.dwHighDateTime=0x1d41d79, ftLastWriteTime.dwLowDateTime=0x6035a122, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcc8d)) returned 1 [0157.304] SetErrorMode (uMode=0x0) returned 0x1 [0157.304] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\qYqC7m.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qyqc7m.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\qYqC7m.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qyqc7m.avi.partially.cryptonar")) returned 1 [0157.305] SetErrorMode (uMode=0x1) returned 0x0 [0157.305] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qz2l.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qz2l.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.306] SetErrorMode (uMode=0x0) returned 0x1 [0157.306] GetFileType (hFile=0x230) returned 0x1 [0157.306] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.306] SetErrorMode (uMode=0x1) returned 0x0 [0157.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qz2l.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qz2l.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb94d5e0, ftCreationTime.dwHighDateTime=0x1d412fe, ftLastAccessTime.dwLowDateTime=0xa0795710, ftLastAccessTime.dwHighDateTime=0x1d41692, ftLastWriteTime.dwLowDateTime=0x6035a122, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xae35)) returned 1 [0157.306] SetErrorMode (uMode=0x0) returned 0x1 [0157.306] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qz2l.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qz2l.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Qz2l.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\qz2l.avi.partially.cryptonar")) returned 1 [0157.308] SetErrorMode (uMode=0x1) returned 0x0 [0157.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rKBY.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rkby.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.309] SetErrorMode (uMode=0x0) returned 0x1 [0157.309] GetFileType (hFile=0x230) returned 0x1 [0157.309] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.309] SetErrorMode (uMode=0x1) returned 0x0 [0157.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rKBY.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rkby.mp4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec736ce0, ftCreationTime.dwHighDateTime=0x1d41f71, ftLastAccessTime.dwLowDateTime=0x6c33fc30, ftLastAccessTime.dwHighDateTime=0x1d41791, ftLastWriteTime.dwLowDateTime=0x60380414, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x148ac)) returned 1 [0157.309] SetErrorMode (uMode=0x0) returned 0x1 [0157.309] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rKBY.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rkby.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\rKBY.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\rkby.mp4.partially.cryptonar")) returned 1 [0157.311] SetErrorMode (uMode=0x1) returned 0x0 [0157.311] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Th1Q7MWAWZ6.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\th1q7mwawz6.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.312] SetErrorMode (uMode=0x0) returned 0x1 [0157.312] GetFileType (hFile=0x230) returned 0x1 [0157.312] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.313] SetErrorMode (uMode=0x1) returned 0x0 [0157.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Th1Q7MWAWZ6.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\th1q7mwawz6.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ecfce0, ftCreationTime.dwHighDateTime=0x1d41b3a, ftLastAccessTime.dwLowDateTime=0x81adc2b0, ftLastAccessTime.dwHighDateTime=0x1d41bc6, ftLastWriteTime.dwLowDateTime=0x60380414, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7c95)) returned 1 [0157.313] SetErrorMode (uMode=0x0) returned 0x1 [0157.313] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Th1Q7MWAWZ6.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\th1q7mwawz6.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Th1Q7MWAWZ6.xlsx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\th1q7mwawz6.xlsx.partially.cryptonar")) returned 1 [0157.314] SetErrorMode (uMode=0x1) returned 0x0 [0157.314] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\UdgBL5V6J53yOzXvr.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\udgbl5v6j53yozxvr.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.315] SetErrorMode (uMode=0x0) returned 0x1 [0157.315] GetFileType (hFile=0x230) returned 0x1 [0157.316] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.316] SetErrorMode (uMode=0x1) returned 0x0 [0157.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\UdgBL5V6J53yOzXvr.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\udgbl5v6j53yozxvr.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47227df0, ftCreationTime.dwHighDateTime=0x1d41083, ftLastAccessTime.dwLowDateTime=0x445f3180, ftLastAccessTime.dwHighDateTime=0x1d41a42, ftLastWriteTime.dwLowDateTime=0x60380414, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc340)) returned 1 [0157.316] SetErrorMode (uMode=0x0) returned 0x1 [0157.316] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\UdgBL5V6J53yOzXvr.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\udgbl5v6j53yozxvr.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\UdgBL5V6J53yOzXvr.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\udgbl5v6j53yozxvr.jpg.partially.cryptonar")) returned 1 [0157.317] SetErrorMode (uMode=0x1) returned 0x0 [0157.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VLnb5RhR.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vlnb5rhr.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.319] SetErrorMode (uMode=0x0) returned 0x1 [0157.319] GetFileType (hFile=0x230) returned 0x1 [0157.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.319] SetErrorMode (uMode=0x1) returned 0x0 [0157.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VLnb5RhR.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vlnb5rhr.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7394db0, ftCreationTime.dwHighDateTime=0x1d41838, ftLastAccessTime.dwLowDateTime=0x24967b10, ftLastAccessTime.dwHighDateTime=0x1d41065, ftLastWriteTime.dwLowDateTime=0x60380414, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc96e)) returned 1 [0157.319] SetErrorMode (uMode=0x0) returned 0x1 [0157.319] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VLnb5RhR.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vlnb5rhr.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VLnb5RhR.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vlnb5rhr.m4a.partially.cryptonar")) returned 1 [0157.321] SetErrorMode (uMode=0x1) returned 0x0 [0157.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VO NMR.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vo nmr.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.322] SetErrorMode (uMode=0x0) returned 0x1 [0157.322] GetFileType (hFile=0x230) returned 0x1 [0157.322] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.323] SetErrorMode (uMode=0x1) returned 0x0 [0157.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VO NMR.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vo nmr.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1263b030, ftCreationTime.dwHighDateTime=0x1d417cb, ftLastAccessTime.dwLowDateTime=0xbb313c90, ftLastAccessTime.dwHighDateTime=0x1d41aa1, ftLastWriteTime.dwLowDateTime=0x60380414, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6938)) returned 1 [0157.323] SetErrorMode (uMode=0x0) returned 0x1 [0157.323] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VO NMR.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vo nmr.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VO NMR.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vo nmr.wav.partially.cryptonar")) returned 1 [0157.325] SetErrorMode (uMode=0x1) returned 0x0 [0157.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VUUqnZ.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vuuqnz.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.326] SetErrorMode (uMode=0x0) returned 0x1 [0157.326] GetFileType (hFile=0x230) returned 0x1 [0157.326] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.327] SetErrorMode (uMode=0x1) returned 0x0 [0157.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VUUqnZ.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vuuqnz.pps"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64bf9fd0, ftCreationTime.dwHighDateTime=0x1d41323, ftLastAccessTime.dwLowDateTime=0x66b401d0, ftLastAccessTime.dwHighDateTime=0x1d411db, ftLastWriteTime.dwLowDateTime=0x603a6674, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13161)) returned 1 [0157.327] SetErrorMode (uMode=0x0) returned 0x1 [0157.327] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VUUqnZ.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vuuqnz.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\VUUqnZ.pps.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\vuuqnz.pps.partially.cryptonar")) returned 1 [0157.330] SetErrorMode (uMode=0x1) returned 0x0 [0157.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WQZuHa.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wqzuha.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.332] SetErrorMode (uMode=0x0) returned 0x1 [0157.332] GetFileType (hFile=0x230) returned 0x1 [0157.332] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.332] SetErrorMode (uMode=0x1) returned 0x0 [0157.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WQZuHa.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wqzuha.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x304d0ca0, ftCreationTime.dwHighDateTime=0x1d419c3, ftLastAccessTime.dwLowDateTime=0x4ecdee30, ftLastAccessTime.dwHighDateTime=0x1d41af7, ftLastWriteTime.dwLowDateTime=0x603a6674, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1057d)) returned 1 [0157.333] SetErrorMode (uMode=0x0) returned 0x1 [0157.333] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WQZuHa.png" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wqzuha.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\WQZuHa.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\wqzuha.png.partially.cryptonar")) returned 1 [0157.335] SetErrorMode (uMode=0x1) returned 0x0 [0157.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\XLYlap2Dbpap.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xlylap2dbpap.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.336] SetErrorMode (uMode=0x0) returned 0x1 [0157.336] GetFileType (hFile=0x230) returned 0x1 [0157.336] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.337] SetErrorMode (uMode=0x1) returned 0x0 [0157.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\XLYlap2Dbpap.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xlylap2dbpap.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fd0020, ftCreationTime.dwHighDateTime=0x1d416ba, ftLastAccessTime.dwLowDateTime=0x9311f7f0, ftLastAccessTime.dwHighDateTime=0x1d411b8, ftLastWriteTime.dwLowDateTime=0x603a6674, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x166da)) returned 1 [0157.337] SetErrorMode (uMode=0x0) returned 0x1 [0157.337] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\XLYlap2Dbpap.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xlylap2dbpap.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\XLYlap2Dbpap.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\xlylap2dbpap.jpg.partially.cryptonar")) returned 1 [0157.339] SetErrorMode (uMode=0x1) returned 0x0 [0157.339] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Y5Ykf.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y5ykf.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.344] SetErrorMode (uMode=0x0) returned 0x1 [0157.344] GetFileType (hFile=0x230) returned 0x1 [0157.344] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.344] SetErrorMode (uMode=0x1) returned 0x0 [0157.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Y5Ykf.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y5ykf.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9623d630, ftCreationTime.dwHighDateTime=0x1d41dc9, ftLastAccessTime.dwLowDateTime=0x9c8d8820, ftLastAccessTime.dwHighDateTime=0x1d41c8b, ftLastWriteTime.dwLowDateTime=0x603d5473, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a78)) returned 1 [0157.345] SetErrorMode (uMode=0x0) returned 0x1 [0157.345] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Y5Ykf.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y5ykf.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Y5Ykf.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\y5ykf.bmp.partially.cryptonar")) returned 1 [0157.347] SetErrorMode (uMode=0x1) returned 0x0 [0157.347] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YG_YRqoE-u_0eUY.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yg_yrqoe-u_0euy.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.348] SetErrorMode (uMode=0x0) returned 0x1 [0157.348] GetFileType (hFile=0x230) returned 0x1 [0157.348] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.349] SetErrorMode (uMode=0x1) returned 0x0 [0157.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YG_YRqoE-u_0eUY.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yg_yrqoe-u_0euy.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fc84610, ftCreationTime.dwHighDateTime=0x1d410df, ftLastAccessTime.dwLowDateTime=0x3a393670, ftLastAccessTime.dwHighDateTime=0x1d41c26, ftLastWriteTime.dwLowDateTime=0x603d5473, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4caf)) returned 1 [0157.349] SetErrorMode (uMode=0x0) returned 0x1 [0157.349] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YG_YRqoE-u_0eUY.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yg_yrqoe-u_0euy.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\YG_YRqoE-u_0eUY.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\yg_yrqoe-u_0euy.mp3.partially.cryptonar")) returned 1 [0157.352] SetErrorMode (uMode=0x1) returned 0x0 [0157.352] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Zlh4AJ61o.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zlh4aj61o.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.353] SetErrorMode (uMode=0x0) returned 0x1 [0157.353] GetFileType (hFile=0x230) returned 0x1 [0157.353] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.354] SetErrorMode (uMode=0x1) returned 0x0 [0157.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Zlh4AJ61o.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zlh4aj61o.odt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63b5a620, ftCreationTime.dwHighDateTime=0x1d41521, ftLastAccessTime.dwLowDateTime=0xa00b5900, ftLastAccessTime.dwHighDateTime=0x1d418c1, ftLastWriteTime.dwLowDateTime=0x603d5473, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12537)) returned 1 [0157.354] SetErrorMode (uMode=0x0) returned 0x1 [0157.354] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Zlh4AJ61o.odt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zlh4aj61o.odt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Zlh4AJ61o.odt.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zlh4aj61o.odt.partially.cryptonar")) returned 1 [0157.357] SetErrorMode (uMode=0x1) returned 0x0 [0157.357] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zp0W913DhcsoPHdg.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zp0w913dhcsophdg.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.358] SetErrorMode (uMode=0x0) returned 0x1 [0157.358] GetFileType (hFile=0x230) returned 0x1 [0157.358] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.359] SetErrorMode (uMode=0x1) returned 0x0 [0157.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zp0W913DhcsoPHdg.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zp0w913dhcsophdg.odp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a4f0500, ftCreationTime.dwHighDateTime=0x1d41064, ftLastAccessTime.dwLowDateTime=0x7ee1eaf0, ftLastAccessTime.dwHighDateTime=0x1d41be6, ftLastWriteTime.dwLowDateTime=0x603f3829, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10cbf)) returned 1 [0157.359] SetErrorMode (uMode=0x0) returned 0x1 [0157.359] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zp0W913DhcsoPHdg.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zp0w913dhcsophdg.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\zp0W913DhcsoPHdg.odp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\zp0w913dhcsophdg.odp.partially.cryptonar")) returned 1 [0157.360] SetErrorMode (uMode=0x1) returned 0x0 [0157.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.362] SetErrorMode (uMode=0x0) returned 0x1 [0157.362] GetFileType (hFile=0x230) returned 0x1 [0157.362] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.364] SetErrorMode (uMode=0x1) returned 0x0 [0157.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ed44b1d, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x6ed44b1d, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x603f3829, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16)) returned 1 [0157.364] SetErrorMode (uMode=0x0) returned 0x1 [0157.364] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata.partially.cryptonar")) returned 1 [0157.365] SetErrorMode (uMode=0x1) returned 0x0 [0157.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.366] SetErrorMode (uMode=0x0) returned 0x1 [0157.366] GetFileType (hFile=0x230) returned 0x1 [0157.366] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.367] SetErrorMode (uMode=0x1) returned 0x0 [0157.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb35ef7f, ftCreationTime.dwHighDateTime=0x1d336e1, ftLastAccessTime.dwLowDateTime=0x1edad023, ftLastAccessTime.dwHighDateTime=0x1d35db9, ftLastWriteTime.dwLowDateTime=0x603f3829, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0157.368] SetErrorMode (uMode=0x0) returned 0x1 [0157.368] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings.partially.cryptonar")) returned 1 [0157.369] SetErrorMode (uMode=0x1) returned 0x0 [0157.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.370] SetErrorMode (uMode=0x0) returned 0x1 [0157.370] GetFileType (hFile=0x230) returned 0x1 [0157.370] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.373] SetErrorMode (uMode=0x1) returned 0x0 [0157.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88be8b8f, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x88be8b8f, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x60418d9b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2a8f)) returned 1 [0157.373] SetErrorMode (uMode=0x0) returned 0x1 [0157.373] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata.partially.cryptonar")) returned 1 [0157.374] SetErrorMode (uMode=0x1) returned 0x0 [0157.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.376] SetErrorMode (uMode=0x0) returned 0x1 [0157.376] GetFileType (hFile=0x230) returned 0x1 [0157.376] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.389] SetErrorMode (uMode=0x1) returned 0x0 [0157.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x888a1791, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x888a1791, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x6043f09d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x27d)) returned 1 [0157.389] SetErrorMode (uMode=0x0) returned 0x1 [0157.389] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\0fded5ceb68c302b1cdb2bddd9d0000e76539cb0.crl.partially.cryptonar")) returned 1 [0157.391] SetErrorMode (uMode=0x1) returned 0x0 [0157.391] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.392] SetErrorMode (uMode=0x0) returned 0x1 [0157.392] GetFileType (hFile=0x230) returned 0x1 [0157.392] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.393] SetErrorMode (uMode=0x1) returned 0x0 [0157.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8887b565, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x8887b565, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x6043f09d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1a9)) returned 1 [0157.393] SetErrorMode (uMode=0x0) returned 0x1 [0157.393] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\ce338828149963dcea4cd26bb86f0363b4ca0ba5.crl.partially.cryptonar")) returned 1 [0157.394] SetErrorMode (uMode=0x1) returned 0x0 [0157.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.395] SetErrorMode (uMode=0x0) returned 0x1 [0157.395] GetFileType (hFile=0x230) returned 0x1 [0157.395] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.396] SetErrorMode (uMode=0x1) returned 0x0 [0157.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x951d0a94, ftCreationTime.dwHighDateTime=0x1d2fc22, ftLastAccessTime.dwLowDateTime=0x951d0a94, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x265e6afb, ftLastWriteTime.dwHighDateTime=0x1d2fc23, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.396] SetErrorMode (uMode=0x0) returned 0x1 [0157.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory.partially.cryptonar")) returned 1 [0157.397] SetErrorMode (uMode=0x1) returned 0x0 [0157.397] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.398] SetErrorMode (uMode=0x0) returned 0x1 [0157.398] GetFileType (hFile=0x230) returned 0x1 [0157.398] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.410] SetErrorMode (uMode=0x1) returned 0x0 [0157.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81fcf4d7, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x81fcf4d7, ftLastAccessTime.dwHighDateTime=0x1d2d43b, ftLastWriteTime.dwLowDateTime=0x60465177, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0157.411] SetErrorMode (uMode=0x0) returned 0x1 [0157.411] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg.partially.cryptonar")) returned 1 [0157.412] SetErrorMode (uMode=0x1) returned 0x0 [0157.412] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.414] SetErrorMode (uMode=0x0) returned 0x1 [0157.414] GetFileType (hFile=0x230) returned 0x1 [0157.414] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.415] SetErrorMode (uMode=0x1) returned 0x0 [0157.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703eb0e4, ftCreationTime.dwHighDateTime=0x1d2d43f, ftLastAccessTime.dwLowDateTime=0x703eb0e4, ftLastAccessTime.dwHighDateTime=0x1d2d43f, ftLastWriteTime.dwLowDateTime=0x60465177, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4949)) returned 1 [0157.416] SetErrorMode (uMode=0x0) returned 0x1 [0157.416] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml.partially.cryptonar")) returned 1 [0157.417] SetErrorMode (uMode=0x1) returned 0x0 [0157.417] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.421] SetErrorMode (uMode=0x0) returned 0x1 [0157.421] GetFileType (hFile=0x230) returned 0x1 [0157.421] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.422] SetErrorMode (uMode=0x1) returned 0x0 [0157.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37494b33, ftCreationTime.dwHighDateTime=0x1d2d43b, ftLastAccessTime.dwLowDateTime=0x95410d73, ftLastAccessTime.dwHighDateTime=0x1d2fc22, ftLastWriteTime.dwLowDateTime=0x60491696, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1fa)) returned 1 [0157.423] SetErrorMode (uMode=0x0) returned 0x1 [0157.423] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.partially.cryptonar")) returned 1 [0157.425] SetErrorMode (uMode=0x1) returned 0x0 [0157.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.426] SetErrorMode (uMode=0x0) returned 0x1 [0157.426] GetFileType (hFile=0x230) returned 0x1 [0157.426] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.440] SetErrorMode (uMode=0x1) returned 0x0 [0157.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x122f1cc8, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x122f1cc8, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x604b504c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x31000)) returned 1 [0157.440] SetErrorMode (uMode=0x0) returned 0x1 [0157.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\accesscache.accdb.partially.cryptonar")) returned 1 [0157.442] SetErrorMode (uMode=0x1) returned 0x0 [0157.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.444] SetErrorMode (uMode=0x0) returned 0x1 [0157.444] GetFileType (hFile=0x230) returned 0x1 [0157.444] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.509] SetErrorMode (uMode=0x1) returned 0x0 [0157.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1127d24b, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x1127d24b, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x6054a09a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f000)) returned 1 [0157.510] SetErrorMode (uMode=0x0) returned 0x1 [0157.510] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Access\\System.mdw.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\access\\system.mdw.partially.cryptonar")) returned 1 [0157.511] SetErrorMode (uMode=0x1) returned 0x0 [0157.511] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.514] SetErrorMode (uMode=0x0) returned 0x1 [0157.514] GetFileType (hFile=0x230) returned 0x1 [0157.514] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0157.990] SetErrorMode (uMode=0x1) returned 0x0 [0157.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a969e8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49a969e8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x609e8687, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51722)) returned 1 [0157.990] SetErrorMode (uMode=0x0) returned 0x1 [0157.990] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl.partially.cryptonar")) returned 1 [0157.991] SetErrorMode (uMode=0x1) returned 0x0 [0157.992] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0157.993] SetErrorMode (uMode=0x0) returned 0x1 [0157.993] GetFileType (hFile=0x230) returned 0x1 [0157.993] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.016] SetErrorMode (uMode=0x1) returned 0x0 [0158.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ae2e90, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49ae2e90, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x60a34dcf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x48839)) returned 1 [0158.017] SetErrorMode (uMode=0x0) returned 0x1 [0158.017] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl.partially.cryptonar")) returned 1 [0158.021] SetErrorMode (uMode=0x1) returned 0x0 [0158.021] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.024] SetErrorMode (uMode=0x0) returned 0x1 [0158.024] GetFileType (hFile=0x230) returned 0x1 [0158.024] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.438] SetErrorMode (uMode=0x1) returned 0x0 [0158.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b7b6e8, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49b7b6e8, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x60e3aeff, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4197e)) returned 1 [0158.439] SetErrorMode (uMode=0x0) returned 0x1 [0158.439] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl.partially.cryptonar")) returned 1 [0158.441] SetErrorMode (uMode=0x1) returned 0x0 [0158.442] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.443] SetErrorMode (uMode=0x0) returned 0x1 [0158.443] GetFileType (hFile=0x230) returned 0x1 [0158.443] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.477] SetErrorMode (uMode=0x1) returned 0x0 [0158.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ba18f1, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49ba18f1, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x60e8721e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e966)) returned 1 [0158.477] SetErrorMode (uMode=0x0) returned 0x1 [0158.477] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl.partially.cryptonar")) returned 1 [0158.480] SetErrorMode (uMode=0x1) returned 0x0 [0158.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.482] SetErrorMode (uMode=0x0) returned 0x1 [0158.482] GetFileType (hFile=0x230) returned 0x1 [0158.482] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.485] SetErrorMode (uMode=0x1) returned 0x0 [0158.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bc7b75, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49bc7b75, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x60eaeea9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d639)) returned 1 [0158.486] SetErrorMode (uMode=0x0) returned 0x1 [0158.486] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl.partially.cryptonar")) returned 1 [0158.488] SetErrorMode (uMode=0x1) returned 0x0 [0158.488] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.490] SetErrorMode (uMode=0x0) returned 0x1 [0158.490] GetFileType (hFile=0x230) returned 0x1 [0158.490] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.510] SetErrorMode (uMode=0x1) returned 0x0 [0158.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bc7b75, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49bc7b75, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x60ed3698, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45882)) returned 1 [0158.511] SetErrorMode (uMode=0x0) returned 0x1 [0158.511] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl.partially.cryptonar")) returned 1 [0158.515] SetErrorMode (uMode=0x1) returned 0x0 [0158.515] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.516] SetErrorMode (uMode=0x0) returned 0x1 [0158.516] GetFileType (hFile=0x230) returned 0x1 [0158.517] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.540] SetErrorMode (uMode=0x1) returned 0x0 [0158.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c14180, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c14180, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x60f1fe03, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d)) returned 1 [0158.540] SetErrorMode (uMode=0x0) returned 0x1 [0158.540] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl.partially.cryptonar")) returned 1 [0158.542] SetErrorMode (uMode=0x1) returned 0x0 [0158.542] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.544] SetErrorMode (uMode=0x0) returned 0x1 [0158.544] GetFileType (hFile=0x230) returned 0x1 [0158.544] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.591] SetErrorMode (uMode=0x1) returned 0x0 [0158.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c3a302, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c3a302, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x60fb838f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42132)) returned 1 [0158.592] SetErrorMode (uMode=0x0) returned 0x1 [0158.592] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl.partially.cryptonar")) returned 1 [0158.594] SetErrorMode (uMode=0x1) returned 0x0 [0158.594] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.595] SetErrorMode (uMode=0x0) returned 0x1 [0158.595] GetFileType (hFile=0x230) returned 0x1 [0158.595] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.668] SetErrorMode (uMode=0x1) returned 0x0 [0158.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c3a302, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c3a302, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x61050e02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x351ea)) returned 1 [0158.671] SetErrorMode (uMode=0x0) returned 0x1 [0158.671] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl.partially.cryptonar")) returned 1 [0158.673] SetErrorMode (uMode=0x1) returned 0x0 [0158.673] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.674] SetErrorMode (uMode=0x0) returned 0x1 [0158.674] GetFileType (hFile=0x230) returned 0x1 [0158.674] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.735] SetErrorMode (uMode=0x1) returned 0x0 [0158.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c8680e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c8680e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6110fa3d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3)) returned 1 [0158.735] SetErrorMode (uMode=0x0) returned 0x1 [0158.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl.partially.cryptonar")) returned 1 [0158.739] SetErrorMode (uMode=0x1) returned 0x0 [0158.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.740] SetErrorMode (uMode=0x0) returned 0x1 [0158.741] GetFileType (hFile=0x230) returned 0x1 [0158.741] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.754] SetErrorMode (uMode=0x1) returned 0x0 [0158.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49c8680e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49c8680e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x61135c97, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8)) returned 1 [0158.755] SetErrorMode (uMode=0x0) returned 0x1 [0158.755] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl.partially.cryptonar")) returned 1 [0158.757] SetErrorMode (uMode=0x1) returned 0x0 [0158.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.758] SetErrorMode (uMode=0x0) returned 0x1 [0158.758] GetFileType (hFile=0x230) returned 0x1 [0158.758] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.784] SetErrorMode (uMode=0x1) returned 0x0 [0158.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49cac9a0, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x49cac9a0, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x611864a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x54256)) returned 1 [0158.784] SetErrorMode (uMode=0x0) returned 0x1 [0158.784] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl.partially.cryptonar")) returned 1 [0158.786] SetErrorMode (uMode=0x1) returned 0x0 [0158.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.789] SetErrorMode (uMode=0x0) returned 0x1 [0158.789] GetFileType (hFile=0x230) returned 0x1 [0158.789] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.790] SetErrorMode (uMode=0x1) returned 0x0 [0158.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1facf153, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x1facf153, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x611864a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x35)) returned 1 [0158.791] SetErrorMode (uMode=0x0) returned 0x1 [0158.791] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\46a78fa46b43fb180b4fa21773f8ff3e_427a1946-e0ff-4097-8c9e-ca2c1e22780b.partially.cryptonar")) returned 1 [0158.792] SetErrorMode (uMode=0x1) returned 0x0 [0158.792] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.794] SetErrorMode (uMode=0x0) returned 0x1 [0158.794] GetFileType (hFile=0x230) returned 0x1 [0158.794] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.795] SetErrorMode (uMode=0x1) returned 0x0 [0158.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xd1af789b, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0xd1af789b, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x611a98fc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2d)) returned 1 [0158.795] SetErrorMode (uMode=0x0) returned 0x1 [0158.796] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1462094071-1423818996-289466292-1000\\83aa4cc77f591dfc2374580bbd95f6ba_427a1946-e0ff-4097-8c9e-ca2c1e22780b.partially.cryptonar")) returned 1 [0158.797] SetErrorMode (uMode=0x1) returned 0x0 [0158.797] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.799] SetErrorMode (uMode=0x0) returned 0x1 [0158.799] GetFileType (hFile=0x230) returned 0x1 [0158.799] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.835] SetErrorMode (uMode=0x1) returned 0x0 [0158.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bbe1a32, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4bbe1a32, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x611f4811, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7)) returned 1 [0158.835] SetErrorMode (uMode=0x0) returned 0x1 [0158.835] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx.partially.cryptonar")) returned 1 [0158.837] SetErrorMode (uMode=0x1) returned 0x0 [0158.837] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.838] SetErrorMode (uMode=0x0) returned 0x1 [0158.838] GetFileType (hFile=0x230) returned 0x1 [0158.838] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.839] SetErrorMode (uMode=0x1) returned 0x0 [0158.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x611f4811, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x94)) returned 1 [0158.839] SetErrorMode (uMode=0x0) returned 0x1 [0158.842] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.partially.cryptonar")) returned 1 [0158.843] SetErrorMode (uMode=0x1) returned 0x0 [0158.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.845] SetErrorMode (uMode=0x0) returned 0x1 [0158.845] GetFileType (hFile=0x230) returned 0x1 [0158.845] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.865] SetErrorMode (uMode=0x1) returned 0x0 [0158.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee453d1, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x6ee453d1, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x61240c6a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1 [0158.866] SetErrorMode (uMode=0x0) returned 0x1 [0158.866] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk.partially.cryptonar")) returned 1 [0158.868] SetErrorMode (uMode=0x1) returned 0x0 [0158.868] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.869] SetErrorMode (uMode=0x0) returned 0x1 [0158.869] GetFileType (hFile=0x230) returned 0x1 [0158.869] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.897] SetErrorMode (uMode=0x1) returned 0x0 [0158.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c1e44, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x24c1e44, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x6128d190, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4f9)) returned 1 [0158.897] SetErrorMode (uMode=0x0) returned 0x1 [0158.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Microsoft Outlook.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\microsoft outlook.lnk.partially.cryptonar")) returned 1 [0158.902] SetErrorMode (uMode=0x1) returned 0x0 [0158.902] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.904] SetErrorMode (uMode=0x0) returned 0x1 [0158.904] GetFileType (hFile=0x230) returned 0x1 [0158.904] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.905] SetErrorMode (uMode=0x1) returned 0x0 [0158.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x612b596e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0158.905] SetErrorMode (uMode=0x0) returned 0x1 [0158.905] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.partially.cryptonar")) returned 1 [0158.908] SetErrorMode (uMode=0x1) returned 0x0 [0158.908] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.910] SetErrorMode (uMode=0x0) returned 0x1 [0158.910] GetFileType (hFile=0x230) returned 0x1 [0158.910] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.911] SetErrorMode (uMode=0x1) returned 0x0 [0158.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8456400, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa8456400, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x612b596e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1 [0158.912] SetErrorMode (uMode=0x0) returned 0x1 [0158.912] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.partially.cryptonar")) returned 1 [0158.914] SetErrorMode (uMode=0x1) returned 0x0 [0158.914] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.915] SetErrorMode (uMode=0x0) returned 0x1 [0158.916] GetFileType (hFile=0x230) returned 0x1 [0158.916] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.917] SetErrorMode (uMode=0x1) returned 0x0 [0158.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc0dd18e7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0dd18e7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x612b596e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x53)) returned 1 [0158.917] SetErrorMode (uMode=0x0) returned 0x1 [0158.917] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini.partially.cryptonar")) returned 1 [0158.919] SetErrorMode (uMode=0x1) returned 0x0 [0158.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\excel 2016.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.921] SetErrorMode (uMode=0x0) returned 0x1 [0158.921] GetFileType (hFile=0x230) returned 0x1 [0158.921] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.922] SetErrorMode (uMode=0x1) returned 0x0 [0158.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\excel 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa36d3429, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa36d3429, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x612db25d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x973)) returned 1 [0158.922] SetErrorMode (uMode=0x0) returned 0x1 [0158.922] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\excel 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\excel 2016.lnk.partially.cryptonar")) returned 1 [0158.923] SetErrorMode (uMode=0x1) returned 0x0 [0158.923] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.925] SetErrorMode (uMode=0x0) returned 0x1 [0158.925] GetFileType (hFile=0x230) returned 0x1 [0158.925] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.926] SetErrorMode (uMode=0x1) returned 0x0 [0158.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0dd18e7, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xc0dd18e7, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x612db25d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x197)) returned 1 [0158.926] SetErrorMode (uMode=0x0) returned 0x1 [0158.926] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\File Explorer.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\file explorer.lnk.partially.cryptonar")) returned 1 [0158.929] SetErrorMode (uMode=0x1) returned 0x0 [0158.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.930] SetErrorMode (uMode=0x0) returned 0x1 [0158.930] GetFileType (hFile=0x230) returned 0x1 [0158.930] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.931] SetErrorMode (uMode=0x1) returned 0x0 [0158.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21682a12, ftCreationTime.dwHighDateTime=0x1d2d433, ftLastAccessTime.dwLowDateTime=0x21682a12, ftLastAccessTime.dwHighDateTime=0x1d2d433, ftLastWriteTime.dwLowDateTime=0x612db25d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0158.931] SetErrorMode (uMode=0x0) returned 0x1 [0158.932] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk.partially.cryptonar")) returned 1 [0158.933] SetErrorMode (uMode=0x1) returned 0x0 [0158.934] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\onenote 2016.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.936] SetErrorMode (uMode=0x0) returned 0x1 [0158.936] GetFileType (hFile=0x230) returned 0x1 [0158.936] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.937] SetErrorMode (uMode=0x1) returned 0x0 [0158.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\onenote 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3df9dfb, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa3df9dfb, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x612ff8b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x95f)) returned 1 [0158.938] SetErrorMode (uMode=0x0) returned 0x1 [0158.938] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\onenote 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\OneNote 2016.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\onenote 2016.lnk.partially.cryptonar")) returned 1 [0158.941] SetErrorMode (uMode=0x1) returned 0x0 [0158.941] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\outlook 2016.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.942] SetErrorMode (uMode=0x0) returned 0x1 [0158.942] GetFileType (hFile=0x230) returned 0x1 [0158.942] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.944] SetErrorMode (uMode=0x1) returned 0x0 [0158.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\outlook 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41ffc39, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa41ffc39, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x612ff8b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x96d)) returned 1 [0158.944] SetErrorMode (uMode=0x0) returned 0x1 [0158.944] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\outlook 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Outlook 2016.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\outlook 2016.lnk.partially.cryptonar")) returned 1 [0158.947] SetErrorMode (uMode=0x1) returned 0x0 [0158.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\powerpoint 2016.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.948] SetErrorMode (uMode=0x0) returned 0x1 [0158.948] GetFileType (hFile=0x230) returned 0x1 [0158.948] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.950] SetErrorMode (uMode=0x1) returned 0x0 [0158.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\powerpoint 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa45df874, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa45df874, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x612ff8b8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x998)) returned 1 [0158.951] SetErrorMode (uMode=0x0) returned 0x1 [0158.951] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\powerpoint 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\PowerPoint 2016.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\powerpoint 2016.lnk.partially.cryptonar")) returned 1 [0158.954] SetErrorMode (uMode=0x1) returned 0x0 [0158.954] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\project 2016.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.956] SetErrorMode (uMode=0x0) returned 0x1 [0158.956] GetFileType (hFile=0x230) returned 0x1 [0158.956] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.961] SetErrorMode (uMode=0x1) returned 0x0 [0158.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\project 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c19d55, ftCreationTime.dwHighDateTime=0x1d301ca, ftLastAccessTime.dwLowDateTime=0x68c19d55, ftLastAccessTime.dwHighDateTime=0x1d301ca, ftLastWriteTime.dwLowDateTime=0x61325bd3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x87e)) returned 1 [0158.962] SetErrorMode (uMode=0x0) returned 0x1 [0158.962] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\project 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Project 2016.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\project 2016.lnk.partially.cryptonar")) returned 1 [0158.965] SetErrorMode (uMode=0x1) returned 0x0 [0158.965] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\visio 2016.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.967] SetErrorMode (uMode=0x0) returned 0x1 [0158.967] GetFileType (hFile=0x230) returned 0x1 [0158.967] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.969] SetErrorMode (uMode=0x1) returned 0x0 [0158.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\visio 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5418d56, ftCreationTime.dwHighDateTime=0x1d301d1, ftLastAccessTime.dwLowDateTime=0xf5418d56, ftLastAccessTime.dwHighDateTime=0x1d301d1, ftLastWriteTime.dwLowDateTime=0x6134f249, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x86e)) returned 1 [0158.969] SetErrorMode (uMode=0x0) returned 0x1 [0158.969] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\visio 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Visio 2016.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\visio 2016.lnk.partially.cryptonar")) returned 1 [0158.972] SetErrorMode (uMode=0x1) returned 0x0 [0158.972] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\word 2016.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.974] SetErrorMode (uMode=0x0) returned 0x1 [0158.974] GetFileType (hFile=0x230) returned 0x1 [0158.974] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.977] SetErrorMode (uMode=0x1) returned 0x0 [0158.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\word 2016.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa49e56c0, ftCreationTime.dwHighDateTime=0x1d301c6, ftLastAccessTime.dwLowDateTime=0xa49e56c0, ftLastAccessTime.dwHighDateTime=0x1d301c6, ftLastWriteTime.dwLowDateTime=0x6134f249, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x999)) returned 1 [0158.977] SetErrorMode (uMode=0x0) returned 0x1 [0158.977] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\word 2016.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Word 2016.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\word 2016.lnk.partially.cryptonar")) returned 1 [0158.979] SetErrorMode (uMode=0x1) returned 0x0 [0158.980] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.983] SetErrorMode (uMode=0x0) returned 0x1 [0158.983] GetFileType (hFile=0x230) returned 0x1 [0158.983] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.993] SetErrorMode (uMode=0x1) returned 0x0 [0158.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0e5a771, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0xa0e5a771, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x61374002, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x136e00)) returned 1 [0158.994] SetErrorMode (uMode=0x0) returned 0x1 [0158.994] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt.partially.cryptonar")) returned 1 [0158.995] SetErrorMode (uMode=0x1) returned 0x0 [0158.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0158.998] SetErrorMode (uMode=0x0) returned 0x1 [0158.998] GetFileType (hFile=0x230) returned 0x1 [0158.998] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0158.998] SetErrorMode (uMode=0x1) returned 0x0 [0158.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5654163b, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5654163b, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5654163b, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0158.998] SetErrorMode (uMode=0x0) returned 0x1 [0158.998] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk.partially.cryptonar")) returned 1 [0159.000] SetErrorMode (uMode=0x1) returned 0x0 [0159.000] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.001] SetErrorMode (uMode=0x0) returned 0x1 [0159.001] GetFileType (hFile=0x230) returned 0x1 [0159.001] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.003] SetErrorMode (uMode=0x1) returned 0x0 [0159.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2c8a2d, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x4a2c8a2d, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6139810b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9362)) returned 1 [0159.004] SetErrorMode (uMode=0x0) returned 0x1 [0159.004] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\mso1033.acl.partially.cryptonar")) returned 1 [0159.005] SetErrorMode (uMode=0x1) returned 0x0 [0159.005] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.008] SetErrorMode (uMode=0x0) returned 0x1 [0159.008] GetFileType (hFile=0x230) returned 0x1 [0159.008] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.009] SetErrorMode (uMode=0x1) returned 0x0 [0159.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e86a4be, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x1e86a4be, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x6139810b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45b)) returned 1 [0159.010] SetErrorMode (uMode=0x0) returned 0x1 [0159.010] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Database1.LNK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\database1.lnk.partially.cryptonar")) returned 1 [0159.011] SetErrorMode (uMode=0x1) returned 0x0 [0159.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.013] SetErrorMode (uMode=0x0) returned 0x1 [0159.013] GetFileType (hFile=0x230) returned 0x1 [0159.013] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.031] SetErrorMode (uMode=0x1) returned 0x0 [0159.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11a4c7c4, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x11a4c7c4, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x613ea6e4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3bf)) returned 1 [0159.032] SetErrorMode (uMode=0x0) returned 0x1 [0159.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Documents.LNK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\documents.lnk.partially.cryptonar")) returned 1 [0159.034] SetErrorMode (uMode=0x1) returned 0x0 [0159.034] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.035] SetErrorMode (uMode=0x0) returned 0x1 [0159.035] GetFileType (hFile=0x230) returned 0x1 [0159.035] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.052] SetErrorMode (uMode=0x1) returned 0x0 [0159.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa11c0f4e, ftCreationTime.dwHighDateTime=0x1d301cf, ftLastAccessTime.dwLowDateTime=0xa11c0f4e, ftLastAccessTime.dwHighDateTime=0x1d301cf, ftLastWriteTime.dwLowDateTime=0x6140a91e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0159.052] SetErrorMode (uMode=0x0) returned 0x1 [0159.052] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk.partially.cryptonar")) returned 1 [0159.054] SetErrorMode (uMode=0x1) returned 0x0 [0159.054] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.055] SetErrorMode (uMode=0x0) returned 0x1 [0159.055] GetFileType (hFile=0x230) returned 0x1 [0159.055] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.056] SetErrorMode (uMode=0x1) returned 0x0 [0159.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x55120d2b, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x55120d2b, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6140a91e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0159.057] SetErrorMode (uMode=0x0) returned 0x1 [0159.057] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\index.dat.partially.cryptonar")) returned 1 [0159.058] SetErrorMode (uMode=0x1) returned 0x0 [0159.058] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.084] SetErrorMode (uMode=0x0) returned 0x1 [0159.084] GetFileType (hFile=0x230) returned 0x1 [0159.084] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.108] SetErrorMode (uMode=0x1) returned 0x0 [0159.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x550d49e5, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x550d49e5, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x614a3287, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4a7)) returned 1 [0159.108] SetErrorMode (uMode=0x0) returned 0x1 [0159.108] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk.partially.cryptonar")) returned 1 [0159.110] SetErrorMode (uMode=0x1) returned 0x0 [0159.110] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.111] SetErrorMode (uMode=0x0) returned 0x1 [0159.111] GetFileType (hFile=0x230) returned 0x1 [0159.111] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.113] SetErrorMode (uMode=0x1) returned 0x0 [0159.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea45990, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6ea45990, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x614a3287, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1440)) returned 1 [0159.114] SetErrorMode (uMode=0x0) returned 0x1 [0159.114] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\Preferences.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\onenote\\16.0\\preferences.dat.partially.cryptonar")) returned 1 [0159.116] SetErrorMode (uMode=0x1) returned 0x0 [0159.116] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.117] SetErrorMode (uMode=0x0) returned 0x1 [0159.118] GetFileType (hFile=0x230) returned 0x1 [0159.118] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.136] SetErrorMode (uMode=0x1) returned 0x0 [0159.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2b717, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0x9d2b717, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x614de08b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0159.137] SetErrorMode (uMode=0x0) returned 0x1 [0159.137] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.srs.partially.cryptonar")) returned 1 [0159.139] SetErrorMode (uMode=0x1) returned 0x0 [0159.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.141] SetErrorMode (uMode=0x0) returned 0x1 [0159.141] GetFileType (hFile=0x230) returned 0x1 [0159.142] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.147] SetErrorMode (uMode=0x1) returned 0x0 [0159.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3d64df, ftCreationTime.dwHighDateTime=0x1d2fc25, ftLastAccessTime.dwLowDateTime=0xa3d64df, ftLastAccessTime.dwHighDateTime=0x1d2fc25, ftLastWriteTime.dwLowDateTime=0x614f52e9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x956)) returned 1 [0159.148] SetErrorMode (uMode=0x0) returned 0x1 [0159.148] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.partially.cryptonar")) returned 1 [0159.150] SetErrorMode (uMode=0x1) returned 0x0 [0159.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.151] SetErrorMode (uMode=0x0) returned 0x1 [0159.151] GetFileType (hFile=0x230) returned 0x1 [0159.151] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.152] SetErrorMode (uMode=0x1) returned 0x0 [0159.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d162d0, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d162d0, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x614f52e9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c8)) returned 1 [0159.168] SetErrorMode (uMode=0x0) returned 0x1 [0159.168] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\credhist.partially.cryptonar")) returned 1 [0159.170] SetErrorMode (uMode=0x1) returned 0x0 [0159.170] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.172] SetErrorMode (uMode=0x0) returned 0x1 [0159.172] GetFileType (hFile=0x230) returned 0x1 [0159.173] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.174] SetErrorMode (uMode=0x1) returned 0x0 [0159.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb4886a98, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xb4886a98, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6153bf20, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4c)) returned 1 [0159.174] SetErrorMode (uMode=0x0) returned 0x1 [0159.174] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\synchist.partially.cryptonar")) returned 1 [0159.178] SetErrorMode (uMode=0x1) returned 0x0 [0159.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.180] SetErrorMode (uMode=0x0) returned 0x1 [0159.180] GetFileType (hFile=0x230) returned 0x1 [0159.180] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.181] SetErrorMode (uMode=0x1) returned 0x0 [0159.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xfa839987, ftCreationTime.dwHighDateTime=0x1d41fbe, ftLastAccessTime.dwLowDateTime=0xfa839987, ftLastAccessTime.dwHighDateTime=0x1d41fbe, ftLastWriteTime.dwLowDateTime=0x6153bf20, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0159.181] SetErrorMode (uMode=0x0) returned 0x1 [0159.181] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\04cd465a-248d-4abd-853a-5cb67fe43510.partially.cryptonar")) returned 1 [0159.184] SetErrorMode (uMode=0x1) returned 0x0 [0159.207] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.209] SetErrorMode (uMode=0x0) returned 0x1 [0159.210] GetFileType (hFile=0x230) returned 0x1 [0159.210] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.211] SetErrorMode (uMode=0x1) returned 0x0 [0159.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe089c000, ftCreationTime.dwHighDateTime=0x1d38bec, ftLastAccessTime.dwLowDateTime=0xe089c000, ftLastAccessTime.dwHighDateTime=0x1d38bec, ftLastWriteTime.dwLowDateTime=0x6158827f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0159.211] SetErrorMode (uMode=0x0) returned 0x1 [0159.212] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\496f2c5b-a90f-4380-b805-3bf6ac63451b.partially.cryptonar")) returned 1 [0159.215] SetErrorMode (uMode=0x1) returned 0x0 [0159.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.217] SetErrorMode (uMode=0x0) returned 0x1 [0159.217] GetFileType (hFile=0x230) returned 0x1 [0159.217] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.218] SetErrorMode (uMode=0x1) returned 0x0 [0159.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d3c51f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d3c51f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x615ae101, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0159.218] SetErrorMode (uMode=0x0) returned 0x1 [0159.219] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\5b8a3202-35dc-4437-b5d7-374f5e872415.partially.cryptonar")) returned 1 [0159.221] SetErrorMode (uMode=0x1) returned 0x0 [0159.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.223] SetErrorMode (uMode=0x0) returned 0x1 [0159.223] GetFileType (hFile=0x230) returned 0x1 [0159.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.224] SetErrorMode (uMode=0x1) returned 0x0 [0159.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc095c422, ftCreationTime.dwHighDateTime=0x1d3368c, ftLastAccessTime.dwLowDateTime=0xc095c422, ftLastAccessTime.dwHighDateTime=0x1d3368c, ftLastWriteTime.dwLowDateTime=0x615ae101, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0159.224] SetErrorMode (uMode=0x0) returned 0x1 [0159.224] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\d7746ecf-458e-4e71-8557-8ac80457022a.partially.cryptonar")) returned 1 [0159.226] SetErrorMode (uMode=0x1) returned 0x0 [0159.226] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.245] SetErrorMode (uMode=0x0) returned 0x1 [0159.245] GetFileType (hFile=0x230) returned 0x1 [0159.245] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.246] SetErrorMode (uMode=0x1) returned 0x0 [0159.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa9d3c51f, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xa9d3c51f, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x615d449c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0159.246] SetErrorMode (uMode=0x0) returned 0x1 [0159.246] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1462094071-1423818996-289466292-1000\\Preferred.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1462094071-1423818996-289466292-1000\\preferred.partially.cryptonar")) returned 1 [0159.248] SetErrorMode (uMode=0x1) returned 0x0 [0159.248] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.249] SetErrorMode (uMode=0x0) returned 0x1 [0159.249] GetFileType (hFile=0x230) returned 0x1 [0159.249] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.250] SetErrorMode (uMode=0x1) returned 0x0 [0159.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c1242fa, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x7c1242fa, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x615fa60f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0159.250] SetErrorMode (uMode=0x0) returned 0x1 [0159.250] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.partially.cryptonar")) returned 1 [0159.251] SetErrorMode (uMode=0x1) returned 0x0 [0159.252] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.253] SetErrorMode (uMode=0x0) returned 0x1 [0159.253] GetFileType (hFile=0x230) returned 0x1 [0159.253] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.253] SetErrorMode (uMode=0x1) returned 0x0 [0159.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5de40e52, ftCreationTime.dwHighDateTime=0x1d2d026, ftLastAccessTime.dwLowDateTime=0x5de40e52, ftLastAccessTime.dwHighDateTime=0x1d2d026, ftLastWriteTime.dwLowDateTime=0x5de40e52, ftLastWriteTime.dwHighDateTime=0x1d2d026, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.253] SetErrorMode (uMode=0x0) returned 0x1 [0159.253] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread.partially.cryptonar")) returned 1 [0159.255] SetErrorMode (uMode=0x1) returned 0x0 [0159.255] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.256] SetErrorMode (uMode=0x0) returned 0x1 [0159.256] GetFileType (hFile=0x230) returned 0x1 [0159.256] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.304] SetErrorMode (uMode=0x1) returned 0x0 [0159.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a04365, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87a04365, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x6166cd8c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdf362)) returned 1 [0159.305] SetErrorMode (uMode=0x0) returned 0x1 [0159.305] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Calendar insights.xltm.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\calendar insights.xltm.partially.cryptonar")) returned 1 [0159.306] SetErrorMode (uMode=0x1) returned 0x0 [0159.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.307] SetErrorMode (uMode=0x0) returned 0x1 [0159.307] GetFileType (hFile=0x230) returned 0x1 [0159.307] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.348] SetErrorMode (uMode=0x1) returned 0x0 [0159.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b2d852, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87b2d852, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x616df5be, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5cc66)) returned 1 [0159.348] SetErrorMode (uMode=0x0) returned 0x1 [0159.348] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm.partially.cryptonar")) returned 1 [0159.350] SetErrorMode (uMode=0x1) returned 0x0 [0159.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.352] SetErrorMode (uMode=0x0) returned 0x1 [0159.352] GetFileType (hFile=0x230) returned 0x1 [0159.352] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.497] SetErrorMode (uMode=0x1) returned 0x0 [0159.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88523410, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x88523410, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x6185cba1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb431d)) returned 1 [0159.497] SetErrorMode (uMode=0x0) returned 0x1 [0159.497] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Email Insights.xltm.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\email insights.xltm.partially.cryptonar")) returned 1 [0159.500] SetErrorMode (uMode=0x1) returned 0x0 [0159.500] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.501] SetErrorMode (uMode=0x0) returned 0x1 [0159.501] GetFileType (hFile=0x230) returned 0x1 [0159.501] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.548] SetErrorMode (uMode=0x1) returned 0x0 [0159.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551935ba, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0xaf33b0f8, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x618cf418, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49a5)) returned 1 [0159.548] SetErrorMode (uMode=0x0) returned 0x1 [0159.549] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\normal.dotm.partially.cryptonar")) returned 1 [0159.550] SetErrorMode (uMode=0x1) returned 0x0 [0159.551] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.552] SetErrorMode (uMode=0x0) returned 0x1 [0159.552] GetFileType (hFile=0x230) returned 0x1 [0159.552] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.556] SetErrorMode (uMode=0x1) returned 0x0 [0159.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87f14aba, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87f14aba, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x618cf418, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ad7d)) returned 1 [0159.556] SetErrorMode (uMode=0x0) returned 0x1 [0159.557] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Basic Flowchart.xltx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for basic flowchart.xltx.partially.cryptonar")) returned 1 [0159.559] SetErrorMode (uMode=0x1) returned 0x0 [0159.559] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.560] SetErrorMode (uMode=0x0) returned 0x1 [0159.560] GetFileType (hFile=0x230) returned 0x1 [0159.561] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.582] SetErrorMode (uMode=0x1) returned 0x0 [0159.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87950be8, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87950be8, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x6191c3c9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2355e)) returned 1 [0159.582] SetErrorMode (uMode=0x0) returned 0x1 [0159.582] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Process Map for Cross-Functional Flowchart.xltx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\process map for cross-functional flowchart.xltx.partially.cryptonar")) returned 1 [0159.584] SetErrorMode (uMode=0x1) returned 0x0 [0159.584] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.585] SetErrorMode (uMode=0x0) returned 0x1 [0159.586] GetFileType (hFile=0x230) returned 0x1 [0159.586] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.630] SetErrorMode (uMode=0x1) returned 0x0 [0159.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87b075f3, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x87b075f3, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x6198dfa5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16438a)) returned 1 [0159.630] SetErrorMode (uMode=0x0) returned 0x1 [0159.630] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Stock symbols comparison.xltm.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\stock symbols comparison.xltm.partially.cryptonar")) returned 1 [0159.632] SetErrorMode (uMode=0x1) returned 0x0 [0159.632] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.634] SetErrorMode (uMode=0x0) returned 0x1 [0159.634] GetFileType (hFile=0x230) returned 0x1 [0159.634] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.714] SetErrorMode (uMode=0x1) returned 0x0 [0159.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884450c3, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x884450c3, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x61a4cb1e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x78c9b)) returned 1 [0159.715] SetErrorMode (uMode=0x0) returned 0x1 [0159.715] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx.partially.cryptonar")) returned 1 [0159.717] SetErrorMode (uMode=0x1) returned 0x0 [0159.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.720] SetErrorMode (uMode=0x0) returned 0x1 [0159.720] GetFileType (hFile=0x230) returned 0x1 [0159.720] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.735] SetErrorMode (uMode=0x1) returned 0x0 [0159.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f502714, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f502714, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x61a99076, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x893c1)) returned 1 [0159.735] SetErrorMode (uMode=0x0) returned 0x1 [0159.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090430[[fn=banded]].thmx.partially.cryptonar")) returned 1 [0159.738] SetErrorMode (uMode=0x1) returned 0x0 [0159.738] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.739] SetErrorMode (uMode=0x0) returned 0x1 [0159.739] GetFileType (hFile=0x230) returned 0x1 [0159.739] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.779] SetErrorMode (uMode=0x1) returned 0x0 [0159.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f67fe68, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f67fe68, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x61b0b7c3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x192bb1)) returned 1 [0159.780] SetErrorMode (uMode=0x0) returned 0x1 [0159.780] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03090434[[fn=wood type]].thmx.partially.cryptonar")) returned 1 [0159.782] SetErrorMode (uMode=0x1) returned 0x0 [0159.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.783] SetErrorMode (uMode=0x0) returned 0x1 [0159.784] GetFileType (hFile=0x230) returned 0x1 [0159.784] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.826] SetErrorMode (uMode=0x1) returned 0x0 [0159.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f60d73b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f60d73b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x61b7e122, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x883d3)) returned 1 [0159.826] SetErrorMode (uMode=0x0) returned 0x1 [0159.826] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457444[[fn=basis]].thmx.partially.cryptonar")) returned 1 [0159.828] SetErrorMode (uMode=0x1) returned 0x0 [0159.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.830] SetErrorMode (uMode=0x0) returned 0x1 [0159.830] GetFileType (hFile=0x230) returned 0x1 [0159.830] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0159.911] SetErrorMode (uMode=0x1) returned 0x0 [0159.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fdf3153, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fdf3153, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x61c3ca5f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8b615)) returned 1 [0159.911] SetErrorMode (uMode=0x0) returned 0x1 [0159.911] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457464[[fn=Dividend]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457464[[fn=dividend]].thmx.partially.cryptonar")) returned 1 [0159.915] SetErrorMode (uMode=0x1) returned 0x0 [0159.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0159.916] SetErrorMode (uMode=0x0) returned 0x1 [0159.916] GetFileType (hFile=0x230) returned 0x1 [0159.916] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0160.057] SetErrorMode (uMode=0x1) returned 0x0 [0160.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fc296fa, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fc296fa, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x61d9c641, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7fb28)) returned 1 [0160.057] SetErrorMode (uMode=0x0) returned 0x1 [0160.057] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457475[[fn=Frame]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457475[[fn=frame]].thmx.partially.cryptonar")) returned 1 [0160.059] SetErrorMode (uMode=0x1) returned 0x0 [0160.059] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0160.073] SetErrorMode (uMode=0x0) returned 0x1 [0160.073] GetFileType (hFile=0x230) returned 0x1 [0160.073] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0160.109] SetErrorMode (uMode=0x1) returned 0x0 [0160.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71dbeda4, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71dbeda4, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x61e0ec1b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ef7a4)) returned 1 [0160.109] SetErrorMode (uMode=0x0) returned 0x1 [0160.109] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457485[[fn=mesh]].thmx.partially.cryptonar")) returned 1 [0160.111] SetErrorMode (uMode=0x1) returned 0x0 [0160.111] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0160.113] SetErrorMode (uMode=0x0) returned 0x1 [0160.113] GetFileType (hFile=0x230) returned 0x1 [0160.114] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0160.133] SetErrorMode (uMode=0x1) returned 0x0 [0160.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709a15b0, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x709a15b0, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x61e5b032, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbddaf)) returned 1 [0160.133] SetErrorMode (uMode=0x0) returned 0x1 [0160.133] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457491[[fn=metropolitan]].thmx.partially.cryptonar")) returned 1 [0160.135] SetErrorMode (uMode=0x1) returned 0x0 [0160.135] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0160.137] SetErrorMode (uMode=0x0) returned 0x1 [0160.137] GetFileType (hFile=0x230) returned 0x1 [0160.137] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0160.465] SetErrorMode (uMode=0x1) returned 0x0 [0160.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd34607, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6fd34607, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6217cf51, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe1c0f)) returned 1 [0160.465] SetErrorMode (uMode=0x0) returned 0x1 [0160.465] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457496[[fn=parallax]].thmx.partially.cryptonar")) returned 1 [0160.467] SetErrorMode (uMode=0x1) returned 0x0 [0160.467] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0160.468] SetErrorMode (uMode=0x0) returned 0x1 [0160.469] GetFileType (hFile=0x230) returned 0x1 [0160.469] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0160.595] SetErrorMode (uMode=0x1) returned 0x0 [0160.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709eda88, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x709eda88, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x622d36c2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xec122)) returned 1 [0160.595] SetErrorMode (uMode=0x0) returned 0x1 [0160.595] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457503[[fn=quotable]].thmx.partially.cryptonar")) returned 1 [0160.597] SetErrorMode (uMode=0x1) returned 0x0 [0160.597] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0160.599] SetErrorMode (uMode=0x0) returned 0x1 [0160.599] GetFileType (hFile=0x230) returned 0x1 [0160.599] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0160.645] SetErrorMode (uMode=0x1) returned 0x0 [0160.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716257e1, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x716257e1, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62345e08, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x125f51)) returned 1 [0160.646] SetErrorMode (uMode=0x0) returned 0x1 [0160.646] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457510[[fn=savon]].thmx.partially.cryptonar")) returned 1 [0160.649] SetErrorMode (uMode=0x1) returned 0x0 [0160.649] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0160.650] SetErrorMode (uMode=0x0) returned 0x1 [0160.650] GetFileType (hFile=0x230) returned 0x1 [0160.650] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0160.739] SetErrorMode (uMode=0x1) returned 0x0 [0160.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70245469, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x70245469, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6242abbd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x76cc4)) returned 1 [0160.739] SetErrorMode (uMode=0x0) returned 0x1 [0160.739] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM03457515[[fn=View]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm03457515[[fn=view]].thmx.partially.cryptonar")) returned 1 [0160.741] SetErrorMode (uMode=0x1) returned 0x0 [0160.741] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0160.743] SetErrorMode (uMode=0x0) returned 0x1 [0160.744] GetFileType (hFile=0x230) returned 0x1 [0160.744] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0160.781] SetErrorMode (uMode=0x1) returned 0x0 [0160.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714359a1, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x714359a1, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6247b000, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xee481)) returned 1 [0160.781] SetErrorMode (uMode=0x0) returned 0x1 [0160.781] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033917[[fn=berlin]].thmx.partially.cryptonar")) returned 1 [0160.783] SetErrorMode (uMode=0x1) returned 0x0 [0160.783] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0160.785] SetErrorMode (uMode=0x0) returned 0x1 [0160.785] GetFileType (hFile=0x230) returned 0x1 [0160.785] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0160.826] SetErrorMode (uMode=0x1) returned 0x0 [0160.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71245bd9, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71245bd9, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x624effce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x165552)) returned 1 [0160.826] SetErrorMode (uMode=0x0) returned 0x1 [0160.826] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033919[[fn=Circuit]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033919[[fn=circuit]].thmx.partially.cryptonar")) returned 1 [0160.828] SetErrorMode (uMode=0x1) returned 0x0 [0160.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0160.830] SetErrorMode (uMode=0x0) returned 0x1 [0160.830] GetFileType (hFile=0x230) returned 0x1 [0160.830] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0160.884] SetErrorMode (uMode=0x1) returned 0x0 [0160.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7132a9aa, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7132a9aa, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x625821b0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x21dbbf)) returned 1 [0160.884] SetErrorMode (uMode=0x0) returned 0x1 [0160.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033921[[fn=damask]].thmx.partially.cryptonar")) returned 1 [0160.886] SetErrorMode (uMode=0x1) returned 0x0 [0160.886] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0160.888] SetErrorMode (uMode=0x0) returned 0x1 [0160.888] GetFileType (hFile=0x230) returned 0x1 [0160.888] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0160.945] SetErrorMode (uMode=0x1) returned 0x0 [0160.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a5188a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71a5188a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6261aa49, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1ab70b)) returned 1 [0160.946] SetErrorMode (uMode=0x0) returned 0x1 [0160.946] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033925[[fn=droplet]].thmx.partially.cryptonar")) returned 1 [0160.949] SetErrorMode (uMode=0x1) returned 0x0 [0160.949] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0160.950] SetErrorMode (uMode=0x0) returned 0x1 [0160.950] GetFileType (hFile=0x230) returned 0x1 [0160.950] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.019] SetErrorMode (uMode=0x1) returned 0x0 [0161.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71aea1ac, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71aea1ac, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x626da756, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c9ecd)) returned 1 [0161.019] SetErrorMode (uMode=0x0) returned 0x1 [0161.019] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033927[[fn=Main Event]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033927[[fn=main event]].thmx.partially.cryptonar")) returned 1 [0161.022] SetErrorMode (uMode=0x1) returned 0x0 [0161.022] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.023] SetErrorMode (uMode=0x0) returned 0x1 [0161.023] GetFileType (hFile=0x230) returned 0x1 [0161.023] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.055] SetErrorMode (uMode=0x1) returned 0x0 [0161.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71bcefed, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71bcefed, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62726a51, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23f73b)) returned 1 [0161.055] SetErrorMode (uMode=0x0) returned 0x1 [0161.055] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033929[[fn=slate]].thmx.partially.cryptonar")) returned 1 [0161.057] SetErrorMode (uMode=0x1) returned 0x0 [0161.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.058] SetErrorMode (uMode=0x0) returned 0x1 [0161.058] GetFileType (hFile=0x230) returned 0x1 [0161.058] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.087] SetErrorMode (uMode=0x1) returned 0x0 [0161.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ea3bd6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x71ea3bd6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x627730ed, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x371abc)) returned 1 [0161.088] SetErrorMode (uMode=0x0) returned 0x1 [0161.088] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM04033937[[fn=Vapor Trail]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm04033937[[fn=vapor trail]].thmx.partially.cryptonar")) returned 1 [0161.090] SetErrorMode (uMode=0x1) returned 0x0 [0161.090] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.091] SetErrorMode (uMode=0x0) returned 0x1 [0161.091] GetFileType (hFile=0x230) returned 0x1 [0161.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.120] SetErrorMode (uMode=0x1) returned 0x0 [0161.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x708e2a5b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x708e2a5b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x627bf40e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x83bd9)) returned 1 [0161.120] SetErrorMode (uMode=0x0) returned 0x1 [0161.120] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001103[[fn=headlines]].thmx.partially.cryptonar")) returned 1 [0161.121] SetErrorMode (uMode=0x1) returned 0x0 [0161.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.123] SetErrorMode (uMode=0x0) returned 0x1 [0161.123] GetFileType (hFile=0x230) returned 0x1 [0161.123] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.151] SetErrorMode (uMode=0x1) returned 0x0 [0161.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7196ca94, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7196ca94, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62822e91, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f53d4)) returned 1 [0161.151] SetErrorMode (uMode=0x0) returned 0x1 [0161.151] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001104[[fn=feathered]].thmx.partially.cryptonar")) returned 1 [0161.153] SetErrorMode (uMode=0x1) returned 0x0 [0161.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.155] SetErrorMode (uMode=0x0) returned 0x1 [0161.155] GetFileType (hFile=0x230) returned 0x1 [0161.155] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.236] SetErrorMode (uMode=0x1) returned 0x0 [0161.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7121f9d6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7121f9d6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x628dde7a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8301c)) returned 1 [0161.236] SetErrorMode (uMode=0x0) returned 0x1 [0161.236] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001105[[fn=Crop]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001105[[fn=crop]].thmx.partially.cryptonar")) returned 1 [0161.237] SetErrorMode (uMode=0x1) returned 0x0 [0161.237] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.239] SetErrorMode (uMode=0x0) returned 0x1 [0161.239] GetFileType (hFile=0x230) returned 0x1 [0161.239] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.297] SetErrorMode (uMode=0x1) returned 0x0 [0161.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ce8916, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x70ce8916, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x629766f2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa2181)) returned 1 [0161.298] SetErrorMode (uMode=0x0) returned 0x1 [0161.298] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001106[[fn=badge]].thmx.partially.cryptonar")) returned 1 [0161.299] SetErrorMode (uMode=0x1) returned 0x0 [0161.299] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.300] SetErrorMode (uMode=0x0) returned 0x1 [0161.300] GetFileType (hFile=0x230) returned 0x1 [0161.300] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.385] SetErrorMode (uMode=0x1) returned 0x0 [0161.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x714f456a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x714f456a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62a5b5b7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10a79d)) returned 1 [0161.385] SetErrorMode (uMode=0x0) returned 0x1 [0161.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001114[[fn=Gallery]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001114[[fn=gallery]].thmx.partially.cryptonar")) returned 1 [0161.387] SetErrorMode (uMode=0x1) returned 0x0 [0161.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.390] SetErrorMode (uMode=0x0) returned 0x1 [0161.390] GetFileType (hFile=0x230) returned 0x1 [0161.390] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.470] SetErrorMode (uMode=0x1) returned 0x0 [0161.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7073f0cf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x7073f0cf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62b1a1e8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9477a)) returned 1 [0161.470] SetErrorMode (uMode=0x0) returned 0x1 [0161.471] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\TM10001115[[fn=Parcel]].thmx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\tm10001115[[fn=parcel]].thmx.partially.cryptonar")) returned 1 [0161.472] SetErrorMode (uMode=0x1) returned 0x0 [0161.472] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.475] SetErrorMode (uMode=0x0) returned 0x1 [0161.475] GetFileType (hFile=0x230) returned 0x1 [0161.475] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.478] SetErrorMode (uMode=0x1) returned 0x0 [0161.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f574db6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f574db6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62b40284, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1697)) returned 1 [0161.478] SetErrorMode (uMode=0x0) returned 0x1 [0161.478] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328884[[fn=architecture]].glox.partially.cryptonar")) returned 1 [0161.480] SetErrorMode (uMode=0x1) returned 0x0 [0161.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.482] SetErrorMode (uMode=0x0) returned 0x1 [0161.482] GetFileType (hFile=0x230) returned 0x1 [0161.482] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.484] SetErrorMode (uMode=0x1) returned 0x0 [0161.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f71875a, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f71875a, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62b40284, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfba)) returned 1 [0161.485] SetErrorMode (uMode=0x0) returned 0x1 [0161.485] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328893[[fn=bracketlist]].glox.partially.cryptonar")) returned 1 [0161.487] SetErrorMode (uMode=0x1) returned 0x0 [0161.487] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.489] SetErrorMode (uMode=0x0) returned 0x1 [0161.489] GetFileType (hFile=0x230) returned 0x1 [0161.489] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.529] SetErrorMode (uMode=0x1) returned 0x0 [0161.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7b1098, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f7b1098, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62bb2af4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1093)) returned 1 [0161.530] SetErrorMode (uMode=0x0) returned 0x1 [0161.530] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328905[[fn=chevron accent]].glox.partially.cryptonar")) returned 1 [0161.532] SetErrorMode (uMode=0x1) returned 0x0 [0161.532] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.534] SetErrorMode (uMode=0x0) returned 0x1 [0161.534] GetFileType (hFile=0x230) returned 0x1 [0161.534] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.554] SetErrorMode (uMode=0x1) returned 0x0 [0161.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6faabeaf, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6faabeaf, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62bd8cf3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x41a6)) returned 1 [0161.555] SetErrorMode (uMode=0x0) returned 0x1 [0161.555] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328908[[fn=circle process]].glox.partially.cryptonar")) returned 1 [0161.557] SetErrorMode (uMode=0x1) returned 0x0 [0161.558] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.560] SetErrorMode (uMode=0x0) returned 0x1 [0161.560] GetFileType (hFile=0x230) returned 0x1 [0161.560] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.562] SetErrorMode (uMode=0x1) returned 0x0 [0161.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f54eba8, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f54eba8, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62bfef8e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c74)) returned 1 [0161.562] SetErrorMode (uMode=0x0) returned 0x1 [0161.563] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328916[[fn=converging text]].glox.partially.cryptonar")) returned 1 [0161.564] SetErrorMode (uMode=0x1) returned 0x0 [0161.565] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.566] SetErrorMode (uMode=0x0) returned 0x1 [0161.566] GetFileType (hFile=0x230) returned 0x1 [0161.566] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.588] SetErrorMode (uMode=0x1) returned 0x0 [0161.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4dc4d0, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f4dc4d0, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62c4b45b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1788)) returned 1 [0161.588] SetErrorMode (uMode=0x0) returned 0x1 [0161.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328919[[fn=hexagon radial]].glox.partially.cryptonar")) returned 1 [0161.590] SetErrorMode (uMode=0x1) returned 0x0 [0161.590] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.592] SetErrorMode (uMode=0x0) returned 0x1 [0161.593] GetFileType (hFile=0x230) returned 0x1 [0161.593] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.615] WriteFile (in: hFile=0x230, lpBuffer=0x26bb768*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x26bb768*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0161.638] SetErrorMode (uMode=0x1) returned 0x0 [0161.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f633982, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f633982, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62cbdad7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x23e7)) returned 1 [0161.639] SetErrorMode (uMode=0x0) returned 0x1 [0161.639] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328925[[fn=interconnected block process]].glox.partially.cryptonar")) returned 1 [0161.641] SetErrorMode (uMode=0x1) returned 0x0 [0161.641] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.642] SetErrorMode (uMode=0x0) returned 0x1 [0161.642] GetFileType (hFile=0x230) returned 0x1 [0161.642] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.644] SetErrorMode (uMode=0x1) returned 0x0 [0161.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6a606e, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f6a606e, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62cbdad7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10e6)) returned 1 [0161.644] SetErrorMode (uMode=0x0) returned 0x1 [0161.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328932[[fn=picture frame]].glox.partially.cryptonar")) returned 1 [0161.646] SetErrorMode (uMode=0x1) returned 0x0 [0161.646] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.649] SetErrorMode (uMode=0x0) returned 0x1 [0161.649] GetFileType (hFile=0x230) returned 0x1 [0161.649] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.682] SetErrorMode (uMode=0x1) returned 0x0 [0161.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f7fd57b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f7fd57b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62d30167, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1cca)) returned 1 [0161.683] SetErrorMode (uMode=0x0) returned 0x1 [0161.683] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328935[[fn=picture organization chart]].glox.partially.cryptonar")) returned 1 [0161.684] SetErrorMode (uMode=0x1) returned 0x0 [0161.684] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.685] SetErrorMode (uMode=0x0) returned 0x1 [0161.686] GetFileType (hFile=0x230) returned 0x1 [0161.686] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.735] SetErrorMode (uMode=0x1) returned 0x0 [0161.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f574db6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f574db6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62da2ad0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15dc)) returned 1 [0161.735] SetErrorMode (uMode=0x0) returned 0x1 [0161.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328940[[fn=radial picture list]].glox.partially.cryptonar")) returned 1 [0161.737] SetErrorMode (uMode=0x1) returned 0x0 [0161.737] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.738] SetErrorMode (uMode=0x0) returned 0x1 [0161.738] GetFileType (hFile=0x230) returned 0x1 [0161.738] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.774] SetErrorMode (uMode=0x1) returned 0x0 [0161.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5e74e6, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f5e74e6, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62e14e89, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0161.775] SetErrorMode (uMode=0x0) returned 0x1 [0161.775] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328951[[fn=tabbed arc]].glox.partially.cryptonar")) returned 1 [0161.776] SetErrorMode (uMode=0x1) returned 0x0 [0161.776] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.777] SetErrorMode (uMode=0x0) returned 0x1 [0161.777] GetFileType (hFile=0x230) returned 0x1 [0161.777] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.804] SetErrorMode (uMode=0x1) returned 0x0 [0161.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9a0e5d, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f9a0e5d, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62e3b331, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1318)) returned 1 [0161.805] SetErrorMode (uMode=0x0) returned 0x1 [0161.805] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328972[[fn=tab list]].glox.partially.cryptonar")) returned 1 [0161.807] SetErrorMode (uMode=0x1) returned 0x0 [0161.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.808] SetErrorMode (uMode=0x0) returned 0x1 [0161.808] GetFileType (hFile=0x230) returned 0x1 [0161.809] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.850] SetErrorMode (uMode=0x1) returned 0x0 [0161.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f764c0f, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f764c0f, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62ead90c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1930)) returned 1 [0161.850] SetErrorMode (uMode=0x0) returned 0x1 [0161.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328975[[fn=theme picture accent]].glox.partially.cryptonar")) returned 1 [0161.852] SetErrorMode (uMode=0x1) returned 0x0 [0161.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.853] SetErrorMode (uMode=0x0) returned 0x1 [0161.853] GetFileType (hFile=0x230) returned 0x1 [0161.853] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.871] SetErrorMode (uMode=0x1) returned 0x0 [0161.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f73e9b4, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f73e9b4, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62ef9dcb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15fe)) returned 1 [0161.871] SetErrorMode (uMode=0x0) returned 0x1 [0161.871] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328983[[fn=theme picture alternating accent]].glox.partially.cryptonar")) returned 1 [0161.873] SetErrorMode (uMode=0x1) returned 0x0 [0161.873] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.874] SetErrorMode (uMode=0x0) returned 0x1 [0161.874] GetFileType (hFile=0x230) returned 0x1 [0161.874] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.917] SetErrorMode (uMode=0x1) returned 0x0 [0161.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6cc2af, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f6cc2af, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62f6c668, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1831)) returned 1 [0161.917] SetErrorMode (uMode=0x0) returned 0x1 [0161.917] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328986[[fn=theme picture grid]].glox.partially.cryptonar")) returned 1 [0161.919] SetErrorMode (uMode=0x1) returned 0x0 [0161.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.921] SetErrorMode (uMode=0x0) returned 0x1 [0161.921] GetFileType (hFile=0x230) returned 0x1 [0161.921] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.922] SetErrorMode (uMode=0x1) returned 0x0 [0161.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f78ae4e, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f78ae4e, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x62f6c668, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc03)) returned 1 [0161.922] SetErrorMode (uMode=0x0) returned 0x1 [0161.923] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328990[[fn=varying width list]].glox.partially.cryptonar")) returned 1 [0161.924] SetErrorMode (uMode=0x1) returned 0x0 [0161.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0161.926] SetErrorMode (uMode=0x0) returned 0x1 [0161.926] GetFileType (hFile=0x230) returned 0x1 [0161.926] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0161.996] SetErrorMode (uMode=0x1) returned 0x0 [0161.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f8e235b, ftCreationTime.dwHighDateTime=0x1d301c4, ftLastAccessTime.dwLowDateTime=0x6f8e235b, ftLastAccessTime.dwHighDateTime=0x1d301c4, ftLastWriteTime.dwLowDateTime=0x6302b059, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x141f)) returned 1 [0161.996] SetErrorMode (uMode=0x0) returned 0x1 [0161.996] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\smartart graphics\\1033\\tm03328998[[fn=rings]].glox.partially.cryptonar")) returned 1 [0161.998] SetErrorMode (uMode=0x1) returned 0x0 [0161.998] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.000] SetErrorMode (uMode=0x0) returned 0x1 [0162.000] GetFileType (hFile=0x230) returned 0x1 [0162.000] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.001] SetErrorMode (uMode=0x1) returned 0x0 [0162.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8893fdb3, ftCreationTime.dwHighDateTime=0x1d2d438, ftLastAccessTime.dwLowDateTime=0x8893fdb3, ftLastAccessTime.dwHighDateTime=0x1d2d438, ftLastWriteTime.dwLowDateTime=0x6302b059, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e)) returned 1 [0162.001] SetErrorMode (uMode=0x0) returned 0x1 [0162.001] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\uproof\\custom.dic.partially.cryptonar")) returned 1 [0162.003] SetErrorMode (uMode=0x1) returned 0x0 [0162.003] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.004] SetErrorMode (uMode=0x0) returned 0x1 [0162.004] GetFileType (hFile=0x230) returned 0x1 [0162.004] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.005] SetErrorMode (uMode=0x1) returned 0x0 [0162.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae1db2e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1db2e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6302b059, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0162.006] SetErrorMode (uMode=0x0) returned 0x1 [0162.006] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\AccountPictures\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\accountpictures\\desktop.ini.partially.cryptonar")) returned 1 [0162.007] SetErrorMode (uMode=0x1) returned 0x0 [0162.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\cameraroll.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.012] SetErrorMode (uMode=0x0) returned 0x1 [0162.012] GetFileType (hFile=0x230) returned 0x1 [0162.013] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.068] SetErrorMode (uMode=0x1) returned 0x0 [0162.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\cameraroll.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bef44d2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bef44d2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x630c3a21, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fa)) returned 1 [0162.068] SetErrorMode (uMode=0x0) returned 0x1 [0162.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\cameraroll.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\CameraRoll.library-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\cameraroll.library-ms.partially.cryptonar")) returned 1 [0162.070] SetErrorMode (uMode=0x1) returned 0x0 [0162.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.075] SetErrorMode (uMode=0x0) returned 0x1 [0162.075] GetFileType (hFile=0x230) returned 0x1 [0162.075] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.076] SetErrorMode (uMode=0x1) returned 0x0 [0162.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae0aa00a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae0aa00a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x630eb7e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0162.076] SetErrorMode (uMode=0x0) returned 0x1 [0162.076] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini.partially.cryptonar")) returned 1 [0162.078] SetErrorMode (uMode=0x1) returned 0x0 [0162.078] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.079] SetErrorMode (uMode=0x0) returned 0x1 [0162.079] GetFileType (hFile=0x230) returned 0x1 [0162.079] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.081] SetErrorMode (uMode=0x1) returned 0x0 [0162.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x630eb7e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b6)) returned 1 [0162.081] SetErrorMode (uMode=0x0) returned 0x1 [0162.081] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms.partially.cryptonar")) returned 1 [0162.082] SetErrorMode (uMode=0x1) returned 0x0 [0162.083] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.084] SetErrorMode (uMode=0x0) returned 0x1 [0162.084] GetFileType (hFile=0x230) returned 0x1 [0162.084] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.085] SetErrorMode (uMode=0x1) returned 0x0 [0162.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae201536, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae201536, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x630eb7e6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a6)) returned 1 [0162.085] SetErrorMode (uMode=0x0) returned 0x1 [0162.085] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms.partially.cryptonar")) returned 1 [0162.089] SetErrorMode (uMode=0x1) returned 0x0 [0162.089] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.090] SetErrorMode (uMode=0x0) returned 0x1 [0162.091] GetFileType (hFile=0x230) returned 0x1 [0162.091] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.093] SetErrorMode (uMode=0x1) returned 0x0 [0162.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae1db2e4, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1db2e4, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x63111c93, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3b2)) returned 1 [0162.094] SetErrorMode (uMode=0x0) returned 0x1 [0162.094] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms.partially.cryptonar")) returned 1 [0162.095] SetErrorMode (uMode=0x1) returned 0x0 [0162.096] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\savedpictures.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.097] SetErrorMode (uMode=0x0) returned 0x1 [0162.097] GetFileType (hFile=0x230) returned 0x1 [0162.097] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.112] SetErrorMode (uMode=0x1) returned 0x0 [0162.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\savedpictures.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf66bb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bf66bb4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x6314d07a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0162.112] SetErrorMode (uMode=0x0) returned 0x1 [0162.112] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\savedpictures.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\SavedPictures.library-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\savedpictures.library-ms.partially.cryptonar")) returned 1 [0162.114] SetErrorMode (uMode=0x1) returned 0x0 [0162.114] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.115] SetErrorMode (uMode=0x0) returned 0x1 [0162.115] GetFileType (hFile=0x230) returned 0x1 [0162.115] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.147] SetErrorMode (uMode=0x1) returned 0x0 [0162.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae0aa00a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae0aa00a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x631825e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ab)) returned 1 [0162.147] SetErrorMode (uMode=0x0) returned 0x1 [0162.147] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms.partially.cryptonar")) returned 1 [0162.150] SetErrorMode (uMode=0x1) returned 0x0 [0162.150] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-7pnQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-7pnq.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.151] SetErrorMode (uMode=0x0) returned 0x1 [0162.151] GetFileType (hFile=0x230) returned 0x1 [0162.151] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.152] SetErrorMode (uMode=0x1) returned 0x0 [0162.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-7pnQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-7pnq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9bc900, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xc9bc900, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x631a8ad3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3de)) returned 1 [0162.152] SetErrorMode (uMode=0x0) returned 0x1 [0162.152] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-7pnQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-7pnq.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-7pnQ.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-7pnq.lnk.partially.cryptonar")) returned 1 [0162.153] SetErrorMode (uMode=0x1) returned 0x0 [0162.154] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-CYZSppLHBvi1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-cyzspplhbvi1.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.155] SetErrorMode (uMode=0x0) returned 0x1 [0162.155] GetFileType (hFile=0x230) returned 0x1 [0162.155] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.155] SetErrorMode (uMode=0x1) returned 0x0 [0162.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-CYZSppLHBvi1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-cyzspplhbvi1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbd2a9b, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcbd2a9b, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x631a8ad3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2a9)) returned 1 [0162.156] SetErrorMode (uMode=0x0) returned 0x1 [0162.156] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-CYZSppLHBvi1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-cyzspplhbvi1.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\-CYZSppLHBvi1.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\-cyzspplhbvi1.lnk.partially.cryptonar")) returned 1 [0162.157] SetErrorMode (uMode=0x1) returned 0x0 [0162.157] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0iiLqHEglCKTzm0ceK7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\0iilqheglcktzm0cek7.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.158] SetErrorMode (uMode=0x0) returned 0x1 [0162.158] GetFileType (hFile=0x230) returned 0x1 [0162.158] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.158] SetErrorMode (uMode=0x1) returned 0x0 [0162.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0iiLqHEglCKTzm0ceK7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\0iilqheglcktzm0cek7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7ba6bb, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe7ba6bb, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x631a8ad3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x503)) returned 1 [0162.158] SetErrorMode (uMode=0x0) returned 0x1 [0162.158] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0iiLqHEglCKTzm0ceK7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\0iilqheglcktzm0cek7.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\0iiLqHEglCKTzm0ceK7.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\0iilqheglcktzm0cek7.lnk.partially.cryptonar")) returned 1 [0162.160] SetErrorMode (uMode=0x1) returned 0x0 [0162.160] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\12LhM9lfVur2Rz5F3AMq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\12lhm9lfvur2rz5f3amq.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.161] SetErrorMode (uMode=0x0) returned 0x1 [0162.161] GetFileType (hFile=0x230) returned 0x1 [0162.161] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.161] SetErrorMode (uMode=0x1) returned 0x0 [0162.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\12LhM9lfVur2Rz5F3AMq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\12lhm9lfvur2rz5f3amq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x113afbfc, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0x113afbfc, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x631a8ad3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x418)) returned 1 [0162.161] SetErrorMode (uMode=0x0) returned 0x1 [0162.161] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\12LhM9lfVur2Rz5F3AMq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\12lhm9lfvur2rz5f3amq.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\12LhM9lfVur2Rz5F3AMq.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\12lhm9lfvur2rz5f3amq.lnk.partially.cryptonar")) returned 1 [0162.162] SetErrorMode (uMode=0x1) returned 0x0 [0162.162] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1f9yYjZl8i_t.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1f9yyjzl8i_t.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.163] SetErrorMode (uMode=0x0) returned 0x1 [0162.163] GetFileType (hFile=0x230) returned 0x1 [0162.163] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.164] SetErrorMode (uMode=0x1) returned 0x0 [0162.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1f9yYjZl8i_t.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1f9yyjzl8i_t.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcca4b0, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdcca4b0, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x631a8ad3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x462)) returned 1 [0162.164] SetErrorMode (uMode=0x0) returned 0x1 [0162.164] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1f9yYjZl8i_t.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1f9yyjzl8i_t.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1f9yYjZl8i_t.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1f9yyjzl8i_t.lnk.partially.cryptonar")) returned 1 [0162.165] SetErrorMode (uMode=0x1) returned 0x0 [0162.165] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iWGUBnx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1iwgubnx.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.166] SetErrorMode (uMode=0x0) returned 0x1 [0162.166] GetFileType (hFile=0x230) returned 0x1 [0162.166] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.167] SetErrorMode (uMode=0x1) returned 0x0 [0162.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iWGUBnx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1iwgubnx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1108e8a6, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0x1108e8a6, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x631cff40, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0162.167] SetErrorMode (uMode=0x0) returned 0x1 [0162.167] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iWGUBnx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1iwgubnx.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1iWGUBnx.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1iwgubnx.lnk.partially.cryptonar")) returned 1 [0162.202] SetErrorMode (uMode=0x1) returned 0x0 [0162.202] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1PT5Gt_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1pt5gt_.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.204] SetErrorMode (uMode=0x0) returned 0x1 [0162.204] GetFileType (hFile=0x230) returned 0x1 [0162.204] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.204] SetErrorMode (uMode=0x1) returned 0x0 [0162.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1PT5Gt_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1pt5gt_.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe663294, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe663294, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6321aec0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x447)) returned 1 [0162.204] SetErrorMode (uMode=0x0) returned 0x1 [0162.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1PT5Gt_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1pt5gt_.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1PT5Gt_.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1pt5gt_.lnk.partially.cryptonar")) returned 1 [0162.206] SetErrorMode (uMode=0x1) returned 0x0 [0162.206] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1_ObPDLrFV.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1_obpdlrfv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.216] SetErrorMode (uMode=0x0) returned 0x1 [0162.216] GetFileType (hFile=0x230) returned 0x1 [0162.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.217] SetErrorMode (uMode=0x1) returned 0x0 [0162.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1_ObPDLrFV.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1_obpdlrfv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c95d1, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd5c95d1, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6324bb1a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3fb)) returned 1 [0162.217] SetErrorMode (uMode=0x0) returned 0x1 [0162.217] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1_ObPDLrFV.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1_obpdlrfv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\1_ObPDLrFV.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\1_obpdlrfv.lnk.partially.cryptonar")) returned 1 [0162.219] SetErrorMode (uMode=0x1) returned 0x0 [0162.219] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\20PYog.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\20pyog.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.220] SetErrorMode (uMode=0x0) returned 0x1 [0162.220] GetFileType (hFile=0x230) returned 0x1 [0162.220] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.221] SetErrorMode (uMode=0x1) returned 0x0 [0162.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\20PYog.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\20pyog.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd50233, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcd50233, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6324bb1a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e5)) returned 1 [0162.221] SetErrorMode (uMode=0x0) returned 0x1 [0162.221] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\20PYog.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\20pyog.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\20PYog.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\20pyog.lnk.partially.cryptonar")) returned 1 [0162.223] SetErrorMode (uMode=0x1) returned 0x0 [0162.223] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\22 nWyn4.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\22 nwyn4.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.224] SetErrorMode (uMode=0x0) returned 0x1 [0162.225] GetFileType (hFile=0x230) returned 0x1 [0162.225] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.225] SetErrorMode (uMode=0x1) returned 0x0 [0162.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\22 nWyn4.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\22 nwyn4.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa1828, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcaa1828, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6324bb1a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5b2)) returned 1 [0162.225] SetErrorMode (uMode=0x0) returned 0x1 [0162.225] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\22 nWyn4.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\22 nwyn4.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\22 nWyn4.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\22 nwyn4.lnk.partially.cryptonar")) returned 1 [0162.228] SetErrorMode (uMode=0x1) returned 0x0 [0162.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2_0Z6VvZcIdo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2_0z6vvzcido.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.229] SetErrorMode (uMode=0x0) returned 0x1 [0162.229] GetFileType (hFile=0x230) returned 0x1 [0162.229] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.230] SetErrorMode (uMode=0x1) returned 0x0 [0162.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2_0Z6VvZcIdo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2_0z6vvzcido.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9165a, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcc9165a, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632682f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x64b)) returned 1 [0162.230] SetErrorMode (uMode=0x0) returned 0x1 [0162.230] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2_0Z6VvZcIdo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2_0z6vvzcido.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\2_0Z6VvZcIdo.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\2_0z6vvzcido.lnk.partially.cryptonar")) returned 1 [0162.231] SetErrorMode (uMode=0x1) returned 0x0 [0162.232] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3OHSMtfV2K0brrEePc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3ohsmtfv2k0brreepc.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.233] SetErrorMode (uMode=0x0) returned 0x1 [0162.233] GetFileType (hFile=0x230) returned 0x1 [0162.233] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.233] SetErrorMode (uMode=0x1) returned 0x0 [0162.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3OHSMtfV2K0brrEePc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3ohsmtfv2k0brreepc.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefec974, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xefec974, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632682f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c2)) returned 1 [0162.234] SetErrorMode (uMode=0x0) returned 0x1 [0162.234] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3OHSMtfV2K0brrEePc.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3ohsmtfv2k0brreepc.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\3OHSMtfV2K0brrEePc.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\3ohsmtfv2k0brreepc.lnk.partially.cryptonar")) returned 1 [0162.235] SetErrorMode (uMode=0x1) returned 0x0 [0162.235] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4va5EExHkN_I.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4va5eexhkn_i.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.237] SetErrorMode (uMode=0x0) returned 0x1 [0162.237] GetFileType (hFile=0x230) returned 0x1 [0162.237] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.237] SetErrorMode (uMode=0x1) returned 0x0 [0162.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4va5EExHkN_I.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4va5eexhkn_i.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef2dd18, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xef2dd18, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632682f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x462)) returned 1 [0162.237] SetErrorMode (uMode=0x0) returned 0x1 [0162.237] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4va5EExHkN_I.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4va5eexhkn_i.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\4va5EExHkN_I.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\4va5eexhkn_i.lnk.partially.cryptonar")) returned 1 [0162.239] SetErrorMode (uMode=0x1) returned 0x0 [0162.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ayJ6y5wXx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ayj6y5wxx.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.240] SetErrorMode (uMode=0x0) returned 0x1 [0162.240] GetFileType (hFile=0x230) returned 0x1 [0162.240] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.241] SetErrorMode (uMode=0x1) returned 0x0 [0162.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ayJ6y5wXx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ayj6y5wxx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1dc827, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xf1dc827, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632682f9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x472)) returned 1 [0162.241] SetErrorMode (uMode=0x0) returned 0x1 [0162.241] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ayJ6y5wXx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ayj6y5wxx.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ayJ6y5wXx.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ayj6y5wxx.lnk.partially.cryptonar")) returned 1 [0162.242] SetErrorMode (uMode=0x1) returned 0x0 [0162.242] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6fKXonmrSJfYl0haRZXk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6fkxonmrsjfyl0harzxk.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.253] SetErrorMode (uMode=0x0) returned 0x1 [0162.254] GetFileType (hFile=0x230) returned 0x1 [0162.254] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.254] SetErrorMode (uMode=0x1) returned 0x0 [0162.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6fKXonmrSJfYl0haRZXk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6fkxonmrsjfyl0harzxk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe5720, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdbe5720, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6328d6b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42d)) returned 1 [0162.254] SetErrorMode (uMode=0x0) returned 0x1 [0162.254] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6fKXonmrSJfYl0haRZXk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6fkxonmrsjfyl0harzxk.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6fKXonmrSJfYl0haRZXk.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6fkxonmrsjfyl0harzxk.lnk.partially.cryptonar")) returned 1 [0162.256] SetErrorMode (uMode=0x1) returned 0x0 [0162.256] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6KilR7k83fOiY028D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6kilr7k83foiy028d.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.257] SetErrorMode (uMode=0x0) returned 0x1 [0162.258] GetFileType (hFile=0x230) returned 0x1 [0162.258] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.258] SetErrorMode (uMode=0x1) returned 0x0 [0162.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6KilR7k83fOiY028D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6kilr7k83foiy028d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd52b839, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd52b839, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6328d6b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5df)) returned 1 [0162.259] SetErrorMode (uMode=0x0) returned 0x1 [0162.259] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6KilR7k83fOiY028D.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6kilr7k83foiy028d.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6KilR7k83fOiY028D.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6kilr7k83foiy028d.lnk.partially.cryptonar")) returned 1 [0162.260] SetErrorMode (uMode=0x1) returned 0x0 [0162.261] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MVvgZZoA7wPduFZnGM.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6mvvgzzoa7wpdufzngm.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.262] SetErrorMode (uMode=0x0) returned 0x1 [0162.262] GetFileType (hFile=0x230) returned 0x1 [0162.262] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.262] SetErrorMode (uMode=0x1) returned 0x0 [0162.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MVvgZZoA7wPduFZnGM.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6mvvgzzoa7wpdufzngm.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6fa935, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd6fa935, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632b392a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5fa)) returned 1 [0162.262] SetErrorMode (uMode=0x0) returned 0x1 [0162.263] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MVvgZZoA7wPduFZnGM.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6mvvgzzoa7wpdufzngm.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6MVvgZZoA7wPduFZnGM.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6mvvgzzoa7wpdufzngm.lnk.partially.cryptonar")) returned 1 [0162.264] SetErrorMode (uMode=0x1) returned 0x0 [0162.264] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ocyH.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ocyh.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.266] SetErrorMode (uMode=0x0) returned 0x1 [0162.266] GetFileType (hFile=0x230) returned 0x1 [0162.266] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.266] SetErrorMode (uMode=0x1) returned 0x0 [0162.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ocyH.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ocyh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44d078, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe44d078, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632b392a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6c7)) returned 1 [0162.266] SetErrorMode (uMode=0x0) returned 0x1 [0162.266] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ocyH.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ocyh.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6ocyH.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6ocyh.lnk.partially.cryptonar")) returned 1 [0162.268] SetErrorMode (uMode=0x1) returned 0x0 [0162.268] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6zUVGIcDZ13t9GN evjM.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6zuvgicdz13t9gn evjm.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.269] SetErrorMode (uMode=0x0) returned 0x1 [0162.269] GetFileType (hFile=0x230) returned 0x1 [0162.269] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.270] SetErrorMode (uMode=0x1) returned 0x0 [0162.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6zUVGIcDZ13t9GN evjM.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6zuvgicdz13t9gn evjm.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1133d3e3, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0x1133d3e3, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632b392a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x508)) returned 1 [0162.270] SetErrorMode (uMode=0x0) returned 0x1 [0162.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6zUVGIcDZ13t9GN evjM.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6zuvgicdz13t9gn evjm.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6zUVGIcDZ13t9GN evjM.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6zuvgicdz13t9gn evjm.lnk.partially.cryptonar")) returned 1 [0162.271] SetErrorMode (uMode=0x1) returned 0x0 [0162.272] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6_XH4ToeI1FwhP.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6_xh4toei1fwhp.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.273] SetErrorMode (uMode=0x0) returned 0x1 [0162.273] GetFileType (hFile=0x230) returned 0x1 [0162.273] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.273] SetErrorMode (uMode=0x1) returned 0x0 [0162.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6_XH4ToeI1FwhP.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6_xh4toei1fwhp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda1c6a1, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xda1c6a1, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632b392a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ea)) returned 1 [0162.273] SetErrorMode (uMode=0x0) returned 0x1 [0162.273] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6_XH4ToeI1FwhP.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6_xh4toei1fwhp.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\6_XH4ToeI1FwhP.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\6_xh4toei1fwhp.lnk.partially.cryptonar")) returned 1 [0162.276] SetErrorMode (uMode=0x1) returned 0x0 [0162.276] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8 KXcnGJcSvEgcZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8 kxcngjcsvegcz.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.277] SetErrorMode (uMode=0x0) returned 0x1 [0162.277] GetFileType (hFile=0x230) returned 0x1 [0162.277] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.278] SetErrorMode (uMode=0x1) returned 0x0 [0162.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8 KXcnGJcSvEgcZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8 kxcngjcsvegcz.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce36194, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xce36194, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632dbf9f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x622)) returned 1 [0162.278] SetErrorMode (uMode=0x0) returned 0x1 [0162.278] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8 KXcnGJcSvEgcZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8 kxcngjcsvegcz.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8 KXcnGJcSvEgcZ.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8 kxcngjcsvegcz.lnk.partially.cryptonar")) returned 1 [0162.280] SetErrorMode (uMode=0x1) returned 0x0 [0162.280] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\82Mg hn3.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\82mg hn3.flv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.281] SetErrorMode (uMode=0x0) returned 0x1 [0162.281] GetFileType (hFile=0x230) returned 0x1 [0162.281] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.281] SetErrorMode (uMode=0x1) returned 0x0 [0162.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\82Mg hn3.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\82mg hn3.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed64014, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xed64014, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632dbf9f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x348)) returned 1 [0162.282] SetErrorMode (uMode=0x0) returned 0x1 [0162.282] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\82Mg hn3.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\82mg hn3.flv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\82Mg hn3.flv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\82mg hn3.flv.lnk.partially.cryptonar")) returned 1 [0162.283] SetErrorMode (uMode=0x1) returned 0x0 [0162.283] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gavnkPI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8gavnkpi.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.284] SetErrorMode (uMode=0x0) returned 0x1 [0162.284] GetFileType (hFile=0x230) returned 0x1 [0162.284] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.285] SetErrorMode (uMode=0x1) returned 0x0 [0162.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gavnkPI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8gavnkpi.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd9c73c, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcd9c73c, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632dbf9f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f1)) returned 1 [0162.285] SetErrorMode (uMode=0x0) returned 0x1 [0162.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gavnkPI.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8gavnkpi.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8gavnkPI.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8gavnkpi.lnk.partially.cryptonar")) returned 1 [0162.286] SetErrorMode (uMode=0x1) returned 0x0 [0162.286] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lhILUuMMTbQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8lhiluummtbq.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.287] SetErrorMode (uMode=0x0) returned 0x1 [0162.288] GetFileType (hFile=0x230) returned 0x1 [0162.288] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.288] SetErrorMode (uMode=0x1) returned 0x0 [0162.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lhILUuMMTbQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8lhiluummtbq.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb72f2d, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdb72f2d, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632dbf9f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2a4)) returned 1 [0162.288] SetErrorMode (uMode=0x0) returned 0x1 [0162.288] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lhILUuMMTbQ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8lhiluummtbq.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lhILUuMMTbQ.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8lhiluummtbq.lnk.partially.cryptonar")) returned 1 [0162.290] SetErrorMode (uMode=0x1) returned 0x0 [0162.290] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lju5Wh6aFA6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8lju5wh6afa6.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.292] SetErrorMode (uMode=0x0) returned 0x1 [0162.292] GetFileType (hFile=0x230) returned 0x1 [0162.292] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.292] SetErrorMode (uMode=0x1) returned 0x0 [0162.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lju5Wh6aFA6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8lju5wh6afa6.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1daff9, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe4732f6, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632fff66, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x583)) returned 1 [0162.292] SetErrorMode (uMode=0x0) returned 0x1 [0162.292] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lju5Wh6aFA6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8lju5wh6afa6.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8lju5Wh6aFA6.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8lju5wh6afa6.lnk.partially.cryptonar")) returned 1 [0162.294] SetErrorMode (uMode=0x1) returned 0x0 [0162.294] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8xCw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8xcw.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.295] SetErrorMode (uMode=0x0) returned 0x1 [0162.295] GetFileType (hFile=0x230) returned 0x1 [0162.295] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.295] SetErrorMode (uMode=0x1) returned 0x0 [0162.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8xCw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8xcw.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4e5afc, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe4e5afc, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632fff66, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0162.295] SetErrorMode (uMode=0x0) returned 0x1 [0162.296] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8xCw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8xcw.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\8xCw.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\8xcw.lnk.partially.cryptonar")) returned 1 [0162.302] SetErrorMode (uMode=0x1) returned 0x0 [0162.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\91UOplkyngUDTldme.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\91uoplkyngudtldme.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.303] SetErrorMode (uMode=0x0) returned 0x1 [0162.303] GetFileType (hFile=0x230) returned 0x1 [0162.304] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.304] SetErrorMode (uMode=0x1) returned 0x0 [0162.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\91UOplkyngUDTldme.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\91uoplkyngudtldme.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2493ed, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xf78615f, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x632fff66, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f8)) returned 1 [0162.304] SetErrorMode (uMode=0x0) returned 0x1 [0162.304] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\91UOplkyngUDTldme.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\91uoplkyngudtldme.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\91UOplkyngUDTldme.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\91uoplkyngudtldme.lnk.partially.cryptonar")) returned 1 [0162.306] SetErrorMode (uMode=0x1) returned 0x0 [0162.306] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ouJDkPZ2eD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9oujdkpz2ed.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.307] SetErrorMode (uMode=0x0) returned 0x1 [0162.307] GetFileType (hFile=0x230) returned 0x1 [0162.307] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.307] SetErrorMode (uMode=0x1) returned 0x0 [0162.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ouJDkPZ2eD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9oujdkpz2ed.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd49d5ae, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd49d5ae, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6332747d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5c1)) returned 1 [0162.308] SetErrorMode (uMode=0x0) returned 0x1 [0162.308] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ouJDkPZ2eD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9oujdkpz2ed.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\9ouJDkPZ2eD.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\9oujdkpz2ed.lnk.partially.cryptonar")) returned 1 [0162.309] SetErrorMode (uMode=0x1) returned 0x0 [0162.309] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a7QVzw5vso2udUMi.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a7qvzw5vso2udumi.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.310] SetErrorMode (uMode=0x0) returned 0x1 [0162.310] GetFileType (hFile=0x230) returned 0x1 [0162.310] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.310] SetErrorMode (uMode=0x1) returned 0x0 [0162.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a7QVzw5vso2udUMi.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a7qvzw5vso2udumi.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc57ea2, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdc57ea2, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6332747d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x404)) returned 1 [0162.310] SetErrorMode (uMode=0x0) returned 0x1 [0162.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a7QVzw5vso2udUMi.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a7qvzw5vso2udumi.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\a7QVzw5vso2udUMi.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a7qvzw5vso2udumi.lnk.partially.cryptonar")) returned 1 [0162.312] SetErrorMode (uMode=0x1) returned 0x0 [0162.312] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A8v8SkkJesmJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a8v8skkjesmj.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.313] SetErrorMode (uMode=0x0) returned 0x1 [0162.313] GetFileType (hFile=0x230) returned 0x1 [0162.313] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.313] SetErrorMode (uMode=0x1) returned 0x0 [0162.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A8v8SkkJesmJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a8v8skkjesmj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd1774a, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdd1774a, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6332747d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x64e)) returned 1 [0162.313] SetErrorMode (uMode=0x0) returned 0x1 [0162.313] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A8v8SkkJesmJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a8v8skkjesmj.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\A8v8SkkJesmJ.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\a8v8skkjesmj.lnk.partially.cryptonar")) returned 1 [0162.315] SetErrorMode (uMode=0x1) returned 0x0 [0162.315] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aCWmprR.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\acwmprr.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.316] SetErrorMode (uMode=0x0) returned 0x1 [0162.316] GetFileType (hFile=0x230) returned 0x1 [0162.316] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.316] SetErrorMode (uMode=0x1) returned 0x0 [0162.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aCWmprR.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\acwmprr.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa586e03, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0x113695a2, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6332747d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e1)) returned 1 [0162.316] SetErrorMode (uMode=0x0) returned 0x1 [0162.316] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aCWmprR.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\acwmprr.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aCWmprR.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\acwmprr.lnk.partially.cryptonar")) returned 1 [0162.318] SetErrorMode (uMode=0x1) returned 0x0 [0162.318] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AJbAN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ajban.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.319] SetErrorMode (uMode=0x0) returned 0x1 [0162.320] GetFileType (hFile=0x230) returned 0x1 [0162.320] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.320] SetErrorMode (uMode=0x1) returned 0x0 [0162.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AJbAN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ajban.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf7aa2c, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdf7aa2c, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6332747d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3de)) returned 1 [0162.320] SetErrorMode (uMode=0x0) returned 0x1 [0162.320] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AJbAN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ajban.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AJbAN.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ajban.lnk.partially.cryptonar")) returned 1 [0162.322] SetErrorMode (uMode=0x1) returned 0x0 [0162.322] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AMTTq_EtBPP8qnyP.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\amttq_etbpp8qnyp.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.324] SetErrorMode (uMode=0x0) returned 0x1 [0162.324] GetFileType (hFile=0x230) returned 0x1 [0162.324] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.325] SetErrorMode (uMode=0x1) returned 0x0 [0162.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AMTTq_EtBPP8qnyP.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\amttq_etbpp8qnyp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1a2633, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd1a2633, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6335408e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x53a)) returned 1 [0162.325] SetErrorMode (uMode=0x0) returned 0x1 [0162.325] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AMTTq_EtBPP8qnyP.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\amttq_etbpp8qnyp.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AMTTq_EtBPP8qnyP.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\amttq_etbpp8qnyp.lnk.partially.cryptonar")) returned 1 [0162.327] SetErrorMode (uMode=0x1) returned 0x0 [0162.327] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ArazkJZs-AMTv58JxoMv (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\arazkjzs-amtv58jxomv (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.329] SetErrorMode (uMode=0x0) returned 0x1 [0162.329] GetFileType (hFile=0x230) returned 0x1 [0162.329] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.330] SetErrorMode (uMode=0x1) returned 0x0 [0162.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ArazkJZs-AMTv58JxoMv (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\arazkjzs-amtv58jxomv (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1eab5d, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe1eab5d, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6335408e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45d)) returned 1 [0162.330] SetErrorMode (uMode=0x0) returned 0x1 [0162.330] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ArazkJZs-AMTv58JxoMv (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\arazkjzs-amtv58jxomv (2).lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ArazkJZs-AMTv58JxoMv (2).lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\arazkjzs-amtv58jxomv (2).lnk.partially.cryptonar")) returned 1 [0162.346] SetErrorMode (uMode=0x1) returned 0x0 [0162.346] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ArazkJZs-AMTv58JxoMv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\arazkjzs-amtv58jxomv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.347] SetErrorMode (uMode=0x0) returned 0x1 [0162.347] GetFileType (hFile=0x230) returned 0x1 [0162.347] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.348] SetErrorMode (uMode=0x1) returned 0x0 [0162.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ArazkJZs-AMTv58JxoMv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\arazkjzs-amtv58jxomv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb46d8a0, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcd2a13a, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63383a57, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45d)) returned 1 [0162.348] SetErrorMode (uMode=0x0) returned 0x1 [0162.348] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ArazkJZs-AMTv58JxoMv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\arazkjzs-amtv58jxomv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ArazkJZs-AMTv58JxoMv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\arazkjzs-amtv58jxomv.lnk.partially.cryptonar")) returned 1 [0162.350] SetErrorMode (uMode=0x1) returned 0x0 [0162.350] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Auc3FVOi2giobD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\auc3fvoi2giobd.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.352] SetErrorMode (uMode=0x0) returned 0x1 [0162.352] GetFileType (hFile=0x230) returned 0x1 [0162.352] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.352] SetErrorMode (uMode=0x1) returned 0x0 [0162.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Auc3FVOi2giobD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\auc3fvoi2giobd.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c450b, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd8c450b, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63398744, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f8)) returned 1 [0162.352] SetErrorMode (uMode=0x0) returned 0x1 [0162.352] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Auc3FVOi2giobD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\auc3fvoi2giobd.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Auc3FVOi2giobD.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\auc3fvoi2giobd.lnk.partially.cryptonar")) returned 1 [0162.354] SetErrorMode (uMode=0x1) returned 0x0 [0162.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aykuJQIkduP8.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\aykujqikdup8.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.355] SetErrorMode (uMode=0x0) returned 0x1 [0162.356] GetFileType (hFile=0x230) returned 0x1 [0162.356] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.356] SetErrorMode (uMode=0x1) returned 0x0 [0162.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aykuJQIkduP8.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\aykujqikdup8.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefa0354, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xefa0354, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63398744, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2a4)) returned 1 [0162.356] SetErrorMode (uMode=0x0) returned 0x1 [0162.356] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aykuJQIkduP8.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\aykujqikdup8.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\aykuJQIkduP8.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\aykujqikdup8.lnk.partially.cryptonar")) returned 1 [0162.359] SetErrorMode (uMode=0x1) returned 0x0 [0162.359] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bAmmconXD55MsQJpFcj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bammconxd55msqjpfcj.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.361] SetErrorMode (uMode=0x0) returned 0x1 [0162.361] GetFileType (hFile=0x230) returned 0x1 [0162.361] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.361] SetErrorMode (uMode=0x1) returned 0x0 [0162.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bAmmconXD55MsQJpFcj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bammconxd55msqjpfcj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd62e35, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdd62e35, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63398744, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45e)) returned 1 [0162.361] SetErrorMode (uMode=0x0) returned 0x1 [0162.361] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bAmmconXD55MsQJpFcj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bammconxd55msqjpfcj.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bAmmconXD55MsQJpFcj.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bammconxd55msqjpfcj.lnk.partially.cryptonar")) returned 1 [0162.363] SetErrorMode (uMode=0x1) returned 0x0 [0162.363] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bNo8n0wHYpMhj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bno8n0whypmhj.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.364] SetErrorMode (uMode=0x0) returned 0x1 [0162.364] GetFileType (hFile=0x230) returned 0x1 [0162.364] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.365] SetErrorMode (uMode=0x1) returned 0x0 [0162.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bNo8n0wHYpMhj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bno8n0whypmhj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4639b7, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe2f5c3c, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63398744, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x413)) returned 1 [0162.365] SetErrorMode (uMode=0x0) returned 0x1 [0162.365] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bNo8n0wHYpMhj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bno8n0whypmhj.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bNo8n0wHYpMhj.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bno8n0whypmhj.lnk.partially.cryptonar")) returned 1 [0162.366] SetErrorMode (uMode=0x1) returned 0x0 [0162.366] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\buk5DHTC-n0o.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\buk5dhtc-n0o.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.367] SetErrorMode (uMode=0x0) returned 0x1 [0162.367] GetFileType (hFile=0x230) returned 0x1 [0162.367] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.367] SetErrorMode (uMode=0x1) returned 0x0 [0162.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\buk5DHTC-n0o.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\buk5dhtc-n0o.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21243b, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe21243b, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63398744, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0162.367] SetErrorMode (uMode=0x0) returned 0x1 [0162.367] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\buk5DHTC-n0o.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\buk5dhtc-n0o.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\buk5DHTC-n0o.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\buk5dhtc-n0o.lnk.partially.cryptonar")) returned 1 [0162.369] SetErrorMode (uMode=0x1) returned 0x0 [0162.369] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bWFFUwxI7Z_0NilZBV.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bwffuwxi7z_0nilzbv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.370] SetErrorMode (uMode=0x0) returned 0x1 [0162.370] GetFileType (hFile=0x230) returned 0x1 [0162.370] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.370] SetErrorMode (uMode=0x1) returned 0x0 [0162.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bWFFUwxI7Z_0NilZBV.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bwffuwxi7z_0nilzbv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe4341a, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xecf1922, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x633be972, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ac)) returned 1 [0162.370] SetErrorMode (uMode=0x0) returned 0x1 [0162.370] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bWFFUwxI7Z_0NilZBV.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bwffuwxi7z_0nilzbv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\bWFFUwxI7Z_0NilZBV.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\bwffuwxi7z_0nilzbv.lnk.partially.cryptonar")) returned 1 [0162.371] SetErrorMode (uMode=0x1) returned 0x0 [0162.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C0Ja.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\c0ja.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.372] SetErrorMode (uMode=0x0) returned 0x1 [0162.372] GetFileType (hFile=0x230) returned 0x1 [0162.372] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.373] SetErrorMode (uMode=0x1) returned 0x0 [0162.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C0Ja.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\c0ja.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabc9115, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xf24ee27, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x633be972, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x356)) returned 1 [0162.373] SetErrorMode (uMode=0x0) returned 0x1 [0162.373] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C0Ja.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\c0ja.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\C0Ja.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\c0ja.lnk.partially.cryptonar")) returned 1 [0162.374] SetErrorMode (uMode=0x1) returned 0x0 [0162.374] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c1zxMf43cebSV1K8Fppb.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\c1zxmf43cebsv1k8fppb.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.375] SetErrorMode (uMode=0x0) returned 0x1 [0162.375] GetFileType (hFile=0x230) returned 0x1 [0162.375] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.375] SetErrorMode (uMode=0x1) returned 0x0 [0162.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c1zxMf43cebSV1K8Fppb.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\c1zxmf43cebsv1k8fppb.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfd8a43, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcfd8a43, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x633be972, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x418)) returned 1 [0162.375] SetErrorMode (uMode=0x0) returned 0x1 [0162.375] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c1zxMf43cebSV1K8Fppb.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\c1zxmf43cebsv1k8fppb.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\c1zxMf43cebSV1K8Fppb.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\c1zxmf43cebsv1k8fppb.lnk.partially.cryptonar")) returned 1 [0162.377] SetErrorMode (uMode=0x1) returned 0x0 [0162.377] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cr5CLfkFk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\cr5clfkfk.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.378] SetErrorMode (uMode=0x0) returned 0x1 [0162.378] GetFileType (hFile=0x230) returned 0x1 [0162.378] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.378] SetErrorMode (uMode=0x1) returned 0x0 [0162.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cr5CLfkFk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\cr5clfkfk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb72e55, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd551478, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x633be972, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49b)) returned 1 [0162.379] SetErrorMode (uMode=0x0) returned 0x1 [0162.379] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cr5CLfkFk.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\cr5clfkfk.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\cr5CLfkFk.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\cr5clfkfk.lnk.partially.cryptonar")) returned 1 [0162.381] SetErrorMode (uMode=0x1) returned 0x0 [0162.381] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.382] SetErrorMode (uMode=0x0) returned 0x1 [0162.382] GetFileType (hFile=0x230) returned 0x1 [0162.382] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.385] SetErrorMode (uMode=0x1) returned 0x0 [0162.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae1b508e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1b508e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x633be972, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0162.385] SetErrorMode (uMode=0x0) returned 0x1 [0162.385] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini.partially.cryptonar")) returned 1 [0162.387] SetErrorMode (uMode=0x1) returned 0x0 [0162.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dh 5PFzKfjxDvo1Xk0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dh 5pfzkfjxdvo1xk0.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.389] SetErrorMode (uMode=0x0) returned 0x1 [0162.389] GetFileType (hFile=0x230) returned 0x1 [0162.389] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.389] SetErrorMode (uMode=0x1) returned 0x0 [0162.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dh 5PFzKfjxDvo1Xk0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dh 5pfzkfjxdvo1xk0.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf54679, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdf54679, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x633e4ccc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c2)) returned 1 [0162.390] SetErrorMode (uMode=0x0) returned 0x1 [0162.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dh 5PFzKfjxDvo1Xk0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dh 5pfzkfjxdvo1xk0.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Dh 5PFzKfjxDvo1Xk0.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dh 5pfzkfjxdvo1xk0.lnk.partially.cryptonar")) returned 1 [0162.393] SetErrorMode (uMode=0x1) returned 0x0 [0162.393] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dOazB2Ocx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\doazb2ocx.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.395] SetErrorMode (uMode=0x0) returned 0x1 [0162.396] GetFileType (hFile=0x230) returned 0x1 [0162.396] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.396] SetErrorMode (uMode=0x1) returned 0x0 [0162.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dOazB2Ocx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\doazb2ocx.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddd556d, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xddd556d, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x633e4ccc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d5)) returned 1 [0162.397] SetErrorMode (uMode=0x0) returned 0x1 [0162.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dOazB2Ocx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\doazb2ocx.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dOazB2Ocx.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\doazb2ocx.lnk.partially.cryptonar")) returned 1 [0162.400] SetErrorMode (uMode=0x1) returned 0x0 [0162.400] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dR 0LXjaJI1dPS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dr 0lxjaji1dps.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.401] SetErrorMode (uMode=0x0) returned 0x1 [0162.401] GetFileType (hFile=0x230) returned 0x1 [0162.401] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.402] SetErrorMode (uMode=0x1) returned 0x0 [0162.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dR 0LXjaJI1dPS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dr 0lxjaji1dps.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf75fe39, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xf75fe39, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6340c2a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ea)) returned 1 [0162.402] SetErrorMode (uMode=0x0) returned 0x1 [0162.402] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dR 0LXjaJI1dPS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dr 0lxjaji1dps.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\dR 0LXjaJI1dPS.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\dr 0lxjaji1dps.lnk.partially.cryptonar")) returned 1 [0162.403] SetErrorMode (uMode=0x1) returned 0x0 [0162.403] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e-fG8Q.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e-fg8q.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.405] SetErrorMode (uMode=0x0) returned 0x1 [0162.405] GetFileType (hFile=0x230) returned 0x1 [0162.405] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.405] SetErrorMode (uMode=0x1) returned 0x0 [0162.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e-fG8Q.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e-fg8q.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10abee26, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0x10abee26, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6340c2a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x33c)) returned 1 [0162.406] SetErrorMode (uMode=0x0) returned 0x1 [0162.406] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e-fG8Q.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e-fg8q.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\e-fG8Q.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\e-fg8q.lnk.partially.cryptonar")) returned 1 [0162.408] SetErrorMode (uMode=0x1) returned 0x0 [0162.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EIUyke0U2H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eiuyke0u2h.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.409] SetErrorMode (uMode=0x0) returned 0x1 [0162.409] GetFileType (hFile=0x230) returned 0x1 [0162.409] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.410] SetErrorMode (uMode=0x1) returned 0x0 [0162.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EIUyke0U2H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eiuyke0u2h.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec58fd2, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xec58fd2, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6340c2a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5e9)) returned 1 [0162.410] SetErrorMode (uMode=0x0) returned 0x1 [0162.410] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EIUyke0U2H.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eiuyke0u2h.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EIUyke0U2H.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eiuyke0u2h.lnk.partially.cryptonar")) returned 1 [0162.411] SetErrorMode (uMode=0x1) returned 0x0 [0162.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EiXzuMA3-95.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eixzuma3-95.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.412] SetErrorMode (uMode=0x0) returned 0x1 [0162.413] GetFileType (hFile=0x230) returned 0x1 [0162.413] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.413] SetErrorMode (uMode=0x1) returned 0x0 [0162.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EiXzuMA3-95.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eixzuma3-95.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6ae448, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd6ae448, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6340c2a5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3cf)) returned 1 [0162.413] SetErrorMode (uMode=0x0) returned 0x1 [0162.413] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EiXzuMA3-95.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eixzuma3-95.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\EiXzuMA3-95.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\eixzuma3-95.lnk.partially.cryptonar")) returned 1 [0162.416] SetErrorMode (uMode=0x1) returned 0x0 [0162.416] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\evlIc1-59tqw pH.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\evlic1-59tqw ph.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.418] SetErrorMode (uMode=0x0) returned 0x1 [0162.418] GetFileType (hFile=0x230) returned 0x1 [0162.418] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.418] SetErrorMode (uMode=0x1) returned 0x0 [0162.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\evlIc1-59tqw pH.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\evlic1-59tqw ph.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe693b, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xebe693b, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63433795, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5e6)) returned 1 [0162.418] SetErrorMode (uMode=0x0) returned 0x1 [0162.418] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\evlIc1-59tqw pH.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\evlic1-59tqw ph.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\evlIc1-59tqw pH.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\evlic1-59tqw ph.lnk.partially.cryptonar")) returned 1 [0162.421] SetErrorMode (uMode=0x1) returned 0x0 [0162.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\f sWJAcYaH52rUOx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f swjacyah52ruox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.424] SetErrorMode (uMode=0x0) returned 0x1 [0162.424] GetFileType (hFile=0x230) returned 0x1 [0162.424] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.424] SetErrorMode (uMode=0x1) returned 0x0 [0162.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\f sWJAcYaH52rUOx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f swjacyah52ruox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa18ec4e, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xccb782a, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63433795, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4fa)) returned 1 [0162.424] SetErrorMode (uMode=0x0) returned 0x1 [0162.424] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\f sWJAcYaH52rUOx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f swjacyah52ruox.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\f sWJAcYaH52rUOx.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f swjacyah52ruox.lnk.partially.cryptonar")) returned 1 [0162.426] SetErrorMode (uMode=0x1) returned 0x0 [0162.427] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F y31EEo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f y31eeo.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.428] SetErrorMode (uMode=0x0) returned 0x1 [0162.428] GetFileType (hFile=0x230) returned 0x1 [0162.428] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.428] SetErrorMode (uMode=0x1) returned 0x0 [0162.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F y31EEo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f y31eeo.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x112f0e77, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0x112f0e77, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63433795, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5ff)) returned 1 [0162.428] SetErrorMode (uMode=0x0) returned 0x1 [0162.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F y31EEo.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f y31eeo.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\F y31EEo.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\f y31eeo.lnk.partially.cryptonar")) returned 1 [0162.430] SetErrorMode (uMode=0x1) returned 0x0 [0162.430] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FzLFEKS4IQGBZE.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fzlfeks4iqgbze.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.432] SetErrorMode (uMode=0x0) returned 0x1 [0162.432] GetFileType (hFile=0x230) returned 0x1 [0162.432] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.433] SetErrorMode (uMode=0x1) returned 0x0 [0162.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FzLFEKS4IQGBZE.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fzlfeks4iqgbze.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0937c3, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe0937c3, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6345731d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1 [0162.433] SetErrorMode (uMode=0x0) returned 0x1 [0162.433] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FzLFEKS4IQGBZE.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fzlfeks4iqgbze.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\FzLFEKS4IQGBZE.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\fzlfeks4iqgbze.lnk.partially.cryptonar")) returned 1 [0162.437] SetErrorMode (uMode=0x1) returned 0x0 [0162.437] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g cQ7o2Vrs.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g cq7o2vrs.flv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.439] SetErrorMode (uMode=0x0) returned 0x1 [0162.439] GetFileType (hFile=0x230) returned 0x1 [0162.439] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.440] SetErrorMode (uMode=0x1) returned 0x0 [0162.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g cQ7o2Vrs.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g cq7o2vrs.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0bd84d, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd0bd84d, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6345731d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x431)) returned 1 [0162.440] SetErrorMode (uMode=0x0) returned 0x1 [0162.441] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g cQ7o2Vrs.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g cq7o2vrs.flv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g cQ7o2Vrs.flv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g cq7o2vrs.flv.lnk.partially.cryptonar")) returned 1 [0162.444] SetErrorMode (uMode=0x1) returned 0x0 [0162.445] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gcWx8GYKXtTyvaIoUV6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gcwx8gykxttyvaiouv6.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.446] SetErrorMode (uMode=0x0) returned 0x1 [0162.446] GetFileType (hFile=0x230) returned 0x1 [0162.446] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.447] SetErrorMode (uMode=0x1) returned 0x0 [0162.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gcWx8GYKXtTyvaIoUV6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gcwx8gykxttyvaiouv6.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdab43a3, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdab43a3, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6345731d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x55b)) returned 1 [0162.447] SetErrorMode (uMode=0x0) returned 0x1 [0162.447] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gcWx8GYKXtTyvaIoUV6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gcwx8gykxttyvaiouv6.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gcWx8GYKXtTyvaIoUV6.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gcwx8gykxttyvaiouv6.lnk.partially.cryptonar")) returned 1 [0162.450] SetErrorMode (uMode=0x1) returned 0x0 [0162.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gFd7mgFoMBQsuRbaZpmp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gfd7mgfombqsurbazpmp.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.451] SetErrorMode (uMode=0x0) returned 0x1 [0162.451] GetFileType (hFile=0x230) returned 0x1 [0162.452] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.452] SetErrorMode (uMode=0x1) returned 0x0 [0162.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gFd7mgFoMBQsuRbaZpmp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gfd7mgfombqsurbazpmp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdee4ebc, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdee4ebc, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634861c1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x463)) returned 1 [0162.452] SetErrorMode (uMode=0x0) returned 0x1 [0162.452] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gFd7mgFoMBQsuRbaZpmp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gfd7mgfombqsurbazpmp.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gFd7mgFoMBQsuRbaZpmp.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gfd7mgfombqsurbazpmp.lnk.partially.cryptonar")) returned 1 [0162.454] SetErrorMode (uMode=0x1) returned 0x0 [0162.454] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gMSI21c.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gmsi21c.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.455] SetErrorMode (uMode=0x0) returned 0x1 [0162.455] GetFileType (hFile=0x230) returned 0x1 [0162.455] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.456] SetErrorMode (uMode=0x1) returned 0x0 [0162.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gMSI21c.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gmsi21c.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebb50b, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xeebb50b, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634861c1, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x289)) returned 1 [0162.456] SetErrorMode (uMode=0x0) returned 0x1 [0162.456] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gMSI21c.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gmsi21c.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gMSI21c.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gmsi21c.lnk.partially.cryptonar")) returned 1 [0162.473] SetErrorMode (uMode=0x1) returned 0x0 [0162.473] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gUbqayvjYIZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gubqayvjyiz.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.474] SetErrorMode (uMode=0x0) returned 0x1 [0162.474] GetFileType (hFile=0x230) returned 0x1 [0162.474] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.475] SetErrorMode (uMode=0x1) returned 0x0 [0162.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gUbqayvjYIZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gubqayvjyiz.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10f5d7a3, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0x10f5d7a3, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634a36fe, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3eb)) returned 1 [0162.475] SetErrorMode (uMode=0x0) returned 0x1 [0162.475] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gUbqayvjYIZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gubqayvjyiz.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gUbqayvjYIZ.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gubqayvjyiz.lnk.partially.cryptonar")) returned 1 [0162.476] SetErrorMode (uMode=0x1) returned 0x0 [0162.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gykhsOtEs2nD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gykhsotes2nd.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.477] SetErrorMode (uMode=0x0) returned 0x1 [0162.477] GetFileType (hFile=0x230) returned 0x1 [0162.478] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.478] SetErrorMode (uMode=0x1) returned 0x0 [0162.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gykhsOtEs2nD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gykhsotes2nd.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe013277, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe013277, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634ca9c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0162.478] SetErrorMode (uMode=0x0) returned 0x1 [0162.478] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gykhsOtEs2nD.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gykhsotes2nd.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\gykhsOtEs2nD.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\gykhsotes2nd.lnk.partially.cryptonar")) returned 1 [0162.479] SetErrorMode (uMode=0x1) returned 0x0 [0162.479] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g_Xh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g_xh.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.480] SetErrorMode (uMode=0x0) returned 0x1 [0162.480] GetFileType (hFile=0x230) returned 0x1 [0162.480] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.481] SetErrorMode (uMode=0x1) returned 0x0 [0162.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g_Xh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g_xh.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd024f12, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd024f12, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634ca9c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d5)) returned 1 [0162.481] SetErrorMode (uMode=0x0) returned 0x1 [0162.481] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g_Xh.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g_xh.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\g_Xh.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\g_xh.lnk.partially.cryptonar")) returned 1 [0162.482] SetErrorMode (uMode=0x1) returned 0x0 [0162.482] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hA8IjRs4LsuqVvXAy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ha8ijrs4lsuqvvxay.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.484] SetErrorMode (uMode=0x0) returned 0x1 [0162.484] GetFileType (hFile=0x230) returned 0x1 [0162.484] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.484] SetErrorMode (uMode=0x1) returned 0x0 [0162.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hA8IjRs4LsuqVvXAy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ha8ijrs4lsuqvvxay.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf012c13, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xf012c13, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634ca9c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x41e)) returned 1 [0162.484] SetErrorMode (uMode=0x0) returned 0x1 [0162.484] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hA8IjRs4LsuqVvXAy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ha8ijrs4lsuqvvxay.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hA8IjRs4LsuqVvXAy.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ha8ijrs4lsuqvvxay.lnk.partially.cryptonar")) returned 1 [0162.486] SetErrorMode (uMode=0x1) returned 0x0 [0162.486] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HCUMyIvgeF8W -MjyS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hcumyivgef8w -mjys.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.487] SetErrorMode (uMode=0x0) returned 0x1 [0162.487] GetFileType (hFile=0x230) returned 0x1 [0162.487] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.488] SetErrorMode (uMode=0x1) returned 0x0 [0162.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HCUMyIvgeF8W -MjyS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hcumyivgef8w -mjys.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a3922, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xec7f2a8, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634ca9c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4ba)) returned 1 [0162.488] SetErrorMode (uMode=0x0) returned 0x1 [0162.488] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HCUMyIvgeF8W -MjyS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hcumyivgef8w -mjys.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HCUMyIvgeF8W -MjyS.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hcumyivgef8w -mjys.lnk.partially.cryptonar")) returned 1 [0162.490] SetErrorMode (uMode=0x1) returned 0x0 [0162.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HeKWUYAeGdT8wVj6.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hekwuyaegdt8wvj6.flv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.491] SetErrorMode (uMode=0x0) returned 0x1 [0162.491] GetFileType (hFile=0x230) returned 0x1 [0162.491] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.492] SetErrorMode (uMode=0x1) returned 0x0 [0162.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HeKWUYAeGdT8wVj6.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hekwuyaegdt8wvj6.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe19e6e4, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe19e6e4, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634ca9c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e8)) returned 1 [0162.492] SetErrorMode (uMode=0x0) returned 0x1 [0162.492] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HeKWUYAeGdT8wVj6.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hekwuyaegdt8wvj6.flv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\HeKWUYAeGdT8wVj6.flv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hekwuyaegdt8wvj6.flv.lnk.partially.cryptonar")) returned 1 [0162.494] SetErrorMode (uMode=0x1) returned 0x0 [0162.494] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hJJOtnpBI0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hjjotnpbi0.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.495] SetErrorMode (uMode=0x0) returned 0x1 [0162.495] GetFileType (hFile=0x230) returned 0x1 [0162.495] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.496] SetErrorMode (uMode=0x1) returned 0x0 [0162.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hJJOtnpBI0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hjjotnpbi0.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd661ec7, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd661ec7, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634f1ec4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x644)) returned 1 [0162.496] SetErrorMode (uMode=0x0) returned 0x1 [0162.496] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hJJOtnpBI0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hjjotnpbi0.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\hJJOtnpBI0.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hjjotnpbi0.lnk.partially.cryptonar")) returned 1 [0162.497] SetErrorMode (uMode=0x1) returned 0x0 [0162.498] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hx01e9E8L.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hx01e9e8l.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.499] SetErrorMode (uMode=0x0) returned 0x1 [0162.499] GetFileType (hFile=0x230) returned 0x1 [0162.499] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.499] SetErrorMode (uMode=0x1) returned 0x0 [0162.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hx01e9E8L.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hx01e9e8l.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1ef4d, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcc1ef4d, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634f1ec4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5eb)) returned 1 [0162.499] SetErrorMode (uMode=0x0) returned 0x1 [0162.499] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hx01e9E8L.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hx01e9e8l.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Hx01e9E8L.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\hx01e9e8l.lnk.partially.cryptonar")) returned 1 [0162.501] SetErrorMode (uMode=0x1) returned 0x0 [0162.501] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i9jPL-UVuyGLrTI3g0n (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\i9jpl-uvuyglrti3g0n (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.502] SetErrorMode (uMode=0x0) returned 0x1 [0162.502] GetFileType (hFile=0x230) returned 0x1 [0162.502] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.502] SetErrorMode (uMode=0x1) returned 0x0 [0162.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i9jPL-UVuyGLrTI3g0n (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\i9jpl-uvuyglrti3g0n (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf2e3dd, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdf2e3dd, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634f1ec4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1 [0162.502] SetErrorMode (uMode=0x0) returned 0x1 [0162.502] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i9jPL-UVuyGLrTI3g0n (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\i9jpl-uvuyglrti3g0n (2).lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i9jPL-UVuyGLrTI3g0n (2).lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\i9jpl-uvuyglrti3g0n (2).lnk.partially.cryptonar")) returned 1 [0162.503] SetErrorMode (uMode=0x1) returned 0x0 [0162.503] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i9jPL-UVuyGLrTI3g0n.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\i9jpl-uvuyglrti3g0n.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.504] SetErrorMode (uMode=0x0) returned 0x1 [0162.504] GetFileType (hFile=0x230) returned 0x1 [0162.504] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.505] SetErrorMode (uMode=0x1) returned 0x0 [0162.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i9jPL-UVuyGLrTI3g0n.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\i9jpl-uvuyglrti3g0n.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3caf63, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd793ac5, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634f1ec4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x402)) returned 1 [0162.505] SetErrorMode (uMode=0x0) returned 0x1 [0162.505] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i9jPL-UVuyGLrTI3g0n.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\i9jpl-uvuyglrti3g0n.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\i9jPL-UVuyGLrTI3g0n.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\i9jpl-uvuyglrti3g0n.lnk.partially.cryptonar")) returned 1 [0162.506] SetErrorMode (uMode=0x1) returned 0x0 [0162.506] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IDL1nh6fHh3B7TetE1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\idl1nh6fhh3b7tete1.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.507] SetErrorMode (uMode=0x0) returned 0x1 [0162.507] GetFileType (hFile=0x230) returned 0x1 [0162.507] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.508] SetErrorMode (uMode=0x1) returned 0x0 [0162.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IDL1nh6fHh3B7TetE1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\idl1nh6fhh3b7tete1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe721f29, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe721f29, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x634f1ec4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x423)) returned 1 [0162.508] SetErrorMode (uMode=0x0) returned 0x1 [0162.508] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IDL1nh6fHh3B7TetE1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\idl1nh6fhh3b7tete1.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\IDL1nh6fHh3B7TetE1.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\idl1nh6fhh3b7tete1.lnk.partially.cryptonar")) returned 1 [0162.520] SetErrorMode (uMode=0x1) returned 0x0 [0162.520] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iQ I8.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iq i8.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.522] SetErrorMode (uMode=0x0) returned 0x1 [0162.522] GetFileType (hFile=0x230) returned 0x1 [0162.522] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.522] SetErrorMode (uMode=0x1) returned 0x0 [0162.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iQ I8.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iq i8.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf8cb40, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcf8cb40, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63515eb2, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4dc)) returned 1 [0162.522] SetErrorMode (uMode=0x0) returned 0x1 [0162.523] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iQ I8.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iq i8.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iQ I8.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iq i8.lnk.partially.cryptonar")) returned 1 [0162.525] SetErrorMode (uMode=0x1) returned 0x0 [0162.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iUBTj4V.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iubtj4v.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.526] SetErrorMode (uMode=0x0) returned 0x1 [0162.526] GetFileType (hFile=0x230) returned 0x1 [0162.527] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.527] SetErrorMode (uMode=0x1) returned 0x0 [0162.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iUBTj4V.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iubtj4v.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea1ccdd, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xea1ccdd, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6353de91, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5bc)) returned 1 [0162.527] SetErrorMode (uMode=0x0) returned 0x1 [0162.527] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iUBTj4V.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iubtj4v.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iUBTj4V.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iubtj4v.lnk.partially.cryptonar")) returned 1 [0162.529] SetErrorMode (uMode=0x1) returned 0x0 [0162.529] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iYg08UGPaMfu.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iyg08ugpamfu.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.531] SetErrorMode (uMode=0x0) returned 0x1 [0162.531] GetFileType (hFile=0x230) returned 0x1 [0162.531] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.532] SetErrorMode (uMode=0x1) returned 0x0 [0162.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iYg08UGPaMfu.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iyg08ugpamfu.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd23afbe, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd23afbe, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6353de91, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e4)) returned 1 [0162.533] SetErrorMode (uMode=0x0) returned 0x1 [0162.533] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iYg08UGPaMfu.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iyg08ugpamfu.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\iYg08UGPaMfu.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\iyg08ugpamfu.lnk.partially.cryptonar")) returned 1 [0162.538] SetErrorMode (uMode=0x1) returned 0x0 [0162.538] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k iMCHgb1T3Z.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\k imchgb1t3z.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.540] SetErrorMode (uMode=0x0) returned 0x1 [0162.540] GetFileType (hFile=0x230) returned 0x1 [0162.540] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.541] SetErrorMode (uMode=0x1) returned 0x0 [0162.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k iMCHgb1T3Z.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\k imchgb1t3z.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb01b04, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xeb01b04, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63563287, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4b1)) returned 1 [0162.541] SetErrorMode (uMode=0x0) returned 0x1 [0162.541] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k iMCHgb1T3Z.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\k imchgb1t3z.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\k iMCHgb1T3Z.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\k imchgb1t3z.lnk.partially.cryptonar")) returned 1 [0162.543] SetErrorMode (uMode=0x1) returned 0x0 [0162.543] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kAGTnS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kagtns.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.545] SetErrorMode (uMode=0x0) returned 0x1 [0162.545] GetFileType (hFile=0x230) returned 0x1 [0162.545] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.545] SetErrorMode (uMode=0x1) returned 0x0 [0162.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kAGTnS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kagtns.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0cffbc, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdd3cb84, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63563287, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50f)) returned 1 [0162.545] SetErrorMode (uMode=0x0) returned 0x1 [0162.545] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kAGTnS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kagtns.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kAGTnS.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kagtns.lnk.partially.cryptonar")) returned 1 [0162.547] SetErrorMode (uMode=0x1) returned 0x0 [0162.547] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KpgW-Lz.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kpgw-lz.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.548] SetErrorMode (uMode=0x0) returned 0x1 [0162.548] GetFileType (hFile=0x230) returned 0x1 [0162.548] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.549] SetErrorMode (uMode=0x1) returned 0x0 [0162.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KpgW-Lz.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kpgw-lz.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd04b1bb, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd04b1bb, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63563287, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x289)) returned 1 [0162.549] SetErrorMode (uMode=0x0) returned 0x1 [0162.549] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KpgW-Lz.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kpgw-lz.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\KpgW-Lz.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kpgw-lz.lnk.partially.cryptonar")) returned 1 [0162.586] SetErrorMode (uMode=0x1) returned 0x0 [0162.586] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kUudyf2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kuudyf2.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.590] SetErrorMode (uMode=0x0) returned 0x1 [0162.590] GetFileType (hFile=0x230) returned 0x1 [0162.590] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.590] SetErrorMode (uMode=0x1) returned 0x0 [0162.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kUudyf2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kuudyf2.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe068420, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe068420, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x635d4a94, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3ea)) returned 1 [0162.591] SetErrorMode (uMode=0x0) returned 0x1 [0162.591] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kUudyf2.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kuudyf2.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\kUudyf2.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\kuudyf2.lnk.partially.cryptonar")) returned 1 [0162.654] SetErrorMode (uMode=0x1) returned 0x0 [0162.654] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0gyW.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0gyw.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.655] SetErrorMode (uMode=0x0) returned 0x1 [0162.655] GetFileType (hFile=0x230) returned 0x1 [0162.655] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.655] SetErrorMode (uMode=0x1) returned 0x0 [0162.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0gyW.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0gyw.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8fddff, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xc8fddff, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6366d436, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3de)) returned 1 [0162.656] SetErrorMode (uMode=0x0) returned 0x1 [0162.656] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0gyW.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0gyw.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\L0gyW.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\l0gyw.lnk.partially.cryptonar")) returned 1 [0162.657] SetErrorMode (uMode=0x1) returned 0x0 [0162.657] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lot1dqWBTMip-2QlXZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lot1dqwbtmip-2qlxz.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.658] SetErrorMode (uMode=0x0) returned 0x1 [0162.658] GetFileType (hFile=0x230) returned 0x1 [0162.658] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.658] SetErrorMode (uMode=0x1) returned 0x0 [0162.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lot1dqWBTMip-2QlXZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lot1dqwbtmip-2qlxz.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddfb7cb, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xddfb7cb, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6366d436, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4fe)) returned 1 [0162.659] SetErrorMode (uMode=0x0) returned 0x1 [0162.659] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lot1dqWBTMip-2QlXZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lot1dqwbtmip-2qlxz.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lot1dqWBTMip-2QlXZ.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lot1dqwbtmip-2qlxz.lnk.partially.cryptonar")) returned 1 [0162.660] SetErrorMode (uMode=0x1) returned 0x0 [0162.660] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lSzXD6_rOJED-5Rcs3Z (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lszxd6_rojed-5rcs3z (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.662] SetErrorMode (uMode=0x0) returned 0x1 [0162.662] GetFileType (hFile=0x230) returned 0x1 [0162.662] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.663] SetErrorMode (uMode=0x1) returned 0x0 [0162.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lSzXD6_rOJED-5Rcs3Z (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lszxd6_rojed-5rcs3z (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba899de, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xf19035d, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6366d436, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e6)) returned 1 [0162.663] SetErrorMode (uMode=0x0) returned 0x1 [0162.663] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lSzXD6_rOJED-5Rcs3Z (2).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lszxd6_rojed-5rcs3z (2).lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lSzXD6_rOJED-5Rcs3Z (2).lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lszxd6_rojed-5rcs3z (2).lnk.partially.cryptonar")) returned 1 [0162.666] SetErrorMode (uMode=0x1) returned 0x0 [0162.666] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lSzXD6_rOJED-5Rcs3Z.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lszxd6_rojed-5rcs3z.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.667] SetErrorMode (uMode=0x0) returned 0x1 [0162.668] GetFileType (hFile=0x230) returned 0x1 [0162.668] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.668] SetErrorMode (uMode=0x1) returned 0x0 [0162.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lSzXD6_rOJED-5Rcs3Z.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lszxd6_rojed-5rcs3z.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xabef29e, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xae2b653, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6369542f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e6)) returned 1 [0162.668] SetErrorMode (uMode=0x0) returned 0x1 [0162.668] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lSzXD6_rOJED-5Rcs3Z.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lszxd6_rojed-5rcs3z.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lSzXD6_rOJED-5Rcs3Z.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lszxd6_rojed-5rcs3z.lnk.partially.cryptonar")) returned 1 [0162.670] SetErrorMode (uMode=0x1) returned 0x0 [0162.670] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ltbL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ltbl.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.671] SetErrorMode (uMode=0x0) returned 0x1 [0162.671] GetFileType (hFile=0x230) returned 0x1 [0162.671] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.672] SetErrorMode (uMode=0x1) returned 0x0 [0162.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ltbL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ltbl.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca2f10a, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xca2f10a, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6369542f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0162.672] SetErrorMode (uMode=0x0) returned 0x1 [0162.672] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ltbL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ltbl.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ltbL.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ltbl.lnk.partially.cryptonar")) returned 1 [0162.673] SetErrorMode (uMode=0x1) returned 0x0 [0162.674] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LtHIpwTMPfQ8_GKz5m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lthipwtmpfq8_gkz5m.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.675] SetErrorMode (uMode=0x0) returned 0x1 [0162.675] GetFileType (hFile=0x230) returned 0x1 [0162.675] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.675] SetErrorMode (uMode=0x1) returned 0x0 [0162.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LtHIpwTMPfQ8_GKz5m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lthipwtmpfq8_gkz5m.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3924b6, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd3924b6, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6369542f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2c2)) returned 1 [0162.676] SetErrorMode (uMode=0x0) returned 0x1 [0162.676] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LtHIpwTMPfQ8_GKz5m.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lthipwtmpfq8_gkz5m.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\LtHIpwTMPfQ8_GKz5m.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lthipwtmpfq8_gkz5m.lnk.partially.cryptonar")) returned 1 [0162.679] SetErrorMode (uMode=0x1) returned 0x0 [0162.679] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lvJH9yekj yi.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lvjh9yekj yi.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.680] SetErrorMode (uMode=0x0) returned 0x1 [0162.681] GetFileType (hFile=0x230) returned 0x1 [0162.681] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.682] SetErrorMode (uMode=0x1) returned 0x0 [0162.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lvJH9yekj yi.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lvjh9yekj yi.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd95cea4, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd95cea4, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x636bb606, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43b)) returned 1 [0162.683] SetErrorMode (uMode=0x0) returned 0x1 [0162.683] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lvJH9yekj yi.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lvjh9yekj yi.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\lvJH9yekj yi.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\lvjh9yekj yi.lnk.partially.cryptonar")) returned 1 [0162.685] SetErrorMode (uMode=0x1) returned 0x0 [0162.685] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m8oIdYFL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\m8oidyfl.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.686] SetErrorMode (uMode=0x0) returned 0x1 [0162.686] GetFileType (hFile=0x230) returned 0x1 [0162.686] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.686] SetErrorMode (uMode=0x1) returned 0x0 [0162.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m8oIdYFL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\m8oidyfl.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74265d, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdab43a3, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x636bb606, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x421)) returned 1 [0162.687] SetErrorMode (uMode=0x0) returned 0x1 [0162.687] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m8oIdYFL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\m8oidyfl.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\m8oIdYFL.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\m8oidyfl.lnk.partially.cryptonar")) returned 1 [0162.689] SetErrorMode (uMode=0x1) returned 0x0 [0162.689] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mg0nanXxTeL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mg0nanxxtel.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.690] SetErrorMode (uMode=0x0) returned 0x1 [0162.690] GetFileType (hFile=0x230) returned 0x1 [0162.690] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.690] SetErrorMode (uMode=0x1) returned 0x0 [0162.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mg0nanXxTeL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mg0nanxxtel.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf333c8e, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xf333c8e, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x636bb606, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0162.691] SetErrorMode (uMode=0x0) returned 0x1 [0162.691] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mg0nanXxTeL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mg0nanxxtel.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Mg0nanXxTeL.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mg0nanxxtel.lnk.partially.cryptonar")) returned 1 [0162.693] SetErrorMode (uMode=0x1) returned 0x0 [0162.693] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MJ1fRte-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mj1frte-.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.695] SetErrorMode (uMode=0x0) returned 0x1 [0162.695] GetFileType (hFile=0x230) returned 0x1 [0162.695] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.695] SetErrorMode (uMode=0x1) returned 0x0 [0162.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MJ1fRte-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mj1frte-.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe152375, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe152375, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x636bb606, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d7)) returned 1 [0162.695] SetErrorMode (uMode=0x0) returned 0x1 [0162.695] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MJ1fRte-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mj1frte-.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MJ1fRte-.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mj1frte-.lnk.partially.cryptonar")) returned 1 [0162.697] SetErrorMode (uMode=0x1) returned 0x0 [0162.697] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mRuk86UyzOMlkI7 4K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mruk86uyzomlki7 4k.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.699] SetErrorMode (uMode=0x0) returned 0x1 [0162.699] GetFileType (hFile=0x230) returned 0x1 [0162.699] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.699] SetErrorMode (uMode=0x1) returned 0x0 [0162.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mRuk86UyzOMlkI7 4K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mruk86uyzomlki7 4k.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf30d963, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xf30d963, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x636dfa1e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x423)) returned 1 [0162.699] SetErrorMode (uMode=0x0) returned 0x1 [0162.700] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mRuk86UyzOMlkI7 4K.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mruk86uyzomlki7 4k.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\mRuk86UyzOMlkI7 4K.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mruk86uyzomlki7 4k.lnk.partially.cryptonar")) returned 1 [0162.701] SetErrorMode (uMode=0x1) returned 0x0 [0162.701] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MV8nQaqUtbQL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mv8nqaqutbql.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.703] SetErrorMode (uMode=0x0) returned 0x1 [0162.703] GetFileType (hFile=0x230) returned 0x1 [0162.703] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.703] SetErrorMode (uMode=0x1) returned 0x0 [0162.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MV8nQaqUtbQL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mv8nqaqutbql.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf24ee27, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xf24ee27, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x636dfa1e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43b)) returned 1 [0162.703] SetErrorMode (uMode=0x0) returned 0x1 [0162.703] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MV8nQaqUtbQL.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mv8nqaqutbql.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\MV8nQaqUtbQL.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\mv8nqaqutbql.lnk.partially.cryptonar")) returned 1 [0162.706] SetErrorMode (uMode=0x1) returned 0x0 [0162.706] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\neert0qy1X1d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\neert0qy1x1d.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.707] SetErrorMode (uMode=0x0) returned 0x1 [0162.707] GetFileType (hFile=0x230) returned 0x1 [0162.707] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.708] SetErrorMode (uMode=0x1) returned 0x0 [0162.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\neert0qy1X1d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\neert0qy1x1d.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd851e38, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd851e38, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x636dfa1e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2a4)) returned 1 [0162.708] SetErrorMode (uMode=0x0) returned 0x1 [0162.708] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\neert0qy1X1d.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\neert0qy1x1d.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\neert0qy1X1d.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\neert0qy1x1d.lnk.partially.cryptonar")) returned 1 [0162.710] SetErrorMode (uMode=0x1) returned 0x0 [0162.710] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NhC2y15ew7q21.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nhc2y15ew7q21.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.711] SetErrorMode (uMode=0x0) returned 0x1 [0162.711] GetFileType (hFile=0x230) returned 0x1 [0162.711] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.712] SetErrorMode (uMode=0x1) returned 0x0 [0162.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NhC2y15ew7q21.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nhc2y15ew7q21.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa24d813, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe2a9745, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63705d9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43a)) returned 1 [0162.712] SetErrorMode (uMode=0x0) returned 0x1 [0162.712] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NhC2y15ew7q21.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nhc2y15ew7q21.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NhC2y15ew7q21.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nhc2y15ew7q21.lnk.partially.cryptonar")) returned 1 [0162.714] SetErrorMode (uMode=0x1) returned 0x0 [0162.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoqQnyiB90.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\noqqnyib90.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.715] SetErrorMode (uMode=0x0) returned 0x1 [0162.715] GetFileType (hFile=0x230) returned 0x1 [0162.715] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.716] SetErrorMode (uMode=0x1) returned 0x0 [0162.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoqQnyiB90.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\noqqnyib90.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2883c2, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd2883c2, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63705d9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4db)) returned 1 [0162.716] SetErrorMode (uMode=0x0) returned 0x1 [0162.716] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoqQnyiB90.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\noqqnyib90.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\NoqQnyiB90.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\noqqnyib90.lnk.partially.cryptonar")) returned 1 [0162.717] SetErrorMode (uMode=0x1) returned 0x0 [0162.717] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nqqZiMwgKbc8tG6-8y.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nqqzimwgkbc8tg6-8y.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.718] SetErrorMode (uMode=0x0) returned 0x1 [0162.718] GetFileType (hFile=0x230) returned 0x1 [0162.718] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.719] SetErrorMode (uMode=0x1) returned 0x0 [0162.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nqqZiMwgKbc8tG6-8y.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nqqzimwgkbc8tg6-8y.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3cc558, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xf3cc558, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63705d9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x423)) returned 1 [0162.719] SetErrorMode (uMode=0x0) returned 0x1 [0162.719] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nqqZiMwgKbc8tG6-8y.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nqqzimwgkbc8tg6-8y.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\nqqZiMwgKbc8tG6-8y.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\nqqzimwgkbc8tg6-8y.lnk.partially.cryptonar")) returned 1 [0162.721] SetErrorMode (uMode=0x1) returned 0x0 [0162.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ocwG6HTox5lyaHT.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ocwg6htox5lyaht.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.724] SetErrorMode (uMode=0x0) returned 0x1 [0162.724] GetFileType (hFile=0x230) returned 0x1 [0162.724] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.724] SetErrorMode (uMode=0x1) returned 0x0 [0162.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ocwG6HTox5lyaHT.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ocwg6htox5lyaht.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc94a5b2, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xc94a5b2, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63705d9c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x602)) returned 1 [0162.725] SetErrorMode (uMode=0x0) returned 0x1 [0162.725] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ocwG6HTox5lyaHT.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ocwg6htox5lyaht.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ocwG6HTox5lyaHT.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ocwg6htox5lyaht.lnk.partially.cryptonar")) returned 1 [0162.731] SetErrorMode (uMode=0x1) returned 0x0 [0162.731] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Od8kJ9.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\od8kj9.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.735] SetErrorMode (uMode=0x0) returned 0x1 [0162.735] GetFileType (hFile=0x230) returned 0x1 [0162.735] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.735] SetErrorMode (uMode=0x1) returned 0x0 [0162.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Od8kJ9.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\od8kj9.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef07a7a, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xef07a7a, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63731039, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3cb)) returned 1 [0162.736] SetErrorMode (uMode=0x0) returned 0x1 [0162.736] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Od8kJ9.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\od8kj9.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Od8kJ9.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\od8kj9.lnk.partially.cryptonar")) returned 1 [0162.738] SetErrorMode (uMode=0x1) returned 0x0 [0162.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OVWbB7_hn984AFW3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ovwbb7_hn984afw3.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.741] SetErrorMode (uMode=0x0) returned 0x1 [0162.741] GetFileType (hFile=0x230) returned 0x1 [0162.741] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.741] SetErrorMode (uMode=0x1) returned 0x0 [0162.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OVWbB7_hn984AFW3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ovwbb7_hn984afw3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca7de70, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xca7de70, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63731039, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x702)) returned 1 [0162.741] SetErrorMode (uMode=0x0) returned 0x1 [0162.741] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OVWbB7_hn984AFW3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ovwbb7_hn984afw3.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\OVWbB7_hn984AFW3.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ovwbb7_hn984afw3.lnk.partially.cryptonar")) returned 1 [0162.745] SetErrorMode (uMode=0x1) returned 0x0 [0162.746] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oyFcKHBBiN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\oyfckhbbin.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.748] SetErrorMode (uMode=0x0) returned 0x1 [0162.748] GetFileType (hFile=0x230) returned 0x1 [0162.748] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.749] SetErrorMode (uMode=0x1) returned 0x0 [0162.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oyFcKHBBiN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\oyfckhbbin.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1561f4, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd1561f4, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63756a80, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x458)) returned 1 [0162.749] SetErrorMode (uMode=0x0) returned 0x1 [0162.749] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oyFcKHBBiN.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\oyfckhbbin.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\oyFcKHBBiN.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\oyfckhbbin.lnk.partially.cryptonar")) returned 1 [0162.752] SetErrorMode (uMode=0x1) returned 0x0 [0162.752] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\p9xj5P.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\p9xj5p.flv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.754] SetErrorMode (uMode=0x0) returned 0x1 [0162.754] GetFileType (hFile=0x230) returned 0x1 [0162.754] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.754] SetErrorMode (uMode=0x1) returned 0x0 [0162.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\p9xj5P.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\p9xj5p.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd57ceef, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd57ceef, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63756a80, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e5)) returned 1 [0162.755] SetErrorMode (uMode=0x0) returned 0x1 [0162.755] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\p9xj5P.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\p9xj5p.flv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\p9xj5P.flv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\p9xj5p.flv.lnk.partially.cryptonar")) returned 1 [0162.757] SetErrorMode (uMode=0x1) returned 0x0 [0162.757] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.759] SetErrorMode (uMode=0x0) returned 0x1 [0162.759] GetFileType (hFile=0x230) returned 0x1 [0162.759] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.759] SetErrorMode (uMode=0x1) returned 0x0 [0162.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacadf5c, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xddd556d, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63756a80, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x305)) returned 1 [0162.760] SetErrorMode (uMode=0x0) returned 0x1 [0162.760] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Pictures.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pictures.lnk.partially.cryptonar")) returned 1 [0162.762] SetErrorMode (uMode=0x1) returned 0x0 [0162.762] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pOCeYmwbRIDEa3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\poceymwbridea3.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.764] SetErrorMode (uMode=0x0) returned 0x1 [0162.764] GetFileType (hFile=0x230) returned 0x1 [0162.764] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.765] SetErrorMode (uMode=0x1) returned 0x0 [0162.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pOCeYmwbRIDEa3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\poceymwbridea3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde47d8b, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xde47d8b, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63780f6a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3f5)) returned 1 [0162.765] SetErrorMode (uMode=0x0) returned 0x1 [0162.765] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pOCeYmwbRIDEa3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\poceymwbridea3.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\pOCeYmwbRIDEa3.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\poceymwbridea3.lnk.partially.cryptonar")) returned 1 [0162.767] SetErrorMode (uMode=0x1) returned 0x0 [0162.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PqambTdEy2WK.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pqambtdey2wk.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.769] SetErrorMode (uMode=0x0) returned 0x1 [0162.769] GetFileType (hFile=0x230) returned 0x1 [0162.769] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.770] SetErrorMode (uMode=0x1) returned 0x0 [0162.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PqambTdEy2WK.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pqambtdey2wk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb93247e, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdfed067, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63780f6a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x37b)) returned 1 [0162.770] SetErrorMode (uMode=0x0) returned 0x1 [0162.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PqambTdEy2WK.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pqambtdey2wk.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PqambTdEy2WK.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pqambtdey2wk.lnk.partially.cryptonar")) returned 1 [0162.772] SetErrorMode (uMode=0x1) returned 0x0 [0162.772] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PWEcj96cPO2-96qJtzlZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pwecj96cpo2-96qjtzlz.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.773] SetErrorMode (uMode=0x0) returned 0x1 [0162.774] GetFileType (hFile=0x230) returned 0x1 [0162.774] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.776] SetErrorMode (uMode=0x1) returned 0x0 [0162.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PWEcj96cPO2-96qJtzlZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pwecj96cpo2-96qjtzlz.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd3cb84, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xde941af, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6379e6ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42c)) returned 1 [0162.776] SetErrorMode (uMode=0x0) returned 0x1 [0162.776] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PWEcj96cPO2-96qJtzlZ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pwecj96cpo2-96qjtzlz.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\PWEcj96cPO2-96qJtzlZ.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\pwecj96cpo2-96qjtzlz.lnk.partially.cryptonar")) returned 1 [0162.778] SetErrorMode (uMode=0x1) returned 0x0 [0162.778] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qEoKv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qeokv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.780] SetErrorMode (uMode=0x0) returned 0x1 [0162.780] GetFileType (hFile=0x230) returned 0x1 [0162.780] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.780] SetErrorMode (uMode=0x1) returned 0x0 [0162.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qEoKv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qeokv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf07fa1, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdf07fa1, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6379e6ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1 [0162.780] SetErrorMode (uMode=0x0) returned 0x1 [0162.781] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qEoKv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qeokv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qEoKv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qeokv.lnk.partially.cryptonar")) returned 1 [0162.782] SetErrorMode (uMode=0x1) returned 0x0 [0162.782] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qHi3fuWr1xwJPy0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qhi3fuwr1xwjpy0.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.784] SetErrorMode (uMode=0x0) returned 0x1 [0162.784] GetFileType (hFile=0x230) returned 0x1 [0162.784] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.784] SetErrorMode (uMode=0x1) returned 0x0 [0162.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qHi3fuWr1xwJPy0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qhi3fuwr1xwjpy0.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9aa5cd, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe9aa5cd, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6379e6ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0162.784] SetErrorMode (uMode=0x0) returned 0x1 [0162.784] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qHi3fuWr1xwJPy0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qhi3fuwr1xwjpy0.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qHi3fuWr1xwJPy0.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qhi3fuwr1xwjpy0.lnk.partially.cryptonar")) returned 1 [0162.786] SetErrorMode (uMode=0x1) returned 0x0 [0162.786] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QLcrB r0-7HCopS-P3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qlcrb r0-7hcops-p3.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.787] SetErrorMode (uMode=0x0) returned 0x1 [0162.787] GetFileType (hFile=0x230) returned 0x1 [0162.787] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.788] SetErrorMode (uMode=0x1) returned 0x0 [0162.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QLcrB r0-7HCopS-P3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qlcrb r0-7hcops-p3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf19035d, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xf19035d, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6379e6ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x64d)) returned 1 [0162.788] SetErrorMode (uMode=0x0) returned 0x1 [0162.788] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QLcrB r0-7HCopS-P3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qlcrb r0-7hcops-p3.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\QLcrB r0-7HCopS-P3.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qlcrb r0-7hcops-p3.lnk.partially.cryptonar")) returned 1 [0162.791] SetErrorMode (uMode=0x1) returned 0x0 [0162.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qSqR7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qsqr7.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.798] SetErrorMode (uMode=0x0) returned 0x1 [0162.798] GetFileType (hFile=0x230) returned 0x1 [0162.798] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.798] SetErrorMode (uMode=0x1) returned 0x0 [0162.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qSqR7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qsqr7.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcea777e, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcea777e, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x637cf3e9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4e8)) returned 1 [0162.803] SetErrorMode (uMode=0x0) returned 0x1 [0162.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qSqR7.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qsqr7.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\qSqR7.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qsqr7.lnk.partially.cryptonar")) returned 1 [0162.804] SetErrorMode (uMode=0x1) returned 0x0 [0162.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qz2l.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qz2l.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.806] SetErrorMode (uMode=0x0) returned 0x1 [0162.806] GetFileType (hFile=0x230) returned 0x1 [0162.806] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.806] SetErrorMode (uMode=0x1) returned 0x0 [0162.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qz2l.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qz2l.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa34e19, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xfa34e19, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x637eba78, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d9)) returned 1 [0162.806] SetErrorMode (uMode=0x0) returned 0x1 [0162.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qz2l.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qz2l.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Qz2l.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\qz2l.lnk.partially.cryptonar")) returned 1 [0162.808] SetErrorMode (uMode=0x1) returned 0x0 [0162.808] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rKBY.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rkby.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.809] SetErrorMode (uMode=0x0) returned 0x1 [0162.809] GetFileType (hFile=0x230) returned 0x1 [0162.809] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.809] SetErrorMode (uMode=0x1) returned 0x0 [0162.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rKBY.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rkby.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8794a1, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe8794a1, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x637eba78, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3d9)) returned 1 [0162.809] SetErrorMode (uMode=0x0) returned 0x1 [0162.809] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rKBY.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rkby.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rKBY.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rkby.lnk.partially.cryptonar")) returned 1 [0162.811] SetErrorMode (uMode=0x1) returned 0x0 [0162.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.812] SetErrorMode (uMode=0x0) returned 0x1 [0162.812] GetFileType (hFile=0x230) returned 0x1 [0162.812] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.812] SetErrorMode (uMode=0x1) returned 0x0 [0162.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b80ae, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xfa34e19, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x637eba78, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x318)) returned 1 [0162.813] SetErrorMode (uMode=0x0) returned 0x1 [0162.813] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Roaming.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\roaming.lnk.partially.cryptonar")) returned 1 [0162.821] SetErrorMode (uMode=0x1) returned 0x0 [0162.821] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rsYU.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rsyu.flv.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.823] SetErrorMode (uMode=0x0) returned 0x1 [0162.823] GetFileType (hFile=0x230) returned 0x1 [0162.823] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.823] SetErrorMode (uMode=0x1) returned 0x0 [0162.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rsYU.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rsyu.flv.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb3a11a, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcb3a11a, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63810d30, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0162.823] SetErrorMode (uMode=0x0) returned 0x1 [0162.823] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rsYU.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rsyu.flv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rsYU.flv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rsyu.flv.lnk.partially.cryptonar")) returned 1 [0162.825] SetErrorMode (uMode=0x1) returned 0x0 [0162.825] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rXy-i djXoD6DPK.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rxy-i djxod6dpk.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.826] SetErrorMode (uMode=0x0) returned 0x1 [0162.826] GetFileType (hFile=0x230) returned 0x1 [0162.826] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.826] SetErrorMode (uMode=0x1) returned 0x0 [0162.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rXy-i djXoD6DPK.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rxy-i djxod6dpk.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22319a, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0x112f0e77, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63810d30, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0162.827] SetErrorMode (uMode=0x0) returned 0x1 [0162.827] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rXy-i djXoD6DPK.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rxy-i djxod6dpk.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\rXy-i djXoD6DPK.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\rxy-i djxod6dpk.lnk.partially.cryptonar")) returned 1 [0162.828] SetErrorMode (uMode=0x1) returned 0x0 [0162.828] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sHtqCBZrSy7M3Tfea.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\shtqcbzrsy7m3tfea.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.829] SetErrorMode (uMode=0x0) returned 0x1 [0162.829] GetFileType (hFile=0x230) returned 0x1 [0162.830] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.830] SetErrorMode (uMode=0x1) returned 0x0 [0162.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sHtqCBZrSy7M3Tfea.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\shtqcbzrsy7m3tfea.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2f9b7d, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xd2f9b7d, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63810d30, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x51a)) returned 1 [0162.830] SetErrorMode (uMode=0x0) returned 0x1 [0162.830] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sHtqCBZrSy7M3Tfea.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\shtqcbzrsy7m3tfea.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\sHtqCBZrSy7M3Tfea.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\shtqcbzrsy7m3tfea.lnk.partially.cryptonar")) returned 1 [0162.832] SetErrorMode (uMode=0x1) returned 0x0 [0162.832] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SKjK _nn9h2 F2pWeml.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\skjk _nn9h2 f2pweml.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.833] SetErrorMode (uMode=0x0) returned 0x1 [0162.834] GetFileType (hFile=0x230) returned 0x1 [0162.834] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.834] SetErrorMode (uMode=0x1) returned 0x0 [0162.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SKjK _nn9h2 F2pWeml.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\skjk _nn9h2 f2pweml.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbbf6c8, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xdbbf6c8, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63810d30, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x413)) returned 1 [0162.834] SetErrorMode (uMode=0x0) returned 0x1 [0162.834] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SKjK _nn9h2 F2pWeml.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\skjk _nn9h2 f2pweml.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SKjK _nn9h2 F2pWeml.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\skjk _nn9h2 f2pweml.lnk.partially.cryptonar")) returned 1 [0162.836] SetErrorMode (uMode=0x1) returned 0x0 [0162.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQYPyDz3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sqypydz3.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.837] SetErrorMode (uMode=0x0) returned 0x1 [0162.837] GetFileType (hFile=0x230) returned 0x1 [0162.837] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.838] SetErrorMode (uMode=0x1) returned 0x0 [0162.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQYPyDz3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sqypydz3.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeccb6db, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xeccb6db, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63838afb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x658)) returned 1 [0162.838] SetErrorMode (uMode=0x0) returned 0x1 [0162.838] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQYPyDz3.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sqypydz3.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\SQYPyDz3.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\sqypydz3.lnk.partially.cryptonar")) returned 1 [0162.840] SetErrorMode (uMode=0x1) returned 0x0 [0162.840] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T5XhAZjP04jeHyKy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\t5xhazjp04jehyky.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.841] SetErrorMode (uMode=0x0) returned 0x1 [0162.841] GetFileType (hFile=0x230) returned 0x1 [0162.841] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.841] SetErrorMode (uMode=0x1) returned 0x0 [0162.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T5XhAZjP04jeHyKy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\t5xhazjp04jehyky.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9e2c39, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xc9e2c39, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63838afb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x404)) returned 1 [0162.841] SetErrorMode (uMode=0x0) returned 0x1 [0162.842] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T5XhAZjP04jeHyKy.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\t5xhazjp04jehyky.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\T5XhAZjP04jeHyKy.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\t5xhazjp04jehyky.lnk.partially.cryptonar")) returned 1 [0162.843] SetErrorMode (uMode=0x1) returned 0x0 [0162.843] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tD8OEbpCP44l1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\td8oebpcp44l1.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.847] SetErrorMode (uMode=0x0) returned 0x1 [0162.847] GetFileType (hFile=0x230) returned 0x1 [0162.847] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.847] SetErrorMode (uMode=0x1) returned 0x0 [0162.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tD8OEbpCP44l1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\td8oebpcp44l1.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbac84f, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcbac84f, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63838afb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x671)) returned 1 [0162.847] SetErrorMode (uMode=0x0) returned 0x1 [0162.848] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tD8OEbpCP44l1.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\td8oebpcp44l1.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\tD8OEbpCP44l1.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\td8oebpcp44l1.lnk.partially.cryptonar")) returned 1 [0162.849] SetErrorMode (uMode=0x1) returned 0x0 [0162.849] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TjMNKYynuHROVfhewSOJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tjmnkyynuhrovfhewsoj.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.850] SetErrorMode (uMode=0x0) returned 0x1 [0162.850] GetFileType (hFile=0x230) returned 0x1 [0162.850] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.850] SetErrorMode (uMode=0x1) returned 0x0 [0162.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TjMNKYynuHROVfhewSOJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tjmnkyynuhrovfhewsoj.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe25d300, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xe25d300, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x63838afb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x694)) returned 1 [0162.851] SetErrorMode (uMode=0x0) returned 0x1 [0162.851] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TjMNKYynuHROVfhewSOJ.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tjmnkyynuhrovfhewsoj.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TjMNKYynuHROVfhewSOJ.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tjmnkyynuhrovfhewsoj.lnk.partially.cryptonar")) returned 1 [0162.852] SetErrorMode (uMode=0x1) returned 0x0 [0162.852] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TlbTgQ-HkucZBBVUNp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tlbtgq-hkuczbbvunp.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0162.854] SetErrorMode (uMode=0x0) returned 0x1 [0162.854] GetFileType (hFile=0x230) returned 0x1 [0162.854] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0162.854] SetErrorMode (uMode=0x1) returned 0x0 [0162.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TlbTgQ-HkucZBBVUNp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tlbtgq-hkuczbbvunp.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcef3c19, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0xcef3c19, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6385da90, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x49a)) returned 1 [0162.854] SetErrorMode (uMode=0x0) returned 0x1 [0162.854] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TlbTgQ-HkucZBBVUNp.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tlbtgq-hkuczbbvunp.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TlbTgQ-HkucZBBVUNp.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tlbtgq-hkuczbbvunp.lnk.partially.cryptonar")) returned 1 [0162.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TVecRIN0- u.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tvecrin0- u.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\TVecRIN0- u.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tvecrin0- u.lnk.partially.cryptonar")) returned 1 [0162.861] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tz72mKHJ4VUQGUeCB 5.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tz72mkhj4vuqguecb 5.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Tz72mKHJ4VUQGUeCB 5.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\tz72mkhj4vuqguecb 5.lnk.partially.cryptonar")) returned 1 [0162.863] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\U O9.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\u o9.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\U O9.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\u o9.lnk.partially.cryptonar")) returned 1 [0162.868] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ubhh39FxligXP.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ubhh39fxligxp.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ubhh39FxligXP.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ubhh39fxligxp.lnk.partially.cryptonar")) returned 1 [0162.872] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UJ23oTZ9cscqXr4UqW.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uj23otz9cscqxr4uqw.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UJ23oTZ9cscqXr4UqW.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uj23otz9cscqxr4uqw.lnk.partially.cryptonar")) returned 1 [0162.881] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UklY7c7ppa13n.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ukly7c7ppa13n.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\UklY7c7ppa13n.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ukly7c7ppa13n.lnk.partially.cryptonar")) returned 1 [0162.885] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Um0sc8wIq.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\um0sc8wiq.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Um0sc8wIq.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\um0sc8wiq.lnk.partially.cryptonar")) returned 1 [0162.888] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uOy6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uoy6.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uOy6.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uoy6.lnk.partially.cryptonar")) returned 1 [0162.893] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uww77I w9f9Fot_.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uww77i w9f9fot_.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\uww77I w9f9Fot_.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\uww77i w9f9fot_.lnk.partially.cryptonar")) returned 1 [0162.895] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v-Ope5.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v-ope5.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\v-Ope5.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\v-ope5.lnk.partially.cryptonar")) returned 1 [0162.898] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\videos.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Videos.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\videos.lnk.partially.cryptonar")) returned 1 [0162.900] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VO NMR.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vo nmr.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VO NMR.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vo nmr.lnk.partially.cryptonar")) returned 1 [0162.902] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VwNZCeNmXeZXDF.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vwnzcenmxezxdf.flv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\VwNZCeNmXeZXDF.flv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\vwnzcenmxezxdf.flv.lnk.partially.cryptonar")) returned 1 [0162.905] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAfknykUW.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wafknykuw.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WAfknykUW.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wafknykuw.lnk.partially.cryptonar")) returned 1 [0162.907] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WcSmnJYJusApLn7w.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wcsmnjyjusapln7w.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WcSmnJYJusApLn7w.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wcsmnjyjusapln7w.lnk.partially.cryptonar")) returned 1 [0162.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WQZuHa.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wqzuha.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WQZuHa.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wqzuha.lnk.partially.cryptonar")) returned 1 [0162.912] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WSRthPx6_6.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wsrthpx6_6.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\WSRthPx6_6.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wsrthpx6_6.lnk.partially.cryptonar")) returned 1 [0162.921] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wwBVgT.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wwbvgt.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\wwBVgT.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\wwbvgt.lnk.partially.cryptonar")) returned 1 [0162.925] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xAwG.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xawg.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\xAwG.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xawg.lnk.partially.cryptonar")) returned 1 [0162.992] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XC0QaZ971FDwvVS.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xc0qaz971fdwvvs.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XC0QaZ971FDwvVS.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xc0qaz971fdwvvs.lnk.partially.cryptonar")) returned 1 [0162.996] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XIbt.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xibt.flv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XIbt.flv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xibt.flv.lnk.partially.cryptonar")) returned 1 [0162.999] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xj3k3t0Ywy0r7t.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xj3k3t0ywy0r7t.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xj3k3t0Ywy0r7t.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xj3k3t0ywy0r7t.lnk.partially.cryptonar")) returned 1 [0163.003] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xmpbe7_rf7An G26F4.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xmpbe7_rf7an g26f4.flv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Xmpbe7_rf7An G26F4.flv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xmpbe7_rf7an g26f4.flv.lnk.partially.cryptonar")) returned 1 [0163.006] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XyAtoRv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xyatorv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XyAtoRv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xyatorv.lnk.partially.cryptonar")) returned 1 [0163.010] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XYGU.ots.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xygu.ots.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XYGU.ots.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xygu.ots.lnk.partially.cryptonar")) returned 1 [0163.014] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XZ4WyHZ Dwcnx-.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xz4wyhz dwcnx-.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\XZ4WyHZ Dwcnx-.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\xz4wyhz dwcnx-.lnk.partially.cryptonar")) returned 1 [0163.017] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Y GijTQtuvwPjERHtR.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y gijtqtuvwpjerhtr.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Y GijTQtuvwPjERHtR.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y gijtqtuvwpjerhtr.lnk.partially.cryptonar")) returned 1 [0163.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y0gzp4UVbHis_xF0Q.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y0gzp4uvbhis_xf0q.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\y0gzp4UVbHis_xF0Q.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\y0gzp4uvbhis_xf0q.lnk.partially.cryptonar")) returned 1 [0163.028] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YKYSLmf-FjPKHaIhoe.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ykyslmf-fjpkhaihoe.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\YKYSLmf-FjPKHaIhoe.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ykyslmf-fjpkhaihoe.lnk.partially.cryptonar")) returned 1 [0163.032] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylxkqYRJ3HaAzqpG.flv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ylxkqyrj3haazqpg.flv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\ylxkqYRJ3HaAzqpG.flv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ylxkqyrj3haazqpg.flv.lnk.partially.cryptonar")) returned 1 [0163.035] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yMrWmFy4iaqomTaiyj.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ymrwmfy4iaqomtaiyj.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\yMrWmFy4iaqomTaiyj.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\ymrwmfy4iaqomtaiyj.lnk.partially.cryptonar")) returned 1 [0163.037] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zF0dG.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zf0dg.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zF0dG.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zf0dg.lnk.partially.cryptonar")) returned 1 [0163.039] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zlh4AJ61o.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zlh4aj61o.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\Zlh4AJ61o.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zlh4aj61o.lnk.partially.cryptonar")) returned 1 [0163.042] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zV-BMR0VZ7KmWw.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zv-bmr0vz7kmww.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\zV-BMR0VZ7KmWw.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\zv-bmr0vz7kmww.lnk.partially.cryptonar")) returned 1 [0163.044] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_-VxvYevz4sNof.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_-vxvyevz4snof.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_-VxvYevz4sNof.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_-vxvyevz4snof.lnk.partially.cryptonar")) returned 1 [0163.047] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_77BG7uv.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_77bg7uv.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_77BG7uv.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_77bg7uv.lnk.partially.cryptonar")) returned 1 [0163.105] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_ssQGx.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_ssqgx.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_ssQGx.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_ssqgx.lnk.partially.cryptonar")) returned 1 [0163.107] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_u3l0.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_u3l0.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\_u3l0.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\_u3l0.lnk.partially.cryptonar")) returned 1 [0163.138] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1bc9bbbe61f14501.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1bc9bbbe61f14501.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1bc9bbbe61f14501.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.164] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\319f01bf9fe00f2d.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\319f01bf9fe00f2d.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\319f01bf9fe00f2d.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.168] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\5f7b5f1e01b83767.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\5f7b5f1e01b83767.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\5f7b5f1e01b83767.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\61ebb1e65cfcb8da.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\61ebb1e65cfcb8da.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\61ebb1e65cfcb8da.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\6d2bac8f1edf6668.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\6d2bac8f1edf6668.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\6d2bac8f1edf6668.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\7e4dca80246863e3.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\7e4dca80246863e3.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\7e4dca80246863e3.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.265] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\969252ce11249fdd.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\969252ce11249fdd.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\969252ce11249fdd.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.287] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\9cfafb05ce914942.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\9cfafb05ce914942.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\9cfafb05ce914942.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.291] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\b8ab77100df80ab2.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\b8ab77100df80ab2.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\b8ab77100df80ab2.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.306] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\d00655d2aa12ff6d.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\d00655d2aa12ff6d.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\d00655d2aa12ff6d.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\eb282ead62b4db87.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\eb282ead62b4db87.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\eb282ead62b4db87.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.331] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\f01b4d95cf55d32a.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\f01b4d95cf55d32a.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\f01b4d95cf55d32a.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\fb3b0dbfee58fac8.automaticdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\fb3b0dbfee58fac8.automaticDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\fb3b0dbfee58fac8.automaticdestinations-ms.partially.cryptonar")) returned 1 [0163.377] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\28c8b86deab549a1.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\28c8b86deab549a1.customdestinations-ms.partially.cryptonar")) returned 1 [0163.450] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\590aee7bdd69b59b.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\590aee7bdd69b59b.customDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\590aee7bdd69b59b.customdestinations-ms.partially.cryptonar")) returned 1 [0163.455] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5d696d521de238c3.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5d696d521de238c3.customDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5d696d521de238c3.customdestinations-ms.partially.cryptonar")) returned 1 [0163.459] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms.partially.cryptonar")) returned 1 [0163.500] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\969252ce11249fdd.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\969252ce11249fdd.customDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\969252ce11249fdd.customdestinations-ms.partially.cryptonar")) returned 1 [0163.505] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\d93f411851d7c929.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\d93f411851d7c929.customDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\d93f411851d7c929.customdestinations-ms.partially.cryptonar")) returned 1 [0163.509] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\f01b4d95cf55d32a.customdestinations-ms"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\f01b4d95cf55d32a.customDestinations-ms.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\f01b4d95cf55d32a.customdestinations-ms.partially.cryptonar")) returned 1 [0163.515] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget.partially.cryptonar")) returned 1 [0163.519] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink.partially.cryptonar")) returned 1 [0163.539] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini.partially.cryptonar")) returned 1 [0163.542] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs.partially.cryptonar")) returned 1 [0163.546] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk.partially.cryptonar")) returned 1 [0163.549] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail.partially.cryptonar")) returned 1 [0163.551] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini.partially.cryptonar")) returned 1 [0163.553] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini.partially.cryptonar")) returned 1 [0163.557] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\onedrive.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\OneDrive.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\onedrive.lnk.partially.cryptonar")) returned 1 [0163.560] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\desktop.ini.partially.cryptonar")) returned 1 [0163.563] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Magnify.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\magnify.lnk.partially.cryptonar")) returned 1 [0163.568] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\Narrator.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\narrator.lnk.partially.cryptonar")) returned 1 [0163.574] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\On-Screen Keyboard.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessibility\\on-screen keyboard.lnk.partially.cryptonar")) returned 1 [0163.578] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini.partially.cryptonar")) returned 1 [0163.584] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\internet explorer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Internet Explorer.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\internet explorer.lnk.partially.cryptonar")) returned 1 [0163.588] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk.partially.cryptonar")) returned 1 [0163.594] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini.partially.cryptonar")) returned 1 [0163.603] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini.partially.cryptonar")) returned 1 [0163.607] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini.partially.cryptonar")) returned 1 [0163.631] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\send to onenote.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Send to OneNote.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\send to onenote.lnk.partially.cryptonar")) returned 1 [0163.636] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Command Prompt.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\command prompt.lnk.partially.cryptonar")) returned 1 [0163.640] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\computer.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\computer.lnk.partially.cryptonar")) returned 1 [0163.644] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Control Panel.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\control panel.lnk.partially.cryptonar")) returned 1 [0163.648] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Default Apps.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\default apps.lnk.partially.cryptonar")) returned 1 [0163.654] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\desktop.ini.partially.cryptonar")) returned 1 [0163.658] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Devices.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\devices.lnk.partially.cryptonar")) returned 1 [0163.661] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\File Explorer.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\file explorer.lnk.partially.cryptonar")) returned 1 [0163.663] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Run.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\run.lnk.partially.cryptonar")) returned 1 [0163.672] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\System Tools\\Windows Defender.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\system tools\\windows defender.lnk.partially.cryptonar")) returned 1 [0163.676] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\desktop.ini.partially.cryptonar")) returned 1 [0163.680] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell (x86).lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell (x86).lnk.partially.cryptonar")) returned 1 [0163.684] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise (x86).lnk.partially.cryptonar")) returned 1 [0163.689] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell ISE.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell ise.lnk.partially.cryptonar")) returned 1 [0163.694] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Windows PowerShell\\Windows PowerShell.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\windows powershell\\windows powershell.lnk.partially.cryptonar")) returned 1 [0163.710] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.partially.cryptonar")) returned 1 [0163.714] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1440_900_POS4.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\microsoft\\windows\\themes\\cachedfiles\\cachedimage_1440_900_pos4.jpg.partially.cryptonar")) returned 1 [0163.719] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles.ini.partially.cryptonar")) returned 1 [0163.724] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170518000419.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170518000419.partially.cryptonar")) returned 1 [0163.730] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\addons.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\addons.json.partially.cryptonar")) returned 1 [0163.733] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\alternateservices.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\AlternateServices.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\alternateservices.txt.fully.cryptonar")) returned 1 [0163.762] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-addons.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-addons.json.partially.cryptonar")) returned 1 [0163.770] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-gfx.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-gfx.json.partially.cryptonar")) returned 1 [0163.840] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist-plugins.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist-plugins.json.partially.cryptonar")) returned 1 [0163.884] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\blocklist.xml.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\blocklist.xml.partially.cryptonar")) returned 1 [0164.142] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cert8.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cert8.db.partially.cryptonar")) returned 1 [0164.146] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\compatibility.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\compatibility.ini.partially.cryptonar")) returned 1 [0164.174] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\containers.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\containers.json.partially.cryptonar")) returned 1 [0164.202] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\content-prefs.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\content-prefs.sqlite.partially.cryptonar")) returned 1 [0164.219] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\cookies.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\cookies.sqlite.partially.cryptonar")) returned 1 [0164.225] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.ini.partially.cryptonar")) returned 1 [0164.274] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\extensions.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\extensions.json.partially.cryptonar")) returned 1 [0164.367] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\formhistory.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\formhistory.sqlite.partially.cryptonar")) returned 1 [0164.374] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\key3.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\key3.db.partially.cryptonar")) returned 1 [0164.380] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\kinto.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\kinto.sqlite.partially.cryptonar")) returned 1 [0164.498] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\mimeTypes.rdf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\mimetypes.rdf.partially.cryptonar")) returned 1 [0164.502] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\parent.lock"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\parent.lock.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\parent.lock.partially.cryptonar")) returned 1 [0164.524] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\permissions.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\permissions.sqlite.partially.cryptonar")) returned 1 [0164.553] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\places.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\places.sqlite.partially.cryptonar")) returned 1 [0164.604] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\pluginreg.dat.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\pluginreg.dat.partially.cryptonar")) returned 1 [0165.007] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\prefs.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\prefs.js.partially.cryptonar")) returned 1 [0165.025] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\revocations.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\revocations.txt.fully.cryptonar")) returned 1 [0165.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\search.json.mozlz4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\search.json.mozlz4.partially.cryptonar")) returned 1 [0165.161] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\secmod.db.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\secmod.db.partially.cryptonar")) returned 1 [0165.165] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\securitypreloadstate.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SecurityPreloadState.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\securitypreloadstate.txt.fully.cryptonar")) returned 1 [0165.169] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionCheckpoints.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessioncheckpoints.json.partially.cryptonar")) returned 1 [0165.233] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore.js.partially.cryptonar")) returned 1 [0165.257] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\SiteSecurityServiceState.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sitesecurityservicestate.txt.fully.cryptonar")) returned 1 [0165.261] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage.sqlite.partially.cryptonar")) returned 1 [0165.276] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\times.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\times.json.partially.cryptonar")) returned 1 [0165.334] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\webappsstore.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\webappsstore.sqlite.partially.cryptonar")) returned 1 [0165.401] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\xulstore.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\xulstore.json.partially.cryptonar")) returned 1 [0165.426] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kL0o5I+exwq3TXuLDkMF9w==.jsonlz4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\bookmarkbackups\\bookmarks-2017-05-24_14_kl0o5i+exwq3txuldkmf9w==.jsonlz4.partially.cryptonar")) returned 1 [0165.432] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\crashes\\store.json.mozlz4.partially.cryptonar")) returned 1 [0165.441] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\session-state.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\session-state.json.partially.cryptonar")) returned 1 [0165.445] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\state.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\state.json.partially.cryptonar")) returned 1 [0165.569] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592260754.fe0bc3a3-866c-458a-ad46-a730981653d6.main.jsonlz4.partially.cryptonar")) returned 1 [0165.652] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495592289365.f6bd7dec-4421-47ce-b829-1080689ec7ca.main.jsonlz4.partially.cryptonar")) returned 1 [0165.660] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495596278120.31e5ce24-c2bf-486b-b29e-534113b7c6dc.main.jsonlz4.partially.cryptonar")) returned 1 [0165.872] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597242414.2e462298-aeda-4ee5-bf23-a73bdf74947f.main.jsonlz4.partially.cryptonar")) returned 1 [0165.879] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495597261897.a7b36bf3-f762-448c-874e-9388e91739b4.main.jsonlz4.partially.cryptonar")) returned 1 [0165.955] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495599783008.23c86977-85eb-412a-ae39-c4c6ea9a5744.main.jsonlz4.partially.cryptonar")) returned 1 [0165.961] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\datareporting\\archived\\2017-05\\1495600032629.d896fec9-1a7a-4db1-a3a2-e46d95b631a5.main.jsonlz4.partially.cryptonar")) returned 1 [0166.011] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.dll.partially.cryptonar")) returned 1 [0166.015] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-gmpopenh264\\1.6\\gmpopenh264.info.partially.cryptonar")) returned 1 [0166.021] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\LICENSE.txt.fully.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\license.txt.fully.cryptonar")) returned 1 [0166.025] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\manifest.json.partially.cryptonar")) returned 1 [0166.030] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.partially.cryptonar")) returned 1 [0166.054] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\gmp-widevinecdm\\1.4.8.903\\widevinecdm.dll.lib.partially.cryptonar")) returned 1 [0166.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\saved-telemetry-pings\\d896fec9-1a7a-4db1-a3a2-e46d95b631a5.partially.cryptonar")) returned 1 [0166.154] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\previous.js.partially.cryptonar")) returned 1 [0166.190] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\sessionstore-backups\\upgrade.js-20170518000419.partially.cryptonar")) returned 1 [0166.195] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata.partially.cryptonar")) returned 1 [0166.200] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\.metadata-v2.partially.cryptonar")) returned 1 [0166.211] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\chrome\\idb\\2918063365piupsah.sqlite.partially.cryptonar")) returned 1 [0166.215] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata.partially.cryptonar")) returned 1 [0166.222] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\.metadata-v2.partially.cryptonar")) returned 1 [0166.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.partially.cryptonar")) returned 1 [0166.352] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\mozilla\\firefox\\profiles\\8i341t8m.default\\storage\\permanent\\moz-safe-about+home\\idb\\818200132aebmoouht.files\\1.partially.cryptonar")) returned 1 [0166.357] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\Skype\\RootTools\\roottools.conf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\skype\\roottools\\roottools.conf.partially.cryptonar")) returned 1 [0166.362] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\Aclviho ASldjfl.contact.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\aclviho asldjfl.contact.partially.cryptonar")) returned 1 [0166.390] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\asdlfk poopvy.contact.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\asdlfk poopvy.contact.partially.cryptonar")) returned 1 [0166.394] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\chucu jadnvk.contact.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\chucu jadnvk.contact.partially.cryptonar")) returned 1 [0166.397] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\desktop.ini.partially.cryptonar")) returned 1 [0166.428] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\lulcit amkdfe.contact.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\lulcit amkdfe.contact.partially.cryptonar")) returned 1 [0166.437] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Contacts\\sikvnb huvuib.contact.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\contacts\\sikvnb huvuib.contact.partially.cryptonar")) returned 1 [0166.440] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-CYZSppLHBvi1.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\-cyzspplhbvi1.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\-CYZSppLHBvi1.odp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\-cyzspplhbvi1.odp.partially.cryptonar")) returned 1 [0166.442] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\1iWGUBnx.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\1iwgubnx.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\1iWGUBnx.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\1iwgubnx.bmp.partially.cryptonar")) returned 1 [0166.445] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\1TPIX8kXBNeaI3de.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\1tpix8kxbneai3de.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\1TPIX8kXBNeaI3de.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\1tpix8kxbneai3de.jpg.partially.cryptonar")) returned 1 [0166.446] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3KD1xPgSRHV.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\3kd1xpgsrhv.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3KD1xPgSRHV.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\3kd1xpgsrhv.mp3.partially.cryptonar")) returned 1 [0166.448] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3OHSMtfV2K0brrEePc.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\3ohsmtfv2k0brreepc.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\3OHSMtfV2K0brrEePc.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\3ohsmtfv2k0brreepc.avi.partially.cryptonar")) returned 1 [0166.449] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\8lhILUuMMTbQ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\8lhiluummtbq.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\8lhILUuMMTbQ.mkv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\8lhiluummtbq.mkv.partially.cryptonar")) returned 1 [0166.455] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\8xCw.png" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\8xcw.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\8xCw.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\8xcw.png.partially.cryptonar")) returned 1 [0166.458] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\96peT01RIJDeo9 p_WW.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\96pet01rijdeo9 p_ww.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\96peT01RIJDeo9 p_WW.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\96pet01rijdeo9 p_ww.mp4.partially.cryptonar")) returned 1 [0166.468] SetErrorMode (uMode=0x0) returned 0x1 [0166.470] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods", lpFilePart=0x0) returned 0x2e [0166.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods", lpFilePart=0x0) returned 0x2e [0166.471] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods", lpFilePart=0x0) returned 0x2e [0166.471] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\aykujqikdup8.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0166.472] GetFileType (hFile=0x230) returned 0x1 [0166.472] SetErrorMode (uMode=0x0) returned 0x1 [0166.472] GetFileType (hFile=0x230) returned 0x1 [0166.472] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.473] ReadFile (in: hFile=0x230, lpBuffer=0x2701e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2701e70*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0166.473] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0166.473] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.473] WriteFile (in: hFile=0x230, lpBuffer=0x2701e70*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2701e70*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0166.474] CloseHandle (hObject=0x230) returned 1 [0166.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods", lpFilePart=0x0) returned 0x2e [0166.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods", lpFilePart=0x0) returned 0x2e [0166.474] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods.partially.cryptoNar", lpFilePart=0x0) returned 0x42 [0166.474] SetErrorMode (uMode=0x1) returned 0x0 [0166.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\aykujqikdup8.ods"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x275f5080, ftCreationTime.dwHighDateTime=0x1d41090, ftLastAccessTime.dwLowDateTime=0xc2c1abe0, ftLastAccessTime.dwHighDateTime=0x1d41ea0, ftLastWriteTime.dwLowDateTime=0x65ad5d13, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16230)) returned 1 [0166.474] SetErrorMode (uMode=0x0) returned 0x1 [0166.474] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\aykujqikdup8.ods"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\aykuJQIkduP8.ods.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\aykujqikdup8.ods.partially.cryptonar")) returned 1 [0166.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0166.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0166.476] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0166.476] SetErrorMode (uMode=0x1) returned 0x0 [0166.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0166.477] GetFileType (hFile=0x230) returned 0x1 [0166.477] SetErrorMode (uMode=0x0) returned 0x1 [0166.477] GetFileType (hFile=0x230) returned 0x1 [0166.477] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.478] ReadFile (in: hFile=0x230, lpBuffer=0x2705280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2705280*, lpNumberOfBytesRead=0x5ae8b8*=0x11a, lpOverlapped=0x0) returned 1 [0166.478] ReadFile (in: hFile=0x230, lpBuffer=0x2705280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2705280*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0166.478] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.478] WriteFile (in: hFile=0x230, lpBuffer=0x2705280*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2705280*, lpNumberOfBytesWritten=0x5ae8a8*=0x11a, lpOverlapped=0x0) returned 1 [0166.478] CloseHandle (hObject=0x230) returned 1 [0166.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0166.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x29 [0166.478] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini.partially.cryptoNar", lpFilePart=0x0) returned 0x3d [0166.478] SetErrorMode (uMode=0x1) returned 0x0 [0166.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x65ad5d13, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0166.479] SetErrorMode (uMode=0x0) returned 0x1 [0166.479] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\desktop.ini.partially.cryptonar")) returned 1 [0166.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv", lpFilePart=0x0) returned 0x34 [0166.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv", lpFilePart=0x0) returned 0x34 [0166.480] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv", lpFilePart=0x0) returned 0x34 [0166.480] SetErrorMode (uMode=0x1) returned 0x0 [0166.480] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\dh 5pfzkfjxdvo1xk0.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0166.482] GetFileType (hFile=0x230) returned 0x1 [0166.482] SetErrorMode (uMode=0x0) returned 0x1 [0166.482] GetFileType (hFile=0x230) returned 0x1 [0166.482] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.482] ReadFile (in: hFile=0x230, lpBuffer=0x2708528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2708528*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0166.482] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0166.482] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.482] WriteFile (in: hFile=0x230, lpBuffer=0x2708528*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2708528*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0166.483] CloseHandle (hObject=0x230) returned 1 [0166.486] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv", lpFilePart=0x0) returned 0x34 [0166.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv", lpFilePart=0x0) returned 0x34 [0166.487] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv.partially.cryptoNar", lpFilePart=0x0) returned 0x48 [0166.487] SetErrorMode (uMode=0x1) returned 0x0 [0166.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\dh 5pfzkfjxdvo1xk0.mkv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa08aba20, ftCreationTime.dwHighDateTime=0x1d4176c, ftLastAccessTime.dwLowDateTime=0xb4adfb10, ftLastAccessTime.dwHighDateTime=0x1d4147f, ftLastWriteTime.dwLowDateTime=0x65afbf6e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x140f6)) returned 1 [0166.487] SetErrorMode (uMode=0x0) returned 0x1 [0166.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\dh 5pfzkfjxdvo1xk0.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Dh 5PFzKfjxDvo1Xk0.mkv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\dh 5pfzkfjxdvo1xk0.mkv.partially.cryptonar")) returned 1 [0166.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv", lpFilePart=0x0) returned 0x2d [0166.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv", lpFilePart=0x0) returned 0x2d [0166.489] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv", lpFilePart=0x0) returned 0x2d [0166.489] SetErrorMode (uMode=0x1) returned 0x0 [0166.489] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eginqcpsekj.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0166.722] GetFileType (hFile=0x230) returned 0x1 [0166.722] SetErrorMode (uMode=0x0) returned 0x1 [0166.722] GetFileType (hFile=0x230) returned 0x1 [0166.722] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.722] ReadFile (in: hFile=0x230, lpBuffer=0x270b9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270b9b8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0166.723] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0166.723] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.723] WriteFile (in: hFile=0x230, lpBuffer=0x270b9b8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270b9b8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0166.723] CloseHandle (hObject=0x230) returned 1 [0166.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv", lpFilePart=0x0) returned 0x2d [0166.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv", lpFilePart=0x0) returned 0x2d [0166.725] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv.partially.cryptoNar", lpFilePart=0x0) returned 0x41 [0166.725] SetErrorMode (uMode=0x1) returned 0x0 [0166.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eginqcpsekj.mkv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8c0cfa0, ftCreationTime.dwHighDateTime=0x1d415fd, ftLastAccessTime.dwLowDateTime=0xe9720480, ftLastAccessTime.dwHighDateTime=0x1d416f1, ftLastWriteTime.dwLowDateTime=0x65d38451, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x65c6)) returned 1 [0166.726] SetErrorMode (uMode=0x0) returned 0x1 [0166.726] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eginqcpsekj.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\eGiNqcpsEkJ.mkv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\eginqcpsekj.mkv.partially.cryptonar")) returned 1 [0166.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3", lpFilePart=0x0) returned 0x26 [0166.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3", lpFilePart=0x0) returned 0x26 [0166.730] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3", lpFilePart=0x0) returned 0x26 [0166.730] SetErrorMode (uMode=0x1) returned 0x0 [0166.730] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fffi.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0166.733] GetFileType (hFile=0x230) returned 0x1 [0166.733] SetErrorMode (uMode=0x0) returned 0x1 [0166.733] GetFileType (hFile=0x230) returned 0x1 [0166.733] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.733] ReadFile (in: hFile=0x230, lpBuffer=0x270eda8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x270eda8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0166.733] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0166.733] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.733] WriteFile (in: hFile=0x230, lpBuffer=0x270eda8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x270eda8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0166.734] CloseHandle (hObject=0x230) returned 1 [0166.734] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3", lpFilePart=0x0) returned 0x26 [0166.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3", lpFilePart=0x0) returned 0x26 [0166.735] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3.partially.cryptoNar", lpFilePart=0x0) returned 0x3a [0166.735] SetErrorMode (uMode=0x1) returned 0x0 [0166.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fffi.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fdd4500, ftCreationTime.dwHighDateTime=0x1d41e36, ftLastAccessTime.dwLowDateTime=0x4582e8b0, ftLastAccessTime.dwHighDateTime=0x1d41e6e, ftLastWriteTime.dwLowDateTime=0x65d5ed15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11946)) returned 1 [0166.735] SetErrorMode (uMode=0x0) returned 0x1 [0166.735] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fffi.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\fFfi.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fffi.mp3.partially.cryptonar")) returned 1 [0166.738] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg", lpFilePart=0x0) returned 0x32 [0166.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg", lpFilePart=0x0) returned 0x32 [0166.739] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg", lpFilePart=0x0) returned 0x32 [0166.739] SetErrorMode (uMode=0x1) returned 0x0 [0166.739] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fsrhzusqxh_dydej.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0166.741] GetFileType (hFile=0x230) returned 0x1 [0166.741] SetErrorMode (uMode=0x0) returned 0x1 [0166.741] GetFileType (hFile=0x230) returned 0x1 [0166.741] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.741] ReadFile (in: hFile=0x230, lpBuffer=0x27121b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27121b8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0166.742] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0166.742] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.742] WriteFile (in: hFile=0x230, lpBuffer=0x27121b8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27121b8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0166.742] CloseHandle (hObject=0x230) returned 1 [0166.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg", lpFilePart=0x0) returned 0x32 [0166.744] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg", lpFilePart=0x0) returned 0x32 [0166.745] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x46 [0166.745] SetErrorMode (uMode=0x1) returned 0x0 [0166.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fsrhzusqxh_dydej.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf47b1060, ftCreationTime.dwHighDateTime=0x1d4124b, ftLastAccessTime.dwLowDateTime=0xd2a6dae0, ftLastAccessTime.dwHighDateTime=0x1d41706, ftLastWriteTime.dwLowDateTime=0x65d5ed15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1528c)) returned 1 [0166.745] SetErrorMode (uMode=0x0) returned 0x1 [0166.745] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fsrhzusqxh_dydej.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FsRhzUsqXh_dydEj.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fsrhzusqxh_dydej.jpg.partially.cryptonar")) returned 1 [0166.750] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi", lpFilePart=0x0) returned 0x30 [0166.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi", lpFilePart=0x0) returned 0x30 [0166.751] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi", lpFilePart=0x0) returned 0x30 [0166.751] SetErrorMode (uMode=0x1) returned 0x0 [0166.751] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fzlfeks4iqgbze.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0166.753] GetFileType (hFile=0x230) returned 0x1 [0166.753] SetErrorMode (uMode=0x0) returned 0x1 [0166.753] GetFileType (hFile=0x230) returned 0x1 [0166.753] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.753] ReadFile (in: hFile=0x230, lpBuffer=0x2715648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2715648*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0166.753] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0166.753] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.753] WriteFile (in: hFile=0x230, lpBuffer=0x2715648*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2715648*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0166.754] CloseHandle (hObject=0x230) returned 1 [0166.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi", lpFilePart=0x0) returned 0x30 [0166.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi", lpFilePart=0x0) returned 0x30 [0166.759] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x44 [0166.760] SetErrorMode (uMode=0x1) returned 0x0 [0166.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fzlfeks4iqgbze.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1215140, ftCreationTime.dwHighDateTime=0x1d414fb, ftLastAccessTime.dwLowDateTime=0xbfda7000, ftLastAccessTime.dwHighDateTime=0x1d41ed8, ftLastWriteTime.dwLowDateTime=0x65d845a8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3324)) returned 1 [0166.760] SetErrorMode (uMode=0x0) returned 0x1 [0166.760] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fzlfeks4iqgbze.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\FzLFEKS4IQGBZE.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\fzlfeks4iqgbze.avi.partially.cryptonar")) returned 1 [0166.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif", lpFilePart=0x0) returned 0x29 [0166.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif", lpFilePart=0x0) returned 0x29 [0166.768] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif", lpFilePart=0x0) returned 0x29 [0166.768] SetErrorMode (uMode=0x1) returned 0x0 [0166.768] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\gmsi21c.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0166.770] GetFileType (hFile=0x230) returned 0x1 [0166.770] SetErrorMode (uMode=0x0) returned 0x1 [0166.770] GetFileType (hFile=0x230) returned 0x1 [0166.770] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.770] ReadFile (in: hFile=0x230, lpBuffer=0x2718a80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2718a80*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0166.771] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0166.771] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.771] WriteFile (in: hFile=0x230, lpBuffer=0x2718a80*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2718a80*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0166.771] CloseHandle (hObject=0x230) returned 1 [0166.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif", lpFilePart=0x0) returned 0x29 [0166.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif", lpFilePart=0x0) returned 0x29 [0166.774] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif.partially.cryptoNar", lpFilePart=0x0) returned 0x3d [0166.774] SetErrorMode (uMode=0x1) returned 0x0 [0166.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\gmsi21c.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5512a90, ftCreationTime.dwHighDateTime=0x1d41f7c, ftLastAccessTime.dwLowDateTime=0x4597f080, ftLastAccessTime.dwHighDateTime=0x1d419fe, ftLastWriteTime.dwLowDateTime=0x65daa825, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15bba)) returned 1 [0166.775] SetErrorMode (uMode=0x0) returned 0x1 [0166.775] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\gmsi21c.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\gMSI21c.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\gmsi21c.gif.partially.cryptonar")) returned 1 [0166.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp", lpFilePart=0x0) returned 0x31 [0166.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp", lpFilePart=0x0) returned 0x31 [0166.779] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp", lpFilePart=0x0) returned 0x31 [0166.784] SetErrorMode (uMode=0x1) returned 0x0 [0166.784] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\iwgo63h3pxnol8t.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0166.787] GetFileType (hFile=0x230) returned 0x1 [0166.787] SetErrorMode (uMode=0x0) returned 0x1 [0166.787] GetFileType (hFile=0x230) returned 0x1 [0166.787] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.787] ReadFile (in: hFile=0x230, lpBuffer=0x271bea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271bea8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0166.787] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0166.787] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0166.788] WriteFile (in: hFile=0x230, lpBuffer=0x271bea8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271bea8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0166.788] CloseHandle (hObject=0x230) returned 1 [0166.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp", lpFilePart=0x0) returned 0x31 [0166.789] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp", lpFilePart=0x0) returned 0x31 [0166.790] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp.partially.cryptoNar", lpFilePart=0x0) returned 0x45 [0166.790] SetErrorMode (uMode=0x1) returned 0x0 [0166.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\iwgo63h3pxnol8t.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e7a2bc0, ftCreationTime.dwHighDateTime=0x1d41cac, ftLastAccessTime.dwLowDateTime=0x4a40f6f0, ftLastAccessTime.dwHighDateTime=0x1d41db3, ftLastWriteTime.dwLowDateTime=0x65dd0bc6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1198e)) returned 1 [0166.790] SetErrorMode (uMode=0x0) returned 0x1 [0166.790] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\iwgo63h3pxnol8t.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\iWgo63h3PxnoL8T.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\iwgo63h3pxnol8t.bmp.partially.cryptonar")) returned 1 [0166.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv", lpFilePart=0x0) returned 0x29 [0166.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv", lpFilePart=0x0) returned 0x29 [0166.796] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv", lpFilePart=0x0) returned 0x29 [0166.796] SetErrorMode (uMode=0x1) returned 0x0 [0166.796] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\kpgw-lz.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.063] GetFileType (hFile=0x230) returned 0x1 [0167.063] SetErrorMode (uMode=0x0) returned 0x1 [0167.063] GetFileType (hFile=0x230) returned 0x1 [0167.063] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.063] ReadFile (in: hFile=0x230, lpBuffer=0x271f2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x271f2e0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.063] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.063] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.063] WriteFile (in: hFile=0x230, lpBuffer=0x271f2e0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x271f2e0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.064] CloseHandle (hObject=0x230) returned 1 [0167.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv", lpFilePart=0x0) returned 0x29 [0167.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv", lpFilePart=0x0) returned 0x29 [0167.065] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv.partially.cryptoNar", lpFilePart=0x0) returned 0x3d [0167.065] SetErrorMode (uMode=0x1) returned 0x0 [0167.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\kpgw-lz.mkv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bdde5f0, ftCreationTime.dwHighDateTime=0x1d41a76, ftLastAccessTime.dwLowDateTime=0xe9dba900, ftLastAccessTime.dwHighDateTime=0x1d41aa5, ftLastWriteTime.dwLowDateTime=0x6607f64c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xeacd)) returned 1 [0167.065] SetErrorMode (uMode=0x0) returned 0x1 [0167.065] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\kpgw-lz.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\KpgW-Lz.mkv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\kpgw-lz.mkv.partially.cryptonar")) returned 1 [0167.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv", lpFilePart=0x0) returned 0x34 [0167.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv", lpFilePart=0x0) returned 0x34 [0167.070] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv", lpFilePart=0x0) returned 0x34 [0167.071] SetErrorMode (uMode=0x1) returned 0x0 [0167.071] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lthipwtmpfq8_gkz5m.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.075] GetFileType (hFile=0x230) returned 0x1 [0167.075] SetErrorMode (uMode=0x0) returned 0x1 [0167.075] GetFileType (hFile=0x230) returned 0x1 [0167.085] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.085] ReadFile (in: hFile=0x230, lpBuffer=0x2722730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2722730*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.086] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.086] WriteFile (in: hFile=0x230, lpBuffer=0x2722730*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2722730*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.087] CloseHandle (hObject=0x230) returned 1 [0167.088] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv", lpFilePart=0x0) returned 0x34 [0167.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv", lpFilePart=0x0) returned 0x34 [0167.089] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv.partially.cryptoNar", lpFilePart=0x0) returned 0x48 [0167.089] SetErrorMode (uMode=0x1) returned 0x0 [0167.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lthipwtmpfq8_gkz5m.csv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8486b820, ftCreationTime.dwHighDateTime=0x1d417e8, ftLastAccessTime.dwLowDateTime=0xe82aadb0, ftLastAccessTime.dwHighDateTime=0x1d416c0, ftLastWriteTime.dwLowDateTime=0x660a5d7b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfac0)) returned 1 [0167.089] SetErrorMode (uMode=0x0) returned 0x1 [0167.089] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lthipwtmpfq8_gkz5m.csv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\LtHIpwTMPfQ8_GKz5m.csv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\lthipwtmpfq8_gkz5m.csv.partially.cryptonar")) returned 1 [0167.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav", lpFilePart=0x0) returned 0x2e [0167.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav", lpFilePart=0x0) returned 0x2e [0167.093] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav", lpFilePart=0x0) returned 0x2e [0167.093] SetErrorMode (uMode=0x1) returned 0x0 [0167.093] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\neert0qy1x1d.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.095] GetFileType (hFile=0x230) returned 0x1 [0167.095] SetErrorMode (uMode=0x0) returned 0x1 [0167.095] GetFileType (hFile=0x230) returned 0x1 [0167.095] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.096] ReadFile (in: hFile=0x230, lpBuffer=0x2725bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2725bd0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.096] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.096] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.096] WriteFile (in: hFile=0x230, lpBuffer=0x2725bd0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2725bd0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.096] CloseHandle (hObject=0x230) returned 1 [0167.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav", lpFilePart=0x0) returned 0x2e [0167.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav", lpFilePart=0x0) returned 0x2e [0167.097] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav.partially.cryptoNar", lpFilePart=0x0) returned 0x42 [0167.097] SetErrorMode (uMode=0x1) returned 0x0 [0167.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\neert0qy1x1d.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f0254a0, ftCreationTime.dwHighDateTime=0x1d41fc5, ftLastAccessTime.dwLowDateTime=0xc5b534e0, ftLastAccessTime.dwHighDateTime=0x1d41bd8, ftLastWriteTime.dwLowDateTime=0x660cdcf6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x152fe)) returned 1 [0167.098] SetErrorMode (uMode=0x0) returned 0x1 [0167.098] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\neert0qy1x1d.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\neert0qy1X1d.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\neert0qy1x1d.wav.partially.cryptonar")) returned 1 [0167.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg", lpFilePart=0x0) returned 0x30 [0167.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg", lpFilePart=0x0) returned 0x30 [0167.100] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg", lpFilePart=0x0) returned 0x30 [0167.101] SetErrorMode (uMode=0x1) returned 0x0 [0167.101] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ol5zf8w7vf x6l.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.104] GetFileType (hFile=0x230) returned 0x1 [0167.104] SetErrorMode (uMode=0x0) returned 0x1 [0167.104] GetFileType (hFile=0x230) returned 0x1 [0167.104] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.104] ReadFile (in: hFile=0x230, lpBuffer=0x2729030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2729030*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.105] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.105] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.105] WriteFile (in: hFile=0x230, lpBuffer=0x2729030*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2729030*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.105] CloseHandle (hObject=0x230) returned 1 [0167.108] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg", lpFilePart=0x0) returned 0x30 [0167.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg", lpFilePart=0x0) returned 0x30 [0167.109] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x44 [0167.109] SetErrorMode (uMode=0x1) returned 0x0 [0167.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ol5zf8w7vf x6l.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ba6d940, ftCreationTime.dwHighDateTime=0x1d41dbe, ftLastAccessTime.dwLowDateTime=0x8bf3d400, ftLastAccessTime.dwHighDateTime=0x1d417e1, ftLastWriteTime.dwLowDateTime=0x660cdcf6, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd4e7)) returned 1 [0167.109] SetErrorMode (uMode=0x0) returned 0x1 [0167.109] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ol5zf8w7vf x6l.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\ol5ZF8w7Vf X6l.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ol5zf8w7vf x6l.jpg.partially.cryptonar")) returned 1 [0167.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx", lpFilePart=0x0) returned 0x2f [0167.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx", lpFilePart=0x0) returned 0x2f [0167.113] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx", lpFilePart=0x0) returned 0x2f [0167.113] SetErrorMode (uMode=0x1) returned 0x0 [0167.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\p5gjk788swfq.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.115] GetFileType (hFile=0x230) returned 0x1 [0167.115] SetErrorMode (uMode=0x0) returned 0x1 [0167.115] GetFileType (hFile=0x230) returned 0x1 [0167.115] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.115] ReadFile (in: hFile=0x230, lpBuffer=0x272c4a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272c4a0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.116] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.116] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.116] WriteFile (in: hFile=0x230, lpBuffer=0x272c4a0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272c4a0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.117] CloseHandle (hObject=0x230) returned 1 [0167.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx", lpFilePart=0x0) returned 0x2f [0167.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx", lpFilePart=0x0) returned 0x2f [0167.117] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx.partially.cryptoNar", lpFilePart=0x0) returned 0x43 [0167.117] SetErrorMode (uMode=0x1) returned 0x0 [0167.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\p5gjk788swfq.docx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59cf5720, ftCreationTime.dwHighDateTime=0x1d418fd, ftLastAccessTime.dwLowDateTime=0x91661350, ftLastAccessTime.dwHighDateTime=0x1d411d1, ftLastWriteTime.dwLowDateTime=0x660f1c93, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x153b5)) returned 1 [0167.118] SetErrorMode (uMode=0x0) returned 0x1 [0167.118] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\p5gjk788swfq.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\P5GjK788swfq.docx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\p5gjk788swfq.docx.partially.cryptonar")) returned 1 [0167.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi", lpFilePart=0x0) returned 0x2d [0167.120] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi", lpFilePart=0x0) returned 0x2d [0167.121] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi", lpFilePart=0x0) returned 0x2d [0167.121] SetErrorMode (uMode=0x1) returned 0x0 [0167.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\puv9oikq0ot.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.122] GetFileType (hFile=0x230) returned 0x1 [0167.122] SetErrorMode (uMode=0x0) returned 0x1 [0167.122] GetFileType (hFile=0x230) returned 0x1 [0167.123] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.123] ReadFile (in: hFile=0x230, lpBuffer=0x272f8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272f8d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.123] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.123] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.123] WriteFile (in: hFile=0x230, lpBuffer=0x272f8d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272f8d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.124] CloseHandle (hObject=0x230) returned 1 [0167.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi", lpFilePart=0x0) returned 0x2d [0167.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi", lpFilePart=0x0) returned 0x2d [0167.125] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x41 [0167.125] SetErrorMode (uMode=0x1) returned 0x0 [0167.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\puv9oikq0ot.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f63f6c0, ftCreationTime.dwHighDateTime=0x1d4188c, ftLastAccessTime.dwLowDateTime=0xa62638f0, ftLastAccessTime.dwHighDateTime=0x1d412f4, ftLastWriteTime.dwLowDateTime=0x66117fdc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x646a)) returned 1 [0167.125] SetErrorMode (uMode=0x0) returned 0x1 [0167.125] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\puv9oikq0ot.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\PUv9OikQ0Ot.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\puv9oikq0ot.avi.partially.cryptonar")) returned 1 [0167.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv", lpFilePart=0x0) returned 0x26 [0167.128] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv", lpFilePart=0x0) returned 0x26 [0167.129] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv", lpFilePart=0x0) returned 0x26 [0167.129] SetErrorMode (uMode=0x1) returned 0x0 [0167.129] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\rsyu.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.131] GetFileType (hFile=0x230) returned 0x1 [0167.131] SetErrorMode (uMode=0x0) returned 0x1 [0167.131] GetFileType (hFile=0x230) returned 0x1 [0167.131] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.131] ReadFile (in: hFile=0x230, lpBuffer=0x2732cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2732cc8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.135] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.135] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.135] WriteFile (in: hFile=0x230, lpBuffer=0x2732cc8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2732cc8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.135] CloseHandle (hObject=0x230) returned 1 [0167.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv", lpFilePart=0x0) returned 0x26 [0167.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv", lpFilePart=0x0) returned 0x26 [0167.136] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x3a [0167.136] SetErrorMode (uMode=0x1) returned 0x0 [0167.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\rsyu.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a11b530, ftCreationTime.dwHighDateTime=0x1d41348, ftLastAccessTime.dwLowDateTime=0x5bc3f430, ftLastAccessTime.dwHighDateTime=0x1d41e2c, ftLastWriteTime.dwLowDateTime=0x66117fdc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x127cf)) returned 1 [0167.136] SetErrorMode (uMode=0x0) returned 0x1 [0167.137] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\rsyu.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\rsYU.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\rsyu.flv.partially.cryptonar")) returned 1 [0167.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps", lpFilePart=0x0) returned 0x31 [0167.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps", lpFilePart=0x0) returned 0x31 [0167.140] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps", lpFilePart=0x0) returned 0x31 [0167.140] SetErrorMode (uMode=0x1) returned 0x0 [0167.140] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tag1atqbhh-p6os.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.142] GetFileType (hFile=0x230) returned 0x1 [0167.142] SetErrorMode (uMode=0x0) returned 0x1 [0167.142] GetFileType (hFile=0x230) returned 0x1 [0167.142] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.142] ReadFile (in: hFile=0x230, lpBuffer=0x27360c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27360c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.143] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.143] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.143] WriteFile (in: hFile=0x230, lpBuffer=0x27360c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27360c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.143] CloseHandle (hObject=0x230) returned 1 [0167.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps", lpFilePart=0x0) returned 0x31 [0167.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps", lpFilePart=0x0) returned 0x31 [0167.145] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps.partially.cryptoNar", lpFilePart=0x0) returned 0x45 [0167.145] SetErrorMode (uMode=0x1) returned 0x0 [0167.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tag1atqbhh-p6os.pps"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaba2ad0, ftCreationTime.dwHighDateTime=0x1d413dd, ftLastAccessTime.dwLowDateTime=0x86e4770, ftLastAccessTime.dwHighDateTime=0x1d4115e, ftLastWriteTime.dwLowDateTime=0x6613fcdc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x203f)) returned 1 [0167.145] SetErrorMode (uMode=0x0) returned 0x1 [0167.145] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tag1atqbhh-p6os.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Tag1ATqbHh-p6Os.pps.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tag1atqbhh-p6os.pps.partially.cryptonar")) returned 1 [0167.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi", lpFilePart=0x0) returned 0x2e [0167.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi", lpFilePart=0x0) returned 0x2e [0167.148] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi", lpFilePart=0x0) returned 0x2e [0167.148] SetErrorMode (uMode=0x1) returned 0x0 [0167.148] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tdagdmwxadlm.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.149] GetFileType (hFile=0x230) returned 0x1 [0167.149] SetErrorMode (uMode=0x0) returned 0x1 [0167.150] GetFileType (hFile=0x230) returned 0x1 [0167.150] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.150] ReadFile (in: hFile=0x230, lpBuffer=0x2739538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2739538*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.150] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.150] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.150] WriteFile (in: hFile=0x230, lpBuffer=0x2739538*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2739538*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.151] CloseHandle (hObject=0x230) returned 1 [0167.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi", lpFilePart=0x0) returned 0x2e [0167.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi", lpFilePart=0x0) returned 0x2e [0167.151] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x42 [0167.152] SetErrorMode (uMode=0x1) returned 0x0 [0167.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tdagdmwxadlm.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf969f0, ftCreationTime.dwHighDateTime=0x1d41f6a, ftLastAccessTime.dwLowDateTime=0x5356c030, ftLastAccessTime.dwHighDateTime=0x1d41cf0, ftLastWriteTime.dwLowDateTime=0x6613fcdc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16d5f)) returned 1 [0167.152] SetErrorMode (uMode=0x0) returned 0x1 [0167.152] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tdagdmwxadlm.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\TdagdmWXaDlm.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\tdagdmwxadlm.avi.partially.cryptonar")) returned 1 [0167.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4", lpFilePart=0x0) returned 0x31 [0167.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4", lpFilePart=0x0) returned 0x31 [0167.155] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4", lpFilePart=0x0) returned 0x31 [0167.155] SetErrorMode (uMode=0x1) returned 0x0 [0167.155] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\uhyuzqoxcxvlnz9.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.157] GetFileType (hFile=0x230) returned 0x1 [0167.157] SetErrorMode (uMode=0x0) returned 0x1 [0167.157] GetFileType (hFile=0x230) returned 0x1 [0167.157] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.157] ReadFile (in: hFile=0x230, lpBuffer=0x273c998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273c998*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.158] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.158] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.158] WriteFile (in: hFile=0x230, lpBuffer=0x273c998*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273c998*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.158] CloseHandle (hObject=0x230) returned 1 [0167.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4", lpFilePart=0x0) returned 0x31 [0167.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4", lpFilePart=0x0) returned 0x31 [0167.160] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4.partially.cryptoNar", lpFilePart=0x0) returned 0x45 [0167.160] SetErrorMode (uMode=0x1) returned 0x0 [0167.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\uhyuzqoxcxvlnz9.mp4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8ce100, ftCreationTime.dwHighDateTime=0x1d41168, ftLastAccessTime.dwLowDateTime=0xc3a42650, ftLastAccessTime.dwHighDateTime=0x1d41ab3, ftLastWriteTime.dwLowDateTime=0x66164f84, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xef10)) returned 1 [0167.160] SetErrorMode (uMode=0x0) returned 0x1 [0167.160] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\uhyuzqoxcxvlnz9.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\uHYuzqoxCXVlnZ9.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\uhyuzqoxcxvlnz9.mp4.partially.cryptonar")) returned 1 [0167.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg", lpFilePart=0x0) returned 0x2f [0167.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg", lpFilePart=0x0) returned 0x2f [0167.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg", lpFilePart=0x0) returned 0x2f [0167.163] SetErrorMode (uMode=0x1) returned 0x0 [0167.163] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ukly7c7ppa13n.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.165] GetFileType (hFile=0x230) returned 0x1 [0167.165] SetErrorMode (uMode=0x0) returned 0x1 [0167.165] GetFileType (hFile=0x230) returned 0x1 [0167.165] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.165] ReadFile (in: hFile=0x230, lpBuffer=0x273fe08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273fe08*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.166] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.166] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.166] WriteFile (in: hFile=0x230, lpBuffer=0x273fe08*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273fe08*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.166] CloseHandle (hObject=0x230) returned 1 [0167.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg", lpFilePart=0x0) returned 0x2f [0167.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg", lpFilePart=0x0) returned 0x2f [0167.167] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg.partially.cryptoNar", lpFilePart=0x0) returned 0x43 [0167.167] SetErrorMode (uMode=0x1) returned 0x0 [0167.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ukly7c7ppa13n.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea78b90, ftCreationTime.dwHighDateTime=0x1d417f0, ftLastAccessTime.dwLowDateTime=0x569f8450, ftLastAccessTime.dwHighDateTime=0x1d41144, ftLastWriteTime.dwLowDateTime=0x66164f84, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaab7)) returned 1 [0167.167] SetErrorMode (uMode=0x0) returned 0x1 [0167.167] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ukly7c7ppa13n.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\UklY7c7ppa13n.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ukly7c7ppa13n.jpg.partially.cryptonar")) returned 1 [0167.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav", lpFilePart=0x0) returned 0x26 [0167.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav", lpFilePart=0x0) returned 0x26 [0167.171] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav", lpFilePart=0x0) returned 0x26 [0167.171] SetErrorMode (uMode=0x1) returned 0x0 [0167.171] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xawg.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.173] GetFileType (hFile=0x230) returned 0x1 [0167.173] SetErrorMode (uMode=0x0) returned 0x1 [0167.173] GetFileType (hFile=0x230) returned 0x1 [0167.173] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.173] ReadFile (in: hFile=0x230, lpBuffer=0x2743200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2743200*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.174] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.174] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.174] WriteFile (in: hFile=0x230, lpBuffer=0x2743200*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2743200*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.174] CloseHandle (hObject=0x230) returned 1 [0167.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav", lpFilePart=0x0) returned 0x26 [0167.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav", lpFilePart=0x0) returned 0x26 [0167.175] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav.partially.cryptoNar", lpFilePart=0x0) returned 0x3a [0167.175] SetErrorMode (uMode=0x1) returned 0x0 [0167.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xawg.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b9b8060, ftCreationTime.dwHighDateTime=0x1d4150c, ftLastAccessTime.dwLowDateTime=0x1f9663b0, ftLastAccessTime.dwHighDateTime=0x1d41b45, ftLastWriteTime.dwLowDateTime=0x6618b331, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2428)) returned 1 [0167.175] SetErrorMode (uMode=0x0) returned 0x1 [0167.175] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xawg.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\xAwG.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xawg.wav.partially.cryptonar")) returned 1 [0167.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3", lpFilePart=0x0) returned 0x30 [0167.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3", lpFilePart=0x0) returned 0x30 [0167.178] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3", lpFilePart=0x0) returned 0x30 [0167.178] SetErrorMode (uMode=0x1) returned 0x0 [0167.178] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xz4wyhz dwcnx-.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.180] GetFileType (hFile=0x230) returned 0x1 [0167.180] SetErrorMode (uMode=0x0) returned 0x1 [0167.180] GetFileType (hFile=0x230) returned 0x1 [0167.180] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.180] ReadFile (in: hFile=0x230, lpBuffer=0x2746600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2746600*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.181] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.181] WriteFile (in: hFile=0x230, lpBuffer=0x2746600*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2746600*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.181] CloseHandle (hObject=0x230) returned 1 [0167.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3", lpFilePart=0x0) returned 0x30 [0167.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3", lpFilePart=0x0) returned 0x30 [0167.182] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3.partially.cryptoNar", lpFilePart=0x0) returned 0x44 [0167.182] SetErrorMode (uMode=0x1) returned 0x0 [0167.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xz4wyhz dwcnx-.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3ddf040, ftCreationTime.dwHighDateTime=0x1d4113e, ftLastAccessTime.dwLowDateTime=0xcb148420, ftLastAccessTime.dwHighDateTime=0x1d41275, ftLastWriteTime.dwLowDateTime=0x6618b331, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2d3d)) returned 1 [0167.182] SetErrorMode (uMode=0x0) returned 0x1 [0167.182] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xz4wyhz dwcnx-.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XZ4WyHZ Dwcnx-.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xz4wyhz dwcnx-.mp3.partially.cryptonar")) returned 1 [0167.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx", lpFilePart=0x0) returned 0x35 [0167.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx", lpFilePart=0x0) returned 0x35 [0167.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx", lpFilePart=0x0) returned 0x35 [0167.184] SetErrorMode (uMode=0x1) returned 0x0 [0167.185] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y gijtqtuvwpjerhtr.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.186] GetFileType (hFile=0x230) returned 0x1 [0167.186] SetErrorMode (uMode=0x0) returned 0x1 [0167.186] GetFileType (hFile=0x230) returned 0x1 [0167.186] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.186] ReadFile (in: hFile=0x230, lpBuffer=0x2749ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2749ab0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.187] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.188] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.188] WriteFile (in: hFile=0x230, lpBuffer=0x2749ab0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2749ab0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.188] CloseHandle (hObject=0x230) returned 1 [0167.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx", lpFilePart=0x0) returned 0x35 [0167.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx", lpFilePart=0x0) returned 0x35 [0167.189] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx.partially.cryptoNar", lpFilePart=0x0) returned 0x49 [0167.189] SetErrorMode (uMode=0x1) returned 0x0 [0167.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y gijtqtuvwpjerhtr.docx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943e1170, ftCreationTime.dwHighDateTime=0x1d419f3, ftLastAccessTime.dwLowDateTime=0xc87f7a00, ftLastAccessTime.dwHighDateTime=0x1d41007, ftLastWriteTime.dwLowDateTime=0x661b3e35, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11f79)) returned 1 [0167.189] SetErrorMode (uMode=0x0) returned 0x1 [0167.189] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y gijtqtuvwpjerhtr.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\Y GijTQtuvwPjERHtR.docx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y gijtqtuvwpjerhtr.docx.partially.cryptonar")) returned 1 [0167.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi", lpFilePart=0x0) returned 0x33 [0167.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi", lpFilePart=0x0) returned 0x33 [0167.192] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi", lpFilePart=0x0) returned 0x33 [0167.192] SetErrorMode (uMode=0x1) returned 0x0 [0167.192] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y0gzp4uvbhis_xf0q.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.194] GetFileType (hFile=0x230) returned 0x1 [0167.194] SetErrorMode (uMode=0x0) returned 0x1 [0167.194] GetFileType (hFile=0x230) returned 0x1 [0167.194] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.194] ReadFile (in: hFile=0x230, lpBuffer=0x274cf78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274cf78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.195] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.195] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.195] WriteFile (in: hFile=0x230, lpBuffer=0x274cf78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274cf78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.196] CloseHandle (hObject=0x230) returned 1 [0167.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi", lpFilePart=0x0) returned 0x33 [0167.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi", lpFilePart=0x0) returned 0x33 [0167.203] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x47 [0167.203] SetErrorMode (uMode=0x1) returned 0x0 [0167.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y0gzp4uvbhis_xf0q.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d2ebc0, ftCreationTime.dwHighDateTime=0x1d4142f, ftLastAccessTime.dwLowDateTime=0x8fbc60, ftLastAccessTime.dwHighDateTime=0x1d41b3a, ftLastWriteTime.dwLowDateTime=0x661b3e35, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17051)) returned 1 [0167.204] SetErrorMode (uMode=0x0) returned 0x1 [0167.204] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y0gzp4uvbhis_xf0q.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\y0gzp4UVbHis_xF0Q.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\y0gzp4uvbhis_xf0q.avi.partially.cryptonar")) returned 1 [0167.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf", lpFilePart=0x0) returned 0x35 [0167.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf", lpFilePart=0x0) returned 0x35 [0167.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf", lpFilePart=0x0) returned 0x35 [0167.208] SetErrorMode (uMode=0x1) returned 0x0 [0167.208] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ykl-_kg1tvhp_j_m2ob.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.210] GetFileType (hFile=0x230) returned 0x1 [0167.210] SetErrorMode (uMode=0x0) returned 0x1 [0167.211] GetFileType (hFile=0x230) returned 0x1 [0167.211] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.211] ReadFile (in: hFile=0x230, lpBuffer=0x2750430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2750430*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.211] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.211] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.211] WriteFile (in: hFile=0x230, lpBuffer=0x2750430*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2750430*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.212] CloseHandle (hObject=0x230) returned 1 [0167.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf", lpFilePart=0x0) returned 0x35 [0167.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf", lpFilePart=0x0) returned 0x35 [0167.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf.partially.cryptoNar", lpFilePart=0x0) returned 0x49 [0167.213] SetErrorMode (uMode=0x1) returned 0x0 [0167.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ykl-_kg1tvhp_j_m2ob.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd810480, ftCreationTime.dwHighDateTime=0x1d415dc, ftLastAccessTime.dwLowDateTime=0x84350d20, ftLastAccessTime.dwHighDateTime=0x1d412ef, ftLastWriteTime.dwLowDateTime=0x661d6b76, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8384)) returned 1 [0167.213] SetErrorMode (uMode=0x0) returned 0x1 [0167.213] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ykl-_kg1tvhp_j_m2ob.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\yKL-_kg1tvHP_j_m2Ob.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\ykl-_kg1tvhp_j_m2ob.swf.partially.cryptonar")) returned 1 [0167.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a", lpFilePart=0x0) returned 0x2a [0167.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a", lpFilePart=0x0) returned 0x2a [0167.218] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a", lpFilePart=0x0) returned 0x2a [0167.218] SetErrorMode (uMode=0x1) returned 0x0 [0167.218] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_77bg7uv.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.221] GetFileType (hFile=0x230) returned 0x1 [0167.221] SetErrorMode (uMode=0x0) returned 0x1 [0167.221] GetFileType (hFile=0x230) returned 0x1 [0167.221] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.221] ReadFile (in: hFile=0x230, lpBuffer=0x27538a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27538a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.223] WriteFile (in: hFile=0x230, lpBuffer=0x27538a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27538a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.223] CloseHandle (hObject=0x230) returned 1 [0167.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a", lpFilePart=0x0) returned 0x2a [0167.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a", lpFilePart=0x0) returned 0x2a [0167.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a.partially.cryptoNar", lpFilePart=0x0) returned 0x3e [0167.225] SetErrorMode (uMode=0x1) returned 0x0 [0167.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_77bg7uv.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25cfe180, ftCreationTime.dwHighDateTime=0x1d414af, ftLastAccessTime.dwLowDateTime=0x3cdab5d0, ftLastAccessTime.dwHighDateTime=0x1d41171, ftLastWriteTime.dwLowDateTime=0x661fe483, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15d26)) returned 1 [0167.225] SetErrorMode (uMode=0x0) returned 0x1 [0167.225] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_77bg7uv.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_77BG7uv.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_77bg7uv.m4a.partially.cryptonar")) returned 1 [0167.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a", lpFilePart=0x0) returned 0x27 [0167.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a", lpFilePart=0x0) returned 0x27 [0167.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a", lpFilePart=0x0) returned 0x27 [0167.229] SetErrorMode (uMode=0x1) returned 0x0 [0167.229] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_u3l0.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.231] GetFileType (hFile=0x230) returned 0x1 [0167.231] SetErrorMode (uMode=0x0) returned 0x1 [0167.231] GetFileType (hFile=0x230) returned 0x1 [0167.231] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.231] ReadFile (in: hFile=0x230, lpBuffer=0x2756c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2756c70*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.232] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.232] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.233] WriteFile (in: hFile=0x230, lpBuffer=0x2756c70*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2756c70*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.233] CloseHandle (hObject=0x230) returned 1 [0167.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a", lpFilePart=0x0) returned 0x27 [0167.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a", lpFilePart=0x0) returned 0x27 [0167.236] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a.partially.cryptoNar", lpFilePart=0x0) returned 0x3b [0167.236] SetErrorMode (uMode=0x1) returned 0x0 [0167.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_u3l0.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb88f090, ftCreationTime.dwHighDateTime=0x1d41622, ftLastAccessTime.dwLowDateTime=0xf1c74d90, ftLastAccessTime.dwHighDateTime=0x1d41947, ftLastWriteTime.dwLowDateTime=0x66222fd4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x125e3)) returned 1 [0167.236] SetErrorMode (uMode=0x0) returned 0x1 [0167.236] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_u3l0.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\_u3l0.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\_u3l0.m4a.partially.cryptonar")) returned 1 [0167.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv", lpFilePart=0x0) returned 0x3a [0167.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv", lpFilePart=0x0) returned 0x3a [0167.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv", lpFilePart=0x0) returned 0x3a [0167.239] SetErrorMode (uMode=0x1) returned 0x0 [0167.239] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\82mg hn3.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.241] GetFileType (hFile=0x230) returned 0x1 [0167.241] SetErrorMode (uMode=0x0) returned 0x1 [0167.241] GetFileType (hFile=0x230) returned 0x1 [0167.241] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.241] ReadFile (in: hFile=0x230, lpBuffer=0x275a090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275a090*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.242] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.242] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.242] WriteFile (in: hFile=0x230, lpBuffer=0x275a090*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275a090*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.243] CloseHandle (hObject=0x230) returned 1 [0167.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv", lpFilePart=0x0) returned 0x3a [0167.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv", lpFilePart=0x0) returned 0x3a [0167.244] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x4e [0167.244] SetErrorMode (uMode=0x1) returned 0x0 [0167.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\82mg hn3.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b4ae40, ftCreationTime.dwHighDateTime=0x1d41829, ftLastAccessTime.dwLowDateTime=0xabbe1b0, ftLastAccessTime.dwHighDateTime=0x1d41463, ftLastWriteTime.dwLowDateTime=0x66222fd4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13ef8)) returned 1 [0167.244] SetErrorMode (uMode=0x0) returned 0x1 [0167.244] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\82mg hn3.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\82Mg hn3.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\82mg hn3.flv.partially.cryptonar")) returned 1 [0167.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv", lpFilePart=0x0) returned 0x38 [0167.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv", lpFilePart=0x0) returned 0x38 [0167.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv", lpFilePart=0x0) returned 0x38 [0167.247] SetErrorMode (uMode=0x1) returned 0x0 [0167.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\e-fg8q.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.249] GetFileType (hFile=0x230) returned 0x1 [0167.249] SetErrorMode (uMode=0x0) returned 0x1 [0167.249] GetFileType (hFile=0x230) returned 0x1 [0167.249] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.249] ReadFile (in: hFile=0x230, lpBuffer=0x275d590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275d590*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.250] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.250] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.250] WriteFile (in: hFile=0x230, lpBuffer=0x275d590*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275d590*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.250] CloseHandle (hObject=0x230) returned 1 [0167.251] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv", lpFilePart=0x0) returned 0x38 [0167.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv", lpFilePart=0x0) returned 0x38 [0167.252] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv.partially.cryptoNar", lpFilePart=0x0) returned 0x4c [0167.252] SetErrorMode (uMode=0x1) returned 0x0 [0167.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\e-fg8q.mkv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d24dab0, ftCreationTime.dwHighDateTime=0x1d41827, ftLastAccessTime.dwLowDateTime=0xa82de170, ftLastAccessTime.dwHighDateTime=0x1d410d3, ftLastWriteTime.dwLowDateTime=0x6624ba09, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x874f)) returned 1 [0167.252] SetErrorMode (uMode=0x0) returned 0x1 [0167.252] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\e-fg8q.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\e-fG8Q.mkv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\e-fg8q.mkv.partially.cryptonar")) returned 1 [0167.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods", lpFilePart=0x0) returned 0x38 [0167.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods", lpFilePart=0x0) returned 0x38 [0167.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods", lpFilePart=0x0) returned 0x38 [0167.258] SetErrorMode (uMode=0x1) returned 0x0 [0167.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\irvydz.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.260] GetFileType (hFile=0x230) returned 0x1 [0167.260] SetErrorMode (uMode=0x0) returned 0x1 [0167.260] GetFileType (hFile=0x230) returned 0x1 [0167.260] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.260] ReadFile (in: hFile=0x230, lpBuffer=0x2760a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2760a88*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.261] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.261] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.261] WriteFile (in: hFile=0x230, lpBuffer=0x2760a88*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2760a88*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.261] CloseHandle (hObject=0x230) returned 1 [0167.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods", lpFilePart=0x0) returned 0x38 [0167.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods", lpFilePart=0x0) returned 0x38 [0167.265] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods.partially.cryptoNar", lpFilePart=0x0) returned 0x4c [0167.265] SetErrorMode (uMode=0x1) returned 0x0 [0167.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\irvydz.ods"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cfec750, ftCreationTime.dwHighDateTime=0x1d41b08, ftLastAccessTime.dwLowDateTime=0xc676cb50, ftLastAccessTime.dwHighDateTime=0x1d41fb6, ftLastWriteTime.dwLowDateTime=0x6624ba09, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x139bc)) returned 1 [0167.266] SetErrorMode (uMode=0x0) returned 0x1 [0167.266] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\irvydz.ods"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\irVYdz.ods.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\irvydz.ods.partially.cryptonar")) returned 1 [0167.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf", lpFilePart=0x0) returned 0x43 [0167.268] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf", lpFilePart=0x0) returned 0x43 [0167.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf", lpFilePart=0x0) returned 0x43 [0167.269] SetErrorMode (uMode=0x1) returned 0x0 [0167.269] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\njhxdfz_w4gjbkof_.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.271] GetFileType (hFile=0x230) returned 0x1 [0167.272] SetErrorMode (uMode=0x0) returned 0x1 [0167.273] GetFileType (hFile=0x230) returned 0x1 [0167.273] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.273] ReadFile (in: hFile=0x230, lpBuffer=0x2763fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2763fe0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.273] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.273] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.274] WriteFile (in: hFile=0x230, lpBuffer=0x2763fe0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2763fe0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.274] CloseHandle (hObject=0x230) returned 1 [0167.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf", lpFilePart=0x0) returned 0x43 [0167.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf", lpFilePart=0x0) returned 0x43 [0167.274] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf.partially.cryptoNar", lpFilePart=0x0) returned 0x57 [0167.275] SetErrorMode (uMode=0x1) returned 0x0 [0167.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\njhxdfz_w4gjbkof_.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6f81660, ftCreationTime.dwHighDateTime=0x1d41b2e, ftLastAccessTime.dwLowDateTime=0xbe2c4270, ftLastAccessTime.dwHighDateTime=0x1d412b1, ftLastWriteTime.dwLowDateTime=0x6627201c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd909)) returned 1 [0167.275] SetErrorMode (uMode=0x0) returned 0x1 [0167.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\njhxdfz_w4gjbkof_.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\NjhXdfz_w4GJbKOf_.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\njhxdfz_w4gjbkof_.swf.partially.cryptonar")) returned 1 [0167.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp", lpFilePart=0x0) returned 0x3d [0167.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp", lpFilePart=0x0) returned 0x3d [0167.278] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp", lpFilePart=0x0) returned 0x3d [0167.278] SetErrorMode (uMode=0x1) returned 0x0 [0167.278] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\qum_e2ptuyu.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.280] GetFileType (hFile=0x230) returned 0x1 [0167.280] SetErrorMode (uMode=0x0) returned 0x1 [0167.280] GetFileType (hFile=0x230) returned 0x1 [0167.281] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.281] ReadFile (in: hFile=0x230, lpBuffer=0x2767568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2767568*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.281] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.281] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.282] WriteFile (in: hFile=0x230, lpBuffer=0x2767568*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2767568*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.282] CloseHandle (hObject=0x230) returned 1 [0167.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp", lpFilePart=0x0) returned 0x3d [0167.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp", lpFilePart=0x0) returned 0x3d [0167.283] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp.partially.cryptoNar", lpFilePart=0x0) returned 0x51 [0167.283] SetErrorMode (uMode=0x1) returned 0x0 [0167.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\qum_e2ptuyu.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbac484e0, ftCreationTime.dwHighDateTime=0x1d413fa, ftLastAccessTime.dwLowDateTime=0x49c09f70, ftLastAccessTime.dwHighDateTime=0x1d41d1b, ftLastWriteTime.dwLowDateTime=0x662978f5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3a6e)) returned 1 [0167.283] SetErrorMode (uMode=0x0) returned 0x1 [0167.283] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\qum_e2ptuyu.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\XC0QaZ971FDwvVS\\QUm_e2PtUyU.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\xc0qaz971fdwvvs\\qum_e2ptuyu.bmp.partially.cryptonar")) returned 1 [0167.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx", lpFilePart=0x0) returned 0x39 [0167.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx", lpFilePart=0x0) returned 0x39 [0167.296] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx", lpFilePart=0x0) returned 0x39 [0167.296] SetErrorMode (uMode=0x1) returned 0x0 [0167.296] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\12lhm9lfvur2rz5f3amq.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.298] GetFileType (hFile=0x230) returned 0x1 [0167.298] SetErrorMode (uMode=0x0) returned 0x1 [0167.298] GetFileType (hFile=0x230) returned 0x1 [0167.298] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.298] ReadFile (in: hFile=0x230, lpBuffer=0x276aad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276aad0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.299] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.299] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.299] WriteFile (in: hFile=0x230, lpBuffer=0x276aad0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276aad0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.299] CloseHandle (hObject=0x230) returned 1 [0167.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx", lpFilePart=0x0) returned 0x39 [0167.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx", lpFilePart=0x0) returned 0x39 [0167.299] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx.partially.cryptoNar", lpFilePart=0x0) returned 0x4d [0167.299] SetErrorMode (uMode=0x1) returned 0x0 [0167.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\12lhm9lfvur2rz5f3amq.pptx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfcd110, ftCreationTime.dwHighDateTime=0x1d3c470, ftLastAccessTime.dwLowDateTime=0x2d78a440, ftLastAccessTime.dwHighDateTime=0x1d3d264, ftLastWriteTime.dwLowDateTime=0x662bd483, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb5ce)) returned 1 [0167.299] SetErrorMode (uMode=0x0) returned 0x1 [0167.300] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\12lhm9lfvur2rz5f3amq.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\12LhM9lfVur2Rz5F3AMq.pptx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\12lhm9lfvur2rz5f3amq.pptx.partially.cryptonar")) returned 1 [0167.301] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx", lpFilePart=0x0) returned 0x36 [0167.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx", lpFilePart=0x0) returned 0x36 [0167.302] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx", lpFilePart=0x0) returned 0x36 [0167.302] SetErrorMode (uMode=0x1) returned 0x0 [0167.302] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\7q_oxhqzpg_zmyhtz.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.304] GetFileType (hFile=0x230) returned 0x1 [0167.304] SetErrorMode (uMode=0x0) returned 0x1 [0167.304] GetFileType (hFile=0x230) returned 0x1 [0167.304] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.304] ReadFile (in: hFile=0x230, lpBuffer=0x276dfe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276dfe0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.305] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.305] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.305] WriteFile (in: hFile=0x230, lpBuffer=0x276dfe0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276dfe0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.305] CloseHandle (hObject=0x230) returned 1 [0167.305] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx", lpFilePart=0x0) returned 0x36 [0167.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx", lpFilePart=0x0) returned 0x36 [0167.306] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx.partially.cryptoNar", lpFilePart=0x0) returned 0x4a [0167.306] SetErrorMode (uMode=0x1) returned 0x0 [0167.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\7q_oxhqzpg_zmyhtz.docx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea254ac0, ftCreationTime.dwHighDateTime=0x1d3b7c1, ftLastAccessTime.dwLowDateTime=0x294956d0, ftLastAccessTime.dwHighDateTime=0x1d3d011, ftLastWriteTime.dwLowDateTime=0x662bd483, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbfaf)) returned 1 [0167.306] SetErrorMode (uMode=0x0) returned 0x1 [0167.306] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\7q_oxhqzpg_zmyhtz.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\7q_OxHqzpG_zMYHTz.docx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\7q_oxhqzpg_zmyhtz.docx.partially.cryptonar")) returned 1 [0167.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx", lpFilePart=0x0) returned 0x35 [0167.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx", lpFilePart=0x0) returned 0x35 [0167.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx", lpFilePart=0x0) returned 0x35 [0167.308] SetErrorMode (uMode=0x1) returned 0x0 [0167.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\a7qvzw5vso2udumi.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.310] GetFileType (hFile=0x230) returned 0x1 [0167.322] SetErrorMode (uMode=0x0) returned 0x1 [0167.322] GetFileType (hFile=0x230) returned 0x1 [0167.322] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.322] ReadFile (in: hFile=0x230, lpBuffer=0x27714c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27714c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.323] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.323] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.323] WriteFile (in: hFile=0x230, lpBuffer=0x27714c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27714c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.323] CloseHandle (hObject=0x230) returned 1 [0167.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx", lpFilePart=0x0) returned 0x35 [0167.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx", lpFilePart=0x0) returned 0x35 [0167.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx.partially.cryptoNar", lpFilePart=0x0) returned 0x49 [0167.324] SetErrorMode (uMode=0x1) returned 0x0 [0167.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\a7qvzw5vso2udumi.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2216490, ftCreationTime.dwHighDateTime=0x1d41206, ftLastAccessTime.dwLowDateTime=0x3de508e0, ftLastAccessTime.dwHighDateTime=0x1d410cc, ftLastWriteTime.dwLowDateTime=0x662e1c7a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5d87)) returned 1 [0167.324] SetErrorMode (uMode=0x0) returned 0x1 [0167.324] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\a7qvzw5vso2udumi.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\a7QVzw5vso2udUMi.xlsx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\a7qvzw5vso2udumi.xlsx.partially.cryptonar")) returned 1 [0167.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx", lpFilePart=0x0) returned 0x2d [0167.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx", lpFilePart=0x0) returned 0x2d [0167.332] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx", lpFilePart=0x0) returned 0x2d [0167.332] SetErrorMode (uMode=0x1) returned 0x0 [0167.332] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\atxttwsn.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.334] GetFileType (hFile=0x230) returned 0x1 [0167.334] SetErrorMode (uMode=0x0) returned 0x1 [0167.334] GetFileType (hFile=0x230) returned 0x1 [0167.334] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.334] ReadFile (in: hFile=0x230, lpBuffer=0x2774950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2774950*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.335] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.335] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.335] WriteFile (in: hFile=0x230, lpBuffer=0x2774950*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2774950*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.335] CloseHandle (hObject=0x230) returned 1 [0167.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx", lpFilePart=0x0) returned 0x2d [0167.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx", lpFilePart=0x0) returned 0x2d [0167.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx.partially.cryptoNar", lpFilePart=0x0) returned 0x41 [0167.336] SetErrorMode (uMode=0x1) returned 0x0 [0167.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\atxttwsn.pptx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7be22f0, ftCreationTime.dwHighDateTime=0x1d43848, ftLastAccessTime.dwLowDateTime=0x2a322980, ftLastAccessTime.dwHighDateTime=0x1d421fd, ftLastWriteTime.dwLowDateTime=0x66310e02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6851)) returned 1 [0167.336] SetErrorMode (uMode=0x0) returned 0x1 [0167.336] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\atxttwsn.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\ATxttwsn.pptx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\atxttwsn.pptx.partially.cryptonar")) returned 1 [0167.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx", lpFilePart=0x0) returned 0x31 [0167.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx", lpFilePart=0x0) returned 0x31 [0167.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx", lpFilePart=0x0) returned 0x31 [0167.338] SetErrorMode (uMode=0x1) returned 0x0 [0167.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\buk5dhtc-n0o.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.340] GetFileType (hFile=0x230) returned 0x1 [0167.340] SetErrorMode (uMode=0x0) returned 0x1 [0167.340] GetFileType (hFile=0x230) returned 0x1 [0167.340] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.340] ReadFile (in: hFile=0x230, lpBuffer=0x2777da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2777da8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.341] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.341] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.341] WriteFile (in: hFile=0x230, lpBuffer=0x2777da8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2777da8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.341] CloseHandle (hObject=0x230) returned 1 [0167.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx", lpFilePart=0x0) returned 0x31 [0167.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx", lpFilePart=0x0) returned 0x31 [0167.342] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx.partially.cryptoNar", lpFilePart=0x0) returned 0x45 [0167.342] SetErrorMode (uMode=0x1) returned 0x0 [0167.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\buk5dhtc-n0o.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf59be480, ftCreationTime.dwHighDateTime=0x1d41e92, ftLastAccessTime.dwLowDateTime=0x15978fa0, ftLastAccessTime.dwHighDateTime=0x1d41268, ftLastWriteTime.dwLowDateTime=0x66310e02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f04)) returned 1 [0167.343] SetErrorMode (uMode=0x0) returned 0x1 [0167.343] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\buk5dhtc-n0o.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\buk5DHTC-n0o.xlsx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\buk5dhtc-n0o.xlsx.partially.cryptonar")) returned 1 [0167.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx", lpFilePart=0x0) returned 0x39 [0167.347] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx", lpFilePart=0x0) returned 0x39 [0167.348] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx", lpFilePart=0x0) returned 0x39 [0167.348] SetErrorMode (uMode=0x1) returned 0x0 [0167.348] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\c1zxmf43cebsv1k8fppb.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.351] GetFileType (hFile=0x230) returned 0x1 [0167.351] SetErrorMode (uMode=0x0) returned 0x1 [0167.351] GetFileType (hFile=0x230) returned 0x1 [0167.351] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.352] ReadFile (in: hFile=0x230, lpBuffer=0x277b280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277b280*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.352] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.352] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.352] WriteFile (in: hFile=0x230, lpBuffer=0x277b280*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x277b280*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.353] CloseHandle (hObject=0x230) returned 1 [0167.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx", lpFilePart=0x0) returned 0x39 [0167.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx", lpFilePart=0x0) returned 0x39 [0167.353] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx.partially.cryptoNar", lpFilePart=0x0) returned 0x4d [0167.353] SetErrorMode (uMode=0x1) returned 0x0 [0167.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\c1zxmf43cebsv1k8fppb.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0d9fb0, ftCreationTime.dwHighDateTime=0x1d42d22, ftLastAccessTime.dwLowDateTime=0xf716d440, ftLastAccessTime.dwHighDateTime=0x1d405f2, ftLastWriteTime.dwLowDateTime=0x6632e1cf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12316)) returned 1 [0167.353] SetErrorMode (uMode=0x0) returned 0x1 [0167.353] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\c1zxmf43cebsv1k8fppb.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\c1zxMf43cebSV1K8Fppb.xlsx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\c1zxmf43cebsv1k8fppb.xlsx.partially.cryptonar")) returned 1 [0167.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv", lpFilePart=0x0) returned 0x29 [0167.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv", lpFilePart=0x0) returned 0x29 [0167.356] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv", lpFilePart=0x0) returned 0x29 [0167.356] SetErrorMode (uMode=0x1) returned 0x0 [0167.356] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\cbisd.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.358] GetFileType (hFile=0x230) returned 0x1 [0167.358] SetErrorMode (uMode=0x0) returned 0x1 [0167.358] GetFileType (hFile=0x230) returned 0x1 [0167.358] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.358] ReadFile (in: hFile=0x230, lpBuffer=0x277e718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277e718*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.359] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.359] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.359] WriteFile (in: hFile=0x230, lpBuffer=0x277e718*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x277e718*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.359] CloseHandle (hObject=0x230) returned 1 [0167.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv", lpFilePart=0x0) returned 0x29 [0167.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv", lpFilePart=0x0) returned 0x29 [0167.359] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv.partially.cryptoNar", lpFilePart=0x0) returned 0x3d [0167.359] SetErrorMode (uMode=0x1) returned 0x0 [0167.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\cbisd.csv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ebe970, ftCreationTime.dwHighDateTime=0x1d41d6b, ftLastAccessTime.dwLowDateTime=0x83a039f0, ftLastAccessTime.dwHighDateTime=0x1d4141d, ftLastWriteTime.dwLowDateTime=0x66355251, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14eca)) returned 1 [0167.360] SetErrorMode (uMode=0x0) returned 0x1 [0167.360] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\cbisd.csv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\CBisD.csv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\cbisd.csv.partially.cryptonar")) returned 1 [0167.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x2f [0167.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x2f [0167.362] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x2f [0167.362] SetErrorMode (uMode=0x1) returned 0x0 [0167.362] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.364] GetFileType (hFile=0x230) returned 0x1 [0167.364] SetErrorMode (uMode=0x0) returned 0x1 [0167.364] GetFileType (hFile=0x230) returned 0x1 [0167.364] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.364] ReadFile (in: hFile=0x230, lpBuffer=0x2781b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2781b18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.366] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.366] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.366] WriteFile (in: hFile=0x230, lpBuffer=0x2781b18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2781b18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.366] CloseHandle (hObject=0x230) returned 1 [0167.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x2f [0167.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x2f [0167.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.partially.cryptoNar", lpFilePart=0x0) returned 0x43 [0167.396] SetErrorMode (uMode=0x1) returned 0x0 [0167.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1072f2e6, ftCreationTime.dwHighDateTime=0x1d3aaaf, ftLastAccessTime.dwLowDateTime=0x116be699, ftLastAccessTime.dwHighDateTime=0x1d3aaaf, ftLastWriteTime.dwLowDateTime=0x663a091b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x57000)) returned 1 [0167.396] SetErrorMode (uMode=0x0) returned 0x1 [0167.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Database1.accdb.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\database1.accdb.partially.cryptonar")) returned 1 [0167.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0167.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0167.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0167.398] SetErrorMode (uMode=0x1) returned 0x0 [0167.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.399] GetFileType (hFile=0x230) returned 0x1 [0167.399] SetErrorMode (uMode=0x0) returned 0x1 [0167.399] GetFileType (hFile=0x230) returned 0x1 [0167.399] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.399] ReadFile (in: hFile=0x230, lpBuffer=0x2784f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2784f20*, lpNumberOfBytesRead=0x5ae8b8*=0x192, lpOverlapped=0x0) returned 1 [0167.400] ReadFile (in: hFile=0x230, lpBuffer=0x2784f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2784f20*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0167.400] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.400] WriteFile (in: hFile=0x230, lpBuffer=0x2784f20*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2784f20*, lpNumberOfBytesWritten=0x5ae8a8*=0x192, lpOverlapped=0x0) returned 1 [0167.400] CloseHandle (hObject=0x230) returned 1 [0167.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0167.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x2b [0167.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini.partially.cryptoNar", lpFilePart=0x0) returned 0x3f [0167.401] SetErrorMode (uMode=0x1) returned 0x0 [0167.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x663a091b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0167.401] SetErrorMode (uMode=0x0) returned 0x1 [0167.401] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\desktop.ini.partially.cryptonar")) returned 1 [0167.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DYyL.pps", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DYyL.pps", lpFilePart=0x0) returned 0x28 [0167.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DYyL.pps", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DYyL.pps", lpFilePart=0x0) returned 0x28 [0167.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DYyL.pps", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DYyL.pps", lpFilePart=0x0) returned 0x28 [0167.402] SetErrorMode (uMode=0x1) returned 0x0 [0167.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DYyL.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dyyl.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.404] GetFileType (hFile=0x230) returned 0x1 [0167.404] SetErrorMode (uMode=0x0) returned 0x1 [0167.404] GetFileType (hFile=0x230) returned 0x1 [0167.404] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.404] ReadFile (in: hFile=0x230, lpBuffer=0x2788240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2788240*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.405] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0167.405] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.405] WriteFile (in: hFile=0x230, lpBuffer=0x2788240*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2788240*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0167.405] CloseHandle (hObject=0x230) returned 1 [0167.406] SetErrorMode (uMode=0x1) returned 0x0 [0167.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DYyL.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dyyl.pps"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8320780, ftCreationTime.dwHighDateTime=0x1d41d2c, ftLastAccessTime.dwLowDateTime=0xb5e894f0, ftLastAccessTime.dwHighDateTime=0x1d41000, ftLastWriteTime.dwLowDateTime=0x663c6a79, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x123a8)) returned 1 [0167.406] SetErrorMode (uMode=0x0) returned 0x1 [0167.406] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DYyL.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dyyl.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\DYyL.pps.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\dyyl.pps.partially.cryptonar")) returned 1 [0167.408] SetErrorMode (uMode=0x1) returned 0x0 [0167.408] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FjsVx-Mf3fJ6RyFV.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fjsvx-mf3fj6ryfv.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.409] SetErrorMode (uMode=0x0) returned 0x1 [0167.409] GetFileType (hFile=0x230) returned 0x1 [0167.409] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.412] SetErrorMode (uMode=0x1) returned 0x0 [0167.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FjsVx-Mf3fJ6RyFV.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fjsvx-mf3fj6ryfv.docx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7429be0, ftCreationTime.dwHighDateTime=0x1d3f611, ftLastAccessTime.dwLowDateTime=0x65cd7a0, ftLastAccessTime.dwHighDateTime=0x1d43c13, ftLastWriteTime.dwLowDateTime=0x663c6a79, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16018)) returned 1 [0167.413] SetErrorMode (uMode=0x0) returned 0x1 [0167.413] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FjsVx-Mf3fJ6RyFV.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fjsvx-mf3fj6ryfv.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\FjsVx-Mf3fJ6RyFV.docx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\fjsvx-mf3fj6ryfv.docx.partially.cryptonar")) returned 1 [0167.415] SetErrorMode (uMode=0x1) returned 0x0 [0167.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gUbqayvjYIZ.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gubqayvjyiz.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.416] SetErrorMode (uMode=0x0) returned 0x1 [0167.416] GetFileType (hFile=0x230) returned 0x1 [0167.416] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.417] SetErrorMode (uMode=0x1) returned 0x0 [0167.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gUbqayvjYIZ.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gubqayvjyiz.pptx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30b6e910, ftCreationTime.dwHighDateTime=0x1d41962, ftLastAccessTime.dwLowDateTime=0x41e1b4c0, ftLastAccessTime.dwHighDateTime=0x1d41568, ftLastWriteTime.dwLowDateTime=0x663c6a79, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6bb1)) returned 1 [0167.417] SetErrorMode (uMode=0x0) returned 0x1 [0167.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gUbqayvjYIZ.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gubqayvjyiz.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gUbqayvjYIZ.pptx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gubqayvjyiz.pptx.partially.cryptonar")) returned 1 [0167.444] SetErrorMode (uMode=0x1) returned 0x0 [0167.444] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gykhsOtEs2nD.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gykhsotes2nd.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.446] SetErrorMode (uMode=0x0) returned 0x1 [0167.446] GetFileType (hFile=0x230) returned 0x1 [0167.446] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.447] SetErrorMode (uMode=0x1) returned 0x0 [0167.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gykhsOtEs2nD.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gykhsotes2nd.docx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa9538840, ftCreationTime.dwHighDateTime=0x1d432aa, ftLastAccessTime.dwLowDateTime=0xbc7178f0, ftLastAccessTime.dwHighDateTime=0x1d3e805, ftLastWriteTime.dwLowDateTime=0x66420420, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x138b2)) returned 1 [0167.448] SetErrorMode (uMode=0x0) returned 0x1 [0167.448] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gykhsOtEs2nD.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gykhsotes2nd.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\gykhsOtEs2nD.docx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\gykhsotes2nd.docx.partially.cryptonar")) returned 1 [0167.450] SetErrorMode (uMode=0x1) returned 0x0 [0167.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\lr9TshVLdO0dQjKmE6w.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\lr9tshvldo0dqjkme6w.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.452] SetErrorMode (uMode=0x0) returned 0x1 [0167.453] GetFileType (hFile=0x230) returned 0x1 [0167.453] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.454] SetErrorMode (uMode=0x1) returned 0x0 [0167.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\lr9TshVLdO0dQjKmE6w.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\lr9tshvldo0dqjkme6w.pptx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b09e930, ftCreationTime.dwHighDateTime=0x1d4346a, ftLastAccessTime.dwLowDateTime=0xa500b6e0, ftLastAccessTime.dwHighDateTime=0x1d3f507, ftLastWriteTime.dwLowDateTime=0x6643c12d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xec5f)) returned 1 [0167.454] SetErrorMode (uMode=0x0) returned 0x1 [0167.454] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\lr9TshVLdO0dQjKmE6w.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\lr9tshvldo0dqjkme6w.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\lr9TshVLdO0dQjKmE6w.pptx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\lr9tshvldo0dqjkme6w.pptx.partially.cryptonar")) returned 1 [0167.456] SetErrorMode (uMode=0x1) returned 0x0 [0167.456] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MJ1fRte-.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\mj1frte-.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.460] SetErrorMode (uMode=0x0) returned 0x1 [0167.461] GetFileType (hFile=0x230) returned 0x1 [0167.461] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.461] SetErrorMode (uMode=0x1) returned 0x0 [0167.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MJ1fRte-.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\mj1frte-.pps"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb57a7360, ftCreationTime.dwHighDateTime=0x1d414ee, ftLastAccessTime.dwLowDateTime=0x3f1052c0, ftLastAccessTime.dwHighDateTime=0x1d4187d, ftLastWriteTime.dwLowDateTime=0x6643c12d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15536)) returned 1 [0167.462] SetErrorMode (uMode=0x0) returned 0x1 [0167.462] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MJ1fRte-.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\mj1frte-.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\MJ1fRte-.pps.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\mj1frte-.pps.partially.cryptonar")) returned 1 [0167.464] SetErrorMode (uMode=0x1) returned 0x0 [0167.464] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Od8kJ9.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\od8kj9.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.465] SetErrorMode (uMode=0x0) returned 0x1 [0167.465] GetFileType (hFile=0x230) returned 0x1 [0167.465] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.467] SetErrorMode (uMode=0x1) returned 0x0 [0167.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Od8kJ9.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\od8kj9.odp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfccc9880, ftCreationTime.dwHighDateTime=0x1d413a7, ftLastAccessTime.dwLowDateTime=0x91f400b0, ftLastAccessTime.dwHighDateTime=0x1d415dd, ftLastWriteTime.dwLowDateTime=0x6643c12d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x115ac)) returned 1 [0167.467] SetErrorMode (uMode=0x0) returned 0x1 [0167.467] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Od8kJ9.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\od8kj9.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Od8kJ9.odp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\od8kj9.odp.partially.cryptonar")) returned 1 [0167.470] SetErrorMode (uMode=0x1) returned 0x0 [0167.470] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pOCeYmwbRIDEa3.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\poceymwbridea3.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.471] SetErrorMode (uMode=0x0) returned 0x1 [0167.471] GetFileType (hFile=0x230) returned 0x1 [0167.471] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.472] SetErrorMode (uMode=0x1) returned 0x0 [0167.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pOCeYmwbRIDEa3.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\poceymwbridea3.ppt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f5d8190, ftCreationTime.dwHighDateTime=0x1d41286, ftLastAccessTime.dwLowDateTime=0xcaabbaf0, ftLastAccessTime.dwHighDateTime=0x1d419ee, ftLastWriteTime.dwLowDateTime=0x6645f5ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1161a)) returned 1 [0167.472] SetErrorMode (uMode=0x0) returned 0x1 [0167.473] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pOCeYmwbRIDEa3.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\poceymwbridea3.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\pOCeYmwbRIDEa3.ppt.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\poceymwbridea3.ppt.partially.cryptonar")) returned 1 [0167.476] SetErrorMode (uMode=0x1) returned 0x0 [0167.476] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\S P9PlyZfn6.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\s p9plyzfn6.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.478] SetErrorMode (uMode=0x0) returned 0x1 [0167.478] GetFileType (hFile=0x230) returned 0x1 [0167.478] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.480] SetErrorMode (uMode=0x1) returned 0x0 [0167.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\S P9PlyZfn6.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\s p9plyzfn6.docx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14d849b0, ftCreationTime.dwHighDateTime=0x1d3d690, ftLastAccessTime.dwLowDateTime=0xa1d02c0, ftLastAccessTime.dwHighDateTime=0x1d3ec18, ftLastWriteTime.dwLowDateTime=0x6645f5ce, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17592)) returned 1 [0167.480] SetErrorMode (uMode=0x0) returned 0x1 [0167.480] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\S P9PlyZfn6.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\s p9plyzfn6.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\S P9PlyZfn6.docx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\s p9plyzfn6.docx.partially.cryptonar")) returned 1 [0167.483] SetErrorMode (uMode=0x1) returned 0x0 [0167.483] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\SKjK _nn9h2 F2pWeml.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\skjk _nn9h2 f2pweml.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.485] SetErrorMode (uMode=0x0) returned 0x1 [0167.485] GetFileType (hFile=0x230) returned 0x1 [0167.486] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.487] SetErrorMode (uMode=0x1) returned 0x0 [0167.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\SKjK _nn9h2 F2pWeml.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\skjk _nn9h2 f2pweml.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f07e30, ftCreationTime.dwHighDateTime=0x1d43c8a, ftLastAccessTime.dwLowDateTime=0x993cbfb0, ftLastAccessTime.dwHighDateTime=0x1d41dad, ftLastWriteTime.dwLowDateTime=0x66485703, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x918)) returned 1 [0167.487] SetErrorMode (uMode=0x0) returned 0x1 [0167.487] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\SKjK _nn9h2 F2pWeml.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\skjk _nn9h2 f2pweml.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\SKjK _nn9h2 F2pWeml.xlsx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\skjk _nn9h2 f2pweml.xlsx.partially.cryptonar")) returned 1 [0167.489] SetErrorMode (uMode=0x1) returned 0x0 [0167.490] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\T5XhAZjP04jeHyKy.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\t5xhazjp04jehyky.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.491] SetErrorMode (uMode=0x0) returned 0x1 [0167.491] GetFileType (hFile=0x230) returned 0x1 [0167.491] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.493] SetErrorMode (uMode=0x1) returned 0x0 [0167.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\T5XhAZjP04jeHyKy.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\t5xhazjp04jehyky.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e1e2c90, ftCreationTime.dwHighDateTime=0x1d3cb0a, ftLastAccessTime.dwLowDateTime=0x18b2d5f0, ftLastAccessTime.dwHighDateTime=0x1d3f5b7, ftLastWriteTime.dwLowDateTime=0x66485703, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1502b)) returned 1 [0167.493] SetErrorMode (uMode=0x0) returned 0x1 [0167.493] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\T5XhAZjP04jeHyKy.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\t5xhazjp04jehyky.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\T5XhAZjP04jeHyKy.xlsx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\t5xhazjp04jehyky.xlsx.partially.cryptonar")) returned 1 [0167.495] SetErrorMode (uMode=0x1) returned 0x0 [0167.495] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tz72mKHJ4VUQGUeCB 5.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tz72mkhj4vuqguecb 5.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.497] SetErrorMode (uMode=0x0) returned 0x1 [0167.497] GetFileType (hFile=0x230) returned 0x1 [0167.497] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.499] SetErrorMode (uMode=0x1) returned 0x0 [0167.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tz72mKHJ4VUQGUeCB 5.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tz72mkhj4vuqguecb 5.docx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd184a0c0, ftCreationTime.dwHighDateTime=0x1d42656, ftLastAccessTime.dwLowDateTime=0xff7390c0, ftLastAccessTime.dwHighDateTime=0x1d4289c, ftLastWriteTime.dwLowDateTime=0x664ab7c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8281)) returned 1 [0167.499] SetErrorMode (uMode=0x0) returned 0x1 [0167.499] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tz72mKHJ4VUQGUeCB 5.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tz72mkhj4vuqguecb 5.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Tz72mKHJ4VUQGUeCB 5.docx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\tz72mkhj4vuqguecb 5.docx.partially.cryptonar")) returned 1 [0167.502] SetErrorMode (uMode=0x1) returned 0x0 [0167.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\U O9.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\u o9.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.504] SetErrorMode (uMode=0x0) returned 0x1 [0167.504] GetFileType (hFile=0x230) returned 0x1 [0167.504] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.505] SetErrorMode (uMode=0x1) returned 0x0 [0167.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\U O9.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\u o9.pptx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f063380, ftCreationTime.dwHighDateTime=0x1d3ed1b, ftLastAccessTime.dwLowDateTime=0xac6e1ea0, ftLastAccessTime.dwHighDateTime=0x1d3b8ac, ftLastWriteTime.dwLowDateTime=0x664ab7c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xaa55)) returned 1 [0167.505] SetErrorMode (uMode=0x0) returned 0x1 [0167.505] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\U O9.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\u o9.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\U O9.pptx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\u o9.pptx.partially.cryptonar")) returned 1 [0167.507] SetErrorMode (uMode=0x1) returned 0x0 [0167.508] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Um0sc8wIq.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\um0sc8wiq.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.509] SetErrorMode (uMode=0x0) returned 0x1 [0167.509] GetFileType (hFile=0x230) returned 0x1 [0167.509] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.511] SetErrorMode (uMode=0x1) returned 0x0 [0167.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Um0sc8wIq.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\um0sc8wiq.ppt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d31c8a0, ftCreationTime.dwHighDateTime=0x1d41f02, ftLastAccessTime.dwLowDateTime=0x2b8167a0, ftLastAccessTime.dwHighDateTime=0x1d41a6f, ftLastWriteTime.dwLowDateTime=0x664ab7c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa73b)) returned 1 [0167.511] SetErrorMode (uMode=0x0) returned 0x1 [0167.511] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Um0sc8wIq.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\um0sc8wiq.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Um0sc8wIq.ppt.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\um0sc8wiq.ppt.partially.cryptonar")) returned 1 [0167.514] SetErrorMode (uMode=0x1) returned 0x0 [0167.514] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\uww77I w9f9Fot_.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\uww77i w9f9fot_.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.516] SetErrorMode (uMode=0x0) returned 0x1 [0167.516] GetFileType (hFile=0x230) returned 0x1 [0167.516] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.517] SetErrorMode (uMode=0x1) returned 0x0 [0167.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\uww77I w9f9Fot_.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\uww77i w9f9fot_.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe47ed920, ftCreationTime.dwHighDateTime=0x1d43740, ftLastAccessTime.dwLowDateTime=0x29c456f0, ftLastAccessTime.dwHighDateTime=0x1d3eb5f, ftLastWriteTime.dwLowDateTime=0x664d1a65, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcdb8)) returned 1 [0167.517] SetErrorMode (uMode=0x0) returned 0x1 [0167.517] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\uww77I w9f9Fot_.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\uww77i w9f9fot_.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\uww77I w9f9Fot_.xlsx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\uww77i w9f9fot_.xlsx.partially.cryptonar")) returned 1 [0167.519] SetErrorMode (uMode=0x1) returned 0x0 [0167.519] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Xj3k3t0Ywy0r7t.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xj3k3t0ywy0r7t.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.521] SetErrorMode (uMode=0x0) returned 0x1 [0167.521] GetFileType (hFile=0x230) returned 0x1 [0167.521] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.522] SetErrorMode (uMode=0x1) returned 0x0 [0167.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Xj3k3t0Ywy0r7t.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xj3k3t0ywy0r7t.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8041a920, ftCreationTime.dwHighDateTime=0x1d42d99, ftLastAccessTime.dwLowDateTime=0xc5d31420, ftLastAccessTime.dwHighDateTime=0x1d4211d, ftLastWriteTime.dwLowDateTime=0x664d1a65, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x4dba)) returned 1 [0167.522] SetErrorMode (uMode=0x0) returned 0x1 [0167.522] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Xj3k3t0Ywy0r7t.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xj3k3t0ywy0r7t.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Xj3k3t0Ywy0r7t.xlsx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xj3k3t0ywy0r7t.xlsx.partially.cryptonar")) returned 1 [0167.548] SetErrorMode (uMode=0x1) returned 0x0 [0167.548] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xlGzGwJ-M_wXcVcPx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xlgzgwj-m_wxcvcpx.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.559] SetErrorMode (uMode=0x0) returned 0x1 [0167.559] GetFileType (hFile=0x230) returned 0x1 [0167.559] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.560] SetErrorMode (uMode=0x1) returned 0x0 [0167.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xlGzGwJ-M_wXcVcPx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xlgzgwj-m_wxcvcpx.pptx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x414c69d0, ftCreationTime.dwHighDateTime=0x1d3b224, ftLastAccessTime.dwLowDateTime=0x53a7b8a0, ftLastAccessTime.dwHighDateTime=0x1d3bb43, ftLastWriteTime.dwLowDateTime=0x6651e0b4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdce)) returned 1 [0167.622] SetErrorMode (uMode=0x0) returned 0x1 [0167.622] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xlGzGwJ-M_wXcVcPx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xlgzgwj-m_wxcvcpx.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\xlGzGwJ-M_wXcVcPx.pptx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\xlgzgwj-m_wxcvcpx.pptx.partially.cryptonar")) returned 1 [0167.625] SetErrorMode (uMode=0x1) returned 0x0 [0167.625] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.626] SetErrorMode (uMode=0x0) returned 0x1 [0167.626] GetFileType (hFile=0x230) returned 0x1 [0167.627] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.628] SetErrorMode (uMode=0x1) returned 0x0 [0167.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x608b5c0f, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x608b5c0f, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x665e00e9, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0167.628] SetErrorMode (uMode=0x0) returned 0x1 [0167.629] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\desktop.ini.partially.cryptonar")) returned 1 [0167.632] SetErrorMode (uMode=0x1) returned 0x0 [0167.633] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\favorites.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.634] SetErrorMode (uMode=0x0) returned 0x1 [0167.634] GetFileType (hFile=0x230) returned 0x1 [0167.634] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.635] SetErrorMode (uMode=0x1) returned 0x0 [0167.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\favorites.vssx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x607ae082, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x607ae082, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x607ae082, ftLastWriteTime.dwHighDateTime=0x1d301d2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0167.635] SetErrorMode (uMode=0x0) returned 0x1 [0167.635] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\favorites.vssx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\Favorites.vssx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\favorites.vssx.partially.cryptonar")) returned 1 [0167.637] SetErrorMode (uMode=0x1) returned 0x0 [0167.637] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.638] SetErrorMode (uMode=0x0) returned 0x1 [0167.638] GetFileType (hFile=0x230) returned 0x1 [0167.638] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.692] SetErrorMode (uMode=0x1) returned 0x0 [0167.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x608b6fa3, ftCreationTime.dwHighDateTime=0x1d301d2, ftLastAccessTime.dwLowDateTime=0x608b6fa3, ftLastAccessTime.dwHighDateTime=0x1d301d2, ftLastWriteTime.dwLowDateTime=0x66675294, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1 [0167.692] SetErrorMode (uMode=0x0) returned 0x1 [0167.692] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\My Shapes\\_private\\folder.ico.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\my shapes\\_private\\folder.ico.partially.cryptonar")) returned 1 [0167.694] SetErrorMode (uMode=0x1) returned 0x0 [0167.694] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.695] SetErrorMode (uMode=0x0) returned 0x1 [0167.695] GetFileType (hFile=0x230) returned 0x1 [0167.695] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.712] SetErrorMode (uMode=0x1) returned 0x0 [0167.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db521d4, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6db521d4, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x6669b4ac, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1828)) returned 1 [0167.713] SetErrorMode (uMode=0x0) returned 0x1 [0167.713] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Open Notebook.onetoc2.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\open notebook.onetoc2.partially.cryptonar")) returned 1 [0167.714] SetErrorMode (uMode=0x1) returned 0x0 [0167.714] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.716] SetErrorMode (uMode=0x0) returned 0x1 [0167.716] GetFileType (hFile=0x230) returned 0x1 [0167.716] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.719] SetErrorMode (uMode=0x1) returned 0x0 [0167.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db8ed1e, ftCreationTime.dwHighDateTime=0x1d2d427, ftLastAccessTime.dwLowDateTime=0x6db8ed1e, ftLastAccessTime.dwHighDateTime=0x1d2d427, ftLastWriteTime.dwLowDateTime=0x666c17e4, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x57ec8)) returned 1 [0167.719] SetErrorMode (uMode=0x0) returned 0x1 [0167.719] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\OneNote Notebooks\\My Notebook\\Quick Notes.one.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\onenote notebooks\\my notebook\\quick notes.one.partially.cryptonar")) returned 1 [0167.721] SetErrorMode (uMode=0x1) returned 0x0 [0167.721] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.722] SetErrorMode (uMode=0x0) returned 0x1 [0167.723] GetFileType (hFile=0x230) returned 0x1 [0167.723] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.789] SetErrorMode (uMode=0x1) returned 0x0 [0167.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfdcc0a39, ftCreationTime.dwHighDateTime=0x1d2fc24, ftLastAccessTime.dwLowDateTime=0xfdcc0a39, ftLastAccessTime.dwHighDateTime=0x1d2fc24, ftLastWriteTime.dwLowDateTime=0x6675a256, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1 [0167.789] SetErrorMode (uMode=0x0) returned 0x1 [0167.789] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\Outlook Files\\lcfkj@kiekc.df.pst.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\outlook files\\lcfkj@kiekc.df.pst.partially.cryptonar")) returned 1 [0167.791] SetErrorMode (uMode=0x1) returned 0x0 [0167.791] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\1f9yYjZl8i_t.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\1f9yyjzl8i_t.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.792] SetErrorMode (uMode=0x0) returned 0x1 [0167.792] GetFileType (hFile=0x230) returned 0x1 [0167.792] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.793] SetErrorMode (uMode=0x1) returned 0x0 [0167.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\1f9yYjZl8i_t.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\1f9yyjzl8i_t.rtf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f39340, ftCreationTime.dwHighDateTime=0x1d41175, ftLastAccessTime.dwLowDateTime=0x27828440, ftLastAccessTime.dwHighDateTime=0x1d41493, ftLastWriteTime.dwLowDateTime=0x6675a256, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15345)) returned 1 [0167.793] SetErrorMode (uMode=0x0) returned 0x1 [0167.793] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\1f9yYjZl8i_t.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\1f9yyjzl8i_t.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\1f9yYjZl8i_t.rtf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\1f9yyjzl8i_t.rtf.partially.cryptonar")) returned 1 [0167.794] SetErrorMode (uMode=0x1) returned 0x0 [0167.794] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\1PT5Gt_.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\1pt5gt_.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.795] SetErrorMode (uMode=0x0) returned 0x1 [0167.796] GetFileType (hFile=0x230) returned 0x1 [0167.796] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.796] SetErrorMode (uMode=0x1) returned 0x0 [0167.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\1PT5Gt_.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\1pt5gt_.pps"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef8d5110, ftCreationTime.dwHighDateTime=0x1d41fb3, ftLastAccessTime.dwLowDateTime=0xd053a940, ftLastAccessTime.dwHighDateTime=0x1d41def, ftLastWriteTime.dwLowDateTime=0x6678039a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8785)) returned 1 [0167.796] SetErrorMode (uMode=0x0) returned 0x1 [0167.797] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\1PT5Gt_.pps" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\1pt5gt_.pps"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\1PT5Gt_.pps.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\1pt5gt_.pps.partially.cryptonar")) returned 1 [0167.798] SetErrorMode (uMode=0x1) returned 0x0 [0167.798] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\4va5EExHkN_I.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\4va5eexhkn_i.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.798] SetErrorMode (uMode=0x0) returned 0x1 [0167.798] GetFileType (hFile=0x230) returned 0x1 [0167.798] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.799] SetErrorMode (uMode=0x1) returned 0x0 [0167.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\4va5EExHkN_I.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\4va5eexhkn_i.doc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf3d1c30, ftCreationTime.dwHighDateTime=0x1d41248, ftLastAccessTime.dwLowDateTime=0x3ffb3c60, ftLastAccessTime.dwHighDateTime=0x1d41c09, ftLastWriteTime.dwLowDateTime=0x6678039a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9a5e)) returned 1 [0167.799] SetErrorMode (uMode=0x0) returned 0x1 [0167.799] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\4va5EExHkN_I.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\4va5eexhkn_i.doc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\4va5EExHkN_I.doc.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\4va5eexhkn_i.doc.partially.cryptonar")) returned 1 [0167.801] SetErrorMode (uMode=0x1) returned 0x0 [0167.801] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\9Ur fHHFcuN7H.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\9ur fhhfcun7h.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.802] SetErrorMode (uMode=0x0) returned 0x1 [0167.802] GetFileType (hFile=0x230) returned 0x1 [0167.802] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.802] SetErrorMode (uMode=0x1) returned 0x0 [0167.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\9Ur fHHFcuN7H.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\9ur fhhfcun7h.csv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5f12250, ftCreationTime.dwHighDateTime=0x1d411c0, ftLastAccessTime.dwLowDateTime=0xba57a3a0, ftLastAccessTime.dwHighDateTime=0x1d41118, ftLastWriteTime.dwLowDateTime=0x6678039a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10970)) returned 1 [0167.803] SetErrorMode (uMode=0x0) returned 0x1 [0167.803] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\9Ur fHHFcuN7H.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\9ur fhhfcun7h.csv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\9Ur fHHFcuN7H.csv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\9ur fhhfcun7h.csv.partially.cryptonar")) returned 1 [0167.804] SetErrorMode (uMode=0x1) returned 0x0 [0167.804] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\o3EV.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\o3ev.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.805] SetErrorMode (uMode=0x0) returned 0x1 [0167.805] GetFileType (hFile=0x230) returned 0x1 [0167.805] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.805] SetErrorMode (uMode=0x1) returned 0x0 [0167.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\o3EV.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\o3ev.pdf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c40710, ftCreationTime.dwHighDateTime=0x1d41b5c, ftLastAccessTime.dwLowDateTime=0xd6cc01e0, ftLastAccessTime.dwHighDateTime=0x1d41e09, ftLastWriteTime.dwLowDateTime=0x6678039a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1381f)) returned 1 [0167.806] SetErrorMode (uMode=0x0) returned 0x1 [0167.806] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\o3EV.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\o3ev.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\o3EV.pdf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\o3ev.pdf.partially.cryptonar")) returned 1 [0167.807] SetErrorMode (uMode=0x1) returned 0x0 [0167.807] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\oyFcKHBBiN.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\oyfckhbbin.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.807] SetErrorMode (uMode=0x0) returned 0x1 [0167.807] GetFileType (hFile=0x230) returned 0x1 [0167.808] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.808] SetErrorMode (uMode=0x1) returned 0x0 [0167.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\oyFcKHBBiN.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\oyfckhbbin.csv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc2cb70, ftCreationTime.dwHighDateTime=0x1d41d35, ftLastAccessTime.dwLowDateTime=0x863d7210, ftLastAccessTime.dwHighDateTime=0x1d41204, ftLastWriteTime.dwLowDateTime=0x6678039a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1e96)) returned 1 [0167.809] SetErrorMode (uMode=0x0) returned 0x1 [0167.809] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\oyFcKHBBiN.csv" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\oyfckhbbin.csv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\oyFcKHBBiN.csv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\oyfckhbbin.csv.partially.cryptonar")) returned 1 [0167.811] SetErrorMode (uMode=0x1) returned 0x0 [0167.811] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\uOy6.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\uoy6.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.812] SetErrorMode (uMode=0x0) returned 0x1 [0167.812] GetFileType (hFile=0x230) returned 0x1 [0167.812] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.813] SetErrorMode (uMode=0x1) returned 0x0 [0167.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\uOy6.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\uoy6.docx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x277edc00, ftCreationTime.dwHighDateTime=0x1d413e9, ftLastAccessTime.dwLowDateTime=0x844d5de0, ftLastAccessTime.dwHighDateTime=0x1d40fbf, ftLastWriteTime.dwLowDateTime=0x667a6742, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7302)) returned 1 [0167.813] SetErrorMode (uMode=0x0) returned 0x1 [0167.813] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\uOy6.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\uoy6.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\uOy6.docx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\uoy6.docx.partially.cryptonar")) returned 1 [0167.814] SetErrorMode (uMode=0x1) returned 0x0 [0167.814] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\0iiLqHEglCKTzm0ceK7.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\0iilqheglcktzm0cek7.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.815] SetErrorMode (uMode=0x0) returned 0x1 [0167.815] GetFileType (hFile=0x230) returned 0x1 [0167.815] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.817] SetErrorMode (uMode=0x1) returned 0x0 [0167.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\0iiLqHEglCKTzm0ceK7.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\0iilqheglcktzm0cek7.rtf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884bb590, ftCreationTime.dwHighDateTime=0x1d4155a, ftLastAccessTime.dwLowDateTime=0xaaabcc0, ftLastAccessTime.dwHighDateTime=0x1d416aa, ftLastWriteTime.dwLowDateTime=0x667a6742, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x202e)) returned 1 [0167.817] SetErrorMode (uMode=0x0) returned 0x1 [0167.817] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\0iiLqHEglCKTzm0ceK7.rtf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\0iilqheglcktzm0cek7.rtf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\0iiLqHEglCKTzm0ceK7.rtf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\0iilqheglcktzm0cek7.rtf.partially.cryptonar")) returned 1 [0167.819] SetErrorMode (uMode=0x1) returned 0x0 [0167.819] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\2tdjZAFradZA84IojZA.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\2tdjzafradza84iojza.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.820] SetErrorMode (uMode=0x0) returned 0x1 [0167.820] GetFileType (hFile=0x230) returned 0x1 [0167.820] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.821] SetErrorMode (uMode=0x1) returned 0x0 [0167.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\2tdjZAFradZA84IojZA.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\2tdjzafradza84iojza.ods"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14b73dd0, ftCreationTime.dwHighDateTime=0x1d411d0, ftLastAccessTime.dwLowDateTime=0x5a80bef0, ftLastAccessTime.dwHighDateTime=0x1d4180f, ftLastWriteTime.dwLowDateTime=0x667a6742, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe364)) returned 1 [0167.822] SetErrorMode (uMode=0x0) returned 0x1 [0167.822] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\2tdjZAFradZA84IojZA.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\2tdjzafradza84iojza.ods"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\2tdjZAFradZA84IojZA.ods.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\2tdjzafradza84iojza.ods.partially.cryptonar")) returned 1 [0167.824] SetErrorMode (uMode=0x1) returned 0x0 [0167.824] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6gq5q9avvSJ.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6gq5q9avvsj.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.827] SetErrorMode (uMode=0x0) returned 0x1 [0167.827] GetFileType (hFile=0x230) returned 0x1 [0167.827] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.828] SetErrorMode (uMode=0x1) returned 0x0 [0167.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6gq5q9avvSJ.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6gq5q9avvsj.pptx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932aa930, ftCreationTime.dwHighDateTime=0x1d412ee, ftLastAccessTime.dwLowDateTime=0x791e9a70, ftLastAccessTime.dwHighDateTime=0x1d41158, ftLastWriteTime.dwLowDateTime=0x667ccdf3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x106e0)) returned 1 [0167.828] SetErrorMode (uMode=0x0) returned 0x1 [0167.828] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6gq5q9avvSJ.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6gq5q9avvsj.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6gq5q9avvSJ.pptx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6gq5q9avvsj.pptx.partially.cryptonar")) returned 1 [0167.830] SetErrorMode (uMode=0x1) returned 0x0 [0167.830] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6jJ1gZ1QEE ALDiM.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6jj1gz1qee aldim.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.831] SetErrorMode (uMode=0x0) returned 0x1 [0167.831] GetFileType (hFile=0x230) returned 0x1 [0167.831] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.832] SetErrorMode (uMode=0x1) returned 0x0 [0167.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6jJ1gZ1QEE ALDiM.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6jj1gz1qee aldim.pdf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d60aa0, ftCreationTime.dwHighDateTime=0x1d4105b, ftLastAccessTime.dwLowDateTime=0x3ab0dc0, ftLastAccessTime.dwHighDateTime=0x1d41345, ftLastWriteTime.dwLowDateTime=0x667ccdf3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1688a)) returned 1 [0167.832] SetErrorMode (uMode=0x0) returned 0x1 [0167.832] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6jJ1gZ1QEE ALDiM.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6jj1gz1qee aldim.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6jJ1gZ1QEE ALDiM.pdf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6jj1gz1qee aldim.pdf.partially.cryptonar")) returned 1 [0167.833] SetErrorMode (uMode=0x1) returned 0x0 [0167.833] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6zUVGIcDZ13t9GN evjM.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6zuvgicdz13t9gn evjm.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.834] SetErrorMode (uMode=0x0) returned 0x1 [0167.834] GetFileType (hFile=0x230) returned 0x1 [0167.834] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.835] SetErrorMode (uMode=0x1) returned 0x0 [0167.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6zUVGIcDZ13t9GN evjM.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6zuvgicdz13t9gn evjm.ods"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae537190, ftCreationTime.dwHighDateTime=0x1d4121e, ftLastAccessTime.dwLowDateTime=0xf0eaa840, ftLastAccessTime.dwHighDateTime=0x1d4113b, ftLastWriteTime.dwLowDateTime=0x667ccdf3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x68bb)) returned 1 [0167.835] SetErrorMode (uMode=0x0) returned 0x1 [0167.835] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6zUVGIcDZ13t9GN evjM.ods" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6zuvgicdz13t9gn evjm.ods"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6zUVGIcDZ13t9GN evjM.ods.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6zuvgicdz13t9gn evjm.ods.partially.cryptonar")) returned 1 [0167.836] SetErrorMode (uMode=0x1) returned 0x0 [0167.836] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6_XH4ToeI1FwhP.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6_xh4toei1fwhp.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.837] SetErrorMode (uMode=0x0) returned 0x1 [0167.837] GetFileType (hFile=0x230) returned 0x1 [0167.837] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.838] SetErrorMode (uMode=0x1) returned 0x0 [0167.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6_XH4ToeI1FwhP.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6_xh4toei1fwhp.pdf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf60b6a0, ftCreationTime.dwHighDateTime=0x1d4184a, ftLastAccessTime.dwLowDateTime=0xe9edf1f0, ftLastAccessTime.dwHighDateTime=0x1d41596, ftLastWriteTime.dwLowDateTime=0x667ccdf3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17235)) returned 1 [0167.838] SetErrorMode (uMode=0x0) returned 0x1 [0167.838] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6_XH4ToeI1FwhP.pdf" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6_xh4toei1fwhp.pdf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\6_XH4ToeI1FwhP.pdf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\6_xh4toei1fwhp.pdf.partially.cryptonar")) returned 1 [0167.839] SetErrorMode (uMode=0x1) returned 0x0 [0167.839] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\CvjOxArHqGqV.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\cvjoxarhqgqv.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.840] SetErrorMode (uMode=0x0) returned 0x1 [0167.840] GetFileType (hFile=0x230) returned 0x1 [0167.840] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.841] SetErrorMode (uMode=0x1) returned 0x0 [0167.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\CvjOxArHqGqV.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\cvjoxarhqgqv.ots"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddb24480, ftCreationTime.dwHighDateTime=0x1d41641, ftLastAccessTime.dwLowDateTime=0x4551fd20, ftLastAccessTime.dwHighDateTime=0x1d41efc, ftLastWriteTime.dwLowDateTime=0x667ccdf3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14871)) returned 1 [0167.841] SetErrorMode (uMode=0x0) returned 0x1 [0167.841] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\CvjOxArHqGqV.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\cvjoxarhqgqv.ots"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\CvjOxArHqGqV.ots.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\cvjoxarhqgqv.ots.partially.cryptonar")) returned 1 [0167.842] SetErrorMode (uMode=0x1) returned 0x0 [0167.842] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\dR 0LXjaJI1dPS.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\dr 0lxjaji1dps.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.843] SetErrorMode (uMode=0x0) returned 0x1 [0167.843] GetFileType (hFile=0x230) returned 0x1 [0167.843] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.844] SetErrorMode (uMode=0x1) returned 0x0 [0167.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\dR 0LXjaJI1dPS.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\dr 0lxjaji1dps.doc"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cba94a0, ftCreationTime.dwHighDateTime=0x1d413c3, ftLastAccessTime.dwLowDateTime=0x4a44c510, ftLastAccessTime.dwHighDateTime=0x1d41bd2, ftLastWriteTime.dwLowDateTime=0x667f2b6e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2bd8)) returned 1 [0167.844] SetErrorMode (uMode=0x0) returned 0x1 [0167.844] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\dR 0LXjaJI1dPS.doc" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\dr 0lxjaji1dps.doc"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\dR 0LXjaJI1dPS.doc.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\dr 0lxjaji1dps.doc.partially.cryptonar")) returned 1 [0167.845] SetErrorMode (uMode=0x1) returned 0x0 [0167.845] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\Fkm978b-flJ.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\fkm978b-flj.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.845] SetErrorMode (uMode=0x0) returned 0x1 [0167.845] GetFileType (hFile=0x230) returned 0x1 [0167.845] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.846] SetErrorMode (uMode=0x1) returned 0x0 [0167.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\Fkm978b-flJ.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\fkm978b-flj.docx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x148be380, ftCreationTime.dwHighDateTime=0x1d41dc2, ftLastAccessTime.dwLowDateTime=0xce6a580, ftLastAccessTime.dwHighDateTime=0x1d412e5, ftLastWriteTime.dwLowDateTime=0x667f2b6e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa18f)) returned 1 [0167.846] SetErrorMode (uMode=0x0) returned 0x1 [0167.846] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\Fkm978b-flJ.docx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\fkm978b-flj.docx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\Fkm978b-flJ.docx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\fkm978b-flj.docx.partially.cryptonar")) returned 1 [0167.848] SetErrorMode (uMode=0x1) returned 0x0 [0167.848] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\lot1dqWBTMip-2QlXZ.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\lot1dqwbtmip-2qlxz.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.848] SetErrorMode (uMode=0x0) returned 0x1 [0167.848] GetFileType (hFile=0x230) returned 0x1 [0167.849] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.849] SetErrorMode (uMode=0x1) returned 0x0 [0167.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\lot1dqWBTMip-2QlXZ.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\lot1dqwbtmip-2qlxz.odp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5aeb5f0, ftCreationTime.dwHighDateTime=0x1d40f87, ftLastAccessTime.dwLowDateTime=0xcb65f7e0, ftLastAccessTime.dwHighDateTime=0x1d41588, ftLastWriteTime.dwLowDateTime=0x667f2b6e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1869b)) returned 1 [0167.849] SetErrorMode (uMode=0x0) returned 0x1 [0167.850] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\lot1dqWBTMip-2QlXZ.odp" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\lot1dqwbtmip-2qlxz.odp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\lot1dqWBTMip-2QlXZ.odp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\lot1dqwbtmip-2qlxz.odp.partially.cryptonar")) returned 1 [0167.851] SetErrorMode (uMode=0x1) returned 0x0 [0167.851] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\NoqQnyiB90.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\noqqnyib90.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.852] SetErrorMode (uMode=0x0) returned 0x1 [0167.852] GetFileType (hFile=0x230) returned 0x1 [0167.852] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.853] SetErrorMode (uMode=0x1) returned 0x0 [0167.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\NoqQnyiB90.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\noqqnyib90.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x167df000, ftCreationTime.dwHighDateTime=0x1d4104f, ftLastAccessTime.dwLowDateTime=0xfcec3480, ftLastAccessTime.dwHighDateTime=0x1d412a1, ftLastWriteTime.dwLowDateTime=0x667f2b6e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e2b)) returned 1 [0167.853] SetErrorMode (uMode=0x0) returned 0x1 [0167.853] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\NoqQnyiB90.xlsx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\noqqnyib90.xlsx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\NoqQnyiB90.xlsx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\noqqnyib90.xlsx.partially.cryptonar")) returned 1 [0167.854] SetErrorMode (uMode=0x1) returned 0x0 [0167.854] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\ubhh39FxligXP.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\ubhh39fxligxp.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.855] SetErrorMode (uMode=0x0) returned 0x1 [0167.855] GetFileType (hFile=0x230) returned 0x1 [0167.855] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.855] SetErrorMode (uMode=0x1) returned 0x0 [0167.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\ubhh39FxligXP.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\ubhh39fxligxp.ppt"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb27b5c00, ftCreationTime.dwHighDateTime=0x1d41c74, ftLastAccessTime.dwLowDateTime=0xcca628a0, ftLastAccessTime.dwHighDateTime=0x1d41970, ftLastWriteTime.dwLowDateTime=0x667f2b6e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x444d)) returned 1 [0167.855] SetErrorMode (uMode=0x0) returned 0x1 [0167.855] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\ubhh39FxligXP.ppt" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\ubhh39fxligxp.ppt"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\ubhh39FxligXP.ppt.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\ubhh39fxligxp.ppt.partially.cryptonar")) returned 1 [0167.856] SetErrorMode (uMode=0x1) returned 0x0 [0167.857] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\XYGU.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\xygu.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.858] SetErrorMode (uMode=0x0) returned 0x1 [0167.858] GetFileType (hFile=0x230) returned 0x1 [0167.858] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.858] SetErrorMode (uMode=0x1) returned 0x0 [0167.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\XYGU.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\xygu.ots"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75ff65a0, ftCreationTime.dwHighDateTime=0x1d41625, ftLastAccessTime.dwLowDateTime=0xeddd6200, ftLastAccessTime.dwHighDateTime=0x1d41be0, ftLastWriteTime.dwLowDateTime=0x668194bf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xcebc)) returned 1 [0167.858] SetErrorMode (uMode=0x0) returned 0x1 [0167.858] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\XYGU.ots" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\xygu.ots"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\XYGU.ots.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\xygu.ots.partially.cryptonar")) returned 1 [0167.860] SetErrorMode (uMode=0x1) returned 0x0 [0167.860] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\_ssQGx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\_ssqgx.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.860] SetErrorMode (uMode=0x0) returned 0x1 [0167.861] GetFileType (hFile=0x230) returned 0x1 [0167.861] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.861] SetErrorMode (uMode=0x1) returned 0x0 [0167.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\_ssQGx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\_ssqgx.pptx"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2c51800, ftCreationTime.dwHighDateTime=0x1d4150e, ftLastAccessTime.dwLowDateTime=0x8b9122c0, ftLastAccessTime.dwHighDateTime=0x1d41a1f, ftLastWriteTime.dwLowDateTime=0x668194bf, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18d6c)) returned 1 [0167.861] SetErrorMode (uMode=0x0) returned 0x1 [0167.861] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\_ssQGx.pptx" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\_ssqgx.pptx"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Documents\\v-Ope5\\aCWmprR\\_ssQGx.pptx.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\documents\\v-ope5\\acwmprr\\_ssqgx.pptx.partially.cryptonar")) returned 1 [0167.862] SetErrorMode (uMode=0x1) returned 0x0 [0167.862] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\ChromeSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\chromesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.863] SetErrorMode (uMode=0x0) returned 0x1 [0167.863] GetFileType (hFile=0x230) returned 0x1 [0167.863] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.877] SetErrorMode (uMode=0x1) returned 0x0 [0167.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\ChromeSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\chromesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a88a78f, ftCreationTime.dwHighDateTime=0x1d2d443, ftLastAccessTime.dwLowDateTime=0x5a88a78f, ftLastAccessTime.dwHighDateTime=0x1d2d443, ftLastWriteTime.dwLowDateTime=0x6683f0f0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x113f58)) returned 1 [0167.878] SetErrorMode (uMode=0x0) returned 0x1 [0167.878] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\ChromeSetup.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\chromesetup.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\ChromeSetup.exe.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\chromesetup.exe.partially.cryptonar")) returned 1 [0167.879] SetErrorMode (uMode=0x1) returned 0x0 [0167.879] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.880] SetErrorMode (uMode=0x0) returned 0x1 [0167.881] GetFileType (hFile=0x230) returned 0x1 [0167.881] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.881] SetErrorMode (uMode=0x1) returned 0x0 [0167.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae1b508e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1b508e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6683f0f0, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0167.882] SetErrorMode (uMode=0x0) returned 0x1 [0167.882] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\desktop.ini.partially.cryptonar")) returned 1 [0167.883] SetErrorMode (uMode=0x1) returned 0x0 [0167.883] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\jre-8u131-windows-x64.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\jre-8u131-windows-x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.884] SetErrorMode (uMode=0x0) returned 0x1 [0167.884] GetFileType (hFile=0x230) returned 0x1 [0167.885] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.961] SetErrorMode (uMode=0x1) returned 0x0 [0167.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\jre-8u131-windows-x64.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\jre-8u131-windows-x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53baf337, ftCreationTime.dwHighDateTime=0x1d2d445, ftLastAccessTime.dwLowDateTime=0x53baf337, ftLastAccessTime.dwHighDateTime=0x1d2d445, ftLastWriteTime.dwLowDateTime=0x668fdd8c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3e9e440)) returned 1 [0167.962] SetErrorMode (uMode=0x0) returned 0x1 [0167.962] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\jre-8u131-windows-x64.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\jre-8u131-windows-x64.exe"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Downloads\\jre-8u131-windows-x64.exe.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\downloads\\jre-8u131-windows-x64.exe.partially.cryptonar")) returned 1 [0167.964] SetErrorMode (uMode=0x1) returned 0x0 [0167.964] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.965] SetErrorMode (uMode=0x0) returned 0x1 [0167.965] GetFileType (hFile=0x230) returned 0x1 [0167.965] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.966] SetErrorMode (uMode=0x1) returned 0x0 [0167.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadb98fe8, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadb98fe8, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x668fdd8c, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0167.966] SetErrorMode (uMode=0x0) returned 0x1 [0167.967] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Bing.url.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\bing.url.partially.cryptonar")) returned 1 [0167.968] SetErrorMode (uMode=0x1) returned 0x0 [0167.968] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.969] SetErrorMode (uMode=0x0) returned 0x1 [0167.969] GetFileType (hFile=0x230) returned 0x1 [0167.969] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.970] SetErrorMode (uMode=0x1) returned 0x0 [0167.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae14297a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae14297a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x66923e08, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1 [0167.970] SetErrorMode (uMode=0x0) returned 0x1 [0167.970] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\desktop.ini.partially.cryptonar")) returned 1 [0167.973] SetErrorMode (uMode=0x1) returned 0x0 [0167.973] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.974] SetErrorMode (uMode=0x0) returned 0x1 [0167.974] GetFileType (hFile=0x230) returned 0x1 [0167.974] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.975] SetErrorMode (uMode=0x1) returned 0x0 [0167.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xadc0b718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xadc0b718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x66923e08, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0167.976] SetErrorMode (uMode=0x0) returned 0x1 [0167.976] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Favorites\\Links\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\favorites\\links\\desktop.ini.partially.cryptonar")) returned 1 [0167.977] SetErrorMode (uMode=0x1) returned 0x0 [0167.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.979] SetErrorMode (uMode=0x0) returned 0x1 [0167.979] GetFileType (hFile=0x230) returned 0x1 [0167.979] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.979] SetErrorMode (uMode=0x1) returned 0x0 [0167.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae227795, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae227795, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x66923e08, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0167.979] SetErrorMode (uMode=0x0) returned 0x1 [0167.979] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\desktop.ini.partially.cryptonar")) returned 1 [0167.983] SetErrorMode (uMode=0x1) returned 0x0 [0167.983] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.984] SetErrorMode (uMode=0x0) returned 0x1 [0167.984] GetFileType (hFile=0x230) returned 0x1 [0167.984] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.985] SetErrorMode (uMode=0x1) returned 0x0 [0167.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2c00dd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae2c00dd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x66923e08, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x207)) returned 1 [0167.986] SetErrorMode (uMode=0x0) returned 0x1 [0167.986] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\Desktop.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\Desktop.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\desktop.lnk.partially.cryptonar")) returned 1 [0167.988] SetErrorMode (uMode=0x1) returned 0x0 [0167.988] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\Downloads.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\downloads.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0167.989] SetErrorMode (uMode=0x0) returned 0x1 [0167.989] GetFileType (hFile=0x230) returned 0x1 [0167.989] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0167.998] SetErrorMode (uMode=0x1) returned 0x0 [0167.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\Downloads.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2c00dd, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae2c00dd, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x66952d2e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3cc)) returned 1 [0167.999] SetErrorMode (uMode=0x0) returned 0x1 [0167.999] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\Downloads.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\Downloads.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\downloads.lnk.partially.cryptonar")) returned 1 [0168.001] SetErrorMode (uMode=0x1) returned 0x0 [0168.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\OneDrive.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\onedrive.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.002] SetErrorMode (uMode=0x0) returned 0x1 [0168.002] GetFileType (hFile=0x230) returned 0x1 [0168.002] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.028] SetErrorMode (uMode=0x1) returned 0x0 [0168.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\OneDrive.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\onedrive.lnk"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16cc45b6, ftCreationTime.dwHighDateTime=0x1d2fada, ftLastAccessTime.dwLowDateTime=0x60870519, ftLastAccessTime.dwHighDateTime=0x1d3368d, ftLastWriteTime.dwLowDateTime=0x669965bc, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x416)) returned 1 [0168.028] SetErrorMode (uMode=0x0) returned 0x1 [0168.028] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\OneDrive.lnk" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\onedrive.lnk"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Links\\OneDrive.lnk.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\links\\onedrive.lnk.partially.cryptonar")) returned 1 [0168.030] SetErrorMode (uMode=0x1) returned 0x0 [0168.031] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.032] SetErrorMode (uMode=0x0) returned 0x1 [0168.032] GetFileType (hFile=0x230) returned 0x1 [0168.032] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.033] SetErrorMode (uMode=0x1) returned 0x0 [0168.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae168be9, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae168be9, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x669bc709, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0168.033] SetErrorMode (uMode=0x0) returned 0x1 [0168.034] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\desktop.ini.partially.cryptonar")) returned 1 [0168.216] SetErrorMode (uMode=0x1) returned 0x0 [0168.216] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\lzeLpmG6REXwbVK.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\lzelpmg6rexwbvk.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.218] SetErrorMode (uMode=0x0) returned 0x1 [0168.218] GetFileType (hFile=0x230) returned 0x1 [0168.218] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.219] SetErrorMode (uMode=0x1) returned 0x0 [0168.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\lzeLpmG6REXwbVK.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\lzelpmg6rexwbvk.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b0e6a60, ftCreationTime.dwHighDateTime=0x1d40f87, ftLastAccessTime.dwLowDateTime=0xa8e2a430, ftLastAccessTime.dwHighDateTime=0x1d41c94, ftLastWriteTime.dwLowDateTime=0x66b8950a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15bc8)) returned 1 [0168.219] SetErrorMode (uMode=0x0) returned 0x1 [0168.219] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\lzeLpmG6REXwbVK.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\lzelpmg6rexwbvk.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\lzeLpmG6REXwbVK.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\lzelpmg6rexwbvk.wav.partially.cryptonar")) returned 1 [0168.221] SetErrorMode (uMode=0x1) returned 0x0 [0168.221] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\qO8fH14fv-Yi.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\qo8fh14fv-yi.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.222] SetErrorMode (uMode=0x0) returned 0x1 [0168.222] GetFileType (hFile=0x230) returned 0x1 [0168.222] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.223] SetErrorMode (uMode=0x1) returned 0x0 [0168.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\qO8fH14fv-Yi.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\qo8fh14fv-yi.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6b85410, ftCreationTime.dwHighDateTime=0x1d4182f, ftLastAccessTime.dwLowDateTime=0xf69ca9e0, ftLastAccessTime.dwHighDateTime=0x1d41f1a, ftLastWriteTime.dwLowDateTime=0x66b8950a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16cd9)) returned 1 [0168.223] SetErrorMode (uMode=0x0) returned 0x1 [0168.223] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\qO8fH14fv-Yi.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\qo8fh14fv-yi.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\qO8fH14fv-Yi.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\qo8fh14fv-yi.wav.partially.cryptonar")) returned 1 [0168.224] SetErrorMode (uMode=0x1) returned 0x0 [0168.224] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\zV-BMR0VZ7KmWw.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\zv-bmr0vz7kmww.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.225] SetErrorMode (uMode=0x0) returned 0x1 [0168.225] GetFileType (hFile=0x230) returned 0x1 [0168.225] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.226] SetErrorMode (uMode=0x1) returned 0x0 [0168.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\zV-BMR0VZ7KmWw.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\zv-bmr0vz7kmww.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f7e00d0, ftCreationTime.dwHighDateTime=0x1d41578, ftLastAccessTime.dwLowDateTime=0xc4edfa30, ftLastAccessTime.dwHighDateTime=0x1d4199c, ftLastWriteTime.dwLowDateTime=0x66b8950a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6e98)) returned 1 [0168.226] SetErrorMode (uMode=0x0) returned 0x1 [0168.226] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\zV-BMR0VZ7KmWw.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\zv-bmr0vz7kmww.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\zV-BMR0VZ7KmWw.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\zv-bmr0vz7kmww.mp3.partially.cryptonar")) returned 1 [0168.227] SetErrorMode (uMode=0x1) returned 0x0 [0168.228] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\6MVvgZZoA7wPduFZnGM.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\6mvvgzzoa7wpdufzngm.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.228] SetErrorMode (uMode=0x0) returned 0x1 [0168.228] GetFileType (hFile=0x230) returned 0x1 [0168.228] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.229] SetErrorMode (uMode=0x1) returned 0x0 [0168.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\6MVvgZZoA7wPduFZnGM.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\6mvvgzzoa7wpdufzngm.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x384328a0, ftCreationTime.dwHighDateTime=0x1d41ee0, ftLastAccessTime.dwLowDateTime=0xe2a7d280, ftLastAccessTime.dwHighDateTime=0x1d415ff, ftLastWriteTime.dwLowDateTime=0x66b8950a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfbf1)) returned 1 [0168.229] SetErrorMode (uMode=0x0) returned 0x1 [0168.229] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\6MVvgZZoA7wPduFZnGM.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\6mvvgzzoa7wpdufzngm.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\6MVvgZZoA7wPduFZnGM.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\6mvvgzzoa7wpdufzngm.mp3.partially.cryptonar")) returned 1 [0168.230] SetErrorMode (uMode=0x1) returned 0x0 [0168.230] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\evlIc1-59tqw pH.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\evlic1-59tqw ph.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.231] SetErrorMode (uMode=0x0) returned 0x1 [0168.231] GetFileType (hFile=0x230) returned 0x1 [0168.231] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.232] SetErrorMode (uMode=0x1) returned 0x0 [0168.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\evlIc1-59tqw pH.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\evlic1-59tqw ph.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd18a250, ftCreationTime.dwHighDateTime=0x1d4190f, ftLastAccessTime.dwLowDateTime=0x1eb8540, ftLastAccessTime.dwHighDateTime=0x1d4130a, ftLastWriteTime.dwLowDateTime=0x66b8950a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15c68)) returned 1 [0168.232] SetErrorMode (uMode=0x0) returned 0x1 [0168.232] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\evlIc1-59tqw pH.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\evlic1-59tqw ph.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\evlIc1-59tqw pH.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\evlic1-59tqw ph.wav.partially.cryptonar")) returned 1 [0168.234] SetErrorMode (uMode=0x1) returned 0x0 [0168.234] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\iUBTj4V.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\iubtj4v.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.235] SetErrorMode (uMode=0x0) returned 0x1 [0168.235] GetFileType (hFile=0x230) returned 0x1 [0168.235] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.236] SetErrorMode (uMode=0x1) returned 0x0 [0168.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\iUBTj4V.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\iubtj4v.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf24d90, ftCreationTime.dwHighDateTime=0x1d41570, ftLastAccessTime.dwLowDateTime=0x842dbf70, ftLastAccessTime.dwHighDateTime=0x1d413c6, ftLastWriteTime.dwLowDateTime=0x66bac727, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6f90)) returned 1 [0168.236] SetErrorMode (uMode=0x0) returned 0x1 [0168.236] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\iUBTj4V.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\iubtj4v.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\iUBTj4V.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\iubtj4v.wav.partially.cryptonar")) returned 1 [0168.241] SetErrorMode (uMode=0x1) returned 0x0 [0168.241] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\A8v8SkkJesmJ.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\a8v8skkjesmj.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.242] SetErrorMode (uMode=0x0) returned 0x1 [0168.242] GetFileType (hFile=0x230) returned 0x1 [0168.242] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.243] SetErrorMode (uMode=0x1) returned 0x0 [0168.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\A8v8SkkJesmJ.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\a8v8skkjesmj.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa549510, ftCreationTime.dwHighDateTime=0x1d410d9, ftLastAccessTime.dwLowDateTime=0xa13c66e0, ftLastAccessTime.dwHighDateTime=0x1d4144b, ftLastWriteTime.dwLowDateTime=0x66bac727, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8493)) returned 1 [0168.243] SetErrorMode (uMode=0x0) returned 0x1 [0168.243] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\A8v8SkkJesmJ.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\a8v8skkjesmj.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\A8v8SkkJesmJ.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\a8v8skkjesmj.mp3.partially.cryptonar")) returned 1 [0168.244] SetErrorMode (uMode=0x1) returned 0x0 [0168.244] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\hJJOtnpBI0.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\hjjotnpbi0.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.245] SetErrorMode (uMode=0x0) returned 0x1 [0168.245] GetFileType (hFile=0x230) returned 0x1 [0168.245] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.246] SetErrorMode (uMode=0x1) returned 0x0 [0168.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\hJJOtnpBI0.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\hjjotnpbi0.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5481c3b0, ftCreationTime.dwHighDateTime=0x1d41b24, ftLastAccessTime.dwLowDateTime=0xd6890400, ftLastAccessTime.dwHighDateTime=0x1d41c1d, ftLastWriteTime.dwLowDateTime=0x66bac727, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x833d)) returned 1 [0168.246] SetErrorMode (uMode=0x0) returned 0x1 [0168.246] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\hJJOtnpBI0.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\hjjotnpbi0.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\hJJOtnpBI0.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\hjjotnpbi0.m4a.partially.cryptonar")) returned 1 [0168.247] SetErrorMode (uMode=0x1) returned 0x0 [0168.247] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\WcSmnJYJusApLn7w.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\wcsmnjyjusapln7w.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.325] SetErrorMode (uMode=0x0) returned 0x1 [0168.326] GetFileType (hFile=0x230) returned 0x1 [0168.326] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.330] SetErrorMode (uMode=0x1) returned 0x0 [0168.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\WcSmnJYJusApLn7w.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\wcsmnjyjusapln7w.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eebef0, ftCreationTime.dwHighDateTime=0x1d4176c, ftLastAccessTime.dwLowDateTime=0x49125e0, ftLastAccessTime.dwHighDateTime=0x1d419c5, ftLastWriteTime.dwLowDateTime=0x66c9143b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x780d)) returned 1 [0168.330] SetErrorMode (uMode=0x0) returned 0x1 [0168.330] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\WcSmnJYJusApLn7w.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\wcsmnjyjusapln7w.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\kAGTnS\\WcSmnJYJusApLn7w.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\kagtns\\wcsmnjyjusapln7w.m4a.partially.cryptonar")) returned 1 [0168.331] SetErrorMode (uMode=0x1) returned 0x0 [0168.331] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\SQYPyDz3.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\sqypydz3.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.333] SetErrorMode (uMode=0x0) returned 0x1 [0168.333] GetFileType (hFile=0x230) returned 0x1 [0168.333] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.333] SetErrorMode (uMode=0x1) returned 0x0 [0168.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\SQYPyDz3.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\sqypydz3.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x943226d0, ftCreationTime.dwHighDateTime=0x1d41980, ftLastAccessTime.dwLowDateTime=0xac682130, ftLastAccessTime.dwHighDateTime=0x1d41851, ftLastWriteTime.dwLowDateTime=0x66c9143b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15efa)) returned 1 [0168.334] SetErrorMode (uMode=0x0) returned 0x1 [0168.334] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\SQYPyDz3.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\sqypydz3.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\SQYPyDz3.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\sqypydz3.mp3.partially.cryptonar")) returned 1 [0168.335] SetErrorMode (uMode=0x1) returned 0x0 [0168.335] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\tD8OEbpCP44l1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\td8oebpcp44l1.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.336] SetErrorMode (uMode=0x0) returned 0x1 [0168.336] GetFileType (hFile=0x230) returned 0x1 [0168.336] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.337] SetErrorMode (uMode=0x1) returned 0x0 [0168.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\tD8OEbpCP44l1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\td8oebpcp44l1.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a266290, ftCreationTime.dwHighDateTime=0x1d41f8c, ftLastAccessTime.dwLowDateTime=0xbc8625f0, ftLastAccessTime.dwHighDateTime=0x1d41d59, ftLastWriteTime.dwLowDateTime=0x66c9143b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x327a)) returned 1 [0168.337] SetErrorMode (uMode=0x0) returned 0x1 [0168.337] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\tD8OEbpCP44l1.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\td8oebpcp44l1.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\tD8OEbpCP44l1.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\td8oebpcp44l1.m4a.partially.cryptonar")) returned 1 [0168.338] SetErrorMode (uMode=0x1) returned 0x0 [0168.338] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\TjMNKYynuHROVfhewSOJ.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\tjmnkyynuhrovfhewsoj.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.339] SetErrorMode (uMode=0x0) returned 0x1 [0168.339] GetFileType (hFile=0x230) returned 0x1 [0168.339] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.339] SetErrorMode (uMode=0x1) returned 0x0 [0168.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\TjMNKYynuHROVfhewSOJ.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\tjmnkyynuhrovfhewsoj.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2765eff0, ftCreationTime.dwHighDateTime=0x1d41561, ftLastAccessTime.dwLowDateTime=0xb09c6a90, ftLastAccessTime.dwHighDateTime=0x1d41568, ftLastWriteTime.dwLowDateTime=0x66c9143b, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18ce)) returned 1 [0168.340] SetErrorMode (uMode=0x0) returned 0x1 [0168.340] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\TjMNKYynuHROVfhewSOJ.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\tjmnkyynuhrovfhewsoj.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\PqambTdEy2WK\\PWEcj96cPO2-96qJtzlZ\\WAfknykUW\\WSRthPx6_6\\TjMNKYynuHROVfhewSOJ.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\pqambtdey2wk\\pwecj96cpo2-96qjtzlz\\wafknykuw\\wsrthpx6_6\\tjmnkyynuhrovfhewsoj.wav.partially.cryptonar")) returned 1 [0168.341] SetErrorMode (uMode=0x1) returned 0x0 [0168.341] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\6ayJ6y5wXx.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\6ayj6y5wxx.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.351] SetErrorMode (uMode=0x0) returned 0x1 [0168.351] GetFileType (hFile=0x230) returned 0x1 [0168.351] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.352] SetErrorMode (uMode=0x1) returned 0x0 [0168.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\6ayJ6y5wXx.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\6ayj6y5wxx.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed377be0, ftCreationTime.dwHighDateTime=0x1d4125a, ftLastAccessTime.dwLowDateTime=0x8bcf0370, ftLastAccessTime.dwHighDateTime=0x1d4171c, ftLastWriteTime.dwLowDateTime=0x66cb8843, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdd9)) returned 1 [0168.352] SetErrorMode (uMode=0x0) returned 0x1 [0168.353] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\6ayJ6y5wXx.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\6ayj6y5wxx.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\6ayJ6y5wXx.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\6ayj6y5wxx.mp3.partially.cryptonar")) returned 1 [0168.354] SetErrorMode (uMode=0x1) returned 0x0 [0168.354] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\ch9h4K.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\ch9h4k.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.355] SetErrorMode (uMode=0x0) returned 0x1 [0168.355] GetFileType (hFile=0x230) returned 0x1 [0168.355] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.356] SetErrorMode (uMode=0x1) returned 0x0 [0168.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\ch9h4K.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\ch9h4k.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ac808b0, ftCreationTime.dwHighDateTime=0x1d41c77, ftLastAccessTime.dwLowDateTime=0x33f1be70, ftLastAccessTime.dwHighDateTime=0x1d418c2, ftLastWriteTime.dwLowDateTime=0x66cb8843, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6882)) returned 1 [0168.356] SetErrorMode (uMode=0x0) returned 0x1 [0168.356] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\ch9h4K.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\ch9h4k.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\ch9h4K.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\ch9h4k.mp3.partially.cryptonar")) returned 1 [0168.357] SetErrorMode (uMode=0x1) returned 0x0 [0168.358] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\TlbTgQ-HkucZBBVUNp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\tlbtgq-hkuczbbvunp.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.359] SetErrorMode (uMode=0x0) returned 0x1 [0168.359] GetFileType (hFile=0x230) returned 0x1 [0168.359] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.359] SetErrorMode (uMode=0x1) returned 0x0 [0168.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\TlbTgQ-HkucZBBVUNp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\tlbtgq-hkuczbbvunp.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc11c0030, ftCreationTime.dwHighDateTime=0x1d415a2, ftLastAccessTime.dwLowDateTime=0x5628a7a0, ftLastAccessTime.dwHighDateTime=0x1d4188c, ftLastWriteTime.dwLowDateTime=0x66cddcb8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11d08)) returned 1 [0168.359] SetErrorMode (uMode=0x0) returned 0x1 [0168.359] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\TlbTgQ-HkucZBBVUNp.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\tlbtgq-hkuczbbvunp.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\TlbTgQ-HkucZBBVUNp.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\tlbtgq-hkuczbbvunp.wav.partially.cryptonar")) returned 1 [0168.361] SetErrorMode (uMode=0x1) returned 0x0 [0168.361] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\7S2v3.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\7s2v3.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.362] SetErrorMode (uMode=0x0) returned 0x1 [0168.362] GetFileType (hFile=0x230) returned 0x1 [0168.362] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.363] SetErrorMode (uMode=0x1) returned 0x0 [0168.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\7S2v3.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\7s2v3.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865af9a0, ftCreationTime.dwHighDateTime=0x1d40fea, ftLastAccessTime.dwLowDateTime=0x35ee4c60, ftLastAccessTime.dwHighDateTime=0x1d413cd, ftLastWriteTime.dwLowDateTime=0x66cddcb8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14400)) returned 1 [0168.363] SetErrorMode (uMode=0x0) returned 0x1 [0168.363] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\7S2v3.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\7s2v3.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\7S2v3.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\7s2v3.mp3.partially.cryptonar")) returned 1 [0168.365] SetErrorMode (uMode=0x1) returned 0x0 [0168.365] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\AMTTq_EtBPP8qnyP.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\amttq_etbpp8qnyp.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.366] SetErrorMode (uMode=0x0) returned 0x1 [0168.366] GetFileType (hFile=0x230) returned 0x1 [0168.366] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.367] SetErrorMode (uMode=0x1) returned 0x0 [0168.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\AMTTq_EtBPP8qnyP.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\amttq_etbpp8qnyp.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc21c1ed0, ftCreationTime.dwHighDateTime=0x1d417d6, ftLastAccessTime.dwLowDateTime=0x35f6d360, ftLastAccessTime.dwHighDateTime=0x1d41efb, ftLastWriteTime.dwLowDateTime=0x66cddcb8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x625d)) returned 1 [0168.367] SetErrorMode (uMode=0x0) returned 0x1 [0168.367] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\AMTTq_EtBPP8qnyP.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\amttq_etbpp8qnyp.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\AMTTq_EtBPP8qnyP.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\amttq_etbpp8qnyp.wav.partially.cryptonar")) returned 1 [0168.368] SetErrorMode (uMode=0x1) returned 0x0 [0168.368] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\DXAEU5TmZngOS.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\dxaeu5tmzngos.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.369] SetErrorMode (uMode=0x0) returned 0x1 [0168.369] GetFileType (hFile=0x230) returned 0x1 [0168.369] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.370] SetErrorMode (uMode=0x1) returned 0x0 [0168.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\DXAEU5TmZngOS.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\dxaeu5tmzngos.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b97f8f0, ftCreationTime.dwHighDateTime=0x1d41d32, ftLastAccessTime.dwLowDateTime=0xcd43c4d0, ftLastAccessTime.dwHighDateTime=0x1d41947, ftLastWriteTime.dwLowDateTime=0x66cddcb8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe6ba)) returned 1 [0168.370] SetErrorMode (uMode=0x0) returned 0x1 [0168.370] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\DXAEU5TmZngOS.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\dxaeu5tmzngos.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\DXAEU5TmZngOS.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\dxaeu5tmzngos.wav.partially.cryptonar")) returned 1 [0168.371] SetErrorMode (uMode=0x1) returned 0x0 [0168.371] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\fW2Kj.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\fw2kj.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.372] SetErrorMode (uMode=0x0) returned 0x1 [0168.372] GetFileType (hFile=0x230) returned 0x1 [0168.372] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.373] SetErrorMode (uMode=0x1) returned 0x0 [0168.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\fW2Kj.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\fw2kj.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb03a2f0, ftCreationTime.dwHighDateTime=0x1d41778, ftLastAccessTime.dwLowDateTime=0xe970ed50, ftLastAccessTime.dwHighDateTime=0x1d411b2, ftLastWriteTime.dwLowDateTime=0x66cddcb8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x292e)) returned 1 [0168.373] SetErrorMode (uMode=0x0) returned 0x1 [0168.373] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\fW2Kj.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\fw2kj.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\fW2Kj.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\fw2kj.mp3.partially.cryptonar")) returned 1 [0168.401] SetErrorMode (uMode=0x1) returned 0x0 [0168.401] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\yMrWmFy4iaqomTaiyj.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\ymrwmfy4iaqomtaiyj.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.402] SetErrorMode (uMode=0x0) returned 0x1 [0168.402] GetFileType (hFile=0x230) returned 0x1 [0168.402] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.403] SetErrorMode (uMode=0x1) returned 0x0 [0168.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\yMrWmFy4iaqomTaiyj.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\ymrwmfy4iaqomtaiyj.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf892420, ftCreationTime.dwHighDateTime=0x1d411d1, ftLastAccessTime.dwLowDateTime=0x56ad7f0, ftLastAccessTime.dwHighDateTime=0x1d41e42, ftLastWriteTime.dwLowDateTime=0x66d29d73, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x35fd)) returned 1 [0168.403] SetErrorMode (uMode=0x0) returned 0x1 [0168.403] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\yMrWmFy4iaqomTaiyj.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\ymrwmfy4iaqomtaiyj.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\yMrWmFy4iaqomTaiyj.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\ymrwmfy4iaqomtaiyj.m4a.partially.cryptonar")) returned 1 [0168.407] SetErrorMode (uMode=0x1) returned 0x0 [0168.407] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\5W1hGDvzWZ6 qYI98H-.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\5w1hgdvzwz6 qyi98h-.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.409] SetErrorMode (uMode=0x0) returned 0x1 [0168.409] GetFileType (hFile=0x230) returned 0x1 [0168.409] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.409] SetErrorMode (uMode=0x1) returned 0x0 [0168.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\5W1hGDvzWZ6 qYI98H-.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\5w1hgdvzwz6 qyi98h-.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x364aeb10, ftCreationTime.dwHighDateTime=0x1d4194e, ftLastAccessTime.dwLowDateTime=0x70ab7ed0, ftLastAccessTime.dwHighDateTime=0x1d41455, ftLastWriteTime.dwLowDateTime=0x66d51e15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8ec8)) returned 1 [0168.409] SetErrorMode (uMode=0x0) returned 0x1 [0168.409] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\5W1hGDvzWZ6 qYI98H-.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\5w1hgdvzwz6 qyi98h-.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\5W1hGDvzWZ6 qYI98H-.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\5w1hgdvzwz6 qyi98h-.wav.partially.cryptonar")) returned 1 [0168.411] SetErrorMode (uMode=0x1) returned 0x0 [0168.411] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\EIUyke0U2H.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\eiuyke0u2h.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.412] SetErrorMode (uMode=0x0) returned 0x1 [0168.412] GetFileType (hFile=0x230) returned 0x1 [0168.412] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.413] SetErrorMode (uMode=0x1) returned 0x0 [0168.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\EIUyke0U2H.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\eiuyke0u2h.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b9df200, ftCreationTime.dwHighDateTime=0x1d419c0, ftLastAccessTime.dwLowDateTime=0xe76ebe40, ftLastAccessTime.dwHighDateTime=0x1d41df3, ftLastWriteTime.dwLowDateTime=0x66d51e15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8785)) returned 1 [0168.413] SetErrorMode (uMode=0x0) returned 0x1 [0168.413] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\EIUyke0U2H.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\eiuyke0u2h.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\EIUyke0U2H.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\eiuyke0u2h.m4a.partially.cryptonar")) returned 1 [0168.414] SetErrorMode (uMode=0x1) returned 0x0 [0168.415] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\fztOURH.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\fztourh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.416] SetErrorMode (uMode=0x0) returned 0x1 [0168.416] GetFileType (hFile=0x230) returned 0x1 [0168.416] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.416] SetErrorMode (uMode=0x1) returned 0x0 [0168.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\fztOURH.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\fztourh.wav"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb569930, ftCreationTime.dwHighDateTime=0x1d419ce, ftLastAccessTime.dwLowDateTime=0x6c7eda10, ftLastAccessTime.dwHighDateTime=0x1d410fd, ftLastWriteTime.dwLowDateTime=0x66d51e15, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d5d)) returned 1 [0168.417] SetErrorMode (uMode=0x0) returned 0x1 [0168.417] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\fztOURH.wav" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\fztourh.wav"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\fztOURH.wav.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\fztourh.wav.partially.cryptonar")) returned 1 [0168.418] SetErrorMode (uMode=0x1) returned 0x0 [0168.418] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\H5qWlX093F1t2.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\h5qwlx093f1t2.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.419] SetErrorMode (uMode=0x0) returned 0x1 [0168.419] GetFileType (hFile=0x230) returned 0x1 [0168.419] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.421] SetErrorMode (uMode=0x1) returned 0x0 [0168.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\H5qWlX093F1t2.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\h5qwlx093f1t2.m4a"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bab3f20, ftCreationTime.dwHighDateTime=0x1d410eb, ftLastAccessTime.dwLowDateTime=0x170f30e0, ftLastAccessTime.dwHighDateTime=0x1d4180d, ftLastWriteTime.dwLowDateTime=0x66d762d5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13c35)) returned 1 [0168.421] SetErrorMode (uMode=0x0) returned 0x1 [0168.421] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\H5qWlX093F1t2.m4a" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\h5qwlx093f1t2.m4a"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\H5qWlX093F1t2.m4a.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\h5qwlx093f1t2.m4a.partially.cryptonar")) returned 1 [0168.422] SetErrorMode (uMode=0x1) returned 0x0 [0168.422] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\ocwG6HTox5lyaHT.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\ocwg6htox5lyaht.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.423] SetErrorMode (uMode=0x0) returned 0x1 [0168.423] GetFileType (hFile=0x230) returned 0x1 [0168.423] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.424] SetErrorMode (uMode=0x1) returned 0x0 [0168.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\ocwG6HTox5lyaHT.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\ocwg6htox5lyaht.mp3"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe60d1a50, ftCreationTime.dwHighDateTime=0x1d4144e, ftLastAccessTime.dwLowDateTime=0xc2f9ff30, ftLastAccessTime.dwHighDateTime=0x1d41b59, ftLastWriteTime.dwLowDateTime=0x66d762d5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb3da)) returned 1 [0168.424] SetErrorMode (uMode=0x0) returned 0x1 [0168.424] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\ocwG6HTox5lyaHT.mp3" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\ocwg6htox5lyaht.mp3"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Music\\_-VxvYevz4sNof\\bNo8n0wHYpMhj\\HCUMyIvgeF8W -MjyS\\ocwG6HTox5lyaHT.mp3.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\music\\_-vxvyevz4snof\\bno8n0whypmhj\\hcumyivgef8w -mjys\\ocwg6htox5lyaht.mp3.partially.cryptonar")) returned 1 [0168.425] SetErrorMode (uMode=0x1) returned 0x0 [0168.425] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\onedrive\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.426] SetErrorMode (uMode=0x0) returned 0x1 [0168.426] GetFileType (hFile=0x230) returned 0x1 [0168.426] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.427] SetErrorMode (uMode=0x1) returned 0x0 [0168.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\onedrive\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3227dae2, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3227dae2, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x66d762d5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x67)) returned 1 [0168.427] SetErrorMode (uMode=0x0) returned 0x1 [0168.427] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\onedrive\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\OneDrive\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\onedrive\\desktop.ini.partially.cryptonar")) returned 1 [0168.428] SetErrorMode (uMode=0x1) returned 0x0 [0168.429] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Ba_CeP8n55WSxdfdVf.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\ba_cep8n55wsxdfdvf.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.429] SetErrorMode (uMode=0x0) returned 0x1 [0168.429] GetFileType (hFile=0x230) returned 0x1 [0168.429] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.430] SetErrorMode (uMode=0x1) returned 0x0 [0168.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Ba_CeP8n55WSxdfdVf.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\ba_cep8n55wsxdfdvf.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e50ed0, ftCreationTime.dwHighDateTime=0x1d4157b, ftLastAccessTime.dwLowDateTime=0xdca9d1e0, ftLastAccessTime.dwHighDateTime=0x1d41554, ftLastWriteTime.dwLowDateTime=0x66d762d5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf8f9)) returned 1 [0168.430] SetErrorMode (uMode=0x0) returned 0x1 [0168.430] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Ba_CeP8n55WSxdfdVf.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\ba_cep8n55wsxdfdvf.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Ba_CeP8n55WSxdfdVf.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\ba_cep8n55wsxdfdvf.png.partially.cryptonar")) returned 1 [0168.431] SetErrorMode (uMode=0x1) returned 0x0 [0168.431] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.432] SetErrorMode (uMode=0x0) returned 0x1 [0168.432] GetFileType (hFile=0x230) returned 0x1 [0168.432] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.433] SetErrorMode (uMode=0x1) returned 0x0 [0168.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae11c718, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae11c718, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x66d762d5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0168.433] SetErrorMode (uMode=0x0) returned 0x1 [0168.433] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\desktop.ini.partially.cryptonar")) returned 1 [0168.434] SetErrorMode (uMode=0x1) returned 0x0 [0168.434] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dOazB2Ocx.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\doazb2ocx.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.435] SetErrorMode (uMode=0x0) returned 0x1 [0168.435] GetFileType (hFile=0x230) returned 0x1 [0168.435] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.435] SetErrorMode (uMode=0x1) returned 0x0 [0168.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dOazB2Ocx.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\doazb2ocx.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5418c260, ftCreationTime.dwHighDateTime=0x1d417e7, ftLastAccessTime.dwLowDateTime=0xa9cdd520, ftLastAccessTime.dwHighDateTime=0x1d416ce, ftLastWriteTime.dwLowDateTime=0x66d762d5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa14d)) returned 1 [0168.448] SetErrorMode (uMode=0x0) returned 0x1 [0168.448] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dOazB2Ocx.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\doazb2ocx.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\dOazB2Ocx.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\doazb2ocx.jpg.partially.cryptonar")) returned 1 [0168.450] SetErrorMode (uMode=0x1) returned 0x0 [0168.450] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\iYg08UGPaMfu.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\iyg08ugpamfu.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.451] SetErrorMode (uMode=0x0) returned 0x1 [0168.451] GetFileType (hFile=0x230) returned 0x1 [0168.451] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.451] SetErrorMode (uMode=0x1) returned 0x0 [0168.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\iYg08UGPaMfu.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\iyg08ugpamfu.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d602540, ftCreationTime.dwHighDateTime=0x1d41843, ftLastAccessTime.dwLowDateTime=0x19438600, ftLastAccessTime.dwHighDateTime=0x1d419ce, ftLastWriteTime.dwLowDateTime=0x66d9c51e, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x2163)) returned 1 [0168.451] SetErrorMode (uMode=0x0) returned 0x1 [0168.451] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\iYg08UGPaMfu.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\iyg08ugpamfu.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\iYg08UGPaMfu.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\iyg08ugpamfu.jpg.partially.cryptonar")) returned 1 [0168.452] SetErrorMode (uMode=0x1) returned 0x0 [0168.452] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\2pc4kVy1h.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\2pc4kvy1h.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.453] SetErrorMode (uMode=0x0) returned 0x1 [0168.453] GetFileType (hFile=0x230) returned 0x1 [0168.453] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.454] SetErrorMode (uMode=0x1) returned 0x0 [0168.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\2pc4kVy1h.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\2pc4kvy1h.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ac54c0, ftCreationTime.dwHighDateTime=0x1d41f10, ftLastAccessTime.dwLowDateTime=0x2b35f570, ftLastAccessTime.dwHighDateTime=0x1d41058, ftLastWriteTime.dwLowDateTime=0x66dc26c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xdea6)) returned 1 [0168.454] SetErrorMode (uMode=0x0) returned 0x1 [0168.454] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\2pc4kVy1h.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\2pc4kvy1h.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\2pc4kVy1h.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\2pc4kvy1h.png.partially.cryptonar")) returned 1 [0168.455] SetErrorMode (uMode=0x1) returned 0x0 [0168.455] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\aEFrpccaFMe_fD2rGk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\aefrpccafme_fd2rgk.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.456] SetErrorMode (uMode=0x0) returned 0x1 [0168.456] GetFileType (hFile=0x230) returned 0x1 [0168.456] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.457] SetErrorMode (uMode=0x1) returned 0x0 [0168.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\aEFrpccaFMe_fD2rGk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\aefrpccafme_fd2rgk.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b48510, ftCreationTime.dwHighDateTime=0x1d4138a, ftLastAccessTime.dwLowDateTime=0xe524d6b0, ftLastAccessTime.dwHighDateTime=0x1d4183f, ftLastWriteTime.dwLowDateTime=0x66dc26c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x171c5)) returned 1 [0168.457] SetErrorMode (uMode=0x0) returned 0x1 [0168.457] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\aEFrpccaFMe_fD2rGk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\aefrpccafme_fd2rgk.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\aEFrpccaFMe_fD2rGk.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\aefrpccafme_fd2rgk.gif.partially.cryptonar")) returned 1 [0168.458] SetErrorMode (uMode=0x1) returned 0x0 [0168.458] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\k iMCHgb1T3Z.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\k imchgb1t3z.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.460] SetErrorMode (uMode=0x0) returned 0x1 [0168.460] GetFileType (hFile=0x230) returned 0x1 [0168.460] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.460] SetErrorMode (uMode=0x1) returned 0x0 [0168.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\k iMCHgb1T3Z.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\k imchgb1t3z.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6447be80, ftCreationTime.dwHighDateTime=0x1d414d5, ftLastAccessTime.dwLowDateTime=0xfe155760, ftLastAccessTime.dwHighDateTime=0x1d41242, ftLastWriteTime.dwLowDateTime=0x66dc26c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x30ff)) returned 1 [0168.460] SetErrorMode (uMode=0x0) returned 0x1 [0168.460] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\k iMCHgb1T3Z.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\k imchgb1t3z.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\k iMCHgb1T3Z.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\k imchgb1t3z.jpg.partially.cryptonar")) returned 1 [0168.462] SetErrorMode (uMode=0x1) returned 0x0 [0168.462] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\1jpJFA0t.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\1jpjfa0t.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.463] SetErrorMode (uMode=0x0) returned 0x1 [0168.463] GetFileType (hFile=0x230) returned 0x1 [0168.463] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.464] SetErrorMode (uMode=0x1) returned 0x0 [0168.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\1jpJFA0t.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\1jpjfa0t.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0ea2c00, ftCreationTime.dwHighDateTime=0x1d41225, ftLastAccessTime.dwLowDateTime=0x2bef1ff0, ftLastAccessTime.dwHighDateTime=0x1d41aa3, ftLastWriteTime.dwLowDateTime=0x66dc26c7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x43e9)) returned 1 [0168.464] SetErrorMode (uMode=0x0) returned 0x1 [0168.464] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\1jpJFA0t.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\1jpjfa0t.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\1jpJFA0t.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\1jpjfa0t.bmp.partially.cryptonar")) returned 1 [0168.465] SetErrorMode (uMode=0x1) returned 0x0 [0168.465] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\ltbL.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\ltbl.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.903] SetErrorMode (uMode=0x0) returned 0x1 [0168.903] GetFileType (hFile=0x230) returned 0x1 [0168.903] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.904] SetErrorMode (uMode=0x1) returned 0x0 [0168.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\ltbL.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\ltbl.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0228110, ftCreationTime.dwHighDateTime=0x1d414bc, ftLastAccessTime.dwLowDateTime=0x79a3b0c0, ftLastAccessTime.dwHighDateTime=0x1d415bd, ftLastWriteTime.dwLowDateTime=0x671efc26, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11ac7)) returned 1 [0168.904] SetErrorMode (uMode=0x0) returned 0x1 [0168.904] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\ltbL.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\ltbl.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\ltbL.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\ltbl.png.partially.cryptonar")) returned 1 [0168.906] SetErrorMode (uMode=0x1) returned 0x0 [0168.906] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\UJ23oTZ9cscqXr4UqW.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\uj23otz9cscqxr4uqw.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.907] SetErrorMode (uMode=0x0) returned 0x1 [0168.907] GetFileType (hFile=0x230) returned 0x1 [0168.907] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.908] SetErrorMode (uMode=0x1) returned 0x0 [0168.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\UJ23oTZ9cscqXr4UqW.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\uj23otz9cscqxr4uqw.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b75f8e0, ftCreationTime.dwHighDateTime=0x1d41d83, ftLastAccessTime.dwLowDateTime=0xf14e18d0, ftLastAccessTime.dwHighDateTime=0x1d418ed, ftLastWriteTime.dwLowDateTime=0x67214af5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x30eb)) returned 1 [0168.908] SetErrorMode (uMode=0x0) returned 0x1 [0168.908] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\UJ23oTZ9cscqXr4UqW.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\uj23otz9cscqxr4uqw.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\UJ23oTZ9cscqXr4UqW.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\uj23otz9cscqxr4uqw.gif.partially.cryptonar")) returned 1 [0168.909] SetErrorMode (uMode=0x1) returned 0x0 [0168.909] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\XyAtoRv.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\xyatorv.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.910] SetErrorMode (uMode=0x0) returned 0x1 [0168.910] GetFileType (hFile=0x230) returned 0x1 [0168.910] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.910] SetErrorMode (uMode=0x1) returned 0x0 [0168.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\XyAtoRv.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\xyatorv.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb3404d0, ftCreationTime.dwHighDateTime=0x1d411d8, ftLastAccessTime.dwLowDateTime=0x3789f4e0, ftLastAccessTime.dwHighDateTime=0x1d41326, ftLastWriteTime.dwLowDateTime=0x67214af5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x81fa)) returned 1 [0168.910] SetErrorMode (uMode=0x0) returned 0x1 [0168.910] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\XyAtoRv.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\xyatorv.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\XyAtoRv.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\xyatorv.jpg.partially.cryptonar")) returned 1 [0168.911] SetErrorMode (uMode=0x1) returned 0x0 [0168.911] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\2_0Z6VvZcIdo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\2_0z6vvzcido.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.912] SetErrorMode (uMode=0x0) returned 0x1 [0168.912] GetFileType (hFile=0x230) returned 0x1 [0168.912] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.912] SetErrorMode (uMode=0x1) returned 0x0 [0168.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\2_0Z6VvZcIdo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\2_0z6vvzcido.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3c7a8b0, ftCreationTime.dwHighDateTime=0x1d41dc6, ftLastAccessTime.dwLowDateTime=0xac9b3930, ftLastAccessTime.dwHighDateTime=0x1d417cf, ftLastWriteTime.dwLowDateTime=0x67214af5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12eba)) returned 1 [0168.912] SetErrorMode (uMode=0x0) returned 0x1 [0168.912] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\2_0Z6VvZcIdo.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\2_0z6vvzcido.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\2_0Z6VvZcIdo.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\2_0z6vvzcido.png.partially.cryptonar")) returned 1 [0168.915] SetErrorMode (uMode=0x1) returned 0x0 [0168.915] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\6ocyH.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\6ocyh.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.917] SetErrorMode (uMode=0x0) returned 0x1 [0168.917] GetFileType (hFile=0x230) returned 0x1 [0168.917] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.917] SetErrorMode (uMode=0x1) returned 0x0 [0168.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\6ocyH.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\6ocyh.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54418500, ftCreationTime.dwHighDateTime=0x1d41603, ftLastAccessTime.dwLowDateTime=0x7ab0d6a0, ftLastAccessTime.dwHighDateTime=0x1d41f63, ftLastWriteTime.dwLowDateTime=0x67214af5, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x592c)) returned 1 [0168.917] SetErrorMode (uMode=0x0) returned 0x1 [0168.917] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\6ocyH.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\6ocyh.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\6ocyH.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\6ocyh.bmp.partially.cryptonar")) returned 1 [0168.919] SetErrorMode (uMode=0x1) returned 0x0 [0168.919] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\Auc3FVOi2giobD.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\auc3fvoi2giobd.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.922] SetErrorMode (uMode=0x0) returned 0x1 [0168.922] GetFileType (hFile=0x230) returned 0x1 [0168.922] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.923] SetErrorMode (uMode=0x1) returned 0x0 [0168.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\Auc3FVOi2giobD.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\auc3fvoi2giobd.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dcb46a0, ftCreationTime.dwHighDateTime=0x1d4170b, ftLastAccessTime.dwLowDateTime=0x69f27270, ftLastAccessTime.dwHighDateTime=0x1d41274, ftLastWriteTime.dwLowDateTime=0x6723c4fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x7884)) returned 1 [0168.923] SetErrorMode (uMode=0x0) returned 0x1 [0168.923] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\Auc3FVOi2giobD.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\auc3fvoi2giobd.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\Auc3FVOi2giobD.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\auc3fvoi2giobd.gif.partially.cryptonar")) returned 1 [0168.925] SetErrorMode (uMode=0x1) returned 0x0 [0168.925] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\OVWbB7_hn984AFW3.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\ovwbb7_hn984afw3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.926] SetErrorMode (uMode=0x0) returned 0x1 [0168.926] GetFileType (hFile=0x230) returned 0x1 [0168.926] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.927] SetErrorMode (uMode=0x1) returned 0x0 [0168.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\OVWbB7_hn984AFW3.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\ovwbb7_hn984afw3.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909109c0, ftCreationTime.dwHighDateTime=0x1d41fab, ftLastAccessTime.dwLowDateTime=0x2faa6a00, ftLastAccessTime.dwHighDateTime=0x1d4122e, ftLastWriteTime.dwLowDateTime=0x6723c4fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x73f4)) returned 1 [0168.927] SetErrorMode (uMode=0x0) returned 0x1 [0168.927] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\OVWbB7_hn984AFW3.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\ovwbb7_hn984afw3.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\OVWbB7_hn984AFW3.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\ovwbb7_hn984afw3.png.partially.cryptonar")) returned 1 [0168.929] SetErrorMode (uMode=0x1) returned 0x0 [0168.929] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\OZSr9rP.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\ozsr9rp.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.930] SetErrorMode (uMode=0x0) returned 0x1 [0168.930] GetFileType (hFile=0x230) returned 0x1 [0168.930] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.930] SetErrorMode (uMode=0x1) returned 0x0 [0168.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\OZSr9rP.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\ozsr9rp.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d19c60, ftCreationTime.dwHighDateTime=0x1d41634, ftLastAccessTime.dwLowDateTime=0xa887af90, ftLastAccessTime.dwHighDateTime=0x1d41c6b, ftLastWriteTime.dwLowDateTime=0x6723c4fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x6c22)) returned 1 [0168.930] SetErrorMode (uMode=0x0) returned 0x1 [0168.931] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\OZSr9rP.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\ozsr9rp.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\OZSr9rP.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\ozsr9rp.png.partially.cryptonar")) returned 1 [0168.932] SetErrorMode (uMode=0x1) returned 0x0 [0168.932] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\TE1tif_Kz v.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\te1tif_kz v.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.933] SetErrorMode (uMode=0x0) returned 0x1 [0168.933] GetFileType (hFile=0x230) returned 0x1 [0168.934] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.934] SetErrorMode (uMode=0x1) returned 0x0 [0168.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\TE1tif_Kz v.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\te1tif_kz v.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76a9030, ftCreationTime.dwHighDateTime=0x1d418f7, ftLastAccessTime.dwLowDateTime=0x6429eb70, ftLastAccessTime.dwHighDateTime=0x1d41dd7, ftLastWriteTime.dwLowDateTime=0x6723c4fb, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x162c7)) returned 1 [0168.934] SetErrorMode (uMode=0x0) returned 0x1 [0168.934] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\TE1tif_Kz v.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\te1tif_kz v.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\TE1tif_Kz v.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\te1tif_kz v.jpg.partially.cryptonar")) returned 1 [0168.936] SetErrorMode (uMode=0x1) returned 0x0 [0168.936] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\u6Qjm0qk7eHCNac3l.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\u6qjm0qk7ehcnac3l.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.937] SetErrorMode (uMode=0x0) returned 0x1 [0168.938] GetFileType (hFile=0x230) returned 0x1 [0168.938] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.938] SetErrorMode (uMode=0x1) returned 0x0 [0168.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\u6Qjm0qk7eHCNac3l.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\u6qjm0qk7ehcnac3l.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27688df0, ftCreationTime.dwHighDateTime=0x1d41854, ftLastAccessTime.dwLowDateTime=0x45a4b7c0, ftLastAccessTime.dwHighDateTime=0x1d41cdd, ftLastWriteTime.dwLowDateTime=0x67261b04, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa17a)) returned 1 [0168.938] SetErrorMode (uMode=0x0) returned 0x1 [0168.938] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\u6Qjm0qk7eHCNac3l.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\u6qjm0qk7ehcnac3l.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\f sWJAcYaH52rUOx\\8lju5Wh6aFA6\\u6Qjm0qk7eHCNac3l.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\f swjacyah52ruox\\8lju5wh6afa6\\u6qjm0qk7ehcnac3l.bmp.partially.cryptonar")) returned 1 [0168.940] SetErrorMode (uMode=0x1) returned 0x0 [0168.940] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\2po3DXYdLmnZ3d.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\2po3dxydlmnz3d.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.941] SetErrorMode (uMode=0x0) returned 0x1 [0168.941] GetFileType (hFile=0x230) returned 0x1 [0168.941] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.941] SetErrorMode (uMode=0x1) returned 0x0 [0168.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\2po3DXYdLmnZ3d.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\2po3dxydlmnz3d.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2aa96a0, ftCreationTime.dwHighDateTime=0x1d415a1, ftLastAccessTime.dwLowDateTime=0xb8db0a20, ftLastAccessTime.dwHighDateTime=0x1d41e1b, ftLastWriteTime.dwLowDateTime=0x67261b04, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x112b3)) returned 1 [0168.941] SetErrorMode (uMode=0x0) returned 0x1 [0168.941] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\2po3DXYdLmnZ3d.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\2po3dxydlmnz3d.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\2po3DXYdLmnZ3d.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\2po3dxydlmnz3d.gif.partially.cryptonar")) returned 1 [0168.943] SetErrorMode (uMode=0x1) returned 0x0 [0168.943] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\6uZBFk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\6uzbfk.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.944] SetErrorMode (uMode=0x0) returned 0x1 [0168.944] GetFileType (hFile=0x230) returned 0x1 [0168.944] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.945] SetErrorMode (uMode=0x1) returned 0x0 [0168.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\6uZBFk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\6uzbfk.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52e0a870, ftCreationTime.dwHighDateTime=0x1d41c85, ftLastAccessTime.dwLowDateTime=0x82a928b0, ftLastAccessTime.dwHighDateTime=0x1d41ef2, ftLastWriteTime.dwLowDateTime=0x67261b04, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa56d)) returned 1 [0168.945] SetErrorMode (uMode=0x0) returned 0x1 [0168.945] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\6uZBFk.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\6uzbfk.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\6uZBFk.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\6uzbfk.gif.partially.cryptonar")) returned 1 [0168.946] SetErrorMode (uMode=0x1) returned 0x0 [0168.947] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\Hx01e9E8L.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\hx01e9e8l.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.948] SetErrorMode (uMode=0x0) returned 0x1 [0168.948] GetFileType (hFile=0x230) returned 0x1 [0168.948] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.948] SetErrorMode (uMode=0x1) returned 0x0 [0168.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\Hx01e9E8L.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\hx01e9e8l.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x468432b0, ftCreationTime.dwHighDateTime=0x1d41684, ftLastAccessTime.dwLowDateTime=0xeeadf6b0, ftLastAccessTime.dwHighDateTime=0x1d41404, ftLastWriteTime.dwLowDateTime=0x67261b04, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe79)) returned 1 [0168.948] SetErrorMode (uMode=0x0) returned 0x1 [0168.948] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\Hx01e9E8L.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\hx01e9e8l.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\Hx01e9E8L.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\hx01e9e8l.png.partially.cryptonar")) returned 1 [0168.977] SetErrorMode (uMode=0x1) returned 0x0 [0168.977] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\YKYSLmf-FjPKHaIhoe.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\ykyslmf-fjpkhaihoe.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.979] SetErrorMode (uMode=0x0) returned 0x1 [0168.979] GetFileType (hFile=0x230) returned 0x1 [0168.979] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.979] SetErrorMode (uMode=0x1) returned 0x0 [0168.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\YKYSLmf-FjPKHaIhoe.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\ykyslmf-fjpkhaihoe.png"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ec230c0, ftCreationTime.dwHighDateTime=0x1d41e5f, ftLastAccessTime.dwLowDateTime=0x648c06f0, ftLastAccessTime.dwHighDateTime=0x1d41537, ftLastWriteTime.dwLowDateTime=0x672ad9c8, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa10a)) returned 1 [0168.979] SetErrorMode (uMode=0x0) returned 0x1 [0168.979] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\YKYSLmf-FjPKHaIhoe.png" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\ykyslmf-fjpkhaihoe.png"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\ArazkJZs-AMTv58JxoMv\\zF0dG\\YKYSLmf-FjPKHaIhoe.png.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\arazkjzs-amtv58jxomv\\zf0dg\\ykyslmf-fjpkhaihoe.png.partially.cryptonar")) returned 1 [0168.981] SetErrorMode (uMode=0x1) returned 0x0 [0168.981] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\gcWx8GYKXtTyvaIoUV6.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\gcwx8gykxttyvaiouv6.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.985] SetErrorMode (uMode=0x0) returned 0x1 [0168.985] GetFileType (hFile=0x230) returned 0x1 [0168.985] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.985] SetErrorMode (uMode=0x1) returned 0x0 [0168.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\gcWx8GYKXtTyvaIoUV6.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\gcwx8gykxttyvaiouv6.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60b4a850, ftCreationTime.dwHighDateTime=0x1d41c0a, ftLastAccessTime.dwLowDateTime=0x2ec79d50, ftLastAccessTime.dwHighDateTime=0x1d41f22, ftLastWriteTime.dwLowDateTime=0x672d4179, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd63e)) returned 1 [0168.985] SetErrorMode (uMode=0x0) returned 0x1 [0168.985] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\gcWx8GYKXtTyvaIoUV6.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\gcwx8gykxttyvaiouv6.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\gcWx8GYKXtTyvaIoUV6.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\gcwx8gykxttyvaiouv6.jpg.partially.cryptonar")) returned 1 [0168.987] SetErrorMode (uMode=0x1) returned 0x0 [0168.987] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\N7wpOKwElZg3D8PPpuIj.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\n7wpokwelzg3d8pppuij.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.989] SetErrorMode (uMode=0x0) returned 0x1 [0168.989] GetFileType (hFile=0x230) returned 0x1 [0168.989] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.989] SetErrorMode (uMode=0x1) returned 0x0 [0168.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\N7wpOKwElZg3D8PPpuIj.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\n7wpokwelzg3d8pppuij.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1158b50, ftCreationTime.dwHighDateTime=0x1d4120a, ftLastAccessTime.dwLowDateTime=0x749b1f80, ftLastAccessTime.dwHighDateTime=0x1d41aab, ftLastWriteTime.dwLowDateTime=0x672d4179, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x5f34)) returned 1 [0168.989] SetErrorMode (uMode=0x0) returned 0x1 [0168.989] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\N7wpOKwElZg3D8PPpuIj.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\n7wpokwelzg3d8pppuij.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\N7wpOKwElZg3D8PPpuIj.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\n7wpokwelzg3d8pppuij.jpg.partially.cryptonar")) returned 1 [0168.991] SetErrorMode (uMode=0x1) returned 0x0 [0168.991] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\22 nWyn4.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\22 nwyn4.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.993] SetErrorMode (uMode=0x0) returned 0x1 [0168.993] GetFileType (hFile=0x230) returned 0x1 [0168.993] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.993] SetErrorMode (uMode=0x1) returned 0x0 [0168.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\22 nWyn4.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\22 nwyn4.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98fedce0, ftCreationTime.dwHighDateTime=0x1d413a8, ftLastAccessTime.dwLowDateTime=0xab97d450, ftLastAccessTime.dwHighDateTime=0x1d410bb, ftLastWriteTime.dwLowDateTime=0x672d4179, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xac87)) returned 1 [0168.993] SetErrorMode (uMode=0x0) returned 0x1 [0168.993] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\22 nWyn4.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\22 nwyn4.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\22 nWyn4.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\22 nwyn4.gif.partially.cryptonar")) returned 1 [0168.995] SetErrorMode (uMode=0x1) returned 0x0 [0168.995] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\6KilR7k83fOiY028D.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\6kilr7k83foiy028d.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0168.996] SetErrorMode (uMode=0x0) returned 0x1 [0168.997] GetFileType (hFile=0x230) returned 0x1 [0168.997] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0168.997] SetErrorMode (uMode=0x1) returned 0x0 [0168.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\6KilR7k83fOiY028D.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\6kilr7k83foiy028d.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1852e000, ftCreationTime.dwHighDateTime=0x1d41ce5, ftLastAccessTime.dwLowDateTime=0x305a1c40, ftLastAccessTime.dwHighDateTime=0x1d41c45, ftLastWriteTime.dwLowDateTime=0x672d4179, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1416f)) returned 1 [0168.997] SetErrorMode (uMode=0x0) returned 0x1 [0168.997] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\6KilR7k83fOiY028D.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\6kilr7k83foiy028d.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\6KilR7k83fOiY028D.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\6kilr7k83foiy028d.bmp.partially.cryptonar")) returned 1 [0169.001] SetErrorMode (uMode=0x1) returned 0x0 [0169.001] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\9ouJDkPZ2eD.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\9oujdkpz2ed.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.002] SetErrorMode (uMode=0x0) returned 0x1 [0169.002] GetFileType (hFile=0x230) returned 0x1 [0169.002] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.002] SetErrorMode (uMode=0x1) returned 0x0 [0169.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\9ouJDkPZ2eD.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\9oujdkpz2ed.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc644e790, ftCreationTime.dwHighDateTime=0x1d40fec, ftLastAccessTime.dwLowDateTime=0x11a833b0, ftLastAccessTime.dwHighDateTime=0x1d41d42, ftLastWriteTime.dwLowDateTime=0x672fb17d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17ce)) returned 1 [0169.003] SetErrorMode (uMode=0x0) returned 0x1 [0169.003] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\9ouJDkPZ2eD.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\9oujdkpz2ed.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\m8oIdYFL\\cr5CLfkFk\\9ouJDkPZ2eD.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\m8oidyfl\\cr5clfkfk\\9oujdkpz2ed.gif.partially.cryptonar")) returned 1 [0169.004] SetErrorMode (uMode=0x1) returned 0x0 [0169.004] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\AqrmQ-X0 sfI.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\aqrmq-x0 sfi.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.006] SetErrorMode (uMode=0x0) returned 0x1 [0169.006] GetFileType (hFile=0x230) returned 0x1 [0169.006] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.006] SetErrorMode (uMode=0x1) returned 0x0 [0169.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\AqrmQ-X0 sfI.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\aqrmq-x0 sfi.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93ca5bd0, ftCreationTime.dwHighDateTime=0x1d418a5, ftLastAccessTime.dwLowDateTime=0x10024f30, ftLastAccessTime.dwHighDateTime=0x1d40f89, ftLastWriteTime.dwLowDateTime=0x672fb17d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15b10)) returned 1 [0169.006] SetErrorMode (uMode=0x0) returned 0x1 [0169.006] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\AqrmQ-X0 sfI.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\aqrmq-x0 sfi.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\AqrmQ-X0 sfI.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\aqrmq-x0 sfi.jpg.partially.cryptonar")) returned 1 [0169.008] SetErrorMode (uMode=0x1) returned 0x0 [0169.008] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\TVecRIN0- u.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\tvecrin0- u.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.009] SetErrorMode (uMode=0x0) returned 0x1 [0169.009] GetFileType (hFile=0x230) returned 0x1 [0169.009] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.010] SetErrorMode (uMode=0x1) returned 0x0 [0169.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\TVecRIN0- u.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\tvecrin0- u.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ede5210, ftCreationTime.dwHighDateTime=0x1d4111d, ftLastAccessTime.dwLowDateTime=0xf4d723d0, ftLastAccessTime.dwHighDateTime=0x1d414a0, ftLastWriteTime.dwLowDateTime=0x672fb17d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x117c)) returned 1 [0169.010] SetErrorMode (uMode=0x0) returned 0x1 [0169.010] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\TVecRIN0- u.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\tvecrin0- u.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\TVecRIN0- u.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\tvecrin0- u.gif.partially.cryptonar")) returned 1 [0169.011] SetErrorMode (uMode=0x1) returned 0x0 [0169.011] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\VJSXPsbO6-s.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\vjsxpsbo6-s.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.012] SetErrorMode (uMode=0x0) returned 0x1 [0169.012] GetFileType (hFile=0x230) returned 0x1 [0169.012] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.013] SetErrorMode (uMode=0x1) returned 0x0 [0169.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\VJSXPsbO6-s.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\vjsxpsbo6-s.gif"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69596f0, ftCreationTime.dwHighDateTime=0x1d41ad3, ftLastAccessTime.dwLowDateTime=0x9781ce40, ftLastAccessTime.dwHighDateTime=0x1d41d76, ftLastWriteTime.dwLowDateTime=0x672fb17d, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1831d)) returned 1 [0169.013] SetErrorMode (uMode=0x0) returned 0x1 [0169.013] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\VJSXPsbO6-s.gif" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\vjsxpsbo6-s.gif"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\VJSXPsbO6-s.gif.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\vjsxpsbo6-s.gif.partially.cryptonar")) returned 1 [0169.036] SetErrorMode (uMode=0x1) returned 0x0 [0169.036] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\26dBpc9L1WM.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\26dbpc9l1wm.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.037] SetErrorMode (uMode=0x0) returned 0x1 [0169.037] GetFileType (hFile=0x230) returned 0x1 [0169.037] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.038] SetErrorMode (uMode=0x1) returned 0x0 [0169.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\26dBpc9L1WM.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\26dbpc9l1wm.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865e0d80, ftCreationTime.dwHighDateTime=0x1d411c4, ftLastAccessTime.dwLowDateTime=0xa1b351a0, ftLastAccessTime.dwHighDateTime=0x1d41569, ftLastWriteTime.dwLowDateTime=0x67345d92, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xeb97)) returned 1 [0169.038] SetErrorMode (uMode=0x0) returned 0x1 [0169.038] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\26dBpc9L1WM.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\26dbpc9l1wm.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\26dBpc9L1WM.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\26dbpc9l1wm.bmp.partially.cryptonar")) returned 1 [0169.040] SetErrorMode (uMode=0x1) returned 0x0 [0169.040] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\fH4d_q5XmN.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\fh4d_q5xmn.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.041] SetErrorMode (uMode=0x0) returned 0x1 [0169.041] GetFileType (hFile=0x230) returned 0x1 [0169.041] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.042] SetErrorMode (uMode=0x1) returned 0x0 [0169.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\fH4d_q5XmN.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\fh4d_q5xmn.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x696e0090, ftCreationTime.dwHighDateTime=0x1d41c82, ftLastAccessTime.dwLowDateTime=0xbee386c0, ftLastAccessTime.dwHighDateTime=0x1d41e31, ftLastWriteTime.dwLowDateTime=0x67345d92, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16da5)) returned 1 [0169.042] SetErrorMode (uMode=0x0) returned 0x1 [0169.042] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\fH4d_q5XmN.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\fh4d_q5xmn.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\fH4d_q5XmN.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\fh4d_q5xmn.bmp.partially.cryptonar")) returned 1 [0169.044] SetErrorMode (uMode=0x1) returned 0x0 [0169.044] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\QLcrB r0-7HCopS-P3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\qlcrb r0-7hcops-p3.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.046] SetErrorMode (uMode=0x0) returned 0x1 [0169.046] GetFileType (hFile=0x230) returned 0x1 [0169.046] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.047] SetErrorMode (uMode=0x1) returned 0x0 [0169.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\QLcrB r0-7HCopS-P3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\qlcrb r0-7hcops-p3.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd44cb8a0, ftCreationTime.dwHighDateTime=0x1d41d1a, ftLastAccessTime.dwLowDateTime=0x67218f10, ftLastAccessTime.dwHighDateTime=0x1d414ac, ftLastWriteTime.dwLowDateTime=0x6736dc02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x15b5c)) returned 1 [0169.047] SetErrorMode (uMode=0x0) returned 0x1 [0169.047] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\QLcrB r0-7HCopS-P3.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\qlcrb r0-7hcops-p3.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\lSzXD6_rOJED-5Rcs3Z\\QLcrB r0-7HCopS-P3.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\lszxd6_rojed-5rcs3z\\qlcrb r0-7hcops-p3.jpg.partially.cryptonar")) returned 1 [0169.049] SetErrorMode (uMode=0x1) returned 0x0 [0169.049] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\8 KXcnGJcSvEgcZ.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\8 kxcngjcsvegcz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.051] SetErrorMode (uMode=0x0) returned 0x1 [0169.051] GetFileType (hFile=0x230) returned 0x1 [0169.051] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.051] SetErrorMode (uMode=0x1) returned 0x0 [0169.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\8 KXcnGJcSvEgcZ.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\8 kxcngjcsvegcz.jpg"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddce0950, ftCreationTime.dwHighDateTime=0x1d41d25, ftLastAccessTime.dwLowDateTime=0x3afebe0, ftLastAccessTime.dwHighDateTime=0x1d41e1e, ftLastWriteTime.dwLowDateTime=0x6736dc02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x85eb)) returned 1 [0169.051] SetErrorMode (uMode=0x0) returned 0x1 [0169.051] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\8 KXcnGJcSvEgcZ.jpg" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\8 kxcngjcsvegcz.jpg"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\8 KXcnGJcSvEgcZ.jpg.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\8 kxcngjcsvegcz.jpg.partially.cryptonar")) returned 1 [0169.053] SetErrorMode (uMode=0x1) returned 0x0 [0169.053] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\F y31EEo.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\f y31eeo.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.054] SetErrorMode (uMode=0x0) returned 0x1 [0169.054] GetFileType (hFile=0x230) returned 0x1 [0169.054] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.055] SetErrorMode (uMode=0x1) returned 0x0 [0169.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\F y31EEo.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\f y31eeo.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc25d590, ftCreationTime.dwHighDateTime=0x1d41832, ftLastAccessTime.dwLowDateTime=0x5ebf0f20, ftLastAccessTime.dwHighDateTime=0x1d41491, ftLastWriteTime.dwLowDateTime=0x6736dc02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xfacb)) returned 1 [0169.055] SetErrorMode (uMode=0x0) returned 0x1 [0169.055] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\F y31EEo.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\f y31eeo.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\F y31EEo.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\f y31eeo.bmp.partially.cryptonar")) returned 1 [0169.057] SetErrorMode (uMode=0x1) returned 0x0 [0169.057] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\XGKLGQUVDU-jltWNdF2A.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\xgklgquvdu-jltwndf2a.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.058] SetErrorMode (uMode=0x0) returned 0x1 [0169.058] GetFileType (hFile=0x230) returned 0x1 [0169.058] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.059] SetErrorMode (uMode=0x1) returned 0x0 [0169.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\XGKLGQUVDU-jltWNdF2A.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\xgklgquvdu-jltwndf2a.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9fb52f0, ftCreationTime.dwHighDateTime=0x1d4102c, ftLastAccessTime.dwLowDateTime=0xf3af9620, ftLastAccessTime.dwHighDateTime=0x1d41e98, ftLastWriteTime.dwLowDateTime=0x6736dc02, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1536)) returned 1 [0169.059] SetErrorMode (uMode=0x0) returned 0x1 [0169.059] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\XGKLGQUVDU-jltWNdF2A.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\xgklgquvdu-jltwndf2a.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\XGKLGQUVDU-jltWNdF2A.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\xgklgquvdu-jltwndf2a.bmp.partially.cryptonar")) returned 1 [0169.065] SetErrorMode (uMode=0x1) returned 0x0 [0169.066] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\y30O.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\y30o.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.067] SetErrorMode (uMode=0x0) returned 0x1 [0169.067] GetFileType (hFile=0x230) returned 0x1 [0169.067] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.067] SetErrorMode (uMode=0x1) returned 0x0 [0169.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\y30O.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\y30o.bmp"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x212aaf20, ftCreationTime.dwHighDateTime=0x1d41bd0, ftLastAccessTime.dwLowDateTime=0x1105a630, ftLastAccessTime.dwHighDateTime=0x1d415af, ftLastWriteTime.dwLowDateTime=0x67392f3a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xa985)) returned 1 [0169.068] SetErrorMode (uMode=0x0) returned 0x1 [0169.068] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\y30O.bmp" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\y30o.bmp"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\bWFFUwxI7Z_0NilZBV\\NhC2y15ew7q21\\rXy-i djXoD6DPK\\y30O.bmp.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\bwffuwxi7z_0nilzbv\\nhc2y15ew7q21\\rxy-i djxod6dpk\\y30o.bmp.partially.cryptonar")) returned 1 [0169.070] SetErrorMode (uMode=0x1) returned 0x0 [0169.070] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.071] SetErrorMode (uMode=0x0) returned 0x1 [0169.072] GetFileType (hFile=0x230) returned 0x1 [0169.072] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.111] SetErrorMode (uMode=0x1) returned 0x0 [0169.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3bece384, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bece384, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x674049b3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0169.112] SetErrorMode (uMode=0x0) returned 0x1 [0169.112] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Camera Roll\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\camera roll\\desktop.ini.partially.cryptonar")) returned 1 [0169.113] SetErrorMode (uMode=0x1) returned 0x0 [0169.113] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.115] SetErrorMode (uMode=0x0) returned 0x1 [0169.115] GetFileType (hFile=0x230) returned 0x1 [0169.115] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.116] SetErrorMode (uMode=0x1) returned 0x0 [0169.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3bf66bb4, ftCreationTime.dwHighDateTime=0x1d2d029, ftLastAccessTime.dwLowDateTime=0x3bf66bb4, ftLastAccessTime.dwHighDateTime=0x1d2d029, ftLastWriteTime.dwLowDateTime=0x674049b3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0169.116] SetErrorMode (uMode=0x0) returned 0x1 [0169.116] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Pictures\\Saved Pictures\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\pictures\\saved pictures\\desktop.ini.partially.cryptonar")) returned 1 [0169.118] SetErrorMode (uMode=0x1) returned 0x0 [0169.118] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\saved games\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.119] SetErrorMode (uMode=0x0) returned 0x1 [0169.119] GetFileType (hFile=0x230) returned 0x1 [0169.119] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.119] SetErrorMode (uMode=0x1) returned 0x0 [0169.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\saved games\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae227795, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae227795, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x674049b3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1 [0169.120] SetErrorMode (uMode=0x0) returned 0x1 [0169.120] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\saved games\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Saved Games\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\saved games\\desktop.ini.partially.cryptonar")) returned 1 [0169.121] SetErrorMode (uMode=0x1) returned 0x0 [0169.121] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.125] SetErrorMode (uMode=0x0) returned 0x1 [0169.125] GetFileType (hFile=0x230) returned 0x1 [0169.125] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.126] SetErrorMode (uMode=0x1) returned 0x0 [0169.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae1b508e, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae1b508e, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6742b02a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x20c)) returned 1 [0169.126] SetErrorMode (uMode=0x0) returned 0x1 [0169.126] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\desktop.ini.partially.cryptonar")) returned 1 [0169.142] SetErrorMode (uMode=0x1) returned 0x0 [0169.142] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0169.150] SetErrorMode (uMode=0x0) returned 0x1 [0169.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms", lpFilePart=0x0) returned 0x3a [0169.152] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms", lpFilePart=0x0) returned 0x3a [0169.153] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms", lpFilePart=0x0) returned 0x3a [0169.153] SetErrorMode (uMode=0x1) returned 0x0 [0169.153] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\ciihmnxmn6ps\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0169.162] SetErrorMode (uMode=0x0) returned 0x1 [0169.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0169.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0169.163] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0169.163] SetErrorMode (uMode=0x1) returned 0x0 [0169.164] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.165] GetFileType (hFile=0x230) returned 0x1 [0169.165] SetErrorMode (uMode=0x0) returned 0x1 [0169.165] GetFileType (hFile=0x230) returned 0x1 [0169.165] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.165] ReadFile (in: hFile=0x230, lpBuffer=0x27263d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27263d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1f8, lpOverlapped=0x0) returned 1 [0169.165] ReadFile (in: hFile=0x230, lpBuffer=0x27263d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27263d0*, lpNumberOfBytesRead=0x5ae8b8*=0x0, lpOverlapped=0x0) returned 1 [0169.165] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.166] WriteFile (in: hFile=0x230, lpBuffer=0x27263d0*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27263d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x1f8, lpOverlapped=0x0) returned 1 [0169.166] CloseHandle (hObject=0x230) returned 1 [0169.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0169.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x28 [0169.166] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini.partially.cryptoNar", lpFilePart=0x0) returned 0x3c [0169.166] SetErrorMode (uMode=0x1) returned 0x0 [0169.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae0aa00a, ftCreationTime.dwHighDateTime=0x1d2d079, ftLastAccessTime.dwLowDateTime=0xae0aa00a, ftLastAccessTime.dwHighDateTime=0x1d2d079, ftLastWriteTime.dwLowDateTime=0x6747bfcd, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1 [0169.166] SetErrorMode (uMode=0x0) returned 0x1 [0169.166] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\desktop.ini.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\desktop.ini.partially.cryptonar")) returned 1 [0169.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv", lpFilePart=0x0) returned 0x2c [0169.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv", lpFilePart=0x0) returned 0x2c [0169.168] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv", lpFilePart=0x0) returned 0x2c [0169.168] SetErrorMode (uMode=0x1) returned 0x0 [0169.168] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\eixzuma3-95.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.169] GetFileType (hFile=0x230) returned 0x1 [0169.169] SetErrorMode (uMode=0x0) returned 0x1 [0169.169] GetFileType (hFile=0x230) returned 0x1 [0169.169] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.169] ReadFile (in: hFile=0x230, lpBuffer=0x27297d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27297d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.183] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.183] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.183] WriteFile (in: hFile=0x230, lpBuffer=0x27297d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27297d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.184] CloseHandle (hObject=0x230) returned 1 [0169.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv", lpFilePart=0x0) returned 0x2c [0169.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv", lpFilePart=0x0) returned 0x2c [0169.184] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv.partially.cryptoNar", lpFilePart=0x0) returned 0x40 [0169.184] SetErrorMode (uMode=0x1) returned 0x0 [0169.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\eixzuma3-95.mkv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f283c0, ftCreationTime.dwHighDateTime=0x1d41a1a, ftLastAccessTime.dwLowDateTime=0x52f93870, ftLastAccessTime.dwHighDateTime=0x1d41d54, ftLastWriteTime.dwLowDateTime=0x6749d2fa, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xebf5)) returned 1 [0169.184] SetErrorMode (uMode=0x0) returned 0x1 [0169.184] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\eixzuma3-95.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\EiXzuMA3-95.mkv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\eixzuma3-95.mkv.partially.cryptonar")) returned 1 [0169.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv", lpFilePart=0x0) returned 0x31 [0169.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv", lpFilePart=0x0) returned 0x31 [0169.188] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv", lpFilePart=0x0) returned 0x31 [0169.188] SetErrorMode (uMode=0x1) returned 0x0 [0169.188] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ghl7nx9krbjzc9wy.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.190] GetFileType (hFile=0x230) returned 0x1 [0169.190] SetErrorMode (uMode=0x0) returned 0x1 [0169.190] GetFileType (hFile=0x230) returned 0x1 [0169.190] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.190] ReadFile (in: hFile=0x230, lpBuffer=0x272cc40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x272cc40*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.190] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.190] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.190] WriteFile (in: hFile=0x230, lpBuffer=0x272cc40*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x272cc40*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.191] CloseHandle (hObject=0x230) returned 1 [0169.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv", lpFilePart=0x0) returned 0x31 [0169.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv", lpFilePart=0x0) returned 0x31 [0169.191] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x45 [0169.191] SetErrorMode (uMode=0x1) returned 0x0 [0169.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ghl7nx9krbjzc9wy.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1d206e0, ftCreationTime.dwHighDateTime=0x1d41c03, ftLastAccessTime.dwLowDateTime=0x82ba5ac0, ftLastAccessTime.dwHighDateTime=0x1d41341, ftLastWriteTime.dwLowDateTime=0x674c4ece, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc1fa)) returned 1 [0169.191] SetErrorMode (uMode=0x0) returned 0x1 [0169.191] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ghl7nx9krbjzc9wy.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\Ghl7nX9KRBJzC9wy.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ghl7nx9krbjzc9wy.flv.partially.cryptonar")) returned 1 [0169.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf", lpFilePart=0x0) returned 0x2a [0169.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf", lpFilePart=0x0) returned 0x2a [0169.193] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf", lpFilePart=0x0) returned 0x2a [0169.193] SetErrorMode (uMode=0x1) returned 0x0 [0169.193] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\gnqex jm5.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.195] GetFileType (hFile=0x230) returned 0x1 [0169.195] SetErrorMode (uMode=0x0) returned 0x1 [0169.195] GetFileType (hFile=0x230) returned 0x1 [0169.195] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.195] ReadFile (in: hFile=0x230, lpBuffer=0x2730090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2730090*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.196] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.196] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.196] WriteFile (in: hFile=0x230, lpBuffer=0x2730090*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2730090*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.196] CloseHandle (hObject=0x230) returned 1 [0169.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf", lpFilePart=0x0) returned 0x2a [0169.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf", lpFilePart=0x0) returned 0x2a [0169.196] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf.partially.cryptoNar", lpFilePart=0x0) returned 0x3e [0169.196] SetErrorMode (uMode=0x1) returned 0x0 [0169.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\gnqex jm5.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c12e750, ftCreationTime.dwHighDateTime=0x1d41875, ftLastAccessTime.dwLowDateTime=0xfeeb9660, ftLastAccessTime.dwHighDateTime=0x1d41182, ftLastWriteTime.dwLowDateTime=0x674c4ece, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x173f1)) returned 1 [0169.197] SetErrorMode (uMode=0x0) returned 0x1 [0169.197] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\gnqex jm5.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\gNqex Jm5.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\gnqex jm5.swf.partially.cryptonar")) returned 1 [0169.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv", lpFilePart=0x0) returned 0x31 [0169.198] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv", lpFilePart=0x0) returned 0x31 [0169.199] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv", lpFilePart=0x0) returned 0x31 [0169.199] SetErrorMode (uMode=0x1) returned 0x0 [0169.199] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hekwuyaegdt8wvj6.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.200] GetFileType (hFile=0x230) returned 0x1 [0169.200] SetErrorMode (uMode=0x0) returned 0x1 [0169.200] GetFileType (hFile=0x230) returned 0x1 [0169.200] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.200] ReadFile (in: hFile=0x230, lpBuffer=0x27334d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27334d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.201] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.201] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.201] WriteFile (in: hFile=0x230, lpBuffer=0x27334d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27334d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.202] CloseHandle (hObject=0x230) returned 1 [0169.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv", lpFilePart=0x0) returned 0x31 [0169.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv", lpFilePart=0x0) returned 0x31 [0169.202] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x45 [0169.202] SetErrorMode (uMode=0x1) returned 0x0 [0169.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hekwuyaegdt8wvj6.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91c0efc0, ftCreationTime.dwHighDateTime=0x1d4154e, ftLastAccessTime.dwLowDateTime=0x14d31a40, ftLastAccessTime.dwHighDateTime=0x1d41280, ftLastWriteTime.dwLowDateTime=0x674e9787, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xd0a5)) returned 1 [0169.202] SetErrorMode (uMode=0x0) returned 0x1 [0169.202] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hekwuyaegdt8wvj6.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\HeKWUYAeGdT8wVj6.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\hekwuyaegdt8wvj6.flv.partially.cryptonar")) returned 1 [0169.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf", lpFilePart=0x0) returned 0x27 [0169.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf", lpFilePart=0x0) returned 0x27 [0169.204] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf", lpFilePart=0x0) returned 0x27 [0169.205] SetErrorMode (uMode=0x1) returned 0x0 [0169.205] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\jwlzpl.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.206] GetFileType (hFile=0x230) returned 0x1 [0169.206] SetErrorMode (uMode=0x0) returned 0x1 [0169.206] GetFileType (hFile=0x230) returned 0x1 [0169.206] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.206] ReadFile (in: hFile=0x230, lpBuffer=0x27368f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27368f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.207] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.207] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.207] WriteFile (in: hFile=0x230, lpBuffer=0x27368f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27368f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.208] CloseHandle (hObject=0x230) returned 1 [0169.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf", lpFilePart=0x0) returned 0x27 [0169.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf", lpFilePart=0x0) returned 0x27 [0169.208] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf.partially.cryptoNar", lpFilePart=0x0) returned 0x3b [0169.208] SetErrorMode (uMode=0x1) returned 0x0 [0169.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\jwlzpl.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ec432e0, ftCreationTime.dwHighDateTime=0x1d40f9b, ftLastAccessTime.dwLowDateTime=0x8e043160, ftLastAccessTime.dwHighDateTime=0x1d41929, ftLastWriteTime.dwLowDateTime=0x674e9787, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x170b7)) returned 1 [0169.208] SetErrorMode (uMode=0x0) returned 0x1 [0169.208] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\jwlzpl.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\JWlzpl.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\jwlzpl.swf.partially.cryptonar")) returned 1 [0169.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4", lpFilePart=0x0) returned 0x30 [0169.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4", lpFilePart=0x0) returned 0x30 [0169.210] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4", lpFilePart=0x0) returned 0x30 [0169.210] SetErrorMode (uMode=0x1) returned 0x0 [0169.210] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sdnhfa6pm2qsb3k.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.212] GetFileType (hFile=0x230) returned 0x1 [0169.212] SetErrorMode (uMode=0x0) returned 0x1 [0169.212] GetFileType (hFile=0x230) returned 0x1 [0169.212] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.212] ReadFile (in: hFile=0x230, lpBuffer=0x2739cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2739cf8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.212] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.212] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.213] WriteFile (in: hFile=0x230, lpBuffer=0x2739cf8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2739cf8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.213] CloseHandle (hObject=0x230) returned 1 [0169.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4", lpFilePart=0x0) returned 0x30 [0169.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4", lpFilePart=0x0) returned 0x30 [0169.213] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4.partially.cryptoNar", lpFilePart=0x0) returned 0x44 [0169.213] SetErrorMode (uMode=0x1) returned 0x0 [0169.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sdnhfa6pm2qsb3k.mp4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e8470, ftCreationTime.dwHighDateTime=0x1d41f13, ftLastAccessTime.dwLowDateTime=0x9121a590, ftLastAccessTime.dwHighDateTime=0x1d416da, ftLastWriteTime.dwLowDateTime=0x674e9787, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18d9c)) returned 1 [0169.213] SetErrorMode (uMode=0x0) returned 0x1 [0169.213] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sdnhfa6pm2qsb3k.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\sDnhfA6Pm2QSB3k.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\sdnhfa6pm2qsb3k.mp4.partially.cryptonar")) returned 1 [0169.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv", lpFilePart=0x0) returned 0x31 [0169.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv", lpFilePart=0x0) returned 0x31 [0169.215] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv", lpFilePart=0x0) returned 0x31 [0169.215] SetErrorMode (uMode=0x1) returned 0x0 [0169.215] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ylxkqyrj3haazqpg.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.216] GetFileType (hFile=0x230) returned 0x1 [0169.216] SetErrorMode (uMode=0x0) returned 0x1 [0169.216] GetFileType (hFile=0x230) returned 0x1 [0169.216] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.218] ReadFile (in: hFile=0x230, lpBuffer=0x273d190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x273d190*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.218] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.218] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.218] WriteFile (in: hFile=0x230, lpBuffer=0x273d190*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x273d190*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.219] CloseHandle (hObject=0x230) returned 1 [0169.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv", lpFilePart=0x0) returned 0x31 [0169.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv", lpFilePart=0x0) returned 0x31 [0169.219] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x45 [0169.219] SetErrorMode (uMode=0x1) returned 0x0 [0169.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ylxkqyrj3haazqpg.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14226520, ftCreationTime.dwHighDateTime=0x1d41202, ftLastAccessTime.dwLowDateTime=0xa164d270, ftLastAccessTime.dwHighDateTime=0x1d416e8, ftLastWriteTime.dwLowDateTime=0x6750fa7f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x152b0)) returned 1 [0169.220] SetErrorMode (uMode=0x0) returned 0x1 [0169.220] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ylxkqyrj3haazqpg.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\ylxkqYRJ3HaAzqpG.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\ylxkqyrj3haazqpg.flv.partially.cryptonar")) returned 1 [0169.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi", lpFilePart=0x0) returned 0x39 [0169.221] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi", lpFilePart=0x0) returned 0x39 [0169.222] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi", lpFilePart=0x0) returned 0x39 [0169.222] SetErrorMode (uMode=0x1) returned 0x0 [0169.222] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\bammconxd55msqjpfcj.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.223] GetFileType (hFile=0x230) returned 0x1 [0169.223] SetErrorMode (uMode=0x0) returned 0x1 [0169.223] GetFileType (hFile=0x230) returned 0x1 [0169.223] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.224] ReadFile (in: hFile=0x230, lpBuffer=0x2740660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2740660*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.224] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.224] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.224] WriteFile (in: hFile=0x230, lpBuffer=0x2740660*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2740660*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.224] CloseHandle (hObject=0x230) returned 1 [0169.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi", lpFilePart=0x0) returned 0x39 [0169.224] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi", lpFilePart=0x0) returned 0x39 [0169.225] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x4d [0169.225] SetErrorMode (uMode=0x1) returned 0x0 [0169.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\bammconxd55msqjpfcj.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1eff60, ftCreationTime.dwHighDateTime=0x1d41fd3, ftLastAccessTime.dwLowDateTime=0x39741810, ftLastAccessTime.dwHighDateTime=0x1d4126a, ftLastWriteTime.dwLowDateTime=0x6750fa7f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x16f77)) returned 1 [0169.225] SetErrorMode (uMode=0x0) returned 0x1 [0169.225] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\bammconxd55msqjpfcj.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\bAmmconXD55MsQJpFcj.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\bammconxd55msqjpfcj.avi.partially.cryptonar")) returned 1 [0169.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv", lpFilePart=0x0) returned 0x2b [0169.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv", lpFilePart=0x0) returned 0x2b [0169.227] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv", lpFilePart=0x0) returned 0x2b [0169.227] SetErrorMode (uMode=0x1) returned 0x0 [0169.227] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\dtzlg.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.228] GetFileType (hFile=0x230) returned 0x1 [0169.228] SetErrorMode (uMode=0x0) returned 0x1 [0169.228] GetFileType (hFile=0x230) returned 0x1 [0169.228] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.228] ReadFile (in: hFile=0x230, lpBuffer=0x2743af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2743af8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.228] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.229] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.229] WriteFile (in: hFile=0x230, lpBuffer=0x2743af8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2743af8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.229] CloseHandle (hObject=0x230) returned 1 [0169.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv", lpFilePart=0x0) returned 0x2b [0169.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv", lpFilePart=0x0) returned 0x2b [0169.229] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x3f [0169.229] SetErrorMode (uMode=0x1) returned 0x0 [0169.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\dtzlg.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x528527c0, ftCreationTime.dwHighDateTime=0x1d4120d, ftLastAccessTime.dwLowDateTime=0xb4453750, ftLastAccessTime.dwHighDateTime=0x1d41b47, ftLastWriteTime.dwLowDateTime=0x6750fa7f, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x125ee)) returned 1 [0169.230] SetErrorMode (uMode=0x0) returned 0x1 [0169.230] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\dtzlg.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\dtZLg.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\dtzlg.flv.partially.cryptonar")) returned 1 [0169.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv", lpFilePart=0x0) returned 0x30 [0169.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv", lpFilePart=0x0) returned 0x30 [0169.231] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv", lpFilePart=0x0) returned 0x30 [0169.231] SetErrorMode (uMode=0x1) returned 0x0 [0169.231] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\g cq7o2vrs.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.254] GetFileType (hFile=0x230) returned 0x1 [0169.254] SetErrorMode (uMode=0x0) returned 0x1 [0169.254] GetFileType (hFile=0x230) returned 0x1 [0169.254] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.254] ReadFile (in: hFile=0x230, lpBuffer=0x2746f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2746f18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.254] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.255] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.255] WriteFile (in: hFile=0x230, lpBuffer=0x2746f18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2746f18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.255] CloseHandle (hObject=0x230) returned 1 [0169.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv", lpFilePart=0x0) returned 0x30 [0169.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv", lpFilePart=0x0) returned 0x30 [0169.255] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x44 [0169.255] SetErrorMode (uMode=0x1) returned 0x0 [0169.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\g cq7o2vrs.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3299750, ftCreationTime.dwHighDateTime=0x1d4147a, ftLastAccessTime.dwLowDateTime=0xca44a2b0, ftLastAccessTime.dwHighDateTime=0x1d41bc5, ftLastWriteTime.dwLowDateTime=0x6755bf44, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x75c9)) returned 1 [0169.256] SetErrorMode (uMode=0x0) returned 0x1 [0169.256] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\g cq7o2vrs.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\g cQ7o2Vrs.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\g cq7o2vrs.flv.partially.cryptonar")) returned 1 [0169.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4", lpFilePart=0x0) returned 0x3a [0169.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4", lpFilePart=0x0) returned 0x3a [0169.258] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4", lpFilePart=0x0) returned 0x3a [0169.258] SetErrorMode (uMode=0x1) returned 0x0 [0169.258] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\gfd7mgfombqsurbazpmp.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.259] GetFileType (hFile=0x230) returned 0x1 [0169.259] SetErrorMode (uMode=0x0) returned 0x1 [0169.260] GetFileType (hFile=0x230) returned 0x1 [0169.260] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.260] ReadFile (in: hFile=0x230, lpBuffer=0x274a3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274a3f0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.260] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.260] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.260] WriteFile (in: hFile=0x230, lpBuffer=0x274a3f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274a3f0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.260] CloseHandle (hObject=0x230) returned 1 [0169.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4", lpFilePart=0x0) returned 0x3a [0169.260] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4", lpFilePart=0x0) returned 0x3a [0169.261] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4.partially.cryptoNar", lpFilePart=0x0) returned 0x4e [0169.261] SetErrorMode (uMode=0x1) returned 0x0 [0169.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\gfd7mgfombqsurbazpmp.mp4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6183300, ftCreationTime.dwHighDateTime=0x1d41848, ftLastAccessTime.dwLowDateTime=0x23b7d790, ftLastAccessTime.dwHighDateTime=0x1d416cb, ftLastWriteTime.dwLowDateTime=0x6755bf44, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9df3)) returned 1 [0169.261] SetErrorMode (uMode=0x0) returned 0x1 [0169.261] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\gfd7mgfombqsurbazpmp.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\gFd7mgFoMBQsuRbaZpmp.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\gfd7mgfombqsurbazpmp.mp4.partially.cryptonar")) returned 1 [0169.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi", lpFilePart=0x0) returned 0x2d [0169.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi", lpFilePart=0x0) returned 0x2d [0169.263] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi", lpFilePart=0x0) returned 0x2d [0169.263] SetErrorMode (uMode=0x1) returned 0x0 [0169.263] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\le8iyg9.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.267] GetFileType (hFile=0x230) returned 0x1 [0169.268] SetErrorMode (uMode=0x0) returned 0x1 [0169.268] GetFileType (hFile=0x230) returned 0x1 [0169.268] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.268] ReadFile (in: hFile=0x230, lpBuffer=0x274d8a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x274d8a8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.268] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.269] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.269] WriteFile (in: hFile=0x230, lpBuffer=0x274d8a8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x274d8a8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.269] CloseHandle (hObject=0x230) returned 1 [0169.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi", lpFilePart=0x0) returned 0x2d [0169.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi", lpFilePart=0x0) returned 0x2d [0169.269] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x41 [0169.269] SetErrorMode (uMode=0x1) returned 0x0 [0169.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\le8iyg9.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97cdeac0, ftCreationTime.dwHighDateTime=0x1d41edc, ftLastAccessTime.dwLowDateTime=0x7c53f710, ftLastAccessTime.dwHighDateTime=0x1d41425, ftLastWriteTime.dwLowDateTime=0x67582e40, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x9f49)) returned 1 [0169.269] SetErrorMode (uMode=0x0) returned 0x1 [0169.270] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\le8iyg9.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lE8iYG9.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\le8iyg9.avi.partially.cryptonar")) returned 1 [0169.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4", lpFilePart=0x0) returned 0x32 [0169.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4", lpFilePart=0x0) returned 0x32 [0169.272] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4", lpFilePart=0x0) returned 0x32 [0169.272] SetErrorMode (uMode=0x1) returned 0x0 [0169.273] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\lvjh9yekj yi.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.274] GetFileType (hFile=0x230) returned 0x1 [0169.274] SetErrorMode (uMode=0x0) returned 0x1 [0169.274] GetFileType (hFile=0x230) returned 0x1 [0169.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.274] ReadFile (in: hFile=0x230, lpBuffer=0x2750d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2750d00*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.274] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.274] WriteFile (in: hFile=0x230, lpBuffer=0x2750d00*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2750d00*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.275] CloseHandle (hObject=0x230) returned 1 [0169.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4", lpFilePart=0x0) returned 0x32 [0169.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4", lpFilePart=0x0) returned 0x32 [0169.275] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4.partially.cryptoNar", lpFilePart=0x0) returned 0x46 [0169.275] SetErrorMode (uMode=0x1) returned 0x0 [0169.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\lvjh9yekj yi.mp4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57e7b2a0, ftCreationTime.dwHighDateTime=0x1d41a82, ftLastAccessTime.dwLowDateTime=0x963a7ce0, ftLastAccessTime.dwHighDateTime=0x1d41c94, ftLastWriteTime.dwLowDateTime=0x67582e40, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17765)) returned 1 [0169.275] SetErrorMode (uMode=0x0) returned 0x1 [0169.275] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\lvjh9yekj yi.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\lvJH9yekj yi.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\lvjh9yekj yi.mp4.partially.cryptonar")) returned 1 [0169.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi", lpFilePart=0x0) returned 0x32 [0169.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi", lpFilePart=0x0) returned 0x32 [0169.277] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi", lpFilePart=0x0) returned 0x32 [0169.277] SetErrorMode (uMode=0x1) returned 0x0 [0169.277] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\mv8nqaqutbql.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.278] GetFileType (hFile=0x230) returned 0x1 [0169.278] SetErrorMode (uMode=0x0) returned 0x1 [0169.278] GetFileType (hFile=0x230) returned 0x1 [0169.278] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.279] ReadFile (in: hFile=0x230, lpBuffer=0x2754190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2754190*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.279] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.279] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.279] WriteFile (in: hFile=0x230, lpBuffer=0x2754190*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2754190*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.279] CloseHandle (hObject=0x230) returned 1 [0169.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi", lpFilePart=0x0) returned 0x32 [0169.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi", lpFilePart=0x0) returned 0x32 [0169.279] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x46 [0169.280] SetErrorMode (uMode=0x1) returned 0x0 [0169.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\mv8nqaqutbql.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d2e530, ftCreationTime.dwHighDateTime=0x1d418e1, ftLastAccessTime.dwLowDateTime=0xf1751150, ftLastAccessTime.dwHighDateTime=0x1d413d5, ftLastWriteTime.dwLowDateTime=0x675a83f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x13dac)) returned 1 [0169.280] SetErrorMode (uMode=0x0) returned 0x1 [0169.280] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\mv8nqaqutbql.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\MV8nQaqUtbQL.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\mv8nqaqutbql.avi.partially.cryptonar")) returned 1 [0169.281] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv", lpFilePart=0x0) returned 0x2e [0169.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv", lpFilePart=0x0) returned 0x2e [0169.282] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv", lpFilePart=0x0) returned 0x2e [0169.282] SetErrorMode (uMode=0x1) returned 0x0 [0169.282] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\rgtyqspg.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.283] GetFileType (hFile=0x230) returned 0x1 [0169.283] SetErrorMode (uMode=0x0) returned 0x1 [0169.283] GetFileType (hFile=0x230) returned 0x1 [0169.283] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.283] ReadFile (in: hFile=0x230, lpBuffer=0x27575f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27575f8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.284] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.284] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.284] WriteFile (in: hFile=0x230, lpBuffer=0x27575f8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27575f8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.284] CloseHandle (hObject=0x230) returned 1 [0169.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv", lpFilePart=0x0) returned 0x2e [0169.284] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv", lpFilePart=0x0) returned 0x2e [0169.285] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x42 [0169.285] SetErrorMode (uMode=0x1) returned 0x0 [0169.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\rgtyqspg.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba2b1640, ftCreationTime.dwHighDateTime=0x1d41c59, ftLastAccessTime.dwLowDateTime=0xf4bbd5c0, ftLastAccessTime.dwHighDateTime=0x1d41573, ftLastWriteTime.dwLowDateTime=0x675a83f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xc290)) returned 1 [0169.285] SetErrorMode (uMode=0x0) returned 0x1 [0169.285] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\rgtyqspg.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\RgtyqSpg.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\rgtyqspg.flv.partially.cryptonar")) returned 1 [0169.286] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4", lpFilePart=0x0) returned 0x2c [0169.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4", lpFilePart=0x0) returned 0x2c [0169.287] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4", lpFilePart=0x0) returned 0x2c [0169.287] SetErrorMode (uMode=0x1) returned 0x0 [0169.287] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\wwbvgt.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.288] GetFileType (hFile=0x230) returned 0x1 [0169.288] SetErrorMode (uMode=0x0) returned 0x1 [0169.288] GetFileType (hFile=0x230) returned 0x1 [0169.288] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.288] ReadFile (in: hFile=0x230, lpBuffer=0x275aa20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275aa20*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.289] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.289] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.289] WriteFile (in: hFile=0x230, lpBuffer=0x275aa20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275aa20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.289] CloseHandle (hObject=0x230) returned 1 [0169.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4", lpFilePart=0x0) returned 0x2c [0169.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4", lpFilePart=0x0) returned 0x2c [0169.289] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4.partially.cryptoNar", lpFilePart=0x0) returned 0x40 [0169.289] SetErrorMode (uMode=0x1) returned 0x0 [0169.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\wwbvgt.mp4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe086be00, ftCreationTime.dwHighDateTime=0x1d41490, ftLastAccessTime.dwLowDateTime=0x2feb8cd0, ftLastAccessTime.dwHighDateTime=0x1d415bf, ftLastWriteTime.dwLowDateTime=0x675a83f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x10d5)) returned 1 [0169.290] SetErrorMode (uMode=0x0) returned 0x1 [0169.290] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\wwbvgt.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\wwBVgT.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\wwbvgt.mp4.partially.cryptonar")) returned 1 [0169.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4", lpFilePart=0x0) returned 0x32 [0169.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4", lpFilePart=0x0) returned 0x32 [0169.291] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4", lpFilePart=0x0) returned 0x32 [0169.291] SetErrorMode (uMode=0x1) returned 0x0 [0169.292] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\x0j9bqsuyst7.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.293] GetFileType (hFile=0x230) returned 0x1 [0169.293] SetErrorMode (uMode=0x0) returned 0x1 [0169.293] GetFileType (hFile=0x230) returned 0x1 [0169.293] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.293] ReadFile (in: hFile=0x230, lpBuffer=0x275de78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x275de78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.293] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.293] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.293] WriteFile (in: hFile=0x230, lpBuffer=0x275de78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x275de78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.293] CloseHandle (hObject=0x230) returned 1 [0169.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4", lpFilePart=0x0) returned 0x32 [0169.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4", lpFilePart=0x0) returned 0x32 [0169.294] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4.partially.cryptoNar", lpFilePart=0x0) returned 0x46 [0169.294] SetErrorMode (uMode=0x1) returned 0x0 [0169.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\x0j9bqsuyst7.mp4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b3b9a30, ftCreationTime.dwHighDateTime=0x1d41f79, ftLastAccessTime.dwLowDateTime=0x315cb3c0, ftLastAccessTime.dwHighDateTime=0x1d41ac7, ftLastWriteTime.dwLowDateTime=0x675a83f7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18827)) returned 1 [0169.294] SetErrorMode (uMode=0x0) returned 0x1 [0169.294] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\x0j9bqsuyst7.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\x0J9bQsuyST7.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\x0j9bqsuyst7.mp4.partially.cryptonar")) returned 1 [0169.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv", lpFilePart=0x0) returned 0x38 [0169.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv", lpFilePart=0x0) returned 0x38 [0169.308] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv", lpFilePart=0x0) returned 0x38 [0169.308] SetErrorMode (uMode=0x1) returned 0x0 [0169.308] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\xmpbe7_rf7an g26f4.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.309] GetFileType (hFile=0x230) returned 0x1 [0169.309] SetErrorMode (uMode=0x0) returned 0x1 [0169.309] GetFileType (hFile=0x230) returned 0x1 [0169.309] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.309] ReadFile (in: hFile=0x230, lpBuffer=0x2761348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2761348*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.310] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.310] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.310] WriteFile (in: hFile=0x230, lpBuffer=0x2761348*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2761348*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.311] CloseHandle (hObject=0x230) returned 1 [0169.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv", lpFilePart=0x0) returned 0x38 [0169.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv", lpFilePart=0x0) returned 0x38 [0169.311] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x4c [0169.311] SetErrorMode (uMode=0x1) returned 0x0 [0169.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\xmpbe7_rf7an g26f4.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45c3e40, ftCreationTime.dwHighDateTime=0x1d417eb, ftLastAccessTime.dwLowDateTime=0xad792790, ftLastAccessTime.dwHighDateTime=0x1d415d6, ftLastWriteTime.dwLowDateTime=0x675f4884, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x8d36)) returned 1 [0169.311] SetErrorMode (uMode=0x0) returned 0x1 [0169.311] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\xmpbe7_rf7an g26f4.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\Xmpbe7_rf7An G26F4.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\xmpbe7_rf7an g26f4.flv.partially.cryptonar")) returned 1 [0169.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv", lpFilePart=0x0) returned 0x33 [0169.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv", lpFilePart=0x0) returned 0x33 [0169.312] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv", lpFilePart=0x0) returned 0x33 [0169.312] SetErrorMode (uMode=0x1) returned 0x0 [0169.313] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\yn-djrmqsw68d.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.314] GetFileType (hFile=0x230) returned 0x1 [0169.314] SetErrorMode (uMode=0x0) returned 0x1 [0169.314] GetFileType (hFile=0x230) returned 0x1 [0169.314] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.314] ReadFile (in: hFile=0x230, lpBuffer=0x2764830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2764830*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.314] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.314] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.314] WriteFile (in: hFile=0x230, lpBuffer=0x2764830*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2764830*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.315] CloseHandle (hObject=0x230) returned 1 [0169.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv", lpFilePart=0x0) returned 0x33 [0169.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv", lpFilePart=0x0) returned 0x33 [0169.315] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x47 [0169.315] SetErrorMode (uMode=0x1) returned 0x0 [0169.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\yn-djrmqsw68d.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf853f0, ftCreationTime.dwHighDateTime=0x1d414a3, ftLastAccessTime.dwLowDateTime=0xdc4feed0, ftLastAccessTime.dwHighDateTime=0x1d41132, ftLastWriteTime.dwLowDateTime=0x675f4884, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x712a)) returned 1 [0169.315] SetErrorMode (uMode=0x0) returned 0x1 [0169.315] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\yn-djrmqsw68d.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\yn-DjRMqsw68d.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\yn-djrmqsw68d.flv.partially.cryptonar")) returned 1 [0169.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi", lpFilePart=0x0) returned 0x42 [0169.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi", lpFilePart=0x0) returned 0x42 [0169.317] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi", lpFilePart=0x0) returned 0x42 [0169.317] SetErrorMode (uMode=0x1) returned 0x0 [0169.317] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\cz47qbj 7v.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.319] GetFileType (hFile=0x230) returned 0x1 [0169.319] SetErrorMode (uMode=0x0) returned 0x1 [0169.319] GetFileType (hFile=0x230) returned 0x1 [0169.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.319] ReadFile (in: hFile=0x230, lpBuffer=0x2767d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2767d10*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.319] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.319] WriteFile (in: hFile=0x230, lpBuffer=0x2767d10*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2767d10*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.319] CloseHandle (hObject=0x230) returned 1 [0169.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi", lpFilePart=0x0) returned 0x42 [0169.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi", lpFilePart=0x0) returned 0x42 [0169.319] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x56 [0169.319] SetErrorMode (uMode=0x1) returned 0x0 [0169.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\cz47qbj 7v.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x507e6fd0, ftCreationTime.dwHighDateTime=0x1d418f3, ftLastAccessTime.dwLowDateTime=0x5db198d0, ftLastAccessTime.dwHighDateTime=0x1d41899, ftLastWriteTime.dwLowDateTime=0x675f4884, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x11cc)) returned 1 [0169.320] SetErrorMode (uMode=0x0) returned 0x1 [0169.320] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\cz47qbj 7v.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\CZ47QbJ 7v.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\cz47qbj 7v.avi.partially.cryptonar")) returned 1 [0169.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4", lpFilePart=0x0) returned 0x3c [0169.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4", lpFilePart=0x0) returned 0x3c [0169.321] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4", lpFilePart=0x0) returned 0x3c [0169.321] SetErrorMode (uMode=0x1) returned 0x0 [0169.321] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\g_xh.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.322] GetFileType (hFile=0x230) returned 0x1 [0169.322] SetErrorMode (uMode=0x0) returned 0x1 [0169.322] GetFileType (hFile=0x230) returned 0x1 [0169.322] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.322] ReadFile (in: hFile=0x230, lpBuffer=0x276b280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276b280*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.322] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.322] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.323] WriteFile (in: hFile=0x230, lpBuffer=0x276b280*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276b280*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.323] CloseHandle (hObject=0x230) returned 1 [0169.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4", lpFilePart=0x0) returned 0x3c [0169.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4", lpFilePart=0x0) returned 0x3c [0169.323] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4.partially.cryptoNar", lpFilePart=0x0) returned 0x50 [0169.323] SetErrorMode (uMode=0x1) returned 0x0 [0169.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\g_xh.mp4"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7de9b60, ftCreationTime.dwHighDateTime=0x1d4197e, ftLastAccessTime.dwLowDateTime=0x60fc3dd0, ftLastAccessTime.dwHighDateTime=0x1d40fc3, ftLastWriteTime.dwLowDateTime=0x675f4884, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1414f)) returned 1 [0169.323] SetErrorMode (uMode=0x0) returned 0x1 [0169.323] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\g_xh.mp4"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\g_Xh.mp4.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\g_xh.mp4.partially.cryptonar")) returned 1 [0169.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi", lpFilePart=0x0) returned 0x3d [0169.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi", lpFilePart=0x0) returned 0x3d [0169.324] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi", lpFilePart=0x0) returned 0x3d [0169.325] SetErrorMode (uMode=0x1) returned 0x0 [0169.325] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\iq i8.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.326] GetFileType (hFile=0x230) returned 0x1 [0169.326] SetErrorMode (uMode=0x0) returned 0x1 [0169.326] GetFileType (hFile=0x230) returned 0x1 [0169.326] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.326] ReadFile (in: hFile=0x230, lpBuffer=0x276e7c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x276e7c0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.327] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.328] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.328] WriteFile (in: hFile=0x230, lpBuffer=0x276e7c0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x276e7c0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.328] CloseHandle (hObject=0x230) returned 1 [0169.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi", lpFilePart=0x0) returned 0x3d [0169.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi", lpFilePart=0x0) returned 0x3d [0169.328] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x51 [0169.328] SetErrorMode (uMode=0x1) returned 0x0 [0169.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\iq i8.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc88f5770, ftCreationTime.dwHighDateTime=0x1d410d6, ftLastAccessTime.dwLowDateTime=0x4d99d970, ftLastAccessTime.dwHighDateTime=0x1d410cf, ftLastWriteTime.dwLowDateTime=0x6761aa96, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x14341)) returned 1 [0169.328] SetErrorMode (uMode=0x0) returned 0x1 [0169.328] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\iq i8.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\iQ I8.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\iq i8.avi.partially.cryptonar")) returned 1 [0169.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf", lpFilePart=0x0) returned 0x48 [0169.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf", lpFilePart=0x0) returned 0x48 [0169.330] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf", lpFilePart=0x0) returned 0x48 [0169.330] SetErrorMode (uMode=0x1) returned 0x0 [0169.330] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\kdqcbk1kkhijifsp.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.331] GetFileType (hFile=0x230) returned 0x1 [0169.331] SetErrorMode (uMode=0x0) returned 0x1 [0169.331] GetFileType (hFile=0x230) returned 0x1 [0169.331] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.331] ReadFile (in: hFile=0x230, lpBuffer=0x2771d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2771d78*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.331] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.331] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.331] WriteFile (in: hFile=0x230, lpBuffer=0x2771d78*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2771d78*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.331] CloseHandle (hObject=0x230) returned 1 [0169.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf", lpFilePart=0x0) returned 0x48 [0169.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf", lpFilePart=0x0) returned 0x48 [0169.331] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf.partially.cryptoNar", lpFilePart=0x0) returned 0x5c [0169.332] SetErrorMode (uMode=0x1) returned 0x0 [0169.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\kdqcbk1kkhijifsp.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa527d620, ftCreationTime.dwHighDateTime=0x1d41d44, ftLastAccessTime.dwLowDateTime=0x3cac77f0, ftLastAccessTime.dwHighDateTime=0x1d41cf8, ftLastWriteTime.dwLowDateTime=0x6761aa96, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x3617)) returned 1 [0169.332] SetErrorMode (uMode=0x0) returned 0x1 [0169.332] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\kdqcbk1kkhijifsp.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\kDqcBK1kKhijifSp.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\kdqcbk1kkhijifsp.swf.partially.cryptonar")) returned 1 [0169.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf", lpFilePart=0x0) returned 0x47 [0169.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf", lpFilePart=0x0) returned 0x47 [0169.333] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf", lpFilePart=0x0) returned 0x47 [0169.333] SetErrorMode (uMode=0x1) returned 0x0 [0169.333] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\mgr_iq9dz9jyd9b.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.334] GetFileType (hFile=0x230) returned 0x1 [0169.334] SetErrorMode (uMode=0x0) returned 0x1 [0169.334] GetFileType (hFile=0x230) returned 0x1 [0169.334] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.334] ReadFile (in: hFile=0x230, lpBuffer=0x2775398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2775398*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.334] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.334] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.335] WriteFile (in: hFile=0x230, lpBuffer=0x2775398*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2775398*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.335] CloseHandle (hObject=0x230) returned 1 [0169.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf", lpFilePart=0x0) returned 0x47 [0169.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf", lpFilePart=0x0) returned 0x47 [0169.335] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf.partially.cryptoNar", lpFilePart=0x0) returned 0x5b [0169.335] SetErrorMode (uMode=0x1) returned 0x0 [0169.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\mgr_iq9dz9jyd9b.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaed95eb0, ftCreationTime.dwHighDateTime=0x1d41bc7, ftLastAccessTime.dwLowDateTime=0x6e96c160, ftLastAccessTime.dwHighDateTime=0x1d410ac, ftLastWriteTime.dwLowDateTime=0x6761aa96, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18bf4)) returned 1 [0169.335] SetErrorMode (uMode=0x0) returned 0x1 [0169.335] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\mgr_iq9dz9jyd9b.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\mgr_iq9dZ9jYd9B.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\mgr_iq9dz9jyd9b.swf.partially.cryptonar")) returned 1 [0169.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv", lpFilePart=0x0) returned 0x49 [0169.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv", lpFilePart=0x0) returned 0x49 [0169.336] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv", lpFilePart=0x0) returned 0x49 [0169.336] SetErrorMode (uMode=0x1) returned 0x0 [0169.336] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\shtqcbzrsy7m3tfea.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.337] GetFileType (hFile=0x230) returned 0x1 [0169.337] SetErrorMode (uMode=0x0) returned 0x1 [0169.337] GetFileType (hFile=0x230) returned 0x1 [0169.337] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.337] ReadFile (in: hFile=0x230, lpBuffer=0x27789b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27789b0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.338] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.338] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.338] WriteFile (in: hFile=0x230, lpBuffer=0x27789b0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27789b0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.338] CloseHandle (hObject=0x230) returned 1 [0169.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv", lpFilePart=0x0) returned 0x49 [0169.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv", lpFilePart=0x0) returned 0x49 [0169.338] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv.partially.cryptoNar", lpFilePart=0x0) returned 0x5d [0169.338] SetErrorMode (uMode=0x1) returned 0x0 [0169.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\shtqcbzrsy7m3tfea.mkv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefef79b0, ftCreationTime.dwHighDateTime=0x1d414fc, ftLastAccessTime.dwLowDateTime=0xdcca0b10, ftLastAccessTime.dwHighDateTime=0x1d41025, ftLastWriteTime.dwLowDateTime=0x6761aa96, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xf5f1)) returned 1 [0169.338] SetErrorMode (uMode=0x0) returned 0x1 [0169.338] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\shtqcbzrsy7m3tfea.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\sHtqCBZrSy7M3Tfea.mkv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\shtqcbzrsy7m3tfea.mkv.partially.cryptonar")) returned 1 [0169.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv", lpFilePart=0x0) returned 0x46 [0169.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv", lpFilePart=0x0) returned 0x46 [0169.339] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv", lpFilePart=0x0) returned 0x46 [0169.339] SetErrorMode (uMode=0x1) returned 0x0 [0169.339] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\vwnzcenmxezxdf.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.340] GetFileType (hFile=0x230) returned 0x1 [0169.340] SetErrorMode (uMode=0x0) returned 0x1 [0169.340] GetFileType (hFile=0x230) returned 0x1 [0169.340] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.340] ReadFile (in: hFile=0x230, lpBuffer=0x277bfd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277bfd0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.340] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.341] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.341] WriteFile (in: hFile=0x230, lpBuffer=0x277bfd0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x277bfd0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.341] CloseHandle (hObject=0x230) returned 1 [0169.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv", lpFilePart=0x0) returned 0x46 [0169.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv", lpFilePart=0x0) returned 0x46 [0169.341] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x5a [0169.341] SetErrorMode (uMode=0x1) returned 0x0 [0169.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\vwnzcenmxezxdf.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4fdad60, ftCreationTime.dwHighDateTime=0x1d417f6, ftLastAccessTime.dwLowDateTime=0x3ff6fd00, ftLastAccessTime.dwHighDateTime=0x1d40fdc, ftLastWriteTime.dwLowDateTime=0x6761aa96, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x18457)) returned 1 [0169.341] SetErrorMode (uMode=0x0) returned 0x1 [0169.341] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\vwnzcenmxezxdf.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\91UOplkyngUDTldme\\VwNZCeNmXeZXDF.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\91uoplkyngudtldme\\vwnzcenmxezxdf.flv.partially.cryptonar")) returned 1 [0169.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf", lpFilePart=0x0) returned 0x49 [0169.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf", lpFilePart=0x0) returned 0x49 [0169.379] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf", lpFilePart=0x0) returned 0x49 [0169.379] SetErrorMode (uMode=0x1) returned 0x0 [0169.379] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\0kigmrltt0g3bgv.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.380] GetFileType (hFile=0x230) returned 0x1 [0169.380] SetErrorMode (uMode=0x0) returned 0x1 [0169.380] GetFileType (hFile=0x230) returned 0x1 [0169.380] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.380] ReadFile (in: hFile=0x230, lpBuffer=0x277f5d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x277f5d8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.381] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.381] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.381] WriteFile (in: hFile=0x230, lpBuffer=0x277f5d8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x277f5d8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.381] CloseHandle (hObject=0x230) returned 1 [0169.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf", lpFilePart=0x0) returned 0x49 [0169.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf", lpFilePart=0x0) returned 0x49 [0169.381] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf.partially.cryptoNar", lpFilePart=0x0) returned 0x5d [0169.381] SetErrorMode (uMode=0x1) returned 0x0 [0169.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\0kigmrltt0g3bgv.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52d9c040, ftCreationTime.dwHighDateTime=0x1d41556, ftLastAccessTime.dwLowDateTime=0xf64c01a0, ftLastAccessTime.dwHighDateTime=0x1d41210, ftLastWriteTime.dwLowDateTime=0x6768d19a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x130f9)) returned 1 [0169.381] SetErrorMode (uMode=0x0) returned 0x1 [0169.381] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\0kigmrltt0g3bgv.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\0KIgMrltT0g3bGv.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\0kigmrltt0g3bgv.swf.partially.cryptonar")) returned 1 [0169.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv", lpFilePart=0x0) returned 0x42 [0169.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv", lpFilePart=0x0) returned 0x42 [0169.383] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv", lpFilePart=0x0) returned 0x42 [0169.383] SetErrorMode (uMode=0x1) returned 0x0 [0169.383] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\1kfglqrk.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.384] GetFileType (hFile=0x230) returned 0x1 [0169.384] SetErrorMode (uMode=0x0) returned 0x1 [0169.384] GetFileType (hFile=0x230) returned 0x1 [0169.384] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.384] ReadFile (in: hFile=0x230, lpBuffer=0x2782bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2782bd0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.385] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.385] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.385] WriteFile (in: hFile=0x230, lpBuffer=0x2782bd0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2782bd0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.385] CloseHandle (hObject=0x230) returned 1 [0169.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv", lpFilePart=0x0) returned 0x42 [0169.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv", lpFilePart=0x0) returned 0x42 [0169.385] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv.partially.cryptoNar", lpFilePart=0x0) returned 0x56 [0169.385] SetErrorMode (uMode=0x1) returned 0x0 [0169.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\1kfglqrk.mkv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd68d2bf0, ftCreationTime.dwHighDateTime=0x1d418aa, ftLastAccessTime.dwLowDateTime=0xde832260, ftLastAccessTime.dwHighDateTime=0x1d41049, ftLastWriteTime.dwLowDateTime=0x6768d19a, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x106a7)) returned 1 [0169.386] SetErrorMode (uMode=0x0) returned 0x1 [0169.386] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\1kfglqrk.mkv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\1KFgLqRk.mkv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\1kfglqrk.mkv.partially.cryptonar")) returned 1 [0169.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf", lpFilePart=0x0) returned 0x40 [0169.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf", lpFilePart=0x0) returned 0x40 [0169.387] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf", lpFilePart=0x0) returned 0x40 [0169.387] SetErrorMode (uMode=0x1) returned 0x0 [0169.387] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\luxmku.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.391] GetFileType (hFile=0x230) returned 0x1 [0169.391] SetErrorMode (uMode=0x0) returned 0x1 [0169.391] GetFileType (hFile=0x230) returned 0x1 [0169.391] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.391] ReadFile (in: hFile=0x230, lpBuffer=0x2786160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2786160*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.391] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.391] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.391] WriteFile (in: hFile=0x230, lpBuffer=0x2786160*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2786160*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.391] CloseHandle (hObject=0x230) returned 1 [0169.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf", lpFilePart=0x0) returned 0x40 [0169.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf", lpFilePart=0x0) returned 0x40 [0169.391] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf.partially.cryptoNar", lpFilePart=0x0) returned 0x54 [0169.391] SetErrorMode (uMode=0x1) returned 0x0 [0169.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\luxmku.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ca7dd30, ftCreationTime.dwHighDateTime=0x1d41024, ftLastAccessTime.dwLowDateTime=0x79c90930, ftLastAccessTime.dwHighDateTime=0x1d414a3, ftLastWriteTime.dwLowDateTime=0x676b4cd7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xe4d7)) returned 1 [0169.392] SetErrorMode (uMode=0x0) returned 0x1 [0169.392] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\luxmku.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\lUXMkU.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\luxmku.swf.partially.cryptonar")) returned 1 [0169.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi", lpFilePart=0x0) returned 0x3f [0169.393] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi", lpFilePart=0x0) returned 0x3f [0169.394] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi", lpFilePart=0x0) returned 0x3f [0169.394] SetErrorMode (uMode=0x1) returned 0x0 [0169.394] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\qeokv.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.395] GetFileType (hFile=0x230) returned 0x1 [0169.395] SetErrorMode (uMode=0x0) returned 0x1 [0169.395] GetFileType (hFile=0x230) returned 0x1 [0169.395] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.395] ReadFile (in: hFile=0x230, lpBuffer=0x27896d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27896d0*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.396] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.396] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.396] WriteFile (in: hFile=0x230, lpBuffer=0x27896d0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27896d0*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.396] CloseHandle (hObject=0x230) returned 1 [0169.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi", lpFilePart=0x0) returned 0x3f [0169.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi", lpFilePart=0x0) returned 0x3f [0169.396] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x53 [0169.396] SetErrorMode (uMode=0x1) returned 0x0 [0169.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\qeokv.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7e2d10, ftCreationTime.dwHighDateTime=0x1d411d7, ftLastAccessTime.dwLowDateTime=0x7ec2ccd0, ftLastAccessTime.dwHighDateTime=0x1d41b7b, ftLastWriteTime.dwLowDateTime=0x676b4cd7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x12c0b)) returned 1 [0169.396] SetErrorMode (uMode=0x0) returned 0x1 [0169.396] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\qeokv.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qEoKv.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\qeokv.avi.partially.cryptonar")) returned 1 [0169.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi", lpFilePart=0x0) returned 0x3f [0169.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi", lpFilePart=0x0) returned 0x3f [0169.398] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi", lpFilePart=0x0) returned 0x3f [0169.398] SetErrorMode (uMode=0x1) returned 0x0 [0169.398] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\qsqr7.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.399] GetFileType (hFile=0x230) returned 0x1 [0169.399] SetErrorMode (uMode=0x0) returned 0x1 [0169.399] GetFileType (hFile=0x230) returned 0x1 [0169.399] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.399] ReadFile (in: hFile=0x230, lpBuffer=0x278cc18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x278cc18*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.400] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.400] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.400] WriteFile (in: hFile=0x230, lpBuffer=0x278cc18*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x278cc18*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.400] CloseHandle (hObject=0x230) returned 1 [0169.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi", lpFilePart=0x0) returned 0x3f [0169.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi", lpFilePart=0x0) returned 0x3f [0169.400] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x53 [0169.400] SetErrorMode (uMode=0x1) returned 0x0 [0169.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\qsqr7.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66d4c120, ftCreationTime.dwHighDateTime=0x1d41b5b, ftLastAccessTime.dwLowDateTime=0x313c5950, ftLastAccessTime.dwHighDateTime=0x1d4183c, ftLastWriteTime.dwLowDateTime=0x676b4cd7, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0xb00a)) returned 1 [0169.401] SetErrorMode (uMode=0x0) returned 0x1 [0169.401] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\qsqr7.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\qSqR7.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\qsqr7.avi.partially.cryptonar")) returned 1 [0169.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf", lpFilePart=0x0) returned 0x48 [0169.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf", lpFilePart=0x0) returned 0x48 [0169.402] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf", lpFilePart=0x0) returned 0x48 [0169.402] SetErrorMode (uMode=0x1) returned 0x0 [0169.402] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\sbg yeovzv4jyc.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.404] GetFileType (hFile=0x230) returned 0x1 [0169.404] SetErrorMode (uMode=0x0) returned 0x1 [0169.404] GetFileType (hFile=0x230) returned 0x1 [0169.404] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.404] ReadFile (in: hFile=0x230, lpBuffer=0x27901c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x27901c8*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.404] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.404] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.404] WriteFile (in: hFile=0x230, lpBuffer=0x27901c8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x27901c8*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.404] CloseHandle (hObject=0x230) returned 1 [0169.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf", lpFilePart=0x0) returned 0x48 [0169.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf", lpFilePart=0x0) returned 0x48 [0169.404] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf.partially.cryptoNar", lpFilePart=0x0) returned 0x5c [0169.405] SetErrorMode (uMode=0x1) returned 0x0 [0169.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\sbg yeovzv4jyc.swf"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa749a380, ftCreationTime.dwHighDateTime=0x1d41ab9, ftLastAccessTime.dwLowDateTime=0x3641470, ftLastAccessTime.dwHighDateTime=0x1d411aa, ftLastWriteTime.dwLowDateTime=0x676d95e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x1d94)) returned 1 [0169.405] SetErrorMode (uMode=0x0) returned 0x1 [0169.405] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\sbg yeovzv4jyc.swf"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\SBg YeOVZv4JYc.swf.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\sbg yeovzv4jyc.swf.partially.cryptonar")) returned 1 [0169.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv", lpFilePart=0x0) returned 0x3e [0169.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv", lpFilePart=0x0) returned 0x3e [0169.406] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv", lpFilePart=0x0) returned 0x3e [0169.406] SetErrorMode (uMode=0x1) returned 0x0 [0169.406] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\xibt.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.407] GetFileType (hFile=0x230) returned 0x1 [0169.407] SetErrorMode (uMode=0x0) returned 0x1 [0169.408] GetFileType (hFile=0x230) returned 0x1 [0169.408] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.408] ReadFile (in: hFile=0x230, lpBuffer=0x2793798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2793798*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.408] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.408] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.408] WriteFile (in: hFile=0x230, lpBuffer=0x2793798*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2793798*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.408] CloseHandle (hObject=0x230) returned 1 [0169.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv", lpFilePart=0x0) returned 0x3e [0169.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv", lpFilePart=0x0) returned 0x3e [0169.408] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv.partially.cryptoNar", lpFilePart=0x0) returned 0x52 [0169.408] SetErrorMode (uMode=0x1) returned 0x0 [0169.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\xibt.flv"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35d8b1f0, ftCreationTime.dwHighDateTime=0x1d419f6, ftLastAccessTime.dwLowDateTime=0xdf7f8910, ftLastAccessTime.dwHighDateTime=0x1d41d55, ftLastWriteTime.dwLowDateTime=0x676d95e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x17681)) returned 1 [0169.408] SetErrorMode (uMode=0x0) returned 0x1 [0169.408] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\xibt.flv"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\XIbt.flv.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\xibt.flv.partially.cryptonar")) returned 1 [0169.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi", nBufferLength=0x105, lpBuffer=0x5ae730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi", lpFilePart=0x0) returned 0x44 [0169.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi", lpFilePart=0x0) returned 0x44 [0169.410] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi", nBufferLength=0x105, lpBuffer=0x5ae3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi", lpFilePart=0x0) returned 0x44 [0169.410] SetErrorMode (uMode=0x1) returned 0x0 [0169.410] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\_ubslbviqu.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x230 [0169.411] GetFileType (hFile=0x230) returned 0x1 [0169.411] SetErrorMode (uMode=0x0) returned 0x1 [0169.411] GetFileType (hFile=0x230) returned 0x1 [0169.411] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.411] ReadFile (in: hFile=0x230, lpBuffer=0x2796d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae8b8, lpOverlapped=0x0 | out: lpBuffer=0x2796d20*, lpNumberOfBytesRead=0x5ae8b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.411] SetFilePointer (in: hFile=0x230, lDistanceToMove=-3072, lpDistanceToMoveHigh=0x5aea40*=-1, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x400 [0169.411] SetFilePointer (in: hFile=0x230, lDistanceToMove=0, lpDistanceToMoveHigh=0x5aea40*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x5aea40*=0) returned 0x0 [0169.411] WriteFile (in: hFile=0x230, lpBuffer=0x2796d20*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x5ae8a8, lpOverlapped=0x0 | out: lpBuffer=0x2796d20*, lpNumberOfBytesWritten=0x5ae8a8*=0x400, lpOverlapped=0x0) returned 1 [0169.411] CloseHandle (hObject=0x230) returned 1 [0169.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi", nBufferLength=0x105, lpBuffer=0x5ae5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi", lpFilePart=0x0) returned 0x44 [0169.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi", lpFilePart=0x0) returned 0x44 [0169.412] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi.partially.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi.partially.cryptoNar", lpFilePart=0x0) returned 0x58 [0169.412] SetErrorMode (uMode=0x1) returned 0x0 [0169.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\_ubslbviqu.avi"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b531e70, ftCreationTime.dwHighDateTime=0x1d41471, ftLastAccessTime.dwLowDateTime=0x5306ba0, ftLastAccessTime.dwHighDateTime=0x1d418df, ftLastWriteTime.dwLowDateTime=0x676d95e3, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x139e9)) returned 1 [0169.412] SetErrorMode (uMode=0x0) returned 0x1 [0169.412] MoveFileW (lpExistingFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\_ubslbviqu.avi"), lpNewFileName="C:\\Users\\CIiHmnxMn6Ps\\Videos\\C0Ja\\i9jPL-UVuyGLrTI3g0n\\_ubslbviQU.avi.partially.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\videos\\c0ja\\i9jpl-uvuyglrti3g0n\\_ubslbviqu.avi.partially.cryptonar")) returned 1 [0169.788] CoCreateGuid (in: pguid=0x5ae900 | out: pguid=0x5ae900*(Data1=0xdad67b86, Data2=0x3cd1, Data3=0x431f, Data4=([0]=0xbe, [1]=0x3, [2]=0xf3, [3]=0xcd, [4]=0xb4, [5]=0x75, [6]=0x3d, [7]=0xc))) returned 0x0 [0169.789] GetVersionExW (in: lpVersionInformation=0x5ae7e0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5ae7e0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0170.378] CoCreateGuid (in: pguid=0x5ae8a0 | out: pguid=0x5ae8a0*(Data1=0xf9ff4e7a, Data2=0xbecb, Data3=0x403c, Data4=([0]=0x8c, [1]=0x52, [2]=0x64, [3]=0x8c, [4]=0x97, [5]=0xb2, [6]=0x60, [7]=0x47))) returned 0x0 [0170.502] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\encKey.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\encKey.cryptoNar", lpFilePart=0x0) returned 0x36 [0170.502] SetErrorMode (uMode=0x1) returned 0x0 [0170.502] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\encKey.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\enckey.cryptonar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2d4 [0170.504] GetFileType (hFile=0x2d4) returned 0x1 [0170.504] SetErrorMode (uMode=0x0) returned 0x1 [0170.504] GetFileType (hFile=0x2d4) returned 0x1 [0170.505] WriteFile (in: hFile=0x2d4, lpBuffer=0x27a44a8*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x5ae8f8, lpOverlapped=0x0 | out: lpBuffer=0x27a44a8*, lpNumberOfBytesWritten=0x5ae8f8*=0xac, lpOverlapped=0x0) returned 1 [0170.507] CloseHandle (hObject=0x2d4) returned 1 [0170.524] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\jokingwithyou.cryptoNar", nBufferLength=0x105, lpBuffer=0x5ae3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\jokingwithyou.cryptoNar", lpFilePart=0x0) returned 0x3d [0170.525] SetErrorMode (uMode=0x1) returned 0x0 [0170.525] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\jokingwithyou.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\jokingwithyou.cryptonar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x2d4 [0170.526] GetFileType (hFile=0x2d4) returned 0x1 [0170.526] SetErrorMode (uMode=0x0) returned 0x1 [0170.526] GetFileType (hFile=0x2d4) returned 0x1 [0170.526] SetFilePointer (in: hFile=0x2d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x5ae850*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x5ae850*=0) returned 0x0 [0170.527] WriteFile (in: hFile=0x2d4, lpBuffer=0x27a6db8*, nNumberOfBytesToWrite=0x45, lpNumberOfBytesWritten=0x5ae958, lpOverlapped=0x0 | out: lpBuffer=0x27a6db8*, lpNumberOfBytesWritten=0x5ae958*=0x45, lpOverlapped=0x0) returned 1 [0170.528] CloseHandle (hObject=0x2d4) returned 1 [0170.609] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.config", nBufferLength=0x105, lpBuffer=0x5ae4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.config", lpFilePart=0x0) returned 0x2b [0170.610] SetErrorMode (uMode=0x1) returned 0x0 [0170.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.config" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\asdfc4.config"), fInfoLevelId=0x0, lpFileInformation=0x5ae730 | out: lpFileInformation=0x5ae730*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.610] SetErrorMode (uMode=0x0) returned 0x1 [0172.577] GetLogicalDrives () returned 0x4 [0172.578] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x5ae320, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0172.578] SetErrorMode (uMode=0x1) returned 0x0 [0172.578] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x5ae750 | out: lpFileInformation=0x5ae750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x90fa1f36, ftCreationTime.dwHighDateTime=0x1d0baef, ftLastAccessTime.dwLowDateTime=0xcbe64b75, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0xcbe64b75, ftLastWriteTime.dwHighDateTime=0x1d41fe0, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0172.579] SetErrorMode (uMode=0x0) returned 0x1 [0172.579] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x5ae490, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0172.722] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2d4 [0172.738] CoGetObjectContext (in: riid=0x5ae768*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae760 | out: ppv=0x5ae760*=0x7c9710) returned 0x0 [0172.765] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x5ad270, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30 [0172.767] GetACP () returned 0x4e4 [0172.903] lstrlenW (lpString="䅁") returned 1 [0172.903] CoTaskMemAlloc (cb=0x43) returned 0x813690 [0172.903] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\\\wminet_utils.dll") returned 0x7ffaf0470000 [0173.620] CoTaskMemFree (pv=0x813690) [0173.621] CoTaskMemAlloc (cb=0xf) returned 0x802d10 [0173.621] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="ResetSecurity") returned 0x7ffaf04720e0 [0173.621] CoTaskMemFree (pv=0x802d10) [0173.738] CoTaskMemAlloc (cb=0xd) returned 0x802d10 [0173.738] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="SetSecurity") returned 0x7ffaf04721b0 [0173.738] CoTaskMemFree (pv=0x802d10) [0173.756] CoTaskMemAlloc (cb=0x14) returned 0x802d10 [0173.756] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="BlessIWbemServices") returned 0x7ffaf0472290 [0173.756] CoTaskMemFree (pv=0x802d10) [0173.842] CoTaskMemAlloc (cb=0x1a) returned 0x816320 [0173.843] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="BlessIWbemServicesObject") returned 0x7ffaf04723b0 [0173.843] CoTaskMemFree (pv=0x816320) [0173.885] CoTaskMemAlloc (cb=0x13) returned 0x802d10 [0173.885] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="GetPropertyHandle") returned 0x7ffaf04724d0 [0173.885] CoTaskMemFree (pv=0x802d10) [0173.905] CoTaskMemAlloc (cb=0x14) returned 0x802d10 [0173.905] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="WritePropertyValue") returned 0x7ffaf0472500 [0173.905] CoTaskMemFree (pv=0x802d10) [0173.923] CoTaskMemAlloc (cb=0x7) returned 0x7cf4f0 [0173.923] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="Clone") returned 0x7ffaf0472530 [0173.923] CoTaskMemFree (pv=0x7cf4f0) [0173.935] CoTaskMemAlloc (cb=0x11) returned 0x802e10 [0173.935] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="VerifyClientKey") returned 0x7ffaf04731f0 [0173.935] CoTaskMemFree (pv=0x802e10) [0173.942] CoTaskMemAlloc (cb=0x11) returned 0x802d10 [0173.942] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="GetQualifierSet") returned 0x7ffaf0472a50 [0173.942] CoTaskMemFree (pv=0x802d10) [0173.946] CoTaskMemAlloc (cb=0x5) returned 0x7cf380 [0173.947] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="Get") returned 0x7ffaf0472700 [0173.947] CoTaskMemFree (pv=0x7cf380) [0174.253] CoTaskMemAlloc (cb=0x5) returned 0x7cf2b0 [0174.254] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="Put") returned 0x7ffaf04726c0 [0174.254] CoTaskMemFree (pv=0x7cf2b0) [0174.258] CoTaskMemAlloc (cb=0x8) returned 0x7cf370 [0174.259] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="Delete") returned 0x7ffaf0472750 [0174.259] CoTaskMemFree (pv=0x7cf370) [0174.263] CoTaskMemAlloc (cb=0xa) returned 0x802ed0 [0174.264] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="GetNames") returned 0x7ffaf0472760 [0174.264] CoTaskMemFree (pv=0x802ed0) [0174.268] CoTaskMemAlloc (cb=0x12) returned 0x8028b0 [0174.268] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="BeginEnumeration") returned 0x7ffaf04727b0 [0174.268] CoTaskMemFree (pv=0x8028b0) [0174.270] CoTaskMemAlloc (cb=0x6) returned 0x7cf3c0 [0174.270] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="Next") returned 0x7ffaf04727c0 [0174.270] CoTaskMemFree (pv=0x7cf3c0) [0174.273] CoTaskMemAlloc (cb=0x10) returned 0x802d10 [0174.273] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="EndEnumeration") returned 0x7ffaf0472810 [0174.273] CoTaskMemFree (pv=0x802d10) [0174.275] CoTaskMemAlloc (cb=0x19) returned 0x816290 [0174.275] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="GetPropertyQualifierSet") returned 0x7ffaf0472820 [0174.275] CoTaskMemFree (pv=0x816290) [0174.277] CoTaskMemAlloc (cb=0x7) returned 0x7cf4f0 [0174.277] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="Clone") returned 0x7ffaf0472530 [0174.277] CoTaskMemFree (pv=0x7cf4f0) [0174.277] CoTaskMemAlloc (cb=0xf) returned 0x802f10 [0174.277] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="GetObjectText") returned 0x7ffaf0472840 [0174.277] CoTaskMemFree (pv=0x802f10) [0174.279] CoTaskMemAlloc (cb=0x13) returned 0x802d10 [0174.279] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="SpawnDerivedClass") returned 0x7ffaf0472860 [0174.279] CoTaskMemFree (pv=0x802d10) [0174.281] CoTaskMemAlloc (cb=0xf) returned 0x802d10 [0174.281] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="SpawnInstance") returned 0x7ffaf0472880 [0174.281] CoTaskMemFree (pv=0x802d10) [0174.282] CoTaskMemAlloc (cb=0xb) returned 0x802e10 [0174.282] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="CompareTo") returned 0x7ffaf04728a0 [0174.282] CoTaskMemFree (pv=0x802e10) [0174.283] CoTaskMemAlloc (cb=0x13) returned 0x802d10 [0174.283] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="GetPropertyOrigin") returned 0x7ffaf04728c0 [0174.283] CoTaskMemFree (pv=0x802d10) [0174.284] CoTaskMemAlloc (cb=0xe) returned 0x802d10 [0174.285] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="InheritsFrom") returned 0x7ffaf04728e0 [0174.285] CoTaskMemFree (pv=0x802d10) [0174.286] CoTaskMemAlloc (cb=0xb) returned 0x8028b0 [0174.286] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="GetMethod") returned 0x7ffaf04728f0 [0174.286] CoTaskMemFree (pv=0x8028b0) [0174.287] CoTaskMemAlloc (cb=0xb) returned 0x802d10 [0174.287] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="PutMethod") returned 0x7ffaf0472940 [0174.287] CoTaskMemFree (pv=0x802d10) [0174.288] CoTaskMemAlloc (cb=0xe) returned 0x802df0 [0174.288] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="DeleteMethod") returned 0x7ffaf0472990 [0174.289] CoTaskMemFree (pv=0x802df0) [0174.291] CoTaskMemAlloc (cb=0x18) returned 0x8028b0 [0174.291] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="BeginMethodEnumeration") returned 0x7ffaf04729a0 [0174.291] CoTaskMemFree (pv=0x8028b0) [0174.292] CoTaskMemAlloc (cb=0xc) returned 0x802d10 [0174.292] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="NextMethod") returned 0x7ffaf04729b0 [0174.292] CoTaskMemFree (pv=0x802d10) [0174.293] CoTaskMemAlloc (cb=0x16) returned 0x802d10 [0174.294] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="EndMethodEnumeration") returned 0x7ffaf0472a00 [0174.294] CoTaskMemFree (pv=0x802d10) [0174.295] CoTaskMemAlloc (cb=0x17) returned 0x802d10 [0174.295] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="GetMethodQualifierSet") returned 0x7ffaf0472a10 [0174.295] CoTaskMemFree (pv=0x802d10) [0174.296] CoTaskMemAlloc (cb=0x11) returned 0x802d10 [0174.296] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="GetMethodOrigin") returned 0x7ffaf0472a30 [0174.296] CoTaskMemFree (pv=0x802d10) [0174.298] CoTaskMemAlloc (cb=0x12) returned 0x802d10 [0174.298] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="QualifierSet_Get") returned 0x7ffaf0472a60 [0174.298] CoTaskMemFree (pv=0x802d10) [0174.299] CoTaskMemAlloc (cb=0x12) returned 0x802d10 [0174.299] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="QualifierSet_Put") returned 0x7ffaf0472ab0 [0174.299] CoTaskMemFree (pv=0x802d10) [0174.301] CoTaskMemAlloc (cb=0x15) returned 0x8027f0 [0174.301] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="QualifierSet_Delete") returned 0x7ffaf0472ae0 [0174.301] CoTaskMemFree (pv=0x8027f0) [0174.302] CoTaskMemAlloc (cb=0x17) returned 0x802d70 [0174.302] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="QualifierSet_GetNames") returned 0x7ffaf0472af0 [0174.302] CoTaskMemFree (pv=0x802d70) [0174.303] CoTaskMemAlloc (cb=0x1f) returned 0x816a10 [0174.304] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="QualifierSet_BeginEnumeration") returned 0x7ffaf0472b10 [0174.304] CoTaskMemFree (pv=0x816a10) [0174.305] CoTaskMemAlloc (cb=0x13) returned 0x802d10 [0174.305] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="QualifierSet_Next") returned 0x7ffaf0472b20 [0174.305] CoTaskMemFree (pv=0x802d10) [0174.307] CoTaskMemAlloc (cb=0x1d) returned 0x816230 [0174.307] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="QualifierSet_EndEnumeration") returned 0x7ffaf0472b70 [0174.307] CoTaskMemFree (pv=0x816230) [0174.307] CoTaskMemAlloc (cb=0x19) returned 0x816860 [0174.307] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="GetCurrentApartmentType") returned 0x7ffaf0472a50 [0174.307] CoTaskMemFree (pv=0x816860) [0174.308] CoTaskMemAlloc (cb=0x16) returned 0x802d10 [0174.308] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="GetDemultiplexedStub") returned 0x7ffaf0472060 [0174.308] CoTaskMemFree (pv=0x802d10) [0174.310] CoTaskMemAlloc (cb=0x17) returned 0x802d10 [0174.310] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="CreateInstanceEnumWmi") returned 0x7ffaf0471760 [0174.310] CoTaskMemFree (pv=0x802d10) [0174.313] CoTaskMemAlloc (cb=0x14) returned 0x802d10 [0174.313] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="CreateClassEnumWmi") returned 0x7ffaf04718c0 [0174.313] CoTaskMemFree (pv=0x802d10) [0174.315] CoTaskMemAlloc (cb=0xe) returned 0x802d10 [0174.316] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="ExecQueryWmi") returned 0x7ffaf0471a20 [0174.316] CoTaskMemFree (pv=0x802d10) [0174.318] CoTaskMemAlloc (cb=0x1a) returned 0x816440 [0174.318] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="ExecNotificationQueryWmi") returned 0x7ffaf0471b90 [0174.318] CoTaskMemFree (pv=0x816440) [0174.322] CoTaskMemAlloc (cb=0x10) returned 0x802d10 [0174.322] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="PutInstanceWmi") returned 0x7ffaf0471d00 [0174.322] CoTaskMemFree (pv=0x802d10) [0174.324] CoTaskMemAlloc (cb=0xd) returned 0x802d10 [0174.325] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="PutClassWmi") returned 0x7ffaf0471e00 [0174.325] CoTaskMemFree (pv=0x802d10) [0174.326] CoTaskMemAlloc (cb=0x1a) returned 0x816680 [0174.327] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="CloneEnumWbemClassObject") returned 0x7ffaf0471f00 [0174.327] CoTaskMemFree (pv=0x816680) [0174.328] CoTaskMemAlloc (cb=0x12) returned 0x802d10 [0174.328] GetProcAddress (hModule=0x7ffaf0470000, lpProcName="ConnectServerWmi") returned 0x7ffaf04734c0 [0174.328] CoTaskMemFree (pv=0x802d10) [0174.330] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae7fc | out: pAptType=0x5ae7fc*=1) returned 0x0 [0174.330] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae888 | out: ppvObject=0x5ae888*=0x0) returned 0x80004002 [0174.330] IUnknown:Release (This=0x7c9710) returned 0x0 [0174.406] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x5adf80 | out: lpiid=0x5adf80) returned 0x0 [0174.406] CoGetClassObject (in: rclsid=0x804068*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5addf0 | out: ppv=0x5addf0*=0x802d90) returned 0x0 [0176.561] WbemDefPath:IUnknown:QueryInterface (in: This=0x802d90, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5adb00 | out: ppvObject=0x5adb00*=0x0) returned 0x80004002 [0176.561] WbemDefPath:IClassFactory:CreateInstance (in: This=0x802d90, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adae8 | out: ppvObject=0x5adae8*=0x7db0a0) returned 0x0 [0176.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db0a0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad9f0 | out: ppvObject=0x5ad9f0*=0x7db0a0) returned 0x0 [0176.562] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db0a0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ada70 | out: ppvObject=0x5ada70*=0x0) returned 0x80004002 [0176.562] WbemDefPath:IUnknown:AddRef (This=0x7db0a0) returned 0x3 [0176.563] CoGetContextToken (in: pToken=0x5ad6c0 | out: pToken=0x5ad6c0) returned 0x0 [0176.573] CoGetObjectContext (in: riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x813838 | out: ppv=0x813838*=0x7c96f8) returned 0x0 [0176.574] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db0a0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad680 | out: ppvObject=0x5ad680*=0x802ed0) returned 0x0 [0176.574] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x802ed0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad6b0 | out: pCid=0x5ad6b0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0176.574] WbemDefPath:IUnknown:Release (This=0x802ed0) returned 0x3 [0176.574] CoGetContextToken (in: pToken=0x5ad690 | out: pToken=0x5ad690) returned 0x0 [0176.574] WbemDefPath:IUnknown:AddRef (This=0x7db0a0) returned 0x4 [0176.574] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db0a0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad7a8 | out: ppvObject=0x5ad7a8*=0x0) returned 0x80004002 [0176.574] WbemDefPath:IUnknown:Release (This=0x7db0a0) returned 0x3 [0176.575] WbemDefPath:IUnknown:Release (This=0x7db0a0) returned 0x2 [0176.575] WbemDefPath:IUnknown:Release (This=0x802d90) returned 0x0 [0176.575] WbemDefPath:IUnknown:Release (This=0x7db0a0) returned 0x1 [0176.577] CoGetContextToken (in: pToken=0x5ae3c0 | out: pToken=0x5ae3c0) returned 0x0 [0176.577] CoGetContextToken (in: pToken=0x5ae300 | out: pToken=0x5ae300) returned 0x0 [0176.577] WbemDefPath:IUnknown:AddRef (This=0x7db0a0) returned 0x2 [0176.577] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db0a0, riid=0x5ae440*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae420 | out: ppvObject=0x5ae420*=0x7db0a0) returned 0x0 [0176.577] WbemDefPath:IUnknown:Release (This=0x7db0a0) returned 0x2 [0176.578] WbemDefPath:IUnknown:Release (This=0x7db0a0) returned 0x1 [0176.578] CoGetObjectContext (in: riid=0x5ad6e8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ad6e0 | out: ppv=0x5ad6e0*=0x7c9710) returned 0x0 [0176.579] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ad77c | out: pAptType=0x5ad77c*=1) returned 0x0 [0176.579] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ad808 | out: ppvObject=0x5ad808*=0x0) returned 0x80004002 [0176.579] IUnknown:Release (This=0x7c9710) returned 0x1 [0176.579] CoGetClassObject (in: rclsid=0x804068*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5acd70 | out: ppv=0x5acd70*=0x802d90) returned 0x0 [0176.580] WbemDefPath:IUnknown:QueryInterface (in: This=0x802d90, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5aca80 | out: ppvObject=0x5aca80*=0x0) returned 0x80004002 [0176.580] WbemDefPath:IClassFactory:CreateInstance (in: This=0x802d90, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5aca68 | out: ppvObject=0x5aca68*=0x7db760) returned 0x0 [0176.580] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db760, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ac970 | out: ppvObject=0x5ac970*=0x7db760) returned 0x0 [0176.580] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db760, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ac9f0 | out: ppvObject=0x5ac9f0*=0x0) returned 0x80004002 [0176.580] WbemDefPath:IUnknown:AddRef (This=0x7db760) returned 0x3 [0176.580] CoGetContextToken (in: pToken=0x5ac640 | out: pToken=0x5ac640) returned 0x0 [0176.580] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db760, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ac600 | out: ppvObject=0x5ac600*=0x802f10) returned 0x0 [0176.580] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x802f10, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ac630 | out: pCid=0x5ac630*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0176.580] WbemDefPath:IUnknown:Release (This=0x802f10) returned 0x3 [0176.581] CoGetContextToken (in: pToken=0x5ac610 | out: pToken=0x5ac610) returned 0x0 [0176.581] WbemDefPath:IUnknown:AddRef (This=0x7db760) returned 0x4 [0176.581] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db760, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ac728 | out: ppvObject=0x5ac728*=0x0) returned 0x80004002 [0176.581] WbemDefPath:IUnknown:Release (This=0x7db760) returned 0x3 [0176.581] WbemDefPath:IUnknown:Release (This=0x7db760) returned 0x2 [0176.581] WbemDefPath:IUnknown:Release (This=0x802d90) returned 0x0 [0176.581] WbemDefPath:IUnknown:Release (This=0x7db760) returned 0x1 [0176.581] CoGetContextToken (in: pToken=0x5ad340 | out: pToken=0x5ad340) returned 0x0 [0176.581] CoGetContextToken (in: pToken=0x5ad280 | out: pToken=0x5ad280) returned 0x0 [0176.581] WbemDefPath:IUnknown:AddRef (This=0x7db760) returned 0x2 [0176.581] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db760, riid=0x5ad3c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ad3a0 | out: ppvObject=0x5ad3a0*=0x7db760) returned 0x0 [0176.581] WbemDefPath:IUnknown:Release (This=0x7db760) returned 0x2 [0176.581] WbemDefPath:IUnknown:Release (This=0x7db760) returned 0x1 [0176.584] CoGetContextToken (in: pToken=0x5ad4c0 | out: pToken=0x5ad4c0) returned 0x0 [0176.584] CoGetContextToken (in: pToken=0x5ad400 | out: pToken=0x5ad400) returned 0x0 [0176.584] WbemDefPath:IUnknown:AddRef (This=0x7db760) returned 0x2 [0176.584] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db760, riid=0x5ad540*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ad520 | out: ppvObject=0x5ad520*=0x7db760) returned 0x0 [0176.584] WbemDefPath:IUnknown:Release (This=0x7db760) returned 0x2 [0176.584] WbemDefPath:IUnknown:AddRef (This=0x7db760) returned 0x3 [0176.584] WbemDefPath:IWbemPath:SetText (This=0x7db760, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0176.584] WbemDefPath:IUnknown:Release (This=0x7db760) returned 0x2 [0176.585] CoGetContextToken (in: pToken=0x5ae540 | out: pToken=0x5ae540) returned 0x0 [0176.585] CoGetContextToken (in: pToken=0x5ae480 | out: pToken=0x5ae480) returned 0x0 [0176.585] WbemDefPath:IUnknown:AddRef (This=0x7db0a0) returned 0x2 [0176.585] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db0a0, riid=0x5ae5c0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae5a0 | out: ppvObject=0x5ae5a0*=0x7db0a0) returned 0x0 [0176.585] WbemDefPath:IUnknown:Release (This=0x7db0a0) returned 0x2 [0176.585] WbemDefPath:IUnknown:AddRef (This=0x7db0a0) returned 0x3 [0176.585] WbemDefPath:IWbemPath:SetText (This=0x7db0a0, uMode=0x4, pszPath="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0176.585] WbemDefPath:IUnknown:Release (This=0x7db0a0) returned 0x2 [0176.674] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db0a0, puCount=0x5ae870 | out: puCount=0x5ae870*=0x0) returned 0x0 [0176.674] WbemDefPath:IWbemPath:GetText (in: This=0x7db0a0, lFlags=2, puBuffLength=0x5ae870*=0x0, pszText=0x0 | out: puBuffLength=0x5ae870*=0x20, pszText=0x0) returned 0x0 [0176.674] WbemDefPath:IWbemPath:GetText (in: This=0x7db0a0, lFlags=2, puBuffLength=0x5ae870*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5ae870*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0176.675] WbemDefPath:IWbemPath:GetInfo (in: This=0x7db0a0, uRequestedInfo=0x0, puResponse=0x5ae890 | out: puResponse=0x5ae890*=0xc19) returned 0x0 [0176.675] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db0a0, puCount=0x5ae870 | out: puCount=0x5ae870*=0x0) returned 0x0 [0176.676] WbemDefPath:IWbemPath:GetInfo (in: This=0x7db0a0, uRequestedInfo=0x0, puResponse=0x5ae890 | out: puResponse=0x5ae890*=0xc19) returned 0x0 [0176.676] WbemDefPath:IWbemPath:GetInfo (in: This=0x7db0a0, uRequestedInfo=0x0, puResponse=0x5ae890 | out: puResponse=0x5ae890*=0xc19) returned 0x0 [0176.677] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db0a0, puCount=0x5ae790 | out: puCount=0x5ae790*=0x0) returned 0x0 [0176.677] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db760, puCount=0x5ae750 | out: puCount=0x5ae750*=0x2) returned 0x0 [0176.677] WbemDefPath:IWbemPath:GetText (in: This=0x7db760, lFlags=4, puBuffLength=0x5ae750*=0x0, pszText=0x0 | out: puBuffLength=0x5ae750*=0xf, pszText=0x0) returned 0x0 [0176.677] WbemDefPath:IWbemPath:GetText (in: This=0x7db760, lFlags=4, puBuffLength=0x5ae750*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae750*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0176.677] CoGetObjectContext (in: riid=0x5ae628*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae620 | out: ppv=0x5ae620*=0x7c9710) returned 0x0 [0176.677] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae6bc | out: pAptType=0x5ae6bc*=1) returned 0x0 [0176.677] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae748 | out: ppvObject=0x5ae748*=0x0) returned 0x80004002 [0176.678] IUnknown:Release (This=0x7c9710) returned 0x1 [0176.678] CoGetClassObject (in: rclsid=0x804068*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5adcb0 | out: ppv=0x5adcb0*=0x80d7e0) returned 0x0 [0176.678] WbemDefPath:IUnknown:QueryInterface (in: This=0x80d7e0, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ad9c0 | out: ppvObject=0x5ad9c0*=0x0) returned 0x80004002 [0176.678] WbemDefPath:IClassFactory:CreateInstance (in: This=0x80d7e0, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad9a8 | out: ppvObject=0x5ad9a8*=0x7dac20) returned 0x0 [0176.678] WbemDefPath:IUnknown:QueryInterface (in: This=0x7dac20, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad8b0 | out: ppvObject=0x5ad8b0*=0x7dac20) returned 0x0 [0176.678] WbemDefPath:IUnknown:QueryInterface (in: This=0x7dac20, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ad930 | out: ppvObject=0x5ad930*=0x0) returned 0x80004002 [0176.679] WbemDefPath:IUnknown:AddRef (This=0x7dac20) returned 0x3 [0176.679] CoGetContextToken (in: pToken=0x5ad580 | out: pToken=0x5ad580) returned 0x0 [0176.679] WbemDefPath:IUnknown:QueryInterface (in: This=0x7dac20, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad540 | out: ppvObject=0x5ad540*=0x80daa0) returned 0x0 [0176.679] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x80daa0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad570 | out: pCid=0x5ad570*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0176.679] WbemDefPath:IUnknown:Release (This=0x80daa0) returned 0x3 [0176.679] CoGetContextToken (in: pToken=0x5ad550 | out: pToken=0x5ad550) returned 0x0 [0176.679] WbemDefPath:IUnknown:AddRef (This=0x7dac20) returned 0x4 [0176.679] WbemDefPath:IUnknown:QueryInterface (in: This=0x7dac20, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad668 | out: ppvObject=0x5ad668*=0x0) returned 0x80004002 [0176.679] WbemDefPath:IUnknown:Release (This=0x7dac20) returned 0x3 [0176.679] WbemDefPath:IUnknown:Release (This=0x7dac20) returned 0x2 [0176.679] WbemDefPath:IUnknown:Release (This=0x80d7e0) returned 0x0 [0176.680] WbemDefPath:IUnknown:Release (This=0x7dac20) returned 0x1 [0176.680] CoGetContextToken (in: pToken=0x5ae280 | out: pToken=0x5ae280) returned 0x0 [0176.680] CoGetContextToken (in: pToken=0x5ae1c0 | out: pToken=0x5ae1c0) returned 0x0 [0176.680] WbemDefPath:IUnknown:AddRef (This=0x7dac20) returned 0x2 [0176.680] WbemDefPath:IUnknown:QueryInterface (in: This=0x7dac20, riid=0x5ae300*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae2e0 | out: ppvObject=0x5ae2e0*=0x7dac20) returned 0x0 [0176.680] WbemDefPath:IUnknown:Release (This=0x7dac20) returned 0x2 [0176.680] WbemDefPath:IUnknown:Release (This=0x7dac20) returned 0x1 [0176.680] CoGetContextToken (in: pToken=0x5ae400 | out: pToken=0x5ae400) returned 0x0 [0176.680] CoGetContextToken (in: pToken=0x5ae340 | out: pToken=0x5ae340) returned 0x0 [0176.680] WbemDefPath:IUnknown:AddRef (This=0x7dac20) returned 0x2 [0176.680] WbemDefPath:IUnknown:QueryInterface (in: This=0x7dac20, riid=0x5ae480*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae460 | out: ppvObject=0x5ae460*=0x7dac20) returned 0x0 [0176.680] WbemDefPath:IUnknown:Release (This=0x7dac20) returned 0x2 [0176.680] WbemDefPath:IUnknown:AddRef (This=0x7dac20) returned 0x3 [0176.680] WbemDefPath:IWbemPath:SetText (This=0x7dac20, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0176.680] WbemDefPath:IUnknown:Release (This=0x7dac20) returned 0x2 [0176.681] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7dac20, puCount=0x5ae6c0 | out: puCount=0x5ae6c0*=0x2) returned 0x0 [0176.681] WbemDefPath:IWbemPath:GetText (in: This=0x7dac20, lFlags=4, puBuffLength=0x5ae6c0*=0x0, pszText=0x0 | out: puBuffLength=0x5ae6c0*=0xf, pszText=0x0) returned 0x0 [0176.681] WbemDefPath:IWbemPath:GetText (in: This=0x7dac20, lFlags=4, puBuffLength=0x5ae6c0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae6c0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0176.681] CoGetObjectContext (in: riid=0x5ae6e8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae6e0 | out: ppv=0x5ae6e0*=0x7c9710) returned 0x0 [0176.681] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae77c | out: pAptType=0x5ae77c*=1) returned 0x0 [0176.682] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae808 | out: ppvObject=0x5ae808*=0x0) returned 0x80004002 [0176.682] IUnknown:Release (This=0x7c9710) returned 0x1 [0176.682] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x5ae520 | out: lpiid=0x5ae520) returned 0x0 [0176.682] CoGetClassObject (in: rclsid=0x804228*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae390 | out: ppv=0x5ae390*=0x80d740) returned 0x0 [0176.810] WbemLocator:IUnknown:QueryInterface (in: This=0x80d740, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ae0a0 | out: ppvObject=0x5ae0a0*=0x0) returned 0x80004002 [0176.811] WbemLocator:IClassFactory:CreateInstance (in: This=0x80d740, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae088 | out: ppvObject=0x5ae088*=0x80dbc0) returned 0x0 [0176.811] WbemLocator:IUnknown:QueryInterface (in: This=0x80dbc0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adf90 | out: ppvObject=0x5adf90*=0x80dbc0) returned 0x0 [0176.817] WbemLocator:IUnknown:QueryInterface (in: This=0x80dbc0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ae010 | out: ppvObject=0x5ae010*=0x0) returned 0x80004002 [0176.820] WbemLocator:IUnknown:AddRef (This=0x80dbc0) returned 0x3 [0176.820] CoGetContextToken (in: pToken=0x5adc60 | out: pToken=0x5adc60) returned 0x0 [0176.820] WbemLocator:IUnknown:QueryInterface (in: This=0x80dbc0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adc20 | out: ppvObject=0x5adc20*=0x0) returned 0x80004002 [0176.824] CoGetContextToken (in: pToken=0x5adc30 | out: pToken=0x5adc30) returned 0x0 [0176.825] WbemLocator:IUnknown:AddRef (This=0x80dbc0) returned 0x4 [0176.825] WbemLocator:IUnknown:QueryInterface (in: This=0x80dbc0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5add48 | out: ppvObject=0x5add48*=0x0) returned 0x80004002 [0176.825] WbemLocator:IUnknown:Release (This=0x80dbc0) returned 0x3 [0176.827] WbemLocator:IUnknown:Release (This=0x80dbc0) returned 0x2 [0176.827] WbemLocator:IUnknown:Release (This=0x80d740) returned 0x0 [0176.827] WbemLocator:IUnknown:Release (This=0x80dbc0) returned 0x1 [0176.828] CoGetContextToken (in: pToken=0x5ae250 | out: pToken=0x5ae250) returned 0x0 [0176.828] CoGetContextToken (in: pToken=0x5ae190 | out: pToken=0x5ae190) returned 0x0 [0176.828] WbemLocator:IUnknown:AddRef (This=0x80dbc0) returned 0x2 [0176.828] WbemLocator:IUnknown:QueryInterface (in: This=0x80dbc0, riid=0x5ae2d0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5ae2b0 | out: ppvObject=0x5ae2b0*=0x80dbc0) returned 0x0 [0176.828] WbemLocator:IUnknown:Release (This=0x80dbc0) returned 0x2 [0176.828] WbemLocator:IUnknown:Release (This=0x80dbc0) returned 0x1 [0176.997] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7dac20, puCount=0x5ae6b0 | out: puCount=0x5ae6b0*=0x2) returned 0x0 [0176.997] WbemDefPath:IWbemPath:GetText (in: This=0x7dac20, lFlags=8, puBuffLength=0x5ae6b0*=0x0, pszText=0x0 | out: puBuffLength=0x5ae6b0*=0xf, pszText=0x0) returned 0x0 [0176.997] WbemDefPath:IWbemPath:GetText (in: This=0x7dac20, lFlags=8, puBuffLength=0x5ae6b0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae6b0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0177.058] CoCreateInstance (in: rclsid=0x7ffaf04715a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffaf04714d8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x5ae2d0 | out: ppv=0x5ae2d0*=0x80d6c0) returned 0x0 [0177.058] WbemLocator:IWbemLocator:ConnectServer (in: This=0x80d6c0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x5ae5f0 | out: ppNamespace=0x5ae5f0*=0x81de40) returned 0x0 [0178.562] WbemLocator:IUnknown:QueryInterface (in: This=0x81de40, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae148 | out: ppvObject=0x5ae148*=0x7da6d0) returned 0x0 [0178.562] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7da6d0, pProxy=0x81de40, pAuthnSvc=0x5ae140, pAuthzSvc=0x5ae13c, pServerPrincName=0x5ae168, pAuthnLevel=0x5ae138, pImpLevel=0x5ae154, pAuthInfo=0x5ae178, pCapabilites=0x5ae150 | out: pAuthnSvc=0x5ae140*=0xa, pAuthzSvc=0x5ae13c*=0x0, pServerPrincName=0x5ae168, pAuthnLevel=0x5ae138*=0x6, pImpLevel=0x5ae154*=0x2, pAuthInfo=0x5ae178, pCapabilites=0x5ae150*=0x1) returned 0x0 [0178.562] WbemLocator:IUnknown:Release (This=0x7da6d0) returned 0x1 [0178.563] WbemLocator:IUnknown:QueryInterface (in: This=0x81de40, riid=0x7ffaf0471458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae0e8 | out: ppvObject=0x5ae0e8*=0x7da718) returned 0x0 [0178.563] WbemLocator:IUnknown:QueryInterface (in: This=0x81de40, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae078 | out: ppvObject=0x5ae078*=0x7da6d0) returned 0x0 [0178.563] WbemLocator:IClientSecurity:SetBlanket (This=0x7da6d0, pProxy=0x81de40, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0178.563] WbemLocator:IUnknown:Release (This=0x7da6d0) returned 0x2 [0178.563] WbemLocator:IUnknown:Release (This=0x7da718) returned 0x1 [0178.563] CoTaskMemFree (pv=0x816170) [0178.563] WbemLocator:IUnknown:Release (This=0x80d6c0) returned 0x0 [0178.563] WbemLocator:IUnknown:QueryInterface (in: This=0x81de40, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5add60 | out: ppvObject=0x5add60*=0x7da718) returned 0x0 [0178.563] WbemLocator:IUnknown:QueryInterface (in: This=0x7da718, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5adde0 | out: ppvObject=0x5adde0*=0x0) returned 0x80004002 [0178.565] WbemLocator:IUnknown:QueryInterface (in: This=0x7da718, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5adb78 | out: ppvObject=0x5adb78*=0x0) returned 0x80004002 [0178.568] WbemLocator:IUnknown:AddRef (This=0x7da718) returned 0x3 [0178.568] CoGetContextToken (in: pToken=0x5ada30 | out: pToken=0x5ada30) returned 0x0 [0178.568] WbemLocator:IUnknown:QueryInterface (in: This=0x7da718, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad9f0 | out: ppvObject=0x5ad9f0*=0x7da5f8) returned 0x0 [0178.568] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x7da5f8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ada20 | out: pCid=0x5ada20*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0178.568] WbemLocator:IUnknown:Release (This=0x7da5f8) returned 0x3 [0178.568] CoGetContextToken (in: pToken=0x5ada00 | out: pToken=0x5ada00) returned 0x0 [0178.568] WbemLocator:IUnknown:AddRef (This=0x7da718) returned 0x4 [0178.568] WbemLocator:IUnknown:QueryInterface (in: This=0x7da718, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adb18 | out: ppvObject=0x5adb18*=0x7da6e0) returned 0x0 [0178.568] WbemLocator:IUnknown:Release (This=0x7da718) returned 0x4 [0178.569] WbemLocator:IRpcOptions:Query (in: This=0x7da6e0, pPrx=0x7da718, dwProperty=2, pdwValue=0x5adb88 | out: pdwValue=0x5adb88) returned 0x80004002 [0178.569] WbemLocator:IUnknown:Release (This=0x7da6e0) returned 0x3 [0178.569] WbemLocator:IUnknown:Release (This=0x7da718) returned 0x2 [0178.569] CoGetContextToken (in: pToken=0x5adf00 | out: pToken=0x5adf00) returned 0x0 [0178.569] CoGetContextToken (in: pToken=0x5ade40 | out: pToken=0x5ade40) returned 0x0 [0178.569] WbemLocator:IUnknown:AddRef (This=0x7da718) returned 0x3 [0178.570] WbemLocator:IUnknown:QueryInterface (in: This=0x7da718, riid=0x5adf80*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5adf60 | out: ppvObject=0x5adf60*=0x81de40) returned 0x0 [0178.570] WbemLocator:IUnknown:Release (This=0x7da718) returned 0x3 [0178.570] WbemLocator:IUnknown:Release (This=0x81de40) returned 0x2 [0178.570] WbemLocator:IUnknown:Release (This=0x81de40) returned 0x1 [0178.571] SysStringLen (param_1=0x0) returned 0x0 [0178.610] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db0a0, puCount=0x5ae840 | out: puCount=0x5ae840*=0x0) returned 0x0 [0178.610] WbemDefPath:IWbemPath:GetText (in: This=0x7db0a0, lFlags=2, puBuffLength=0x5ae840*=0x0, pszText=0x0 | out: puBuffLength=0x5ae840*=0x20, pszText=0x0) returned 0x0 [0178.610] WbemDefPath:IWbemPath:GetText (in: This=0x7db0a0, lFlags=2, puBuffLength=0x5ae840*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5ae840*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0178.611] CoGetContextToken (in: pToken=0x5ae620 | out: pToken=0x5ae620) returned 0x0 [0178.611] WbemLocator:IUnknown:AddRef (This=0x7da718) returned 0x2 [0178.611] WbemLocator:IUnknown:QueryInterface (in: This=0x7da718, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae1f0 | out: ppvObject=0x5ae1f0*=0x7da718) returned 0x0 [0178.611] WbemLocator:IUnknown:Release (This=0x7da718) returned 0x2 [0178.611] WbemLocator:IUnknown:Release (This=0x7da718) returned 0x1 [0178.612] WbemDefPath:IWbemPath:GetText (in: This=0x7db0a0, lFlags=2, puBuffLength=0x5ae850*=0x0, pszText=0x0 | out: puBuffLength=0x5ae850*=0x20, pszText=0x0) returned 0x0 [0178.612] WbemDefPath:IWbemPath:GetText (in: This=0x7db0a0, lFlags=2, puBuffLength=0x5ae850*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5ae850*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0178.653] CoGetContextToken (in: pToken=0x5ae490 | out: pToken=0x5ae490) returned 0x0 [0178.653] CoGetContextToken (in: pToken=0x5ae3d0 | out: pToken=0x5ae3d0) returned 0x0 [0178.653] WbemLocator:IUnknown:AddRef (This=0x7da718) returned 0x2 [0178.653] WbemLocator:IUnknown:QueryInterface (in: This=0x7da718, riid=0x5ae510*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5ae4f0 | out: ppvObject=0x5ae4f0*=0x81de40) returned 0x0 [0178.653] WbemLocator:IUnknown:Release (This=0x7da718) returned 0x2 [0178.653] WbemLocator:IUnknown:AddRef (This=0x81de40) returned 0x3 [0178.653] IWbemServices:GetObject (in: This=0x81de40, strObjectPath="win32_logicaldisk.deviceid=\"C:\"", lFlags=0, pCtx=0x0, ppObject=0x5ae7f8*=0x0, ppCallResult=0x0 | out: ppObject=0x5ae7f8*=0x828c00, ppCallResult=0x0) returned 0x0 [0179.436] WbemLocator:IUnknown:Release (This=0x81de40) returned 0x2 [0179.440] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7dac20, puCount=0x5ae7a0 | out: puCount=0x5ae7a0*=0x2) returned 0x0 [0179.440] WbemDefPath:IWbemPath:GetText (in: This=0x7dac20, lFlags=4, puBuffLength=0x5ae7a0*=0x0, pszText=0x0 | out: puBuffLength=0x5ae7a0*=0xf, pszText=0x0) returned 0x0 [0179.440] WbemDefPath:IWbemPath:GetText (in: This=0x7dac20, lFlags=4, puBuffLength=0x5ae7a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae7a0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0179.443] IWbemClassObject:Get (in: This=0x828c00, wszName="VolumeSerialNumber", lFlags=0, pVal=0x5ae830*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae84c*=0, plFlavor=0x5ae854*=0 | out: pVal=0x5ae830*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="D2CA4DEF", varVal2=0x0), pType=0x5ae84c*=8, plFlavor=0x5ae854*=0) returned 0x0 [0179.443] SysStringLen (param_1="D2CA4DEF") returned 0x8 [0179.444] IWbemClassObject:Get (in: This=0x828c00, wszName="VolumeSerialNumber", lFlags=0, pVal=0x5ae880*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae89c*=8, plFlavor=0x5ae8a4*=0 | out: pVal=0x5ae880*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="D2CA4DEF", varVal2=0x0), pType=0x5ae89c*=8, plFlavor=0x5ae8a4*=0) returned 0x0 [0179.444] SysStringLen (param_1="D2CA4DEF") returned 0x8 [0179.544] IUnknown:Release (This=0x828c00) returned 0x0 [0179.839] VirtualProtect (in: lpAddress=0x27c8e30, dwSize=0x13, flNewProtect=0x40, lpflOldProtect=0x5ae96c | out: lpflOldProtect=0x5ae96c*=0x4) returned 1 [0179.844] CallWindowProcW (lpPrevWndFunc=0x27c8e30, hWnd=0x0, Msg=0x0, wParam=0x27c8dd8, lParam=0x8) returned 0x506e3 [0179.873] CoGetObjectContext (in: riid=0x5ae698*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae690 | out: ppv=0x5ae690*=0x7c9710) returned 0x0 [0179.873] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae72c | out: pAptType=0x5ae72c*=1) returned 0x0 [0179.873] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae7b8 | out: ppvObject=0x5ae7b8*=0x0) returned 0x80004002 [0179.873] IUnknown:Release (This=0x7c9710) returned 0x1 [0179.873] CoGetClassObject (in: rclsid=0x804068*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5add20 | out: ppv=0x5add20*=0x80dcc0) returned 0x0 [0179.874] WbemDefPath:IUnknown:QueryInterface (in: This=0x80dcc0, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ada30 | out: ppvObject=0x5ada30*=0x0) returned 0x80004002 [0179.874] WbemDefPath:IClassFactory:CreateInstance (in: This=0x80dcc0, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ada18 | out: ppvObject=0x5ada18*=0x7db160) returned 0x0 [0179.874] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db160, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad920 | out: ppvObject=0x5ad920*=0x7db160) returned 0x0 [0179.874] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db160, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ad9a0 | out: ppvObject=0x5ad9a0*=0x0) returned 0x80004002 [0179.874] WbemDefPath:IUnknown:AddRef (This=0x7db160) returned 0x3 [0179.874] CoGetContextToken (in: pToken=0x5ad5f0 | out: pToken=0x5ad5f0) returned 0x0 [0179.874] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db160, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad5b0 | out: ppvObject=0x5ad5b0*=0x80d700) returned 0x0 [0179.874] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x80d700, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad5e0 | out: pCid=0x5ad5e0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0179.874] WbemDefPath:IUnknown:Release (This=0x80d700) returned 0x3 [0179.874] CoGetContextToken (in: pToken=0x5ad5c0 | out: pToken=0x5ad5c0) returned 0x0 [0179.874] WbemDefPath:IUnknown:AddRef (This=0x7db160) returned 0x4 [0179.874] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db160, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad6d8 | out: ppvObject=0x5ad6d8*=0x0) returned 0x80004002 [0179.875] WbemDefPath:IUnknown:Release (This=0x7db160) returned 0x3 [0179.875] WbemDefPath:IUnknown:Release (This=0x7db160) returned 0x2 [0179.875] WbemDefPath:IUnknown:Release (This=0x80dcc0) returned 0x0 [0179.875] WbemDefPath:IUnknown:Release (This=0x7db160) returned 0x1 [0179.875] CoGetContextToken (in: pToken=0x5ae2f0 | out: pToken=0x5ae2f0) returned 0x0 [0179.875] CoGetContextToken (in: pToken=0x5ae230 | out: pToken=0x5ae230) returned 0x0 [0179.875] WbemDefPath:IUnknown:AddRef (This=0x7db160) returned 0x2 [0179.875] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db160, riid=0x5ae370*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae350 | out: ppvObject=0x5ae350*=0x7db160) returned 0x0 [0179.876] WbemDefPath:IUnknown:Release (This=0x7db160) returned 0x2 [0179.876] WbemDefPath:IUnknown:Release (This=0x7db160) returned 0x1 [0179.876] CoGetContextToken (in: pToken=0x5ae470 | out: pToken=0x5ae470) returned 0x0 [0179.876] CoGetContextToken (in: pToken=0x5ae3b0 | out: pToken=0x5ae3b0) returned 0x0 [0179.876] WbemDefPath:IUnknown:AddRef (This=0x7db160) returned 0x2 [0179.876] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db160, riid=0x5ae4f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae4d0 | out: ppvObject=0x5ae4d0*=0x7db160) returned 0x0 [0179.876] WbemDefPath:IUnknown:Release (This=0x7db160) returned 0x2 [0179.876] WbemDefPath:IUnknown:AddRef (This=0x7db160) returned 0x3 [0179.876] WbemDefPath:IWbemPath:SetText (This=0x7db160, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0179.876] WbemDefPath:IUnknown:Release (This=0x7db160) returned 0x2 [0179.876] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db160, puCount=0x5ae770 | out: puCount=0x5ae770*=0x2) returned 0x0 [0179.876] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae770*=0x0, pszText=0x0 | out: puBuffLength=0x5ae770*=0xf, pszText=0x0) returned 0x0 [0179.876] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae770*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae770*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0179.877] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db160, puCount=0x5ae770 | out: puCount=0x5ae770*=0x2) returned 0x0 [0179.877] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae770*=0x0, pszText=0x0 | out: puBuffLength=0x5ae770*=0xf, pszText=0x0) returned 0x0 [0179.877] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae770*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae770*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0179.913] CoGetObjectContext (in: riid=0x5ae6a8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae6a0 | out: ppv=0x5ae6a0*=0x7c9710) returned 0x0 [0179.913] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae73c | out: pAptType=0x5ae73c*=1) returned 0x0 [0179.913] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae7c8 | out: ppvObject=0x5ae7c8*=0x0) returned 0x80004002 [0179.913] IUnknown:Release (This=0x7c9710) returned 0x1 [0179.913] CoGetClassObject (in: rclsid=0x804228*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae350 | out: ppv=0x5ae350*=0x80d9c0) returned 0x0 [0179.914] WbemLocator:IUnknown:QueryInterface (in: This=0x80d9c0, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ae060 | out: ppvObject=0x5ae060*=0x0) returned 0x80004002 [0179.914] WbemLocator:IClassFactory:CreateInstance (in: This=0x80d9c0, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae048 | out: ppvObject=0x5ae048*=0x80d620) returned 0x0 [0179.914] WbemLocator:IUnknown:QueryInterface (in: This=0x80d620, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adf50 | out: ppvObject=0x5adf50*=0x80d620) returned 0x0 [0179.914] WbemLocator:IUnknown:QueryInterface (in: This=0x80d620, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5adfd0 | out: ppvObject=0x5adfd0*=0x0) returned 0x80004002 [0179.914] WbemLocator:IUnknown:AddRef (This=0x80d620) returned 0x3 [0179.914] CoGetContextToken (in: pToken=0x5adc20 | out: pToken=0x5adc20) returned 0x0 [0179.914] WbemLocator:IUnknown:QueryInterface (in: This=0x80d620, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adbe0 | out: ppvObject=0x5adbe0*=0x0) returned 0x80004002 [0179.914] CoGetContextToken (in: pToken=0x5adbf0 | out: pToken=0x5adbf0) returned 0x0 [0179.914] WbemLocator:IUnknown:AddRef (This=0x80d620) returned 0x4 [0179.914] WbemLocator:IUnknown:QueryInterface (in: This=0x80d620, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5add08 | out: ppvObject=0x5add08*=0x0) returned 0x80004002 [0179.915] WbemLocator:IUnknown:Release (This=0x80d620) returned 0x3 [0179.915] WbemLocator:IUnknown:Release (This=0x80d620) returned 0x2 [0179.915] WbemLocator:IUnknown:Release (This=0x80d9c0) returned 0x0 [0179.915] WbemLocator:IUnknown:Release (This=0x80d620) returned 0x1 [0179.915] CoGetContextToken (in: pToken=0x5ae210 | out: pToken=0x5ae210) returned 0x0 [0179.915] CoGetContextToken (in: pToken=0x5ae150 | out: pToken=0x5ae150) returned 0x0 [0179.915] WbemLocator:IUnknown:AddRef (This=0x80d620) returned 0x2 [0179.915] WbemLocator:IUnknown:QueryInterface (in: This=0x80d620, riid=0x5ae290*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5ae270 | out: ppvObject=0x5ae270*=0x80d620) returned 0x0 [0179.915] WbemLocator:IUnknown:Release (This=0x80d620) returned 0x2 [0179.915] WbemLocator:IUnknown:Release (This=0x80d620) returned 0x1 [0179.915] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db160, puCount=0x5ae670 | out: puCount=0x5ae670*=0x2) returned 0x0 [0179.915] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=8, puBuffLength=0x5ae670*=0x0, pszText=0x0 | out: puBuffLength=0x5ae670*=0xf, pszText=0x0) returned 0x0 [0179.915] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=8, puBuffLength=0x5ae670*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae670*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0179.915] CoCreateInstance (in: rclsid=0x7ffaf04715a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffaf04714d8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x5ae290 | out: ppv=0x5ae290*=0x80d640) returned 0x0 [0179.915] WbemLocator:IWbemLocator:ConnectServer (in: This=0x80d640, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x5ae5b0 | out: ppNamespace=0x5ae5b0*=0x81e080) returned 0x0 [0179.923] WbemLocator:IUnknown:QueryInterface (in: This=0x81e080, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae108 | out: ppvObject=0x5ae108*=0x7da390) returned 0x0 [0179.923] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x7da390, pProxy=0x81e080, pAuthnSvc=0x5ae100, pAuthzSvc=0x5ae0fc, pServerPrincName=0x5ae128, pAuthnLevel=0x5ae0f8, pImpLevel=0x5ae114, pAuthInfo=0x5ae138, pCapabilites=0x5ae110 | out: pAuthnSvc=0x5ae100*=0xa, pAuthzSvc=0x5ae0fc*=0x0, pServerPrincName=0x5ae128, pAuthnLevel=0x5ae0f8*=0x6, pImpLevel=0x5ae114*=0x2, pAuthInfo=0x5ae138, pCapabilites=0x5ae110*=0x1) returned 0x0 [0179.923] WbemLocator:IUnknown:Release (This=0x7da390) returned 0x1 [0179.923] WbemLocator:IUnknown:QueryInterface (in: This=0x81e080, riid=0x7ffaf0471458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae0a8 | out: ppvObject=0x5ae0a8*=0x7da3d8) returned 0x0 [0179.923] WbemLocator:IUnknown:QueryInterface (in: This=0x81e080, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae038 | out: ppvObject=0x5ae038*=0x7da390) returned 0x0 [0179.923] WbemLocator:IClientSecurity:SetBlanket (This=0x7da390, pProxy=0x81e080, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0179.923] WbemLocator:IUnknown:Release (This=0x7da390) returned 0x2 [0179.923] WbemLocator:IUnknown:Release (This=0x7da3d8) returned 0x1 [0179.923] CoTaskMemFree (pv=0x8295f0) [0179.923] WbemLocator:IUnknown:Release (This=0x80d640) returned 0x0 [0179.923] WbemLocator:IUnknown:QueryInterface (in: This=0x81e080, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5add20 | out: ppvObject=0x5add20*=0x7da3d8) returned 0x0 [0179.923] WbemLocator:IUnknown:QueryInterface (in: This=0x7da3d8, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5adda0 | out: ppvObject=0x5adda0*=0x0) returned 0x80004002 [0179.923] WbemLocator:IUnknown:QueryInterface (in: This=0x7da3d8, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5adb38 | out: ppvObject=0x5adb38*=0x0) returned 0x80004002 [0179.924] WbemLocator:IUnknown:AddRef (This=0x7da3d8) returned 0x3 [0179.924] CoGetContextToken (in: pToken=0x5ad9f0 | out: pToken=0x5ad9f0) returned 0x0 [0179.924] WbemLocator:IUnknown:QueryInterface (in: This=0x7da3d8, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad9b0 | out: ppvObject=0x5ad9b0*=0x7da2b8) returned 0x0 [0179.924] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x7da2b8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad9e0 | out: pCid=0x5ad9e0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0179.924] WbemLocator:IUnknown:Release (This=0x7da2b8) returned 0x3 [0179.924] CoGetContextToken (in: pToken=0x5ad9c0 | out: pToken=0x5ad9c0) returned 0x0 [0179.924] WbemLocator:IUnknown:AddRef (This=0x7da3d8) returned 0x4 [0179.924] WbemLocator:IUnknown:QueryInterface (in: This=0x7da3d8, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adad8 | out: ppvObject=0x5adad8*=0x7da3a0) returned 0x0 [0179.924] WbemLocator:IUnknown:Release (This=0x7da3d8) returned 0x4 [0179.924] WbemLocator:IRpcOptions:Query (in: This=0x7da3a0, pPrx=0x7da3d8, dwProperty=2, pdwValue=0x5adb48 | out: pdwValue=0x5adb48) returned 0x80004002 [0179.924] WbemLocator:IUnknown:Release (This=0x7da3a0) returned 0x3 [0179.925] WbemLocator:IUnknown:Release (This=0x7da3d8) returned 0x2 [0179.925] CoGetContextToken (in: pToken=0x5adec0 | out: pToken=0x5adec0) returned 0x0 [0179.925] CoGetContextToken (in: pToken=0x5ade00 | out: pToken=0x5ade00) returned 0x0 [0179.925] WbemLocator:IUnknown:AddRef (This=0x7da3d8) returned 0x3 [0179.925] WbemLocator:IUnknown:QueryInterface (in: This=0x7da3d8, riid=0x5adf40*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5adf20 | out: ppvObject=0x5adf20*=0x81e080) returned 0x0 [0179.925] WbemLocator:IUnknown:Release (This=0x7da3d8) returned 0x3 [0179.925] WbemLocator:IUnknown:Release (This=0x81e080) returned 0x2 [0179.925] WbemLocator:IUnknown:Release (This=0x81e080) returned 0x1 [0179.925] SysStringLen (param_1=0x0) returned 0x0 [0179.925] CoGetContextToken (in: pToken=0x5ae590 | out: pToken=0x5ae590) returned 0x0 [0179.925] WbemLocator:IUnknown:AddRef (This=0x7da3d8) returned 0x2 [0179.925] WbemLocator:IUnknown:QueryInterface (in: This=0x7da3d8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae160 | out: ppvObject=0x5ae160*=0x7da3d8) returned 0x0 [0179.925] WbemLocator:IUnknown:Release (This=0x7da3d8) returned 0x2 [0179.925] WbemLocator:IUnknown:Release (This=0x7da3d8) returned 0x1 [0179.926] CoGetContextToken (in: pToken=0x5ae160 | out: pToken=0x5ae160) returned 0x0 [0179.926] CoGetContextToken (in: pToken=0x5ae0a0 | out: pToken=0x5ae0a0) returned 0x0 [0179.926] WbemLocator:IUnknown:AddRef (This=0x7da3d8) returned 0x2 [0179.926] WbemLocator:IUnknown:QueryInterface (in: This=0x7da3d8, riid=0x5ae1e0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5ae1c0 | out: ppvObject=0x5ae1c0*=0x81e080) returned 0x0 [0179.926] WbemLocator:IUnknown:Release (This=0x7da3d8) returned 0x2 [0179.926] WbemLocator:IUnknown:AddRef (This=0x81e080) returned 0x3 [0179.926] IWbemServices:ExecQuery (in: This=0x81e080, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x5ae6c8 | out: ppEnum=0x5ae6c8*=0x8288c0) returned 0x0 [0179.931] IUnknown:QueryInterface (in: This=0x8288c0, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae268 | out: ppvObject=0x5ae268*=0x8288c8) returned 0x0 [0179.932] IClientSecurity:QueryBlanket (in: This=0x8288c8, pProxy=0x8288c0, pAuthnSvc=0x5ae260, pAuthzSvc=0x5ae25c, pServerPrincName=0x5ae288, pAuthnLevel=0x5ae258, pImpLevel=0x5ae274, pAuthInfo=0x5ae298, pCapabilites=0x5ae270 | out: pAuthnSvc=0x5ae260*=0xa, pAuthzSvc=0x5ae25c*=0x0, pServerPrincName=0x5ae288, pAuthnLevel=0x5ae258*=0x6, pImpLevel=0x5ae274*=0x2, pAuthInfo=0x5ae298, pCapabilites=0x5ae270*=0x1) returned 0x0 [0179.932] IUnknown:Release (This=0x8288c8) returned 0x1 [0179.932] IUnknown:QueryInterface (in: This=0x8288c0, riid=0x7ffaf0471458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae208 | out: ppvObject=0x5ae208*=0x7d9d58) returned 0x0 [0179.932] IUnknown:QueryInterface (in: This=0x8288c0, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae198 | out: ppvObject=0x5ae198*=0x8288c8) returned 0x0 [0179.932] IClientSecurity:SetBlanket (This=0x8288c8, pProxy=0x8288c0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0179.933] IUnknown:Release (This=0x8288c8) returned 0x2 [0179.933] WbemLocator:IUnknown:Release (This=0x7d9d58) returned 0x1 [0179.933] CoTaskMemFree (pv=0x829200) [0179.933] IUnknown:QueryInterface (in: This=0x8288c0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ade40 | out: ppvObject=0x5ade40*=0x7d9d58) returned 0x0 [0179.933] WbemLocator:IUnknown:QueryInterface (in: This=0x7d9d58, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5adec0 | out: ppvObject=0x5adec0*=0x0) returned 0x80004002 [0179.933] WbemLocator:IUnknown:QueryInterface (in: This=0x7d9d58, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5adc58 | out: ppvObject=0x5adc58*=0x0) returned 0x80004002 [0179.934] WbemLocator:IUnknown:AddRef (This=0x7d9d58) returned 0x3 [0179.934] CoGetContextToken (in: pToken=0x5adb10 | out: pToken=0x5adb10) returned 0x0 [0179.934] WbemLocator:IUnknown:QueryInterface (in: This=0x7d9d58, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adad0 | out: ppvObject=0x5adad0*=0x7d9c38) returned 0x0 [0179.934] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x7d9c38, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5adb00 | out: pCid=0x5adb00*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0179.934] WbemLocator:IUnknown:Release (This=0x7d9c38) returned 0x3 [0179.934] CoGetContextToken (in: pToken=0x5adae0 | out: pToken=0x5adae0) returned 0x0 [0179.934] WbemLocator:IUnknown:AddRef (This=0x7d9d58) returned 0x4 [0179.934] WbemLocator:IUnknown:QueryInterface (in: This=0x7d9d58, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adbf8 | out: ppvObject=0x5adbf8*=0x7d9d20) returned 0x0 [0179.934] WbemLocator:IUnknown:Release (This=0x7d9d58) returned 0x4 [0179.934] WbemLocator:IRpcOptions:Query (in: This=0x7d9d20, pPrx=0x7d9d58, dwProperty=2, pdwValue=0x5adc68 | out: pdwValue=0x5adc68) returned 0x80004002 [0179.934] WbemLocator:IUnknown:Release (This=0x7d9d20) returned 0x3 [0179.935] WbemLocator:IUnknown:Release (This=0x7d9d58) returned 0x2 [0179.935] CoGetContextToken (in: pToken=0x5adfe0 | out: pToken=0x5adfe0) returned 0x0 [0179.935] CoGetContextToken (in: pToken=0x5adf20 | out: pToken=0x5adf20) returned 0x0 [0179.935] WbemLocator:IUnknown:AddRef (This=0x7d9d58) returned 0x3 [0179.935] WbemLocator:IUnknown:QueryInterface (in: This=0x7d9d58, riid=0x5ae060*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5ae040 | out: ppvObject=0x5ae040*=0x8288c0) returned 0x0 [0179.935] WbemLocator:IUnknown:Release (This=0x7d9d58) returned 0x3 [0179.935] IUnknown:Release (This=0x8288c0) returned 0x2 [0179.935] IUnknown:Release (This=0x8288c0) returned 0x1 [0179.935] WbemLocator:IUnknown:Release (This=0x81e080) returned 0x2 [0179.935] SysStringLen (param_1=0x0) returned 0x0 [0179.935] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db160, puCount=0x5ae6d0 | out: puCount=0x5ae6d0*=0x2) returned 0x0 [0179.935] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae6d0*=0x0, pszText=0x0 | out: puBuffLength=0x5ae6d0*=0xf, pszText=0x0) returned 0x0 [0179.935] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae6d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae6d0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0179.935] CoTaskMemAlloc (cb=0x104) returned 0x835350 [0179.935] GetEnvironmentVariableW (in: lpName="PROCESSOR_ARCHITEW6432", lpBuffer=0x835350, nSize=0x80 | out: lpBuffer="") returned 0x0 [0179.935] CoTaskMemFree (pv=0x835350) [0179.937] CoGetContextToken (in: pToken=0x5ae220 | out: pToken=0x5ae220) returned 0x0 [0179.937] CoGetContextToken (in: pToken=0x5ae160 | out: pToken=0x5ae160) returned 0x0 [0179.937] WbemLocator:IUnknown:AddRef (This=0x7d9d58) returned 0x2 [0179.937] WbemLocator:IUnknown:QueryInterface (in: This=0x7d9d58, riid=0x5ae2a0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5ae280 | out: ppvObject=0x5ae280*=0x8288c0) returned 0x0 [0179.937] WbemLocator:IUnknown:Release (This=0x7d9d58) returned 0x2 [0179.938] IUnknown:AddRef (This=0x8288c0) returned 0x3 [0179.938] IEnumWbemClassObject:Clone (in: This=0x8288c0, ppEnum=0x5ae748 | out: ppEnum=0x5ae748*=0x828d70) returned 0x0 [0179.938] IUnknown:QueryInterface (in: This=0x828d70, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae338 | out: ppvObject=0x5ae338*=0x828d78) returned 0x0 [0179.939] IClientSecurity:QueryBlanket (in: This=0x828d78, pProxy=0x828d70, pAuthnSvc=0x5ae330, pAuthzSvc=0x5ae32c, pServerPrincName=0x5ae358, pAuthnLevel=0x5ae328, pImpLevel=0x5ae344, pAuthInfo=0x5ae368, pCapabilites=0x5ae340 | out: pAuthnSvc=0x5ae330*=0xa, pAuthzSvc=0x5ae32c*=0x0, pServerPrincName=0x5ae358, pAuthnLevel=0x5ae328*=0x6, pImpLevel=0x5ae344*=0x2, pAuthInfo=0x5ae368, pCapabilites=0x5ae340*=0x1) returned 0x0 [0179.939] IUnknown:Release (This=0x828d78) returned 0x1 [0179.939] IUnknown:QueryInterface (in: This=0x828d70, riid=0x7ffaf0471458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae2d8 | out: ppvObject=0x5ae2d8*=0x7da578) returned 0x0 [0179.939] IUnknown:QueryInterface (in: This=0x828d70, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae268 | out: ppvObject=0x5ae268*=0x828d78) returned 0x0 [0179.939] IClientSecurity:SetBlanket (This=0x828d78, pProxy=0x828d70, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0179.940] IUnknown:Release (This=0x828d78) returned 0x2 [0179.940] WbemLocator:IUnknown:Release (This=0x7da578) returned 0x1 [0179.940] CoTaskMemFree (pv=0x829860) [0179.940] IUnknown:QueryInterface (in: This=0x828d70, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adf00 | out: ppvObject=0x5adf00*=0x7da578) returned 0x0 [0179.940] WbemLocator:IUnknown:QueryInterface (in: This=0x7da578, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5adf80 | out: ppvObject=0x5adf80*=0x0) returned 0x80004002 [0179.940] WbemLocator:IUnknown:QueryInterface (in: This=0x7da578, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5add18 | out: ppvObject=0x5add18*=0x0) returned 0x80004002 [0179.941] WbemLocator:IUnknown:AddRef (This=0x7da578) returned 0x3 [0179.941] CoGetContextToken (in: pToken=0x5adbd0 | out: pToken=0x5adbd0) returned 0x0 [0179.941] WbemLocator:IUnknown:QueryInterface (in: This=0x7da578, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adb90 | out: ppvObject=0x5adb90*=0x7da458) returned 0x0 [0179.941] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x7da458, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5adbc0 | out: pCid=0x5adbc0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0179.941] WbemLocator:IUnknown:Release (This=0x7da458) returned 0x3 [0179.941] CoGetContextToken (in: pToken=0x5adba0 | out: pToken=0x5adba0) returned 0x0 [0179.941] WbemLocator:IUnknown:AddRef (This=0x7da578) returned 0x4 [0179.941] WbemLocator:IUnknown:QueryInterface (in: This=0x7da578, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adcb8 | out: ppvObject=0x5adcb8*=0x7da540) returned 0x0 [0179.941] WbemLocator:IUnknown:Release (This=0x7da578) returned 0x4 [0179.941] WbemLocator:IRpcOptions:Query (in: This=0x7da540, pPrx=0x7da578, dwProperty=2, pdwValue=0x5add28 | out: pdwValue=0x5add28) returned 0x80004002 [0179.941] WbemLocator:IUnknown:Release (This=0x7da540) returned 0x3 [0179.941] WbemLocator:IUnknown:Release (This=0x7da578) returned 0x2 [0179.942] CoGetContextToken (in: pToken=0x5ae0a0 | out: pToken=0x5ae0a0) returned 0x0 [0179.942] CoGetContextToken (in: pToken=0x5adfe0 | out: pToken=0x5adfe0) returned 0x0 [0179.942] WbemLocator:IUnknown:AddRef (This=0x7da578) returned 0x3 [0179.942] WbemLocator:IUnknown:QueryInterface (in: This=0x7da578, riid=0x5ae120*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5ae100 | out: ppvObject=0x5ae100*=0x828d70) returned 0x0 [0179.942] WbemLocator:IUnknown:Release (This=0x7da578) returned 0x3 [0179.942] IUnknown:Release (This=0x828d70) returned 0x2 [0179.942] IUnknown:Release (This=0x828d70) returned 0x1 [0179.942] IUnknown:Release (This=0x8288c0) returned 0x2 [0179.942] SysStringLen (param_1=0x0) returned 0x0 [0179.943] CoGetContextToken (in: pToken=0x5ae550 | out: pToken=0x5ae550) returned 0x0 [0179.943] CoGetContextToken (in: pToken=0x5ae490 | out: pToken=0x5ae490) returned 0x0 [0179.943] WbemLocator:IUnknown:AddRef (This=0x7da578) returned 0x2 [0179.943] WbemLocator:IUnknown:QueryInterface (in: This=0x7da578, riid=0x5ae5d0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5ae5b0 | out: ppvObject=0x5ae5b0*=0x828d70) returned 0x0 [0179.944] WbemLocator:IUnknown:Release (This=0x7da578) returned 0x2 [0179.944] IUnknown:AddRef (This=0x828d70) returned 0x3 [0179.944] IEnumWbemClassObject:Reset (This=0x828d70) returned 0x0 [0179.944] IUnknown:Release (This=0x828d70) returned 0x2 [0179.947] CoTaskMemAlloc (cb=0x8) returned 0x7cf620 [0179.947] IEnumWbemClassObject:Next (in: This=0x828d70, lTimeout=-1, uCount=0x1, apObjects=0x7cf620, puReturned=0x5ae7d8 | out: apObjects=0x7cf620*=0x82f9e0, puReturned=0x5ae7d8*=0x1) returned 0x0 [0180.818] IUnknown:QueryInterface (in: This=0x82f9e0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adb00 | out: ppvObject=0x5adb00*=0x82f9e0) returned 0x0 [0180.818] IUnknown:QueryInterface (in: This=0x82f9e0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5adb80 | out: ppvObject=0x5adb80*=0x0) returned 0x80004002 [0180.818] IUnknown:QueryInterface (in: This=0x82f9e0, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ad918 | out: ppvObject=0x5ad918*=0x0) returned 0x80004002 [0180.818] IUnknown:AddRef (This=0x82f9e0) returned 0x3 [0180.818] CoGetContextToken (in: pToken=0x5ad7d0 | out: pToken=0x5ad7d0) returned 0x0 [0180.818] IUnknown:QueryInterface (in: This=0x82f9e0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad790 | out: ppvObject=0x5ad790*=0x82f9e8) returned 0x0 [0180.819] IMarshal:GetUnmarshalClass (in: This=0x82f9e8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad7c0 | out: pCid=0x5ad7c0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0180.819] IUnknown:Release (This=0x82f9e8) returned 0x3 [0180.819] CoGetContextToken (in: pToken=0x5ad7a0 | out: pToken=0x5ad7a0) returned 0x0 [0180.819] IUnknown:AddRef (This=0x82f9e0) returned 0x4 [0180.819] IUnknown:QueryInterface (in: This=0x82f9e0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad8b8 | out: ppvObject=0x5ad8b8*=0x0) returned 0x80004002 [0180.819] IUnknown:Release (This=0x82f9e0) returned 0x3 [0180.819] IUnknown:Release (This=0x82f9e0) returned 0x2 [0180.819] CoGetContextToken (in: pToken=0x5adc60 | out: pToken=0x5adc60) returned 0x0 [0180.819] CoGetContextToken (in: pToken=0x5adba0 | out: pToken=0x5adba0) returned 0x0 [0180.819] IUnknown:AddRef (This=0x82f9e0) returned 0x3 [0180.819] IUnknown:QueryInterface (in: This=0x82f9e0, riid=0x5adce0*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5adcc0 | out: ppvObject=0x5adcc0*=0x82f9e0) returned 0x0 [0180.819] IUnknown:Release (This=0x82f9e0) returned 0x3 [0180.819] IUnknown:Release (This=0x82f9e0) returned 0x2 [0180.820] IUnknown:Release (This=0x82f9e0) returned 0x1 [0180.820] CoTaskMemFree (pv=0x7cf620) [0180.820] CoGetContextToken (in: pToken=0x5ae5e0 | out: pToken=0x5ae5e0) returned 0x0 [0180.820] IUnknown:AddRef (This=0x82f9e0) returned 0x2 [0180.820] IWbemClassObject:Get (in: This=0x82f9e0, wszName="__GENUS", lFlags=0, pVal=0x5ae7f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae80c*=0, plFlavor=0x5ae814*=0 | out: pVal=0x5ae7f0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x5ae80c*=3, plFlavor=0x5ae814*=64) returned 0x0 [0180.883] IWbemClassObject:Get (in: This=0x82f9e0, wszName="__PATH", lFlags=0, pVal=0x5ae790*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae7ac*=0, plFlavor=0x5ae7b4*=0 | out: pVal=0x5ae790*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@", varVal2=0x0), pType=0x5ae7ac*=8, plFlavor=0x5ae7b4*=64) returned 0x0 [0180.892] SysStringLen (param_1="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@") returned 0x2c [0180.893] CoGetObjectContext (in: riid=0x5ae688*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae680 | out: ppv=0x5ae680*=0x7c9710) returned 0x0 [0180.893] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae71c | out: pAptType=0x5ae71c*=1) returned 0x0 [0180.893] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae7a8 | out: ppvObject=0x5ae7a8*=0x0) returned 0x80004002 [0180.893] IUnknown:Release (This=0x7c9710) returned 0x1 [0180.893] CoGetClassObject (in: rclsid=0x804068*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5add10 | out: ppv=0x5add10*=0x80da00) returned 0x0 [0180.893] WbemDefPath:IUnknown:QueryInterface (in: This=0x80da00, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ada20 | out: ppvObject=0x5ada20*=0x0) returned 0x80004002 [0180.894] WbemDefPath:IClassFactory:CreateInstance (in: This=0x80da00, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ada08 | out: ppvObject=0x5ada08*=0x7db8e0) returned 0x0 [0180.894] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db8e0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad910 | out: ppvObject=0x5ad910*=0x7db8e0) returned 0x0 [0180.894] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db8e0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ad990 | out: ppvObject=0x5ad990*=0x0) returned 0x80004002 [0180.894] WbemDefPath:IUnknown:AddRef (This=0x7db8e0) returned 0x3 [0180.894] CoGetContextToken (in: pToken=0x5ad5e0 | out: pToken=0x5ad5e0) returned 0x0 [0180.894] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db8e0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad5a0 | out: ppvObject=0x5ad5a0*=0x80da60) returned 0x0 [0180.894] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x80da60, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad5d0 | out: pCid=0x5ad5d0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0180.894] WbemDefPath:IUnknown:Release (This=0x80da60) returned 0x3 [0180.894] CoGetContextToken (in: pToken=0x5ad5b0 | out: pToken=0x5ad5b0) returned 0x0 [0180.894] WbemDefPath:IUnknown:AddRef (This=0x7db8e0) returned 0x4 [0180.895] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db8e0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad6c8 | out: ppvObject=0x5ad6c8*=0x0) returned 0x80004002 [0180.895] WbemDefPath:IUnknown:Release (This=0x7db8e0) returned 0x3 [0180.895] WbemDefPath:IUnknown:Release (This=0x7db8e0) returned 0x2 [0180.895] WbemDefPath:IUnknown:Release (This=0x80da00) returned 0x0 [0180.895] WbemDefPath:IUnknown:Release (This=0x7db8e0) returned 0x1 [0180.895] CoGetContextToken (in: pToken=0x5ae2e0 | out: pToken=0x5ae2e0) returned 0x0 [0180.895] CoGetContextToken (in: pToken=0x5ae220 | out: pToken=0x5ae220) returned 0x0 [0180.895] WbemDefPath:IUnknown:AddRef (This=0x7db8e0) returned 0x2 [0180.895] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db8e0, riid=0x5ae360*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae340 | out: ppvObject=0x5ae340*=0x7db8e0) returned 0x0 [0180.895] WbemDefPath:IUnknown:Release (This=0x7db8e0) returned 0x2 [0180.895] WbemDefPath:IUnknown:Release (This=0x7db8e0) returned 0x1 [0180.895] CoGetContextToken (in: pToken=0x5ae460 | out: pToken=0x5ae460) returned 0x0 [0180.895] CoGetContextToken (in: pToken=0x5ae3a0 | out: pToken=0x5ae3a0) returned 0x0 [0180.896] WbemDefPath:IUnknown:AddRef (This=0x7db8e0) returned 0x2 [0180.896] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db8e0, riid=0x5ae4e0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae4c0 | out: ppvObject=0x5ae4c0*=0x7db8e0) returned 0x0 [0180.896] WbemDefPath:IUnknown:Release (This=0x7db8e0) returned 0x2 [0180.896] WbemDefPath:IUnknown:AddRef (This=0x7db8e0) returned 0x3 [0180.896] WbemDefPath:IWbemPath:SetText (This=0x7db8e0, uMode=0x4, pszPath="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@") returned 0x0 [0180.896] WbemDefPath:IUnknown:Release (This=0x7db8e0) returned 0x2 [0180.896] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db160, puCount=0x5ae720 | out: puCount=0x5ae720*=0x2) returned 0x0 [0180.896] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae720*=0x0, pszText=0x0 | out: puBuffLength=0x5ae720*=0xf, pszText=0x0) returned 0x0 [0180.896] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae720*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae720*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0180.896] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db160, puCount=0x5ae760 | out: puCount=0x5ae760*=0x2) returned 0x0 [0180.896] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae760*=0x0, pszText=0x0 | out: puBuffLength=0x5ae760*=0xf, pszText=0x0) returned 0x0 [0180.896] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae760*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae760*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0180.896] IWbemClassObject:Get (in: This=0x82f9e0, wszName="Caption", lFlags=0, pVal=0x5ae7f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae80c*=0, plFlavor=0x5ae814*=0 | out: pVal=0x5ae7f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 10 Pro", varVal2=0x0), pType=0x5ae80c*=8, plFlavor=0x5ae814*=0) returned 0x0 [0180.896] SysStringLen (param_1="Microsoft Windows 10 Pro") returned 0x18 [0180.896] IWbemClassObject:Get (in: This=0x82f9e0, wszName="Caption", lFlags=0, pVal=0x5ae800*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae81c*=8, plFlavor=0x5ae824*=0 | out: pVal=0x5ae800*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 10 Pro", varVal2=0x0), pType=0x5ae81c*=8, plFlavor=0x5ae824*=0) returned 0x0 [0180.897] SysStringLen (param_1="Microsoft Windows 10 Pro") returned 0x18 [0180.897] CoTaskMemAlloc (cb=0x104) returned 0x835130 [0180.897] GetEnvironmentVariableW (in: lpName="PROCESSOR_ARCHITEW6432", lpBuffer=0x835130, nSize=0x80 | out: lpBuffer="") returned 0x0 [0180.897] CoTaskMemFree (pv=0x835130) [0180.897] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db160, puCount=0x5ae760 | out: puCount=0x5ae760*=0x2) returned 0x0 [0180.897] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae760*=0x0, pszText=0x0 | out: puBuffLength=0x5ae760*=0xf, pszText=0x0) returned 0x0 [0180.897] WbemDefPath:IWbemPath:GetText (in: This=0x7db160, lFlags=4, puBuffLength=0x5ae760*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae760*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0180.897] IWbemClassObject:Get (in: This=0x82f9e0, wszName="Version", lFlags=0, pVal=0x5ae7f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae80c*=0, plFlavor=0x5ae814*=0 | out: pVal=0x5ae7f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="10.0.10240", varVal2=0x0), pType=0x5ae80c*=8, plFlavor=0x5ae814*=0) returned 0x0 [0180.897] SysStringLen (param_1="10.0.10240") returned 0xa [0180.897] IWbemClassObject:Get (in: This=0x82f9e0, wszName="Version", lFlags=0, pVal=0x5ae800*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae81c*=8, plFlavor=0x5ae824*=0 | out: pVal=0x5ae800*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="10.0.10240", varVal2=0x0), pType=0x5ae81c*=8, plFlavor=0x5ae824*=0) returned 0x0 [0180.897] SysStringLen (param_1="10.0.10240") returned 0xa [0180.898] CoGetContextToken (in: pToken=0x5ae560 | out: pToken=0x5ae560) returned 0x0 [0180.898] WbemLocator:IUnknown:Release (This=0x7da578) returned 0x1 [0180.898] IUnknown:Release (This=0x828d70) returned 0x0 [0180.905] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x5ae090, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0180.917] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x5ae180, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0180.918] SetErrorMode (uMode=0x1) returned 0x0 [0180.918] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x5ae390 | out: lpFileInformation=0x5ae390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436072d, ftCreationTime.dwHighDateTime=0x1d2d447, ftLastAccessTime.dwLowDateTime=0x1449f42, ftLastAccessTime.dwHighDateTime=0x1d2d447, ftLastWriteTime.dwLowDateTime=0x95baafb, ftLastWriteTime.dwHighDateTime=0x1d2d447, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0180.918] SetErrorMode (uMode=0x0) returned 0x1 [0180.918] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x5ae130, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0180.918] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x5ae000, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0181.066] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x5add10 | out: pfEnabled=0x5add10) returned 0x0 [0181.073] CoTaskMemAlloc (cb=0x20c) returned 0x80fb60 [0181.073] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x80fb60 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\Desktop") returned 0x0 [0181.073] CoTaskMemFree (pv=0x80fb60) [0181.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop", nBufferLength=0x105, lpBuffer=0x5ae5c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop", lpFilePart=0x0) returned 0x1d [0181.073] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CRYPTONAR RECOVERY INFORMATION.txt", nBufferLength=0x105, lpBuffer=0x5ae390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CRYPTONAR RECOVERY INFORMATION.txt", lpFilePart=0x0) returned 0x40 [0181.073] SetErrorMode (uMode=0x1) returned 0x0 [0181.073] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CRYPTONAR RECOVERY INFORMATION.txt" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\cryptonar recovery information.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x378 [0181.077] GetFileType (hFile=0x378) returned 0x1 [0181.077] SetErrorMode (uMode=0x0) returned 0x1 [0181.077] GetFileType (hFile=0x378) returned 0x1 [0181.081] WriteFile (in: hFile=0x378, lpBuffer=0x2801748*, nNumberOfBytesToWrite=0xbce, lpNumberOfBytesWritten=0x5ae8f8, lpOverlapped=0x0 | out: lpBuffer=0x2801748*, lpNumberOfBytesWritten=0x5ae8f8*=0xbce, lpOverlapped=0x0) returned 1 [0181.082] CloseHandle (hObject=0x378) returned 1 [0181.471] GetLogicalDrives () returned 0x4 [0181.471] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x5ae250, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0181.471] SetErrorMode (uMode=0x1) returned 0x0 [0181.471] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x5ae680 | out: lpFileInformation=0x5ae680*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x90fa1f36, ftCreationTime.dwHighDateTime=0x1d0baef, ftLastAccessTime.dwLowDateTime=0xcbe64b75, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0xcbe64b75, ftLastWriteTime.dwHighDateTime=0x1d41fe0, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0181.471] SetErrorMode (uMode=0x0) returned 0x1 [0181.471] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x5ae3c0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0181.471] CoGetObjectContext (in: riid=0x5ae698*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae690 | out: ppv=0x5ae690*=0x7c9710) returned 0x0 [0181.471] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae72c | out: pAptType=0x5ae72c*=1) returned 0x0 [0181.472] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae7b8 | out: ppvObject=0x5ae7b8*=0x0) returned 0x80004002 [0181.472] IUnknown:Release (This=0x7c9710) returned 0x1 [0181.472] CoGetClassObject (in: rclsid=0x804068*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5add20 | out: ppv=0x5add20*=0x833690) returned 0x0 [0181.472] WbemDefPath:IUnknown:QueryInterface (in: This=0x833690, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ada30 | out: ppvObject=0x5ada30*=0x0) returned 0x80004002 [0181.473] WbemDefPath:IClassFactory:CreateInstance (in: This=0x833690, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ada18 | out: ppvObject=0x5ada18*=0x7db820) returned 0x0 [0181.473] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db820, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad920 | out: ppvObject=0x5ad920*=0x7db820) returned 0x0 [0181.473] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db820, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ad9a0 | out: ppvObject=0x5ad9a0*=0x0) returned 0x80004002 [0181.473] WbemDefPath:IUnknown:AddRef (This=0x7db820) returned 0x3 [0181.473] CoGetContextToken (in: pToken=0x5ad5f0 | out: pToken=0x5ad5f0) returned 0x0 [0181.473] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db820, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad5b0 | out: ppvObject=0x5ad5b0*=0x833770) returned 0x0 [0181.474] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x833770, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad5e0 | out: pCid=0x5ad5e0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0181.474] WbemDefPath:IUnknown:Release (This=0x833770) returned 0x3 [0181.474] CoGetContextToken (in: pToken=0x5ad5c0 | out: pToken=0x5ad5c0) returned 0x0 [0181.474] WbemDefPath:IUnknown:AddRef (This=0x7db820) returned 0x4 [0181.474] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db820, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad6d8 | out: ppvObject=0x5ad6d8*=0x0) returned 0x80004002 [0181.474] WbemDefPath:IUnknown:Release (This=0x7db820) returned 0x3 [0181.474] WbemDefPath:IUnknown:Release (This=0x7db820) returned 0x2 [0181.474] WbemDefPath:IUnknown:Release (This=0x833690) returned 0x0 [0181.474] WbemDefPath:IUnknown:Release (This=0x7db820) returned 0x1 [0181.475] CoGetContextToken (in: pToken=0x5ae2f0 | out: pToken=0x5ae2f0) returned 0x0 [0181.475] CoGetContextToken (in: pToken=0x5ae230 | out: pToken=0x5ae230) returned 0x0 [0181.475] WbemDefPath:IUnknown:AddRef (This=0x7db820) returned 0x2 [0181.475] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db820, riid=0x5ae370*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae350 | out: ppvObject=0x5ae350*=0x7db820) returned 0x0 [0181.475] WbemDefPath:IUnknown:Release (This=0x7db820) returned 0x2 [0181.475] WbemDefPath:IUnknown:Release (This=0x7db820) returned 0x1 [0181.475] CoGetContextToken (in: pToken=0x5ae470 | out: pToken=0x5ae470) returned 0x0 [0181.475] CoGetContextToken (in: pToken=0x5ae3b0 | out: pToken=0x5ae3b0) returned 0x0 [0181.475] WbemDefPath:IUnknown:AddRef (This=0x7db820) returned 0x2 [0181.475] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db820, riid=0x5ae4f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae4d0 | out: ppvObject=0x5ae4d0*=0x7db820) returned 0x0 [0181.475] WbemDefPath:IUnknown:Release (This=0x7db820) returned 0x2 [0181.476] WbemDefPath:IUnknown:AddRef (This=0x7db820) returned 0x3 [0181.476] WbemDefPath:IWbemPath:SetText (This=0x7db820, uMode=0x4, pszPath="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0181.476] WbemDefPath:IUnknown:Release (This=0x7db820) returned 0x2 [0181.476] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db820, puCount=0x5ae7a0 | out: puCount=0x5ae7a0*=0x0) returned 0x0 [0181.476] WbemDefPath:IWbemPath:GetText (in: This=0x7db820, lFlags=2, puBuffLength=0x5ae7a0*=0x0, pszText=0x0 | out: puBuffLength=0x5ae7a0*=0x20, pszText=0x0) returned 0x0 [0181.476] WbemDefPath:IWbemPath:GetText (in: This=0x7db820, lFlags=2, puBuffLength=0x5ae7a0*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5ae7a0*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0181.476] WbemDefPath:IWbemPath:GetInfo (in: This=0x7db820, uRequestedInfo=0x0, puResponse=0x5ae7c0 | out: puResponse=0x5ae7c0*=0xc19) returned 0x0 [0181.476] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db820, puCount=0x5ae7a0 | out: puCount=0x5ae7a0*=0x0) returned 0x0 [0181.476] WbemDefPath:IWbemPath:GetInfo (in: This=0x7db820, uRequestedInfo=0x0, puResponse=0x5ae7c0 | out: puResponse=0x5ae7c0*=0xc19) returned 0x0 [0181.476] WbemDefPath:IWbemPath:GetInfo (in: This=0x7db820, uRequestedInfo=0x0, puResponse=0x5ae7c0 | out: puResponse=0x5ae7c0*=0xc19) returned 0x0 [0181.476] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db820, puCount=0x5ae6c0 | out: puCount=0x5ae6c0*=0x0) returned 0x0 [0181.476] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db760, puCount=0x5ae680 | out: puCount=0x5ae680*=0x2) returned 0x0 [0181.476] WbemDefPath:IWbemPath:GetText (in: This=0x7db760, lFlags=4, puBuffLength=0x5ae680*=0x0, pszText=0x0 | out: puBuffLength=0x5ae680*=0xf, pszText=0x0) returned 0x0 [0181.476] WbemDefPath:IWbemPath:GetText (in: This=0x7db760, lFlags=4, puBuffLength=0x5ae680*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae680*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0181.476] CoGetObjectContext (in: riid=0x5ae558*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae550 | out: ppv=0x5ae550*=0x7c9710) returned 0x0 [0181.477] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae5ec | out: pAptType=0x5ae5ec*=1) returned 0x0 [0181.477] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae678 | out: ppvObject=0x5ae678*=0x0) returned 0x80004002 [0181.477] IUnknown:Release (This=0x7c9710) returned 0x1 [0181.477] CoGetClassObject (in: rclsid=0x804068*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5adbe0 | out: ppv=0x5adbe0*=0x833a70) returned 0x0 [0181.477] WbemDefPath:IUnknown:QueryInterface (in: This=0x833a70, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ad8f0 | out: ppvObject=0x5ad8f0*=0x0) returned 0x80004002 [0181.478] WbemDefPath:IClassFactory:CreateInstance (in: This=0x833a70, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad8d8 | out: ppvObject=0x5ad8d8*=0x7daaa0) returned 0x0 [0181.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x7daaa0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad7e0 | out: ppvObject=0x5ad7e0*=0x7daaa0) returned 0x0 [0181.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x7daaa0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ad860 | out: ppvObject=0x5ad860*=0x0) returned 0x80004002 [0181.478] WbemDefPath:IUnknown:AddRef (This=0x7daaa0) returned 0x3 [0181.478] CoGetContextToken (in: pToken=0x5ad4b0 | out: pToken=0x5ad4b0) returned 0x0 [0181.478] WbemDefPath:IUnknown:QueryInterface (in: This=0x7daaa0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad470 | out: ppvObject=0x5ad470*=0x8333f0) returned 0x0 [0181.478] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x8333f0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad4a0 | out: pCid=0x5ad4a0*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0181.479] WbemDefPath:IUnknown:Release (This=0x8333f0) returned 0x3 [0181.479] CoGetContextToken (in: pToken=0x5ad480 | out: pToken=0x5ad480) returned 0x0 [0181.479] WbemDefPath:IUnknown:AddRef (This=0x7daaa0) returned 0x4 [0181.479] WbemDefPath:IUnknown:QueryInterface (in: This=0x7daaa0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad598 | out: ppvObject=0x5ad598*=0x0) returned 0x80004002 [0181.479] WbemDefPath:IUnknown:Release (This=0x7daaa0) returned 0x3 [0181.479] WbemDefPath:IUnknown:Release (This=0x7daaa0) returned 0x2 [0181.479] WbemDefPath:IUnknown:Release (This=0x833a70) returned 0x0 [0181.479] WbemDefPath:IUnknown:Release (This=0x7daaa0) returned 0x1 [0181.480] CoGetContextToken (in: pToken=0x5ae1b0 | out: pToken=0x5ae1b0) returned 0x0 [0181.480] CoGetContextToken (in: pToken=0x5ae0f0 | out: pToken=0x5ae0f0) returned 0x0 [0181.480] WbemDefPath:IUnknown:AddRef (This=0x7daaa0) returned 0x2 [0181.480] WbemDefPath:IUnknown:QueryInterface (in: This=0x7daaa0, riid=0x5ae230*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae210 | out: ppvObject=0x5ae210*=0x7daaa0) returned 0x0 [0181.480] WbemDefPath:IUnknown:Release (This=0x7daaa0) returned 0x2 [0181.480] WbemDefPath:IUnknown:Release (This=0x7daaa0) returned 0x1 [0181.480] CoGetContextToken (in: pToken=0x5ae330 | out: pToken=0x5ae330) returned 0x0 [0181.480] CoGetContextToken (in: pToken=0x5ae270 | out: pToken=0x5ae270) returned 0x0 [0181.480] WbemDefPath:IUnknown:AddRef (This=0x7daaa0) returned 0x2 [0181.480] WbemDefPath:IUnknown:QueryInterface (in: This=0x7daaa0, riid=0x5ae3b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae390 | out: ppvObject=0x5ae390*=0x7daaa0) returned 0x0 [0181.480] WbemDefPath:IUnknown:Release (This=0x7daaa0) returned 0x2 [0181.481] WbemDefPath:IUnknown:AddRef (This=0x7daaa0) returned 0x3 [0181.481] WbemDefPath:IWbemPath:SetText (This=0x7daaa0, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0181.481] WbemDefPath:IUnknown:Release (This=0x7daaa0) returned 0x2 [0181.481] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7daaa0, puCount=0x5ae5f0 | out: puCount=0x5ae5f0*=0x2) returned 0x0 [0181.481] WbemDefPath:IWbemPath:GetText (in: This=0x7daaa0, lFlags=4, puBuffLength=0x5ae5f0*=0x0, pszText=0x0 | out: puBuffLength=0x5ae5f0*=0xf, pszText=0x0) returned 0x0 [0181.481] WbemDefPath:IWbemPath:GetText (in: This=0x7daaa0, lFlags=4, puBuffLength=0x5ae5f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae5f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0181.481] CoGetObjectContext (in: riid=0x5ae618*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae610 | out: ppv=0x5ae610*=0x7c9710) returned 0x0 [0181.481] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae6ac | out: pAptType=0x5ae6ac*=1) returned 0x0 [0181.481] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae738 | out: ppvObject=0x5ae738*=0x0) returned 0x80004002 [0181.481] IUnknown:Release (This=0x7c9710) returned 0x1 [0181.481] CoGetClassObject (in: rclsid=0x804228*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae2c0 | out: ppv=0x5ae2c0*=0x833570) returned 0x0 [0181.482] WbemLocator:IUnknown:QueryInterface (in: This=0x833570, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5adfd0 | out: ppvObject=0x5adfd0*=0x0) returned 0x80004002 [0181.482] WbemLocator:IClassFactory:CreateInstance (in: This=0x833570, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adfb8 | out: ppvObject=0x5adfb8*=0x833510) returned 0x0 [0181.482] WbemLocator:IUnknown:QueryInterface (in: This=0x833510, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adec0 | out: ppvObject=0x5adec0*=0x833510) returned 0x0 [0181.482] WbemLocator:IUnknown:QueryInterface (in: This=0x833510, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5adf40 | out: ppvObject=0x5adf40*=0x0) returned 0x80004002 [0181.483] WbemLocator:IUnknown:AddRef (This=0x833510) returned 0x3 [0181.483] CoGetContextToken (in: pToken=0x5adb90 | out: pToken=0x5adb90) returned 0x0 [0181.483] WbemLocator:IUnknown:QueryInterface (in: This=0x833510, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adb50 | out: ppvObject=0x5adb50*=0x0) returned 0x80004002 [0181.483] CoGetContextToken (in: pToken=0x5adb60 | out: pToken=0x5adb60) returned 0x0 [0181.483] WbemLocator:IUnknown:AddRef (This=0x833510) returned 0x4 [0181.483] WbemLocator:IUnknown:QueryInterface (in: This=0x833510, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adc78 | out: ppvObject=0x5adc78*=0x0) returned 0x80004002 [0181.483] WbemLocator:IUnknown:Release (This=0x833510) returned 0x3 [0181.483] WbemLocator:IUnknown:Release (This=0x833510) returned 0x2 [0181.483] WbemLocator:IUnknown:Release (This=0x833570) returned 0x0 [0181.484] WbemLocator:IUnknown:Release (This=0x833510) returned 0x1 [0181.484] CoGetContextToken (in: pToken=0x5ae180 | out: pToken=0x5ae180) returned 0x0 [0181.484] CoGetContextToken (in: pToken=0x5ae0c0 | out: pToken=0x5ae0c0) returned 0x0 [0181.484] WbemLocator:IUnknown:AddRef (This=0x833510) returned 0x2 [0181.485] WbemLocator:IUnknown:QueryInterface (in: This=0x833510, riid=0x5ae200*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5ae1e0 | out: ppvObject=0x5ae1e0*=0x833510) returned 0x0 [0181.485] WbemLocator:IUnknown:Release (This=0x833510) returned 0x2 [0181.485] WbemLocator:IUnknown:Release (This=0x833510) returned 0x1 [0181.485] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7daaa0, puCount=0x5ae5e0 | out: puCount=0x5ae5e0*=0x2) returned 0x0 [0181.485] WbemDefPath:IWbemPath:GetText (in: This=0x7daaa0, lFlags=8, puBuffLength=0x5ae5e0*=0x0, pszText=0x0 | out: puBuffLength=0x5ae5e0*=0xf, pszText=0x0) returned 0x0 [0181.485] WbemDefPath:IWbemPath:GetText (in: This=0x7daaa0, lFlags=8, puBuffLength=0x5ae5e0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae5e0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0181.485] CoCreateInstance (in: rclsid=0x7ffaf04715a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffaf04714d8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x5ae200 | out: ppv=0x5ae200*=0x833310) returned 0x0 [0181.485] WbemLocator:IWbemLocator:ConnectServer (in: This=0x833310, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x5ae520 | out: ppNamespace=0x5ae520*=0x81df60) returned 0x0 [0181.492] WbemLocator:IUnknown:QueryInterface (in: This=0x81df60, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae078 | out: ppvObject=0x5ae078*=0x82c3f0) returned 0x0 [0181.492] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x82c3f0, pProxy=0x81df60, pAuthnSvc=0x5ae070, pAuthzSvc=0x5ae06c, pServerPrincName=0x5ae098, pAuthnLevel=0x5ae068, pImpLevel=0x5ae084, pAuthInfo=0x5ae0a8, pCapabilites=0x5ae080 | out: pAuthnSvc=0x5ae070*=0xa, pAuthzSvc=0x5ae06c*=0x0, pServerPrincName=0x5ae098, pAuthnLevel=0x5ae068*=0x6, pImpLevel=0x5ae084*=0x2, pAuthInfo=0x5ae0a8, pCapabilites=0x5ae080*=0x1) returned 0x0 [0181.492] WbemLocator:IUnknown:Release (This=0x82c3f0) returned 0x1 [0181.492] WbemLocator:IUnknown:QueryInterface (in: This=0x81df60, riid=0x7ffaf0471458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae018 | out: ppvObject=0x5ae018*=0x82c438) returned 0x0 [0181.492] WbemLocator:IUnknown:QueryInterface (in: This=0x81df60, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adfa8 | out: ppvObject=0x5adfa8*=0x82c3f0) returned 0x0 [0181.492] WbemLocator:IClientSecurity:SetBlanket (This=0x82c3f0, pProxy=0x81df60, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0181.493] WbemLocator:IUnknown:Release (This=0x82c3f0) returned 0x2 [0181.493] WbemLocator:IUnknown:Release (This=0x82c438) returned 0x1 [0181.493] CoTaskMemFree (pv=0x829530) [0181.493] WbemLocator:IUnknown:Release (This=0x833310) returned 0x0 [0181.493] WbemLocator:IUnknown:QueryInterface (in: This=0x81df60, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adc90 | out: ppvObject=0x5adc90*=0x82c438) returned 0x0 [0181.493] WbemLocator:IUnknown:QueryInterface (in: This=0x82c438, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5add10 | out: ppvObject=0x5add10*=0x0) returned 0x80004002 [0181.493] WbemLocator:IUnknown:QueryInterface (in: This=0x82c438, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5adaa8 | out: ppvObject=0x5adaa8*=0x0) returned 0x80004002 [0181.494] WbemLocator:IUnknown:AddRef (This=0x82c438) returned 0x3 [0181.494] CoGetContextToken (in: pToken=0x5ad960 | out: pToken=0x5ad960) returned 0x0 [0181.494] WbemLocator:IUnknown:QueryInterface (in: This=0x82c438, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad920 | out: ppvObject=0x5ad920*=0x82c318) returned 0x0 [0181.494] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x82c318, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad950 | out: pCid=0x5ad950*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0181.494] WbemLocator:IUnknown:Release (This=0x82c318) returned 0x3 [0181.494] CoGetContextToken (in: pToken=0x5ad930 | out: pToken=0x5ad930) returned 0x0 [0181.494] WbemLocator:IUnknown:AddRef (This=0x82c438) returned 0x4 [0181.495] WbemLocator:IUnknown:QueryInterface (in: This=0x82c438, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ada48 | out: ppvObject=0x5ada48*=0x82c400) returned 0x0 [0181.495] WbemLocator:IUnknown:Release (This=0x82c438) returned 0x4 [0181.495] WbemLocator:IRpcOptions:Query (in: This=0x82c400, pPrx=0x82c438, dwProperty=2, pdwValue=0x5adab8 | out: pdwValue=0x5adab8) returned 0x80004002 [0181.495] WbemLocator:IUnknown:Release (This=0x82c400) returned 0x3 [0181.495] WbemLocator:IUnknown:Release (This=0x82c438) returned 0x2 [0181.495] CoGetContextToken (in: pToken=0x5ade30 | out: pToken=0x5ade30) returned 0x0 [0181.495] CoGetContextToken (in: pToken=0x5add70 | out: pToken=0x5add70) returned 0x0 [0181.495] WbemLocator:IUnknown:AddRef (This=0x82c438) returned 0x3 [0181.495] WbemLocator:IUnknown:QueryInterface (in: This=0x82c438, riid=0x5adeb0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5ade90 | out: ppvObject=0x5ade90*=0x81df60) returned 0x0 [0181.496] WbemLocator:IUnknown:Release (This=0x82c438) returned 0x3 [0181.496] WbemLocator:IUnknown:Release (This=0x81df60) returned 0x2 [0181.496] WbemLocator:IUnknown:Release (This=0x81df60) returned 0x1 [0181.496] SysStringLen (param_1=0x0) returned 0x0 [0181.496] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db820, puCount=0x5ae770 | out: puCount=0x5ae770*=0x0) returned 0x0 [0181.496] WbemDefPath:IWbemPath:GetText (in: This=0x7db820, lFlags=2, puBuffLength=0x5ae770*=0x0, pszText=0x0 | out: puBuffLength=0x5ae770*=0x20, pszText=0x0) returned 0x0 [0181.496] WbemDefPath:IWbemPath:GetText (in: This=0x7db820, lFlags=2, puBuffLength=0x5ae770*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5ae770*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0181.496] CoGetContextToken (in: pToken=0x5ae550 | out: pToken=0x5ae550) returned 0x0 [0181.496] WbemLocator:IUnknown:AddRef (This=0x82c438) returned 0x2 [0181.496] WbemLocator:IUnknown:QueryInterface (in: This=0x82c438, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae120 | out: ppvObject=0x5ae120*=0x82c438) returned 0x0 [0181.497] WbemLocator:IUnknown:Release (This=0x82c438) returned 0x2 [0181.497] WbemLocator:IUnknown:Release (This=0x82c438) returned 0x1 [0181.497] WbemDefPath:IWbemPath:GetText (in: This=0x7db820, lFlags=2, puBuffLength=0x5ae780*=0x0, pszText=0x0 | out: puBuffLength=0x5ae780*=0x20, pszText=0x0) returned 0x0 [0181.497] WbemDefPath:IWbemPath:GetText (in: This=0x7db820, lFlags=2, puBuffLength=0x5ae780*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5ae780*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0181.497] CoGetContextToken (in: pToken=0x5ae3c0 | out: pToken=0x5ae3c0) returned 0x0 [0181.497] CoGetContextToken (in: pToken=0x5ae300 | out: pToken=0x5ae300) returned 0x0 [0181.497] WbemLocator:IUnknown:AddRef (This=0x82c438) returned 0x2 [0181.497] WbemLocator:IUnknown:QueryInterface (in: This=0x82c438, riid=0x5ae440*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5ae420 | out: ppvObject=0x5ae420*=0x81df60) returned 0x0 [0181.497] WbemLocator:IUnknown:Release (This=0x82c438) returned 0x2 [0181.497] WbemLocator:IUnknown:AddRef (This=0x81df60) returned 0x3 [0181.498] IWbemServices:GetObject (in: This=0x81df60, strObjectPath="win32_logicaldisk.deviceid=\"C:\"", lFlags=0, pCtx=0x0, ppObject=0x5ae728*=0x0, ppCallResult=0x0 | out: ppObject=0x5ae728*=0x832700, ppCallResult=0x0) returned 0x0 [0181.595] WbemLocator:IUnknown:Release (This=0x81df60) returned 0x2 [0181.595] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7daaa0, puCount=0x5ae6d0 | out: puCount=0x5ae6d0*=0x2) returned 0x0 [0181.595] WbemDefPath:IWbemPath:GetText (in: This=0x7daaa0, lFlags=4, puBuffLength=0x5ae6d0*=0x0, pszText=0x0 | out: puBuffLength=0x5ae6d0*=0xf, pszText=0x0) returned 0x0 [0181.595] WbemDefPath:IWbemPath:GetText (in: This=0x7daaa0, lFlags=4, puBuffLength=0x5ae6d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae6d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0181.595] IWbemClassObject:Get (in: This=0x832700, wszName="VolumeSerialNumber", lFlags=0, pVal=0x5ae760*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae77c*=0, plFlavor=0x5ae784*=0 | out: pVal=0x5ae760*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="D2CA4DEF", varVal2=0x0), pType=0x5ae77c*=8, plFlavor=0x5ae784*=0) returned 0x0 [0181.595] SysStringLen (param_1="D2CA4DEF") returned 0x8 [0181.595] IWbemClassObject:Get (in: This=0x832700, wszName="VolumeSerialNumber", lFlags=0, pVal=0x5ae7b0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae7cc*=8, plFlavor=0x5ae7d4*=0 | out: pVal=0x5ae7b0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="D2CA4DEF", varVal2=0x0), pType=0x5ae7cc*=8, plFlavor=0x5ae7d4*=0) returned 0x0 [0181.595] SysStringLen (param_1="D2CA4DEF") returned 0x8 [0181.595] IUnknown:Release (This=0x832700) returned 0x0 [0181.596] VirtualProtect (in: lpAddress=0x2804650, dwSize=0x13, flNewProtect=0x40, lpflOldProtect=0x5ae89c | out: lpflOldProtect=0x5ae89c*=0x4) returned 1 [0181.596] CallWindowProcW (lpPrevWndFunc=0x2804650, hWnd=0x0, Msg=0x0, wParam=0x28045f8, lParam=0x8) returned 0x506e3 [0181.596] CoGetObjectContext (in: riid=0x5ae5c8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae5c0 | out: ppv=0x5ae5c0*=0x7c9710) returned 0x0 [0181.597] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae65c | out: pAptType=0x5ae65c*=1) returned 0x0 [0181.597] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae6e8 | out: ppvObject=0x5ae6e8*=0x0) returned 0x80004002 [0181.597] IUnknown:Release (This=0x7c9710) returned 0x1 [0181.598] CoGetClassObject (in: rclsid=0x804068*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5adc50 | out: ppv=0x5adc50*=0x8333d0) returned 0x0 [0181.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x8333d0, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ad960 | out: ppvObject=0x5ad960*=0x0) returned 0x80004002 [0181.598] WbemDefPath:IClassFactory:CreateInstance (in: This=0x8333d0, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad948 | out: ppvObject=0x5ad948*=0x7db460) returned 0x0 [0181.598] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db460, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad850 | out: ppvObject=0x5ad850*=0x7db460) returned 0x0 [0181.599] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db460, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ad8d0 | out: ppvObject=0x5ad8d0*=0x0) returned 0x80004002 [0181.599] WbemDefPath:IUnknown:AddRef (This=0x7db460) returned 0x3 [0181.599] CoGetContextToken (in: pToken=0x5ad520 | out: pToken=0x5ad520) returned 0x0 [0181.599] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db460, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad4e0 | out: ppvObject=0x5ad4e0*=0x833790) returned 0x0 [0181.599] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x833790, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad510 | out: pCid=0x5ad510*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0181.599] WbemDefPath:IUnknown:Release (This=0x833790) returned 0x3 [0181.599] CoGetContextToken (in: pToken=0x5ad4f0 | out: pToken=0x5ad4f0) returned 0x0 [0181.600] WbemDefPath:IUnknown:AddRef (This=0x7db460) returned 0x4 [0181.600] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db460, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad608 | out: ppvObject=0x5ad608*=0x0) returned 0x80004002 [0181.600] WbemDefPath:IUnknown:Release (This=0x7db460) returned 0x3 [0181.600] WbemDefPath:IUnknown:Release (This=0x7db460) returned 0x2 [0181.600] WbemDefPath:IUnknown:Release (This=0x8333d0) returned 0x0 [0181.600] WbemDefPath:IUnknown:Release (This=0x7db460) returned 0x1 [0181.600] CoGetContextToken (in: pToken=0x5ae220 | out: pToken=0x5ae220) returned 0x0 [0181.600] CoGetContextToken (in: pToken=0x5ae160 | out: pToken=0x5ae160) returned 0x0 [0181.600] WbemDefPath:IUnknown:AddRef (This=0x7db460) returned 0x2 [0181.600] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db460, riid=0x5ae2a0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae280 | out: ppvObject=0x5ae280*=0x7db460) returned 0x0 [0181.601] WbemDefPath:IUnknown:Release (This=0x7db460) returned 0x2 [0181.601] WbemDefPath:IUnknown:Release (This=0x7db460) returned 0x1 [0181.601] CoGetContextToken (in: pToken=0x5ae3a0 | out: pToken=0x5ae3a0) returned 0x0 [0181.601] CoGetContextToken (in: pToken=0x5ae2e0 | out: pToken=0x5ae2e0) returned 0x0 [0181.601] WbemDefPath:IUnknown:AddRef (This=0x7db460) returned 0x2 [0181.601] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db460, riid=0x5ae420*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae400 | out: ppvObject=0x5ae400*=0x7db460) returned 0x0 [0181.601] WbemDefPath:IUnknown:Release (This=0x7db460) returned 0x2 [0181.601] WbemDefPath:IUnknown:AddRef (This=0x7db460) returned 0x3 [0181.601] WbemDefPath:IWbemPath:SetText (This=0x7db460, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0181.601] WbemDefPath:IUnknown:Release (This=0x7db460) returned 0x2 [0181.602] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db460, puCount=0x5ae6a0 | out: puCount=0x5ae6a0*=0x2) returned 0x0 [0181.602] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae6a0*=0x0, pszText=0x0 | out: puBuffLength=0x5ae6a0*=0xf, pszText=0x0) returned 0x0 [0181.602] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae6a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae6a0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0181.602] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db460, puCount=0x5ae6a0 | out: puCount=0x5ae6a0*=0x2) returned 0x0 [0181.602] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae6a0*=0x0, pszText=0x0 | out: puBuffLength=0x5ae6a0*=0xf, pszText=0x0) returned 0x0 [0181.602] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae6a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae6a0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0181.602] CoGetObjectContext (in: riid=0x5ae5d8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae5d0 | out: ppv=0x5ae5d0*=0x7c9710) returned 0x0 [0181.602] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae66c | out: pAptType=0x5ae66c*=1) returned 0x0 [0181.602] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae6f8 | out: ppvObject=0x5ae6f8*=0x0) returned 0x80004002 [0181.602] IUnknown:Release (This=0x7c9710) returned 0x1 [0181.602] CoGetClassObject (in: rclsid=0x804228*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae280 | out: ppv=0x5ae280*=0x833570) returned 0x0 [0181.602] WbemLocator:IUnknown:QueryInterface (in: This=0x833570, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5adf90 | out: ppvObject=0x5adf90*=0x0) returned 0x80004002 [0181.603] WbemLocator:IClassFactory:CreateInstance (in: This=0x833570, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adf78 | out: ppvObject=0x5adf78*=0x8336d0) returned 0x0 [0181.603] WbemLocator:IUnknown:QueryInterface (in: This=0x8336d0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ade80 | out: ppvObject=0x5ade80*=0x8336d0) returned 0x0 [0181.603] WbemLocator:IUnknown:QueryInterface (in: This=0x8336d0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5adf00 | out: ppvObject=0x5adf00*=0x0) returned 0x80004002 [0181.603] WbemLocator:IUnknown:AddRef (This=0x8336d0) returned 0x3 [0181.603] CoGetContextToken (in: pToken=0x5adb50 | out: pToken=0x5adb50) returned 0x0 [0181.603] WbemLocator:IUnknown:QueryInterface (in: This=0x8336d0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adb10 | out: ppvObject=0x5adb10*=0x0) returned 0x80004002 [0181.604] CoGetContextToken (in: pToken=0x5adb20 | out: pToken=0x5adb20) returned 0x0 [0181.604] WbemLocator:IUnknown:AddRef (This=0x8336d0) returned 0x4 [0181.604] WbemLocator:IUnknown:QueryInterface (in: This=0x8336d0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adc38 | out: ppvObject=0x5adc38*=0x0) returned 0x80004002 [0181.604] WbemLocator:IUnknown:Release (This=0x8336d0) returned 0x3 [0181.604] WbemLocator:IUnknown:Release (This=0x8336d0) returned 0x2 [0181.604] WbemLocator:IUnknown:Release (This=0x833570) returned 0x0 [0181.604] WbemLocator:IUnknown:Release (This=0x8336d0) returned 0x1 [0181.604] CoGetContextToken (in: pToken=0x5ae140 | out: pToken=0x5ae140) returned 0x0 [0181.604] CoGetContextToken (in: pToken=0x5ae080 | out: pToken=0x5ae080) returned 0x0 [0181.604] WbemLocator:IUnknown:AddRef (This=0x8336d0) returned 0x2 [0181.604] WbemLocator:IUnknown:QueryInterface (in: This=0x8336d0, riid=0x5ae1c0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5ae1a0 | out: ppvObject=0x5ae1a0*=0x8336d0) returned 0x0 [0181.605] WbemLocator:IUnknown:Release (This=0x8336d0) returned 0x2 [0181.605] WbemLocator:IUnknown:Release (This=0x8336d0) returned 0x1 [0181.605] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db460, puCount=0x5ae5a0 | out: puCount=0x5ae5a0*=0x2) returned 0x0 [0181.605] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=8, puBuffLength=0x5ae5a0*=0x0, pszText=0x0 | out: puBuffLength=0x5ae5a0*=0xf, pszText=0x0) returned 0x0 [0181.605] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=8, puBuffLength=0x5ae5a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae5a0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0181.605] CoCreateInstance (in: rclsid=0x7ffaf04715a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffaf04714d8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x5ae1c0 | out: ppv=0x5ae1c0*=0x833670) returned 0x0 [0181.605] WbemLocator:IWbemLocator:ConnectServer (in: This=0x833670, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x5ae4e0 | out: ppNamespace=0x5ae4e0*=0x81f040) returned 0x0 [0181.616] WbemLocator:IUnknown:QueryInterface (in: This=0x81f040, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae038 | out: ppvObject=0x5ae038*=0x82ba30) returned 0x0 [0181.617] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x82ba30, pProxy=0x81f040, pAuthnSvc=0x5ae030, pAuthzSvc=0x5ae02c, pServerPrincName=0x5ae058, pAuthnLevel=0x5ae028, pImpLevel=0x5ae044, pAuthInfo=0x5ae068, pCapabilites=0x5ae040 | out: pAuthnSvc=0x5ae030*=0xa, pAuthzSvc=0x5ae02c*=0x0, pServerPrincName=0x5ae058, pAuthnLevel=0x5ae028*=0x6, pImpLevel=0x5ae044*=0x2, pAuthInfo=0x5ae068, pCapabilites=0x5ae040*=0x1) returned 0x0 [0181.617] WbemLocator:IUnknown:Release (This=0x82ba30) returned 0x1 [0181.617] WbemLocator:IUnknown:QueryInterface (in: This=0x81f040, riid=0x7ffaf0471458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adfd8 | out: ppvObject=0x5adfd8*=0x82ba78) returned 0x0 [0181.617] WbemLocator:IUnknown:QueryInterface (in: This=0x81f040, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adf68 | out: ppvObject=0x5adf68*=0x82ba30) returned 0x0 [0181.617] WbemLocator:IClientSecurity:SetBlanket (This=0x82ba30, pProxy=0x81f040, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0181.617] WbemLocator:IUnknown:Release (This=0x82ba30) returned 0x2 [0181.617] WbemLocator:IUnknown:Release (This=0x82ba78) returned 0x1 [0181.617] CoTaskMemFree (pv=0x8294d0) [0181.617] WbemLocator:IUnknown:Release (This=0x833670) returned 0x0 [0181.617] WbemLocator:IUnknown:QueryInterface (in: This=0x81f040, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adc50 | out: ppvObject=0x5adc50*=0x82ba78) returned 0x0 [0181.618] WbemLocator:IUnknown:QueryInterface (in: This=0x82ba78, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5adcd0 | out: ppvObject=0x5adcd0*=0x0) returned 0x80004002 [0181.618] WbemLocator:IUnknown:QueryInterface (in: This=0x82ba78, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ada68 | out: ppvObject=0x5ada68*=0x0) returned 0x80004002 [0181.619] WbemLocator:IUnknown:AddRef (This=0x82ba78) returned 0x3 [0181.619] CoGetContextToken (in: pToken=0x5ad920 | out: pToken=0x5ad920) returned 0x0 [0181.619] WbemLocator:IUnknown:QueryInterface (in: This=0x82ba78, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad8e0 | out: ppvObject=0x5ad8e0*=0x82b958) returned 0x0 [0181.620] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x82b958, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad910 | out: pCid=0x5ad910*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0181.620] WbemLocator:IUnknown:Release (This=0x82b958) returned 0x3 [0181.620] CoGetContextToken (in: pToken=0x5ad8f0 | out: pToken=0x5ad8f0) returned 0x0 [0181.620] WbemLocator:IUnknown:AddRef (This=0x82ba78) returned 0x4 [0181.620] WbemLocator:IUnknown:QueryInterface (in: This=0x82ba78, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ada08 | out: ppvObject=0x5ada08*=0x82ba40) returned 0x0 [0181.620] WbemLocator:IUnknown:Release (This=0x82ba78) returned 0x4 [0181.620] WbemLocator:IRpcOptions:Query (in: This=0x82ba40, pPrx=0x82ba78, dwProperty=2, pdwValue=0x5ada78 | out: pdwValue=0x5ada78) returned 0x80004002 [0181.620] WbemLocator:IUnknown:Release (This=0x82ba40) returned 0x3 [0181.620] WbemLocator:IUnknown:Release (This=0x82ba78) returned 0x2 [0181.621] CoGetContextToken (in: pToken=0x5addf0 | out: pToken=0x5addf0) returned 0x0 [0181.621] CoGetContextToken (in: pToken=0x5add30 | out: pToken=0x5add30) returned 0x0 [0181.621] WbemLocator:IUnknown:AddRef (This=0x82ba78) returned 0x3 [0181.621] WbemLocator:IUnknown:QueryInterface (in: This=0x82ba78, riid=0x5ade70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5ade50 | out: ppvObject=0x5ade50*=0x81f040) returned 0x0 [0181.621] WbemLocator:IUnknown:Release (This=0x82ba78) returned 0x3 [0181.621] WbemLocator:IUnknown:Release (This=0x81f040) returned 0x2 [0181.621] WbemLocator:IUnknown:Release (This=0x81f040) returned 0x1 [0181.621] SysStringLen (param_1=0x0) returned 0x0 [0181.621] CoGetContextToken (in: pToken=0x5ae4c0 | out: pToken=0x5ae4c0) returned 0x0 [0181.621] WbemLocator:IUnknown:AddRef (This=0x82ba78) returned 0x2 [0181.622] WbemLocator:IUnknown:QueryInterface (in: This=0x82ba78, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae090 | out: ppvObject=0x5ae090*=0x82ba78) returned 0x0 [0181.622] WbemLocator:IUnknown:Release (This=0x82ba78) returned 0x2 [0181.622] WbemLocator:IUnknown:Release (This=0x82ba78) returned 0x1 [0181.622] CoGetContextToken (in: pToken=0x5ae090 | out: pToken=0x5ae090) returned 0x0 [0181.622] CoGetContextToken (in: pToken=0x5adfd0 | out: pToken=0x5adfd0) returned 0x0 [0181.622] WbemLocator:IUnknown:AddRef (This=0x82ba78) returned 0x2 [0181.622] WbemLocator:IUnknown:QueryInterface (in: This=0x82ba78, riid=0x5ae110*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5ae0f0 | out: ppvObject=0x5ae0f0*=0x81f040) returned 0x0 [0181.622] WbemLocator:IUnknown:Release (This=0x82ba78) returned 0x2 [0181.623] WbemLocator:IUnknown:AddRef (This=0x81f040) returned 0x3 [0181.623] IWbemServices:ExecQuery (in: This=0x81f040, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x5ae5f8 | out: ppEnum=0x5ae5f8*=0x82f8e0) returned 0x0 [0181.631] IUnknown:QueryInterface (in: This=0x82f8e0, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae198 | out: ppvObject=0x5ae198*=0x82f8e8) returned 0x0 [0181.631] IClientSecurity:QueryBlanket (in: This=0x82f8e8, pProxy=0x82f8e0, pAuthnSvc=0x5ae190, pAuthzSvc=0x5ae18c, pServerPrincName=0x5ae1b8, pAuthnLevel=0x5ae188, pImpLevel=0x5ae1a4, pAuthInfo=0x5ae1c8, pCapabilites=0x5ae1a0 | out: pAuthnSvc=0x5ae190*=0xa, pAuthzSvc=0x5ae18c*=0x0, pServerPrincName=0x5ae1b8, pAuthnLevel=0x5ae188*=0x6, pImpLevel=0x5ae1a4*=0x2, pAuthInfo=0x5ae1c8, pCapabilites=0x5ae1a0*=0x1) returned 0x0 [0181.631] IUnknown:Release (This=0x82f8e8) returned 0x1 [0181.631] IUnknown:QueryInterface (in: This=0x82f8e0, riid=0x7ffaf0471458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae138 | out: ppvObject=0x5ae138*=0x82bc18) returned 0x0 [0181.632] IUnknown:QueryInterface (in: This=0x82f8e0, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae0c8 | out: ppvObject=0x5ae0c8*=0x82f8e8) returned 0x0 [0181.632] IClientSecurity:SetBlanket (This=0x82f8e8, pProxy=0x82f8e0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0181.633] IUnknown:Release (This=0x82f8e8) returned 0x2 [0181.633] WbemLocator:IUnknown:Release (This=0x82bc18) returned 0x1 [0181.633] CoTaskMemFree (pv=0x829710) [0181.633] IUnknown:QueryInterface (in: This=0x82f8e0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5add70 | out: ppvObject=0x5add70*=0x82bc18) returned 0x0 [0181.633] WbemLocator:IUnknown:QueryInterface (in: This=0x82bc18, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5addf0 | out: ppvObject=0x5addf0*=0x0) returned 0x80004002 [0181.633] WbemLocator:IUnknown:QueryInterface (in: This=0x82bc18, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5adb88 | out: ppvObject=0x5adb88*=0x0) returned 0x80004002 [0181.634] WbemLocator:IUnknown:AddRef (This=0x82bc18) returned 0x3 [0181.634] CoGetContextToken (in: pToken=0x5ada40 | out: pToken=0x5ada40) returned 0x0 [0181.634] WbemLocator:IUnknown:QueryInterface (in: This=0x82bc18, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ada00 | out: ppvObject=0x5ada00*=0x82baf8) returned 0x0 [0181.634] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x82baf8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ada30 | out: pCid=0x5ada30*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0181.634] WbemLocator:IUnknown:Release (This=0x82baf8) returned 0x3 [0181.634] CoGetContextToken (in: pToken=0x5ada10 | out: pToken=0x5ada10) returned 0x0 [0181.634] WbemLocator:IUnknown:AddRef (This=0x82bc18) returned 0x4 [0181.635] WbemLocator:IUnknown:QueryInterface (in: This=0x82bc18, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adb28 | out: ppvObject=0x5adb28*=0x82bbe0) returned 0x0 [0181.635] WbemLocator:IUnknown:Release (This=0x82bc18) returned 0x4 [0181.635] WbemLocator:IRpcOptions:Query (in: This=0x82bbe0, pPrx=0x82bc18, dwProperty=2, pdwValue=0x5adb98 | out: pdwValue=0x5adb98) returned 0x80004002 [0181.635] WbemLocator:IUnknown:Release (This=0x82bbe0) returned 0x3 [0181.635] WbemLocator:IUnknown:Release (This=0x82bc18) returned 0x2 [0181.635] CoGetContextToken (in: pToken=0x5adf10 | out: pToken=0x5adf10) returned 0x0 [0181.635] CoGetContextToken (in: pToken=0x5ade50 | out: pToken=0x5ade50) returned 0x0 [0181.635] WbemLocator:IUnknown:AddRef (This=0x82bc18) returned 0x3 [0181.635] WbemLocator:IUnknown:QueryInterface (in: This=0x82bc18, riid=0x5adf90*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5adf70 | out: ppvObject=0x5adf70*=0x82f8e0) returned 0x0 [0181.635] WbemLocator:IUnknown:Release (This=0x82bc18) returned 0x3 [0181.636] IUnknown:Release (This=0x82f8e0) returned 0x2 [0181.636] IUnknown:Release (This=0x82f8e0) returned 0x1 [0181.636] WbemLocator:IUnknown:Release (This=0x81f040) returned 0x2 [0181.636] SysStringLen (param_1=0x0) returned 0x0 [0181.636] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db460, puCount=0x5ae600 | out: puCount=0x5ae600*=0x2) returned 0x0 [0181.636] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae600*=0x0, pszText=0x0 | out: puBuffLength=0x5ae600*=0xf, pszText=0x0) returned 0x0 [0181.636] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae600*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae600*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0181.636] CoTaskMemAlloc (cb=0x104) returned 0x834580 [0181.636] GetEnvironmentVariableW (in: lpName="PROCESSOR_ARCHITEW6432", lpBuffer=0x834580, nSize=0x80 | out: lpBuffer="") returned 0x0 [0181.636] CoTaskMemFree (pv=0x834580) [0181.636] CoGetContextToken (in: pToken=0x5ae150 | out: pToken=0x5ae150) returned 0x0 [0181.637] CoGetContextToken (in: pToken=0x5ae090 | out: pToken=0x5ae090) returned 0x0 [0181.637] WbemLocator:IUnknown:AddRef (This=0x82bc18) returned 0x2 [0181.637] WbemLocator:IUnknown:QueryInterface (in: This=0x82bc18, riid=0x5ae1d0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5ae1b0 | out: ppvObject=0x5ae1b0*=0x82f8e0) returned 0x0 [0181.637] WbemLocator:IUnknown:Release (This=0x82bc18) returned 0x2 [0181.637] IUnknown:AddRef (This=0x82f8e0) returned 0x3 [0181.637] IEnumWbemClassObject:Clone (in: This=0x82f8e0, ppEnum=0x5ae678 | out: ppEnum=0x5ae678*=0x832650) returned 0x0 [0181.638] IUnknown:QueryInterface (in: This=0x832650, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae268 | out: ppvObject=0x5ae268*=0x832658) returned 0x0 [0181.638] IClientSecurity:QueryBlanket (in: This=0x832658, pProxy=0x832650, pAuthnSvc=0x5ae260, pAuthzSvc=0x5ae25c, pServerPrincName=0x5ae288, pAuthnLevel=0x5ae258, pImpLevel=0x5ae274, pAuthInfo=0x5ae298, pCapabilites=0x5ae270 | out: pAuthnSvc=0x5ae260*=0xa, pAuthzSvc=0x5ae25c*=0x0, pServerPrincName=0x5ae288, pAuthnLevel=0x5ae258*=0x6, pImpLevel=0x5ae274*=0x2, pAuthInfo=0x5ae298, pCapabilites=0x5ae270*=0x1) returned 0x0 [0181.638] IUnknown:Release (This=0x832658) returned 0x1 [0181.638] IUnknown:QueryInterface (in: This=0x832650, riid=0x7ffaf0471458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae208 | out: ppvObject=0x5ae208*=0x82bdb8) returned 0x0 [0181.638] IUnknown:QueryInterface (in: This=0x832650, riid=0x7ffaf0471468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ae198 | out: ppvObject=0x5ae198*=0x832658) returned 0x0 [0181.638] IClientSecurity:SetBlanket (This=0x832658, pProxy=0x832650, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0181.639] IUnknown:Release (This=0x832658) returned 0x2 [0181.639] WbemLocator:IUnknown:Release (This=0x82bdb8) returned 0x1 [0181.639] CoTaskMemFree (pv=0x8299e0) [0181.639] IUnknown:QueryInterface (in: This=0x832650, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ade30 | out: ppvObject=0x5ade30*=0x82bdb8) returned 0x0 [0181.639] WbemLocator:IUnknown:QueryInterface (in: This=0x82bdb8, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5adeb0 | out: ppvObject=0x5adeb0*=0x0) returned 0x80004002 [0181.640] WbemLocator:IUnknown:QueryInterface (in: This=0x82bdb8, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5adc48 | out: ppvObject=0x5adc48*=0x0) returned 0x80004002 [0181.640] WbemLocator:IUnknown:AddRef (This=0x82bdb8) returned 0x3 [0181.640] CoGetContextToken (in: pToken=0x5adb00 | out: pToken=0x5adb00) returned 0x0 [0181.640] WbemLocator:IUnknown:QueryInterface (in: This=0x82bdb8, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adac0 | out: ppvObject=0x5adac0*=0x82bc98) returned 0x0 [0181.640] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x82bc98, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5adaf0 | out: pCid=0x5adaf0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0181.640] WbemLocator:IUnknown:Release (This=0x82bc98) returned 0x3 [0181.641] CoGetContextToken (in: pToken=0x5adad0 | out: pToken=0x5adad0) returned 0x0 [0181.641] WbemLocator:IUnknown:AddRef (This=0x82bdb8) returned 0x4 [0181.641] WbemLocator:IUnknown:QueryInterface (in: This=0x82bdb8, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5adbe8 | out: ppvObject=0x5adbe8*=0x82bd80) returned 0x0 [0181.641] WbemLocator:IUnknown:Release (This=0x82bdb8) returned 0x4 [0181.641] WbemLocator:IRpcOptions:Query (in: This=0x82bd80, pPrx=0x82bdb8, dwProperty=2, pdwValue=0x5adc58 | out: pdwValue=0x5adc58) returned 0x80004002 [0181.641] WbemLocator:IUnknown:Release (This=0x82bd80) returned 0x3 [0181.641] WbemLocator:IUnknown:Release (This=0x82bdb8) returned 0x2 [0181.641] CoGetContextToken (in: pToken=0x5adfd0 | out: pToken=0x5adfd0) returned 0x0 [0181.641] CoGetContextToken (in: pToken=0x5adf10 | out: pToken=0x5adf10) returned 0x0 [0181.641] WbemLocator:IUnknown:AddRef (This=0x82bdb8) returned 0x3 [0181.642] WbemLocator:IUnknown:QueryInterface (in: This=0x82bdb8, riid=0x5ae050*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5ae030 | out: ppvObject=0x5ae030*=0x832650) returned 0x0 [0181.642] WbemLocator:IUnknown:Release (This=0x82bdb8) returned 0x3 [0181.642] IUnknown:Release (This=0x832650) returned 0x2 [0181.642] IUnknown:Release (This=0x832650) returned 0x1 [0181.642] IUnknown:Release (This=0x82f8e0) returned 0x2 [0181.643] SysStringLen (param_1=0x0) returned 0x0 [0181.643] CoGetContextToken (in: pToken=0x5ae480 | out: pToken=0x5ae480) returned 0x0 [0181.643] CoGetContextToken (in: pToken=0x5ae3c0 | out: pToken=0x5ae3c0) returned 0x0 [0181.643] WbemLocator:IUnknown:AddRef (This=0x82bdb8) returned 0x2 [0181.643] WbemLocator:IUnknown:QueryInterface (in: This=0x82bdb8, riid=0x5ae500*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5ae4e0 | out: ppvObject=0x5ae4e0*=0x832650) returned 0x0 [0181.643] WbemLocator:IUnknown:Release (This=0x82bdb8) returned 0x2 [0181.643] IUnknown:AddRef (This=0x832650) returned 0x3 [0181.643] IEnumWbemClassObject:Reset (This=0x832650) returned 0x0 [0181.644] IUnknown:Release (This=0x832650) returned 0x2 [0181.644] CoTaskMemAlloc (cb=0x8) returned 0x834060 [0181.645] IEnumWbemClassObject:Next (in: This=0x832650, lTimeout=-1, uCount=0x1, apObjects=0x834060, puReturned=0x5ae708 | out: apObjects=0x834060*=0x8326c0, puReturned=0x5ae708*=0x1) returned 0x0 [0181.835] IUnknown:QueryInterface (in: This=0x8326c0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ada30 | out: ppvObject=0x5ada30*=0x8326c0) returned 0x0 [0181.836] IUnknown:QueryInterface (in: This=0x8326c0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5adab0 | out: ppvObject=0x5adab0*=0x0) returned 0x80004002 [0181.836] IUnknown:QueryInterface (in: This=0x8326c0, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ad848 | out: ppvObject=0x5ad848*=0x0) returned 0x80004002 [0181.836] IUnknown:AddRef (This=0x8326c0) returned 0x3 [0181.836] CoGetContextToken (in: pToken=0x5ad700 | out: pToken=0x5ad700) returned 0x0 [0181.836] IUnknown:QueryInterface (in: This=0x8326c0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad6c0 | out: ppvObject=0x5ad6c0*=0x8326c8) returned 0x0 [0181.836] IMarshal:GetUnmarshalClass (in: This=0x8326c8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad6f0 | out: pCid=0x5ad6f0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0181.836] IUnknown:Release (This=0x8326c8) returned 0x3 [0181.837] CoGetContextToken (in: pToken=0x5ad6d0 | out: pToken=0x5ad6d0) returned 0x0 [0181.837] IUnknown:AddRef (This=0x8326c0) returned 0x4 [0181.837] IUnknown:QueryInterface (in: This=0x8326c0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad7e8 | out: ppvObject=0x5ad7e8*=0x0) returned 0x80004002 [0181.837] IUnknown:Release (This=0x8326c0) returned 0x3 [0181.837] IUnknown:Release (This=0x8326c0) returned 0x2 [0181.837] CoGetContextToken (in: pToken=0x5adb90 | out: pToken=0x5adb90) returned 0x0 [0181.837] CoGetContextToken (in: pToken=0x5adad0 | out: pToken=0x5adad0) returned 0x0 [0181.837] IUnknown:AddRef (This=0x8326c0) returned 0x3 [0181.837] IUnknown:QueryInterface (in: This=0x8326c0, riid=0x5adc10*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5adbf0 | out: ppvObject=0x5adbf0*=0x8326c0) returned 0x0 [0181.837] IUnknown:Release (This=0x8326c0) returned 0x3 [0181.838] IUnknown:Release (This=0x8326c0) returned 0x2 [0181.838] IUnknown:Release (This=0x8326c0) returned 0x1 [0181.838] CoTaskMemFree (pv=0x834060) [0181.838] CoGetContextToken (in: pToken=0x5ae510 | out: pToken=0x5ae510) returned 0x0 [0181.838] IUnknown:AddRef (This=0x8326c0) returned 0x2 [0181.838] IWbemClassObject:Get (in: This=0x8326c0, wszName="__GENUS", lFlags=0, pVal=0x5ae720*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae73c*=0, plFlavor=0x5ae744*=0 | out: pVal=0x5ae720*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x5ae73c*=3, plFlavor=0x5ae744*=64) returned 0x0 [0181.838] IWbemClassObject:Get (in: This=0x8326c0, wszName="__PATH", lFlags=0, pVal=0x5ae6c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae6dc*=0, plFlavor=0x5ae6e4*=0 | out: pVal=0x5ae6c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@", varVal2=0x0), pType=0x5ae6dc*=8, plFlavor=0x5ae6e4*=64) returned 0x0 [0181.838] SysStringLen (param_1="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@") returned 0x2c [0181.838] CoGetObjectContext (in: riid=0x5ae5b8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5ae5b0 | out: ppv=0x5ae5b0*=0x7c9710) returned 0x0 [0181.838] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7c9710, pAptType=0x5ae64c | out: pAptType=0x5ae64c*=1) returned 0x0 [0181.838] IUnknown:QueryInterface (in: This=0x7c9710, riid=0x27bef50*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x5ae6d8 | out: ppvObject=0x5ae6d8*=0x0) returned 0x80004002 [0181.839] IUnknown:Release (This=0x7c9710) returned 0x1 [0181.839] CoGetClassObject (in: rclsid=0x804068*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5adc40 | out: ppv=0x5adc40*=0x8333d0) returned 0x0 [0181.839] WbemDefPath:IUnknown:QueryInterface (in: This=0x8333d0, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5ad950 | out: ppvObject=0x5ad950*=0x0) returned 0x80004002 [0181.840] WbemDefPath:IClassFactory:CreateInstance (in: This=0x8333d0, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad938 | out: ppvObject=0x5ad938*=0x7db220) returned 0x0 [0181.840] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db220, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad840 | out: ppvObject=0x5ad840*=0x7db220) returned 0x0 [0181.840] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db220, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5ad8c0 | out: ppvObject=0x5ad8c0*=0x0) returned 0x80004002 [0181.840] WbemDefPath:IUnknown:AddRef (This=0x7db220) returned 0x3 [0181.840] CoGetContextToken (in: pToken=0x5ad510 | out: pToken=0x5ad510) returned 0x0 [0181.840] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db220, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad4d0 | out: ppvObject=0x5ad4d0*=0x833670) returned 0x0 [0181.840] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x833670, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5ad500 | out: pCid=0x5ad500*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0181.840] WbemDefPath:IUnknown:Release (This=0x833670) returned 0x3 [0181.841] CoGetContextToken (in: pToken=0x5ad4e0 | out: pToken=0x5ad4e0) returned 0x0 [0181.841] WbemDefPath:IUnknown:AddRef (This=0x7db220) returned 0x4 [0181.841] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db220, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5ad5f8 | out: ppvObject=0x5ad5f8*=0x0) returned 0x80004002 [0181.841] WbemDefPath:IUnknown:Release (This=0x7db220) returned 0x3 [0181.841] WbemDefPath:IUnknown:Release (This=0x7db220) returned 0x2 [0181.842] WbemDefPath:IUnknown:Release (This=0x8333d0) returned 0x0 [0181.842] WbemDefPath:IUnknown:Release (This=0x7db220) returned 0x1 [0181.842] CoGetContextToken (in: pToken=0x5ae210 | out: pToken=0x5ae210) returned 0x0 [0181.842] CoGetContextToken (in: pToken=0x5ae150 | out: pToken=0x5ae150) returned 0x0 [0181.842] WbemDefPath:IUnknown:AddRef (This=0x7db220) returned 0x2 [0181.842] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db220, riid=0x5ae290*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae270 | out: ppvObject=0x5ae270*=0x7db220) returned 0x0 [0181.842] WbemDefPath:IUnknown:Release (This=0x7db220) returned 0x2 [0181.842] WbemDefPath:IUnknown:Release (This=0x7db220) returned 0x1 [0181.842] CoGetContextToken (in: pToken=0x5ae390 | out: pToken=0x5ae390) returned 0x0 [0181.842] CoGetContextToken (in: pToken=0x5ae2d0 | out: pToken=0x5ae2d0) returned 0x0 [0181.842] WbemDefPath:IUnknown:AddRef (This=0x7db220) returned 0x2 [0181.842] WbemDefPath:IUnknown:QueryInterface (in: This=0x7db220, riid=0x5ae410*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5ae3f0 | out: ppvObject=0x5ae3f0*=0x7db220) returned 0x0 [0181.843] WbemDefPath:IUnknown:Release (This=0x7db220) returned 0x2 [0181.843] WbemDefPath:IUnknown:AddRef (This=0x7db220) returned 0x3 [0181.843] WbemDefPath:IWbemPath:SetText (This=0x7db220, uMode=0x4, pszPath="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@") returned 0x0 [0181.843] WbemDefPath:IUnknown:Release (This=0x7db220) returned 0x2 [0181.843] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db460, puCount=0x5ae650 | out: puCount=0x5ae650*=0x2) returned 0x0 [0181.843] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae650*=0x0, pszText=0x0 | out: puBuffLength=0x5ae650*=0xf, pszText=0x0) returned 0x0 [0181.843] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae650*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae650*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0181.843] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db460, puCount=0x5ae690 | out: puCount=0x5ae690*=0x2) returned 0x0 [0181.843] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae690*=0x0, pszText=0x0 | out: puBuffLength=0x5ae690*=0xf, pszText=0x0) returned 0x0 [0181.843] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae690*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae690*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0181.843] IWbemClassObject:Get (in: This=0x8326c0, wszName="Caption", lFlags=0, pVal=0x5ae720*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae73c*=0, plFlavor=0x5ae744*=0 | out: pVal=0x5ae720*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 10 Pro", varVal2=0x0), pType=0x5ae73c*=8, plFlavor=0x5ae744*=0) returned 0x0 [0181.843] SysStringLen (param_1="Microsoft Windows 10 Pro") returned 0x18 [0181.843] IWbemClassObject:Get (in: This=0x8326c0, wszName="Caption", lFlags=0, pVal=0x5ae730*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae74c*=8, plFlavor=0x5ae754*=0 | out: pVal=0x5ae730*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 10 Pro", varVal2=0x0), pType=0x5ae74c*=8, plFlavor=0x5ae754*=0) returned 0x0 [0181.844] SysStringLen (param_1="Microsoft Windows 10 Pro") returned 0x18 [0181.844] CoTaskMemAlloc (cb=0x104) returned 0x8347a0 [0181.844] GetEnvironmentVariableW (in: lpName="PROCESSOR_ARCHITEW6432", lpBuffer=0x8347a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0181.844] CoTaskMemFree (pv=0x8347a0) [0181.844] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x7db460, puCount=0x5ae690 | out: puCount=0x5ae690*=0x2) returned 0x0 [0181.844] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae690*=0x0, pszText=0x0 | out: puBuffLength=0x5ae690*=0xf, pszText=0x0) returned 0x0 [0181.844] WbemDefPath:IWbemPath:GetText (in: This=0x7db460, lFlags=4, puBuffLength=0x5ae690*=0xf, pszText="00000000000000" | out: puBuffLength=0x5ae690*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0181.844] IWbemClassObject:Get (in: This=0x8326c0, wszName="Version", lFlags=0, pVal=0x5ae720*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae73c*=0, plFlavor=0x5ae744*=0 | out: pVal=0x5ae720*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="10.0.10240", varVal2=0x0), pType=0x5ae73c*=8, plFlavor=0x5ae744*=0) returned 0x0 [0181.844] SysStringLen (param_1="10.0.10240") returned 0xa [0181.844] IWbemClassObject:Get (in: This=0x8326c0, wszName="Version", lFlags=0, pVal=0x5ae730*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5ae74c*=8, plFlavor=0x5ae754*=0 | out: pVal=0x5ae730*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="10.0.10240", varVal2=0x0), pType=0x5ae74c*=8, plFlavor=0x5ae754*=0) returned 0x0 [0181.844] SysStringLen (param_1="10.0.10240") returned 0xa [0181.844] CoGetContextToken (in: pToken=0x5ae490 | out: pToken=0x5ae490) returned 0x0 [0181.844] WbemLocator:IUnknown:Release (This=0x82bdb8) returned 0x1 [0181.844] IUnknown:Release (This=0x832650) returned 0x0 [0183.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.config", nBufferLength=0x105, lpBuffer=0x5ae140, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.config", lpFilePart=0x0) returned 0x2b [0183.971] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.config", nBufferLength=0x105, lpBuffer=0x5ae040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.config", lpFilePart=0x0) returned 0x2b [0183.983] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.exe", nBufferLength=0x105, lpBuffer=0x5adff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.exe", lpFilePart=0x0) returned 0x28 [0184.154] GetVersionExW (in: lpVersionInformation=0x5ae070*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5ae070*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.155] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ae108 | out: TokenHandle=0x5ae108*=0x378) returned 1 [0184.160] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x5add60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30 [0184.198] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x5ae1b0 | out: lpFileInformation=0x5ae1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436072d, ftCreationTime.dwHighDateTime=0x1d2d447, ftLastAccessTime.dwLowDateTime=0x1449f42, ftLastAccessTime.dwHighDateTime=0x1d2d447, ftLastWriteTime.dwLowDateTime=0x95baafb, ftLastWriteTime.dwHighDateTime=0x1d2d447, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0184.199] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x5add00, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0184.199] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x5ae160 | out: lpFileInformation=0x5ae160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436072d, ftCreationTime.dwHighDateTime=0x1d2d447, ftLastAccessTime.dwLowDateTime=0x1449f42, ftLastAccessTime.dwHighDateTime=0x1d2d447, ftLastWriteTime.dwLowDateTime=0x95baafb, ftLastWriteTime.dwHighDateTime=0x1d2d447, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0184.199] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x5adb40, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0184.199] SetErrorMode (uMode=0x1) returned 0x0 [0184.199] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x37c [0184.199] GetFileType (hFile=0x37c) returned 0x1 [0184.199] SetErrorMode (uMode=0x0) returned 0x1 [0184.199] GetFileType (hFile=0x37c) returned 0x1 [0184.215] GetFileSize (in: hFile=0x37c, lpFileSizeHigh=0x5ae158 | out: lpFileSizeHigh=0x5ae158*=0x0) returned 0x65b3 [0184.215] ReadFile (in: hFile=0x37c, lpBuffer=0x280fcb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5ae078, lpOverlapped=0x0 | out: lpBuffer=0x280fcb0*, lpNumberOfBytesRead=0x5ae078*=0x1000, lpOverlapped=0x0) returned 1 [0184.252] ReadFile (in: hFile=0x37c, lpBuffer=0x280fcb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5add58, lpOverlapped=0x0 | out: lpBuffer=0x280fcb0*, lpNumberOfBytesRead=0x5add58*=0x1000, lpOverlapped=0x0) returned 1 [0184.252] ReadFile (in: hFile=0x37c, lpBuffer=0x280fcb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5adba8, lpOverlapped=0x0 | out: lpBuffer=0x280fcb0*, lpNumberOfBytesRead=0x5adba8*=0x1000, lpOverlapped=0x0) returned 1 [0184.252] ReadFile (in: hFile=0x37c, lpBuffer=0x280fcb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5adba8, lpOverlapped=0x0 | out: lpBuffer=0x280fcb0*, lpNumberOfBytesRead=0x5adba8*=0x1000, lpOverlapped=0x0) returned 1 [0184.252] ReadFile (in: hFile=0x37c, lpBuffer=0x280fcb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5adba8, lpOverlapped=0x0 | out: lpBuffer=0x280fcb0*, lpNumberOfBytesRead=0x5adba8*=0x1000, lpOverlapped=0x0) returned 1 [0184.255] ReadFile (in: hFile=0x37c, lpBuffer=0x280fcb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5adce8, lpOverlapped=0x0 | out: lpBuffer=0x280fcb0*, lpNumberOfBytesRead=0x5adce8*=0x1000, lpOverlapped=0x0) returned 1 [0184.255] ReadFile (in: hFile=0x37c, lpBuffer=0x280fcb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5adb08, lpOverlapped=0x0 | out: lpBuffer=0x280fcb0*, lpNumberOfBytesRead=0x5adb08*=0x5b3, lpOverlapped=0x0) returned 1 [0184.255] ReadFile (in: hFile=0x37c, lpBuffer=0x280fcb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5adcb8, lpOverlapped=0x0 | out: lpBuffer=0x280fcb0*, lpNumberOfBytesRead=0x5adcb8*=0x0, lpOverlapped=0x0) returned 1 [0184.255] CloseHandle (hObject=0x37c) returned 1 [0184.256] GetCurrentProcess () returned 0xffffffffffffffff [0184.256] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ae368 | out: TokenHandle=0x5ae368*=0x37c) returned 1 [0184.256] GetCurrentProcess () returned 0xffffffffffffffff [0184.256] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ae368 | out: TokenHandle=0x5ae368*=0x374) returned 1 [0184.257] GetCurrentProcess () returned 0xffffffffffffffff [0184.257] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ae108 | out: TokenHandle=0x5ae108*=0x380) returned 1 [0184.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.config" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\asdfc4.config"), fInfoLevelId=0x0, lpFileInformation=0x5ae1b0 | out: lpFileInformation=0x5ae1b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0184.257] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.config", nBufferLength=0x105, lpBuffer=0x5add00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.config", lpFilePart=0x0) returned 0x2b [0184.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.config" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\asdfc4.config"), fInfoLevelId=0x0, lpFileInformation=0x5ae160 | out: lpFileInformation=0x5ae160*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0184.258] GetCurrentProcess () returned 0xffffffffffffffff [0184.258] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ae368 | out: TokenHandle=0x5ae368*=0x384) returned 1 [0184.258] GetCurrentProcess () returned 0xffffffffffffffff [0184.258] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ae368 | out: TokenHandle=0x5ae368*=0x388) returned 1 [0184.268] GetCurrentProcess () returned 0xffffffffffffffff [0184.268] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5adfe8 | out: TokenHandle=0x5adfe8*=0x38c) returned 1 [0184.325] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5adfe8 | out: TokenHandle=0x5adfe8*=0x390) returned 1 [0184.391] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ae108 | out: TokenHandle=0x5ae108*=0x394) returned 1 [0184.394] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ae108 | out: TokenHandle=0x5ae108*=0x398) returned 1 [0184.431] lstrlenW (lpString="䅁") returned 1 [0184.438] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ac998 | out: phkResult=0x5ac998*=0x39c) returned 0x0 [0184.440] RegQueryValueExW (in: hKey=0x39c, lpValueName="InstallationType", lpReserved=0x0, lpType=0x5ac91c, lpData=0x0, lpcbData=0x5ac918*=0x0 | out: lpType=0x5ac91c*=0x1, lpData=0x0, lpcbData=0x5ac918*=0xe) returned 0x0 [0184.441] CoTaskMemAlloc (cb=0x12) returned 0x838cf0 [0184.441] RegQueryValueExW (in: hKey=0x39c, lpValueName="InstallationType", lpReserved=0x0, lpType=0x5ac8ec, lpData=0x838cf0, lpcbData=0x5ac8e8*=0xe | out: lpType=0x5ac8ec*=0x1, lpData="Client", lpcbData=0x5ac8e8*=0xe) returned 0x0 [0184.441] CoTaskMemFree (pv=0x838cf0) [0184.442] RegCloseKey (hKey=0x39c) returned 0x0 [0184.472] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x5ae5a8 | out: pFixedInfo=0x0, pOutBufLen=0x5ae5a8) returned 0x6f [0184.493] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x8483b0 [0184.493] GetNetworkParams (in: pFixedInfo=0x8483b0, pOutBufLen=0x5ae5a8 | out: pFixedInfo=0x8483b0, pOutBufLen=0x5ae5a8) returned 0x0 [0184.531] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x5ae208 | out: lpWSAData=0x5ae208) returned 0 [0184.536] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x404 [0184.539] setsockopt (s=0x404, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0184.539] closesocket (s=0x404) returned 0 [0184.540] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x404 [0184.540] setsockopt (s=0x404, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0184.540] closesocket (s=0x404) returned 0 [0184.552] GetCurrentProcess () returned 0xffffffffffffffff [0184.552] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ada88 | out: TokenHandle=0x5ada88*=0x404) returned 1 [0184.564] GetCurrentProcess () returned 0xffffffffffffffff [0184.564] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ada88 | out: TokenHandle=0x5ada88*=0x408) returned 1 [0184.585] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.exe", nBufferLength=0x105, lpBuffer=0x5ada40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\asdfc4.exe", lpFilePart=0x0) returned 0x28 [0184.590] GetCurrentProcessId () returned 0xf38 [0184.602] CoTaskMemAlloc (cb=0x204) returned 0x855840 [0184.602] GetComputerNameW (in: lpBuffer=0x855840, nSize=0x283d4e8 | out: lpBuffer="LHNIWSJ", nSize=0x283d4e8) returned 1 [0184.602] CoTaskMemFree (pv=0x855840) [0184.603] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.NET CLR Networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x5adf68 | out: phkResult=0x5adf68*=0x40c) returned 0x0 [0184.610] RegQueryValueExW (in: hKey=0x40c, lpValueName="Library", lpReserved=0x0, lpType=0x5adecc, lpData=0x0, lpcbData=0x5adec8*=0x0 | out: lpType=0x5adecc*=0x2, lpData=0x0, lpcbData=0x5adec8*=0x48) returned 0x0 [0184.610] CoTaskMemAlloc (cb=0x4c) returned 0x849f40 [0184.610] RegQueryValueExW (in: hKey=0x40c, lpValueName="Library", lpReserved=0x0, lpType=0x5ade9c, lpData=0x849f40, lpcbData=0x5ade98*=0x48 | out: lpType=0x5ade9c*=0x2, lpData="%systemroot%\\system32\\netfxperf.dll", lpcbData=0x5ade98*=0x48) returned 0x0 [0184.610] CoTaskMemFree (pv=0x849f40) [0184.610] RegQueryValueExW (in: hKey=0x40c, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x5adeec, lpData=0x0, lpcbData=0x5adee8*=0x0 | out: lpType=0x5adeec*=0x4, lpData=0x0, lpcbData=0x5adee8*=0x4) returned 0x0 [0184.611] RegQueryValueExW (in: hKey=0x40c, lpValueName="IsMultiInstance", lpReserved=0x0, lpType=0x5adef0, lpData=0x5adeec, lpcbData=0x5adee8*=0x4 | out: lpType=0x5adef0*=0x4, lpData=0x5adeec*=0x1, lpcbData=0x5adee8*=0x4) returned 0x0 [0184.611] RegQueryValueExW (in: hKey=0x40c, lpValueName="First Counter", lpReserved=0x0, lpType=0x5adeec, lpData=0x0, lpcbData=0x5adee8*=0x0 | out: lpType=0x5adeec*=0x4, lpData=0x0, lpcbData=0x5adee8*=0x4) returned 0x0 [0184.611] RegQueryValueExW (in: hKey=0x40c, lpValueName="First Counter", lpReserved=0x0, lpType=0x5adef0, lpData=0x5adeec, lpcbData=0x5adee8*=0x4 | out: lpType=0x5adef0*=0x4, lpData=0x5adeec*=0x16d0, lpcbData=0x5adee8*=0x4) returned 0x0 [0184.611] RegCloseKey (hKey=0x40c) returned 0x0 [0184.617] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\.net clr networking\\Performance", ulOptions=0x0, samDesired=0x20019, phkResult=0x5adf28 | out: phkResult=0x5adf28*=0x40c) returned 0x0 [0184.617] RegQueryValueExW (in: hKey=0x40c, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x5adeac, lpData=0x0, lpcbData=0x5adea8*=0x0 | out: lpType=0x5adeac*=0x4, lpData=0x0, lpcbData=0x5adea8*=0x4) returned 0x0 [0184.617] RegQueryValueExW (in: hKey=0x40c, lpValueName="CategoryOptions", lpReserved=0x0, lpType=0x5adeb0, lpData=0x5adeac, lpcbData=0x5adea8*=0x4 | out: lpType=0x5adeb0*=0x4, lpData=0x5adeac*=0x3, lpcbData=0x5adea8*=0x4) returned 0x0 [0184.617] RegQueryValueExW (in: hKey=0x40c, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x5adeac, lpData=0x0, lpcbData=0x5adea8*=0x0 | out: lpType=0x5adeac*=0x4, lpData=0x0, lpcbData=0x5adea8*=0x4) returned 0x0 [0184.617] RegQueryValueExW (in: hKey=0x40c, lpValueName="FileMappingSize", lpReserved=0x0, lpType=0x5adeb0, lpData=0x5adeac, lpcbData=0x5adea8*=0x4 | out: lpType=0x5adeb0*=0x4, lpData=0x5adeac*=0x20000, lpcbData=0x5adea8*=0x4) returned 0x0 [0184.617] RegQueryValueExW (in: hKey=0x40c, lpValueName="Counter Names", lpReserved=0x0, lpType=0x5adeac, lpData=0x0, lpcbData=0x5adea8*=0x0 | out: lpType=0x5adeac*=0x3, lpData=0x0, lpcbData=0x5adea8*=0xaa) returned 0x0 [0184.617] RegQueryValueExW (in: hKey=0x40c, lpValueName="Counter Names", lpReserved=0x0, lpType=0x5adeac, lpData=0x2840770, lpcbData=0x5adea8*=0xaa | out: lpType=0x5adeac*=0x3, lpData=0x2840770*, lpcbData=0x5adea8*=0xaa) returned 0x0 [0184.619] ConvertStringSecurityDescriptorToSecurityDescriptorW () returned 0x1 [0184.624] CreateFileMappingW (hFile=0xffffffffffffffff, lpFileMappingAttributes=0x5ade60, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x20000, lpName="Global\\netfxcustomperfcounters.1.0.net clr networking") returned 0x3f0 [0184.626] MapViewOfFile (hFileMappingObject=0x3f0, dwDesiredAccess=0x2, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2100000 [0184.627] VirtualQuery (in: lpAddress=0x2100000, lpBuffer=0x5ade58, dwLength=0x30 | out: lpBuffer=0x5ade58*(BaseAddress=0x2100000, AllocationBase=0x2100000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x20000, State=0x1000, Protect=0x4, Type=0x40000, __alignment2=0x0)) returned 0x30 [0184.627] LocalFree (hMem=0x843cf0) returned 0x0 [0184.627] RegCloseKey (hKey=0x40c) returned 0x0 [0184.628] GetVersionExW (in: lpVersionInformation=0x5ace30*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5ace30*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0184.629] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2841380, cbSid=0x5ade40 | out: pSid=0x2841380*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5ade40) returned 1 [0184.630] CreateMutexW (lpMutexAttributes=0x28415a8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x40c [0184.631] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x1f4) returned 0x0 [0184.631] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x28418c0, cbSid=0x5adda0 | out: pSid=0x28418c0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5adda0) returned 1 [0184.631] CreateMutexW (lpMutexAttributes=0x2841a78, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x0 [0184.632] OpenMutexW (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Global\\.net clr networking") returned 0x414 [0184.633] WaitForSingleObject (hHandle=0x414, dwMilliseconds=0x1f4) returned 0x0 [0184.633] ReleaseMutex (hMutex=0x414) returned 1 [0184.633] CloseHandle (hObject=0x414) returned 1 [0184.633] GetCurrentProcessId () returned 0xf38 [0184.637] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xf38) returned 0x0 [0184.637] ReleaseMutex (hMutex=0x40c) returned 1 [0184.637] CloseHandle (hObject=0x40c) returned 1 [0184.638] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2842740, cbSid=0x5ade40 | out: pSid=0x2842740*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5ade40) returned 1 [0184.638] CreateMutexW (lpMutexAttributes=0x28428f8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x40c [0184.639] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x1f4) returned 0x0 [0184.642] ReleaseMutex (hMutex=0x40c) returned 1 [0184.642] CloseHandle (hObject=0x40c) returned 1 [0184.642] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2843608, cbSid=0x5ade40 | out: pSid=0x2843608*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5ade40) returned 1 [0184.642] CreateMutexW (lpMutexAttributes=0x28437c0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x40c [0184.642] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x1f4) returned 0x0 [0184.643] ReleaseMutex (hMutex=0x40c) returned 1 [0184.643] CloseHandle (hObject=0x40c) returned 1 [0184.643] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2844288, cbSid=0x5ade40 | out: pSid=0x2844288*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5ade40) returned 1 [0184.643] CreateMutexW (lpMutexAttributes=0x2844440, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x40c [0184.643] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x1f4) returned 0x0 [0184.644] ReleaseMutex (hMutex=0x40c) returned 1 [0184.644] CloseHandle (hObject=0x40c) returned 1 [0184.644] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2844f00, cbSid=0x5ade40 | out: pSid=0x2844f00*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5ade40) returned 1 [0184.644] CreateMutexW (lpMutexAttributes=0x28450b8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x40c [0184.644] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x1f4) returned 0x0 [0184.645] ReleaseMutex (hMutex=0x40c) returned 1 [0184.645] CloseHandle (hObject=0x40c) returned 1 [0184.645] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2845b80, cbSid=0x5addf0 | out: pSid=0x2845b80*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5addf0) returned 1 [0184.645] CreateMutexW (lpMutexAttributes=0x2845d38, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x40c [0184.646] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x1f4) returned 0x0 [0184.646] ReleaseMutex (hMutex=0x40c) returned 1 [0184.646] CloseHandle (hObject=0x40c) returned 1 [0184.646] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2846818, cbSid=0x5addf0 | out: pSid=0x2846818*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5addf0) returned 1 [0184.646] CreateMutexW (lpMutexAttributes=0x28469d0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x40c [0184.646] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x1f4) returned 0x0 [0184.647] ReleaseMutex (hMutex=0x40c) returned 1 [0184.647] CloseHandle (hObject=0x40c) returned 1 [0184.647] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2847480, cbSid=0x5addf0 | out: pSid=0x2847480*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5addf0) returned 1 [0184.647] CreateMutexW (lpMutexAttributes=0x2847638, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x40c [0184.647] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x1f4) returned 0x0 [0184.648] ReleaseMutex (hMutex=0x40c) returned 1 [0184.648] CloseHandle (hObject=0x40c) returned 1 [0184.648] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x28480f8, cbSid=0x5addf0 | out: pSid=0x28480f8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5addf0) returned 1 [0184.648] CreateMutexW (lpMutexAttributes=0x28482b0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x40c [0184.648] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x1f4) returned 0x0 [0184.649] ReleaseMutex (hMutex=0x40c) returned 1 [0184.649] CloseHandle (hObject=0x40c) returned 1 [0184.649] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2848d68, cbSid=0x5addf0 | out: pSid=0x2848d68*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x5addf0) returned 1 [0184.649] CreateMutexW (lpMutexAttributes=0x2848f20, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x40c [0184.649] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x1f4) returned 0x0 [0184.650] ReleaseMutex (hMutex=0x40c) returned 1 [0184.650] CloseHandle (hObject=0x40c) returned 1 [0184.662] CoTaskMemAlloc (cb=0xd) returned 0x838d90 [0184.662] inet_addr (cp="192.168.0.1") returned 0x100a8c0 [0184.662] CoTaskMemFree (pv=0x838d90) [0184.664] LocalFree (hMem=0x8483b0) returned 0x0 [0184.675] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x5ae910 | out: pfEnabled=0x5ae910) returned 0x0 [0184.701] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x43c [0184.701] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x440 [0184.712] GetCurrentProcess () returned 0xffffffffffffffff [0184.712] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ade58 | out: TokenHandle=0x5ade58*=0x444) returned 1 [0184.713] GetCurrentProcess () returned 0xffffffffffffffff [0184.713] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5ade58 | out: TokenHandle=0x5ade58*=0x448) returned 1 [0184.718] SetEvent (hEvent=0x43c) returned 1 [0184.747] CreateSemaphoreA (lpSemaphoreAttributes=0x0, lInitialCount=0, lMaximumCount=1048576, lpName=0x0) returned 0x460 [0184.763] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x464 [0184.766] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName=0x0) returned 0x468 [0184.767] SetEvent (hEvent=0x43c) returned 1 [0184.775] ReleaseMutex (hMutex=0x468) returned 1 [0184.776] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x46c [0184.779] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x470 [0184.781] CoTaskMemAlloc (cb=0xe) returned 0x8338f0 [0184.782] getaddrinfo (in: pNodeName="smtp.zoho.eu", pServiceName=0x0, pHints=0x5ae330*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x5ae328 | out: ppResult=0x5ae328*=0x831af0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="smtp.zoho.eu", ai_addr=0x860900*(sa_family=2, sin_port=0x0, sin_addr="185.20.209.34"), ai_next=0x0)) returned 0 [0184.798] CoTaskMemFree (pv=0x8338f0) [0184.798] CoTaskMemFree (pv=0x0) [0184.799] FreeAddrInfoW (pAddrInfo=0x831af0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="浳灴種桯⹯略", ai_addr=0x860900*(sa_family=2, sin_port=0x0, sin_addr="185.20.209.34"), ai_next=0x0)) [0184.801] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x474 [0184.802] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x480 [0184.802] ioctlsocket (in: s=0x474, cmd=-2147195266, argp=0x5ae348 | out: argp=0x5ae348) returned 0 [0184.802] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x484 [0184.802] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x488 [0184.802] ioctlsocket (in: s=0x484, cmd=-2147195266, argp=0x5ae348 | out: argp=0x5ae348) returned 0 [0184.807] WSAIoctl (in: s=0x474, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x5ae288, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x5ae288, lpOverlapped=0x0) returned -1 [0184.808] CoTaskMemAlloc (cb=0x204) returned 0x85dc50 [0184.808] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x85dc50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0184.836] CoTaskMemFree (pv=0x85dc50) [0184.839] WSAEventSelect (s=0x474, hEventObject=0x480, lNetworkEvents=512) returned 0 [0184.839] WSAIoctl (in: s=0x484, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x5ae288, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x5ae288, lpOverlapped=0x0) returned -1 [0184.839] CoTaskMemAlloc (cb=0x204) returned 0x85dc50 [0184.839] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x85dc50, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0184.839] CoTaskMemFree (pv=0x85dc50) [0184.839] WSAEventSelect (s=0x484, hEventObject=0x488, lNetworkEvents=512) returned 0 [0184.841] GetAdaptersAddresses () returned 0x6f [0184.845] LocalAlloc (uFlags=0x0, uBytes=0xc38) returned 0x866a80 [0184.845] GetAdaptersAddresses () returned 0x0 [0184.853] LocalFree (hMem=0x866a80) returned 0x0 [0184.854] WSAConnect (in: s=0x46c, name=0x28554d8*(sa_family=2, sin_port=0x24b, sin_addr="185.20.209.34"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0184.894] closesocket (s=0x470) returned 0 [0184.899] setsockopt (s=0x46c, level=6, optname=1, optval="\x01", optlen=4) returned 0 [0184.908] recv (in: s=0x46c, buf=0x2855638, len=256, flags=0 | out: buf=0x2855638*) returned 66 [0184.947] send (in: s=0x46c, buf=0x284f090*, len=14, flags=0 | out: buf=0x284f090*) returned 14 [0184.947] recv (in: s=0x46c, buf=0x2855638, len=256, flags=0 | out: buf=0x2855638*) returned 90 [0184.982] recv (in: s=0x46c, buf=0x2855638, len=256, flags=0 | out: buf=0x2855638*) returned 33 [0184.983] send (in: s=0x46c, buf=0x284f090*, len=10, flags=0 | out: buf=0x284f090*) returned 10 [0184.983] recv (in: s=0x46c, buf=0x2855638, len=256, flags=0 | out: buf=0x2855638*) returned 25 [0185.031] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v2.0.50727", ulOptions=0x0, samDesired=0x20019, phkResult=0x5ae4f8 | out: phkResult=0x5ae4f8*=0x470) returned 0x0 [0185.032] RegQueryValueExW (in: hKey=0x470, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x5ae47c, lpData=0x0, lpcbData=0x5ae478*=0x0 | out: lpType=0x5ae47c*=0x0, lpData=0x0, lpcbData=0x5ae478*=0x0) returned 0x2 [0185.032] RegCloseKey (hKey=0x470) returned 0x0 [0185.053] EnumerateSecurityPackagesW (in: pcPackages=0x5ae3f8, ppPackageInfo=0x5ae3f0 | out: pcPackages=0x5ae3f8, ppPackageInfo=0x5ae3f0) returned 0x0 [0185.062] lstrlenW (lpString="Negotiate") returned 9 [0185.063] CoTaskMemAlloc (cb=0x16) returned 0x860a60 [0185.063] RtlMoveMemory (in: Destination=0x860a60, Source=0x866e40, Length=0x14 | out: Destination=0x860a60) [0185.063] CoTaskMemFree (pv=0x860a60) [0185.063] CoTaskMemAlloc (cb=0x3c) returned 0x85f150 [0185.063] RtlMoveMemory (in: Destination=0x85f150, Source=0x866e54, Length=0x3a | out: Destination=0x85f150) [0185.063] CoTaskMemFree (pv=0x85f150) [0185.063] lstrlenW (lpString="NegoExtender") returned 12 [0185.063] CoTaskMemAlloc (cb=0x1c) returned 0x83ed40 [0185.063] RtlMoveMemory (in: Destination=0x83ed40, Source=0x866e8e, Length=0x1a | out: Destination=0x83ed40) [0185.063] CoTaskMemFree (pv=0x83ed40) [0185.063] lstrlenW (lpString="NegoExtender Security Package") returned 29 [0185.063] CoTaskMemAlloc (cb=0x3e) returned 0x85f6a0 [0185.063] RtlMoveMemory (in: Destination=0x85f6a0, Source=0x866ea8, Length=0x3c | out: Destination=0x85f6a0) [0185.063] CoTaskMemFree (pv=0x85f6a0) [0185.063] lstrlenW (lpString="Kerberos") returned 8 [0185.063] CoTaskMemAlloc (cb=0x14) returned 0x860980 [0185.063] RtlMoveMemory (in: Destination=0x860980, Source=0x866ee4, Length=0x12 | out: Destination=0x860980) [0185.063] CoTaskMemFree (pv=0x860980) [0185.063] lstrlenW (lpString="Microsoft Kerberos V1.0") returned 23 [0185.063] CoTaskMemAlloc (cb=0x32) returned 0x831730 [0185.063] RtlMoveMemory (in: Destination=0x831730, Source=0x866ef6, Length=0x30 | out: Destination=0x831730) [0185.063] CoTaskMemFree (pv=0x831730) [0185.063] lstrlenW (lpString="NTLM") returned 4 [0185.063] CoTaskMemAlloc (cb=0xc) returned 0x8604c0 [0185.063] RtlMoveMemory (in: Destination=0x8604c0, Source=0x866f26, Length=0xa | out: Destination=0x8604c0) [0185.063] CoTaskMemFree (pv=0x8604c0) [0185.063] lstrlenW (lpString="NTLM Security Package") returned 21 [0185.063] CoTaskMemAlloc (cb=0x2e) returned 0x831730 [0185.063] RtlMoveMemory (in: Destination=0x831730, Source=0x866f30, Length=0x2c | out: Destination=0x831730) [0185.063] CoTaskMemFree (pv=0x831730) [0185.064] lstrlenW (lpString="TSSSP") returned 5 [0185.064] CoTaskMemAlloc (cb=0xe) returned 0x8606a0 [0185.064] RtlMoveMemory (in: Destination=0x8606a0, Source=0x866f5c, Length=0xc | out: Destination=0x8606a0) [0185.064] CoTaskMemFree (pv=0x8606a0) [0185.064] lstrlenW (lpString="TS Service Security Package") returned 27 [0185.064] CoTaskMemAlloc (cb=0x3a) returned 0x85e4d0 [0185.064] RtlMoveMemory (in: Destination=0x85e4d0, Source=0x866f68, Length=0x38 | out: Destination=0x85e4d0) [0185.064] CoTaskMemFree (pv=0x85e4d0) [0185.064] lstrlenW (lpString="pku2u") returned 5 [0185.064] CoTaskMemAlloc (cb=0xe) returned 0x860a60 [0185.064] RtlMoveMemory (in: Destination=0x860a60, Source=0x866fa0, Length=0xc | out: Destination=0x860a60) [0185.064] CoTaskMemFree (pv=0x860a60) [0185.064] lstrlenW (lpString="PKU2U Security Package") returned 22 [0185.064] CoTaskMemAlloc (cb=0x30) returned 0x831730 [0185.064] RtlMoveMemory (in: Destination=0x831730, Source=0x866fac, Length=0x2e | out: Destination=0x831730) [0185.064] CoTaskMemFree (pv=0x831730) [0185.064] lstrlenW (lpString="WDigest") returned 7 [0185.064] CoTaskMemAlloc (cb=0x12) returned 0x860780 [0185.064] RtlMoveMemory (in: Destination=0x860780, Source=0x866fda, Length=0x10 | out: Destination=0x860780) [0185.064] CoTaskMemFree (pv=0x860780) [0185.064] lstrlenW (lpString="Digest Authentication for Windows") returned 33 [0185.064] CoTaskMemAlloc (cb=0x46) returned 0x85e610 [0185.064] RtlMoveMemory (in: Destination=0x85e610, Source=0x866fea, Length=0x44 | out: Destination=0x85e610) [0185.064] CoTaskMemFree (pv=0x85e610) [0185.064] lstrlenW (lpString="CloudAP") returned 7 [0185.064] CoTaskMemAlloc (cb=0x12) returned 0x860660 [0185.064] RtlMoveMemory (in: Destination=0x860660, Source=0x86702e, Length=0x10 | out: Destination=0x860660) [0185.064] CoTaskMemFree (pv=0x860660) [0185.064] lstrlenW (lpString="Cloud AP Security Package") returned 25 [0185.064] CoTaskMemAlloc (cb=0x36) returned 0x831730 [0185.064] RtlMoveMemory (in: Destination=0x831730, Source=0x86703e, Length=0x34 | out: Destination=0x831730) [0185.064] CoTaskMemFree (pv=0x831730) [0185.065] lstrlenW (lpString="Schannel") returned 8 [0185.065] CoTaskMemAlloc (cb=0x14) returned 0x860720 [0185.065] RtlMoveMemory (in: Destination=0x860720, Source=0x867072, Length=0x12 | out: Destination=0x860720) [0185.065] CoTaskMemFree (pv=0x860720) [0185.065] lstrlenW (lpString="Schannel Security Package") returned 25 [0185.065] CoTaskMemAlloc (cb=0x36) returned 0x831a30 [0185.065] RtlMoveMemory (in: Destination=0x831a30, Source=0x867084, Length=0x34 | out: Destination=0x831a30) [0185.065] CoTaskMemFree (pv=0x831a30) [0185.065] lstrlenW (lpString="Microsoft Unified Security Protocol Provider") returned 44 [0185.065] CoTaskMemAlloc (cb=0x5c) returned 0x855780 [0185.065] RtlMoveMemory (in: Destination=0x855780, Source=0x8670b8, Length=0x5a | out: Destination=0x855780) [0185.065] CoTaskMemFree (pv=0x855780) [0185.065] lstrlenW (lpString="Schannel Security Package") returned 25 [0185.065] CoTaskMemAlloc (cb=0x36) returned 0x830df0 [0185.065] RtlMoveMemory (in: Destination=0x830df0, Source=0x867112, Length=0x34 | out: Destination=0x830df0) [0185.065] CoTaskMemFree (pv=0x830df0) [0185.065] lstrlenW (lpString="CREDSSP") returned 7 [0185.065] CoTaskMemAlloc (cb=0x12) returned 0x860660 [0185.065] RtlMoveMemory (in: Destination=0x860660, Source=0x867146, Length=0x10 | out: Destination=0x860660) [0185.065] CoTaskMemFree (pv=0x860660) [0185.065] lstrlenW (lpString="Microsoft CredSSP Security Provider") returned 35 [0185.065] CoTaskMemAlloc (cb=0x4a) returned 0x84a420 [0185.065] RtlMoveMemory (in: Destination=0x84a420, Source=0x867156, Length=0x48 | out: Destination=0x84a420) [0185.065] CoTaskMemFree (pv=0x84a420) [0185.065] FreeContextBuffer (in: pvContextBuffer=0x866ce0 | out: pvContextBuffer=0x866ce0) returned 0x0 [0185.068] GetCurrentProcess () returned 0xffffffffffffffff [0185.068] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x5aded8 | out: TokenHandle=0x5aded8*=0x49c) returned 1 [0185.071] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x2857f20, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x5adde8, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x5addd8, ptsExpiry=0x5addd0 | out: phCredential=0x5addd8, ptsExpiry=0x5addd0) returned 0x0 [0185.079] InitializeSecurityContextW (in: phCredential=0x5adfe0, phContext=0x0, pTargetName=0x2802880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x5adfd0, pOutput=0x285a788, pfContextAttr=0x5adfc8, ptsExpiry=0x5adfc0 | out: phNewContext=0x5adfd0, pOutput=0x285a788, pfContextAttr=0x5adfc8, ptsExpiry=0x5adfc0) returned 0x90312 [0185.081] FreeContextBuffer (in: pvContextBuffer=0x84ca60 | out: pvContextBuffer=0x84ca60) returned 0x0 [0185.090] send (in: s=0x46c, buf=0x285a858*, len=124, flags=0 | out: buf=0x285a858*) returned 124 [0185.090] recv (in: s=0x46c, buf=0x285a858, len=5, flags=0 | out: buf=0x285a858*) returned 5 [0185.128] recv (in: s=0x46c, buf=0x285a85d, len=61, flags=0 | out: buf=0x285a85d*) returned 61 [0185.128] InitializeSecurityContextW (in: phCredential=0x5adf10, phContext=0x5ae1c0, pTargetName=0x2802880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x285ab20, Reserved2=0x0, phNewContext=0x5adf00, pOutput=0x285ab40, pfContextAttr=0x5adef8, ptsExpiry=0x5adef0 | out: phNewContext=0x5adf00, pOutput=0x285ab40, pfContextAttr=0x5adef8, ptsExpiry=0x5adef0) returned 0x90312 [0185.129] recv (in: s=0x46c, buf=0x285ac30, len=5, flags=0 | out: buf=0x285ac30*) returned 5 [0185.129] recv (in: s=0x46c, buf=0x285ac55, len=4369, flags=0 | out: buf=0x285ac55*) returned 4369 [0185.129] InitializeSecurityContextW (in: phCredential=0x5ade50, phContext=0x5ae100, pTargetName=0x2802880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x285be38, Reserved2=0x0, phNewContext=0x5ade40, pOutput=0x285be58, pfContextAttr=0x5ade38, ptsExpiry=0x5ade30 | out: phNewContext=0x5ade40, pOutput=0x285be58, pfContextAttr=0x5ade38, ptsExpiry=0x5ade30) returned 0x90312 [0185.130] recv (in: s=0x46c, buf=0x285bf48, len=5, flags=0 | out: buf=0x285bf48*) returned 5 [0185.130] recv (in: s=0x46c, buf=0x285bf6d, len=331, flags=0 | out: buf=0x285bf6d*) returned 331 [0185.130] InitializeSecurityContextW (in: phCredential=0x5add90, phContext=0x5ae040, pTargetName=0x2802880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x285c188, Reserved2=0x0, phNewContext=0x5add80, pOutput=0x285c1a8, pfContextAttr=0x5add78, ptsExpiry=0x5add70 | out: phNewContext=0x5add80, pOutput=0x285c1a8, pfContextAttr=0x5add78, ptsExpiry=0x5add70) returned 0x90312 [0185.130] recv (in: s=0x46c, buf=0x285c298, len=5, flags=0 | out: buf=0x285c298*) returned 5 [0185.131] recv (in: s=0x46c, buf=0x285c2bd, len=4, flags=0 | out: buf=0x285c2bd*) returned 4 [0185.131] InitializeSecurityContextW (in: phCredential=0x5adcd0, phContext=0x5adf80, pTargetName=0x2802880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x285c398, Reserved2=0x0, phNewContext=0x5adcc0, pOutput=0x285c3b8, pfContextAttr=0x5adcb8, ptsExpiry=0x5adcb0 | out: phNewContext=0x5adcc0, pOutput=0x285c3b8, pfContextAttr=0x5adcb8, ptsExpiry=0x5adcb0) returned 0x90312 [0185.134] FreeContextBuffer (in: pvContextBuffer=0x7fe4b0 | out: pvContextBuffer=0x7fe4b0) returned 0x0 [0185.134] send (in: s=0x46c, buf=0x285c488*, len=134, flags=0 | out: buf=0x285c488*) returned 134 [0185.134] recv (in: s=0x46c, buf=0x285c488, len=5, flags=0 | out: buf=0x285c488*) returned 5 [0185.180] recv (in: s=0x46c, buf=0x285c54d, len=186, flags=0 | out: buf=0x285c54d*) returned 186 [0185.180] InitializeSecurityContextW (in: phCredential=0x5adc10, phContext=0x5adec0, pTargetName=0x2802880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x285c6d8, Reserved2=0x0, phNewContext=0x5adc00, pOutput=0x285c6f8, pfContextAttr=0x5adbf8, ptsExpiry=0x5adbf0 | out: phNewContext=0x5adc00, pOutput=0x285c6f8, pfContextAttr=0x5adbf8, ptsExpiry=0x5adbf0) returned 0x90312 [0185.181] recv (in: s=0x46c, buf=0x285c7e8, len=5, flags=0 | out: buf=0x285c7e8*) returned 5 [0185.181] recv (in: s=0x46c, buf=0x285c80d, len=1, flags=0 | out: buf=0x285c80d*) returned 1 [0185.181] InitializeSecurityContextW (in: phCredential=0x5adb50, phContext=0x5ade00, pTargetName=0x2802880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x285c8e0, Reserved2=0x0, phNewContext=0x5adb40, pOutput=0x285c900, pfContextAttr=0x5adb38, ptsExpiry=0x5adb30 | out: phNewContext=0x5adb40, pOutput=0x285c900, pfContextAttr=0x5adb38, ptsExpiry=0x5adb30) returned 0x90312 [0185.181] recv (in: s=0x46c, buf=0x285c9f0, len=5, flags=0 | out: buf=0x285c9f0*) returned 5 [0185.181] recv (in: s=0x46c, buf=0x285ca15, len=48, flags=0 | out: buf=0x285ca15*) returned 48 [0185.181] InitializeSecurityContextW (in: phCredential=0x5ada90, phContext=0x5add40, pTargetName=0x2802880, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x285cb18, Reserved2=0x0, phNewContext=0x5ada80, pOutput=0x285cb38, pfContextAttr=0x5ada78, ptsExpiry=0x5ada70 | out: phNewContext=0x5ada80, pOutput=0x285cb38, pfContextAttr=0x5ada78, ptsExpiry=0x5ada70) returned 0x0 [0185.389] QueryContextAttributesW (in: phContext=0x5adcf0, ulAttribute=0x4, pBuffer=0x285cc50 | out: pBuffer=0x285cc50) returned 0x0 [0185.404] QueryContextAttributesW (in: phContext=0x5adcf0, ulAttribute=0x5a, pBuffer=0x285ccd0 | out: pBuffer=0x285ccd0) returned 0x0 [0185.412] QueryContextAttributesW (in: phContext=0x5adba0, ulAttribute=0x53, pBuffer=0x285d020 | out: pBuffer=0x285d020) returned 0x0 [0185.433] CertDuplicateCertificateContext (pCertContext=0x7fcbf0) returned 0x7fcbf0 [0185.436] CertDuplicateStore (hCertStore=0x866620) returned 0x866620 [0185.436] CertEnumCertificatesInStore (hCertStore=0x866620, pPrevCertContext=0x0) returned 0x7fca70 [0185.436] CertDuplicateCertificateContext (pCertContext=0x7fca70) returned 0x7fca70 [0185.437] CertEnumCertificatesInStore (hCertStore=0x866620, pPrevCertContext=0x7fca70) returned 0x7fcd70 [0185.437] CertDuplicateCertificateContext (pCertContext=0x7fcd70) returned 0x7fcd70 [0185.437] CertEnumCertificatesInStore (hCertStore=0x866620, pPrevCertContext=0x7fcd70) returned 0x7fcbf0 [0185.437] CertDuplicateCertificateContext (pCertContext=0x7fcbf0) returned 0x7fcbf0 [0185.437] CertEnumCertificatesInStore (hCertStore=0x866620, pPrevCertContext=0x7fcbf0) returned 0x0 [0185.437] CertCloseStore (hCertStore=0x866620, dwFlags=0x0) returned 1 [0185.437] CertFreeCertificateContext (pCertContext=0x7fcbf0) returned 1 [0185.444] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x866960 [0185.445] CertAddCRLLinkToStore (in: hCertStore=0x866960, pCrlContext=0x7fca70, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0185.445] CertAddCRLLinkToStore (in: hCertStore=0x866960, pCrlContext=0x7fcd70, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0185.445] CertAddCRLLinkToStore (in: hCertStore=0x866960, pCrlContext=0x7fcbf0, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0185.447] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x7fcbf0, pTime=0x5adba8, hAdditionalStore=0x866960, pChainPara=0x5adbb0, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x5adba0 | out: ppChainContext=0x5adba0) returned 1 [0185.598] CertDuplicateCertificateChain (pChainContext=0x1b6b8c20) returned 0x1b6b8c20 [0185.600] CertDuplicateCertificateContext (pCertContext=0x7fcbf0) returned 0x7fcbf0 [0185.600] CertDuplicateCertificateContext (pCertContext=0x1b7db6d0) returned 0x1b7db6d0 [0185.600] CertDuplicateCertificateContext (pCertContext=0x1b7db750) returned 0x1b7db750 [0185.600] CertFreeCertificateChain (pChainContext=0x1b6b8c20) [0185.601] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x1b6b8c20, pPolicyPara=0x5add28, pPolicyStatus=0x5add08 | out: pPolicyStatus=0x5add08) returned 1 [0185.601] SetLastError (dwErrCode=0x0) [0185.604] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x1b6b8c20, pPolicyPara=0x5ade00, pPolicyStatus=0x5adde8 | out: pPolicyStatus=0x5adde8) returned 1 [0185.607] CertFreeCertificateChain (pChainContext=0x1b6b8c20) [0185.607] CertFreeCertificateContext (pCertContext=0x7fcbf0) returned 1 [0185.610] EncryptMessage (in: phContext=0x5ae410, fQOP=0x0, pMessage=0x285f898, MessageSeqNo=0x0 | out: pMessage=0x285f898) returned 0x0 [0185.610] send (in: s=0x46c, buf=0x285f620*, len=53, flags=0 | out: buf=0x285f620*) returned 53 [0185.611] recv (in: s=0x46c, buf=0x285fd90, len=5, flags=0 | out: buf=0x285fd90*) returned 5 [0185.651] recv (in: s=0x46c, buf=0x285fdb5, len=112, flags=0 | out: buf=0x285fdb5*) returned 112 [0185.652] DecryptMessage (in: phContext=0x5ae1c0, pMessage=0x285ff38, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x285ff38, pfQOP=0x0) returned 0x0 [0185.652] recv (in: s=0x46c, buf=0x285fdb0, len=5, flags=0 | out: buf=0x285fdb0*) returned 5 [0185.652] recv (in: s=0x46c, buf=0x285fdb5, len=48, flags=0 | out: buf=0x285fdb5*) returned 48 [0185.652] DecryptMessage (in: phContext=0x5ae1c0, pMessage=0x2860380, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2860380, pfQOP=0x0) returned 0x0 [0185.652] recv (in: s=0x46c, buf=0x285fdb0, len=5, flags=0 | out: buf=0x285fdb0*) returned 5 [0185.652] recv (in: s=0x46c, buf=0x285fdb5, len=48, flags=0 | out: buf=0x285fdb5*) returned 48 [0185.652] DecryptMessage (in: phContext=0x5ae1c0, pMessage=0x2860698, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2860698, pfQOP=0x0) returned 0x0 [0185.658] EncryptMessage (in: phContext=0x5ae410, fQOP=0x0, pMessage=0x2861620, MessageSeqNo=0x0 | out: pMessage=0x2861620) returned 0x0 [0185.659] send (in: s=0x46c, buf=0x28614c0*, len=69, flags=0 | out: buf=0x28614c0*) returned 69 [0185.659] recv (in: s=0x46c, buf=0x285fdb0, len=5, flags=0 | out: buf=0x285fdb0*) returned 5 [0185.692] recv (in: s=0x46c, buf=0x285fdb5, len=48, flags=0 | out: buf=0x285fdb5*) returned 48 [0185.692] DecryptMessage (in: phContext=0x5ae1c0, pMessage=0x28618b8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x28618b8, pfQOP=0x0) returned 0x0 [0185.694] EncryptMessage (in: phContext=0x5ae410, fQOP=0x0, pMessage=0x28625b8, MessageSeqNo=0x0 | out: pMessage=0x28625b8) returned 0x0 [0185.694] send (in: s=0x46c, buf=0x2862468*, len=53, flags=0 | out: buf=0x2862468*) returned 53 [0185.694] recv (in: s=0x46c, buf=0x285fdb0, len=5, flags=0 | out: buf=0x285fdb0*) returned 5 [0185.731] recv (in: s=0x46c, buf=0x285fdb5, len=64, flags=0 | out: buf=0x285fdb5*) returned 64 [0185.731] DecryptMessage (in: phContext=0x5ae1c0, pMessage=0x2862850, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2862850, pfQOP=0x0) returned 0x0 [0185.732] EncryptMessage (in: phContext=0x5ae480, fQOP=0x0, pMessage=0x2862ea0, MessageSeqNo=0x0 | out: pMessage=0x2862ea0) returned 0x0 [0185.732] send (in: s=0x46c, buf=0x2862d48*, len=69, flags=0 | out: buf=0x2862d48*) returned 69 [0185.733] recv (in: s=0x46c, buf=0x285fdb0, len=5, flags=0 | out: buf=0x285fdb0*) returned 5 [0185.766] recv (in: s=0x46c, buf=0x285fdb5, len=64, flags=0 | out: buf=0x285fdb5*) returned 64 [0185.766] DecryptMessage (in: phContext=0x5ae1e0, pMessage=0x2863138, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2863138, pfQOP=0x0) returned 0x0 [0185.766] EncryptMessage (in: phContext=0x5ae480, fQOP=0x0, pMessage=0x2863690, MessageSeqNo=0x0 | out: pMessage=0x2863690) returned 0x0 [0185.766] send (in: s=0x46c, buf=0x2863528*, len=69, flags=0 | out: buf=0x2863528*) returned 69 [0185.767] recv (in: s=0x46c, buf=0x285fdb0, len=5, flags=0 | out: buf=0x285fdb0*) returned 5 [0185.799] recv (in: s=0x46c, buf=0x285fdb5, len=80, flags=0 | out: buf=0x285fdb5*) returned 80 [0185.799] DecryptMessage (in: phContext=0x5ae1e0, pMessage=0x2863928, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2863928, pfQOP=0x0) returned 0x0 [0185.800] EncryptMessage (in: phContext=0x5ae480, fQOP=0x0, pMessage=0x2863cd0, MessageSeqNo=0x0 | out: pMessage=0x2863cd0) returned 0x0 [0185.800] send (in: s=0x46c, buf=0x2863b90*, len=37, flags=0 | out: buf=0x2863b90*) returned 37 [0185.800] recv (in: s=0x46c, buf=0x285fdb0, len=5, flags=0 | out: buf=0x285fdb0*) returned 5 [0185.841] recv (in: s=0x46c, buf=0x285fdb5, len=80, flags=0 | out: buf=0x285fdb5*) returned 80 [0185.841] DecryptMessage (in: phContext=0x5ae1e0, pMessage=0x2863f68, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2863f68, pfQOP=0x0) returned 0x0 [0185.859] EncryptMessage (in: phContext=0x5ae470, fQOP=0x0, pMessage=0x286d2d0, MessageSeqNo=0x0 | out: pMessage=0x286d2d0) returned 0x0 [0185.859] send (in: s=0x46c, buf=0x286d0b8*, len=245, flags=0 | out: buf=0x286d0b8*) returned 245 [0185.862] EncryptMessage (in: phContext=0x5ae3d0, fQOP=0x0, pMessage=0x286df80, MessageSeqNo=0x0 | out: pMessage=0x286df80) returned 0x0 [0185.862] send (in: s=0x46c, buf=0x286da40*, len=1061, flags=0 | out: buf=0x286da40*) returned 1061 [0185.863] EncryptMessage (in: phContext=0x5ae3d0, fQOP=0x0, pMessage=0x286e5b8, MessageSeqNo=0x0 | out: pMessage=0x286e5b8) returned 0x0 [0185.863] send (in: s=0x46c, buf=0x286e078*, len=1061, flags=0 | out: buf=0x286e078*) returned 1061 [0185.863] EncryptMessage (in: phContext=0x5ae3f0, fQOP=0x0, pMessage=0x286e9a0, MessageSeqNo=0x0 | out: pMessage=0x286e9a0) returned 0x0 [0185.863] send (in: s=0x46c, buf=0x286e6b0*, len=469, flags=0 | out: buf=0x286e6b0*) returned 469 [0185.864] EncryptMessage (in: phContext=0x5ae550, fQOP=0x0, pMessage=0x286ebf0, MessageSeqNo=0x0 | out: pMessage=0x286ebf0) returned 0x0 [0185.864] send (in: s=0x46c, buf=0x286eab0*, len=37, flags=0 | out: buf=0x286eab0*) returned 37 [0185.864] EncryptMessage (in: phContext=0x5ae460, fQOP=0x0, pMessage=0x286ee40, MessageSeqNo=0x0 | out: pMessage=0x286ee40) returned 0x0 [0185.864] send (in: s=0x46c, buf=0x286ed00*, len=37, flags=0 | out: buf=0x286ed00*) returned 37 [0185.864] recv (in: s=0x46c, buf=0x285fdb0, len=5, flags=0 | out: buf=0x285fdb0*) returned 5 [0185.958] recv (in: s=0x46c, buf=0x285fdb5, len=48, flags=0 | out: buf=0x285fdb5*) returned 48 [0185.958] DecryptMessage (in: phContext=0x5ae1c0, pMessage=0x286f0d8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x286f0d8, pfQOP=0x0) returned 0x0 [0185.960] ReleaseSemaphore (in: hSemaphore=0x460, lReleaseCount=1, lpPreviousCount=0x0 | out: lpPreviousCount=0x0) returned 1 [0185.960] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", nBufferLength=0x105, lpBuffer=0x5ae720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", lpFilePart=0x0) returned 0x34 [0185.960] SetErrorMode (uMode=0x1) returned 0x0 [0185.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\cryptonardecryptor.exe"), fInfoLevelId=0x0, lpFileInformation=0x5ae930 | out: lpFileInformation=0x5ae930*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0185.960] SetErrorMode (uMode=0x0) returned 0x1 [0185.994] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", nBufferLength=0x105, lpBuffer=0x5ae450, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", lpFilePart=0x0) returned 0x34 [0185.994] SetErrorMode (uMode=0x1) returned 0x0 [0185.994] CreateFileW (lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\cryptonardecryptor.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6f4 [0186.009] GetFileType (hFile=0x6f4) returned 0x1 [0186.009] SetErrorMode (uMode=0x0) returned 0x1 [0186.009] GetFileType (hFile=0x6f4) returned 0x1 [0186.009] WriteFile (in: hFile=0x6f4, lpBuffer=0x1258d088*, nNumberOfBytesToWrite=0x77e00, lpNumberOfBytesWritten=0x5aea08, lpOverlapped=0x0 | out: lpBuffer=0x1258d088*, lpNumberOfBytesWritten=0x5aea08*=0x77e00, lpOverlapped=0x0) returned 1 [0186.016] CloseHandle (hObject=0x6f4) returned 1 [0186.034] LocalAlloc (uFlags=0x0, uBytes=0x6a) returned 0x1b7daf80 [0186.035] RtlMoveMemory (in: Destination=0x1b7daf80, Source=0x2584880, Length=0x6a | out: Destination=0x1b7daf80) [0187.382] LocalFree (hMem=0x1b7daf80) returned 0x0 [0187.384] CoGetContextToken (in: pToken=0x5afc10 | out: pToken=0x5afc10) returned 0x0 [0187.384] IUnknown:QueryInterface (in: This=0x7c96f8, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5afc68 | out: ppvObject=0x5afc68*=0x7c9710) returned 0x0 [0187.384] IComThreadingInfo:GetCurrentThreadType (in: This=0x7c9710, pThreadType=0x5afd60 | out: pThreadType=0x5afd60*=0) returned 0x0 [0187.384] IUnknown:Release (This=0x7c9710) returned 0x1 [0187.385] CoGetContextToken (in: pToken=0x5af7e0 | out: pToken=0x5af7e0) returned 0x0 [0187.385] IUnknown:QueryInterface (in: This=0x7c96f8, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5af838 | out: ppvObject=0x5af838*=0x7c9710) returned 0x0 [0187.385] IComThreadingInfo:GetCurrentThreadType (in: This=0x7c9710, pThreadType=0x5af8d0 | out: pThreadType=0x5af8d0*=0) returned 0x0 [0187.385] IUnknown:Release (This=0x7c9710) returned 0x1 [0187.390] CoGetContextToken (in: pToken=0x5af7e0 | out: pToken=0x5af7e0) returned 0x0 [0187.390] IUnknown:QueryInterface (in: This=0x7c96f8, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5af838 | out: ppvObject=0x5af838*=0x7c9710) returned 0x0 [0187.390] IComThreadingInfo:GetCurrentThreadType (in: This=0x7c9710, pThreadType=0x5af8d0 | out: pThreadType=0x5af8d0*=0) returned 0x0 [0187.390] IUnknown:Release (This=0x7c9710) returned 0x1 [0187.416] CoGetContextToken (in: pToken=0x5af7e0 | out: pToken=0x5af7e0) returned 0x0 [0187.416] IUnknown:QueryInterface (in: This=0x7c96f8, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5af838 | out: ppvObject=0x5af838*=0x7c9710) returned 0x0 [0187.416] IComThreadingInfo:GetCurrentThreadType (in: This=0x7c9710, pThreadType=0x5af8d0 | out: pThreadType=0x5af8d0*=0) returned 0x0 [0187.416] IUnknown:Release (This=0x7c9710) returned 0x1 [0187.425] CoGetContextToken (in: pToken=0x5af7d0 | out: pToken=0x5af7d0) returned 0x0 [0187.425] IUnknown:QueryInterface (in: This=0x7c96f8, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5af828 | out: ppvObject=0x5af828*=0x7c9710) returned 0x0 [0187.425] IComThreadingInfo:GetCurrentThreadType (in: This=0x7c9710, pThreadType=0x5af8c0 | out: pThreadType=0x5af8c0*=0) returned 0x0 [0187.425] IUnknown:Release (This=0x7c9710) returned 0x0 [0187.427] CoUninitialize () Thread: id = 2 os_tid = 0xf58 Thread: id = 3 os_tid = 0xfb0 Thread: id = 4 os_tid = 0xfb4 [0046.801] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0054.109] CloseHandle (hObject=0x230) returned 1 [0187.387] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x286fef8, cbSid=0x1ae5eed0 | out: pSid=0x286fef8*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1ae5eed0) returned 1 [0187.387] CreateMutexW (lpMutexAttributes=0x28700b0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x70c [0187.387] WaitForSingleObject (hHandle=0x70c, dwMilliseconds=0x1f4) returned 0x0 [0187.387] ReleaseMutex (hMutex=0x70c) returned 1 [0187.388] CloseHandle (hObject=0x70c) returned 1 [0187.388] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2870400, cbSid=0x1ae5eed0 | out: pSid=0x2870400*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1ae5eed0) returned 1 [0187.388] CreateMutexW (lpMutexAttributes=0x28705b8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x70c [0187.388] WaitForSingleObject (hHandle=0x70c, dwMilliseconds=0x1f4) returned 0x0 [0187.388] ReleaseMutex (hMutex=0x70c) returned 1 [0187.388] CloseHandle (hObject=0x70c) returned 1 [0187.388] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2870908, cbSid=0x1ae5eed0 | out: pSid=0x2870908*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1ae5eed0) returned 1 [0187.388] CreateMutexW (lpMutexAttributes=0x2870ac0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x70c [0187.388] WaitForSingleObject (hHandle=0x70c, dwMilliseconds=0x1f4) returned 0x0 [0187.388] ReleaseMutex (hMutex=0x70c) returned 1 [0187.389] CloseHandle (hObject=0x70c) returned 1 [0187.389] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2870e10, cbSid=0x1ae5eed0 | out: pSid=0x2870e10*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1ae5eed0) returned 1 [0187.389] CreateMutexW (lpMutexAttributes=0x2870fc8, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x70c [0187.389] WaitForSingleObject (hHandle=0x70c, dwMilliseconds=0x1f4) returned 0x0 [0187.389] ReleaseMutex (hMutex=0x70c) returned 1 [0187.389] CloseHandle (hObject=0x70c) returned 1 [0187.389] CreateWellKnownSid (in: WellKnownSidType=0x11, DomainSid=0x0, pSid=0x2871318, cbSid=0x1ae5ef00 | out: pSid=0x2871318*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0xb), cbSid=0x1ae5ef00) returned 1 [0187.389] CreateMutexW (lpMutexAttributes=0x28714d0, bInitialOwner=0, lpName="Global\\.net clr networking") returned 0x70c [0187.389] WaitForSingleObject (hHandle=0x70c, dwMilliseconds=0x1f4) returned 0x0 [0187.389] ReleaseMutex (hMutex=0x70c) returned 1 [0187.389] CloseHandle (hObject=0x70c) returned 1 [0187.395] setsockopt (s=0x46c, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0187.396] closesocket (s=0x46c) returned 0 [0187.397] IUnknown:Release (This=0x8326c0) returned 0x1 [0187.397] CoGetContextToken (in: pToken=0x1ae5f260 | out: pToken=0x1ae5f260) returned 0x0 [0187.397] WbemLocator:IUnknown:Release (This=0x82bc18) returned 0x1 [0187.397] IUnknown:Release (This=0x82f8e0) returned 0x0 [0187.399] IUnknown:Release (This=0x82f9e0) returned 0x1 [0187.399] CoGetContextToken (in: pToken=0x1ae5f260 | out: pToken=0x1ae5f260) returned 0x0 [0187.399] WbemLocator:IUnknown:Release (This=0x7d9d58) returned 0x1 [0187.399] IUnknown:Release (This=0x8288c0) returned 0x0 [0187.401] CertFreeCertificateContext (pCertContext=0x1b7db750) returned 1 [0187.402] UnmapViewOfFile (lpBaseAddress=0x2100000) returned 1 [0187.402] CloseHandle (hObject=0x3f0) returned 1 [0187.403] CloseHandle (hObject=0x408) returned 1 [0187.403] CloseHandle (hObject=0x404) returned 1 [0187.404] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 [0187.404] CloseHandle (hObject=0x398) returned 1 [0187.404] CloseHandle (hObject=0x394) returned 1 [0187.404] CertFreeCertificateContext (pCertContext=0x1b7db6d0) returned 1 [0187.405] CertFreeCertificateContext (pCertContext=0x7fcbf0) returned 1 [0187.405] CloseHandle (hObject=0x390) returned 1 [0187.405] CloseHandle (hObject=0x38c) returned 1 [0187.406] CloseHandle (hObject=0x388) returned 1 [0187.406] CloseHandle (hObject=0x384) returned 1 [0187.406] CloseHandle (hObject=0x380) returned 1 [0187.407] CloseHandle (hObject=0x374) returned 1 [0187.407] CloseHandle (hObject=0x37c) returned 1 [0187.408] CloseHandle (hObject=0x378) returned 1 [0187.408] CertCloseStore (hCertStore=0x866960, dwFlags=0x0) returned 1 [0187.409] CertFreeCertificateContext (pCertContext=0x7fcbf0) returned 1 [0187.409] CertFreeCertificateContext (pCertContext=0x7fcd70) returned 1 [0187.410] CertFreeCertificateContext (pCertContext=0x7fca70) returned 1 [0187.410] CloseHandle (hObject=0x318) returned 1 [0187.410] UnmapViewOfFile (lpBaseAddress=0x960000) returned 1 [0187.411] CloseHandle (hObject=0x2d4) returned 1 [0187.411] FreeCredentialsHandle (phCredential=0x1ae5e360) returned 0x0 [0187.412] DeleteSecurityContext (phContext=0x1ae5ec30) returned 0x0 [0187.412] CloseHandle (hObject=0x49c) returned 1 [0187.413] setsockopt (s=0x484, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0187.413] closesocket (s=0x484) returned 0 [0187.413] CloseHandle (hObject=0x488) returned 1 [0187.414] setsockopt (s=0x474, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0187.414] closesocket (s=0x474) returned 0 [0187.414] CloseHandle (hObject=0x480) returned 1 [0187.414] CloseHandle (hObject=0x468) returned 1 [0187.414] CloseHandle (hObject=0x464) returned 1 [0187.415] CloseHandle (hObject=0x460) returned 1 [0187.415] CloseHandle (hObject=0x448) returned 1 [0187.415] CloseHandle (hObject=0x444) returned 1 [0187.416] CloseHandle (hObject=0x7d0) returned 1 [0187.418] CoGetContextToken (in: pToken=0x1ae5c850 | out: pToken=0x1ae5c850) returned 0x0 [0187.418] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.418] WbemLocator:IUnknown:Release (This=0x82ba78) returned 0x1 [0187.418] WbemLocator:IUnknown:Release (This=0x81f040) returned 0x0 [0187.419] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.419] WbemLocator:IUnknown:Release (This=0x80dbc0) returned 0x0 [0187.419] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.419] WbemDefPath:IUnknown:Release (This=0x7db0a0) returned 0x1 [0187.419] WbemDefPath:IUnknown:Release (This=0x7db0a0) returned 0x0 [0187.419] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.419] WbemDefPath:IUnknown:Release (This=0x7db820) returned 0x1 [0187.419] WbemDefPath:IUnknown:Release (This=0x7db820) returned 0x0 [0187.420] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.420] WbemLocator:IUnknown:Release (This=0x82c438) returned 0x1 [0187.420] WbemLocator:IUnknown:Release (This=0x81df60) returned 0x0 [0187.420] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.420] WbemLocator:IUnknown:Release (This=0x7da3d8) returned 0x1 [0187.420] WbemLocator:IUnknown:Release (This=0x81e080) returned 0x0 [0187.421] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.421] IUnknown:Release (This=0x82f9e0) returned 0x0 [0187.421] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.421] WbemDefPath:IUnknown:Release (This=0x7db760) returned 0x1 [0187.421] WbemDefPath:IUnknown:Release (This=0x7db760) returned 0x0 [0187.421] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.421] WbemDefPath:IUnknown:Release (This=0x7daaa0) returned 0x1 [0187.421] WbemDefPath:IUnknown:Release (This=0x7daaa0) returned 0x0 [0187.422] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.422] WbemDefPath:IUnknown:Release (This=0x7db220) returned 0x1 [0187.422] WbemDefPath:IUnknown:Release (This=0x7db220) returned 0x0 [0187.422] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.422] WbemLocator:IUnknown:Release (This=0x7da718) returned 0x1 [0187.422] WbemLocator:IUnknown:Release (This=0x81de40) returned 0x0 [0187.422] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.422] WbemDefPath:IUnknown:Release (This=0x7db460) returned 0x1 [0187.423] WbemDefPath:IUnknown:Release (This=0x7db460) returned 0x0 [0187.423] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.423] IUnknown:Release (This=0x8326c0) returned 0x0 [0187.423] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.423] WbemDefPath:IUnknown:Release (This=0x7db160) returned 0x1 [0187.423] WbemDefPath:IUnknown:Release (This=0x7db160) returned 0x0 [0187.423] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.423] WbemLocator:IUnknown:Release (This=0x80d620) returned 0x0 [0187.423] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.423] WbemDefPath:IUnknown:Release (This=0x7db8e0) returned 0x1 [0187.424] WbemDefPath:IUnknown:Release (This=0x7db8e0) returned 0x0 [0187.424] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.424] WbemDefPath:IUnknown:Release (This=0x7dac20) returned 0x1 [0187.424] WbemDefPath:IUnknown:Release (This=0x7dac20) returned 0x0 [0187.424] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.424] WbemLocator:IUnknown:Release (This=0x8336d0) returned 0x0 [0187.424] CoGetContextToken (in: pToken=0x1ae5c770 | out: pToken=0x1ae5c770) returned 0x0 [0187.424] WbemLocator:IUnknown:Release (This=0x833510) returned 0x0 [0187.425] IUnknown:Release (This=0x7c96f8) returned 0x0 Thread: id = 5 os_tid = 0x0 Thread: id = 6 os_tid = 0xe8c Thread: id = 7 os_tid = 0xe10 Thread: id = 8 os_tid = 0xf48 Thread: id = 9 os_tid = 0x778 Thread: id = 82 os_tid = 0xf1c [0184.697] CoGetContextToken (in: pToken=0x1b3bf730 | out: pToken=0x1b3bf730) returned 0x0 [0184.697] IUnknown:QueryInterface (in: This=0x7c96f8, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1b3bf788 | out: ppvObject=0x1b3bf788*=0x7c9710) returned 0x0 [0184.698] IComThreadingInfo:GetCurrentThreadType (in: This=0x7c9710, pThreadType=0x1b3bf820 | out: pThreadType=0x1b3bf820*=0) returned 0x0 [0184.698] IUnknown:Release (This=0x7c9710) returned 0x1 [0184.698] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 83 os_tid = 0xeec [0184.722] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0184.728] ResetEvent (hEvent=0x43c) returned 1 Thread: id = 84 os_tid = 0xef8 Thread: id = 85 os_tid = 0xefc [0186.039] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0186.058] ShellExecuteExW (in: pExecInfo=0x286fa78*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x286fa78*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x7d0)) returned 1 [0187.146] CoGetContextToken (in: pToken=0x1ba9f8d0 | out: pToken=0x1ba9f8d0) returned 0x0 [0187.147] CoUninitialize () Thread: id = 86 os_tid = 0xef0 Thread: id = 87 os_tid = 0xf14 Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x47a8d000" os_pid = "0x318" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0xf38" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b566" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 291 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 292 start_va = 0xcb80000000 end_va = 0xcb8000ffff entry_point = 0xcb80000000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 293 start_va = 0xcb80010000 end_va = 0xcb8001ffff entry_point = 0xcb80010000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 294 start_va = 0xcb80020000 end_va = 0xcb8002ffff entry_point = 0xcb80020000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 295 start_va = 0xcb80030000 end_va = 0xcb8003ffff entry_point = 0xcb80030000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 296 start_va = 0xcb80040000 end_va = 0xcb8004ffff entry_point = 0xcb80040000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 297 start_va = 0xcb80050000 end_va = 0xcb8005ffff entry_point = 0xcb80050000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 298 start_va = 0xcb80060000 end_va = 0xcb8006ffff entry_point = 0xcb80060000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 299 start_va = 0xcb80070000 end_va = 0xcb8007ffff entry_point = 0xcb80070000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 300 start_va = 0xcb80080000 end_va = 0xcb8008ffff entry_point = 0xcb80080000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 301 start_va = 0xcb80090000 end_va = 0xcb8009ffff entry_point = 0xcb80090000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 302 start_va = 0xcb800a0000 end_va = 0xcb800affff entry_point = 0xcb800a0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 303 start_va = 0xcb800b0000 end_va = 0xcb800bffff entry_point = 0xcb800b0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 304 start_va = 0xcb800c0000 end_va = 0xcb800cffff entry_point = 0xcb800c0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 305 start_va = 0xcb800d0000 end_va = 0xcb800dffff entry_point = 0xcb800d0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 306 start_va = 0xcb800e0000 end_va = 0xcb800effff entry_point = 0xcb800e0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 307 start_va = 0xcb800f0000 end_va = 0xcb800fffff entry_point = 0xcb800f0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 308 start_va = 0xcb80100000 end_va = 0xcb801fffff entry_point = 0x0 region_type = private name = "private_0x000000cb80100000" filename = "" Region: id = 309 start_va = 0xcb80200000 end_va = 0xcb80208fff entry_point = 0xcb80200000 region_type = mapped_file name = "vsstrace.dll.mui" filename = "\\Windows\\System32\\en-US\\vsstrace.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\vsstrace.dll.mui") Region: id = 310 start_va = 0xcb80210000 end_va = 0xcb80210fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb80210000" filename = "" Region: id = 311 start_va = 0xcb80220000 end_va = 0xcb8022ffff entry_point = 0xcb80220000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 312 start_va = 0xcb80230000 end_va = 0xcb8023ffff entry_point = 0xcb80230000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 313 start_va = 0xcb80240000 end_va = 0xcb8024ffff entry_point = 0xcb80240000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 314 start_va = 0xcb80250000 end_va = 0xcb8025ffff entry_point = 0xcb80250000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 315 start_va = 0xcb80260000 end_va = 0xcb8026ffff entry_point = 0xcb80260000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 316 start_va = 0xcb80270000 end_va = 0xcb8027ffff entry_point = 0xcb80270000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 317 start_va = 0xcb80280000 end_va = 0xcb8028ffff entry_point = 0xcb80280000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 318 start_va = 0xcb80290000 end_va = 0xcb8029ffff entry_point = 0xcb80290000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 319 start_va = 0xcb802a0000 end_va = 0xcb802a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb802a0000" filename = "" Region: id = 320 start_va = 0xcb802b0000 end_va = 0xcb802b6fff entry_point = 0x0 region_type = private name = "private_0x000000cb802b0000" filename = "" Region: id = 321 start_va = 0xcb802c0000 end_va = 0xcb802c1fff entry_point = 0xcb802c0000 region_type = mapped_file name = "activeds.dll.mui" filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui") Region: id = 322 start_va = 0xcb802d0000 end_va = 0xcb802d4fff entry_point = 0xcb802d0000 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 323 start_va = 0xcb802e0000 end_va = 0xcb802effff entry_point = 0xcb802e0000 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 324 start_va = 0xcb802f0000 end_va = 0xcb802f2fff entry_point = 0xcb802f0000 region_type = mapped_file name = "mswsock.dll.mui" filename = "\\Windows\\System32\\en-US\\mswsock.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mswsock.dll.mui") Region: id = 325 start_va = 0xcb80300000 end_va = 0xcb803fffff entry_point = 0x0 region_type = private name = "private_0x000000cb80300000" filename = "" Region: id = 326 start_va = 0xcb80400000 end_va = 0xcb804fffff entry_point = 0x0 region_type = private name = "private_0x000000cb80400000" filename = "" Region: id = 327 start_va = 0xcb80500000 end_va = 0xcb805fffff entry_point = 0x0 region_type = private name = "private_0x000000cb80500000" filename = "" Region: id = 328 start_va = 0xcb80600000 end_va = 0xcb806fffff entry_point = 0x0 region_type = private name = "private_0x000000cb80600000" filename = "" Region: id = 329 start_va = 0xcb80700000 end_va = 0xcb8070ffff entry_point = 0xcb80700000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 330 start_va = 0xcb80710000 end_va = 0xcb8071ffff entry_point = 0xcb80710000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 331 start_va = 0xcb80720000 end_va = 0xcb8072ffff entry_point = 0xcb80720000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 332 start_va = 0xcb80730000 end_va = 0xcb8073ffff entry_point = 0xcb80730000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 333 start_va = 0xcb80800000 end_va = 0xcb808fffff entry_point = 0x0 region_type = private name = "private_0x000000cb80800000" filename = "" Region: id = 334 start_va = 0xcb80900000 end_va = 0xcb809fffff entry_point = 0x0 region_type = private name = "private_0x000000cb80900000" filename = "" Region: id = 335 start_va = 0xcb80a00000 end_va = 0xcb80afffff entry_point = 0x0 region_type = private name = "private_0x000000cb80a00000" filename = "" Region: id = 336 start_va = 0xcb80b00000 end_va = 0xcb80b01fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb80b00000" filename = "" Region: id = 337 start_va = 0xcb80b10000 end_va = 0xcb80b11fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb80b10000" filename = "" Region: id = 338 start_va = 0xcb80b20000 end_va = 0xcb80b26fff entry_point = 0x0 region_type = private name = "private_0x000000cb80b20000" filename = "" Region: id = 339 start_va = 0xcb80b30000 end_va = 0xcb80b36fff entry_point = 0xcb80b30000 region_type = mapped_file name = "newdev.dll.mui" filename = "\\Windows\\System32\\en-US\\newdev.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\newdev.dll.mui") Region: id = 340 start_va = 0xcb80b40000 end_va = 0xcb80b40fff entry_point = 0x0 region_type = private name = "private_0x000000cb80b40000" filename = "" Region: id = 341 start_va = 0xcb80b50000 end_va = 0xcb80b50fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb80b50000" filename = "" Region: id = 342 start_va = 0xcb80b60000 end_va = 0xcb80b66fff entry_point = 0x0 region_type = private name = "private_0x000000cb80b60000" filename = "" Region: id = 343 start_va = 0xcb80bf0000 end_va = 0xcb80bf7fff entry_point = 0x0 region_type = private name = "private_0x000000cb80bf0000" filename = "" Region: id = 344 start_va = 0xcb80c00000 end_va = 0xcb80cfffff entry_point = 0x0 region_type = private name = "private_0x000000cb80c00000" filename = "" Region: id = 345 start_va = 0xcb80d00000 end_va = 0xcb80dfffff entry_point = 0x0 region_type = private name = "private_0x000000cb80d00000" filename = "" Region: id = 346 start_va = 0xcb80e20000 end_va = 0xcb80e2ffff entry_point = 0xcb80e20000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 347 start_va = 0xcb80e30000 end_va = 0xcb80e3ffff entry_point = 0xcb80e30000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 348 start_va = 0xcb80e60000 end_va = 0xcb80e6ffff entry_point = 0xcb80e60000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 349 start_va = 0xcb80e70000 end_va = 0xcb80e71fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb80e70000" filename = "" Region: id = 350 start_va = 0xcb80ee0000 end_va = 0xcb80eeffff entry_point = 0xcb80ee0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 351 start_va = 0xcb80f00000 end_va = 0xcb80ffffff entry_point = 0x0 region_type = private name = "private_0x000000cb80f00000" filename = "" Region: id = 352 start_va = 0xcb81000000 end_va = 0xcb810fffff entry_point = 0x0 region_type = private name = "private_0x000000cb81000000" filename = "" Region: id = 353 start_va = 0xcb81100000 end_va = 0xcb811fffff entry_point = 0x0 region_type = private name = "private_0x000000cb81100000" filename = "" Region: id = 354 start_va = 0xcb81200000 end_va = 0xcb812fffff entry_point = 0x0 region_type = private name = "private_0x000000cb81200000" filename = "" Region: id = 355 start_va = 0xcb81300000 end_va = 0xcb813fffff entry_point = 0x0 region_type = private name = "private_0x000000cb81300000" filename = "" Region: id = 356 start_va = 0xcb81400000 end_va = 0xcb814fffff entry_point = 0x0 region_type = private name = "private_0x000000cb81400000" filename = "" Region: id = 357 start_va = 0xcb81500000 end_va = 0xcb815fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb81500000" filename = "" Region: id = 358 start_va = 0xcb81690000 end_va = 0xcb8170ffff entry_point = 0x0 region_type = private name = "private_0x000000cb81690000" filename = "" Region: id = 359 start_va = 0xcb81710000 end_va = 0xcb8180ffff entry_point = 0x0 region_type = private name = "private_0x000000cb81710000" filename = "" Region: id = 360 start_va = 0xcb81880000 end_va = 0xcb818c0fff entry_point = 0x0 region_type = private name = "private_0x000000cb81880000" filename = "" Region: id = 361 start_va = 0xcb818d0000 end_va = 0xcb818dffff entry_point = 0x0 region_type = private name = "private_0x000000cb818d0000" filename = "" Region: id = 362 start_va = 0xcb818e0000 end_va = 0xcb818effff entry_point = 0x0 region_type = private name = "private_0x000000cb818e0000" filename = "" Region: id = 363 start_va = 0xcb818f0000 end_va = 0xcb818f0fff entry_point = 0x0 region_type = private name = "private_0x000000cb818f0000" filename = "" Region: id = 364 start_va = 0xcb81900000 end_va = 0xcb819fffff entry_point = 0x0 region_type = private name = "private_0x000000cb81900000" filename = "" Region: id = 365 start_va = 0xcb81a00000 end_va = 0xcb81afffff entry_point = 0x0 region_type = private name = "private_0x000000cb81a00000" filename = "" Region: id = 366 start_va = 0xcb81b00000 end_va = 0xcb81b00fff entry_point = 0x0 region_type = private name = "private_0x000000cb81b00000" filename = "" Region: id = 367 start_va = 0xcb81b10000 end_va = 0xcb81b13fff entry_point = 0x0 region_type = private name = "private_0x000000cb81b10000" filename = "" Region: id = 368 start_va = 0xcb81b20000 end_va = 0xcb81b26fff entry_point = 0x0 region_type = private name = "private_0x000000cb81b20000" filename = "" Region: id = 369 start_va = 0xcb81b30000 end_va = 0xcb81c2ffff entry_point = 0x0 region_type = private name = "private_0x000000cb81b30000" filename = "" Region: id = 370 start_va = 0xcb81c30000 end_va = 0xcb81caffff entry_point = 0x0 region_type = private name = "private_0x000000cb81c30000" filename = "" Region: id = 371 start_va = 0xcb81cb0000 end_va = 0xcb81cb6fff entry_point = 0x0 region_type = private name = "private_0x000000cb81cb0000" filename = "" Region: id = 372 start_va = 0xcb81cc0000 end_va = 0xcb81cc1fff entry_point = 0x0 region_type = private name = "private_0x000000cb81cc0000" filename = "" Region: id = 373 start_va = 0xcb81cd0000 end_va = 0xcb81cd0fff entry_point = 0x0 region_type = private name = "private_0x000000cb81cd0000" filename = "" Region: id = 374 start_va = 0xcb81ce0000 end_va = 0xcb81ceffff entry_point = 0x0 region_type = private name = "private_0x000000cb81ce0000" filename = "" Region: id = 375 start_va = 0xcb81cf0000 end_va = 0xcb81cf7fff entry_point = 0x0 region_type = private name = "private_0x000000cb81cf0000" filename = "" Region: id = 376 start_va = 0xcb81d00000 end_va = 0xcb81dfffff entry_point = 0x0 region_type = private name = "private_0x000000cb81d00000" filename = "" Region: id = 377 start_va = 0xcb81e00000 end_va = 0xcb81efffff entry_point = 0x0 region_type = private name = "private_0x000000cb81e00000" filename = "" Region: id = 378 start_va = 0xcb81f00000 end_va = 0xcb81ffffff entry_point = 0x0 region_type = private name = "private_0x000000cb81f00000" filename = "" Region: id = 379 start_va = 0xcb82000000 end_va = 0xcb820fffff entry_point = 0x0 region_type = private name = "private_0x000000cb82000000" filename = "" Region: id = 380 start_va = 0xcb82100000 end_va = 0xcb821fffff entry_point = 0x0 region_type = private name = "private_0x000000cb82100000" filename = "" Region: id = 381 start_va = 0xcb82200000 end_va = 0xcb8220ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb82200000" filename = "" Region: id = 382 start_va = 0xcb82210000 end_va = 0xcb8221ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb82210000" filename = "" Region: id = 383 start_va = 0xcb82220000 end_va = 0xcb8222ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb82220000" filename = "" Region: id = 384 start_va = 0xcb82230000 end_va = 0xcb8223ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb82230000" filename = "" Region: id = 385 start_va = 0xcb82240000 end_va = 0xcb8224ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb82240000" filename = "" Region: id = 386 start_va = 0xcb82250000 end_va = 0xcb8225ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb82250000" filename = "" Region: id = 387 start_va = 0xcb82260000 end_va = 0xcb822dffff entry_point = 0x0 region_type = private name = "private_0x000000cb82260000" filename = "" Region: id = 388 start_va = 0xcb822e0000 end_va = 0xcb8232cfff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb822e0000" filename = "" Region: id = 389 start_va = 0xcb82330000 end_va = 0xcb8237cfff entry_point = 0x0 region_type = private name = "private_0x000000cb82330000" filename = "" Region: id = 390 start_va = 0xcb82380000 end_va = 0xcb8238ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb82380000" filename = "" Region: id = 391 start_va = 0xcb82390000 end_va = 0xcb8239ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb82390000" filename = "" Region: id = 392 start_va = 0xcb823a0000 end_va = 0xcb823affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb823a0000" filename = "" Region: id = 393 start_va = 0xcb823b0000 end_va = 0xcb823bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb823b0000" filename = "" Region: id = 394 start_va = 0xcb823c0000 end_va = 0xcb823cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb823c0000" filename = "" Region: id = 395 start_va = 0xcb823d0000 end_va = 0xcb823dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cb823d0000" filename = "" Region: id = 396 start_va = 0xcb82400000 end_va = 0xcb824fffff entry_point = 0x0 region_type = private name = "private_0x000000cb82400000" filename = "" Region: id = 397 start_va = 0xcb82500000 end_va = 0xcb834fffff entry_point = 0x0 region_type = private name = "private_0x000000cb82500000" filename = "" Region: id = 398 start_va = 0xcb83500000 end_va = 0xcb8352ffff entry_point = 0x0 region_type = private name = "private_0x000000cb83500000" filename = "" Region: id = 399 start_va = 0xcb83530000 end_va = 0xcb8752ffff entry_point = 0x0 region_type = private name = "private_0x000000cb83530000" filename = "" Region: id = 400 start_va = 0xcb87530000 end_va = 0xcb8b52ffff entry_point = 0x0 region_type = private name = "private_0x000000cb87530000" filename = "" Region: id = 401 start_va = 0xcb8b610000 end_va = 0xcb8b68ffff entry_point = 0x0 region_type = private name = "private_0x000000cb8b610000" filename = "" Region: id = 402 start_va = 0xcb8b690000 end_va = 0xcb8b69ffff entry_point = 0x0 region_type = private name = "private_0x000000cb8b690000" filename = "" Region: id = 403 start_va = 0xcb8b6a0000 end_va = 0xcb8b6affff entry_point = 0x0 region_type = private name = "private_0x000000cb8b6a0000" filename = "" Region: id = 404 start_va = 0xcb8b6b0000 end_va = 0xcb8b6bffff entry_point = 0x0 region_type = private name = "private_0x000000cb8b6b0000" filename = "" Region: id = 405 start_va = 0xcb8b6c0000 end_va = 0xcb8b6cffff entry_point = 0x0 region_type = private name = "private_0x000000cb8b6c0000" filename = "" Region: id = 406 start_va = 0xcb8b6d0000 end_va = 0xcb8b6dffff entry_point = 0x0 region_type = private name = "private_0x000000cb8b6d0000" filename = "" Region: id = 407 start_va = 0xcb8b6e0000 end_va = 0xcb8b6e7fff entry_point = 0x0 region_type = private name = "private_0x000000cb8b6e0000" filename = "" Region: id = 408 start_va = 0xcb8b6f0000 end_va = 0xcb8b6fffff entry_point = 0x0 region_type = private name = "private_0x000000cb8b6f0000" filename = "" Region: id = 409 start_va = 0xcb8b700000 end_va = 0xcb8b700fff entry_point = 0xcb8b700000 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 410 start_va = 0xcb8b710000 end_va = 0xcb8b713fff entry_point = 0xcb8b710000 region_type = mapped_file name = "wuaueng.dll.mui" filename = "\\Windows\\System32\\en-US\\wuaueng.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\wuaueng.dll.mui") Region: id = 411 start_va = 0xcb8b810000 end_va = 0xcb8b816fff entry_point = 0x0 region_type = private name = "private_0x000000cb8b810000" filename = "" Region: id = 412 start_va = 0xcb8b900000 end_va = 0xcb8b9fffff entry_point = 0x0 region_type = private name = "private_0x000000cb8b900000" filename = "" Region: id = 413 start_va = 0xcb8ba00000 end_va = 0xcb8bafffff entry_point = 0x0 region_type = private name = "private_0x000000cb8ba00000" filename = "" Region: id = 414 start_va = 0xcb8bb00000 end_va = 0xcb8bbfffff entry_point = 0x0 region_type = private name = "private_0x000000cb8bb00000" filename = "" Region: id = 415 start_va = 0xcb8bc00000 end_va = 0xcb8bcfffff entry_point = 0x0 region_type = private name = "private_0x000000cb8bc00000" filename = "" Region: id = 416 start_va = 0xcb8bd00000 end_va = 0xcb8bdfffff entry_point = 0x0 region_type = private name = "private_0x000000cb8bd00000" filename = "" Region: id = 417 start_va = 0xcb8be00000 end_va = 0xcb8befffff entry_point = 0x0 region_type = private name = "private_0x000000cb8be00000" filename = "" Region: id = 418 start_va = 0xcb8bf00000 end_va = 0xcb8bffffff entry_point = 0x0 region_type = private name = "private_0x000000cb8bf00000" filename = "" Region: id = 419 start_va = 0xcb8c000000 end_va = 0xcb8c0fffff entry_point = 0x0 region_type = private name = "private_0x000000cb8c000000" filename = "" Region: id = 420 start_va = 0xcb8c300000 end_va = 0xcb8c3fffff entry_point = 0x0 region_type = private name = "private_0x000000cb8c300000" filename = "" Region: id = 421 start_va = 0xcb8c500000 end_va = 0xcb8c5fffff entry_point = 0x0 region_type = private name = "private_0x000000cb8c500000" filename = "" Region: id = 422 start_va = 0xcb8c700000 end_va = 0xcb8c7fffff entry_point = 0x0 region_type = private name = "private_0x000000cb8c700000" filename = "" Region: id = 423 start_va = 0xcb8cb00000 end_va = 0xcb8cbfffff entry_point = 0x0 region_type = private name = "private_0x000000cb8cb00000" filename = "" Region: id = 424 start_va = 0xcbfc730000 end_va = 0xcbfc73ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfc730000" filename = "" Region: id = 425 start_va = 0xcbfc740000 end_va = 0xcbfc740fff entry_point = 0xcbfc740000 region_type = mapped_file name = "svchost.exe.mui" filename = "\\Windows\\System32\\en-US\\svchost.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\svchost.exe.mui") Region: id = 426 start_va = 0xcbfc750000 end_va = 0xcbfc763fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfc750000" filename = "" Region: id = 427 start_va = 0xcbfc770000 end_va = 0xcbfc7effff entry_point = 0x0 region_type = private name = "private_0x000000cbfc770000" filename = "" Region: id = 428 start_va = 0xcbfc7f0000 end_va = 0xcbfc7f3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfc7f0000" filename = "" Region: id = 429 start_va = 0xcbfc800000 end_va = 0xcbfc800fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfc800000" filename = "" Region: id = 430 start_va = 0xcbfc810000 end_va = 0xcbfc811fff entry_point = 0x0 region_type = private name = "private_0x000000cbfc810000" filename = "" Region: id = 431 start_va = 0xcbfc820000 end_va = 0xcbfc8ddfff entry_point = 0xcbfc820000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 432 start_va = 0xcbfc960000 end_va = 0xcbfc960fff entry_point = 0x0 region_type = private name = "private_0x000000cbfc960000" filename = "" Region: id = 433 start_va = 0xcbfc970000 end_va = 0xcbfc970fff entry_point = 0x0 region_type = private name = "private_0x000000cbfc970000" filename = "" Region: id = 434 start_va = 0xcbfc980000 end_va = 0xcbfc980fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfc980000" filename = "" Region: id = 435 start_va = 0xcbfc990000 end_va = 0xcbfc990fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfc990000" filename = "" Region: id = 436 start_va = 0xcbfc9a0000 end_va = 0xcbfc9a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfc9a0000" filename = "" Region: id = 437 start_va = 0xcbfc9b0000 end_va = 0xcbfc9b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfc9b0000" filename = "" Region: id = 438 start_va = 0xcbfc9c0000 end_va = 0xcbfc9ccfff entry_point = 0xcbfc9c0000 region_type = mapped_file name = "iphlpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\iphlpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\iphlpsvc.dll.mui") Region: id = 439 start_va = 0xcbfc9d0000 end_va = 0xcbfc9d6fff entry_point = 0x0 region_type = private name = "private_0x000000cbfc9d0000" filename = "" Region: id = 440 start_va = 0xcbfc9e0000 end_va = 0xcbfc9ecfff entry_point = 0xcbfc9e0000 region_type = mapped_file name = "gpsvc.dll.mui" filename = "\\Windows\\System32\\en-US\\gpsvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\gpsvc.dll.mui") Region: id = 441 start_va = 0xcbfc9f0000 end_va = 0xcbfc9f6fff entry_point = 0x0 region_type = private name = "private_0x000000cbfc9f0000" filename = "" Region: id = 442 start_va = 0xcbfca00000 end_va = 0xcbfcafffff entry_point = 0x0 region_type = private name = "private_0x000000cbfca00000" filename = "" Region: id = 443 start_va = 0xcbfcb00000 end_va = 0xcbfcc87fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfcb00000" filename = "" Region: id = 444 start_va = 0xcbfcc90000 end_va = 0xcbfcc93fff entry_point = 0xcbfcc90000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 445 start_va = 0xcbfcca0000 end_va = 0xcbfcca3fff entry_point = 0xcbfcca0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 446 start_va = 0xcbfccb0000 end_va = 0xcbfccb6fff entry_point = 0x0 region_type = private name = "private_0x000000cbfccb0000" filename = "" Region: id = 447 start_va = 0xcbfccc0000 end_va = 0xcbfccd0fff entry_point = 0xcbfccc0000 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\System32\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\propsys.dll.mui") Region: id = 448 start_va = 0xcbfcce0000 end_va = 0xcbfcce1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfcce0000" filename = "" Region: id = 449 start_va = 0xcbfccf0000 end_va = 0xcbfccf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfccf0000" filename = "" Region: id = 450 start_va = 0xcbfcd00000 end_va = 0xcbfcdfffff entry_point = 0x0 region_type = private name = "private_0x000000cbfcd00000" filename = "" Region: id = 451 start_va = 0xcbfce00000 end_va = 0xcbfcf80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfce00000" filename = "" Region: id = 452 start_va = 0xcbfcf90000 end_va = 0xcbfd04ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfcf90000" filename = "" Region: id = 453 start_va = 0xcbfd050000 end_va = 0xcbfd14ffff entry_point = 0x0 region_type = private name = "private_0x000000cbfd050000" filename = "" Region: id = 454 start_va = 0xcbfd150000 end_va = 0xcbfd1cffff entry_point = 0x0 region_type = private name = "private_0x000000cbfd150000" filename = "" Region: id = 455 start_va = 0xcbfd1d0000 end_va = 0xcbfd1d2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000cbfd1d0000" filename = "" Region: id = 456 start_va = 0xcbfd200000 end_va = 0xcbfd2fffff entry_point = 0x0 region_type = private name = "private_0x000000cbfd200000" filename = "" Region: id = 457 start_va = 0xcbfd300000 end_va = 0xcbfd3fffff entry_point = 0x0 region_type = private name = "private_0x000000cbfd300000" filename = "" Region: id = 458 start_va = 0xcbfd400000 end_va = 0xcbfd736fff entry_point = 0xcbfd400000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 459 start_va = 0xcbfd840000 end_va = 0xcbfd93ffff entry_point = 0x0 region_type = private name = "private_0x000000cbfd840000" filename = "" Region: id = 460 start_va = 0xcbfd940000 end_va = 0xcbfda3ffff entry_point = 0x0 region_type = private name = "private_0x000000cbfd940000" filename = "" Region: id = 461 start_va = 0xcbfda40000 end_va = 0xcbfda82fff entry_point = 0xcbfda40000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000f.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000f.db") Region: id = 462 start_va = 0xcbfda90000 end_va = 0xcbfdb1afff entry_point = 0xcbfda90000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 463 start_va = 0xcbfdb40000 end_va = 0xcbfdc3ffff entry_point = 0x0 region_type = private name = "private_0x000000cbfdb40000" filename = "" Region: id = 464 start_va = 0xcbfdc40000 end_va = 0xcbfdd3ffff entry_point = 0x0 region_type = private name = "private_0x000000cbfdc40000" filename = "" Region: id = 465 start_va = 0xcbfdd40000 end_va = 0xcbfddbffff entry_point = 0x0 region_type = private name = "private_0x000000cbfdd40000" filename = "" Region: id = 466 start_va = 0xcbfdde0000 end_va = 0xcbfdde6fff entry_point = 0x0 region_type = private name = "private_0x000000cbfdde0000" filename = "" Region: id = 467 start_va = 0xcbfde00000 end_va = 0xcbfdefffff entry_point = 0x0 region_type = private name = "private_0x000000cbfde00000" filename = "" Region: id = 468 start_va = 0xcbfdf00000 end_va = 0xcbfdffffff entry_point = 0x0 region_type = private name = "private_0x000000cbfdf00000" filename = "" Region: id = 469 start_va = 0xcbfe000000 end_va = 0xcbfe0fffff entry_point = 0x0 region_type = private name = "private_0x000000cbfe000000" filename = "" Region: id = 470 start_va = 0xcbfe180000 end_va = 0xcbfe27ffff entry_point = 0x0 region_type = private name = "private_0x000000cbfe180000" filename = "" Region: id = 471 start_va = 0xcbfe380000 end_va = 0xcbfe3fffff entry_point = 0x0 region_type = private name = "private_0x000000cbfe380000" filename = "" Region: id = 472 start_va = 0xcbfe400000 end_va = 0xcbfe4fffff entry_point = 0x0 region_type = private name = "private_0x000000cbfe400000" filename = "" Region: id = 473 start_va = 0xcbfe500000 end_va = 0xcbfe5fffff entry_point = 0x0 region_type = private name = "private_0x000000cbfe500000" filename = "" Region: id = 474 start_va = 0xcbfe600000 end_va = 0xcbfe6fffff entry_point = 0x0 region_type = private name = "private_0x000000cbfe600000" filename = "" Region: id = 475 start_va = 0xcbfe700000 end_va = 0xcbfe7fffff entry_point = 0x0 region_type = private name = "private_0x000000cbfe700000" filename = "" Region: id = 476 start_va = 0xcbfe800000 end_va = 0xcbfe8fffff entry_point = 0x0 region_type = private name = "private_0x000000cbfe800000" filename = "" Region: id = 477 start_va = 0xcbfe980000 end_va = 0xcbfe9fffff entry_point = 0x0 region_type = private name = "private_0x000000cbfe980000" filename = "" Region: id = 478 start_va = 0xcbfea80000 end_va = 0xcbfeb7ffff entry_point = 0x0 region_type = private name = "private_0x000000cbfea80000" filename = "" Region: id = 479 start_va = 0xcbfeb80000 end_va = 0xcbfec7ffff entry_point = 0x0 region_type = private name = "private_0x000000cbfeb80000" filename = "" Region: id = 480 start_va = 0xcbfed00000 end_va = 0xcbfedfffff entry_point = 0x0 region_type = private name = "private_0x000000cbfed00000" filename = "" Region: id = 481 start_va = 0xcbfee00000 end_va = 0xcbfee7ffff entry_point = 0x0 region_type = private name = "private_0x000000cbfee00000" filename = "" Region: id = 482 start_va = 0xcbfef80000 end_va = 0xcbfeffffff entry_point = 0x0 region_type = private name = "private_0x000000cbfef80000" filename = "" Region: id = 483 start_va = 0xcbff220000 end_va = 0xcbff226fff entry_point = 0x0 region_type = private name = "private_0x000000cbff220000" filename = "" Region: id = 484 start_va = 0xcbff300000 end_va = 0xcbff3fffff entry_point = 0x0 region_type = private name = "private_0x000000cbff300000" filename = "" Region: id = 485 start_va = 0xcbff500000 end_va = 0xcbff57ffff entry_point = 0x0 region_type = private name = "private_0x000000cbff500000" filename = "" Region: id = 486 start_va = 0xcbff580000 end_va = 0xcbff5fffff entry_point = 0x0 region_type = private name = "private_0x000000cbff580000" filename = "" Region: id = 487 start_va = 0xcbff600000 end_va = 0xcbff67ffff entry_point = 0x0 region_type = private name = "private_0x000000cbff600000" filename = "" Region: id = 488 start_va = 0xcbff680000 end_va = 0xcbff77ffff entry_point = 0x0 region_type = private name = "private_0x000000cbff680000" filename = "" Region: id = 489 start_va = 0xcbff780000 end_va = 0xcbff87ffff entry_point = 0x0 region_type = private name = "private_0x000000cbff780000" filename = "" Region: id = 490 start_va = 0xcbff900000 end_va = 0xcbff9fffff entry_point = 0x0 region_type = private name = "private_0x000000cbff900000" filename = "" Region: id = 491 start_va = 0xcbffb00000 end_va = 0xcbffbfffff entry_point = 0x0 region_type = private name = "private_0x000000cbffb00000" filename = "" Region: id = 492 start_va = 0xcbffd00000 end_va = 0xcbffddefff entry_point = 0xcbffd00000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 493 start_va = 0x7df5ff400000 end_va = 0x7ff5ff3fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff400000" filename = "" Region: id = 494 start_va = 0x7ff787420000 end_va = 0x7ff787421fff entry_point = 0x0 region_type = private name = "private_0x00007ff787420000" filename = "" Region: id = 495 start_va = 0x7ff787426000 end_va = 0x7ff787427fff entry_point = 0x0 region_type = private name = "private_0x00007ff787426000" filename = "" Region: id = 496 start_va = 0x7ff78742e000 end_va = 0x7ff78742ffff entry_point = 0x0 region_type = private name = "private_0x00007ff78742e000" filename = "" Region: id = 497 start_va = 0x7ff787430000 end_va = 0x7ff787431fff entry_point = 0x0 region_type = private name = "private_0x00007ff787430000" filename = "" Region: id = 498 start_va = 0x7ff787432000 end_va = 0x7ff787433fff entry_point = 0x0 region_type = private name = "private_0x00007ff787432000" filename = "" Region: id = 499 start_va = 0x7ff787434000 end_va = 0x7ff787435fff entry_point = 0x0 region_type = private name = "private_0x00007ff787434000" filename = "" Region: id = 500 start_va = 0x7ff787436000 end_va = 0x7ff787437fff entry_point = 0x0 region_type = private name = "private_0x00007ff787436000" filename = "" Region: id = 501 start_va = 0x7ff78743a000 end_va = 0x7ff78743bfff entry_point = 0x0 region_type = private name = "private_0x00007ff78743a000" filename = "" Region: id = 502 start_va = 0x7ff78743c000 end_va = 0x7ff78743dfff entry_point = 0x0 region_type = private name = "private_0x00007ff78743c000" filename = "" Region: id = 503 start_va = 0x7ff78743e000 end_va = 0x7ff78743ffff entry_point = 0x0 region_type = private name = "private_0x00007ff78743e000" filename = "" Region: id = 504 start_va = 0x7ff787444000 end_va = 0x7ff787445fff entry_point = 0x0 region_type = private name = "private_0x00007ff787444000" filename = "" Region: id = 505 start_va = 0x7ff78744a000 end_va = 0x7ff78744bfff entry_point = 0x0 region_type = private name = "private_0x00007ff78744a000" filename = "" Region: id = 506 start_va = 0x7ff78744c000 end_va = 0x7ff78744dfff entry_point = 0x0 region_type = private name = "private_0x00007ff78744c000" filename = "" Region: id = 507 start_va = 0x7ff78744e000 end_va = 0x7ff78744ffff entry_point = 0x0 region_type = private name = "private_0x00007ff78744e000" filename = "" Region: id = 508 start_va = 0x7ff787450000 end_va = 0x7ff787451fff entry_point = 0x0 region_type = private name = "private_0x00007ff787450000" filename = "" Region: id = 509 start_va = 0x7ff787454000 end_va = 0x7ff787455fff entry_point = 0x0 region_type = private name = "private_0x00007ff787454000" filename = "" Region: id = 510 start_va = 0x7ff787456000 end_va = 0x7ff787457fff entry_point = 0x0 region_type = private name = "private_0x00007ff787456000" filename = "" Region: id = 511 start_va = 0x7ff787458000 end_va = 0x7ff787459fff entry_point = 0x0 region_type = private name = "private_0x00007ff787458000" filename = "" Region: id = 512 start_va = 0x7ff78745a000 end_va = 0x7ff78745bfff entry_point = 0x0 region_type = private name = "private_0x00007ff78745a000" filename = "" Region: id = 513 start_va = 0x7ff787464000 end_va = 0x7ff787465fff entry_point = 0x0 region_type = private name = "private_0x00007ff787464000" filename = "" Region: id = 514 start_va = 0x7ff787468000 end_va = 0x7ff787469fff entry_point = 0x0 region_type = private name = "private_0x00007ff787468000" filename = "" Region: id = 515 start_va = 0x7ff78746c000 end_va = 0x7ff78746dfff entry_point = 0x0 region_type = private name = "private_0x00007ff78746c000" filename = "" Region: id = 516 start_va = 0x7ff78746e000 end_va = 0x7ff78746ffff entry_point = 0x0 region_type = private name = "private_0x00007ff78746e000" filename = "" Region: id = 517 start_va = 0x7ff787470000 end_va = 0x7ff787471fff entry_point = 0x0 region_type = private name = "private_0x00007ff787470000" filename = "" Region: id = 518 start_va = 0x7ff787472000 end_va = 0x7ff787473fff entry_point = 0x0 region_type = private name = "private_0x00007ff787472000" filename = "" Region: id = 519 start_va = 0x7ff787474000 end_va = 0x7ff787475fff entry_point = 0x0 region_type = private name = "private_0x00007ff787474000" filename = "" Region: id = 520 start_va = 0x7ff78747c000 end_va = 0x7ff78747dfff entry_point = 0x0 region_type = private name = "private_0x00007ff78747c000" filename = "" Region: id = 521 start_va = 0x7ff787480000 end_va = 0x7ff787481fff entry_point = 0x0 region_type = private name = "private_0x00007ff787480000" filename = "" Region: id = 522 start_va = 0x7ff787482000 end_va = 0x7ff787483fff entry_point = 0x0 region_type = private name = "private_0x00007ff787482000" filename = "" Region: id = 523 start_va = 0x7ff787486000 end_va = 0x7ff787487fff entry_point = 0x0 region_type = private name = "private_0x00007ff787486000" filename = "" Region: id = 524 start_va = 0x7ff787488000 end_va = 0x7ff787489fff entry_point = 0x0 region_type = private name = "private_0x00007ff787488000" filename = "" Region: id = 525 start_va = 0x7ff78748e000 end_va = 0x7ff78748ffff entry_point = 0x0 region_type = private name = "private_0x00007ff78748e000" filename = "" Region: id = 526 start_va = 0x7ff787490000 end_va = 0x7ff787491fff entry_point = 0x0 region_type = private name = "private_0x00007ff787490000" filename = "" Region: id = 527 start_va = 0x7ff787492000 end_va = 0x7ff787493fff entry_point = 0x0 region_type = private name = "private_0x00007ff787492000" filename = "" Region: id = 528 start_va = 0x7ff787494000 end_va = 0x7ff787495fff entry_point = 0x0 region_type = private name = "private_0x00007ff787494000" filename = "" Region: id = 529 start_va = 0x7ff787496000 end_va = 0x7ff787497fff entry_point = 0x0 region_type = private name = "private_0x00007ff787496000" filename = "" Region: id = 530 start_va = 0x7ff787498000 end_va = 0x7ff787499fff entry_point = 0x0 region_type = private name = "private_0x00007ff787498000" filename = "" Region: id = 531 start_va = 0x7ff78749a000 end_va = 0x7ff78749bfff entry_point = 0x0 region_type = private name = "private_0x00007ff78749a000" filename = "" Region: id = 532 start_va = 0x7ff78749c000 end_va = 0x7ff78749dfff entry_point = 0x0 region_type = private name = "private_0x00007ff78749c000" filename = "" Region: id = 533 start_va = 0x7ff78749e000 end_va = 0x7ff78749ffff entry_point = 0x0 region_type = private name = "private_0x00007ff78749e000" filename = "" Region: id = 534 start_va = 0x7ff7874a0000 end_va = 0x7ff7874a1fff entry_point = 0x0 region_type = private name = "private_0x00007ff7874a0000" filename = "" Region: id = 535 start_va = 0x7ff7874a2000 end_va = 0x7ff7874a3fff entry_point = 0x0 region_type = private name = "private_0x00007ff7874a2000" filename = "" Region: id = 536 start_va = 0x7ff7874a4000 end_va = 0x7ff7874a5fff entry_point = 0x0 region_type = private name = "private_0x00007ff7874a4000" filename = "" Region: id = 537 start_va = 0x7ff7874a6000 end_va = 0x7ff7874a7fff entry_point = 0x0 region_type = private name = "private_0x00007ff7874a6000" filename = "" Region: id = 538 start_va = 0x7ff7874a8000 end_va = 0x7ff7874a9fff entry_point = 0x0 region_type = private name = "private_0x00007ff7874a8000" filename = "" Region: id = 539 start_va = 0x7ff7874aa000 end_va = 0x7ff7874abfff entry_point = 0x0 region_type = private name = "private_0x00007ff7874aa000" filename = "" Region: id = 540 start_va = 0x7ff7874ac000 end_va = 0x7ff7874adfff entry_point = 0x0 region_type = private name = "private_0x00007ff7874ac000" filename = "" Region: id = 541 start_va = 0x7ff7874ae000 end_va = 0x7ff7874affff entry_point = 0x0 region_type = private name = "private_0x00007ff7874ae000" filename = "" Region: id = 542 start_va = 0x7ff7874b0000 end_va = 0x7ff7875affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7874b0000" filename = "" Region: id = 543 start_va = 0x7ff7875b0000 end_va = 0x7ff7875d2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7875b0000" filename = "" Region: id = 544 start_va = 0x7ff7875d4000 end_va = 0x7ff7875d4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7875d4000" filename = "" Region: id = 545 start_va = 0x7ff7875d6000 end_va = 0x7ff7875d7fff entry_point = 0x0 region_type = private name = "private_0x00007ff7875d6000" filename = "" Region: id = 546 start_va = 0x7ff7875d8000 end_va = 0x7ff7875d9fff entry_point = 0x0 region_type = private name = "private_0x00007ff7875d8000" filename = "" Region: id = 547 start_va = 0x7ff7875da000 end_va = 0x7ff7875dbfff entry_point = 0x0 region_type = private name = "private_0x00007ff7875da000" filename = "" Region: id = 548 start_va = 0x7ff7875dc000 end_va = 0x7ff7875ddfff entry_point = 0x0 region_type = private name = "private_0x00007ff7875dc000" filename = "" Region: id = 549 start_va = 0x7ff7875de000 end_va = 0x7ff7875dffff entry_point = 0x0 region_type = private name = "private_0x00007ff7875de000" filename = "" Region: id = 550 start_va = 0x7ff787ec0000 end_va = 0x7ff787eccfff entry_point = 0x7ff787ec0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 551 start_va = 0x7ffadc0c0000 end_va = 0x7ffadc36ffff entry_point = 0x7ffadc0c0000 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 552 start_va = 0x7ffadf670000 end_va = 0x7ffadf6c7fff entry_point = 0x7ffadf670000 region_type = mapped_file name = "newdev.dll" filename = "\\Windows\\System32\\newdev.dll" (normalized: "c:\\windows\\system32\\newdev.dll") Region: id = 553 start_va = 0x7ffadf6d0000 end_va = 0x7ffadf730fff entry_point = 0x7ffadf6d0000 region_type = mapped_file name = "wuuhext.dll" filename = "\\Windows\\System32\\wuuhext.dll" (normalized: "c:\\windows\\system32\\wuuhext.dll") Region: id = 554 start_va = 0x7ffadf740000 end_va = 0x7ffadf969fff entry_point = 0x7ffadf740000 region_type = mapped_file name = "wuaueng.dll" filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll") Region: id = 555 start_va = 0x7ffae0c00000 end_va = 0x7ffae0cc3fff entry_point = 0x7ffae0c00000 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 556 start_va = 0x7ffae1820000 end_va = 0x7ffae18a3fff entry_point = 0x7ffae1820000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 557 start_va = 0x7ffae5a10000 end_va = 0x7ffae5a4ffff entry_point = 0x7ffae5a10000 region_type = mapped_file name = "updatehandlers.dll" filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll") Region: id = 558 start_va = 0x7ffae60a0000 end_va = 0x7ffae60b1fff entry_point = 0x7ffae60a0000 region_type = mapped_file name = "bitsproxy.dll" filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll") Region: id = 559 start_va = 0x7ffae6330000 end_va = 0x7ffae6395fff entry_point = 0x7ffae6330000 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 560 start_va = 0x7ffae63a0000 end_va = 0x7ffae63b2fff entry_point = 0x7ffae63a0000 region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 561 start_va = 0x7ffae63c0000 end_va = 0x7ffae63cafff entry_point = 0x7ffae63c0000 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 562 start_va = 0x7ffae63d0000 end_va = 0x7ffae64f0fff entry_point = 0x7ffae63d0000 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 563 start_va = 0x7ffae8b60000 end_va = 0x7ffae8fc9fff entry_point = 0x7ffae8b60000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 564 start_va = 0x7ffae9240000 end_va = 0x7ffae92c2fff entry_point = 0x7ffae9240000 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 565 start_va = 0x7ffae92d0000 end_va = 0x7ffae92e5fff entry_point = 0x7ffae92d0000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 566 start_va = 0x7ffae92f0000 end_va = 0x7ffae93c7fff entry_point = 0x7ffae92f0000 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 567 start_va = 0x7ffae93d0000 end_va = 0x7ffae9432fff entry_point = 0x7ffae93d0000 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 568 start_va = 0x7ffae9440000 end_va = 0x7ffae9464fff entry_point = 0x7ffae9440000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 569 start_va = 0x7ffae9470000 end_va = 0x7ffae9483fff entry_point = 0x7ffae9470000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 570 start_va = 0x7ffae9490000 end_va = 0x7ffae9587fff entry_point = 0x7ffae9490000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 571 start_va = 0x7ffae9590000 end_va = 0x7ffae9602fff entry_point = 0x7ffae9590000 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 572 start_va = 0x7ffae9610000 end_va = 0x7ffae9746fff entry_point = 0x7ffae9610000 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 573 start_va = 0x7ffae9fa0000 end_va = 0x7ffae9fb0fff entry_point = 0x7ffae9fa0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 574 start_va = 0x7ffae9fc0000 end_va = 0x7ffae9fd0fff entry_point = 0x7ffae9fc0000 region_type = mapped_file name = "tetheringclient.dll" filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll") Region: id = 575 start_va = 0x7ffae9fe0000 end_va = 0x7ffaea05ffff entry_point = 0x7ffae9fe0000 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 576 start_va = 0x7ffaea0a0000 end_va = 0x7ffaea11ffff entry_point = 0x7ffaea0a0000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 577 start_va = 0x7ffaea5c0000 end_va = 0x7ffaea5d0fff entry_point = 0x7ffaea5c0000 region_type = mapped_file name = "credentialmigrationhandler.dll" filename = "\\Windows\\System32\\CredentialMigrationHandler.dll" (normalized: "c:\\windows\\system32\\credentialmigrationhandler.dll") Region: id = 578 start_va = 0x7ffaea5e0000 end_va = 0x7ffaea856fff entry_point = 0x7ffaea5e0000 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 579 start_va = 0x7ffaea860000 end_va = 0x7ffaea876fff entry_point = 0x7ffaea860000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 580 start_va = 0x7ffaea880000 end_va = 0x7ffaea8c5fff entry_point = 0x7ffaea880000 region_type = mapped_file name = "adsldp.dll" filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll") Region: id = 581 start_va = 0x7ffaea8d0000 end_va = 0x7ffaea90ffff entry_point = 0x7ffaea8d0000 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll") Region: id = 582 start_va = 0x7ffaea910000 end_va = 0x7ffaea957fff entry_point = 0x7ffaea910000 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll") Region: id = 583 start_va = 0x7ffaea980000 end_va = 0x7ffaea994fff entry_point = 0x7ffaea980000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 584 start_va = 0x7ffaea9a0000 end_va = 0x7ffaea9b9fff entry_point = 0x7ffaea9a0000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 585 start_va = 0x7ffaea9c0000 end_va = 0x7ffaea9ccfff entry_point = 0x7ffaea9c0000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 586 start_va = 0x7ffaea9d0000 end_va = 0x7ffaea9e1fff entry_point = 0x7ffaea9d0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 587 start_va = 0x7ffaeae70000 end_va = 0x7ffaeaf06fff entry_point = 0x7ffaeae70000 region_type = mapped_file name = "settingsync.dll" filename = "\\Windows\\System32\\SettingSync.dll" (normalized: "c:\\windows\\system32\\settingsync.dll") Region: id = 588 start_va = 0x7ffaeaf10000 end_va = 0x7ffaeaf20fff entry_point = 0x7ffaeaf10000 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 589 start_va = 0x7ffaeb090000 end_va = 0x7ffaeb371fff entry_point = 0x7ffaeb090000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 590 start_va = 0x7ffaeb520000 end_va = 0x7ffaeb52dfff entry_point = 0x7ffaeb520000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 591 start_va = 0x7ffaeb690000 end_va = 0x7ffaeb6eefff entry_point = 0x7ffaeb690000 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 592 start_va = 0x7ffaeb700000 end_va = 0x7ffaeb9a6fff entry_point = 0x7ffaeb700000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 593 start_va = 0x7ffaebb50000 end_va = 0x7ffaebb5bfff entry_point = 0x7ffaebb50000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 594 start_va = 0x7ffaebc80000 end_va = 0x7ffaebc94fff entry_point = 0x7ffaebc80000 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 595 start_va = 0x7ffaebca0000 end_va = 0x7ffaebce0fff entry_point = 0x7ffaebca0000 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 596 start_va = 0x7ffaebd70000 end_va = 0x7ffaec0acfff entry_point = 0x7ffaebd70000 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 597 start_va = 0x7ffaec0b0000 end_va = 0x7ffaec0ccfff entry_point = 0x7ffaec0b0000 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 598 start_va = 0x7ffaec0d0000 end_va = 0x7ffaec133fff entry_point = 0x7ffaec0d0000 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 599 start_va = 0x7ffaec140000 end_va = 0x7ffaec17efff entry_point = 0x7ffaec140000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 600 start_va = 0x7ffaec180000 end_va = 0x7ffaec197fff entry_point = 0x7ffaec180000 region_type = mapped_file name = "adhsvc.dll" filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll") Region: id = 601 start_va = 0x7ffaec1a0000 end_va = 0x7ffaec1c2fff entry_point = 0x7ffaec1a0000 region_type = mapped_file name = "httpprxm.dll" filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll") Region: id = 602 start_va = 0x7ffaec1d0000 end_va = 0x7ffaec214fff entry_point = 0x7ffaec1d0000 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 603 start_va = 0x7ffaec220000 end_va = 0x7ffaec310fff entry_point = 0x7ffaec220000 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 604 start_va = 0x7ffaec320000 end_va = 0x7ffaec334fff entry_point = 0x7ffaec320000 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 605 start_va = 0x7ffaec410000 end_va = 0x7ffaec419fff entry_point = 0x7ffaec410000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 606 start_va = 0x7ffaec420000 end_va = 0x7ffaec437fff entry_point = 0x7ffaec420000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 607 start_va = 0x7ffaec440000 end_va = 0x7ffaec5c2fff entry_point = 0x7ffaec440000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 608 start_va = 0x7ffaec5d0000 end_va = 0x7ffaec66efff entry_point = 0x7ffaec5d0000 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 609 start_va = 0x7ffaec670000 end_va = 0x7ffaec6cafff entry_point = 0x7ffaec670000 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 610 start_va = 0x7ffaec6d0000 end_va = 0x7ffaec6fdfff entry_point = 0x7ffaec6d0000 region_type = mapped_file name = "wmidcom.dll" filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll") Region: id = 611 start_va = 0x7ffaec700000 end_va = 0x7ffaec75cfff entry_point = 0x7ffaec700000 region_type = mapped_file name = "miutils.dll" filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll") Region: id = 612 start_va = 0x7ffaec760000 end_va = 0x7ffaec77ffff entry_point = 0x7ffaec760000 region_type = mapped_file name = "mi.dll" filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll") Region: id = 613 start_va = 0x7ffaec780000 end_va = 0x7ffaec787fff entry_point = 0x7ffaec780000 region_type = mapped_file name = "sscoreext.dll" filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll") Region: id = 614 start_va = 0x7ffaec790000 end_va = 0x7ffaec7a0fff entry_point = 0x7ffaec790000 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 615 start_va = 0x7ffaecf20000 end_va = 0x7ffaecf38fff entry_point = 0x7ffaecf20000 region_type = mapped_file name = "usoapi.dll" filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll") Region: id = 616 start_va = 0x7ffaecf80000 end_va = 0x7ffaecf92fff entry_point = 0x7ffaecf80000 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll") Region: id = 617 start_va = 0x7ffaecfa0000 end_va = 0x7ffaecfb3fff entry_point = 0x7ffaecfa0000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 618 start_va = 0x7ffaed150000 end_va = 0x7ffaed16cfff entry_point = 0x7ffaed150000 region_type = mapped_file name = "updatepolicy.dll" filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll") Region: id = 619 start_va = 0x7ffaed170000 end_va = 0x7ffaed177fff entry_point = 0x7ffaed170000 region_type = mapped_file name = "dmiso8601utils.dll" filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll") Region: id = 620 start_va = 0x7ffaef0b0000 end_va = 0x7ffaef0c6fff entry_point = 0x7ffaef0b0000 region_type = mapped_file name = "dmcmnutils.dll" filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll") Region: id = 621 start_va = 0x7ffaef0d0000 end_va = 0x7ffaef0ecfff entry_point = 0x7ffaef0d0000 region_type = mapped_file name = "appinfo.dll" filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll") Region: id = 622 start_va = 0x7ffaef360000 end_va = 0x7ffaef391fff entry_point = 0x7ffaef360000 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll") Region: id = 623 start_va = 0x7ffaef4e0000 end_va = 0x7ffaef506fff entry_point = 0x7ffaef4e0000 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 624 start_va = 0x7ffaef510000 end_va = 0x7ffaef55bfff entry_point = 0x7ffaef510000 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 625 start_va = 0x7ffaef560000 end_va = 0x7ffaef5defff entry_point = 0x7ffaef560000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 626 start_va = 0x7ffaef5e0000 end_va = 0x7ffaef61bfff entry_point = 0x7ffaef5e0000 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 627 start_va = 0x7ffaef620000 end_va = 0x7ffaef6f5fff entry_point = 0x7ffaef620000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 628 start_va = 0x7ffaef7b0000 end_va = 0x7ffaef841fff entry_point = 0x7ffaef7b0000 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 629 start_va = 0x7ffaef850000 end_va = 0x7ffaef888fff entry_point = 0x7ffaef850000 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 630 start_va = 0x7ffaef890000 end_va = 0x7ffaef898fff entry_point = 0x7ffaef890000 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 631 start_va = 0x7ffaef8a0000 end_va = 0x7ffaef8d4fff entry_point = 0x7ffaef8a0000 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll") Region: id = 632 start_va = 0x7ffaef9c0000 end_va = 0x7ffaef9f5fff entry_point = 0x7ffaef9c0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 633 start_va = 0x7ffaf0560000 end_va = 0x7ffaf0568fff entry_point = 0x7ffaf0560000 region_type = mapped_file name = "proximitycommonpal.dll" filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll") Region: id = 634 start_va = 0x7ffaf0570000 end_va = 0x7ffaf059cfff entry_point = 0x7ffaf0570000 region_type = mapped_file name = "proximitycommon.dll" filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll") Region: id = 635 start_va = 0x7ffaf05a0000 end_va = 0x7ffaf05affff entry_point = 0x7ffaf05a0000 region_type = mapped_file name = "proximityservicepal.dll" filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll") Region: id = 636 start_va = 0x7ffaf05b0000 end_va = 0x7ffaf0600fff entry_point = 0x7ffaf05b0000 region_type = mapped_file name = "proximityservice.dll" filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll") Region: id = 637 start_va = 0x7ffaf0610000 end_va = 0x7ffaf061bfff entry_point = 0x7ffaf0610000 region_type = mapped_file name = "fvecerts.dll" filename = "\\Windows\\System32\\fvecerts.dll" (normalized: "c:\\windows\\system32\\fvecerts.dll") Region: id = 638 start_va = 0x7ffaf0680000 end_va = 0x7ffaf073dfff entry_point = 0x7ffaf0680000 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 639 start_va = 0x7ffaf0740000 end_va = 0x7ffaf07d5fff entry_point = 0x7ffaf0740000 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 640 start_va = 0x7ffaf07f0000 end_va = 0x7ffaf0809fff entry_point = 0x7ffaf07f0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 641 start_va = 0x7ffaf0810000 end_va = 0x7ffaf0825fff entry_point = 0x7ffaf0810000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 642 start_va = 0x7ffaf0920000 end_va = 0x7ffaf0987fff entry_point = 0x7ffaf0920000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 643 start_va = 0x7ffaf0a90000 end_va = 0x7ffaf0aabfff entry_point = 0x7ffaf0a90000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 644 start_va = 0x7ffaf0de0000 end_va = 0x7ffaf0f10fff entry_point = 0x7ffaf0de0000 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 645 start_va = 0x7ffaf0f20000 end_va = 0x7ffaf0f5dfff entry_point = 0x7ffaf0f20000 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 646 start_va = 0x7ffaf0f60000 end_va = 0x7ffaf0f77fff entry_point = 0x7ffaf0f60000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 647 start_va = 0x7ffaf0f80000 end_va = 0x7ffaf1033fff entry_point = 0x7ffaf0f80000 region_type = mapped_file name = "usermgr.dll" filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll") Region: id = 648 start_va = 0x7ffaf1040000 end_va = 0x7ffaf11c2fff entry_point = 0x7ffaf1040000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 649 start_va = 0x7ffaf12a0000 end_va = 0x7ffaf12ccfff entry_point = 0x7ffaf12a0000 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 650 start_va = 0x7ffaf12d0000 end_va = 0x7ffaf12dffff entry_point = 0x7ffaf12d0000 region_type = mapped_file name = "timebrokerclient.dll" filename = "\\Windows\\System32\\TimeBrokerClient.dll" (normalized: "c:\\windows\\system32\\timebrokerclient.dll") Region: id = 651 start_va = 0x7ffaf12e0000 end_va = 0x7ffaf130dfff entry_point = 0x7ffaf12e0000 region_type = mapped_file name = "wptaskscheduler.dll" filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll") Region: id = 652 start_va = 0x7ffaf1310000 end_va = 0x7ffaf1326fff entry_point = 0x7ffaf1310000 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 653 start_va = 0x7ffaf1330000 end_va = 0x7ffaf1371fff entry_point = 0x7ffaf1330000 region_type = mapped_file name = "mstask.dll" filename = "\\Windows\\System32\\mstask.dll" (normalized: "c:\\windows\\system32\\mstask.dll") Region: id = 654 start_va = 0x7ffaf1380000 end_va = 0x7ffaf1395fff entry_point = 0x7ffaf1380000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 655 start_va = 0x7ffaf13a0000 end_va = 0x7ffaf13affff entry_point = 0x7ffaf13a0000 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 656 start_va = 0x7ffaf13b0000 end_va = 0x7ffaf141dfff entry_point = 0x7ffaf13b0000 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 657 start_va = 0x7ffaf1420000 end_va = 0x7ffaf1430fff entry_point = 0x7ffaf1420000 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 658 start_va = 0x7ffaf1440000 end_va = 0x7ffaf144cfff entry_point = 0x7ffaf1440000 region_type = mapped_file name = "csystemeventsbrokerclient.dll" filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll") Region: id = 659 start_va = 0x7ffaf1450000 end_va = 0x7ffaf148ffff entry_point = 0x7ffaf1450000 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 660 start_va = 0x7ffaf1490000 end_va = 0x7ffaf158bfff entry_point = 0x7ffaf1490000 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 661 start_va = 0x7ffaf1590000 end_va = 0x7ffaf1609fff entry_point = 0x7ffaf1590000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 662 start_va = 0x7ffaf1620000 end_va = 0x7ffaf1632fff entry_point = 0x7ffaf1620000 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 663 start_va = 0x7ffaf1640000 end_va = 0x7ffaf16fffff entry_point = 0x7ffaf1640000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 664 start_va = 0x7ffaf1700000 end_va = 0x7ffaf171dfff entry_point = 0x7ffaf1700000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 665 start_va = 0x7ffaf1720000 end_va = 0x7ffaf1746fff entry_point = 0x7ffaf1720000 region_type = mapped_file name = "profsvcext.dll" filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll") Region: id = 666 start_va = 0x7ffaf1750000 end_va = 0x7ffaf17a4fff entry_point = 0x7ffaf1750000 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 667 start_va = 0x7ffaf1880000 end_va = 0x7ffaf18e4fff entry_point = 0x7ffaf1880000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 668 start_va = 0x7ffaf1940000 end_va = 0x7ffaf194afff entry_point = 0x7ffaf1940000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 669 start_va = 0x7ffaf1960000 end_va = 0x7ffaf1997fff entry_point = 0x7ffaf1960000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 670 start_va = 0x7ffaf1b60000 end_va = 0x7ffaf1b69fff entry_point = 0x7ffaf1b60000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 671 start_va = 0x7ffaf1b70000 end_va = 0x7ffaf1b87fff entry_point = 0x7ffaf1b70000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 672 start_va = 0x7ffaf1b90000 end_va = 0x7ffaf1cdcfff entry_point = 0x7ffaf1b90000 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 673 start_va = 0x7ffaf2a00000 end_va = 0x7ffaf2a12fff entry_point = 0x7ffaf2a00000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 674 start_va = 0x7ffaf2b90000 end_va = 0x7ffaf2c07fff entry_point = 0x7ffaf2b90000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 675 start_va = 0x7ffaf2d10000 end_va = 0x7ffaf2da5fff entry_point = 0x7ffaf2d10000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 676 start_va = 0x7ffaf2db0000 end_va = 0x7ffaf2dd6fff entry_point = 0x7ffaf2db0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 677 start_va = 0x7ffaf2e10000 end_va = 0x7ffaf2e1bfff entry_point = 0x7ffaf2e10000 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 678 start_va = 0x7ffaf3170000 end_va = 0x7ffaf31a1fff entry_point = 0x7ffaf3170000 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 679 start_va = 0x7ffaf31b0000 end_va = 0x7ffaf3231fff entry_point = 0x7ffaf31b0000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 680 start_va = 0x7ffaf3360000 end_va = 0x7ffaf3382fff entry_point = 0x7ffaf3360000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 681 start_va = 0x7ffaf3490000 end_va = 0x7ffaf349bfff entry_point = 0x7ffaf3490000 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 682 start_va = 0x7ffaf3500000 end_va = 0x7ffaf3547fff entry_point = 0x7ffaf3500000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 683 start_va = 0x7ffaf35e0000 end_va = 0x7ffaf3637fff entry_point = 0x7ffaf35e0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 684 start_va = 0x7ffaf36d0000 end_va = 0x7ffaf36ebfff entry_point = 0x7ffaf36d0000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 685 start_va = 0x7ffaf36f0000 end_va = 0x7ffaf36fbfff entry_point = 0x7ffaf36f0000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 686 start_va = 0x7ffaf3700000 end_va = 0x7ffaf3725fff entry_point = 0x7ffaf3700000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 687 start_va = 0x7ffaf37e0000 end_va = 0x7ffaf3811fff entry_point = 0x7ffaf37e0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 688 start_va = 0x7ffaf38c0000 end_va = 0x7ffaf38c9fff entry_point = 0x7ffaf38c0000 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 689 start_va = 0x7ffaf3960000 end_va = 0x7ffaf3992fff entry_point = 0x7ffaf3960000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 690 start_va = 0x7ffaf3a50000 end_va = 0x7ffaf3a6efff entry_point = 0x7ffaf3a50000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 691 start_va = 0x7ffaf3a70000 end_va = 0x7ffaf3aadfff entry_point = 0x7ffaf3a70000 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 692 start_va = 0x7ffaf3ab0000 end_va = 0x7ffaf3b57fff entry_point = 0x7ffaf3ab0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 693 start_va = 0x7ffaf3ca0000 end_va = 0x7ffaf3cfcfff entry_point = 0x7ffaf3ca0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 694 start_va = 0x7ffaf3d00000 end_va = 0x7ffaf3d16fff entry_point = 0x7ffaf3d00000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 695 start_va = 0x7ffaf3ea0000 end_va = 0x7ffaf3ec0fff entry_point = 0x7ffaf3ea0000 region_type = mapped_file name = "joinutil.dll" filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll") Region: id = 696 start_va = 0x7ffaf3ed0000 end_va = 0x7ffaf3f05fff entry_point = 0x7ffaf3ed0000 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 697 start_va = 0x7ffaf4180000 end_va = 0x7ffaf41a5fff entry_point = 0x7ffaf4180000 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 698 start_va = 0x7ffaf41b0000 end_va = 0x7ffaf41dbfff entry_point = 0x7ffaf41b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 699 start_va = 0x7ffaf41e0000 end_va = 0x7ffaf41eafff entry_point = 0x7ffaf41e0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 700 start_va = 0x7ffaf4230000 end_va = 0x7ffaf4249fff entry_point = 0x7ffaf4230000 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 701 start_va = 0x7ffaf4250000 end_va = 0x7ffaf4257fff entry_point = 0x7ffaf4250000 region_type = mapped_file name = "dabapi.dll" filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll") Region: id = 702 start_va = 0x7ffaf4260000 end_va = 0x7ffaf4287fff entry_point = 0x7ffaf4260000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 703 start_va = 0x7ffaf4290000 end_va = 0x7ffaf42fafff entry_point = 0x7ffaf4290000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 704 start_va = 0x7ffaf4300000 end_va = 0x7ffaf4397fff entry_point = 0x7ffaf4300000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 705 start_va = 0x7ffaf4440000 end_va = 0x7ffaf4489fff entry_point = 0x7ffaf4440000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 706 start_va = 0x7ffaf4490000 end_va = 0x7ffaf44a2fff entry_point = 0x7ffaf4490000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 707 start_va = 0x7ffaf44b0000 end_va = 0x7ffaf44c0fff entry_point = 0x7ffaf44b0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 708 start_va = 0x7ffaf44d0000 end_va = 0x7ffaf44defff entry_point = 0x7ffaf44d0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 709 start_va = 0x7ffaf44e0000 end_va = 0x7ffaf4533fff entry_point = 0x7ffaf44e0000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 710 start_va = 0x7ffaf4540000 end_va = 0x7ffaf4583fff entry_point = 0x7ffaf4540000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 711 start_va = 0x7ffaf4590000 end_va = 0x7ffaf4bb7fff entry_point = 0x7ffaf4590000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 712 start_va = 0x7ffaf4bc0000 end_va = 0x7ffaf4c72fff entry_point = 0x7ffaf4bc0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 713 start_va = 0x7ffaf4c80000 end_va = 0x7ffaf4e40fff entry_point = 0x7ffaf4c80000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 714 start_va = 0x7ffaf4e50000 end_va = 0x7ffaf502cfff entry_point = 0x7ffaf4e50000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 715 start_va = 0x7ffaf50e0000 end_va = 0x7ffaf513afff entry_point = 0x7ffaf50e0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 716 start_va = 0x7ffaf5140000 end_va = 0x7ffaf528dfff entry_point = 0x7ffaf5140000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 717 start_va = 0x7ffaf5290000 end_va = 0x7ffaf53b5fff entry_point = 0x7ffaf5290000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 718 start_va = 0x7ffaf55b0000 end_va = 0x7ffaf56f0fff entry_point = 0x7ffaf55b0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 719 start_va = 0x7ffaf5700000 end_va = 0x7ffaf579cfff entry_point = 0x7ffaf5700000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 720 start_va = 0x7ffaf57a0000 end_va = 0x7ffaf57fafff entry_point = 0x7ffaf57a0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 721 start_va = 0x7ffaf5800000 end_va = 0x7ffaf5984fff entry_point = 0x7ffaf5800000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 722 start_va = 0x7ffaf5990000 end_va = 0x7ffaf6eb4fff entry_point = 0x7ffaf5990000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 723 start_va = 0x7ffaf6ec0000 end_va = 0x7ffaf6f64fff entry_point = 0x7ffaf6ec0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 724 start_va = 0x7ffaf70d0000 end_va = 0x7ffaf717cfff entry_point = 0x7ffaf70d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 725 start_va = 0x7ffaf7190000 end_va = 0x7ffaf724dfff entry_point = 0x7ffaf7190000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 726 start_va = 0x7ffaf72e0000 end_va = 0x7ffaf755bfff entry_point = 0x7ffaf72e0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 727 start_va = 0x7ffaf7560000 end_va = 0x7ffaf75c8fff entry_point = 0x7ffaf7560000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 728 start_va = 0x7ffaf75d0000 end_va = 0x7ffaf7675fff entry_point = 0x7ffaf75d0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 729 start_va = 0x7ffaf7680000 end_va = 0x7ffaf7687fff entry_point = 0x7ffaf7680000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 730 start_va = 0x7ffaf7690000 end_va = 0x7ffaf7854fff entry_point = 0x7ffaf7690000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 731 start_va = 0x7ffaf7860000 end_va = 0x7ffaf78b0fff entry_point = 0x7ffaf7860000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 732 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1034 start_va = 0xcb80740000 end_va = 0xcb8074ffff entry_point = 0xcb80740000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1035 start_va = 0xcb80750000 end_va = 0xcb8075ffff entry_point = 0xcb80750000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1036 start_va = 0xcb80760000 end_va = 0xcb8076ffff entry_point = 0xcb80760000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1037 start_va = 0xcb80770000 end_va = 0xcb8077ffff entry_point = 0xcb80770000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1038 start_va = 0xcb80780000 end_va = 0xcb8078ffff entry_point = 0xcb80780000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1039 start_va = 0xcb80790000 end_va = 0xcb8079ffff entry_point = 0xcb80790000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1040 start_va = 0xcb807a0000 end_va = 0xcb807affff entry_point = 0xcb807a0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1041 start_va = 0xcb807b0000 end_va = 0xcb807bffff entry_point = 0xcb807b0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1042 start_va = 0xcb807c0000 end_va = 0xcb807cffff entry_point = 0xcb807c0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1043 start_va = 0xcb8c100000 end_va = 0xcb8c1fffff entry_point = 0x0 region_type = private name = "private_0x000000cb8c100000" filename = "" Region: id = 1044 start_va = 0x7ff78748c000 end_va = 0x7ff78748dfff entry_point = 0x0 region_type = private name = "private_0x00007ff78748c000" filename = "" Region: id = 1045 start_va = 0x7ffae9770000 end_va = 0x7ffae9797fff entry_point = 0x7ffae9770000 region_type = mapped_file name = "dssenh.dll" filename = "\\Windows\\System32\\dssenh.dll" (normalized: "c:\\windows\\system32\\dssenh.dll") Region: id = 1182 start_va = 0xcb80400000 end_va = 0xcb8040ffff entry_point = 0xcb80400000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1183 start_va = 0xcb80410000 end_va = 0xcb8041ffff entry_point = 0xcb80410000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1184 start_va = 0xcb80420000 end_va = 0xcb8042ffff entry_point = 0xcb80420000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1185 start_va = 0xcb80430000 end_va = 0xcb8043ffff entry_point = 0xcb80430000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1186 start_va = 0xcb80440000 end_va = 0xcb8044ffff entry_point = 0xcb80440000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1187 start_va = 0xcb80450000 end_va = 0xcb8045ffff entry_point = 0xcb80450000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1188 start_va = 0xcb80460000 end_va = 0xcb8046ffff entry_point = 0xcb80460000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1189 start_va = 0xcb80470000 end_va = 0xcb8047ffff entry_point = 0xcb80470000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1190 start_va = 0xcb80480000 end_va = 0xcb8048ffff entry_point = 0xcb80480000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1191 start_va = 0xcb80490000 end_va = 0xcb8049ffff entry_point = 0xcb80490000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1192 start_va = 0xcb804a0000 end_va = 0xcb804affff entry_point = 0xcb804a0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1193 start_va = 0xcb804b0000 end_va = 0xcb804bffff entry_point = 0xcb804b0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1194 start_va = 0xcb804c0000 end_va = 0xcb804cffff entry_point = 0xcb804c0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1195 start_va = 0xcb804d0000 end_va = 0xcb804dffff entry_point = 0xcb804d0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1196 start_va = 0xcb804e0000 end_va = 0xcb804effff entry_point = 0xcb804e0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1197 start_va = 0xcb804f0000 end_va = 0xcb804fffff entry_point = 0xcb804f0000 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1198 start_va = 0xcb80770000 end_va = 0xcb807effff entry_point = 0x0 region_type = private name = "private_0x000000cb80770000" filename = "" Region: id = 1199 start_va = 0xcb807f0000 end_va = 0xcb8086ffff entry_point = 0x0 region_type = private name = "private_0x000000cb807f0000" filename = "" Region: id = 1200 start_va = 0xcb8bd00000 end_va = 0xcb8bdfffff entry_point = 0x0 region_type = private name = "private_0x000000cb8bd00000" filename = "" Region: id = 1201 start_va = 0xcb8c200000 end_va = 0xcb8c2fffff entry_point = 0x0 region_type = private name = "private_0x000000cb8c200000" filename = "" Region: id = 1202 start_va = 0x7ff78747a000 end_va = 0x7ff78747bfff entry_point = 0x0 region_type = private name = "private_0x00007ff78747a000" filename = "" Region: id = 1203 start_va = 0x7ff78747e000 end_va = 0x7ff78747ffff entry_point = 0x0 region_type = private name = "private_0x00007ff78747e000" filename = "" Region: id = 1204 start_va = 0x7ff787484000 end_va = 0x7ff787485fff entry_point = 0x0 region_type = private name = "private_0x00007ff787484000" filename = "" Region: id = 1205 start_va = 0x7ff78748a000 end_va = 0x7ff78748bfff entry_point = 0x0 region_type = private name = "private_0x00007ff78748a000" filename = "" Region: id = 1206 start_va = 0x7ffaefc40000 end_va = 0x7ffaefc8ffff entry_point = 0x7ffaefc40000 region_type = mapped_file name = "cscobj.dll" filename = "\\Windows\\System32\\cscobj.dll" (normalized: "c:\\windows\\system32\\cscobj.dll") Thread: id = 10 os_tid = 0x814 Thread: id = 11 os_tid = 0xa74 Thread: id = 12 os_tid = 0xbe4 Thread: id = 13 os_tid = 0xe68 Thread: id = 14 os_tid = 0xe6c Thread: id = 15 os_tid = 0xcf0 Thread: id = 16 os_tid = 0x388 Thread: id = 17 os_tid = 0xfa8 Thread: id = 18 os_tid = 0xf0c Thread: id = 19 os_tid = 0xef4 Thread: id = 20 os_tid = 0xee4 Thread: id = 21 os_tid = 0xee0 Thread: id = 22 os_tid = 0xed8 Thread: id = 23 os_tid = 0x738 Thread: id = 24 os_tid = 0x260 Thread: id = 25 os_tid = 0x8a0 Thread: id = 26 os_tid = 0x89c Thread: id = 27 os_tid = 0x7b8 Thread: id = 28 os_tid = 0x7b4 Thread: id = 29 os_tid = 0x79c Thread: id = 30 os_tid = 0x794 Thread: id = 31 os_tid = 0x774 Thread: id = 32 os_tid = 0x754 Thread: id = 33 os_tid = 0x74c Thread: id = 34 os_tid = 0x740 Thread: id = 35 os_tid = 0x6d0 Thread: id = 36 os_tid = 0x64c Thread: id = 37 os_tid = 0x638 Thread: id = 38 os_tid = 0x628 Thread: id = 39 os_tid = 0x620 Thread: id = 40 os_tid = 0x600 Thread: id = 41 os_tid = 0x5ec Thread: id = 42 os_tid = 0x5d0 Thread: id = 43 os_tid = 0x5b4 Thread: id = 44 os_tid = 0x5ac Thread: id = 45 os_tid = 0x5a4 Thread: id = 46 os_tid = 0x5a0 Thread: id = 47 os_tid = 0x55c Thread: id = 48 os_tid = 0x4f0 Thread: id = 49 os_tid = 0x4ec Thread: id = 50 os_tid = 0x130 Thread: id = 51 os_tid = 0x168 Thread: id = 52 os_tid = 0x11c Thread: id = 53 os_tid = 0xfc Thread: id = 54 os_tid = 0xf8 Thread: id = 55 os_tid = 0xf4 Thread: id = 56 os_tid = 0x3fc Thread: id = 57 os_tid = 0x3e8 Thread: id = 58 os_tid = 0x3c8 Thread: id = 59 os_tid = 0x3c4 Thread: id = 60 os_tid = 0x3c0 Thread: id = 61 os_tid = 0x3a0 Thread: id = 62 os_tid = 0x31c Thread: id = 94 os_tid = 0xd64 Thread: id = 95 os_tid = 0xd60 Thread: id = 103 os_tid = 0xf68 Thread: id = 104 os_tid = 0xf7c Thread: id = 105 os_tid = 0xf64 Thread: id = 106 os_tid = 0xf5c Thread: id = 109 os_tid = 0xfc0 Thread: id = 110 os_tid = 0xfcc Thread: id = 111 os_tid = 0xc10 Thread: id = 112 os_tid = 0xa34 Thread: id = 113 os_tid = 0xccc Thread: id = 114 os_tid = 0xfe0 Thread: id = 115 os_tid = 0x4c0 Thread: id = 116 os_tid = 0xce8 Process: id = "3" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x6e73b000" os_pid = "0xe1c" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x318" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0008de2e" [0xc000000f] Region: id = 734 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 735 start_va = 0x43d8610000 end_va = 0x43d861ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d8610000" filename = "" Region: id = 736 start_va = 0x43d8620000 end_va = 0x43d8626fff entry_point = 0x0 region_type = private name = "private_0x00000043d8620000" filename = "" Region: id = 737 start_va = 0x43d8630000 end_va = 0x43d8643fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d8630000" filename = "" Region: id = 738 start_va = 0x43d8650000 end_va = 0x43d86cffff entry_point = 0x0 region_type = private name = "private_0x00000043d8650000" filename = "" Region: id = 739 start_va = 0x43d86d0000 end_va = 0x43d86d3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d86d0000" filename = "" Region: id = 740 start_va = 0x43d86e0000 end_va = 0x43d86e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d86e0000" filename = "" Region: id = 741 start_va = 0x43d86f0000 end_va = 0x43d86f1fff entry_point = 0x0 region_type = private name = "private_0x00000043d86f0000" filename = "" Region: id = 742 start_va = 0x43d8700000 end_va = 0x43d877ffff entry_point = 0x0 region_type = private name = "private_0x00000043d8700000" filename = "" Region: id = 743 start_va = 0x43d8780000 end_va = 0x43d8786fff entry_point = 0x0 region_type = private name = "private_0x00000043d8780000" filename = "" Region: id = 744 start_va = 0x43d8790000 end_va = 0x43d8790fff entry_point = 0x0 region_type = private name = "private_0x00000043d8790000" filename = "" Region: id = 745 start_va = 0x43d87a0000 end_va = 0x43d889ffff entry_point = 0x0 region_type = private name = "private_0x00000043d87a0000" filename = "" Region: id = 746 start_va = 0x43d88a0000 end_va = 0x43d895dfff entry_point = 0x43d88a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 747 start_va = 0x43d8960000 end_va = 0x43d8a1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d8960000" filename = "" Region: id = 748 start_va = 0x43d8a20000 end_va = 0x43d8a20fff entry_point = 0x0 region_type = private name = "private_0x00000043d8a20000" filename = "" Region: id = 749 start_va = 0x43d8a30000 end_va = 0x43d8a34fff entry_point = 0x43d8a30000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 750 start_va = 0x43d8a40000 end_va = 0x43d8a4ffff entry_point = 0x0 region_type = private name = "private_0x00000043d8a40000" filename = "" Region: id = 751 start_va = 0x43d8a50000 end_va = 0x43d8d86fff entry_point = 0x43d8a50000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 752 start_va = 0x43d8d90000 end_va = 0x43d8f17fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d8d90000" filename = "" Region: id = 753 start_va = 0x43d8f20000 end_va = 0x43d90a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d8f20000" filename = "" Region: id = 754 start_va = 0x43d90b0000 end_va = 0x43d90b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d90b0000" filename = "" Region: id = 755 start_va = 0x43d90c0000 end_va = 0x43d913ffff entry_point = 0x0 region_type = private name = "private_0x00000043d90c0000" filename = "" Region: id = 756 start_va = 0x43d9140000 end_va = 0x43d923ffff entry_point = 0x0 region_type = private name = "private_0x00000043d9140000" filename = "" Region: id = 757 start_va = 0x43d9240000 end_va = 0x43d9240fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d9240000" filename = "" Region: id = 758 start_va = 0x43d9250000 end_va = 0x43d9250fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d9250000" filename = "" Region: id = 759 start_va = 0x43d9260000 end_va = 0x43d92dffff entry_point = 0x0 region_type = private name = "private_0x00000043d9260000" filename = "" Region: id = 760 start_va = 0x43d92e0000 end_va = 0x43d935ffff entry_point = 0x0 region_type = private name = "private_0x00000043d92e0000" filename = "" Region: id = 761 start_va = 0x43d9360000 end_va = 0x43d93dffff entry_point = 0x0 region_type = private name = "private_0x00000043d9360000" filename = "" Region: id = 762 start_va = 0x43d93e0000 end_va = 0x43d945ffff entry_point = 0x0 region_type = private name = "private_0x00000043d93e0000" filename = "" Region: id = 763 start_va = 0x43d9460000 end_va = 0x43d94dffff entry_point = 0x0 region_type = private name = "private_0x00000043d9460000" filename = "" Region: id = 764 start_va = 0x7df5ffe20000 end_va = 0x7ff5ffe1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffe20000" filename = "" Region: id = 765 start_va = 0x7ff70220c000 end_va = 0x7ff70220dfff entry_point = 0x0 region_type = private name = "private_0x00007ff70220c000" filename = "" Region: id = 766 start_va = 0x7ff70220e000 end_va = 0x7ff70220ffff entry_point = 0x0 region_type = private name = "private_0x00007ff70220e000" filename = "" Region: id = 767 start_va = 0x7ff702210000 end_va = 0x7ff70230ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff702210000" filename = "" Region: id = 768 start_va = 0x7ff702310000 end_va = 0x7ff702332fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff702310000" filename = "" Region: id = 769 start_va = 0x7ff702333000 end_va = 0x7ff702334fff entry_point = 0x0 region_type = private name = "private_0x00007ff702333000" filename = "" Region: id = 770 start_va = 0x7ff702335000 end_va = 0x7ff702336fff entry_point = 0x0 region_type = private name = "private_0x00007ff702335000" filename = "" Region: id = 771 start_va = 0x7ff702337000 end_va = 0x7ff702338fff entry_point = 0x0 region_type = private name = "private_0x00007ff702337000" filename = "" Region: id = 772 start_va = 0x7ff702339000 end_va = 0x7ff70233afff entry_point = 0x0 region_type = private name = "private_0x00007ff702339000" filename = "" Region: id = 773 start_va = 0x7ff70233b000 end_va = 0x7ff70233cfff entry_point = 0x0 region_type = private name = "private_0x00007ff70233b000" filename = "" Region: id = 774 start_va = 0x7ff70233d000 end_va = 0x7ff70233efff entry_point = 0x0 region_type = private name = "private_0x00007ff70233d000" filename = "" Region: id = 775 start_va = 0x7ff70233f000 end_va = 0x7ff70233ffff entry_point = 0x0 region_type = private name = "private_0x00007ff70233f000" filename = "" Region: id = 776 start_va = 0x7ff702dc0000 end_va = 0x7ff702e3efff entry_point = 0x7ff702dc0000 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 777 start_va = 0x7ffae92d0000 end_va = 0x7ffae92e5fff entry_point = 0x7ffae92d0000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 778 start_va = 0x7ffae9470000 end_va = 0x7ffae9483fff entry_point = 0x7ffae9470000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 779 start_va = 0x7ffae9490000 end_va = 0x7ffae9587fff entry_point = 0x7ffae9490000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 780 start_va = 0x7ffae9fa0000 end_va = 0x7ffae9fb0fff entry_point = 0x7ffae9fa0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 781 start_va = 0x7ffaef560000 end_va = 0x7ffaef5defff entry_point = 0x7ffaef560000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 782 start_va = 0x7ffaf3960000 end_va = 0x7ffaf3992fff entry_point = 0x7ffaf3960000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 783 start_va = 0x7ffaf3d00000 end_va = 0x7ffaf3d16fff entry_point = 0x7ffaf3d00000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 784 start_va = 0x7ffaf41e0000 end_va = 0x7ffaf41eafff entry_point = 0x7ffaf41e0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 785 start_va = 0x7ffaf4260000 end_va = 0x7ffaf4287fff entry_point = 0x7ffaf4260000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 786 start_va = 0x7ffaf4290000 end_va = 0x7ffaf42fafff entry_point = 0x7ffaf4290000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 787 start_va = 0x7ffaf44d0000 end_va = 0x7ffaf44defff entry_point = 0x7ffaf44d0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 788 start_va = 0x7ffaf4e50000 end_va = 0x7ffaf502cfff entry_point = 0x7ffaf4e50000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 789 start_va = 0x7ffaf5140000 end_va = 0x7ffaf528dfff entry_point = 0x7ffaf5140000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 790 start_va = 0x7ffaf5290000 end_va = 0x7ffaf53b5fff entry_point = 0x7ffaf5290000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 791 start_va = 0x7ffaf5700000 end_va = 0x7ffaf579cfff entry_point = 0x7ffaf5700000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 792 start_va = 0x7ffaf57a0000 end_va = 0x7ffaf57fafff entry_point = 0x7ffaf57a0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 793 start_va = 0x7ffaf5800000 end_va = 0x7ffaf5984fff entry_point = 0x7ffaf5800000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 794 start_va = 0x7ffaf6ec0000 end_va = 0x7ffaf6f64fff entry_point = 0x7ffaf6ec0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 795 start_va = 0x7ffaf70d0000 end_va = 0x7ffaf717cfff entry_point = 0x7ffaf70d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 796 start_va = 0x7ffaf7190000 end_va = 0x7ffaf724dfff entry_point = 0x7ffaf7190000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 797 start_va = 0x7ffaf72e0000 end_va = 0x7ffaf755bfff entry_point = 0x7ffaf72e0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 798 start_va = 0x7ffaf7560000 end_va = 0x7ffaf75c8fff entry_point = 0x7ffaf7560000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 799 start_va = 0x7ffaf75d0000 end_va = 0x7ffaf7675fff entry_point = 0x7ffaf75d0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 800 start_va = 0x7ffaf7680000 end_va = 0x7ffaf7687fff entry_point = 0x7ffaf7680000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 801 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 802 start_va = 0x43d94e0000 end_va = 0x43d955ffff entry_point = 0x0 region_type = private name = "private_0x00000043d94e0000" filename = "" Region: id = 803 start_va = 0x7ff70220a000 end_va = 0x7ff70220bfff entry_point = 0x0 region_type = private name = "private_0x00007ff70220a000" filename = "" Region: id = 804 start_va = 0x7ffadb8a0000 end_va = 0x7ffadba6dfff entry_point = 0x7ffadb8a0000 region_type = mapped_file name = "cimwin32.dll" filename = "\\Windows\\System32\\wbem\\cimwin32.dll" (normalized: "c:\\windows\\system32\\wbem\\cimwin32.dll") Region: id = 805 start_va = 0x7ffadc470000 end_va = 0x7ffadc4bdfff entry_point = 0x7ffadc470000 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 806 start_va = 0x7ffae9440000 end_va = 0x7ffae9464fff entry_point = 0x7ffae9440000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 807 start_va = 0x7ffaf41b0000 end_va = 0x7ffaf41dbfff entry_point = 0x7ffaf41b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 808 start_va = 0x7ffaf4440000 end_va = 0x7ffaf4489fff entry_point = 0x7ffaf4440000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 809 start_va = 0x43d9560000 end_va = 0x43d9562fff entry_point = 0x43d9560000 region_type = mapped_file name = "cimwin32.dll.mui" filename = "\\Windows\\System32\\wbem\\en-US\\cimwin32.dll.mui" (normalized: "c:\\windows\\system32\\wbem\\en-us\\cimwin32.dll.mui") Region: id = 810 start_va = 0x7ffaebb50000 end_va = 0x7ffaebb5bfff entry_point = 0x7ffaebb50000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 811 start_va = 0x7ffaf04d0000 end_va = 0x7ffaf04f1fff entry_point = 0x7ffaf04d0000 region_type = mapped_file name = "dskquota.dll" filename = "\\Windows\\System32\\dskquota.dll" (normalized: "c:\\windows\\system32\\dskquota.dll") Region: id = 812 start_va = 0x7ffaf0f60000 end_va = 0x7ffaf0f77fff entry_point = 0x7ffaf0f60000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 813 start_va = 0x7ffaf36f0000 end_va = 0x7ffaf36fbfff entry_point = 0x7ffaf36f0000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 814 start_va = 0x7ffaf3a70000 end_va = 0x7ffaf3aadfff entry_point = 0x7ffaf3a70000 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 815 start_va = 0x7ffaf4490000 end_va = 0x7ffaf44a2fff entry_point = 0x7ffaf4490000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 816 start_va = 0x7ffaf4590000 end_va = 0x7ffaf4bb7fff entry_point = 0x7ffaf4590000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 817 start_va = 0x7ffaf4bc0000 end_va = 0x7ffaf4c72fff entry_point = 0x7ffaf4bc0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 818 start_va = 0x7ffaf5990000 end_va = 0x7ffaf6eb4fff entry_point = 0x7ffaf5990000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 819 start_va = 0x7ffaf7860000 end_va = 0x7ffaf78b0fff entry_point = 0x7ffaf7860000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 820 start_va = 0x43d9570000 end_va = 0x43d9571fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d9570000" filename = "" Region: id = 821 start_va = 0x7ffaf04c0000 end_va = 0x7ffaf04cdfff entry_point = 0x7ffaf04c0000 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 822 start_va = 0x43d9580000 end_va = 0x43d9582fff entry_point = 0x43d9580000 region_type = mapped_file name = "security.dll" filename = "\\Windows\\System32\\security.dll" (normalized: "c:\\windows\\system32\\security.dll") Region: id = 823 start_va = 0x7ffaf3840000 end_va = 0x7ffaf38b3fff entry_point = 0x7ffaf3840000 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 824 start_va = 0x7ffaf44b0000 end_va = 0x7ffaf44c0fff entry_point = 0x7ffaf44b0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 825 start_va = 0x7ffaf4c80000 end_va = 0x7ffaf4e40fff entry_point = 0x7ffaf4c80000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 826 start_va = 0x43d9590000 end_va = 0x43d960ffff entry_point = 0x0 region_type = private name = "private_0x00000043d9590000" filename = "" Region: id = 827 start_va = 0x43d9610000 end_va = 0x43d9612fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d9610000" filename = "" Region: id = 828 start_va = 0x43d9620000 end_va = 0x43d9624fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000043d9620000" filename = "" Region: id = 829 start_va = 0x43d9630000 end_va = 0x43d972ffff entry_point = 0x0 region_type = private name = "private_0x00000043d9630000" filename = "" Region: id = 830 start_va = 0x7ff702208000 end_va = 0x7ff702209fff entry_point = 0x0 region_type = private name = "private_0x00007ff702208000" filename = "" Region: id = 831 start_va = 0x7ffaea860000 end_va = 0x7ffaea876fff entry_point = 0x7ffaea860000 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 832 start_va = 0x7ffaf1380000 end_va = 0x7ffaf1395fff entry_point = 0x7ffaf1380000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 833 start_va = 0x7ffaf3700000 end_va = 0x7ffaf3725fff entry_point = 0x7ffaf3700000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 834 start_va = 0x7ffaf04a0000 end_va = 0x7ffaf04b3fff entry_point = 0x7ffaf04a0000 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\System32\\browcli.dll" (normalized: "c:\\windows\\system32\\browcli.dll") Region: id = 835 start_va = 0x7ffaf0490000 end_va = 0x7ffaf049afff entry_point = 0x7ffaf0490000 region_type = mapped_file name = "schedcli.dll" filename = "\\Windows\\System32\\schedcli.dll" (normalized: "c:\\windows\\system32\\schedcli.dll") Region: id = 836 start_va = 0x7ffaf1b60000 end_va = 0x7ffaf1b69fff entry_point = 0x7ffaf1b60000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 837 start_va = 0x7ffaea9d0000 end_va = 0x7ffaea9e1fff entry_point = 0x7ffaea9d0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Thread: id = 63 os_tid = 0x818 Thread: id = 64 os_tid = 0x8d0 Thread: id = 65 os_tid = 0xbd4 Thread: id = 66 os_tid = 0x6d4 Thread: id = 67 os_tid = 0xa44 Thread: id = 68 os_tid = 0xac8 Thread: id = 69 os_tid = 0x458 Thread: id = 70 os_tid = 0x92c Thread: id = 71 os_tid = 0x578 Thread: id = 81 os_tid = 0xf04 Thread: id = 118 os_tid = 0x490 Process: id = "4" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x66536000" os_pid = "0xe5c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x318" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xe], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b566" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 1098 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1099 start_va = 0x213ac70000 end_va = 0x213ac7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000213ac70000" filename = "" Region: id = 1100 start_va = 0x213ac80000 end_va = 0x213ac86fff entry_point = 0x0 region_type = private name = "private_0x000000213ac80000" filename = "" Region: id = 1101 start_va = 0x213ac90000 end_va = 0x213aca3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000213ac90000" filename = "" Region: id = 1102 start_va = 0x213acb0000 end_va = 0x213ad2ffff entry_point = 0x0 region_type = private name = "private_0x000000213acb0000" filename = "" Region: id = 1103 start_va = 0x213ad30000 end_va = 0x213ad33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000213ad30000" filename = "" Region: id = 1104 start_va = 0x213ad40000 end_va = 0x213ad40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000213ad40000" filename = "" Region: id = 1105 start_va = 0x213ad50000 end_va = 0x213ad51fff entry_point = 0x0 region_type = private name = "private_0x000000213ad50000" filename = "" Region: id = 1106 start_va = 0x213ad60000 end_va = 0x213ad66fff entry_point = 0x0 region_type = private name = "private_0x000000213ad60000" filename = "" Region: id = 1107 start_va = 0x213ad70000 end_va = 0x213ad70fff entry_point = 0x0 region_type = private name = "private_0x000000213ad70000" filename = "" Region: id = 1108 start_va = 0x213ad80000 end_va = 0x213ad80fff entry_point = 0x0 region_type = private name = "private_0x000000213ad80000" filename = "" Region: id = 1109 start_va = 0x213ad90000 end_va = 0x213ad94fff entry_point = 0x213ad90000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 1110 start_va = 0x213ada0000 end_va = 0x213ada0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000213ada0000" filename = "" Region: id = 1111 start_va = 0x213adb0000 end_va = 0x213adb0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000213adb0000" filename = "" Region: id = 1112 start_va = 0x213adc0000 end_va = 0x213adc0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000213adc0000" filename = "" Region: id = 1113 start_va = 0x213add0000 end_va = 0x213aecffff entry_point = 0x0 region_type = private name = "private_0x000000213add0000" filename = "" Region: id = 1114 start_va = 0x213aed0000 end_va = 0x213af8dfff entry_point = 0x213aed0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1115 start_va = 0x213af90000 end_va = 0x213b00ffff entry_point = 0x0 region_type = private name = "private_0x000000213af90000" filename = "" Region: id = 1116 start_va = 0x213b010000 end_va = 0x213b197fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000213b010000" filename = "" Region: id = 1117 start_va = 0x213b200000 end_va = 0x213b20ffff entry_point = 0x0 region_type = private name = "private_0x000000213b200000" filename = "" Region: id = 1118 start_va = 0x213b210000 end_va = 0x213b546fff entry_point = 0x213b210000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1119 start_va = 0x213b550000 end_va = 0x213b6d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000213b550000" filename = "" Region: id = 1120 start_va = 0x213b6e0000 end_va = 0x213b79ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000213b6e0000" filename = "" Region: id = 1121 start_va = 0x213b7a0000 end_va = 0x213b81ffff entry_point = 0x0 region_type = private name = "private_0x000000213b7a0000" filename = "" Region: id = 1122 start_va = 0x213b820000 end_va = 0x213b91ffff entry_point = 0x0 region_type = private name = "private_0x000000213b820000" filename = "" Region: id = 1123 start_va = 0x213b920000 end_va = 0x213b99ffff entry_point = 0x0 region_type = private name = "private_0x000000213b920000" filename = "" Region: id = 1124 start_va = 0x213b9a0000 end_va = 0x213ba1ffff entry_point = 0x0 region_type = private name = "private_0x000000213b9a0000" filename = "" Region: id = 1125 start_va = 0x213ba20000 end_va = 0x213ba9ffff entry_point = 0x0 region_type = private name = "private_0x000000213ba20000" filename = "" Region: id = 1126 start_va = 0x213baa0000 end_va = 0x213bb1ffff entry_point = 0x0 region_type = private name = "private_0x000000213baa0000" filename = "" Region: id = 1127 start_va = 0x213bb20000 end_va = 0x213bb9ffff entry_point = 0x0 region_type = private name = "private_0x000000213bb20000" filename = "" Region: id = 1128 start_va = 0x213bba0000 end_va = 0x213bc1ffff entry_point = 0x0 region_type = private name = "private_0x000000213bba0000" filename = "" Region: id = 1129 start_va = 0x7df5ff610000 end_va = 0x7ff5ff60ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ff610000" filename = "" Region: id = 1130 start_va = 0x7ff70249a000 end_va = 0x7ff70249bfff entry_point = 0x0 region_type = private name = "private_0x00007ff70249a000" filename = "" Region: id = 1131 start_va = 0x7ff70249c000 end_va = 0x7ff70249dfff entry_point = 0x0 region_type = private name = "private_0x00007ff70249c000" filename = "" Region: id = 1132 start_va = 0x7ff70249e000 end_va = 0x7ff70249ffff entry_point = 0x0 region_type = private name = "private_0x00007ff70249e000" filename = "" Region: id = 1133 start_va = 0x7ff7024a0000 end_va = 0x7ff70259ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7024a0000" filename = "" Region: id = 1134 start_va = 0x7ff7025a0000 end_va = 0x7ff7025c2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff7025a0000" filename = "" Region: id = 1135 start_va = 0x7ff7025c3000 end_va = 0x7ff7025c4fff entry_point = 0x0 region_type = private name = "private_0x00007ff7025c3000" filename = "" Region: id = 1136 start_va = 0x7ff7025c5000 end_va = 0x7ff7025c6fff entry_point = 0x0 region_type = private name = "private_0x00007ff7025c5000" filename = "" Region: id = 1137 start_va = 0x7ff7025c7000 end_va = 0x7ff7025c7fff entry_point = 0x0 region_type = private name = "private_0x00007ff7025c7000" filename = "" Region: id = 1138 start_va = 0x7ff7025c8000 end_va = 0x7ff7025c9fff entry_point = 0x0 region_type = private name = "private_0x00007ff7025c8000" filename = "" Region: id = 1139 start_va = 0x7ff7025ca000 end_va = 0x7ff7025cbfff entry_point = 0x0 region_type = private name = "private_0x00007ff7025ca000" filename = "" Region: id = 1140 start_va = 0x7ff7025cc000 end_va = 0x7ff7025cdfff entry_point = 0x0 region_type = private name = "private_0x00007ff7025cc000" filename = "" Region: id = 1141 start_va = 0x7ff7025ce000 end_va = 0x7ff7025cffff entry_point = 0x0 region_type = private name = "private_0x00007ff7025ce000" filename = "" Region: id = 1142 start_va = 0x7ff702dc0000 end_va = 0x7ff702e3efff entry_point = 0x7ff702dc0000 region_type = mapped_file name = "wmiprvse.exe" filename = "\\Windows\\System32\\wbem\\WmiPrvSE.exe" (normalized: "c:\\windows\\system32\\wbem\\wmiprvse.exe") Region: id = 1143 start_va = 0x7ffae92d0000 end_va = 0x7ffae92e5fff entry_point = 0x7ffae92d0000 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 1144 start_va = 0x7ffae9440000 end_va = 0x7ffae9464fff entry_point = 0x7ffae9440000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 1145 start_va = 0x7ffae9470000 end_va = 0x7ffae9483fff entry_point = 0x7ffae9470000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1146 start_va = 0x7ffae9490000 end_va = 0x7ffae9587fff entry_point = 0x7ffae9490000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1147 start_va = 0x7ffae9fa0000 end_va = 0x7ffae9fb0fff entry_point = 0x7ffae9fa0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1148 start_va = 0x7ffaef560000 end_va = 0x7ffaef5defff entry_point = 0x7ffaef560000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1149 start_va = 0x7ffaefc90000 end_va = 0x7ffaefcccfff entry_point = 0x7ffaefc90000 region_type = mapped_file name = "wmiprov.dll" filename = "\\Windows\\System32\\wbem\\wmiprov.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprov.dll") Region: id = 1150 start_va = 0x7ffaf1420000 end_va = 0x7ffaf1430fff entry_point = 0x7ffaf1420000 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 1151 start_va = 0x7ffaf37e0000 end_va = 0x7ffaf3811fff entry_point = 0x7ffaf37e0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1152 start_va = 0x7ffaf3960000 end_va = 0x7ffaf3992fff entry_point = 0x7ffaf3960000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1153 start_va = 0x7ffaf3d00000 end_va = 0x7ffaf3d16fff entry_point = 0x7ffaf3d00000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1154 start_va = 0x7ffaf41e0000 end_va = 0x7ffaf41eafff entry_point = 0x7ffaf41e0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1155 start_va = 0x7ffaf4260000 end_va = 0x7ffaf4287fff entry_point = 0x7ffaf4260000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1156 start_va = 0x7ffaf4290000 end_va = 0x7ffaf42fafff entry_point = 0x7ffaf4290000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1157 start_va = 0x7ffaf44d0000 end_va = 0x7ffaf44defff entry_point = 0x7ffaf44d0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 1158 start_va = 0x7ffaf4e50000 end_va = 0x7ffaf502cfff entry_point = 0x7ffaf4e50000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1159 start_va = 0x7ffaf5140000 end_va = 0x7ffaf528dfff entry_point = 0x7ffaf5140000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1160 start_va = 0x7ffaf5290000 end_va = 0x7ffaf53b5fff entry_point = 0x7ffaf5290000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1161 start_va = 0x7ffaf5700000 end_va = 0x7ffaf579cfff entry_point = 0x7ffaf5700000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1162 start_va = 0x7ffaf57a0000 end_va = 0x7ffaf57fafff entry_point = 0x7ffaf57a0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1163 start_va = 0x7ffaf5800000 end_va = 0x7ffaf5984fff entry_point = 0x7ffaf5800000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1164 start_va = 0x7ffaf6ec0000 end_va = 0x7ffaf6f64fff entry_point = 0x7ffaf6ec0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1165 start_va = 0x7ffaf70d0000 end_va = 0x7ffaf717cfff entry_point = 0x7ffaf70d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1166 start_va = 0x7ffaf7190000 end_va = 0x7ffaf724dfff entry_point = 0x7ffaf7190000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1167 start_va = 0x7ffaf72e0000 end_va = 0x7ffaf755bfff entry_point = 0x7ffaf72e0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 1168 start_va = 0x7ffaf7560000 end_va = 0x7ffaf75c8fff entry_point = 0x7ffaf7560000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1169 start_va = 0x7ffaf75d0000 end_va = 0x7ffaf7675fff entry_point = 0x7ffaf75d0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1170 start_va = 0x7ffaf7680000 end_va = 0x7ffaf7687fff entry_point = 0x7ffaf7680000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1171 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Thread: id = 72 os_tid = 0xe0c Thread: id = 73 os_tid = 0xf30 Thread: id = 74 os_tid = 0xebc Thread: id = 75 os_tid = 0xeb8 Thread: id = 76 os_tid = 0xe50 Thread: id = 77 os_tid = 0xe58 Thread: id = 78 os_tid = 0xe4c Thread: id = 79 os_tid = 0xe80 Thread: id = 80 os_tid = 0xe70 Thread: id = 117 os_tid = 0x5cc Process: id = "5" image_name = "cryptonardecryptor.exe" filename = "c:\\users\\ciihmnxmn6ps\\desktop\\cryptonardecryptor.exe" page_root = "0x7b7d0000" os_pid = "0xe18" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf38" cmd_line = "\"C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe\" " cur_dir = "C:\\Users\\CIiHmnxMn6Ps\\Desktop\\" os_username = "LHNIWSJ\\CIiHmnxMn6Ps" os_groups = "LHNIWSJ\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00013c81" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 892 start_va = 0x420000 end_va = 0x49bfff entry_point = 0x420000 region_type = mapped_file name = "cryptonardecryptor.exe" filename = "\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\cryptonardecryptor.exe") Region: id = 893 start_va = 0x4a0000 end_va = 0x4bffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 894 start_va = 0x4c0000 end_va = 0x4d3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004c0000" filename = "" Region: id = 895 start_va = 0x4e0000 end_va = 0x5dffff entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 896 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 897 start_va = 0x5f0000 end_va = 0x5f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 898 start_va = 0x600000 end_va = 0x601fff entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 899 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 900 start_va = 0x7ff5ffc20000 end_va = 0x7ff5ffc42fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffc20000" filename = "" Region: id = 901 start_va = 0x7ff5ffc43000 end_va = 0x7ff5ffc43fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffc43000" filename = "" Region: id = 902 start_va = 0x7ff5ffc4e000 end_va = 0x7ff5ffc4ffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffc4e000" filename = "" Region: id = 903 start_va = 0x7ffaf7a10000 end_va = 0x7ffaf7bd1fff entry_point = 0x7ffaf7a10000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 904 start_va = 0x7b0000 end_va = 0x8affff entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 905 start_va = 0x7ffaed330000 end_va = 0x7ffaed397fff entry_point = 0x7ffaed330000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 906 start_va = 0x7ffaf4e50000 end_va = 0x7ffaf502cfff entry_point = 0x7ffaf4e50000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 907 start_va = 0x7ffaf70d0000 end_va = 0x7ffaf717cfff entry_point = 0x7ffaf70d0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 908 start_va = 0x4a0000 end_va = 0x4affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 909 start_va = 0x4b0000 end_va = 0x4b6fff entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 910 start_va = 0x610000 end_va = 0x6cdfff entry_point = 0x610000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 911 start_va = 0x6d0000 end_va = 0x6d6fff entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 912 start_va = 0x6e0000 end_va = 0x6e6fff entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 913 start_va = 0x740000 end_va = 0x74ffff entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 914 start_va = 0x8b0000 end_va = 0x9affff entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 915 start_va = 0x9d0000 end_va = 0x9dffff entry_point = 0x0 region_type = private name = "private_0x00000000009d0000" filename = "" Region: id = 916 start_va = 0x7ff5ffb20000 end_va = 0x7ff5ffc1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffb20000" filename = "" Region: id = 917 start_va = 0x7ff5ffc4c000 end_va = 0x7ff5ffc4dfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffc4c000" filename = "" Region: id = 918 start_va = 0x7ffaf2b90000 end_va = 0x7ffaf2c07fff entry_point = 0x7ffaf2b90000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 919 start_va = 0x7ffaf5290000 end_va = 0x7ffaf53b5fff entry_point = 0x7ffaf5290000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 920 start_va = 0x7ffaf5700000 end_va = 0x7ffaf579cfff entry_point = 0x7ffaf5700000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 921 start_va = 0x7ffaf57a0000 end_va = 0x7ffaf57fafff entry_point = 0x7ffaf57a0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 922 start_va = 0x7ffaf75d0000 end_va = 0x7ffaf7675fff entry_point = 0x7ffaf75d0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 923 start_va = 0x7ffadf5d0000 end_va = 0x7ffadf666fff entry_point = 0x7ffadf5d0000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 924 start_va = 0x6f0000 end_va = 0x6f0fff entry_point = 0x0 region_type = private name = "private_0x00000000006f0000" filename = "" Region: id = 925 start_va = 0x700000 end_va = 0x700fff entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 926 start_va = 0x9e0000 end_va = 0xb67fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009e0000" filename = "" Region: id = 927 start_va = 0xb70000 end_va = 0xcf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b70000" filename = "" Region: id = 928 start_va = 0xd00000 end_va = 0x20fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d00000" filename = "" Region: id = 929 start_va = 0x7ffaf5140000 end_va = 0x7ffaf528dfff entry_point = 0x7ffaf5140000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 930 start_va = 0x7ffaf53c0000 end_va = 0x7ffaf53f5fff entry_point = 0x7ffaf53c0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 931 start_va = 0x7ffaf5800000 end_va = 0x7ffaf5984fff entry_point = 0x7ffaf5800000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 932 start_va = 0x7ffaf6f70000 end_va = 0x7ffaf70cbfff entry_point = 0x7ffaf6f70000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 933 start_va = 0x7ffaf72e0000 end_va = 0x7ffaf755bfff entry_point = 0x7ffaf72e0000 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 934 start_va = 0x7ffaf7860000 end_va = 0x7ffaf78b0fff entry_point = 0x7ffaf7860000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 935 start_va = 0x7ffaf44d0000 end_va = 0x7ffaf44defff entry_point = 0x7ffaf44d0000 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 936 start_va = 0x7ffaeb6f0000 end_va = 0x7ffaeb6f9fff entry_point = 0x7ffaeb6f0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 937 start_va = 0x710000 end_va = 0x710fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 938 start_va = 0x720000 end_va = 0x726fff entry_point = 0x0 region_type = private name = "private_0x0000000000720000" filename = "" Region: id = 939 start_va = 0x2160000 end_va = 0x216ffff entry_point = 0x0 region_type = private name = "private_0x0000000002160000" filename = "" Region: id = 940 start_va = 0x2360000 end_va = 0x236ffff entry_point = 0x0 region_type = private name = "private_0x0000000002360000" filename = "" Region: id = 941 start_va = 0x72f60000 end_va = 0x73028fff entry_point = 0x72f60000 region_type = mapped_file name = "msvcr80.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9185_none_88e323712fabe0b2\\msvcr80.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9185_none_88e323712fabe0b2\\msvcr80.dll") Region: id = 942 start_va = 0x7ffadec30000 end_va = 0x7ffadf5cffff entry_point = 0x7ffadec30000 region_type = mapped_file name = "mscorwks.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorwks.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorwks.dll") Region: id = 943 start_va = 0x20000 end_va = 0x3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 944 start_va = 0x730000 end_va = 0x732fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000730000" filename = "" Region: id = 945 start_va = 0x750000 end_va = 0x750fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000750000" filename = "" Region: id = 946 start_va = 0x2170000 end_va = 0x226ffff entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 947 start_va = 0x7ff5ffc4a000 end_va = 0x7ff5ffc4bfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffc4a000" filename = "" Region: id = 948 start_va = 0x7ffa7f4f0000 end_va = 0x7ffa7f4fffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f4f0000" filename = "" Region: id = 949 start_va = 0x7ffa7f500000 end_va = 0x7ffa7f50ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f500000" filename = "" Region: id = 950 start_va = 0x7ffa7f510000 end_va = 0x7ffa7f5affff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f510000" filename = "" Region: id = 951 start_va = 0x7ffa7f5b0000 end_va = 0x7ffa7f5bffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f5b0000" filename = "" Region: id = 952 start_va = 0x7ffa7f5c0000 end_va = 0x7ffa7f62ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f5c0000" filename = "" Region: id = 953 start_va = 0x7ffaf4440000 end_va = 0x7ffaf4489fff entry_point = 0x7ffaf4440000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 954 start_va = 0x7ffaf4490000 end_va = 0x7ffaf44a2fff entry_point = 0x7ffaf4490000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 955 start_va = 0x7ffaf4590000 end_va = 0x7ffaf4bb7fff entry_point = 0x7ffaf4590000 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 956 start_va = 0x7ffaf4bc0000 end_va = 0x7ffaf4c72fff entry_point = 0x7ffaf4bc0000 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 957 start_va = 0x7ffaf5990000 end_va = 0x7ffaf6eb4fff entry_point = 0x7ffaf5990000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 958 start_va = 0x760000 end_va = 0x760fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 959 start_va = 0x2270000 end_va = 0x2345fff entry_point = 0x2270000 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 960 start_va = 0x2370000 end_va = 0x26a6fff entry_point = 0x2370000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 961 start_va = 0x26b0000 end_va = 0x1a6affff entry_point = 0x0 region_type = private name = "private_0x00000000026b0000" filename = "" Region: id = 962 start_va = 0x1a6b0000 end_va = 0x1ad7ffff entry_point = 0x0 region_type = private name = "private_0x000000001a6b0000" filename = "" Region: id = 963 start_va = 0x1ad80000 end_va = 0x1ae8afff entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 964 start_va = 0x1ae90000 end_va = 0x1af8ffff entry_point = 0x0 region_type = private name = "private_0x000000001ae90000" filename = "" Region: id = 965 start_va = 0x7ff5ffc48000 end_va = 0x7ff5ffc49fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffc48000" filename = "" Region: id = 966 start_va = 0x7ffaddd50000 end_va = 0x7ffadec2dfff entry_point = 0x7ffaddd50000 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\mscorlib\\91a4b48cca231bafafe8b8b1de78487c\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\mscorlib\\91a4b48cca231bafafe8b8b1de78487c\\mscorlib.ni.dll") Region: id = 967 start_va = 0x7ffaf55b0000 end_va = 0x7ffaf56f0fff entry_point = 0x7ffaf55b0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 968 start_va = 0x7ffaf4290000 end_va = 0x7ffaf42fafff entry_point = 0x7ffaf4290000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 969 start_va = 0x7ffaf2d10000 end_va = 0x7ffaf2da5fff entry_point = 0x7ffaf2d10000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 970 start_va = 0x2270000 end_va = 0x22effff entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 971 start_va = 0x770000 end_va = 0x772fff entry_point = 0x770000 region_type = mapped_file name = "l_intl.nls" filename = "\\Windows\\System32\\l_intl.nls" (normalized: "c:\\windows\\system32\\l_intl.nls") Region: id = 972 start_va = 0x780000 end_va = 0x780fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 973 start_va = 0x7ff5ffa80000 end_va = 0x7ff5ffa8ffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa80000" filename = "" Region: id = 974 start_va = 0x7ff5ffa90000 end_va = 0x7ff5ffb1ffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa90000" filename = "" Region: id = 975 start_va = 0x7ffa7f630000 end_va = 0x7ffa7f63ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f630000" filename = "" Region: id = 976 start_va = 0x7ffadf9a0000 end_va = 0x7ffadfb22fff entry_point = 0x7ffadf9a0000 region_type = mapped_file name = "mscorjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorjit.dll") Region: id = 977 start_va = 0x790000 end_va = 0x79ffff entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 978 start_va = 0x7a0000 end_va = 0x7affff entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 979 start_va = 0x9b0000 end_va = 0x9bffff entry_point = 0x0 region_type = private name = "private_0x00000000009b0000" filename = "" Region: id = 980 start_va = 0x9c0000 end_va = 0x9cffff entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 981 start_va = 0x7ffa7f640000 end_va = 0x7ffa7f67ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f640000" filename = "" Region: id = 982 start_va = 0x7ffada5c0000 end_va = 0x7ffadb658fff entry_point = 0x7ffada5c0000 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Windows.Forms\\5fe233ef56ecdbb4a7988d361ebd2f15\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.windows.forms\\5fe233ef56ecdbb4a7988d361ebd2f15\\system.windows.forms.ni.dll") Region: id = 983 start_va = 0x7ffadb660000 end_va = 0x7ffadb898fff entry_point = 0x7ffadb660000 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Drawing\\42eea894b0e7aa6b1d8cc17b26f93de5\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.drawing\\42eea894b0e7aa6b1d8cc17b26f93de5\\system.drawing.ni.dll") Region: id = 984 start_va = 0x7ffadd320000 end_va = 0x7ffaddd4ffff entry_point = 0x7ffadd320000 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System\\042a21e47eb8693a9393028c639e93c6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system\\042a21e47eb8693a9393028c639e93c6\\system.ni.dll") Region: id = 985 start_va = 0x2100000 end_va = 0x2100fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002100000" filename = "" Region: id = 986 start_va = 0x2100000 end_va = 0x2101fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002100000" filename = "" Region: id = 987 start_va = 0x7ffa7f680000 end_va = 0x7ffa7f68ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f680000" filename = "" Region: id = 988 start_va = 0x2110000 end_va = 0x2120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002110000" filename = "" Region: id = 989 start_va = 0x7ffaf24b0000 end_va = 0x7ffaf24d1fff entry_point = 0x7ffaf24b0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 990 start_va = 0x2130000 end_va = 0x213ffff entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 991 start_va = 0x2140000 end_va = 0x214ffff entry_point = 0x0 region_type = private name = "private_0x0000000002140000" filename = "" Region: id = 992 start_va = 0x2150000 end_va = 0x215ffff entry_point = 0x0 region_type = private name = "private_0x0000000002150000" filename = "" Region: id = 993 start_va = 0x2270000 end_va = 0x227ffff entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 994 start_va = 0x2280000 end_va = 0x228ffff entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 995 start_va = 0x22e0000 end_va = 0x22effff entry_point = 0x0 region_type = private name = "private_0x00000000022e0000" filename = "" Region: id = 996 start_va = 0x7ffadd280000 end_va = 0x7ffadd31afff entry_point = 0x7ffadd280000 region_type = mapped_file name = "riched20.dll" filename = "\\Windows\\System32\\riched20.dll" (normalized: "c:\\windows\\system32\\riched20.dll") Region: id = 997 start_va = 0x7ffaf0470000 end_va = 0x7ffaf0487fff entry_point = 0x7ffaf0470000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 998 start_va = 0x1af90000 end_va = 0x1b08ffff entry_point = 0x0 region_type = private name = "private_0x000000001af90000" filename = "" Region: id = 999 start_va = 0x7ff5ffc46000 end_va = 0x7ff5ffc47fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffc46000" filename = "" Region: id = 1000 start_va = 0x7ffaefc50000 end_va = 0x7ffaefc87fff entry_point = 0x7ffaefc50000 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\System32\\msls31.dll" (normalized: "c:\\windows\\system32\\msls31.dll") Region: id = 1001 start_va = 0x7a0000 end_va = 0x7a4fff entry_point = 0x7a0000 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 1002 start_va = 0x2290000 end_va = 0x229ffff entry_point = 0x2290000 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 1003 start_va = 0x7ffae15f0000 end_va = 0x7ffae1798fff entry_point = 0x7ffae15f0000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_89a94c179af51f83\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10240.16384_none_89a94c179af51f83\\gdiplus.dll") Region: id = 1004 start_va = 0x22f0000 end_va = 0x235ffff entry_point = 0x0 region_type = private name = "private_0x00000000022f0000" filename = "" Region: id = 1005 start_va = 0x1b090000 end_va = 0x1b18ffff entry_point = 0x0 region_type = private name = "private_0x000000001b090000" filename = "" Region: id = 1006 start_va = 0x7ff5ffc44000 end_va = 0x7ff5ffc45fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffc44000" filename = "" Region: id = 1007 start_va = 0x7ffaed6f0000 end_va = 0x7ffaed948fff entry_point = 0x7ffaed6f0000 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\System32\\DWrite.dll" (normalized: "c:\\windows\\system32\\dwrite.dll") Region: id = 1008 start_va = 0x1b190000 end_va = 0x1b205fff entry_point = 0x1b190000 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 1009 start_va = 0x1b210000 end_va = 0x1b30ffff entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 1010 start_va = 0x1b310000 end_va = 0x1c30ffff entry_point = 0x1b310000 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 1011 start_va = 0x22a0000 end_va = 0x22a6fff entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1012 start_va = 0x1c310000 end_va = 0x1c40ffff entry_point = 0x0 region_type = private name = "private_0x000000001c310000" filename = "" Region: id = 1013 start_va = 0x1c410000 end_va = 0x1c901fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001c410000" filename = "" Region: id = 1014 start_va = 0x1c910000 end_va = 0x1df93fff entry_point = 0x1c910000 region_type = mapped_file name = "msyh.ttc" filename = "\\Windows\\Fonts\\msyh.ttc" (normalized: "c:\\windows\\fonts\\msyh.ttc") Region: id = 1015 start_va = 0x1dfa0000 end_va = 0x1e39ffff entry_point = 0x0 region_type = private name = "private_0x000000001dfa0000" filename = "" Region: id = 1016 start_va = 0x1e3a0000 end_va = 0x1f32bfff entry_point = 0x1e3a0000 region_type = mapped_file name = "msyhbd.ttc" filename = "\\Windows\\Fonts\\msyhbd.ttc" (normalized: "c:\\windows\\fonts\\msyhbd.ttc") Region: id = 1017 start_va = 0x22b0000 end_va = 0x22b4fff entry_point = 0x22b0000 region_type = mapped_file name = "sorttbls.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sorttbls.nlp") Region: id = 1018 start_va = 0x22c0000 end_va = 0x22c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000022c0000" filename = "" Region: id = 1019 start_va = 0x22f0000 end_va = 0x2330fff entry_point = 0x22f0000 region_type = mapped_file name = "sortkey.nlp" filename = "\\Windows\\assembly\\GAC_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp" (normalized: "c:\\windows\\assembly\\gac_64\\mscorlib\\2.0.0.0__b77a5c561934e089\\sortkey.nlp") Region: id = 1020 start_va = 0x2350000 end_va = 0x235ffff entry_point = 0x0 region_type = private name = "private_0x0000000002350000" filename = "" Region: id = 1021 start_va = 0x7ffaf0460000 end_va = 0x7ffaf0469fff entry_point = 0x7ffaf0460000 region_type = mapped_file name = "culture.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\Culture.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\culture.dll") Region: id = 1022 start_va = 0x1f330000 end_va = 0x1f383fff entry_point = 0x1f330000 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\mscorrc.dll") Region: id = 1023 start_va = 0x22c0000 end_va = 0x22c6fff entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 1024 start_va = 0x1f390000 end_va = 0x203cffff entry_point = 0x1f390000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 1025 start_va = 0x22d0000 end_va = 0x22d0fff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 1026 start_va = 0x7ffaf0460000 end_va = 0x7ffaf0466fff entry_point = 0x7ffaf0460000 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\System32\\shfolder.dll" (normalized: "c:\\windows\\system32\\shfolder.dll") Region: id = 1027 start_va = 0x7ffa7f690000 end_va = 0x7ffa7f69ffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f690000" filename = "" Region: id = 1028 start_va = 0x2340000 end_va = 0x2340fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002340000" filename = "" Region: id = 1029 start_va = 0x203d0000 end_va = 0x20487fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000203d0000" filename = "" Region: id = 1030 start_va = 0x2340000 end_va = 0x2343fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002340000" filename = "" Region: id = 1031 start_va = 0x20490000 end_va = 0x20494fff entry_point = 0x20490000 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 1032 start_va = 0x204a0000 end_va = 0x204a6fff entry_point = 0x0 region_type = private name = "private_0x00000000204a0000" filename = "" Region: id = 1033 start_va = 0x7ffaecc30000 end_va = 0x7ffaecea3fff entry_point = 0x7ffaecc30000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43\\comctl32.dll") Region: id = 1046 start_va = 0x204b0000 end_va = 0x204b0fff entry_point = 0x204b0000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1047 start_va = 0x204c0000 end_va = 0x204c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000204c0000" filename = "" Region: id = 1048 start_va = 0x204d0000 end_va = 0x205d0fff entry_point = 0x0 region_type = private name = "private_0x00000000204d0000" filename = "" Region: id = 1049 start_va = 0x7ffaf3d00000 end_va = 0x7ffaf3d16fff entry_point = 0x7ffaf3d00000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1050 start_va = 0x7ffaf4260000 end_va = 0x7ffaf4287fff entry_point = 0x7ffaf4260000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1051 start_va = 0x7ffaf3960000 end_va = 0x7ffaf3992fff entry_point = 0x7ffaf3960000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1052 start_va = 0x7ffaf41e0000 end_va = 0x7ffaf41eafff entry_point = 0x7ffaf41e0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1053 start_va = 0x204b0000 end_va = 0x204b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000204b0000" filename = "" Region: id = 1054 start_va = 0x204d0000 end_va = 0x205cffff entry_point = 0x0 region_type = private name = "private_0x00000000204d0000" filename = "" Region: id = 1055 start_va = 0x205d0000 end_va = 0x206cffff entry_point = 0x0 region_type = private name = "private_0x00000000205d0000" filename = "" Region: id = 1056 start_va = 0x206d0000 end_va = 0x207cffff entry_point = 0x0 region_type = private name = "private_0x00000000206d0000" filename = "" Region: id = 1057 start_va = 0x7ff5ffa7a000 end_va = 0x7ff5ffa7bfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa7a000" filename = "" Region: id = 1058 start_va = 0x7ff5ffa7c000 end_va = 0x7ff5ffa7dfff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa7c000" filename = "" Region: id = 1059 start_va = 0x7ff5ffa7e000 end_va = 0x7ff5ffa7ffff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa7e000" filename = "" Region: id = 1060 start_va = 0x7ffaf6ec0000 end_va = 0x7ffaf6f64fff entry_point = 0x7ffaf6ec0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1061 start_va = 0x207d0000 end_va = 0x207d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000207d0000" filename = "" Region: id = 1062 start_va = 0x7ffae8020000 end_va = 0x7ffae8065fff entry_point = 0x7ffae8020000 region_type = mapped_file name = "dataexchange.dll" filename = "\\Windows\\System32\\DataExchange.dll" (normalized: "c:\\windows\\system32\\dataexchange.dll") Region: id = 1063 start_va = 0x7ffaefcd0000 end_va = 0x7ffaf0214fff entry_point = 0x7ffaefcd0000 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 1064 start_va = 0x7ffaf2160000 end_va = 0x7ffaf21fbfff entry_point = 0x7ffaf2160000 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 1065 start_va = 0x7ffaf2200000 end_va = 0x7ffaf24a2fff entry_point = 0x7ffaf2200000 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 1066 start_va = 0x7ffaf2630000 end_va = 0x7ffaf2700fff entry_point = 0x7ffaf2630000 region_type = mapped_file name = "dcomp.dll" filename = "\\Windows\\System32\\dcomp.dll" (normalized: "c:\\windows\\system32\\dcomp.dll") Region: id = 1067 start_va = 0x7ffaf2ef0000 end_va = 0x7ffaf2fddfff entry_point = 0x7ffaf2ef0000 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 1068 start_va = 0x7ffaf3a50000 end_va = 0x7ffaf3a6efff entry_point = 0x7ffaf3a50000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1069 start_va = 0x207e0000 end_va = 0x208dffff entry_point = 0x0 region_type = private name = "private_0x00000000207e0000" filename = "" Region: id = 1070 start_va = 0x208e0000 end_va = 0x208effff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000208e0000" filename = "" Region: id = 1071 start_va = 0x7ffa7f6a0000 end_va = 0x7ffa7f6affff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f6a0000" filename = "" Region: id = 1072 start_va = 0x7ffadca60000 end_va = 0x7ffadcbcbfff entry_point = 0x7ffadca60000 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v2.0.50727_64\\System.Management\\f23887438de05dd4ab64f7d477cea394\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v2.0.50727_64\\system.management\\f23887438de05dd4ab64f7d477cea394\\system.management.ni.dll") Region: id = 1073 start_va = 0x208f0000 end_va = 0x209effff entry_point = 0x0 region_type = private name = "private_0x00000000208f0000" filename = "" Region: id = 1074 start_va = 0x7ff5ffa78000 end_va = 0x7ff5ffa79fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa78000" filename = "" Region: id = 1075 start_va = 0x7ffae9440000 end_va = 0x7ffae9464fff entry_point = 0x7ffae9440000 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 1076 start_va = 0x7ffaf7190000 end_va = 0x7ffaf724dfff entry_point = 0x7ffaf7190000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1077 start_va = 0x7ffaef560000 end_va = 0x7ffaef5defff entry_point = 0x7ffaef560000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 1078 start_va = 0x7ffaf7560000 end_va = 0x7ffaf75c8fff entry_point = 0x7ffaf7560000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1079 start_va = 0x7ffaf7680000 end_va = 0x7ffaf7687fff entry_point = 0x7ffaf7680000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1080 start_va = 0x209f0000 end_va = 0x20aeffff entry_point = 0x0 region_type = private name = "private_0x00000000209f0000" filename = "" Region: id = 1081 start_va = 0x7ff5ffa76000 end_va = 0x7ff5ffa77fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa76000" filename = "" Region: id = 1082 start_va = 0x7ffae9fa0000 end_va = 0x7ffae9fb0fff entry_point = 0x7ffae9fa0000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 1083 start_va = 0x7ffaf0230000 end_va = 0x7ffaf023cfff entry_point = 0x7ffaf0230000 region_type = mapped_file name = "wminet_utils.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\WMINet_Utils.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\wminet_utils.dll") Region: id = 1084 start_va = 0x20af0000 end_va = 0x20af0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000020af0000" filename = "" Region: id = 1085 start_va = 0x7ffa7f6b0000 end_va = 0x7ffa7f6bffff entry_point = 0x0 region_type = private name = "private_0x00007ffa7f6b0000" filename = "" Region: id = 1086 start_va = 0x20b00000 end_va = 0x20b0ffff entry_point = 0x0 region_type = private name = "private_0x0000000020b00000" filename = "" Region: id = 1087 start_va = 0x9c0000 end_va = 0x9cffff entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 1088 start_va = 0x7ffae9470000 end_va = 0x7ffae9483fff entry_point = 0x7ffae9470000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 1089 start_va = 0x7ffae9490000 end_va = 0x7ffae9587fff entry_point = 0x7ffae9490000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 1090 start_va = 0x209f0000 end_va = 0x20aeffff entry_point = 0x0 region_type = private name = "private_0x00000000209f0000" filename = "" Region: id = 1091 start_va = 0x7ff5ffa76000 end_va = 0x7ff5ffa77fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa76000" filename = "" Region: id = 1092 start_va = 0x20b10000 end_va = 0x20c0ffff entry_point = 0x0 region_type = private name = "private_0x0000000020b10000" filename = "" Region: id = 1093 start_va = 0x7ff5ffa74000 end_va = 0x7ff5ffa75fff entry_point = 0x0 region_type = private name = "private_0x00007ff5ffa74000" filename = "" Region: id = 1094 start_va = 0x2130000 end_va = 0x2132fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002130000" filename = "" Region: id = 1095 start_va = 0x20b10000 end_va = 0x20c18fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000020b10000" filename = "" Region: id = 1096 start_va = 0x2130000 end_va = 0x2130fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002130000" filename = "" Region: id = 1097 start_va = 0x20c20000 end_va = 0x20c37fff entry_point = 0x0 region_type = private name = "private_0x0000000020c20000" filename = "" Region: id = 1172 start_va = 0x20c20000 end_va = 0x20d1ffff entry_point = 0x0 region_type = private name = "private_0x0000000020c20000" filename = "" Region: id = 1173 start_va = 0x2130000 end_va = 0x213ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002130000" filename = "" Region: id = 1174 start_va = 0x2130000 end_va = 0x213afff entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 1175 start_va = 0x20d20000 end_va = 0x20d93fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000020d20000" filename = "" Region: id = 1176 start_va = 0x20da0000 end_va = 0x239b2fff entry_point = 0x20da0000 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\System32\\imageres.dll" (normalized: "c:\\windows\\system32\\imageres.dll") Region: id = 1177 start_va = 0x239c0000 end_va = 0x239c0fff entry_point = 0x239c0000 region_type = mapped_file name = "imageres.dll.mui" filename = "\\Windows\\System32\\en-US\\imageres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\imageres.dll.mui") Region: id = 1178 start_va = 0x239d0000 end_va = 0x239fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000239d0000" filename = "" Region: id = 1179 start_va = 0x239d0000 end_va = 0x239fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000239d0000" filename = "" Region: id = 1180 start_va = 0x239d0000 end_va = 0x239fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000239d0000" filename = "" Region: id = 1181 start_va = 0x1c410000 end_va = 0x1c41ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000001c410000" filename = "" Thread: id = 88 os_tid = 0xe28 [0188.144] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0188.239] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", nBufferLength=0x105, lpBuffer=0x5ddcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", lpFilePart=0x0) returned 0x34 [0188.247] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", nBufferLength=0x105, lpBuffer=0x5ddc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", lpFilePart=0x0) returned 0x34 [0188.250] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", nBufferLength=0x105, lpBuffer=0x5ddb20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpFilePart=0x0) returned 0x1e [0188.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", nBufferLength=0x105, lpBuffer=0x5ddd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpFilePart=0x0) returned 0x1e [0188.254] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", nBufferLength=0x105, lpBuffer=0x5ddc10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\", lpFilePart=0x0) returned 0x1e [0188.273] GetVersionExW (in: lpVersionInformation=0x5ddc70*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5ddc70*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0188.275] GetVersionExW (in: lpVersionInformation=0x5ddc70*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5ddc70*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0189.828] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x5de120, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\System.Windows.Forms\\2.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x64 [0189.884] IsAppThemed () returned 0x1 [0189.924] CoTaskMemAlloc (cb=0xca) returned 0x81f320 [0189.924] CreateActCtxA (pActCtx=0x5de5b8) returned 0x811d28 [0189.969] CoTaskMemFree (pv=0x81f320) [0190.006] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc164 [0190.006] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc162 [0190.179] GetSystemMetrics (nIndex=75) returned 1 [0190.380] AdjustWindowRectEx (in: lpRect=0x5de430, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x5de430) returned 1 [0190.384] GetCurrentProcess () returned 0xffffffffffffffff [0190.385] GetCurrentThread () returned 0xfffffffffffffffe [0190.385] GetCurrentProcess () returned 0xffffffffffffffff [0190.390] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x5de1a0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x5de1a0*=0x24c) returned 1 [0190.409] GetCurrentThreadId () returned 0xe28 [0190.459] GetCurrentActCtx (in: lphActCtx=0x5de1b0 | out: lphActCtx=0x5de1b0*=0x0) returned 1 [0190.460] ActivateActCtx (in: hActCtx=0x811d28, lpCookie=0x5de1f0 | out: hActCtx=0x811d28, lpCookie=0x5de1f0) returned 1 [0190.470] lstrlenW (lpString="䅁") returned 1 [0190.477] GetModuleHandleW (lpModuleName="user32.dll") returned 0x7ffaf5140000 [0190.479] GetACP () returned 0x4e4 [0190.500] CoTaskMemAlloc (cb=0x10) returned 0x818d40 [0190.500] GetProcAddress (hModule=0x7ffaf5140000, lpProcName="DefWindowProcW") returned 0x7ffaf7aa3240 [0190.501] CoTaskMemFree (pv=0x818d40) [0190.504] GetStockObject (i=5) returned 0x1900015 [0190.506] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0190.508] CoTaskMemAlloc (cb=0x4c) returned 0x81b260 [0190.508] RegisterClassW (lpWndClass=0x5dde90) returned 0xc163 [0190.508] CoTaskMemFree (pv=0x81b260) [0190.509] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0190.510] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.378734a", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x2018c [0190.541] SetWindowLongPtrW (hWnd=0x2018c, nIndex=-4, dwNewLong=0x7ffaf7aa3240) returned 0x21609fc [0190.545] GetWindowLongPtrW (hWnd=0x2018c, nIndex=-4) returned 0x7ffaf7aa3240 [0190.551] lstrlenW (lpString="䅁") returned 1 [0190.555] GetVersionExW (in: lpVersionInformation=0x5dbff0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5dbff0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0190.561] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x5dd0a8 | out: phkResult=0x5dd0a8*=0x250) returned 0x0 [0190.565] RegQueryValueExW (in: hKey=0x250, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x5dd02c, lpData=0x0, lpcbData=0x5dd028*=0x0 | out: lpType=0x5dd02c*=0x0, lpData=0x0, lpcbData=0x5dd028*=0x0) returned 0x2 [0190.566] RegQueryValueExW (in: hKey=0x250, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x5dd02c, lpData=0x0, lpcbData=0x5dd028*=0x0 | out: lpType=0x5dd02c*=0x0, lpData=0x0, lpcbData=0x5dd028*=0x0) returned 0x2 [0190.569] RegCloseKey (hKey=0x250) returned 0x0 [0190.571] SetWindowLongPtrW (hWnd=0x2018c, nIndex=-4, dwNewLong=0x2160a4c) returned 0x7ffaf7aa3240 [0190.572] GetWindowLongPtrW (hWnd=0x2018c, nIndex=-4) returned 0x2160a4c [0190.572] GetWindowLongPtrW (hWnd=0x2018c, nIndex=-16) returned 0x6c10000 [0190.576] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc161 [0190.577] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x2018c, Msg=0x24, wParam=0x0, lParam=0x5dd880) returned 0x0 [0190.577] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc160 [0190.577] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x2018c, Msg=0x81, wParam=0x0, lParam=0x5dd800) returned 0x1 [0190.578] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x2018c, Msg=0x83, wParam=0x0, lParam=0x5dd8a0) returned 0x0 [0191.012] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x2018c, Msg=0x1, wParam=0x0, lParam=0x5dd800) returned 0x0 [0191.021] GetClientRect (in: hWnd=0x2018c, lpRect=0x5dd020 | out: lpRect=0x5dd020) returned 1 [0191.021] GetWindowRect (in: hWnd=0x2018c, lpRect=0x5dd020 | out: lpRect=0x5dd020) returned 1 [0191.043] GetParent (hWnd=0x2018c) returned 0x0 [0191.047] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1004143000000001) returned 1 [0191.578] LoadLibraryW (lpLibFileName="RichEd20.DLL") returned 0x7ffadd280000 [0192.459] CoTaskMemAlloc (cb=0x20c) returned 0x811f40 [0192.459] GetModuleFileNameW (in: hModule=0x7ffadd280000, lpFilename=0x811f40, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll")) returned 0x20 [0192.460] CoTaskMemFree (pv=0x811f40) [0192.460] GetFullPathNameW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x5dda60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0192.460] GetFullPathNameW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x5ddab0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0192.461] SetErrorMode (uMode=0x1) returned 0x0 [0192.462] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL" (normalized: "c:\\windows\\system32\\riched20.dll"), fInfoLevelId=0x0, lpFileInformation=0x5ddcc0 | out: lpFileInformation=0x5ddcc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cb35ccc, ftCreationTime.dwHighDateTime=0x1d0baff, ftLastAccessTime.dwLowDateTime=0x9cb35ccc, ftLastAccessTime.dwHighDateTime=0x1d0baff, ftLastWriteTime.dwLowDateTime=0x9cb35ccc, ftLastWriteTime.dwHighDateTime=0x1d0baff, nFileSizeHigh=0x0, nFileSizeLow=0x97400)) returned 1 [0192.463] SetErrorMode (uMode=0x0) returned 0x1 [0192.468] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpdwHandle=0x5ddf30 | out: lpdwHandle=0x5ddf30) returned 0x72c [0192.469] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL", dwHandle=0x0, dwLen=0x72c, lpData=0x26bc970 | out: lpData=0x26bc970) returned 1 [0192.471] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x5ddea8, puLen=0x5ddea0 | out: lplpBuffer=0x5ddea8*=0x26bcd00, puLen=0x5ddea0) returned 1 [0192.479] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x26bca6c, puLen=0x5dde10) returned 1 [0192.480] lstrlenW (lpString="Microsoft Corporation") returned 21 [0192.481] CoTaskMemAlloc (cb=0x2e) returned 0x7f28c0 [0192.481] lstrcpyW (in: lpString1=0x7f28c0, lpString2="Microsoft Corporation" | out: lpString1="Microsoft Corporation") returned="Microsoft Corporation" [0192.481] CoTaskMemFree (pv=0x7f28c0) [0192.481] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x26bcac0, puLen=0x5dde10) returned 1 [0192.481] lstrlenW (lpString="Rich Text Edit Control, v3.1") returned 28 [0192.481] CoTaskMemAlloc (cb=0x3c) returned 0x8222d0 [0192.481] lstrcpyW (in: lpString1=0x8222d0, lpString2="Rich Text Edit Control, v3.1" | out: lpString1="Rich Text Edit Control, v3.1") returned="Rich Text Edit Control, v3.1" [0192.481] CoTaskMemFree (pv=0x8222d0) [0192.481] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x26bcb1c, puLen=0x5dde10) returned 1 [0192.481] lstrlenW (lpString="5.31.23.1231") returned 12 [0192.481] CoTaskMemAlloc (cb=0x1c) returned 0x827af0 [0192.481] lstrcpyW (in: lpString1=0x827af0, lpString2="5.31.23.1231" | out: lpString1="5.31.23.1231") returned="5.31.23.1231" [0192.481] CoTaskMemFree (pv=0x827af0) [0192.481] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x26bcb58, puLen=0x5dde10) returned 1 [0192.481] lstrlenW (lpString="riched20") returned 8 [0192.481] CoTaskMemAlloc (cb=0x14) returned 0x818f20 [0192.481] lstrcpyW (in: lpString1=0x818f20, lpString2="riched20" | out: lpString1="riched20") returned="riched20" [0192.481] CoTaskMemFree (pv=0x818f20) [0192.481] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x26bcb90, puLen=0x5dde10) returned 1 [0192.481] lstrlenW (lpString="Copyright © Microsoft Corp. 1997-2008.") returned 38 [0192.481] CoTaskMemAlloc (cb=0x50) returned 0x81b260 [0192.481] lstrcpyW (in: lpString1=0x81b260, lpString2="Copyright © Microsoft Corp. 1997-2008." | out: lpString1="Copyright © Microsoft Corp. 1997-2008.") returned="Copyright © Microsoft Corp. 1997-2008." [0192.481] CoTaskMemFree (pv=0x81b260) [0192.481] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x26bcc08, puLen=0x5dde10) returned 1 [0192.481] lstrlenW (lpString="riched20.dll") returned 12 [0192.481] CoTaskMemAlloc (cb=0x1c) returned 0x827b50 [0192.481] lstrcpyW (in: lpString1=0x827b50, lpString2="riched20.dll" | out: lpString1="riched20.dll") returned="riched20.dll" [0192.482] CoTaskMemFree (pv=0x827b50) [0192.482] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x26bcc44, puLen=0x5dde10) returned 1 [0192.482] lstrlenW (lpString="Microsoft RichEdit Control, version 3.1") returned 39 [0192.482] CoTaskMemAlloc (cb=0x52) returned 0x81aea0 [0192.482] lstrcpyW (in: lpString1=0x81aea0, lpString2="Microsoft RichEdit Control, version 3.1" | out: lpString1="Microsoft RichEdit Control, version 3.1") returned="Microsoft RichEdit Control, version 3.1" [0192.482] CoTaskMemFree (pv=0x81aea0) [0192.482] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x26bccb8, puLen=0x5dde10) returned 1 [0192.482] lstrlenW (lpString="3.1") returned 3 [0192.482] CoTaskMemAlloc (cb=0xa) returned 0x818d40 [0192.482] lstrcpyW (in: lpString1=0x818d40, lpString2="3.1" | out: lpString1="3.1") returned="3.1" [0192.482] CoTaskMemFree (pv=0x818d40) [0192.482] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x26bca20, puLen=0x5dde10) returned 1 [0192.482] lstrlenW (lpString="Richedit Version 3.1") returned 20 [0192.482] CoTaskMemAlloc (cb=0x2c) returned 0x7f32c0 [0192.482] lstrcpyW (in: lpString1=0x7f32c0, lpString2="Richedit Version 3.1" | out: lpString1="Richedit Version 3.1") returned="Richedit Version 3.1" [0192.482] CoTaskMemFree (pv=0x7f32c0) [0192.482] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x0, puLen=0x5dde10) returned 0 [0192.482] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x0, puLen=0x5dde10) returned 0 [0192.482] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x5dde18, puLen=0x5dde10 | out: lplpBuffer=0x5dde18*=0x0, puLen=0x5dde10) returned 0 [0192.482] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x5ddde8, puLen=0x5ddde0 | out: lplpBuffer=0x5ddde8*=0x26bcd00, puLen=0x5ddde0) returned 1 [0192.484] CoTaskMemAlloc (cb=0x204) returned 0x827fe0 [0192.484] VerLanguageNameW (in: wLang=0x0, szLang=0x827fe0, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0192.488] CoTaskMemFree (pv=0x827fe0) [0192.489] VerQueryValueW (in: pBlock=0x26bc970, lpSubBlock="\\", lplpBuffer=0x5dde38, puLen=0x5dde30 | out: lplpBuffer=0x5dde38*=0x26bc998, puLen=0x5dde30) returned 1 [0192.493] AdjustWindowRectEx (in: lpRect=0x5de060, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x5de060) returned 1 [0192.566] GetSystemDefaultLCID () returned 0x409 [0192.567] GetStockObject (i=17) returned 0x10a0047 [0192.592] GetObjectW (in: h=0x10a0047, c=92, pv=0x5ddcf0 | out: pv=0x5ddcf0) returned 92 [0192.593] GetDC (hWnd=0x0) returned 0x10105e0 [0192.638] GetCurrentProcessId () returned 0xe18 [0192.656] FindAtomW (lpString="GDI+Atom_3608_1") returned 0x0 [0192.657] AddAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0192.682] GdiplusStartup (in: token=0x5dcc38, input=0x5dcc50, output=0x5dcc28 | out: token=0x5dcc38, output=0x5dcc28) returned 0x0 [0192.699] GdipCreateFontFromLogfontW (hdc=0x10105e0, logfont=0x801d58, font=0x5ddd08) returned 0x0 [0193.113] GdipGetFontUnit (font=0x23534f0, unit=0x5ddc10) returned 0x0 [0193.114] GdipGetFontSize (font=0x23534f0, size=0x5ddc10) returned 0x0 [0193.115] GdipGetFontStyle (font=0x23534f0, style=0x5ddc10) returned 0x0 [0193.115] GdipGetFamily (font=0x23534f0, family=0x5ddc10) returned 0x0 [0193.124] GdipGetFontSize (font=0x23534f0, size=0x5ddb70) returned 0x0 [0193.124] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0193.127] GetDC (hWnd=0x0) returned 0xa0100d0 [0193.128] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x5ddcd0) returned 0x0 [0193.133] GdipGetDpiY (graphics=0x1c321520, dpi=0x26bf9a8) returned 0x0 [0193.134] GdipGetFontHeight (font=0x23534f0, graphics=0x1c321520, height=0x5ddca0) returned 0x0 [0193.135] GdipGetEmHeight (family=0x1c319be0, style=0, EmHeight=0x5ddcc0) returned 0x0 [0193.137] GdipGetLineSpacing (family=0x1c319be0, style=0, LineSpacing=0x5ddcc0) returned 0x0 [0193.146] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0193.147] GdipDeleteGraphics (graphics=0x1c321520) returned 0x0 [0193.148] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0193.151] GdipCreateFont (fontFamily=0x1c319be0, emSize=0x0, style=0, unit=0x3, font=0x5ddd60) returned 0x0 [0193.151] GdipGetFontSize (font=0x235ebe0, size=0x5dddf0) returned 0x0 [0193.153] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0193.154] GdipDeleteFont (font=0x23534f0) returned 0x0 [0193.156] GetDC (hWnd=0x0) returned 0xa0100d0 [0193.156] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x5dde20) returned 0x0 [0193.156] GdipGetFontHeight (font=0x235ebe0, graphics=0x1c321520, height=0x5dddf0) returned 0x0 [0193.158] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0193.158] GdipDeleteGraphics (graphics=0x1c321520) returned 0x0 [0193.158] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0193.158] GetSystemMetrics (nIndex=5) returned 1 [0193.158] GetSystemMetrics (nIndex=6) returned 1 [0193.173] AdjustWindowRectEx (in: lpRect=0x5de0a0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5de0a0) returned 1 [0193.175] AdjustWindowRectEx (in: lpRect=0x5de0a0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5de0a0) returned 1 [0193.175] AdjustWindowRectEx (in: lpRect=0x5de0a0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5de0a0) returned 1 [0193.176] AdjustWindowRectEx (in: lpRect=0x5de0a0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5de0a0) returned 1 [0193.186] AdjustWindowRectEx (in: lpRect=0x5de060, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5de060) returned 1 [0193.187] AdjustWindowRectEx (in: lpRect=0x5de060, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5de060) returned 1 [0193.187] AdjustWindowRectEx (in: lpRect=0x5de060, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5de060) returned 1 [0193.191] GdipCreateFontFamilyFromName (name="Microsoft YaHei UI", fontCollection=0x0, fontFamily=0x5de100) returned 0x0 [0193.191] GdipCreateFont (fontFamily=0x1c318c40, emSize=0x0, style=0, unit=0x3, font=0x5de0a0) returned 0x0 [0193.312] GdipGetFontSize (font=0x23534f0, size=0x5de130) returned 0x0 [0193.322] GetDC (hWnd=0x0) returned 0xa0100d0 [0193.322] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x5ddf90) returned 0x0 [0193.323] GdipGetFontHeight (font=0x23534f0, graphics=0x1c3267f0, height=0x5ddf60) returned 0x0 [0193.323] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0193.323] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0193.323] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0193.340] GetDC (hWnd=0x0) returned 0xa0100d0 [0193.340] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x5ddde0) returned 0x0 [0193.340] GdipGetFontHeight (font=0x23534f0, graphics=0x1c3267f0, height=0x5dddb0) returned 0x0 [0193.340] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0193.340] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0193.341] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0193.341] GetSystemMetrics (nIndex=5) returned 1 [0193.341] GetSystemMetrics (nIndex=6) returned 1 [0193.343] AdjustWindowRectEx (in: lpRect=0x5ddfe0, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x5ddfe0) returned 1 [0193.344] AdjustWindowRectEx (in: lpRect=0x5ddfe0, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x5ddfe0) returned 1 [0193.417] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.config", nBufferLength=0x105, lpBuffer=0x5ddbb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.config", lpFilePart=0x0) returned 0x37 [0193.417] SetErrorMode (uMode=0x1) returned 0x0 [0193.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.config" (normalized: "c:\\users\\ciihmnxmn6ps\\desktop\\cryptonardecryptor.config"), fInfoLevelId=0x0, lpFileInformation=0x5dde30 | out: lpFileInformation=0x5dde30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0193.417] SetErrorMode (uMode=0x0) returned 0x1 [0193.545] AdjustWindowRectEx (in: lpRect=0x5ddf60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddf60) returned 1 [0193.549] GetProcessWindowStation () returned 0xc8 [0193.550] GetUserObjectInformationA (in: hObj=0xc8, nIndex=1, pvInfo=0x26da620, nLength=0xc, lpnLengthNeeded=0x5ddb40 | out: pvInfo=0x26da620, lpnLengthNeeded=0x5ddb40) returned 1 [0193.553] SetConsoleCtrlHandler (HandlerRoutine=0x2160adc, Add=1) returned 1 [0193.555] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0193.555] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0193.556] GetClassInfoW (in: hInstance=0x420000, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", lpWndClass=0x26da6a8 | out: lpWndClass=0x26da6a8) returned 0 [0193.558] CoTaskMemAlloc (cb=0x58) returned 0x81b3e0 [0193.558] RegisterClassW (lpWndClass=0x5dda60) returned 0xc15c [0193.558] CoTaskMemFree (pv=0x81b3e0) [0193.559] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", lpWindowName=".NET-BroadcastEventWindow.2.0.0.0.378734a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x50020 [0193.560] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x81, wParam=0x0, lParam=0x5dd250) returned 0x1 [0193.562] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x83, wParam=0x0, lParam=0x5dd300) returned 0x0 [0193.562] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x1, wParam=0x0, lParam=0x5dd1f0) returned 0x0 [0193.562] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0193.562] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0193.564] GetSysColor (nIndex=10) returned 0xb4b4b4 [0193.564] GetSysColor (nIndex=2) returned 0xd1b499 [0193.564] GetSysColor (nIndex=9) returned 0x0 [0193.564] GetSysColor (nIndex=12) returned 0xababab [0193.565] GetSysColor (nIndex=15) returned 0xf0f0f0 [0193.565] GetSysColor (nIndex=20) returned 0xffffff [0193.565] GetSysColor (nIndex=16) returned 0xa0a0a0 [0193.565] GetSysColor (nIndex=15) returned 0xf0f0f0 [0193.565] GetSysColor (nIndex=16) returned 0xa0a0a0 [0193.565] GetSysColor (nIndex=21) returned 0x696969 [0193.565] GetSysColor (nIndex=22) returned 0xe3e3e3 [0193.565] GetSysColor (nIndex=20) returned 0xffffff [0193.565] GetSysColor (nIndex=18) returned 0x0 [0193.565] GetSysColor (nIndex=1) returned 0x0 [0193.565] GetSysColor (nIndex=27) returned 0xead1b9 [0193.565] GetSysColor (nIndex=28) returned 0xf2e4d7 [0193.565] GetSysColor (nIndex=17) returned 0x6d6d6d [0193.565] GetSysColor (nIndex=13) returned 0xff9933 [0193.565] GetSysColor (nIndex=14) returned 0xffffff [0193.565] GetSysColor (nIndex=26) returned 0xcc6600 [0193.565] GetSysColor (nIndex=11) returned 0xfcf7f4 [0193.565] GetSysColor (nIndex=3) returned 0xdbcdbf [0193.565] GetSysColor (nIndex=19) returned 0x0 [0193.565] GetSysColor (nIndex=24) returned 0xe1ffff [0193.565] GetSysColor (nIndex=23) returned 0x0 [0193.565] GetSysColor (nIndex=4) returned 0xf0f0f0 [0193.565] GetSysColor (nIndex=30) returned 0xf0f0f0 [0193.565] GetSysColor (nIndex=29) returned 0xff9933 [0193.565] GetSysColor (nIndex=7) returned 0x0 [0193.565] GetSysColor (nIndex=0) returned 0xc8c8c8 [0193.565] GetSysColor (nIndex=5) returned 0xffffff [0193.565] GetSysColor (nIndex=6) returned 0x646464 [0193.565] GetSysColor (nIndex=8) returned 0x0 [0193.565] AdjustWindowRectEx (in: lpRect=0x5ddf60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddf60) returned 1 [0193.568] AdjustWindowRectEx (in: lpRect=0x5ddf60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddf60) returned 1 [0193.568] AdjustWindowRectEx (in: lpRect=0x5ddf60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddf60) returned 1 [0193.568] AdjustWindowRectEx (in: lpRect=0x5ddf60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddf60) returned 1 [0193.568] AdjustWindowRectEx (in: lpRect=0x5ddf60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddf60) returned 1 [0193.568] AdjustWindowRectEx (in: lpRect=0x5ddf60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddf60) returned 1 [0193.568] AdjustWindowRectEx (in: lpRect=0x5ddf60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddf60) returned 1 [0193.568] AdjustWindowRectEx (in: lpRect=0x5ddfe0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddfe0) returned 1 [0193.568] AdjustWindowRectEx (in: lpRect=0x5ddfe0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddfe0) returned 1 [0193.581] AdjustWindowRectEx (in: lpRect=0x5ddfe0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddfe0) returned 1 [0193.582] AdjustWindowRectEx (in: lpRect=0x5ddfe0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddfe0) returned 1 [0193.582] AdjustWindowRectEx (in: lpRect=0x5ddfe0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddfe0) returned 1 [0193.582] AdjustWindowRectEx (in: lpRect=0x5ddfe0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddfe0) returned 1 [0193.627] AdjustWindowRectEx (in: lpRect=0x5de050, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5de050) returned 1 [0193.628] GetSystemMetrics (nIndex=59) returned 1456 [0193.628] GetSystemMetrics (nIndex=60) returned 916 [0193.628] GetSystemMetrics (nIndex=34) returned 136 [0193.628] GetSystemMetrics (nIndex=35) returned 39 [0193.629] AdjustWindowRectEx (in: lpRect=0x5ddcd0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5ddcd0) returned 1 [0193.629] GetCurrentThreadId () returned 0xe28 [0193.629] GetCurrentThreadId () returned 0xe28 [0193.647] GetCurrentThreadId () returned 0xe28 [0193.647] GetCurrentThreadId () returned 0xe28 [0193.648] GetCurrentThreadId () returned 0xe28 [0193.648] GetCurrentThreadId () returned 0xe28 [0193.648] GetCurrentThreadId () returned 0xe28 [0193.648] GetCurrentThreadId () returned 0xe28 [0193.651] AdjustWindowRectEx (in: lpRect=0x5ddd00, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddd00) returned 1 [0193.653] CoTaskMemAlloc (cb=0x44) returned 0x806a80 [0193.653] GdipGetFamilyName (in: family=0x1c319be0, name=0x806a80, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0193.653] CoTaskMemFree (pv=0x806a80) [0193.655] CreateCompatibleDC (hdc=0x0) returned 0x42010685 [0193.657] GetCurrentObject (hdc=0x42010685, type=0x1) returned 0x1b00017 [0193.657] GetCurrentObject (hdc=0x42010685, type=0x2) returned 0x1900010 [0193.657] GetCurrentObject (hdc=0x42010685, type=0x7) returned 0x185000f [0193.657] GetCurrentObject (hdc=0x42010685, type=0x6) returned 0x18a0048 [0193.666] SaveDC (hdc=0x42010685) returned 1 [0193.668] GetDeviceCaps (hdc=0x42010685, index=90) returned 96 [0193.668] CreateFontIndirectW (lplf=0x801d58) returned 0x290a0573 [0193.669] GetObjectW (in: h=0x290a0573, c=92, pv=0x5dda60 | out: pv=0x5dda60) returned 92 [0193.681] GetCurrentObject (hdc=0x42010685, type=0x6) returned 0x18a0048 [0193.681] GetObjectW (in: h=0x18a0048, c=92, pv=0x5dd890 | out: pv=0x5dd890) returned 92 [0193.683] SelectObject (hdc=0x42010685, h=0x290a0573) returned 0x18a0048 [0193.687] GetMapMode (hdc=0x42010685) returned 1 [0193.687] GetTextMetricsW (in: hdc=0x42010685, lptm=0x5dd8c0 | out: lptm=0x5dd8c0) returned 1 [0193.688] DrawTextExW (in: hdc=0x42010685, lpchText="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq", cchText=34, lprc=0x5ddb90, format=0x2400, lpdtp=0x26dbf28 | out: lpchText="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq", lprc=0x5ddb90) returned 13 [0193.766] AdjustWindowRectEx (in: lpRect=0x5ddcf0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddcf0) returned 1 [0193.774] AdjustWindowRectEx (in: lpRect=0x5ddd00, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddd00) returned 1 [0193.774] DrawTextExW (in: hdc=0x42010685, lpchText="Bitcoin Address:", cchText=16, lprc=0x5ddb90, format=0x2400, lpdtp=0x26dc190 | out: lpchText="Bitcoin Address:", lprc=0x5ddb90) returned 13 [0193.774] AdjustWindowRectEx (in: lpRect=0x5ddd00, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddd00) returned 1 [0193.774] DrawTextExW (in: hdc=0x42010685, lpchText="[HWID]", cchText=6, lprc=0x5ddb90, format=0x2400, lpdtp=0x26dc318 | out: lpchText="[HWID]", lprc=0x5ddb90) returned 13 [0193.774] AdjustWindowRectEx (in: lpRect=0x5ddd00, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddd00) returned 1 [0193.774] DrawTextExW (in: hdc=0x42010685, lpchText="Personal ID:", cchText=12, lprc=0x5ddb90, format=0x2400, lpdtp=0x26dc4a0 | out: lpchText="Personal ID:", lprc=0x5ddb90) returned 13 [0193.778] AdjustWindowRectEx (in: lpRect=0x5dddf0, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5dddf0) returned 1 [0193.778] AdjustWindowRectEx (in: lpRect=0x5ddfc0, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5ddfc0) returned 1 [0193.778] GetSystemMetrics (nIndex=59) returned 1456 [0193.778] GetSystemMetrics (nIndex=60) returned 916 [0193.778] GetSystemMetrics (nIndex=34) returned 136 [0193.778] GetSystemMetrics (nIndex=35) returned 39 [0193.778] AdjustWindowRectEx (in: lpRect=0x5dda70, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5dda70) returned 1 [0193.778] AdjustWindowRectEx (in: lpRect=0x5ddc40, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5ddc40) returned 1 [0193.942] GetSystemMetrics (nIndex=11) returned 32 [0193.942] GetSystemMetrics (nIndex=12) returned 32 [0193.942] GetDC (hWnd=0x0) returned 0xa0100d0 [0193.943] GetDeviceCaps (hdc=0xa0100d0, index=12) returned 32 [0193.943] GetDeviceCaps (hdc=0xa0100d0, index=14) returned 1 [0193.943] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0193.945] CreateIconFromResourceEx (presbits=0x26f85b8, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x70211 [0193.954] CreateCompatibleDC (hdc=0x0) returned 0x3701069e [0193.955] GetDC (hWnd=0x0) returned 0xa0100d0 [0193.956] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x5ddc00) returned 0x0 [0193.957] GdipGetLogFontW (font=0x235ebe0, graphics=0x1c3267f0, logfontW=0x801d58) returned 0x0 [0193.979] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0193.979] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0193.979] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0193.981] CreateFontIndirectW (lplf=0x801d58) returned 0x580a0753 [0193.982] SelectObject (hdc=0x3701069e, h=0x580a0753) returned 0x18a0048 [0193.985] GetTextMetricsW (in: hdc=0x3701069e, lptm=0x5ddda0 | out: lptm=0x5ddda0) returned 1 [0193.986] GetTextExtentPoint32W (in: hdc=0x3701069e, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x26fa450 | out: psizl=0x26fa450) returned 1 [0193.986] SelectObject (hdc=0x3701069e, h=0x18a0048) returned 0x580a0753 [0193.987] DeleteDC (hdc=0x3701069e) returned 1 [0194.010] AdjustWindowRectEx (in: lpRect=0x5ddbe0, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x5ddbe0) returned 1 [0194.010] AdjustWindowRectEx (in: lpRect=0x5dddb0, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x5dddb0) returned 1 [0194.048] AdjustWindowRectEx (in: lpRect=0x5dda70, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x5dda70) returned 1 [0194.048] AdjustWindowRectEx (in: lpRect=0x5ddc40, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x5ddc40) returned 1 [0194.049] GetSystemMetrics (nIndex=34) returned 136 [0194.049] GetSystemMetrics (nIndex=35) returned 39 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddd50, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddd50) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddc70, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddc70) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddd50, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddd50) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddc70, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddc70) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddd50, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddd50) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddc70, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddc70) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddd50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddd50) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddc70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddc70) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5dda10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dda10) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddd50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddd50) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddc70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddc70) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5dda10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dda10) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddd50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddd50) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddc70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddc70) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5dda10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dda10) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddd50, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddd50) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddc70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5ddc70) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5dda10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dda10) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddd50, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x5ddd50) returned 1 [0194.050] AdjustWindowRectEx (in: lpRect=0x5ddc70, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x5ddc70) returned 1 [0194.062] CoTaskMemAlloc (cb=0x20c) returned 0x815990 [0194.063] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x815990 | out: pszPath="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming") returned 0x0 [0194.063] CoTaskMemFree (pv=0x815990) [0194.063] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x5de100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming", lpFilePart=0x0) returned 0x25 [0194.064] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\jokingwithyou.cryptoNar", nBufferLength=0x105, lpBuffer=0x5de260, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\jokingwithyou.cryptoNar", lpFilePart=0x0) returned 0x3d [0194.064] SetErrorMode (uMode=0x1) returned 0x0 [0194.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\AppData\\Roaming\\jokingwithyou.cryptoNar" (normalized: "c:\\users\\ciihmnxmn6ps\\appdata\\roaming\\jokingwithyou.cryptonar"), fInfoLevelId=0x0, lpFileInformation=0x5de470 | out: lpFileInformation=0x5de470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6817cdee, ftCreationTime.dwHighDateTime=0x1d43eff, ftLastAccessTime.dwLowDateTime=0x6817cdee, ftLastAccessTime.dwHighDateTime=0x1d43eff, ftLastWriteTime.dwLowDateTime=0x6817cdee, ftLastWriteTime.dwHighDateTime=0x1d43eff, nFileSizeHigh=0x0, nFileSizeLow=0x45)) returned 1 [0194.064] SetErrorMode (uMode=0x0) returned 0x1 [0194.086] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=1, lpName="CryptNarWalkerDecryptor90912") returned 0x2a8 [0194.089] GetCurrentActCtx (in: lphActCtx=0x5de640 | out: lphActCtx=0x5de640*=0x0) returned 1 [0194.089] ActivateActCtx (in: hActCtx=0x811d28, lpCookie=0x5de680 | out: hActCtx=0x811d28, lpCookie=0x5de680) returned 1 [0194.105] GetCurrentActCtx (in: lphActCtx=0x5de0a0 | out: lphActCtx=0x5de0a0*=0x811d28) returned 1 [0194.105] AdjustWindowRectEx (in: lpRect=0x5ddf50, dwStyle=0x2ca0000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x5ddf50) returned 1 [0194.105] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0194.105] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.378734a", lpWindowName="Crypto Nar 1.0", dwStyle=0x2ca0000, X=-2147483648, Y=-2147483648, nWidth=667, nHeight=405, hWndParent=0x0, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x901f6 [0194.105] SetWindowLongPtrW (hWnd=0x901f6, nIndex=-4, dwNewLong=0x7ffaf7aa3240) returned 0x21609fc [0194.106] GetWindowLongPtrW (hWnd=0x901f6, nIndex=-4) returned 0x7ffaf7aa3240 [0194.106] SetWindowLongPtrW (hWnd=0x901f6, nIndex=-4, dwNewLong=0x216079c) returned 0x7ffaf7aa3240 [0194.106] GetWindowLongPtrW (hWnd=0x901f6, nIndex=-4) returned 0x216079c [0194.106] GetWindowLongPtrW (hWnd=0x901f6, nIndex=-16) returned 0x6ca0000 [0194.108] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x81, wParam=0x0, lParam=0x5dd6f0) returned 0x1 [0194.108] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x83, wParam=0x0, lParam=0x5dd790) returned 0x0 [0194.111] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1, wParam=0x0, lParam=0x5dd6c0) returned 0x0 [0194.111] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dcea0 | out: lpRect=0x5dcea0) returned 1 [0194.111] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5dcea0 | out: lpRect=0x5dcea0) returned 1 [0194.112] SetWindowTextW (hWnd=0x901f6, lpString="Crypto Nar 1.0") returned 1 [0194.112] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xc, wParam=0x0, lParam=0x26bb5e0) returned 0x1 [0194.113] GetStartupInfoW (in: lpStartupInfo=0x26fc0c0 | out: lpStartupInfo=0x26fc0c0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0194.114] GetParent (hWnd=0x901f6) returned 0x0 [0194.133] GetStockObject (i=5) returned 0x1900015 [0194.133] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0194.133] CoTaskMemAlloc (cb=0x4c) returned 0x81b2c0 [0194.133] RegisterClassW (lpWndClass=0x5ddd50) returned 0xc16d [0194.133] CoTaskMemFree (pv=0x81b2c0) [0194.134] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0194.134] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.378734a", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x20232 [0194.134] SetWindowLongPtrW (hWnd=0x20232, nIndex=-4, dwNewLong=0x7ffaf7aa3240) returned 0x21607ec [0194.134] GetWindowLongPtrW (hWnd=0x20232, nIndex=-4) returned 0x7ffaf7aa3240 [0194.135] SetWindowLongPtrW (hWnd=0x20232, nIndex=-4, dwNewLong=0x216383c) returned 0x7ffaf7aa3240 [0194.135] GetWindowLongPtrW (hWnd=0x20232, nIndex=-4) returned 0x216383c [0194.135] GetWindowLongPtrW (hWnd=0x20232, nIndex=-16) returned 0x4c00000 [0194.140] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x24, wParam=0x0, lParam=0x5dd740) returned 0x0 [0194.140] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x81, wParam=0x0, lParam=0x5dd6c0) returned 0x1 [0194.140] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x83, wParam=0x0, lParam=0x5dd760) returned 0x0 [0194.141] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x1, wParam=0x0, lParam=0x5dd6c0) returned 0x0 [0194.141] SetWindowLongPtrW (hWnd=0x901f6, nIndex=-8, dwNewLong=0x20232) returned 0x0 [0194.160] GetSystemMetrics (nIndex=49) returned 16 [0194.160] GetSystemMetrics (nIndex=50) returned 16 [0194.161] CreateIconFromResourceEx (presbits=0x26fc4b0, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xa010f [0194.164] SendMessageW (hWnd=0x901f6, Msg=0x80, wParam=0x0, lParam=0xa010f) returned 0x0 [0194.164] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x80, wParam=0x0, lParam=0xa010f) returned 0x0 [0194.164] SendMessageW (hWnd=0x901f6, Msg=0x80, wParam=0x1, lParam=0x70211) returned 0x0 [0194.164] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x80, wParam=0x1, lParam=0x70211) returned 0x0 [0194.165] GetSystemMenu (hWnd=0x901f6, bRevert=0) returned 0x4c01c9 [0194.168] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5ddf60 | out: lpwndpl=0x5ddf60) returned 1 [0194.169] EnableMenuItem (hMenu=0x4c01c9, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0194.169] EnableMenuItem (hMenu=0x4c01c9, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0194.169] EnableMenuItem (hMenu=0x4c01c9, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0194.169] EnableMenuItem (hMenu=0x4c01c9, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0194.169] EnableMenuItem (hMenu=0x4c01c9, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0194.170] GetClientRect (in: hWnd=0x901f6, lpRect=0x5de080 | out: lpRect=0x5de080) returned 1 [0194.170] GetClientRect (in: hWnd=0x901f6, lpRect=0x5ddf60 | out: lpRect=0x5ddf60) returned 1 [0194.170] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5ddf60 | out: lpRect=0x5ddf60) returned 1 [0194.171] SetWindowLongPtrW (hWnd=0x901f6, nIndex=-8, dwNewLong=0x20232) returned 0x20232 [0194.173] SendMessageW (hWnd=0x20232, Msg=0x80, wParam=0x1, lParam=0x70211) returned 0x0 [0194.173] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x80, wParam=0x1, lParam=0x70211) returned 0x0 [0194.175] GetWindowLongPtrW (hWnd=0x901f6, nIndex=-16) returned 0x6ca0000 [0194.175] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0194.175] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0194.176] GetSystemMetrics (nIndex=42) returned 0 [0194.176] CoTaskMemAlloc (cb=0x22) returned 0x826f80 [0194.176] GetWindowTextW (in: hWnd=0x901f6, lpString=0x826f80, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0194.176] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x826f80) returned 0xe [0194.176] CoTaskMemFree (pv=0x826f80) [0194.177] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0194.177] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0194.177] GetSystemMetrics (nIndex=42) returned 0 [0194.177] CoTaskMemAlloc (cb=0x22) returned 0x826f80 [0194.177] GetWindowTextW (in: hWnd=0x901f6, lpString=0x826f80, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0194.177] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x826f80) returned 0xe [0194.177] CoTaskMemFree (pv=0x826f80) [0194.177] GetWindowLongPtrW (hWnd=0x901f6, nIndex=-16) returned 0x6ca0000 [0194.178] GetWindowLongPtrW (hWnd=0x901f6, nIndex=-20) returned 0x10100 [0194.178] SetWindowLongPtrW (hWnd=0x901f6, nIndex=-16, dwNewLong=0x2ca0000) returned 0x6ca0000 [0194.178] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x5ddf90) returned 0x0 [0194.178] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x5ddf90) returned 0x0 [0194.183] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0xa010f [0194.184] SetWindowLongPtrW (hWnd=0x901f6, nIndex=-20, dwNewLong=0x10000) returned 0x10100 [0194.184] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x5ddf90) returned 0x0 [0194.184] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x5ddf90) returned 0x0 [0194.186] SetWindowPos (hWnd=0x901f6, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0194.186] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5de040) returned 0x0 [0194.186] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x83, wParam=0x1, lParam=0x5de010) returned 0x0 [0194.187] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dda70 | out: lpwndpl=0x5dda70) returned 1 [0194.188] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x47, wParam=0x0, lParam=0x5de040) returned 0x0 [0194.188] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dd810 | out: lpRect=0x5dd810) returned 1 [0194.188] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5dd810 | out: lpRect=0x5dd810) returned 1 [0194.189] RedrawWindow (hWnd=0x901f6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0194.190] GetSystemMenu (hWnd=0x901f6, bRevert=0) returned 0x4c01c9 [0194.190] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5ddf60 | out: lpwndpl=0x5ddf60) returned 1 [0194.190] EnableMenuItem (hMenu=0x4c01c9, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0194.190] EnableMenuItem (hMenu=0x4c01c9, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0194.190] EnableMenuItem (hMenu=0x4c01c9, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0194.190] EnableMenuItem (hMenu=0x4c01c9, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0194.190] EnableMenuItem (hMenu=0x4c01c9, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0194.190] ShowWindow (hWnd=0x901f6, nCmdShow=5) returned 0 [0194.191] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0194.191] GetCurrentActCtx (in: lphActCtx=0x5dd910 | out: lphActCtx=0x5dd910*=0x811d28) returned 1 [0194.191] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x26fcba8 | out: lpWndClass=0x26fcba8) returned 1 [0195.058] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0195.058] CoTaskMemAlloc (cb=0x48) returned 0x838ce0 [0195.058] RegisterClassW (lpWndClass=0x5dd5f0) returned 0xc16e [0195.058] CoTaskMemFree (pv=0x838ce0) [0195.058] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0195.058] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.378734a", lpWindowName="You got the decryption key ?? Cool, click me to decrypt your files !!", dwStyle=0x5601000b, X=12, Y=327, nWidth=637, nHeight=37, hWndParent=0x901f6, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x8003a [0195.058] SetWindowLongPtrW (hWnd=0x8003a, nIndex=-4, dwNewLong=0x7ffaecc8f3f0) returned 0x216388c [0195.058] GetWindowLongPtrW (hWnd=0x8003a, nIndex=-4) returned 0x7ffaecc8f3f0 [0195.059] SetWindowLongPtrW (hWnd=0x8003a, nIndex=-4, dwNewLong=0x21638dc) returned 0x7ffaecc8f3f0 [0195.059] GetWindowLongPtrW (hWnd=0x8003a, nIndex=-4) returned 0x21638dc [0195.059] GetWindowLongPtrW (hWnd=0x8003a, nIndex=-16) returned 0x4601000b [0195.059] GetWindowLongPtrW (hWnd=0x8003a, nIndex=-12) returned 0x0 [0195.059] SetWindowLongPtrW (hWnd=0x8003a, nIndex=-12, dwNewLong=0x8003a) returned 0x0 [0195.059] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x81, wParam=0x0, lParam=0x5dcf60) returned 0x1 [0195.060] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x83, wParam=0x0, lParam=0x5dd000) returned 0x0 [0195.060] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x1, wParam=0x0, lParam=0x5dcec0) returned 0x0 [0195.062] SendMessageW (hWnd=0x8003a, Msg=0x2055, wParam=0x8003a, lParam=0x3) returned 0x2 [0195.062] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0195.062] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0195.062] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0195.063] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0195.063] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0195.366] RedrawWindow (hWnd=0x8003a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0195.366] RedrawWindow (hWnd=0x901f6, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0195.367] GetWindow (hWnd=0x8003a, uCmd=0x3) returned 0x0 [0195.367] GetClientRect (in: hWnd=0x8003a, lpRect=0x5dc630 | out: lpRect=0x5dc630) returned 1 [0195.367] GetWindowRect (in: hWnd=0x8003a, lpRect=0x5dc630 | out: lpRect=0x5dc630) returned 1 [0195.368] GetParent (hWnd=0x8003a) returned 0x901f6 [0195.368] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc620, cPoints=0x2 | out: lpPoints=0x5dc620) returned -6750289 [0195.368] SetWindowTextW (hWnd=0x8003a, lpString="You got the decryption key ?? Cool, click me to decrypt your files !!") returned 1 [0195.368] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0xc, wParam=0x0, lParam=0x26bb4c8) returned 0x1 [0195.369] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x5, wParam=0x0, lParam=0x25027d) returned 0x0 [0195.369] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x3, wParam=0x0, lParam=0x147000c) returned 0x0 [0195.369] GetClientRect (in: hWnd=0x8003a, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.369] GetWindowRect (in: hWnd=0x8003a, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.369] GetParent (hWnd=0x8003a) returned 0x901f6 [0195.369] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc7c0, cPoints=0x2 | out: lpPoints=0x5dc7c0) returned -6750289 [0195.370] SendMessageW (hWnd=0x8003a, Msg=0x2210, wParam=0x3a0001, lParam=0x8003a) returned 0x0 [0195.370] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x2210, wParam=0x3a0001, lParam=0x8003a) returned 0x0 [0195.370] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0195.370] GetParent (hWnd=0x8003a) returned 0x901f6 [0195.370] GetCurrentActCtx (in: lphActCtx=0x5dd910 | out: lphActCtx=0x5dd910*=0x811d28) returned 1 [0195.371] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0195.371] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.378734a", lpWindowName="Copy The Bitcoin Address", dwStyle=0x5601000b, X=337, Y=287, nWidth=296, nHeight=23, hWndParent=0x901f6, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0xd0028 [0195.371] SetWindowLongPtrW (hWnd=0xd0028, nIndex=-4, dwNewLong=0x7ffaecc8f3f0) returned 0x216388c [0195.371] GetWindowLongPtrW (hWnd=0xd0028, nIndex=-4) returned 0x7ffaecc8f3f0 [0195.371] SetWindowLongPtrW (hWnd=0xd0028, nIndex=-4, dwNewLong=0x216392c) returned 0x7ffaecc8f3f0 [0195.371] GetWindowLongPtrW (hWnd=0xd0028, nIndex=-4) returned 0x216392c [0195.371] GetWindowLongPtrW (hWnd=0xd0028, nIndex=-16) returned 0x4601000b [0195.371] GetWindowLongPtrW (hWnd=0xd0028, nIndex=-12) returned 0x0 [0195.371] SetWindowLongPtrW (hWnd=0xd0028, nIndex=-12, dwNewLong=0xd0028) returned 0x0 [0195.371] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x81, wParam=0x0, lParam=0x5dcf60) returned 0x1 [0195.372] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x83, wParam=0x0, lParam=0x5dd000) returned 0x0 [0195.372] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x1, wParam=0x0, lParam=0x5dcf20) returned 0x0 [0195.372] SendMessageW (hWnd=0xd0028, Msg=0x2055, wParam=0xd0028, lParam=0x3) returned 0x2 [0195.372] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0195.372] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0195.373] GetWindow (hWnd=0xd0028, uCmd=0x3) returned 0x8003a [0195.373] GetClientRect (in: hWnd=0xd0028, lpRect=0x5dc690 | out: lpRect=0x5dc690) returned 1 [0195.373] GetWindowRect (in: hWnd=0xd0028, lpRect=0x5dc690 | out: lpRect=0x5dc690) returned 1 [0195.373] GetParent (hWnd=0xd0028) returned 0x901f6 [0195.373] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc680, cPoints=0x2 | out: lpPoints=0x5dc680) returned -6750289 [0195.373] SetWindowTextW (hWnd=0xd0028, lpString="Copy The Bitcoin Address") returned 1 [0195.373] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0xc, wParam=0x0, lParam=0x26bb448) returned 0x1 [0195.373] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x5, wParam=0x0, lParam=0x170128) returned 0x0 [0195.373] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x3, wParam=0x0, lParam=0x11f0151) returned 0x0 [0195.373] GetClientRect (in: hWnd=0xd0028, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.373] GetWindowRect (in: hWnd=0xd0028, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.373] GetParent (hWnd=0xd0028) returned 0x901f6 [0195.373] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc7c0, cPoints=0x2 | out: lpPoints=0x5dc7c0) returned -6750289 [0195.374] SendMessageW (hWnd=0xd0028, Msg=0x2210, wParam=0x280001, lParam=0xd0028) returned 0x0 [0195.374] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x2210, wParam=0x280001, lParam=0xd0028) returned 0x0 [0195.374] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0195.374] GetParent (hWnd=0xd0028) returned 0x901f6 [0195.374] GetCurrentActCtx (in: lphActCtx=0x5dd910 | out: lphActCtx=0x5dd910*=0x811d28) returned 1 [0195.374] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0195.374] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.378734a", lpWindowName="Copy Personal ID", dwStyle=0x5601000b, X=12, Y=287, nWidth=296, nHeight=23, hWndParent=0x901f6, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0xa018a [0195.374] SetWindowLongPtrW (hWnd=0xa018a, nIndex=-4, dwNewLong=0x7ffaecc8f3f0) returned 0x216388c [0195.374] GetWindowLongPtrW (hWnd=0xa018a, nIndex=-4) returned 0x7ffaecc8f3f0 [0195.374] SetWindowLongPtrW (hWnd=0xa018a, nIndex=-4, dwNewLong=0x216397c) returned 0x7ffaecc8f3f0 [0195.374] GetWindowLongPtrW (hWnd=0xa018a, nIndex=-4) returned 0x216397c [0195.374] GetWindowLongPtrW (hWnd=0xa018a, nIndex=-16) returned 0x4601000b [0195.374] GetWindowLongPtrW (hWnd=0xa018a, nIndex=-12) returned 0x0 [0195.375] SetWindowLongPtrW (hWnd=0xa018a, nIndex=-12, dwNewLong=0xa018a) returned 0x0 [0195.375] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x81, wParam=0x0, lParam=0x5dcf60) returned 0x1 [0195.375] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x83, wParam=0x0, lParam=0x5dd000) returned 0x0 [0195.375] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x1, wParam=0x0, lParam=0x5dcf30) returned 0x0 [0195.375] SendMessageW (hWnd=0xa018a, Msg=0x2055, wParam=0xa018a, lParam=0x3) returned 0x2 [0195.376] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0195.376] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0195.376] GetWindow (hWnd=0xa018a, uCmd=0x3) returned 0xd0028 [0195.376] GetClientRect (in: hWnd=0xa018a, lpRect=0x5dc6a0 | out: lpRect=0x5dc6a0) returned 1 [0195.376] GetWindowRect (in: hWnd=0xa018a, lpRect=0x5dc6a0 | out: lpRect=0x5dc6a0) returned 1 [0195.376] GetParent (hWnd=0xa018a) returned 0x901f6 [0195.376] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc690, cPoints=0x2 | out: lpPoints=0x5dc690) returned -6750289 [0195.376] SetWindowTextW (hWnd=0xa018a, lpString="Copy Personal ID") returned 1 [0195.376] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0xc, wParam=0x0, lParam=0x26bb3c0) returned 0x1 [0195.376] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x5, wParam=0x0, lParam=0x170128) returned 0x0 [0195.376] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x3, wParam=0x0, lParam=0x11f000c) returned 0x0 [0195.376] GetClientRect (in: hWnd=0xa018a, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.376] GetWindowRect (in: hWnd=0xa018a, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.376] GetParent (hWnd=0xa018a) returned 0x901f6 [0195.376] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc7c0, cPoints=0x2 | out: lpPoints=0x5dc7c0) returned -6750289 [0195.377] SendMessageW (hWnd=0xa018a, Msg=0x2210, wParam=0x18a0001, lParam=0xa018a) returned 0x0 [0195.377] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x2210, wParam=0x18a0001, lParam=0xa018a) returned 0x0 [0195.377] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0195.377] GetParent (hWnd=0xa018a) returned 0x901f6 [0195.377] GetCurrentActCtx (in: lphActCtx=0x5dd910 | out: lphActCtx=0x5dd910*=0x811d28) returned 1 [0195.377] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x26fd2e0 | out: lpWndClass=0x26fd2e0) returned 1 [0195.377] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0195.377] CoTaskMemAlloc (cb=0x48) returned 0x8394b0 [0195.377] RegisterClassW (lpWndClass=0x5dd5f0) returned 0xc170 [0195.378] CoTaskMemFree (pv=0x8394b0) [0195.378] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0195.378] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.378734a", lpWindowName="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq", dwStyle=0x5600000d, X=432, Y=262, nWidth=211, nHeight=13, hWndParent=0x901f6, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x5016e [0195.378] SetWindowLongPtrW (hWnd=0x5016e, nIndex=-4, dwNewLong=0x7ffaecc560c0) returned 0x21639cc [0195.378] GetWindowLongPtrW (hWnd=0x5016e, nIndex=-4) returned 0x7ffaecc560c0 [0195.378] SetWindowLongPtrW (hWnd=0x5016e, nIndex=-4, dwNewLong=0x2163a1c) returned 0x7ffaecc560c0 [0195.378] GetWindowLongPtrW (hWnd=0x5016e, nIndex=-4) returned 0x2163a1c [0195.378] GetWindowLongPtrW (hWnd=0x5016e, nIndex=-16) returned 0x4600000d [0195.378] GetWindowLongPtrW (hWnd=0x5016e, nIndex=-12) returned 0x0 [0195.378] SetWindowLongPtrW (hWnd=0x5016e, nIndex=-12, dwNewLong=0x5016e) returned 0x0 [0195.378] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x81, wParam=0x0, lParam=0x5dcf60) returned 0x1 [0195.379] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x83, wParam=0x0, lParam=0x5dd000) returned 0x0 [0195.379] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x1, wParam=0x0, lParam=0x5dcf10) returned 0x0 [0195.379] GetWindow (hWnd=0x5016e, uCmd=0x3) returned 0xa018a [0195.379] GetClientRect (in: hWnd=0x5016e, lpRect=0x5dc680 | out: lpRect=0x5dc680) returned 1 [0195.379] GetWindowRect (in: hWnd=0x5016e, lpRect=0x5dc680 | out: lpRect=0x5dc680) returned 1 [0195.379] GetParent (hWnd=0x5016e) returned 0x901f6 [0195.379] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc670, cPoints=0x2 | out: lpPoints=0x5dc670) returned -6750289 [0195.380] SetWindowTextW (hWnd=0x5016e, lpString="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq") returned 1 [0195.380] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0xc, wParam=0x0, lParam=0x26bb320) returned 0x1 [0195.380] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x5, wParam=0x0, lParam=0xd00d3) returned 0x0 [0195.380] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x3, wParam=0x0, lParam=0x10601b0) returned 0x0 [0195.380] GetClientRect (in: hWnd=0x5016e, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.380] GetWindowRect (in: hWnd=0x5016e, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.380] GetParent (hWnd=0x5016e) returned 0x901f6 [0195.380] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc7c0, cPoints=0x2 | out: lpPoints=0x5dc7c0) returned -6750289 [0195.381] SendMessageW (hWnd=0x5016e, Msg=0x2210, wParam=0x16e0001, lParam=0x5016e) returned 0x0 [0195.381] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x2210, wParam=0x16e0001, lParam=0x5016e) returned 0x0 [0195.381] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0195.381] GetParent (hWnd=0x5016e) returned 0x901f6 [0195.381] GetCurrentActCtx (in: lphActCtx=0x5dd910 | out: lphActCtx=0x5dd910*=0x811d28) returned 1 [0195.381] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0195.381] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.378734a", lpWindowName="Bitcoin Address:", dwStyle=0x5600000d, X=334, Y=262, nWidth=83, nHeight=13, hWndParent=0x901f6, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0xb0030 [0195.381] SetWindowLongPtrW (hWnd=0xb0030, nIndex=-4, dwNewLong=0x7ffaecc560c0) returned 0x21639cc [0195.381] GetWindowLongPtrW (hWnd=0xb0030, nIndex=-4) returned 0x7ffaecc560c0 [0195.381] SetWindowLongPtrW (hWnd=0xb0030, nIndex=-4, dwNewLong=0x2163a6c) returned 0x7ffaecc560c0 [0195.382] GetWindowLongPtrW (hWnd=0xb0030, nIndex=-4) returned 0x2163a6c [0195.382] GetWindowLongPtrW (hWnd=0xb0030, nIndex=-16) returned 0x4600000d [0195.382] GetWindowLongPtrW (hWnd=0xb0030, nIndex=-12) returned 0x0 [0195.382] SetWindowLongPtrW (hWnd=0xb0030, nIndex=-12, dwNewLong=0xb0030) returned 0x0 [0195.382] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x81, wParam=0x0, lParam=0x5dcf60) returned 0x1 [0195.382] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x83, wParam=0x0, lParam=0x5dd000) returned 0x0 [0195.382] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x1, wParam=0x0, lParam=0x5dcf30) returned 0x0 [0195.382] GetWindow (hWnd=0xb0030, uCmd=0x3) returned 0x5016e [0195.382] GetClientRect (in: hWnd=0xb0030, lpRect=0x5dc6a0 | out: lpRect=0x5dc6a0) returned 1 [0195.382] GetWindowRect (in: hWnd=0xb0030, lpRect=0x5dc6a0 | out: lpRect=0x5dc6a0) returned 1 [0195.382] GetParent (hWnd=0xb0030) returned 0x901f6 [0195.382] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc690, cPoints=0x2 | out: lpPoints=0x5dc690) returned -6750289 [0195.383] SetWindowTextW (hWnd=0xb0030, lpString="Bitcoin Address:") returned 1 [0195.383] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0xc, wParam=0x0, lParam=0x26bb2a0) returned 0x1 [0195.383] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x5, wParam=0x0, lParam=0xd0053) returned 0x0 [0195.383] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x3, wParam=0x0, lParam=0x106014e) returned 0x0 [0195.383] GetClientRect (in: hWnd=0xb0030, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.383] GetWindowRect (in: hWnd=0xb0030, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.383] GetParent (hWnd=0xb0030) returned 0x901f6 [0195.383] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc7c0, cPoints=0x2 | out: lpPoints=0x5dc7c0) returned -6750289 [0195.383] SendMessageW (hWnd=0xb0030, Msg=0x2210, wParam=0x300001, lParam=0xb0030) returned 0x0 [0195.383] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x2210, wParam=0x300001, lParam=0xb0030) returned 0x0 [0195.383] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0195.384] GetParent (hWnd=0xb0030) returned 0x901f6 [0195.384] GetCurrentActCtx (in: lphActCtx=0x5dd910 | out: lphActCtx=0x5dd910*=0x811d28) returned 1 [0195.384] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0195.384] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.378734a", lpWindowName="[HWID]", dwStyle=0x5600000d, X=112, Y=262, nWidth=43, nHeight=13, hWndParent=0x901f6, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x7002e [0195.384] SetWindowLongPtrW (hWnd=0x7002e, nIndex=-4, dwNewLong=0x7ffaecc560c0) returned 0x21639cc [0195.384] GetWindowLongPtrW (hWnd=0x7002e, nIndex=-4) returned 0x7ffaecc560c0 [0195.384] SetWindowLongPtrW (hWnd=0x7002e, nIndex=-4, dwNewLong=0x2163abc) returned 0x7ffaecc560c0 [0195.384] GetWindowLongPtrW (hWnd=0x7002e, nIndex=-4) returned 0x2163abc [0195.384] GetWindowLongPtrW (hWnd=0x7002e, nIndex=-16) returned 0x4600000d [0195.384] GetWindowLongPtrW (hWnd=0x7002e, nIndex=-12) returned 0x0 [0195.384] SetWindowLongPtrW (hWnd=0x7002e, nIndex=-12, dwNewLong=0x7002e) returned 0x0 [0195.384] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x81, wParam=0x0, lParam=0x5dcf60) returned 0x1 [0195.385] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x83, wParam=0x0, lParam=0x5dd000) returned 0x0 [0195.385] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x1, wParam=0x0, lParam=0x5dcf40) returned 0x0 [0195.385] GetWindow (hWnd=0x7002e, uCmd=0x3) returned 0xb0030 [0195.385] GetClientRect (in: hWnd=0x7002e, lpRect=0x5dc6b0 | out: lpRect=0x5dc6b0) returned 1 [0195.385] GetWindowRect (in: hWnd=0x7002e, lpRect=0x5dc6b0 | out: lpRect=0x5dc6b0) returned 1 [0195.385] GetParent (hWnd=0x7002e) returned 0x901f6 [0195.385] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc6a0, cPoints=0x2 | out: lpPoints=0x5dc6a0) returned -6750289 [0195.386] SetWindowTextW (hWnd=0x7002e, lpString="[HWID]") returned 1 [0195.386] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xc, wParam=0x0, lParam=0x26bb250) returned 0x1 [0195.386] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x5, wParam=0x0, lParam=0xd002b) returned 0x0 [0195.386] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x3, wParam=0x0, lParam=0x1060070) returned 0x0 [0195.386] GetClientRect (in: hWnd=0x7002e, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.386] GetWindowRect (in: hWnd=0x7002e, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.386] GetParent (hWnd=0x7002e) returned 0x901f6 [0195.386] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc7c0, cPoints=0x2 | out: lpPoints=0x5dc7c0) returned -6750289 [0195.386] SendMessageW (hWnd=0x7002e, Msg=0x2210, wParam=0x2e0001, lParam=0x7002e) returned 0x0 [0195.386] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x2210, wParam=0x2e0001, lParam=0x7002e) returned 0x0 [0195.386] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0195.386] GetParent (hWnd=0x7002e) returned 0x901f6 [0195.386] GetCurrentActCtx (in: lphActCtx=0x5dd910 | out: lphActCtx=0x5dd910*=0x811d28) returned 1 [0195.386] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0195.387] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.378734a", lpWindowName="Personal ID:", dwStyle=0x5600000d, X=29, Y=262, nWidth=65, nHeight=13, hWndParent=0x901f6, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x40148 [0195.387] SetWindowLongPtrW (hWnd=0x40148, nIndex=-4, dwNewLong=0x7ffaecc560c0) returned 0x21639cc [0195.387] GetWindowLongPtrW (hWnd=0x40148, nIndex=-4) returned 0x7ffaecc560c0 [0195.387] SetWindowLongPtrW (hWnd=0x40148, nIndex=-4, dwNewLong=0x2163b0c) returned 0x7ffaecc560c0 [0195.387] GetWindowLongPtrW (hWnd=0x40148, nIndex=-4) returned 0x2163b0c [0195.387] GetWindowLongPtrW (hWnd=0x40148, nIndex=-16) returned 0x4600000d [0195.387] GetWindowLongPtrW (hWnd=0x40148, nIndex=-12) returned 0x0 [0195.387] SetWindowLongPtrW (hWnd=0x40148, nIndex=-12, dwNewLong=0x40148) returned 0x0 [0195.387] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x81, wParam=0x0, lParam=0x5dcf60) returned 0x1 [0195.387] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x83, wParam=0x0, lParam=0x5dd000) returned 0x0 [0195.388] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x1, wParam=0x0, lParam=0x5dcf30) returned 0x0 [0195.388] GetWindow (hWnd=0x40148, uCmd=0x3) returned 0x7002e [0195.388] GetClientRect (in: hWnd=0x40148, lpRect=0x5dc6a0 | out: lpRect=0x5dc6a0) returned 1 [0195.388] GetWindowRect (in: hWnd=0x40148, lpRect=0x5dc6a0 | out: lpRect=0x5dc6a0) returned 1 [0195.388] GetParent (hWnd=0x40148) returned 0x901f6 [0195.388] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc690, cPoints=0x2 | out: lpPoints=0x5dc690) returned -6750289 [0195.389] SetWindowTextW (hWnd=0x40148, lpString="Personal ID:") returned 1 [0195.389] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0xc, wParam=0x0, lParam=0x26bb1e0) returned 0x1 [0195.389] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x5, wParam=0x0, lParam=0xd0041) returned 0x0 [0195.389] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x3, wParam=0x0, lParam=0x106001d) returned 0x0 [0195.389] GetClientRect (in: hWnd=0x40148, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.389] GetWindowRect (in: hWnd=0x40148, lpRect=0x5dc7d0 | out: lpRect=0x5dc7d0) returned 1 [0195.389] GetParent (hWnd=0x40148) returned 0x901f6 [0195.389] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc7c0, cPoints=0x2 | out: lpPoints=0x5dc7c0) returned -6750289 [0195.389] SendMessageW (hWnd=0x40148, Msg=0x2210, wParam=0x1480001, lParam=0x40148) returned 0x0 [0195.389] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x2210, wParam=0x1480001, lParam=0x40148) returned 0x0 [0195.389] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0195.389] GetParent (hWnd=0x40148) returned 0x901f6 [0195.389] GetCurrentActCtx (in: lphActCtx=0x5dd8c0 | out: lphActCtx=0x5dd8c0*=0x811d28) returned 1 [0195.389] GetClassInfoW (in: hInstance=0x0, lpClassName="RichEdit20W", lpWndClass=0x26fdb30 | out: lpWndClass=0x26fdb30) returned 1 [0195.390] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0195.390] CoTaskMemAlloc (cb=0x52) returned 0x81b2c0 [0195.390] RegisterClassW (lpWndClass=0x5dd5a0) returned 0xc171 [0195.390] CoTaskMemFree (pv=0x81b2c0) [0195.390] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0195.390] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.RichEdit20W.app.0.378734a", lpWindowName=0x0, dwStyle=0x56210044, X=12, Y=12, nWidth=637, nHeight=207, hWndParent=0x901f6, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x50208 [0195.390] SetWindowLongPtrW (hWnd=0x50208, nIndex=-4, dwNewLong=0x7ffadd2a9920) returned 0x2163b5c [0195.390] GetWindowLongPtrW (hWnd=0x50208, nIndex=-4) returned 0x7ffadd2a9920 [0195.391] SetWindowLongPtrW (hWnd=0x50208, nIndex=-4, dwNewLong=0x2163c4c) returned 0x7ffadd2a9920 [0195.391] GetWindowLongPtrW (hWnd=0x50208, nIndex=-4) returned 0x2163c4c [0195.391] GetWindowLongPtrW (hWnd=0x50208, nIndex=-16) returned 0x46210044 [0195.391] GetWindowLongPtrW (hWnd=0x50208, nIndex=-12) returned 0x0 [0195.391] SetWindowLongPtrW (hWnd=0x50208, nIndex=-12, dwNewLong=0x50208) returned 0x0 [0195.391] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x81, wParam=0x0, lParam=0x5dcf00) returned 0x1 [0196.667] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x5db060) returned 0x0 [0196.667] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x5db060) returned 0x0 [0196.710] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x83, wParam=0x0, lParam=0x5dcfb0) returned 0x0 [0196.713] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x1, wParam=0x0, lParam=0x5dcf00) returned 0x0 [0196.714] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x46, wParam=0x0, lParam=0x5db950) returned 0x0 [0196.714] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x83, wParam=0x1, lParam=0x5db920) returned 0x0 [0196.715] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x47, wParam=0x0, lParam=0x5db950) returned 0x0 [0196.715] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x5, wParam=0x0, lParam=0xcb0279) returned 0x0 [0196.715] GetClientRect (in: hWnd=0x50208, lpRect=0x5db0e0 | out: lpRect=0x5db0e0) returned 1 [0196.715] GetWindowRect (in: hWnd=0x50208, lpRect=0x5db0e0 | out: lpRect=0x5db0e0) returned 1 [0196.715] GetParent (hWnd=0x50208) returned 0x901f6 [0196.715] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5db0d0, cPoints=0x2 | out: lpPoints=0x5db0d0) returned -6750289 [0196.715] GetParent (hWnd=0x50208) returned 0x901f6 [0196.718] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x5dbac0) returned 0x0 [0196.718] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x5dbac0) returned 0x1 [0197.489] GetWindow (hWnd=0x50208, uCmd=0x3) returned 0x40148 [0197.489] GetClientRect (in: hWnd=0x50208, lpRect=0x5dc6a0 | out: lpRect=0x5dc6a0) returned 1 [0197.489] GetWindowRect (in: hWnd=0x50208, lpRect=0x5dc6a0 | out: lpRect=0x5dc6a0) returned 1 [0197.489] GetParent (hWnd=0x50208) returned 0x901f6 [0197.489] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc690, cPoints=0x2 | out: lpPoints=0x5dc690) returned -6750289 [0197.491] SendMessageW (hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0197.491] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0197.492] SendMessageW (hWnd=0x50208, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0197.492] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0197.493] SendMessageW (hWnd=0x50208, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0197.493] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0197.495] SendMessageW (hWnd=0x50208, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x41 [0197.495] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x41 [0197.495] SendMessageW (hWnd=0x50208, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0197.495] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0197.497] SendMessageW (hWnd=0x50208, Msg=0x43a, wParam=0x0, lParam=0x5dc4a0) returned 0xf800003f [0197.497] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x43a, wParam=0x0, lParam=0x5dc4a0) returned 0xf800003f [0197.499] GetDC (hWnd=0x0) returned 0xa0100d0 [0197.499] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x5dc140) returned 0x0 [0197.499] GdipGetLogFontW (font=0x23534f0, graphics=0x1c3267f0, logfontW=0x801d90) returned 0x0 [0197.499] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0197.500] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0197.500] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0197.500] CreateFontIndirectW (lplf=0x801d90) returned 0xd0a073d [0197.500] SendMessageW (hWnd=0x50208, Msg=0x30, wParam=0xd0a073d, lParam=0x0) returned 0x1 [0197.502] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x30, wParam=0xd0a073d, lParam=0x0) returned 0x1 [0197.557] SendMessageW (hWnd=0x50208, Msg=0x43a, wParam=0x0, lParam=0x5dbbe0) returned 0xf800003f [0197.557] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x43a, wParam=0x0, lParam=0x5dbbe0) returned 0xf800003f [0197.558] GetSystemMetrics (nIndex=5) returned 1 [0197.558] GetSystemMetrics (nIndex=6) returned 1 [0197.558] SendMessageW (hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0197.558] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0197.753] SendMessageW (hWnd=0x50208, Msg=0x446, wParam=0x0, lParam=0x208e0020) returned 0x1 [0197.753] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x446, wParam=0x0, lParam=0x208e0020) returned 0x1 [0197.758] DragAcceptFiles (hWnd=0x50208, fAccept=0) [0197.758] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x5dc440) returned 0x0 [0197.758] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x5dc440) returned 0x1 [0197.762] SendMessageW (hWnd=0x50208, Msg=0x437, wParam=0x0, lParam=0x2700598) returned 0x0 [0197.762] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x437, wParam=0x0, lParam=0x2700598) returned 0x0 [0197.762] SendMessageW (hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0197.762] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0197.920] SendMessageW (hWnd=0x50208, Msg=0x449, wParam=0x11, lParam=0x5dc460) returned 0xb34 [0197.920] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x449, wParam=0x11, lParam=0x5dc460) returned 0xb34 [0197.927] SendMessageW (hWnd=0x50208, Msg=0x204e, wParam=0x50208, lParam=0x5dab68) returned 0x0 [0197.930] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x46, wParam=0x0, lParam=0x5daab0) returned 0x0 [0197.930] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x83, wParam=0x1, lParam=0x5daa80) returned 0x0 [0197.931] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x47, wParam=0x0, lParam=0x5daab0) returned 0x0 [0197.931] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x5, wParam=0x0, lParam=0xcb0268) returned 0x0 [0197.931] GetClientRect (in: hWnd=0x50208, lpRect=0x5da240 | out: lpRect=0x5da240) returned 1 [0197.931] GetWindowRect (in: hWnd=0x50208, lpRect=0x5da240 | out: lpRect=0x5da240) returned 1 [0197.931] GetParent (hWnd=0x50208) returned 0x901f6 [0197.931] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5da230, cPoints=0x2 | out: lpPoints=0x5da230) returned -6750289 [0197.931] GetWindowTextLengthW (hWnd=0x50208) returned 1447 [0197.931] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5a7 [0197.931] GetSystemMetrics (nIndex=42) returned 0 [0197.931] CoTaskMemAlloc (cb=0xb54) returned 0x85b120 [0197.931] GetWindowTextW (in: hWnd=0x50208, lpString=0x85b120, nMaxCount=1448 | out: lpString="Your important files including photos, videos, documents, databases, etc. were encrypted with our CryptoNar ransomware. The only way to get your files back is to pay us. Otherwise, your files will be lost forever.\r\n\r\nImportant note: Removing CryptoNar will not restore access to your encrypted files.\r\n\r\nEncryption was made using a unique RSA-2048 public key generated for this computer. To decrypt files you need to acquire the private key (decryption key).\r\nThe only copy of the private key, which will allow you to decrypt your files, is located on a secret server in the Internet; the server will eliminate the key after 72 hours since its generation (since the moment your computer was infected). Once this has been done, nobody will ever be able to restore your files.\r\n\r\nIn order to receive your decryption key, you will have to pay $200 in bitcoins to this bitcoin address: [bitcoin address]\r\n\r\nWhen time comes to send the bitcoins to us, make sure to include your e-mail and your personal ID (you can see it below) in the extra information box (it may apper also as 'Extra Note' or 'Optional message') in order to get your personal decryption key. It may take up to 6-8 hours to take your personal decryption key.\r\n\r\nAfter the payment was made, and you received your decryption key, just press the decryption button below. Enter your decryption key you received, and wait until the decryption process is done.\r\n\r\nYour ID: [HWID goes here]") returned 1447 [0197.931] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xd, wParam=0x5a8, lParam=0x85b120) returned 0x5a7 [0197.931] CoTaskMemFree (pv=0x85b120) [0197.931] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0197.931] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0197.931] GetSystemMetrics (nIndex=42) returned 0 [0197.931] CoTaskMemAlloc (cb=0x22) returned 0x852eb0 [0197.931] GetWindowTextW (in: hWnd=0x901f6, lpString=0x852eb0, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0197.931] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x852eb0) returned 0xe [0197.931] CoTaskMemFree (pv=0x852eb0) [0197.931] GetParent (hWnd=0x50208) returned 0x901f6 [0197.934] SendMessageW (hWnd=0x50208, Msg=0x204e, wParam=0x50208, lParam=0x5dab68) returned 0x0 [0197.934] SendMessageW (hWnd=0x50208, Msg=0x2111, wParam=0x3000208, lParam=0x50208) returned 0x0 [0197.936] SendMessageW (hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0197.936] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0197.936] SendMessageW (hWnd=0x50208, Msg=0xb9, wParam=0xffffffffffffffff, lParam=0x0) returned 0x0 [0197.936] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xb9, wParam=0xffffffffffffffff, lParam=0x0) returned 0x0 [0197.936] SendMessageW (hWnd=0x50208, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x15 [0197.936] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x15 [0197.937] SendMessageW (hWnd=0x50208, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0197.937] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0197.938] SendMessageW (hWnd=0x50208, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0197.938] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0197.938] SendMessageW (hWnd=0x50208, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0197.938] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0197.939] SendMessageW (hWnd=0x50208, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0197.939] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0197.940] SendMessageW (hWnd=0x50208, Msg=0x204e, wParam=0x50208, lParam=0x5dae08) returned 0x0 [0197.941] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x5, wParam=0x0, lParam=0xcb0268) returned 0x0 [0197.941] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x3, wParam=0x0, lParam=0xe000e) returned 0x0 [0197.942] GetClientRect (in: hWnd=0x50208, lpRect=0x5dc7b0 | out: lpRect=0x5dc7b0) returned 1 [0197.942] GetWindowRect (in: hWnd=0x50208, lpRect=0x5dc7b0 | out: lpRect=0x5dc7b0) returned 1 [0197.942] GetParent (hWnd=0x50208) returned 0x901f6 [0197.942] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dc7a0, cPoints=0x2 | out: lpPoints=0x5dc7a0) returned -6750289 [0197.942] SendMessageW (hWnd=0x50208, Msg=0x2210, wParam=0x2080001, lParam=0x50208) returned 0x0 [0197.942] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x2210, wParam=0x2080001, lParam=0x50208) returned 0x0 [0197.942] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0197.942] GetParent (hWnd=0x50208) returned 0x901f6 [0197.946] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0197.946] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0197.946] GetSystemMetrics (nIndex=42) returned 0 [0197.946] CoTaskMemAlloc (cb=0x22) returned 0x8537b0 [0197.946] GetWindowTextW (in: hWnd=0x901f6, lpString=0x8537b0, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0197.946] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x8537b0) returned 0xe [0197.946] CoTaskMemFree (pv=0x8537b0) [0197.980] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x5dd918 | out: phkResult=0x5dd918*=0x3bc) returned 0x0 [0197.982] GetFullPathNameW (in: lpFileName="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", nBufferLength=0x105, lpBuffer=0x5dd410, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", lpFilePart=0x0) returned 0x34 [0197.986] RegQueryValueExW (in: hKey=0x3bc, lpValueName="Sound Card", lpReserved=0x0, lpType=0x5dd82c, lpData=0x0, lpcbData=0x5dd828*=0x0 | out: lpType=0x5dd82c*=0x0, lpData=0x0, lpcbData=0x5dd828*=0x0) returned 0x2 [0197.988] RegSetValueExW (in: hKey=0x3bc, lpValueName="Sound Card", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", cbData=0x6a | out: lpData="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe") returned 0x0 [0197.991] RegCloseKey (hKey=0x3bc) returned 0x0 [0197.999] SendMessageW (hWnd=0x50208, Msg=0x44a, wParam=0x11, lParam=0x5dd850) returned 0xb4e [0197.999] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x44a, wParam=0x11, lParam=0x5dd850) returned 0xb4e [0198.159] GetLogicalDrives () returned 0x4 [0198.160] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x5dd150, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0198.160] SetErrorMode (uMode=0x1) returned 0x0 [0198.160] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x5dd580 | out: lpFileInformation=0x5dd580*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x90fa1f36, ftCreationTime.dwHighDateTime=0x1d0baef, ftLastAccessTime.dwLowDateTime=0xcbe64b75, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0xcbe64b75, ftLastWriteTime.dwHighDateTime=0x1d41fe0, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0198.161] SetErrorMode (uMode=0x0) returned 0x1 [0198.162] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x5dd2c0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0198.167] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3bc [0198.168] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3c0 [0198.177] SetEvent (hEvent=0x3c0) returned 1 [0198.218] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dd4e8*=0x3bc, lpdwindex=0x5dd200 | out: lpdwindex=0x5dd200) returned 0x0 [0198.225] CoGetContextToken (in: pToken=0x5dd1f0 | out: pToken=0x5dd1f0) returned 0x0 [0198.225] CoGetContextToken (in: pToken=0x5dd130 | out: pToken=0x5dd130) returned 0x0 [0198.225] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0198.225] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd270*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd250 | out: ppvObject=0x5dd250*=0x820d10) returned 0x0 [0198.225] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0198.225] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0198.226] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x408 [0198.226] SetEvent (hEvent=0x3c0) returned 1 [0198.226] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dc468*=0x408, lpdwindex=0x5dc180 | out: lpdwindex=0x5dc180) returned 0x0 [0198.229] CoGetContextToken (in: pToken=0x5dc170 | out: pToken=0x5dc170) returned 0x0 [0198.229] CoGetContextToken (in: pToken=0x5dc0b0 | out: pToken=0x5dc0b0) returned 0x0 [0198.229] WbemDefPath:IUnknown:AddRef (This=0x820dd0) returned 0x2 [0198.229] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x5dc1f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dc1d0 | out: ppvObject=0x5dc1d0*=0x820dd0) returned 0x0 [0198.230] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x2 [0198.230] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x1 [0198.232] CoGetContextToken (in: pToken=0x5dc2f0 | out: pToken=0x5dc2f0) returned 0x0 [0198.232] CoGetContextToken (in: pToken=0x5dc230 | out: pToken=0x5dc230) returned 0x0 [0198.232] WbemDefPath:IUnknown:AddRef (This=0x820dd0) returned 0x2 [0198.232] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x5dc370*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dc350 | out: ppvObject=0x5dc350*=0x820dd0) returned 0x0 [0198.232] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x2 [0198.232] WbemDefPath:IWbemPath:SetText (This=0x820dd0, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0198.232] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x1 [0198.233] CoGetContextToken (in: pToken=0x5dd370 | out: pToken=0x5dd370) returned 0x0 [0198.233] CoGetContextToken (in: pToken=0x5dd2b0 | out: pToken=0x5dd2b0) returned 0x0 [0198.233] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0198.233] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd3f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3d0 | out: ppvObject=0x5dd3d0*=0x820d10) returned 0x0 [0198.233] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0198.233] WbemDefPath:IWbemPath:SetText (This=0x820d10, uMode=0x4, pszPath="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0198.233] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0198.237] CoGetContextToken (in: pToken=0x5dd3a0 | out: pToken=0x5dd3a0) returned 0x0 [0198.237] CoGetContextToken (in: pToken=0x5dd2e0 | out: pToken=0x5dd2e0) returned 0x0 [0198.237] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0198.237] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd420*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd400 | out: ppvObject=0x5dd400*=0x820d10) returned 0x0 [0198.237] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0198.237] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x820d10, puCount=0x5dd6a0 | out: puCount=0x5dd6a0*=0x0) returned 0x0 [0198.237] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0198.238] CoGetContextToken (in: pToken=0x5dd3a0 | out: pToken=0x5dd3a0) returned 0x0 [0198.238] CoGetContextToken (in: pToken=0x5dd2e0 | out: pToken=0x5dd2e0) returned 0x0 [0198.238] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0198.238] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd420*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd400 | out: ppvObject=0x5dd400*=0x820d10) returned 0x0 [0198.239] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0198.239] WbemDefPath:IWbemPath:GetText (in: This=0x820d10, lFlags=2, puBuffLength=0x5dd6a0*=0x0, pszText=0x0 | out: puBuffLength=0x5dd6a0*=0x20, pszText=0x0) returned 0x0 [0198.239] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0198.239] CoGetContextToken (in: pToken=0x5dd3a0 | out: pToken=0x5dd3a0) returned 0x0 [0198.239] CoGetContextToken (in: pToken=0x5dd2e0 | out: pToken=0x5dd2e0) returned 0x0 [0198.239] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0198.239] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd420*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd400 | out: ppvObject=0x5dd400*=0x820d10) returned 0x0 [0198.239] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0198.239] WbemDefPath:IWbemPath:GetText (in: This=0x820d10, lFlags=2, puBuffLength=0x5dd6a0*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5dd6a0*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0198.239] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0198.240] CoGetContextToken (in: pToken=0x5dd3c0 | out: pToken=0x5dd3c0) returned 0x0 [0198.240] CoGetContextToken (in: pToken=0x5dd300 | out: pToken=0x5dd300) returned 0x0 [0198.240] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0198.240] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd440*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd420 | out: ppvObject=0x5dd420*=0x820d10) returned 0x0 [0198.240] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0198.240] WbemDefPath:IWbemPath:GetInfo (in: This=0x820d10, uRequestedInfo=0x0, puResponse=0x5dd6c0 | out: puResponse=0x5dd6c0*=0xc19) returned 0x0 [0198.240] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0198.240] CoGetContextToken (in: pToken=0x5dd3a0 | out: pToken=0x5dd3a0) returned 0x0 [0198.240] CoGetContextToken (in: pToken=0x5dd2e0 | out: pToken=0x5dd2e0) returned 0x0 [0198.241] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0198.241] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd420*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd400 | out: ppvObject=0x5dd400*=0x820d10) returned 0x0 [0198.241] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0198.241] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x820d10, puCount=0x5dd6a0 | out: puCount=0x5dd6a0*=0x0) returned 0x0 [0198.241] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0198.241] CoGetContextToken (in: pToken=0x5dd3c0 | out: pToken=0x5dd3c0) returned 0x0 [0198.241] CoGetContextToken (in: pToken=0x5dd300 | out: pToken=0x5dd300) returned 0x0 [0198.241] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0198.241] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd440*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd420 | out: ppvObject=0x5dd420*=0x820d10) returned 0x0 [0198.241] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0198.241] WbemDefPath:IWbemPath:GetInfo (in: This=0x820d10, uRequestedInfo=0x0, puResponse=0x5dd6c0 | out: puResponse=0x5dd6c0*=0xc19) returned 0x0 [0198.241] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0198.241] CoGetContextToken (in: pToken=0x5dd3c0 | out: pToken=0x5dd3c0) returned 0x0 [0198.241] CoGetContextToken (in: pToken=0x5dd300 | out: pToken=0x5dd300) returned 0x0 [0198.241] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0198.241] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd440*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd420 | out: ppvObject=0x5dd420*=0x820d10) returned 0x0 [0198.241] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0198.242] WbemDefPath:IWbemPath:GetInfo (in: This=0x820d10, uRequestedInfo=0x0, puResponse=0x5dd6c0 | out: puResponse=0x5dd6c0*=0xc19) returned 0x0 [0198.242] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0198.243] CoGetContextToken (in: pToken=0x5dd2c0 | out: pToken=0x5dd2c0) returned 0x0 [0198.243] CoGetContextToken (in: pToken=0x5dd200 | out: pToken=0x5dd200) returned 0x0 [0198.243] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0198.243] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd340*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd320 | out: ppvObject=0x5dd320*=0x820d10) returned 0x0 [0198.243] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0198.243] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x820d10, puCount=0x5dd5c0 | out: puCount=0x5dd5c0*=0x0) returned 0x0 [0198.243] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0198.244] CoGetContextToken (in: pToken=0x5dd280 | out: pToken=0x5dd280) returned 0x0 [0198.244] CoGetContextToken (in: pToken=0x5dd1c0 | out: pToken=0x5dd1c0) returned 0x0 [0198.244] WbemDefPath:IUnknown:AddRef (This=0x820dd0) returned 0x2 [0198.244] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x5dd300*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2e0 | out: ppvObject=0x5dd2e0*=0x820dd0) returned 0x0 [0198.244] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x2 [0198.244] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x820dd0, puCount=0x5dd580 | out: puCount=0x5dd580*=0x2) returned 0x0 [0198.244] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x1 [0198.244] CoGetContextToken (in: pToken=0x5dd280 | out: pToken=0x5dd280) returned 0x0 [0198.244] CoGetContextToken (in: pToken=0x5dd1c0 | out: pToken=0x5dd1c0) returned 0x0 [0198.244] WbemDefPath:IUnknown:AddRef (This=0x820dd0) returned 0x2 [0198.244] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x5dd300*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2e0 | out: ppvObject=0x5dd2e0*=0x820dd0) returned 0x0 [0198.244] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x2 [0198.244] WbemDefPath:IWbemPath:GetText (in: This=0x820dd0, lFlags=4, puBuffLength=0x5dd580*=0x0, pszText=0x0 | out: puBuffLength=0x5dd580*=0xf, pszText=0x0) returned 0x0 [0198.244] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x1 [0198.244] CoGetContextToken (in: pToken=0x5dd280 | out: pToken=0x5dd280) returned 0x0 [0198.244] CoGetContextToken (in: pToken=0x5dd1c0 | out: pToken=0x5dd1c0) returned 0x0 [0198.244] WbemDefPath:IUnknown:AddRef (This=0x820dd0) returned 0x2 [0198.244] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x5dd300*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2e0 | out: ppvObject=0x5dd2e0*=0x820dd0) returned 0x0 [0198.245] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x2 [0198.245] WbemDefPath:IWbemPath:GetText (in: This=0x820dd0, lFlags=4, puBuffLength=0x5dd580*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd580*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0198.245] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x1 [0198.245] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x40c [0198.245] SetEvent (hEvent=0x3c0) returned 1 [0198.245] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dd3a8*=0x40c, lpdwindex=0x5dd0c0 | out: lpdwindex=0x5dd0c0) returned 0x0 [0198.247] CoGetContextToken (in: pToken=0x5dd0b0 | out: pToken=0x5dd0b0) returned 0x0 [0198.247] CoGetContextToken (in: pToken=0x5dcff0 | out: pToken=0x5dcff0) returned 0x0 [0198.247] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x2 [0198.247] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x5dd130*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd110 | out: ppvObject=0x5dd110*=0x820e90) returned 0x0 [0198.247] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x2 [0198.247] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x1 [0198.248] CoGetContextToken (in: pToken=0x5dd230 | out: pToken=0x5dd230) returned 0x0 [0198.248] CoGetContextToken (in: pToken=0x5dd170 | out: pToken=0x5dd170) returned 0x0 [0198.248] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x2 [0198.248] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x5dd2b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd290 | out: ppvObject=0x5dd290*=0x820e90) returned 0x0 [0198.248] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x2 [0198.248] WbemDefPath:IWbemPath:SetText (This=0x820e90, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0198.248] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x1 [0198.248] CoGetContextToken (in: pToken=0x5dd1f0 | out: pToken=0x5dd1f0) returned 0x0 [0198.248] CoGetContextToken (in: pToken=0x5dd130 | out: pToken=0x5dd130) returned 0x0 [0198.248] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x2 [0198.248] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x5dd270*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd250 | out: ppvObject=0x5dd250*=0x820e90) returned 0x0 [0198.248] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x2 [0198.248] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x820e90, puCount=0x5dd4f0 | out: puCount=0x5dd4f0*=0x2) returned 0x0 [0198.248] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x1 [0198.248] CoGetContextToken (in: pToken=0x5dd1f0 | out: pToken=0x5dd1f0) returned 0x0 [0198.248] CoGetContextToken (in: pToken=0x5dd130 | out: pToken=0x5dd130) returned 0x0 [0198.248] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x2 [0198.248] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x5dd270*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd250 | out: ppvObject=0x5dd250*=0x820e90) returned 0x0 [0198.249] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x2 [0198.249] WbemDefPath:IWbemPath:GetText (in: This=0x820e90, lFlags=4, puBuffLength=0x5dd4f0*=0x0, pszText=0x0 | out: puBuffLength=0x5dd4f0*=0xf, pszText=0x0) returned 0x0 [0198.249] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x1 [0198.249] CoGetContextToken (in: pToken=0x5dd1f0 | out: pToken=0x5dd1f0) returned 0x0 [0198.249] CoGetContextToken (in: pToken=0x5dd130 | out: pToken=0x5dd130) returned 0x0 [0198.249] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x2 [0198.249] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x5dd270*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd250 | out: ppvObject=0x5dd250*=0x820e90) returned 0x0 [0198.249] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x2 [0198.249] WbemDefPath:IWbemPath:GetText (in: This=0x820e90, lFlags=4, puBuffLength=0x5dd4f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd4f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0198.249] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x1 [0198.281] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dd3d8*=0x420, lpdwindex=0x5dd090 | out: lpdwindex=0x5dd090) returned 0x0 [0199.166] CoGetContextToken (in: pToken=0x5dd370 | out: pToken=0x5dd370) returned 0x0 [0199.166] CoGetContextToken (in: pToken=0x5dd2b0 | out: pToken=0x5dd2b0) returned 0x0 [0199.166] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0199.166] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd3f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3d0 | out: ppvObject=0x5dd3d0*=0x820d10) returned 0x0 [0199.166] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0199.167] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x820d10, puCount=0x5dd670 | out: puCount=0x5dd670*=0x0) returned 0x0 [0199.167] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0199.167] CoGetContextToken (in: pToken=0x5dd370 | out: pToken=0x5dd370) returned 0x0 [0199.167] CoGetContextToken (in: pToken=0x5dd2b0 | out: pToken=0x5dd2b0) returned 0x0 [0199.167] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0199.167] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd3f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3d0 | out: ppvObject=0x5dd3d0*=0x820d10) returned 0x0 [0199.167] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0199.167] WbemDefPath:IWbemPath:GetText (in: This=0x820d10, lFlags=2, puBuffLength=0x5dd670*=0x0, pszText=0x0 | out: puBuffLength=0x5dd670*=0x20, pszText=0x0) returned 0x0 [0199.167] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0199.167] CoGetContextToken (in: pToken=0x5dd370 | out: pToken=0x5dd370) returned 0x0 [0199.167] CoGetContextToken (in: pToken=0x5dd2b0 | out: pToken=0x5dd2b0) returned 0x0 [0199.167] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0199.167] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd3f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3d0 | out: ppvObject=0x5dd3d0*=0x820d10) returned 0x0 [0199.167] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0199.168] WbemDefPath:IWbemPath:GetText (in: This=0x820d10, lFlags=2, puBuffLength=0x5dd670*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5dd670*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0199.168] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0199.168] CoGetContextToken (in: pToken=0x5dd450 | out: pToken=0x5dd450) returned 0x0 [0199.168] CoGetContextToken (in: pToken=0x5dd390 | out: pToken=0x5dd390) returned 0x0 [0199.168] IUnknown:QueryInterface (in: This=0x7f7150, riid=0x7ffadec5d3c0*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd260 | out: ppvObject=0x5dd260*=0x7f7170) returned 0x0 [0199.168] CObjectContext::ContextCallback () returned 0x0 [0199.177] IUnknown:Release (This=0x7f7170) returned 0x1 [0199.177] CoUnmarshalInterface (in: pStm=0x85d7d0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5dd488 | out: ppv=0x5dd488*=0x85f578) returned 0x0 [0199.178] CoMarshalInterface (pStm=0x85d7d0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x85f578, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0199.179] WbemLocator:IUnknown:QueryInterface (in: This=0x85f578, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd020 | out: ppvObject=0x5dd020*=0x85f578) returned 0x0 [0199.179] WbemLocator:IUnknown:QueryInterface (in: This=0x85f578, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5dd0a0 | out: ppvObject=0x5dd0a0*=0x0) returned 0x80004002 [0199.181] WbemLocator:IUnknown:QueryInterface (in: This=0x85f578, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5dce38 | out: ppvObject=0x5dce38*=0x0) returned 0x80004002 [0199.190] WbemLocator:IUnknown:AddRef (This=0x85f578) returned 0x3 [0199.190] CoGetContextToken (in: pToken=0x5dccf0 | out: pToken=0x5dccf0) returned 0x0 [0199.191] CoGetContextToken (in: pToken=0x5dcc80 | out: pToken=0x5dcc80) returned 0x0 [0199.191] IUnknown:QueryInterface (in: This=0x7f7028, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dccd8 | out: ppvObject=0x5dccd8*=0x7f7040) returned 0x0 [0199.191] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7f7040, pAptType=0x5dcd80 | out: pAptType=0x5dcd80*=3) returned 0x0 [0199.191] IUnknown:Release (This=0x7f7040) returned 0x0 [0199.192] CoGetObjectContext (in: riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x8649d8 | out: ppv=0x8649d8*=0x7f7028) returned 0x0 [0199.192] WbemLocator:IUnknown:QueryInterface (in: This=0x85f578, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dccb0 | out: ppvObject=0x5dccb0*=0x85f458) returned 0x0 [0199.192] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x85f458, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5dcce0 | out: pCid=0x5dcce0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.192] WbemLocator:IUnknown:Release (This=0x85f458) returned 0x3 [0199.192] CoGetContextToken (in: pToken=0x5dccc0 | out: pToken=0x5dccc0) returned 0x0 [0199.192] WbemLocator:IUnknown:AddRef (This=0x85f578) returned 0x4 [0199.192] WbemLocator:IUnknown:QueryInterface (in: This=0x85f578, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcdd8 | out: ppvObject=0x5dcdd8*=0x85f540) returned 0x0 [0199.192] WbemLocator:IUnknown:Release (This=0x85f578) returned 0x4 [0199.192] WbemLocator:IRpcOptions:Query (in: This=0x85f540, pPrx=0x85f578, dwProperty=2, pdwValue=0x5dce48 | out: pdwValue=0x5dce48) returned 0x0 [0199.193] WbemLocator:IUnknown:Release (This=0x85f540) returned 0x3 [0199.193] WbemLocator:IUnknown:Release (This=0x85f578) returned 0x2 [0199.193] WbemLocator:IUnknown:Release (This=0x85f578) returned 0x1 [0199.193] CoGetContextToken (in: pToken=0x5dd1a0 | out: pToken=0x5dd1a0) returned 0x0 [0199.193] WbemLocator:IUnknown:AddRef (This=0x85f578) returned 0x2 [0199.193] WbemLocator:IUnknown:QueryInterface (in: This=0x85f578, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd1f8 | out: ppvObject=0x5dd1f8*=0x85f530) returned 0x0 [0199.193] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x85f530, pProxy=0x85f578, pAuthnSvc=0x5dd1f0, pAuthzSvc=0x5dd1ec, pServerPrincName=0x5dd218, pAuthnLevel=0x5dd1e8, pImpLevel=0x5dd204, pAuthInfo=0x5dd228, pCapabilites=0x5dd200 | out: pAuthnSvc=0x5dd1f0*=0xa, pAuthzSvc=0x5dd1ec*=0x0, pServerPrincName=0x5dd218, pAuthnLevel=0x5dd1e8*=0x6, pImpLevel=0x5dd204*=0x2, pAuthInfo=0x5dd228, pCapabilites=0x5dd200*=0x1) returned 0x0 [0199.193] WbemLocator:IUnknown:Release (This=0x85f530) returned 0x2 [0199.193] WbemLocator:IUnknown:QueryInterface (in: This=0x85f578, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd198 | out: ppvObject=0x5dd198*=0x85f578) returned 0x0 [0199.193] WbemLocator:IUnknown:QueryInterface (in: This=0x85f578, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd128 | out: ppvObject=0x5dd128*=0x85f530) returned 0x0 [0199.194] WbemLocator:IClientSecurity:SetBlanket (This=0x85f530, pProxy=0x85f578, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0199.194] WbemLocator:IUnknown:Release (This=0x85f530) returned 0x3 [0199.194] WbemLocator:IUnknown:Release (This=0x85f578) returned 0x2 [0199.194] CoTaskMemFree (pv=0x85da40) [0199.194] WbemLocator:IUnknown:Release (This=0x85f578) returned 0x1 [0199.194] SysStringLen (param_1=0x0) returned 0x0 [0199.194] CoGetContextToken (in: pToken=0x5dd1c0 | out: pToken=0x5dd1c0) returned 0x0 [0199.194] CoGetContextToken (in: pToken=0x5dd100 | out: pToken=0x5dd100) returned 0x0 [0199.194] WbemLocator:IUnknown:AddRef (This=0x85f578) returned 0x2 [0199.194] WbemLocator:IUnknown:QueryInterface (in: This=0x85f578, riid=0x5dd240*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5dd220 | out: ppvObject=0x5dd220*=0x866ca0) returned 0x0 [0199.200] WbemLocator:IUnknown:Release (This=0x85f578) returned 0x2 [0199.200] WbemLocator:IUnknown:Release (This=0x866ca0) returned 0x1 [0199.200] CoGetContextToken (in: pToken=0x5dd0d0 | out: pToken=0x5dd0d0) returned 0x0 [0199.200] CoGetContextToken (in: pToken=0x5dd010 | out: pToken=0x5dd010) returned 0x0 [0199.200] WbemLocator:IUnknown:AddRef (This=0x85f578) returned 0x2 [0199.200] WbemLocator:IUnknown:QueryInterface (in: This=0x85f578, riid=0x5dd150*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5dd130 | out: ppvObject=0x5dd130*=0x866ca0) returned 0x0 [0199.200] WbemLocator:IUnknown:Release (This=0x85f578) returned 0x2 [0199.200] WbemLocator:IUnknown:AddRef (This=0x866ca0) returned 0x3 [0199.200] WbemLocator:IUnknown:QueryInterface (in: This=0x866ca0, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd1f8 | out: ppvObject=0x5dd1f8*=0x85f530) returned 0x0 [0199.201] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x85f530, pProxy=0x866ca0, pAuthnSvc=0x5dd1f0, pAuthzSvc=0x5dd1ec, pServerPrincName=0x5dd218, pAuthnLevel=0x5dd1e8, pImpLevel=0x5dd204, pAuthInfo=0x5dd228, pCapabilites=0x5dd200 | out: pAuthnSvc=0x5dd1f0*=0xa, pAuthzSvc=0x5dd1ec*=0x0, pServerPrincName=0x5dd218, pAuthnLevel=0x5dd1e8*=0x6, pImpLevel=0x5dd204*=0x2, pAuthInfo=0x5dd228, pCapabilites=0x5dd200*=0x1) returned 0x0 [0199.201] WbemLocator:IUnknown:Release (This=0x85f530) returned 0x3 [0199.201] WbemLocator:IUnknown:QueryInterface (in: This=0x866ca0, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd198 | out: ppvObject=0x5dd198*=0x85f578) returned 0x0 [0199.201] WbemLocator:IUnknown:QueryInterface (in: This=0x866ca0, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd128 | out: ppvObject=0x5dd128*=0x85f530) returned 0x0 [0199.201] WbemLocator:IClientSecurity:SetBlanket (This=0x85f530, pProxy=0x866ca0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0199.201] WbemLocator:IUnknown:Release (This=0x85f530) returned 0x4 [0199.201] WbemLocator:IUnknown:Release (This=0x85f578) returned 0x3 [0199.201] CoTaskMemFree (pv=0x85da70) [0199.201] WbemLocator:IUnknown:Release (This=0x866ca0) returned 0x2 [0199.201] SysStringLen (param_1=0x0) returned 0x0 [0199.201] CoGetContextToken (in: pToken=0x5dd380 | out: pToken=0x5dd380) returned 0x0 [0199.201] CoGetContextToken (in: pToken=0x5dd2c0 | out: pToken=0x5dd2c0) returned 0x0 [0199.201] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0199.201] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd400*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3e0 | out: ppvObject=0x5dd3e0*=0x820d10) returned 0x0 [0199.201] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0199.202] WbemDefPath:IWbemPath:GetText (in: This=0x820d10, lFlags=2, puBuffLength=0x5dd680*=0x0, pszText=0x0 | out: puBuffLength=0x5dd680*=0x20, pszText=0x0) returned 0x0 [0199.202] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0199.202] CoGetContextToken (in: pToken=0x5dd380 | out: pToken=0x5dd380) returned 0x0 [0199.202] CoGetContextToken (in: pToken=0x5dd2c0 | out: pToken=0x5dd2c0) returned 0x0 [0199.202] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x2 [0199.202] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x5dd400*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3e0 | out: ppvObject=0x5dd3e0*=0x820d10) returned 0x0 [0199.202] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0199.202] WbemDefPath:IWbemPath:GetText (in: This=0x820d10, lFlags=2, puBuffLength=0x5dd680*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5dd680*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0199.202] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0199.210] IWbemServices:GetObject (in: This=0x866ca0, strObjectPath="win32_logicaldisk.deviceid=\"C:\"", lFlags=0, pCtx=0x0, ppObject=0x5dd628*=0x0, ppCallResult=0x0 | out: ppObject=0x5dd628*=0x878b40, ppCallResult=0x0) returned 0x0 [0199.257] CoGetContextToken (in: pToken=0x5dd2d0 | out: pToken=0x5dd2d0) returned 0x0 [0199.257] CoGetContextToken (in: pToken=0x5dd210 | out: pToken=0x5dd210) returned 0x0 [0199.257] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x3 [0199.257] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x5dd350*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd330 | out: ppvObject=0x5dd330*=0x820e90) returned 0x0 [0199.257] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x3 [0199.257] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x820e90, puCount=0x5dd5d0 | out: puCount=0x5dd5d0*=0x2) returned 0x0 [0199.257] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x2 [0199.257] CoGetContextToken (in: pToken=0x5dd2d0 | out: pToken=0x5dd2d0) returned 0x0 [0199.257] CoGetContextToken (in: pToken=0x5dd210 | out: pToken=0x5dd210) returned 0x0 [0199.257] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x3 [0199.257] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x5dd350*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd330 | out: ppvObject=0x5dd330*=0x820e90) returned 0x0 [0199.258] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x3 [0199.258] WbemDefPath:IWbemPath:GetText (in: This=0x820e90, lFlags=4, puBuffLength=0x5dd5d0*=0x0, pszText=0x0 | out: puBuffLength=0x5dd5d0*=0xf, pszText=0x0) returned 0x0 [0199.258] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x2 [0199.258] CoGetContextToken (in: pToken=0x5dd2d0 | out: pToken=0x5dd2d0) returned 0x0 [0199.258] CoGetContextToken (in: pToken=0x5dd210 | out: pToken=0x5dd210) returned 0x0 [0199.258] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x3 [0199.258] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x5dd350*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd330 | out: ppvObject=0x5dd330*=0x820e90) returned 0x0 [0199.258] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x3 [0199.258] WbemDefPath:IWbemPath:GetText (in: This=0x820e90, lFlags=4, puBuffLength=0x5dd5d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd5d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0199.258] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x2 [0199.262] IWbemClassObject:Get (in: This=0x878b40, wszName="VolumeSerialNumber", lFlags=0, pVal=0x5dd5c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd5bc*=0, plFlavor=0x5dd5b8*=0 | out: pVal=0x5dd5c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="D2CA4DEF", varVal2=0x0), pType=0x5dd5bc*=8, plFlavor=0x5dd5b8*=0) returned 0x0 [0199.262] SysStringLen (param_1="D2CA4DEF") returned 0x8 [0199.263] IWbemClassObject:Get (in: This=0x878b40, wszName="VolumeSerialNumber", lFlags=0, pVal=0x5dd610*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd60c*=8, plFlavor=0x5dd608*=0 | out: pVal=0x5dd610*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="D2CA4DEF", varVal2=0x0), pType=0x5dd60c*=8, plFlavor=0x5dd608*=0) returned 0x0 [0199.263] SysStringLen (param_1="D2CA4DEF") returned 0x8 [0199.265] IUnknown:Release (This=0x878b40) returned 0x0 [0199.355] VirtualProtect (in: lpAddress=0x2710fb8, dwSize=0x13, flNewProtect=0x40, lpflOldProtect=0x5dd720 | out: lpflOldProtect=0x5dd720*=0x4) returned 1 [0199.379] CallWindowProcW (lpPrevWndFunc=0x2710fb8, hWnd=0x0, Msg=0x0, wParam=0x2710f60, lParam=0x8) returned 0x506e3 [0199.436] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x47c [0199.436] SetEvent (hEvent=0x3c0) returned 1 [0199.443] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dd418*=0x47c, lpdwindex=0x5dd130 | out: lpdwindex=0x5dd130) returned 0x0 [0199.446] CoGetContextToken (in: pToken=0x5dd120 | out: pToken=0x5dd120) returned 0x0 [0199.446] CoGetContextToken (in: pToken=0x5dd060 | out: pToken=0x5dd060) returned 0x0 [0199.446] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x2 [0199.446] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd1a0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd180 | out: ppvObject=0x5dd180*=0x821010) returned 0x0 [0199.446] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.446] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x1 [0199.446] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0199.446] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0199.446] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x2 [0199.446] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x821010) returned 0x0 [0199.446] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.446] WbemDefPath:IWbemPath:SetText (This=0x821010, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0199.447] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x1 [0199.447] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0199.447] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0199.447] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x2 [0199.447] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x821010) returned 0x0 [0199.447] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.447] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x821010, puCount=0x5dd5a0 | out: puCount=0x5dd5a0*=0x2) returned 0x0 [0199.447] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x1 [0199.447] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0199.447] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0199.448] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x2 [0199.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x821010) returned 0x0 [0199.448] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.448] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd5a0*=0x0, pszText=0x0 | out: puBuffLength=0x5dd5a0*=0xf, pszText=0x0) returned 0x0 [0199.448] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x1 [0199.448] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0199.448] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0199.448] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x2 [0199.448] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x821010) returned 0x0 [0199.448] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.448] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd5a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd5a0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0199.448] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x1 [0199.449] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0199.449] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0199.449] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x2 [0199.449] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x821010) returned 0x0 [0199.450] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.450] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x821010, puCount=0x5dd5a0 | out: puCount=0x5dd5a0*=0x2) returned 0x0 [0199.450] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x1 [0199.450] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0199.450] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0199.450] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x2 [0199.450] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x821010) returned 0x0 [0199.450] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.450] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd5a0*=0x0, pszText=0x0 | out: puBuffLength=0x5dd5a0*=0xf, pszText=0x0) returned 0x0 [0199.450] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x1 [0199.450] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0199.450] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0199.450] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x2 [0199.450] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x821010) returned 0x0 [0199.450] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.450] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd5a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd5a0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0199.450] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x1 [0199.463] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dd398*=0x490, lpdwindex=0x5dd050 | out: lpdwindex=0x5dd050) returned 0x0 [0199.487] CoGetContextToken (in: pToken=0x5dd3c0 | out: pToken=0x5dd3c0) returned 0x0 [0199.487] CoGetContextToken (in: pToken=0x5dd300 | out: pToken=0x5dd300) returned 0x0 [0199.487] IUnknown:QueryInterface (in: This=0x7f7150, riid=0x7ffadec5d3c0*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd1d0 | out: ppvObject=0x5dd1d0*=0x7f7170) returned 0x0 [0199.487] CObjectContext::ContextCallback () returned 0x0 [0199.488] IUnknown:Release (This=0x7f7170) returned 0x1 [0199.488] CoUnmarshalInterface (in: pStm=0x85df20, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5dd3f8 | out: ppv=0x5dd3f8*=0x85ff38) returned 0x0 [0199.489] CoMarshalInterface (pStm=0x85df20, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x85ff38, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0199.489] WbemLocator:IUnknown:QueryInterface (in: This=0x85ff38, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcf90 | out: ppvObject=0x5dcf90*=0x85ff38) returned 0x0 [0199.489] WbemLocator:IUnknown:QueryInterface (in: This=0x85ff38, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5dd010 | out: ppvObject=0x5dd010*=0x0) returned 0x80004002 [0199.489] WbemLocator:IUnknown:QueryInterface (in: This=0x85ff38, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5dcda8 | out: ppvObject=0x5dcda8*=0x0) returned 0x80004002 [0199.490] WbemLocator:IUnknown:AddRef (This=0x85ff38) returned 0x3 [0199.490] CoGetContextToken (in: pToken=0x5dcc60 | out: pToken=0x5dcc60) returned 0x0 [0199.490] CoGetContextToken (in: pToken=0x5dcbf0 | out: pToken=0x5dcbf0) returned 0x0 [0199.490] IUnknown:QueryInterface (in: This=0x7f7028, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcc48 | out: ppvObject=0x5dcc48*=0x7f7040) returned 0x0 [0199.490] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7f7040, pAptType=0x5dccf0 | out: pAptType=0x5dccf0*=3) returned 0x0 [0199.490] IUnknown:Release (This=0x7f7040) returned 0x1 [0199.490] WbemLocator:IUnknown:QueryInterface (in: This=0x85ff38, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcc20 | out: ppvObject=0x5dcc20*=0x85fe18) returned 0x0 [0199.490] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x85fe18, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5dcc50 | out: pCid=0x5dcc50*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.490] WbemLocator:IUnknown:Release (This=0x85fe18) returned 0x3 [0199.490] CoGetContextToken (in: pToken=0x5dcc30 | out: pToken=0x5dcc30) returned 0x0 [0199.490] WbemLocator:IUnknown:AddRef (This=0x85ff38) returned 0x4 [0199.490] WbemLocator:IUnknown:QueryInterface (in: This=0x85ff38, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcd48 | out: ppvObject=0x5dcd48*=0x85ff00) returned 0x0 [0199.491] WbemLocator:IUnknown:Release (This=0x85ff38) returned 0x4 [0199.491] WbemLocator:IRpcOptions:Query (in: This=0x85ff00, pPrx=0x85ff38, dwProperty=2, pdwValue=0x5dcdb8 | out: pdwValue=0x5dcdb8) returned 0x0 [0199.491] WbemLocator:IUnknown:Release (This=0x85ff00) returned 0x3 [0199.491] WbemLocator:IUnknown:Release (This=0x85ff38) returned 0x2 [0199.491] WbemLocator:IUnknown:Release (This=0x85ff38) returned 0x1 [0199.491] CoGetContextToken (in: pToken=0x5dd110 | out: pToken=0x5dd110) returned 0x0 [0199.491] WbemLocator:IUnknown:AddRef (This=0x85ff38) returned 0x2 [0199.491] WbemLocator:IUnknown:QueryInterface (in: This=0x85ff38, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd168 | out: ppvObject=0x5dd168*=0x85fef0) returned 0x0 [0199.491] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x85fef0, pProxy=0x85ff38, pAuthnSvc=0x5dd160, pAuthzSvc=0x5dd15c, pServerPrincName=0x5dd188, pAuthnLevel=0x5dd158, pImpLevel=0x5dd174, pAuthInfo=0x5dd198, pCapabilites=0x5dd170 | out: pAuthnSvc=0x5dd160*=0xa, pAuthzSvc=0x5dd15c*=0x0, pServerPrincName=0x5dd188, pAuthnLevel=0x5dd158*=0x6, pImpLevel=0x5dd174*=0x2, pAuthInfo=0x5dd198, pCapabilites=0x5dd170*=0x1) returned 0x0 [0199.492] WbemLocator:IUnknown:Release (This=0x85fef0) returned 0x2 [0199.492] WbemLocator:IUnknown:QueryInterface (in: This=0x85ff38, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd108 | out: ppvObject=0x5dd108*=0x85ff38) returned 0x0 [0199.492] WbemLocator:IUnknown:QueryInterface (in: This=0x85ff38, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd098 | out: ppvObject=0x5dd098*=0x85fef0) returned 0x0 [0199.492] WbemLocator:IClientSecurity:SetBlanket (This=0x85fef0, pProxy=0x85ff38, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0199.492] WbemLocator:IUnknown:Release (This=0x85fef0) returned 0x3 [0199.492] WbemLocator:IUnknown:Release (This=0x85ff38) returned 0x2 [0199.492] CoTaskMemFree (pv=0x85dec0) [0199.492] WbemLocator:IUnknown:Release (This=0x85ff38) returned 0x1 [0199.492] SysStringLen (param_1=0x0) returned 0x0 [0199.492] CoGetContextToken (in: pToken=0x5dd130 | out: pToken=0x5dd130) returned 0x0 [0199.492] CoGetContextToken (in: pToken=0x5dd070 | out: pToken=0x5dd070) returned 0x0 [0199.492] WbemLocator:IUnknown:AddRef (This=0x85ff38) returned 0x2 [0199.492] WbemLocator:IUnknown:QueryInterface (in: This=0x85ff38, riid=0x5dd1b0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5dd190 | out: ppvObject=0x5dd190*=0x8668b0) returned 0x0 [0199.493] WbemLocator:IUnknown:Release (This=0x85ff38) returned 0x2 [0199.493] WbemLocator:IUnknown:Release (This=0x8668b0) returned 0x1 [0199.493] CoGetContextToken (in: pToken=0x5dd040 | out: pToken=0x5dd040) returned 0x0 [0199.493] CoGetContextToken (in: pToken=0x5dcf80 | out: pToken=0x5dcf80) returned 0x0 [0199.493] WbemLocator:IUnknown:AddRef (This=0x85ff38) returned 0x2 [0199.493] WbemLocator:IUnknown:QueryInterface (in: This=0x85ff38, riid=0x5dd0c0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5dd0a0 | out: ppvObject=0x5dd0a0*=0x8668b0) returned 0x0 [0199.493] WbemLocator:IUnknown:Release (This=0x85ff38) returned 0x2 [0199.493] WbemLocator:IUnknown:AddRef (This=0x8668b0) returned 0x3 [0199.493] WbemLocator:IUnknown:QueryInterface (in: This=0x8668b0, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd168 | out: ppvObject=0x5dd168*=0x85fef0) returned 0x0 [0199.493] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x85fef0, pProxy=0x8668b0, pAuthnSvc=0x5dd160, pAuthzSvc=0x5dd15c, pServerPrincName=0x5dd188, pAuthnLevel=0x5dd158, pImpLevel=0x5dd174, pAuthInfo=0x5dd198, pCapabilites=0x5dd170 | out: pAuthnSvc=0x5dd160*=0xa, pAuthzSvc=0x5dd15c*=0x0, pServerPrincName=0x5dd188, pAuthnLevel=0x5dd158*=0x6, pImpLevel=0x5dd174*=0x2, pAuthInfo=0x5dd198, pCapabilites=0x5dd170*=0x1) returned 0x0 [0199.493] WbemLocator:IUnknown:Release (This=0x85fef0) returned 0x3 [0199.493] WbemLocator:IUnknown:QueryInterface (in: This=0x8668b0, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd108 | out: ppvObject=0x5dd108*=0x85ff38) returned 0x0 [0199.494] WbemLocator:IUnknown:QueryInterface (in: This=0x8668b0, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd098 | out: ppvObject=0x5dd098*=0x85fef0) returned 0x0 [0199.494] WbemLocator:IClientSecurity:SetBlanket (This=0x85fef0, pProxy=0x8668b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0199.494] WbemLocator:IUnknown:Release (This=0x85fef0) returned 0x4 [0199.494] WbemLocator:IUnknown:Release (This=0x85ff38) returned 0x3 [0199.494] CoTaskMemFree (pv=0x85e040) [0199.494] WbemLocator:IUnknown:Release (This=0x8668b0) returned 0x2 [0199.494] SysStringLen (param_1=0x0) returned 0x0 [0199.494] CoGetContextToken (in: pToken=0x5dcfe0 | out: pToken=0x5dcfe0) returned 0x0 [0199.494] WbemLocator:IUnknown:AddRef (This=0x8668b0) returned 0x3 [0199.494] IWbemServices:ExecQuery (in: This=0x8668b0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x5dd4d8 | out: ppEnum=0x5dd4d8*=0x888a50) returned 0x0 [0199.496] IUnknown:QueryInterface (in: This=0x888a50, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd0e8 | out: ppvObject=0x5dd0e8*=0x888a58) returned 0x0 [0199.496] IClientSecurity:QueryBlanket (in: This=0x888a58, pProxy=0x888a50, pAuthnSvc=0x5dd0e0, pAuthzSvc=0x5dd0dc, pServerPrincName=0x5dd108, pAuthnLevel=0x5dd0d8, pImpLevel=0x5dd0f4, pAuthInfo=0x5dd118, pCapabilites=0x5dd0f0 | out: pAuthnSvc=0x5dd0e0*=0xa, pAuthzSvc=0x5dd0dc*=0x0, pServerPrincName=0x5dd108, pAuthnLevel=0x5dd0d8*=0x6, pImpLevel=0x5dd0f4*=0x2, pAuthInfo=0x5dd118, pCapabilites=0x5dd0f0*=0x1) returned 0x0 [0199.496] IUnknown:Release (This=0x888a58) returned 0x1 [0199.496] IUnknown:QueryInterface (in: This=0x888a50, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd088 | out: ppvObject=0x5dd088*=0x85f718) returned 0x0 [0199.497] IUnknown:QueryInterface (in: This=0x888a50, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd018 | out: ppvObject=0x5dd018*=0x888a58) returned 0x0 [0199.497] IClientSecurity:SetBlanket (This=0x888a58, pProxy=0x888a50, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0199.515] IUnknown:Release (This=0x888a58) returned 0x2 [0199.515] WbemLocator:IUnknown:Release (This=0x85f718) returned 0x1 [0199.515] CoTaskMemFree (pv=0x85e160) [0199.516] IUnknown:QueryInterface (in: This=0x888a50, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dccc0 | out: ppvObject=0x5dccc0*=0x85f718) returned 0x0 [0199.516] WbemLocator:IUnknown:QueryInterface (in: This=0x85f718, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5dcd40 | out: ppvObject=0x5dcd40*=0x0) returned 0x80004002 [0199.522] WbemLocator:IUnknown:QueryInterface (in: This=0x85f718, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5dcad8 | out: ppvObject=0x5dcad8*=0x0) returned 0x80004002 [0199.524] WbemLocator:IUnknown:AddRef (This=0x85f718) returned 0x3 [0199.524] CoGetContextToken (in: pToken=0x5dc990 | out: pToken=0x5dc990) returned 0x0 [0199.524] CoGetContextToken (in: pToken=0x5dc920 | out: pToken=0x5dc920) returned 0x0 [0199.524] IUnknown:QueryInterface (in: This=0x7f7028, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc978 | out: ppvObject=0x5dc978*=0x7f7040) returned 0x0 [0199.524] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7f7040, pAptType=0x5dca20 | out: pAptType=0x5dca20*=3) returned 0x0 [0199.524] IUnknown:Release (This=0x7f7040) returned 0x1 [0199.525] WbemLocator:IUnknown:QueryInterface (in: This=0x85f718, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc950 | out: ppvObject=0x5dc950*=0x85f5f8) returned 0x0 [0199.525] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x85f5f8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5dc980 | out: pCid=0x5dc980*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.525] WbemLocator:IUnknown:Release (This=0x85f5f8) returned 0x3 [0199.525] CoGetContextToken (in: pToken=0x5dc960 | out: pToken=0x5dc960) returned 0x0 [0199.525] WbemLocator:IUnknown:AddRef (This=0x85f718) returned 0x4 [0199.525] WbemLocator:IUnknown:QueryInterface (in: This=0x85f718, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dca78 | out: ppvObject=0x5dca78*=0x85f6e0) returned 0x0 [0199.525] WbemLocator:IUnknown:Release (This=0x85f718) returned 0x4 [0199.525] WbemLocator:IRpcOptions:Query (in: This=0x85f6e0, pPrx=0x85f718, dwProperty=2, pdwValue=0x5dcae8 | out: pdwValue=0x5dcae8) returned 0x80004002 [0199.525] WbemLocator:IUnknown:Release (This=0x85f6e0) returned 0x3 [0199.525] WbemLocator:IUnknown:Release (This=0x85f718) returned 0x2 [0199.525] CoGetContextToken (in: pToken=0x5dce60 | out: pToken=0x5dce60) returned 0x0 [0199.525] CoGetContextToken (in: pToken=0x5dcda0 | out: pToken=0x5dcda0) returned 0x0 [0199.525] WbemLocator:IUnknown:AddRef (This=0x85f718) returned 0x3 [0199.525] WbemLocator:IUnknown:QueryInterface (in: This=0x85f718, riid=0x5dcee0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5dcec0 | out: ppvObject=0x5dcec0*=0x888a50) returned 0x0 [0199.525] WbemLocator:IUnknown:Release (This=0x85f718) returned 0x3 [0199.526] IUnknown:Release (This=0x888a50) returned 0x2 [0199.526] IUnknown:Release (This=0x888a50) returned 0x1 [0199.526] WbemLocator:IUnknown:Release (This=0x8668b0) returned 0x2 [0199.526] SysStringLen (param_1=0x0) returned 0x0 [0199.526] CoGetContextToken (in: pToken=0x5dd200 | out: pToken=0x5dd200) returned 0x0 [0199.526] CoGetContextToken (in: pToken=0x5dd140 | out: pToken=0x5dd140) returned 0x0 [0199.526] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.526] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd280*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd260 | out: ppvObject=0x5dd260*=0x821010) returned 0x0 [0199.526] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.526] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x821010, puCount=0x5dd500 | out: puCount=0x5dd500*=0x2) returned 0x0 [0199.526] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.526] CoGetContextToken (in: pToken=0x5dd200 | out: pToken=0x5dd200) returned 0x0 [0199.526] CoGetContextToken (in: pToken=0x5dd140 | out: pToken=0x5dd140) returned 0x0 [0199.526] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.526] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd280*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd260 | out: ppvObject=0x5dd260*=0x821010) returned 0x0 [0199.526] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.527] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd500*=0x0, pszText=0x0 | out: puBuffLength=0x5dd500*=0xf, pszText=0x0) returned 0x0 [0199.527] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.527] CoGetContextToken (in: pToken=0x5dd200 | out: pToken=0x5dd200) returned 0x0 [0199.527] CoGetContextToken (in: pToken=0x5dd140 | out: pToken=0x5dd140) returned 0x0 [0199.527] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.527] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd280*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd260 | out: ppvObject=0x5dd260*=0x821010) returned 0x0 [0199.527] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.527] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd500*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd500*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0199.527] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.528] CoTaskMemAlloc (cb=0x104) returned 0x8860a0 [0199.528] GetEnvironmentVariableW (in: lpName="PROCESSOR_ARCHITEW6432", lpBuffer=0x8860a0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0199.528] CoTaskMemFree (pv=0x8860a0) [0199.530] CoGetContextToken (in: pToken=0x5dd080 | out: pToken=0x5dd080) returned 0x0 [0199.530] CoGetContextToken (in: pToken=0x5dcfc0 | out: pToken=0x5dcfc0) returned 0x0 [0199.530] WbemLocator:IUnknown:AddRef (This=0x85f718) returned 0x2 [0199.530] WbemLocator:IUnknown:QueryInterface (in: This=0x85f718, riid=0x5dd100*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5dd0e0 | out: ppvObject=0x5dd0e0*=0x888a50) returned 0x0 [0199.530] WbemLocator:IUnknown:Release (This=0x85f718) returned 0x2 [0199.530] IUnknown:AddRef (This=0x888a50) returned 0x3 [0199.530] IEnumWbemClassObject:Clone (in: This=0x888a50, ppEnum=0x5dd540 | out: ppEnum=0x5dd540*=0x888f00) returned 0x0 [0199.561] IUnknown:QueryInterface (in: This=0x888f00, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd198 | out: ppvObject=0x5dd198*=0x888f08) returned 0x0 [0199.561] IClientSecurity:QueryBlanket (in: This=0x888f08, pProxy=0x888f00, pAuthnSvc=0x5dd190, pAuthzSvc=0x5dd18c, pServerPrincName=0x5dd1b8, pAuthnLevel=0x5dd188, pImpLevel=0x5dd1a4, pAuthInfo=0x5dd1c8, pCapabilites=0x5dd1a0 | out: pAuthnSvc=0x5dd190*=0xa, pAuthzSvc=0x5dd18c*=0x0, pServerPrincName=0x5dd1b8, pAuthnLevel=0x5dd188*=0x6, pImpLevel=0x5dd1a4*=0x2, pAuthInfo=0x5dd1c8, pCapabilites=0x5dd1a0*=0x1) returned 0x0 [0199.561] IUnknown:Release (This=0x888f08) returned 0x1 [0199.561] IUnknown:QueryInterface (in: This=0x888f00, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd138 | out: ppvObject=0x5dd138*=0x85f3d8) returned 0x0 [0199.561] IUnknown:QueryInterface (in: This=0x888f00, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd0c8 | out: ppvObject=0x5dd0c8*=0x888f08) returned 0x0 [0199.561] IClientSecurity:SetBlanket (This=0x888f08, pProxy=0x888f00, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0199.566] IUnknown:Release (This=0x888f08) returned 0x2 [0199.566] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x1 [0199.566] CoTaskMemFree (pv=0x85de90) [0199.566] IUnknown:QueryInterface (in: This=0x888f00, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcd60 | out: ppvObject=0x5dcd60*=0x85f3d8) returned 0x0 [0199.567] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5dcde0 | out: ppvObject=0x5dcde0*=0x0) returned 0x80004002 [0199.569] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5dcb78 | out: ppvObject=0x5dcb78*=0x0) returned 0x80004002 [0199.571] WbemLocator:IUnknown:AddRef (This=0x85f3d8) returned 0x3 [0199.572] CoGetContextToken (in: pToken=0x5dca30 | out: pToken=0x5dca30) returned 0x0 [0199.572] CoGetContextToken (in: pToken=0x5dc9c0 | out: pToken=0x5dc9c0) returned 0x0 [0199.572] IUnknown:QueryInterface (in: This=0x7f7028, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dca18 | out: ppvObject=0x5dca18*=0x7f7040) returned 0x0 [0199.572] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7f7040, pAptType=0x5dcac0 | out: pAptType=0x5dcac0*=3) returned 0x0 [0199.572] IUnknown:Release (This=0x7f7040) returned 0x1 [0199.572] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc9f0 | out: ppvObject=0x5dc9f0*=0x85f2b8) returned 0x0 [0199.572] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x85f2b8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5dca20 | out: pCid=0x5dca20*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.572] WbemLocator:IUnknown:Release (This=0x85f2b8) returned 0x3 [0199.572] CoGetContextToken (in: pToken=0x5dca00 | out: pToken=0x5dca00) returned 0x0 [0199.572] WbemLocator:IUnknown:AddRef (This=0x85f3d8) returned 0x4 [0199.572] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcb18 | out: ppvObject=0x5dcb18*=0x85f3a0) returned 0x0 [0199.573] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x4 [0199.573] WbemLocator:IRpcOptions:Query (in: This=0x85f3a0, pPrx=0x85f3d8, dwProperty=2, pdwValue=0x5dcb88 | out: pdwValue=0x5dcb88) returned 0x80004002 [0199.573] WbemLocator:IUnknown:Release (This=0x85f3a0) returned 0x3 [0199.573] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x2 [0199.573] CoGetContextToken (in: pToken=0x5dcf00 | out: pToken=0x5dcf00) returned 0x0 [0199.573] CoGetContextToken (in: pToken=0x5dce40 | out: pToken=0x5dce40) returned 0x0 [0199.573] WbemLocator:IUnknown:AddRef (This=0x85f3d8) returned 0x3 [0199.573] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x5dcf80*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5dcf60 | out: ppvObject=0x5dcf60*=0x888f00) returned 0x0 [0199.573] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x3 [0199.573] IUnknown:Release (This=0x888f00) returned 0x2 [0199.573] IUnknown:Release (This=0x888f00) returned 0x1 [0199.573] IUnknown:Release (This=0x888a50) returned 0x2 [0199.574] SysStringLen (param_1=0x0) returned 0x0 [0199.574] CoGetContextToken (in: pToken=0x5dd380 | out: pToken=0x5dd380) returned 0x0 [0199.574] CoGetContextToken (in: pToken=0x5dd2c0 | out: pToken=0x5dd2c0) returned 0x0 [0199.574] WbemLocator:IUnknown:AddRef (This=0x85f3d8) returned 0x2 [0199.574] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x5dd400*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5dd3e0 | out: ppvObject=0x5dd3e0*=0x888f00) returned 0x0 [0199.574] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x2 [0199.575] IUnknown:AddRef (This=0x888f00) returned 0x3 [0199.575] IEnumWbemClassObject:Reset (This=0x888f00) returned 0x0 [0199.577] IUnknown:Release (This=0x888f00) returned 0x2 [0199.581] CoTaskMemAlloc (cb=0x8) returned 0x8656a0 [0199.581] IEnumWbemClassObject:Next (in: This=0x888f00, lTimeout=-1, uCount=0x1, apObjects=0x8656a0, puReturned=0x5dd608 | out: apObjects=0x8656a0*=0x87e1f0, puReturned=0x5dd608*=0x1) returned 0x0 [0199.653] IUnknown:QueryInterface (in: This=0x87e1f0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc930 | out: ppvObject=0x5dc930*=0x87e1f0) returned 0x0 [0199.653] IUnknown:QueryInterface (in: This=0x87e1f0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5dc9b0 | out: ppvObject=0x5dc9b0*=0x0) returned 0x80004002 [0199.653] IUnknown:QueryInterface (in: This=0x87e1f0, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5dc748 | out: ppvObject=0x5dc748*=0x0) returned 0x80004002 [0199.653] IUnknown:AddRef (This=0x87e1f0) returned 0x3 [0199.653] CoGetContextToken (in: pToken=0x5dc600 | out: pToken=0x5dc600) returned 0x0 [0199.653] CoGetContextToken (in: pToken=0x5dc590 | out: pToken=0x5dc590) returned 0x0 [0199.653] IUnknown:QueryInterface (in: This=0x7f7028, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc5e8 | out: ppvObject=0x5dc5e8*=0x7f7040) returned 0x0 [0199.653] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7f7040, pAptType=0x5dc690 | out: pAptType=0x5dc690*=3) returned 0x0 [0199.654] IUnknown:Release (This=0x7f7040) returned 0x1 [0199.654] IUnknown:QueryInterface (in: This=0x87e1f0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc5c0 | out: ppvObject=0x5dc5c0*=0x87e1f8) returned 0x0 [0199.654] IMarshal:GetUnmarshalClass (in: This=0x87e1f8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5dc5f0 | out: pCid=0x5dc5f0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0199.654] IUnknown:Release (This=0x87e1f8) returned 0x3 [0199.654] CoGetContextToken (in: pToken=0x5dc5d0 | out: pToken=0x5dc5d0) returned 0x0 [0199.654] IUnknown:AddRef (This=0x87e1f0) returned 0x4 [0199.654] IUnknown:QueryInterface (in: This=0x87e1f0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc6e8 | out: ppvObject=0x5dc6e8*=0x0) returned 0x80004002 [0199.654] IUnknown:Release (This=0x87e1f0) returned 0x3 [0199.654] IUnknown:Release (This=0x87e1f0) returned 0x2 [0199.654] CoGetContextToken (in: pToken=0x5dca90 | out: pToken=0x5dca90) returned 0x0 [0199.654] CoGetContextToken (in: pToken=0x5dc9d0 | out: pToken=0x5dc9d0) returned 0x0 [0199.654] IUnknown:AddRef (This=0x87e1f0) returned 0x3 [0199.654] IUnknown:QueryInterface (in: This=0x87e1f0, riid=0x5dcb10*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5dcaf0 | out: ppvObject=0x5dcaf0*=0x87e1f0) returned 0x0 [0199.654] IUnknown:Release (This=0x87e1f0) returned 0x3 [0199.655] IUnknown:Release (This=0x87e1f0) returned 0x2 [0199.655] IUnknown:Release (This=0x87e1f0) returned 0x1 [0199.655] CoTaskMemFree (pv=0x8656a0) [0199.655] CoGetContextToken (in: pToken=0x5dd410 | out: pToken=0x5dd410) returned 0x0 [0199.655] IUnknown:AddRef (This=0x87e1f0) returned 0x2 [0199.655] IWbemClassObject:Get (in: This=0x87e1f0, wszName="__GENUS", lFlags=0, pVal=0x5dd580*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd57c*=0, plFlavor=0x5dd578*=0 | out: pVal=0x5dd580*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x5dd57c*=3, plFlavor=0x5dd578*=64) returned 0x0 [0199.657] IWbemClassObject:Get (in: This=0x87e1f0, wszName="__PATH", lFlags=0, pVal=0x5dd520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd51c*=0, plFlavor=0x5dd518*=0 | out: pVal=0x5dd520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@", varVal2=0x0), pType=0x5dd51c*=8, plFlavor=0x5dd518*=64) returned 0x0 [0199.657] SysStringLen (param_1="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@") returned 0x2c [0199.657] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x494 [0199.657] SetEvent (hEvent=0x3c0) returned 1 [0199.657] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dd408*=0x494, lpdwindex=0x5dd120 | out: lpdwindex=0x5dd120) returned 0x0 [0199.661] CoGetContextToken (in: pToken=0x5dd110 | out: pToken=0x5dd110) returned 0x0 [0199.661] CoGetContextToken (in: pToken=0x5dd050 | out: pToken=0x5dd050) returned 0x0 [0199.661] WbemDefPath:IUnknown:AddRef (This=0x87fc30) returned 0x2 [0199.661] WbemDefPath:IUnknown:QueryInterface (in: This=0x87fc30, riid=0x5dd190*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd170 | out: ppvObject=0x5dd170*=0x87fc30) returned 0x0 [0199.661] WbemDefPath:IUnknown:Release (This=0x87fc30) returned 0x2 [0199.661] WbemDefPath:IUnknown:Release (This=0x87fc30) returned 0x1 [0199.661] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0199.661] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0199.661] WbemDefPath:IUnknown:AddRef (This=0x87fc30) returned 0x2 [0199.661] WbemDefPath:IUnknown:QueryInterface (in: This=0x87fc30, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x87fc30) returned 0x0 [0199.661] WbemDefPath:IUnknown:Release (This=0x87fc30) returned 0x2 [0199.661] WbemDefPath:IWbemPath:SetText (This=0x87fc30, uMode=0x4, pszPath="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@") returned 0x0 [0199.661] WbemDefPath:IUnknown:Release (This=0x87fc30) returned 0x1 [0199.662] CoGetContextToken (in: pToken=0x5dd250 | out: pToken=0x5dd250) returned 0x0 [0199.662] CoGetContextToken (in: pToken=0x5dd190 | out: pToken=0x5dd190) returned 0x0 [0199.662] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.662] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd2d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2b0 | out: ppvObject=0x5dd2b0*=0x821010) returned 0x0 [0199.662] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.662] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x821010, puCount=0x5dd550 | out: puCount=0x5dd550*=0x2) returned 0x0 [0199.662] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.662] CoGetContextToken (in: pToken=0x5dd250 | out: pToken=0x5dd250) returned 0x0 [0199.662] CoGetContextToken (in: pToken=0x5dd190 | out: pToken=0x5dd190) returned 0x0 [0199.662] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.662] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd2d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2b0 | out: ppvObject=0x5dd2b0*=0x821010) returned 0x0 [0199.662] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.662] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd550*=0x0, pszText=0x0 | out: puBuffLength=0x5dd550*=0xf, pszText=0x0) returned 0x0 [0199.662] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.662] CoGetContextToken (in: pToken=0x5dd250 | out: pToken=0x5dd250) returned 0x0 [0199.662] CoGetContextToken (in: pToken=0x5dd190 | out: pToken=0x5dd190) returned 0x0 [0199.662] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.663] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd2d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2b0 | out: ppvObject=0x5dd2b0*=0x821010) returned 0x0 [0199.663] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.663] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd550*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd550*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0199.663] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.663] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0199.663] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0199.663] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.663] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x821010) returned 0x0 [0199.663] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.663] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x821010, puCount=0x5dd590 | out: puCount=0x5dd590*=0x2) returned 0x0 [0199.663] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.663] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0199.663] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0199.663] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.663] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x821010) returned 0x0 [0199.663] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.663] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd590*=0x0, pszText=0x0 | out: puBuffLength=0x5dd590*=0xf, pszText=0x0) returned 0x0 [0199.664] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.664] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0199.664] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0199.664] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.664] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x821010) returned 0x0 [0199.664] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.664] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd590*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd590*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0199.664] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.664] IWbemClassObject:Get (in: This=0x87e1f0, wszName="Caption", lFlags=0, pVal=0x5dd580*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd57c*=0, plFlavor=0x5dd578*=0 | out: pVal=0x5dd580*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 10 Pro", varVal2=0x0), pType=0x5dd57c*=8, plFlavor=0x5dd578*=0) returned 0x0 [0199.664] SysStringLen (param_1="Microsoft Windows 10 Pro") returned 0x18 [0199.664] IWbemClassObject:Get (in: This=0x87e1f0, wszName="Caption", lFlags=0, pVal=0x5dd590*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd58c*=8, plFlavor=0x5dd588*=0 | out: pVal=0x5dd590*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 10 Pro", varVal2=0x0), pType=0x5dd58c*=8, plFlavor=0x5dd588*=0) returned 0x0 [0199.664] SysStringLen (param_1="Microsoft Windows 10 Pro") returned 0x18 [0199.664] CoTaskMemAlloc (cb=0x104) returned 0x885d70 [0199.664] GetEnvironmentVariableW (in: lpName="PROCESSOR_ARCHITEW6432", lpBuffer=0x885d70, nSize=0x80 | out: lpBuffer="") returned 0x0 [0199.664] CoTaskMemFree (pv=0x885d70) [0199.664] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0199.664] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0199.664] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.664] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x821010) returned 0x0 [0199.665] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.665] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x821010, puCount=0x5dd590 | out: puCount=0x5dd590*=0x2) returned 0x0 [0199.665] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.665] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0199.665] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0199.665] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x821010) returned 0x0 [0199.665] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.665] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd590*=0x0, pszText=0x0 | out: puBuffLength=0x5dd590*=0xf, pszText=0x0) returned 0x0 [0199.665] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.665] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0199.665] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0199.665] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.665] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x821010) returned 0x0 [0199.665] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.665] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=4, puBuffLength=0x5dd590*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd590*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0199.666] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.666] IWbemClassObject:Get (in: This=0x87e1f0, wszName="Version", lFlags=0, pVal=0x5dd580*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd57c*=0, plFlavor=0x5dd578*=0 | out: pVal=0x5dd580*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="10.0.10240", varVal2=0x0), pType=0x5dd57c*=8, plFlavor=0x5dd578*=0) returned 0x0 [0199.666] SysStringLen (param_1="10.0.10240") returned 0xa [0199.666] IWbemClassObject:Get (in: This=0x87e1f0, wszName="Version", lFlags=0, pVal=0x5dd590*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd58c*=8, plFlavor=0x5dd588*=0 | out: pVal=0x5dd590*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="10.0.10240", varVal2=0x0), pType=0x5dd58c*=8, plFlavor=0x5dd588*=0) returned 0x0 [0199.666] SysStringLen (param_1="10.0.10240") returned 0xa [0199.668] CoGetContextToken (in: pToken=0x5dd390 | out: pToken=0x5dd390) returned 0x0 [0199.668] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x1 [0199.668] IUnknown:Release (This=0x888f00) returned 0x0 [0199.676] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x5dcec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0199.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x5dcfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0199.677] SetErrorMode (uMode=0x1) returned 0x0 [0199.677] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v2.0.50727\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x5dd1c0 | out: lpFileInformation=0x5dd1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436072d, ftCreationTime.dwHighDateTime=0x1d2d447, ftLastAccessTime.dwLowDateTime=0x1449f42, ftLastAccessTime.dwHighDateTime=0x1d2d447, ftLastWriteTime.dwLowDateTime=0x95baafb, ftLastWriteTime.dwHighDateTime=0x1d2d447, nFileSizeHigh=0x0, nFileSizeLow=0x65b3)) returned 1 [0199.677] SetErrorMode (uMode=0x0) returned 0x1 [0199.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x5dcf60, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0199.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x5dce30, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0199.717] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x5dcb40 | out: pfEnabled=0x5dcb40) returned 0x0 [0199.718] GetVersionExW (in: lpVersionInformation=0x5dc950*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x5dc950*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0199.725] SendMessageW (hWnd=0x50208, Msg=0x437, wParam=0x0, lParam=0x2749278) returned 0x0 [0199.725] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x437, wParam=0x0, lParam=0x2749278) returned 0x0 [0199.725] SendMessageW (hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0199.726] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0199.726] SendMessageW (hWnd=0x50208, Msg=0x449, wParam=0x11, lParam=0x5dd820) returned 0xb44 [0199.726] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x449, wParam=0x11, lParam=0x5dd820) returned 0xb44 [0199.727] SendMessageW (hWnd=0x50208, Msg=0x2111, wParam=0x3000208, lParam=0x50208) returned 0x0 [0199.927] SendMessageW (hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0199.927] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0199.927] SendMessageW (hWnd=0x50208, Msg=0xb9, wParam=0xffffffffffffffff, lParam=0x0) returned 0x0 [0199.927] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xb9, wParam=0xffffffffffffffff, lParam=0x0) returned 0x0 [0199.927] SendMessageW (hWnd=0x50208, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x15 [0199.927] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x15 [0199.927] SendMessageW (hWnd=0x50208, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0199.927] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0199.928] SendMessageW (hWnd=0x50208, Msg=0x44a, wParam=0x11, lParam=0x5dd850) returned 0xb5e [0199.928] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x44a, wParam=0x11, lParam=0x5dd850) returned 0xb5e [0199.928] SendMessageW (hWnd=0x50208, Msg=0x437, wParam=0x0, lParam=0x2751088) returned 0x0 [0199.928] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x437, wParam=0x0, lParam=0x2751088) returned 0x0 [0199.928] SendMessageW (hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0199.929] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0199.929] SendMessageW (hWnd=0x50208, Msg=0x449, wParam=0x11, lParam=0x5dd820) returned 0xb66 [0199.929] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x449, wParam=0x11, lParam=0x5dd820) returned 0xb66 [0199.931] SendMessageW (hWnd=0x50208, Msg=0x204e, wParam=0x50208, lParam=0x5dbf28) returned 0x0 [0199.933] SendMessageW (hWnd=0x50208, Msg=0x2111, wParam=0x3000208, lParam=0x50208) returned 0x0 [0199.933] SendMessageW (hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0199.933] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0199.933] SendMessageW (hWnd=0x50208, Msg=0xb9, wParam=0xffffffffffffffff, lParam=0x0) returned 0x0 [0199.933] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xb9, wParam=0xffffffffffffffff, lParam=0x0) returned 0x0 [0199.933] SendMessageW (hWnd=0x50208, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x16 [0199.933] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xba, wParam=0x0, lParam=0x0) returned 0x16 [0199.933] SendMessageW (hWnd=0x50208, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0199.933] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0199.934] GetLogicalDrives () returned 0x4 [0199.934] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x5dd150, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0199.934] SetErrorMode (uMode=0x1) returned 0x0 [0199.934] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x5dd580 | out: lpFileInformation=0x5dd580*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x90fa1f36, ftCreationTime.dwHighDateTime=0x1d0baef, ftLastAccessTime.dwLowDateTime=0xcbe64b75, ftLastAccessTime.dwHighDateTime=0x1d41fe0, ftLastWriteTime.dwLowDateTime=0xcbe64b75, ftLastWriteTime.dwHighDateTime=0x1d41fe0, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0199.935] SetErrorMode (uMode=0x0) returned 0x1 [0199.935] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x5dd2c0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0199.935] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4a4 [0199.935] SetEvent (hEvent=0x3c0) returned 1 [0199.935] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dd4e8*=0x4a4, lpdwindex=0x5dd200 | out: lpdwindex=0x5dd200) returned 0x0 [0199.942] CoGetContextToken (in: pToken=0x5dd1f0 | out: pToken=0x5dd1f0) returned 0x0 [0199.942] CoGetContextToken (in: pToken=0x5dd130 | out: pToken=0x5dd130) returned 0x0 [0199.942] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.942] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd270*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd250 | out: ppvObject=0x5dd250*=0x8802f0) returned 0x0 [0199.942] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.942] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.942] CoGetContextToken (in: pToken=0x5dd370 | out: pToken=0x5dd370) returned 0x0 [0199.942] CoGetContextToken (in: pToken=0x5dd2b0 | out: pToken=0x5dd2b0) returned 0x0 [0199.942] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.942] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd3f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3d0 | out: ppvObject=0x5dd3d0*=0x8802f0) returned 0x0 [0199.943] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.943] WbemDefPath:IWbemPath:SetText (This=0x8802f0, uMode=0x4, pszPath="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0199.943] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.943] CoGetContextToken (in: pToken=0x5dd3a0 | out: pToken=0x5dd3a0) returned 0x0 [0199.943] CoGetContextToken (in: pToken=0x5dd2e0 | out: pToken=0x5dd2e0) returned 0x0 [0199.943] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.943] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd420*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd400 | out: ppvObject=0x5dd400*=0x8802f0) returned 0x0 [0199.943] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.943] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x8802f0, puCount=0x5dd6a0 | out: puCount=0x5dd6a0*=0x0) returned 0x0 [0199.943] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.943] CoGetContextToken (in: pToken=0x5dd3a0 | out: pToken=0x5dd3a0) returned 0x0 [0199.943] CoGetContextToken (in: pToken=0x5dd2e0 | out: pToken=0x5dd2e0) returned 0x0 [0199.943] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.943] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd420*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd400 | out: ppvObject=0x5dd400*=0x8802f0) returned 0x0 [0199.944] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.944] WbemDefPath:IWbemPath:GetText (in: This=0x8802f0, lFlags=2, puBuffLength=0x5dd6a0*=0x0, pszText=0x0 | out: puBuffLength=0x5dd6a0*=0x20, pszText=0x0) returned 0x0 [0199.944] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.944] CoGetContextToken (in: pToken=0x5dd3a0 | out: pToken=0x5dd3a0) returned 0x0 [0199.944] CoGetContextToken (in: pToken=0x5dd2e0 | out: pToken=0x5dd2e0) returned 0x0 [0199.944] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.944] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd420*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd400 | out: ppvObject=0x5dd400*=0x8802f0) returned 0x0 [0199.944] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.944] WbemDefPath:IWbemPath:GetText (in: This=0x8802f0, lFlags=2, puBuffLength=0x5dd6a0*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5dd6a0*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0199.944] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.944] CoGetContextToken (in: pToken=0x5dd3c0 | out: pToken=0x5dd3c0) returned 0x0 [0199.944] CoGetContextToken (in: pToken=0x5dd300 | out: pToken=0x5dd300) returned 0x0 [0199.944] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.944] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd440*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd420 | out: ppvObject=0x5dd420*=0x8802f0) returned 0x0 [0199.944] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.944] WbemDefPath:IWbemPath:GetInfo (in: This=0x8802f0, uRequestedInfo=0x0, puResponse=0x5dd6c0 | out: puResponse=0x5dd6c0*=0xc19) returned 0x0 [0199.944] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.945] CoGetContextToken (in: pToken=0x5dd3a0 | out: pToken=0x5dd3a0) returned 0x0 [0199.945] CoGetContextToken (in: pToken=0x5dd2e0 | out: pToken=0x5dd2e0) returned 0x0 [0199.945] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.945] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd420*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd400 | out: ppvObject=0x5dd400*=0x8802f0) returned 0x0 [0199.945] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.945] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x8802f0, puCount=0x5dd6a0 | out: puCount=0x5dd6a0*=0x0) returned 0x0 [0199.945] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.945] CoGetContextToken (in: pToken=0x5dd3c0 | out: pToken=0x5dd3c0) returned 0x0 [0199.945] CoGetContextToken (in: pToken=0x5dd300 | out: pToken=0x5dd300) returned 0x0 [0199.945] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.945] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd440*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd420 | out: ppvObject=0x5dd420*=0x8802f0) returned 0x0 [0199.945] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.945] WbemDefPath:IWbemPath:GetInfo (in: This=0x8802f0, uRequestedInfo=0x0, puResponse=0x5dd6c0 | out: puResponse=0x5dd6c0*=0xc19) returned 0x0 [0199.945] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.945] CoGetContextToken (in: pToken=0x5dd3c0 | out: pToken=0x5dd3c0) returned 0x0 [0199.945] CoGetContextToken (in: pToken=0x5dd300 | out: pToken=0x5dd300) returned 0x0 [0199.945] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd440*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd420 | out: ppvObject=0x5dd420*=0x8802f0) returned 0x0 [0199.946] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.946] WbemDefPath:IWbemPath:GetInfo (in: This=0x8802f0, uRequestedInfo=0x0, puResponse=0x5dd6c0 | out: puResponse=0x5dd6c0*=0xc19) returned 0x0 [0199.946] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.946] CoGetContextToken (in: pToken=0x5dd2c0 | out: pToken=0x5dd2c0) returned 0x0 [0199.946] CoGetContextToken (in: pToken=0x5dd200 | out: pToken=0x5dd200) returned 0x0 [0199.946] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd340*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd320 | out: ppvObject=0x5dd320*=0x8802f0) returned 0x0 [0199.946] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.946] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x8802f0, puCount=0x5dd5c0 | out: puCount=0x5dd5c0*=0x0) returned 0x0 [0199.946] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.946] CoGetContextToken (in: pToken=0x5dd280 | out: pToken=0x5dd280) returned 0x0 [0199.946] CoGetContextToken (in: pToken=0x5dd1c0 | out: pToken=0x5dd1c0) returned 0x0 [0199.946] WbemDefPath:IUnknown:AddRef (This=0x820dd0) returned 0x2 [0199.946] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x5dd300*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2e0 | out: ppvObject=0x5dd2e0*=0x820dd0) returned 0x0 [0199.947] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x2 [0199.947] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x820dd0, puCount=0x5dd580 | out: puCount=0x5dd580*=0x2) returned 0x0 [0199.947] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x1 [0199.947] CoGetContextToken (in: pToken=0x5dd280 | out: pToken=0x5dd280) returned 0x0 [0199.947] CoGetContextToken (in: pToken=0x5dd1c0 | out: pToken=0x5dd1c0) returned 0x0 [0199.947] WbemDefPath:IUnknown:AddRef (This=0x820dd0) returned 0x2 [0199.947] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x5dd300*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2e0 | out: ppvObject=0x5dd2e0*=0x820dd0) returned 0x0 [0199.947] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x2 [0199.947] WbemDefPath:IWbemPath:GetText (in: This=0x820dd0, lFlags=4, puBuffLength=0x5dd580*=0x0, pszText=0x0 | out: puBuffLength=0x5dd580*=0xf, pszText=0x0) returned 0x0 [0199.947] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x1 [0199.947] CoGetContextToken (in: pToken=0x5dd280 | out: pToken=0x5dd280) returned 0x0 [0199.947] CoGetContextToken (in: pToken=0x5dd1c0 | out: pToken=0x5dd1c0) returned 0x0 [0199.947] WbemDefPath:IUnknown:AddRef (This=0x820dd0) returned 0x2 [0199.947] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x5dd300*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2e0 | out: ppvObject=0x5dd2e0*=0x820dd0) returned 0x0 [0199.947] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x2 [0199.948] WbemDefPath:IWbemPath:GetText (in: This=0x820dd0, lFlags=4, puBuffLength=0x5dd580*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd580*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0199.948] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x1 [0199.948] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4a0 [0199.948] SetEvent (hEvent=0x3c0) returned 1 [0199.948] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dd3a8*=0x4a0, lpdwindex=0x5dd0c0 | out: lpdwindex=0x5dd0c0) returned 0x0 [0199.951] CoGetContextToken (in: pToken=0x5dd0b0 | out: pToken=0x5dd0b0) returned 0x0 [0199.951] CoGetContextToken (in: pToken=0x5dcff0 | out: pToken=0x5dcff0) returned 0x0 [0199.951] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x2 [0199.951] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x5dd130*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd110 | out: ppvObject=0x5dd110*=0x87f870) returned 0x0 [0199.951] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x2 [0199.951] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x1 [0199.952] CoGetContextToken (in: pToken=0x5dd230 | out: pToken=0x5dd230) returned 0x0 [0199.952] CoGetContextToken (in: pToken=0x5dd170 | out: pToken=0x5dd170) returned 0x0 [0199.952] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x2 [0199.952] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x5dd2b0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd290 | out: ppvObject=0x5dd290*=0x87f870) returned 0x0 [0199.952] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x2 [0199.952] WbemDefPath:IWbemPath:SetText (This=0x87f870, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0199.952] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x1 [0199.952] CoGetContextToken (in: pToken=0x5dd1f0 | out: pToken=0x5dd1f0) returned 0x0 [0199.952] CoGetContextToken (in: pToken=0x5dd130 | out: pToken=0x5dd130) returned 0x0 [0199.952] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x2 [0199.952] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x5dd270*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd250 | out: ppvObject=0x5dd250*=0x87f870) returned 0x0 [0199.953] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x2 [0199.953] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x87f870, puCount=0x5dd4f0 | out: puCount=0x5dd4f0*=0x2) returned 0x0 [0199.953] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x1 [0199.953] CoGetContextToken (in: pToken=0x5dd1f0 | out: pToken=0x5dd1f0) returned 0x0 [0199.953] CoGetContextToken (in: pToken=0x5dd130 | out: pToken=0x5dd130) returned 0x0 [0199.953] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x2 [0199.953] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x5dd270*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd250 | out: ppvObject=0x5dd250*=0x87f870) returned 0x0 [0199.953] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x2 [0199.953] WbemDefPath:IWbemPath:GetText (in: This=0x87f870, lFlags=4, puBuffLength=0x5dd4f0*=0x0, pszText=0x0 | out: puBuffLength=0x5dd4f0*=0xf, pszText=0x0) returned 0x0 [0199.953] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x1 [0199.953] CoGetContextToken (in: pToken=0x5dd1f0 | out: pToken=0x5dd1f0) returned 0x0 [0199.953] CoGetContextToken (in: pToken=0x5dd130 | out: pToken=0x5dd130) returned 0x0 [0199.953] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x2 [0199.953] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x5dd270*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd250 | out: ppvObject=0x5dd250*=0x87f870) returned 0x0 [0199.954] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x2 [0199.954] WbemDefPath:IWbemPath:GetText (in: This=0x87f870, lFlags=4, puBuffLength=0x5dd4f0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd4f0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0199.954] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x1 [0199.977] CoGetContextToken (in: pToken=0x5dd370 | out: pToken=0x5dd370) returned 0x0 [0199.977] CoGetContextToken (in: pToken=0x5dd2b0 | out: pToken=0x5dd2b0) returned 0x0 [0199.977] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.977] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd3f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3d0 | out: ppvObject=0x5dd3d0*=0x8802f0) returned 0x0 [0199.978] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.978] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x8802f0, puCount=0x5dd670 | out: puCount=0x5dd670*=0x0) returned 0x0 [0199.978] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.978] CoGetContextToken (in: pToken=0x5dd370 | out: pToken=0x5dd370) returned 0x0 [0199.978] CoGetContextToken (in: pToken=0x5dd2b0 | out: pToken=0x5dd2b0) returned 0x0 [0199.978] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.978] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd3f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3d0 | out: ppvObject=0x5dd3d0*=0x8802f0) returned 0x0 [0199.978] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.978] WbemDefPath:IWbemPath:GetText (in: This=0x8802f0, lFlags=2, puBuffLength=0x5dd670*=0x0, pszText=0x0 | out: puBuffLength=0x5dd670*=0x20, pszText=0x0) returned 0x0 [0199.978] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.978] CoGetContextToken (in: pToken=0x5dd370 | out: pToken=0x5dd370) returned 0x0 [0199.978] CoGetContextToken (in: pToken=0x5dd2b0 | out: pToken=0x5dd2b0) returned 0x0 [0199.978] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.978] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd3f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3d0 | out: ppvObject=0x5dd3d0*=0x8802f0) returned 0x0 [0199.978] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.978] WbemDefPath:IWbemPath:GetText (in: This=0x8802f0, lFlags=2, puBuffLength=0x5dd670*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5dd670*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0199.979] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.979] CoGetContextToken (in: pToken=0x5dd450 | out: pToken=0x5dd450) returned 0x0 [0199.979] CoGetContextToken (in: pToken=0x5dd390 | out: pToken=0x5dd390) returned 0x0 [0199.979] IUnknown:QueryInterface (in: This=0x7f7150, riid=0x7ffadec5d3c0*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd260 | out: ppvObject=0x5dd260*=0x7f7170) returned 0x0 [0199.979] CObjectContext::ContextCallback () returned 0x0 [0199.980] IUnknown:Release (This=0x7f7170) returned 0x1 [0199.981] CoUnmarshalInterface (in: pStm=0x85d3b0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5dd488 | out: ppv=0x5dd488*=0x85f3d8) returned 0x0 [0199.981] CoMarshalInterface (pStm=0x85d3b0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x85f3d8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0199.982] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd020 | out: ppvObject=0x5dd020*=0x85f3d8) returned 0x0 [0199.982] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5dd0a0 | out: ppvObject=0x5dd0a0*=0x0) returned 0x80004002 [0199.983] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5dce38 | out: ppvObject=0x5dce38*=0x0) returned 0x80004002 [0199.983] WbemLocator:IUnknown:AddRef (This=0x85f3d8) returned 0x3 [0199.983] CoGetContextToken (in: pToken=0x5dccf0 | out: pToken=0x5dccf0) returned 0x0 [0199.983] CoGetContextToken (in: pToken=0x5dcc80 | out: pToken=0x5dcc80) returned 0x0 [0199.983] IUnknown:QueryInterface (in: This=0x7f7028, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dccd8 | out: ppvObject=0x5dccd8*=0x7f7040) returned 0x0 [0199.983] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7f7040, pAptType=0x5dcd80 | out: pAptType=0x5dcd80*=3) returned 0x0 [0199.983] IUnknown:Release (This=0x7f7040) returned 0x1 [0199.983] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dccb0 | out: ppvObject=0x5dccb0*=0x85f2b8) returned 0x0 [0199.984] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x85f2b8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5dcce0 | out: pCid=0x5dcce0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.984] WbemLocator:IUnknown:Release (This=0x85f2b8) returned 0x3 [0199.984] CoGetContextToken (in: pToken=0x5dccc0 | out: pToken=0x5dccc0) returned 0x0 [0199.984] WbemLocator:IUnknown:AddRef (This=0x85f3d8) returned 0x4 [0199.984] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcdd8 | out: ppvObject=0x5dcdd8*=0x85f3a0) returned 0x0 [0199.984] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x4 [0199.984] WbemLocator:IRpcOptions:Query (in: This=0x85f3a0, pPrx=0x85f3d8, dwProperty=2, pdwValue=0x5dce48 | out: pdwValue=0x5dce48) returned 0x0 [0199.984] WbemLocator:IUnknown:Release (This=0x85f3a0) returned 0x3 [0199.985] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x2 [0199.985] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x1 [0199.985] CoGetContextToken (in: pToken=0x5dd1a0 | out: pToken=0x5dd1a0) returned 0x0 [0199.985] WbemLocator:IUnknown:AddRef (This=0x85f3d8) returned 0x2 [0199.985] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd1f8 | out: ppvObject=0x5dd1f8*=0x85f390) returned 0x0 [0199.985] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x85f390, pProxy=0x85f3d8, pAuthnSvc=0x5dd1f0, pAuthzSvc=0x5dd1ec, pServerPrincName=0x5dd218, pAuthnLevel=0x5dd1e8, pImpLevel=0x5dd204, pAuthInfo=0x5dd228, pCapabilites=0x5dd200 | out: pAuthnSvc=0x5dd1f0*=0xa, pAuthzSvc=0x5dd1ec*=0x0, pServerPrincName=0x5dd218, pAuthnLevel=0x5dd1e8*=0x6, pImpLevel=0x5dd204*=0x2, pAuthInfo=0x5dd228, pCapabilites=0x5dd200*=0x1) returned 0x0 [0199.985] WbemLocator:IUnknown:Release (This=0x85f390) returned 0x2 [0199.985] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd198 | out: ppvObject=0x5dd198*=0x85f3d8) returned 0x0 [0199.985] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd128 | out: ppvObject=0x5dd128*=0x85f390) returned 0x0 [0199.985] WbemLocator:IClientSecurity:SetBlanket (This=0x85f390, pProxy=0x85f3d8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0199.985] WbemLocator:IUnknown:Release (This=0x85f390) returned 0x3 [0199.985] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x2 [0199.985] CoTaskMemFree (pv=0x85d4a0) [0199.986] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x1 [0199.986] SysStringLen (param_1=0x0) returned 0x0 [0199.986] CoGetContextToken (in: pToken=0x5dd1c0 | out: pToken=0x5dd1c0) returned 0x0 [0199.986] CoGetContextToken (in: pToken=0x5dd100 | out: pToken=0x5dd100) returned 0x0 [0199.986] WbemLocator:IUnknown:AddRef (This=0x85f3d8) returned 0x2 [0199.986] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x5dd240*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5dd220 | out: ppvObject=0x5dd220*=0x8669d0) returned 0x0 [0199.986] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x2 [0199.986] WbemLocator:IUnknown:Release (This=0x8669d0) returned 0x1 [0199.986] CoGetContextToken (in: pToken=0x5dd0d0 | out: pToken=0x5dd0d0) returned 0x0 [0199.986] CoGetContextToken (in: pToken=0x5dd010 | out: pToken=0x5dd010) returned 0x0 [0199.986] WbemLocator:IUnknown:AddRef (This=0x85f3d8) returned 0x2 [0199.987] WbemLocator:IUnknown:QueryInterface (in: This=0x85f3d8, riid=0x5dd150*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5dd130 | out: ppvObject=0x5dd130*=0x8669d0) returned 0x0 [0199.987] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x2 [0199.987] WbemLocator:IUnknown:AddRef (This=0x8669d0) returned 0x3 [0199.987] WbemLocator:IUnknown:QueryInterface (in: This=0x8669d0, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd1f8 | out: ppvObject=0x5dd1f8*=0x85f390) returned 0x0 [0199.987] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x85f390, pProxy=0x8669d0, pAuthnSvc=0x5dd1f0, pAuthzSvc=0x5dd1ec, pServerPrincName=0x5dd218, pAuthnLevel=0x5dd1e8, pImpLevel=0x5dd204, pAuthInfo=0x5dd228, pCapabilites=0x5dd200 | out: pAuthnSvc=0x5dd1f0*=0xa, pAuthzSvc=0x5dd1ec*=0x0, pServerPrincName=0x5dd218, pAuthnLevel=0x5dd1e8*=0x6, pImpLevel=0x5dd204*=0x2, pAuthInfo=0x5dd228, pCapabilites=0x5dd200*=0x1) returned 0x0 [0199.987] WbemLocator:IUnknown:Release (This=0x85f390) returned 0x3 [0199.987] WbemLocator:IUnknown:QueryInterface (in: This=0x8669d0, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd198 | out: ppvObject=0x5dd198*=0x85f3d8) returned 0x0 [0199.987] WbemLocator:IUnknown:QueryInterface (in: This=0x8669d0, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd128 | out: ppvObject=0x5dd128*=0x85f390) returned 0x0 [0199.987] WbemLocator:IClientSecurity:SetBlanket (This=0x85f390, pProxy=0x8669d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0199.987] WbemLocator:IUnknown:Release (This=0x85f390) returned 0x4 [0199.987] WbemLocator:IUnknown:Release (This=0x85f3d8) returned 0x3 [0199.987] CoTaskMemFree (pv=0x85d710) [0199.987] WbemLocator:IUnknown:Release (This=0x8669d0) returned 0x2 [0199.988] SysStringLen (param_1=0x0) returned 0x0 [0199.988] CoGetContextToken (in: pToken=0x5dd380 | out: pToken=0x5dd380) returned 0x0 [0199.988] CoGetContextToken (in: pToken=0x5dd2c0 | out: pToken=0x5dd2c0) returned 0x0 [0199.988] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.988] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd400*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3e0 | out: ppvObject=0x5dd3e0*=0x8802f0) returned 0x0 [0199.988] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.988] WbemDefPath:IWbemPath:GetText (in: This=0x8802f0, lFlags=2, puBuffLength=0x5dd680*=0x0, pszText=0x0 | out: puBuffLength=0x5dd680*=0x20, pszText=0x0) returned 0x0 [0199.988] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.988] CoGetContextToken (in: pToken=0x5dd380 | out: pToken=0x5dd380) returned 0x0 [0199.988] CoGetContextToken (in: pToken=0x5dd2c0 | out: pToken=0x5dd2c0) returned 0x0 [0199.988] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x2 [0199.988] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x5dd400*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd3e0 | out: ppvObject=0x5dd3e0*=0x8802f0) returned 0x0 [0199.988] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.988] WbemDefPath:IWbemPath:GetText (in: This=0x8802f0, lFlags=2, puBuffLength=0x5dd680*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x5dd680*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0199.988] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.989] IWbemServices:GetObject (in: This=0x8669d0, strObjectPath="win32_logicaldisk.deviceid=\"C:\"", lFlags=0, pCtx=0x0, ppObject=0x5dd628*=0x0, ppCallResult=0x0 | out: ppObject=0x5dd628*=0x7e3b60, ppCallResult=0x0) returned 0x0 [0200.022] CoGetContextToken (in: pToken=0x5dd2d0 | out: pToken=0x5dd2d0) returned 0x0 [0200.022] CoGetContextToken (in: pToken=0x5dd210 | out: pToken=0x5dd210) returned 0x0 [0200.022] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x3 [0200.022] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x5dd350*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd330 | out: ppvObject=0x5dd330*=0x87f870) returned 0x0 [0200.022] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x3 [0200.023] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x87f870, puCount=0x5dd5d0 | out: puCount=0x5dd5d0*=0x2) returned 0x0 [0200.023] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x2 [0200.023] CoGetContextToken (in: pToken=0x5dd2d0 | out: pToken=0x5dd2d0) returned 0x0 [0200.023] CoGetContextToken (in: pToken=0x5dd210 | out: pToken=0x5dd210) returned 0x0 [0200.023] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x3 [0200.023] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x5dd350*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd330 | out: ppvObject=0x5dd330*=0x87f870) returned 0x0 [0200.023] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x3 [0200.023] WbemDefPath:IWbemPath:GetText (in: This=0x87f870, lFlags=4, puBuffLength=0x5dd5d0*=0x0, pszText=0x0 | out: puBuffLength=0x5dd5d0*=0xf, pszText=0x0) returned 0x0 [0200.023] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x2 [0200.024] CoGetContextToken (in: pToken=0x5dd2d0 | out: pToken=0x5dd2d0) returned 0x0 [0200.024] CoGetContextToken (in: pToken=0x5dd210 | out: pToken=0x5dd210) returned 0x0 [0200.024] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x3 [0200.024] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x5dd350*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd330 | out: ppvObject=0x5dd330*=0x87f870) returned 0x0 [0200.024] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x3 [0200.024] WbemDefPath:IWbemPath:GetText (in: This=0x87f870, lFlags=4, puBuffLength=0x5dd5d0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd5d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0200.024] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x2 [0200.024] IWbemClassObject:Get (in: This=0x7e3b60, wszName="VolumeSerialNumber", lFlags=0, pVal=0x5dd5c0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd5bc*=0, plFlavor=0x5dd5b8*=0 | out: pVal=0x5dd5c0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="D2CA4DEF", varVal2=0x0), pType=0x5dd5bc*=8, plFlavor=0x5dd5b8*=0) returned 0x0 [0200.024] SysStringLen (param_1="D2CA4DEF") returned 0x8 [0200.024] IWbemClassObject:Get (in: This=0x7e3b60, wszName="VolumeSerialNumber", lFlags=0, pVal=0x5dd610*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd60c*=8, plFlavor=0x5dd608*=0 | out: pVal=0x5dd610*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="D2CA4DEF", varVal2=0x0), pType=0x5dd60c*=8, plFlavor=0x5dd608*=0) returned 0x0 [0200.024] SysStringLen (param_1="D2CA4DEF") returned 0x8 [0200.024] IUnknown:Release (This=0x7e3b60) returned 0x0 [0200.025] VirtualProtect (in: lpAddress=0x2755330, dwSize=0x13, flNewProtect=0x40, lpflOldProtect=0x5dd720 | out: lpflOldProtect=0x5dd720*=0x4) returned 1 [0200.025] CallWindowProcW (lpPrevWndFunc=0x2755330, hWnd=0x0, Msg=0x0, wParam=0x27552d8, lParam=0x8) returned 0x506e3 [0200.025] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4bc [0200.025] SetEvent (hEvent=0x3c0) returned 1 [0200.026] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dd418*=0x4bc, lpdwindex=0x5dd130 | out: lpdwindex=0x5dd130) returned 0x0 [0200.029] CoGetContextToken (in: pToken=0x5dd120 | out: pToken=0x5dd120) returned 0x0 [0200.029] CoGetContextToken (in: pToken=0x5dd060 | out: pToken=0x5dd060) returned 0x0 [0200.029] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x2 [0200.030] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd1a0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd180 | out: ppvObject=0x5dd180*=0x87e5b0) returned 0x0 [0200.030] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.030] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x1 [0200.030] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0200.030] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0200.030] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x2 [0200.030] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x87e5b0) returned 0x0 [0200.030] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.030] WbemDefPath:IWbemPath:SetText (This=0x87e5b0, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0200.030] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x1 [0200.031] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0200.031] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0200.031] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x2 [0200.031] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x87e5b0) returned 0x0 [0200.031] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.031] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x87e5b0, puCount=0x5dd5a0 | out: puCount=0x5dd5a0*=0x2) returned 0x0 [0200.031] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x1 [0200.031] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0200.031] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0200.031] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x2 [0200.031] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x87e5b0) returned 0x0 [0200.031] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.031] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd5a0*=0x0, pszText=0x0 | out: puBuffLength=0x5dd5a0*=0xf, pszText=0x0) returned 0x0 [0200.031] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x1 [0200.031] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0200.031] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0200.031] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x2 [0200.032] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x87e5b0) returned 0x0 [0200.032] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.032] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd5a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd5a0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0200.032] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x1 [0200.033] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0200.033] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0200.033] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x2 [0200.033] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x87e5b0) returned 0x0 [0200.033] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.033] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x87e5b0, puCount=0x5dd5a0 | out: puCount=0x5dd5a0*=0x2) returned 0x0 [0200.033] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x1 [0200.033] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0200.033] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0200.033] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x2 [0200.033] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x87e5b0) returned 0x0 [0200.033] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.033] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd5a0*=0x0, pszText=0x0 | out: puBuffLength=0x5dd5a0*=0xf, pszText=0x0) returned 0x0 [0200.033] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x1 [0200.033] CoGetContextToken (in: pToken=0x5dd2a0 | out: pToken=0x5dd2a0) returned 0x0 [0200.033] CoGetContextToken (in: pToken=0x5dd1e0 | out: pToken=0x5dd1e0) returned 0x0 [0200.033] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x2 [0200.034] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd320*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd300 | out: ppvObject=0x5dd300*=0x87e5b0) returned 0x0 [0200.034] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.034] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd5a0*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd5a0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0200.034] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x1 [0200.048] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dd398*=0x4d4, lpdwindex=0x5dd050 | out: lpdwindex=0x5dd050) returned 0x0 [0200.157] CoGetContextToken (in: pToken=0x5dd3c0 | out: pToken=0x5dd3c0) returned 0x0 [0200.157] CoGetContextToken (in: pToken=0x5dd300 | out: pToken=0x5dd300) returned 0x0 [0200.157] IUnknown:QueryInterface (in: This=0x7f7150, riid=0x7ffadec5d3c0*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd1d0 | out: ppvObject=0x5dd1d0*=0x7f7170) returned 0x0 [0200.157] CObjectContext::ContextCallback () returned 0x0 [0200.159] IUnknown:Release (This=0x7f7170) returned 0x1 [0200.159] CoUnmarshalInterface (in: pStm=0x85d560, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5dd3f8 | out: ppv=0x5dd3f8*=0x893bf8) returned 0x0 [0200.159] CoMarshalInterface (pStm=0x85d560, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x893bf8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0200.160] WbemLocator:IUnknown:QueryInterface (in: This=0x893bf8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcf90 | out: ppvObject=0x5dcf90*=0x893bf8) returned 0x0 [0200.160] WbemLocator:IUnknown:QueryInterface (in: This=0x893bf8, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5dd010 | out: ppvObject=0x5dd010*=0x0) returned 0x80004002 [0200.160] WbemLocator:IUnknown:QueryInterface (in: This=0x893bf8, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5dcda8 | out: ppvObject=0x5dcda8*=0x0) returned 0x80004002 [0200.160] WbemLocator:IUnknown:AddRef (This=0x893bf8) returned 0x3 [0200.161] CoGetContextToken (in: pToken=0x5dcc60 | out: pToken=0x5dcc60) returned 0x0 [0200.161] CoGetContextToken (in: pToken=0x5dcbf0 | out: pToken=0x5dcbf0) returned 0x0 [0200.161] IUnknown:QueryInterface (in: This=0x7f7028, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcc48 | out: ppvObject=0x5dcc48*=0x7f7040) returned 0x0 [0200.161] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7f7040, pAptType=0x5dccf0 | out: pAptType=0x5dccf0*=3) returned 0x0 [0200.161] IUnknown:Release (This=0x7f7040) returned 0x1 [0200.161] WbemLocator:IUnknown:QueryInterface (in: This=0x893bf8, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcc20 | out: ppvObject=0x5dcc20*=0x893ad8) returned 0x0 [0200.161] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x893ad8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5dcc50 | out: pCid=0x5dcc50*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0200.161] WbemLocator:IUnknown:Release (This=0x893ad8) returned 0x3 [0200.161] CoGetContextToken (in: pToken=0x5dcc30 | out: pToken=0x5dcc30) returned 0x0 [0200.161] WbemLocator:IUnknown:AddRef (This=0x893bf8) returned 0x4 [0200.161] WbemLocator:IUnknown:QueryInterface (in: This=0x893bf8, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcd48 | out: ppvObject=0x5dcd48*=0x893bc0) returned 0x0 [0200.161] WbemLocator:IUnknown:Release (This=0x893bf8) returned 0x4 [0200.161] WbemLocator:IRpcOptions:Query (in: This=0x893bc0, pPrx=0x893bf8, dwProperty=2, pdwValue=0x5dcdb8 | out: pdwValue=0x5dcdb8) returned 0x0 [0200.161] WbemLocator:IUnknown:Release (This=0x893bc0) returned 0x3 [0200.161] WbemLocator:IUnknown:Release (This=0x893bf8) returned 0x2 [0200.162] WbemLocator:IUnknown:Release (This=0x893bf8) returned 0x1 [0200.162] CoGetContextToken (in: pToken=0x5dd110 | out: pToken=0x5dd110) returned 0x0 [0200.162] WbemLocator:IUnknown:AddRef (This=0x893bf8) returned 0x2 [0200.162] WbemLocator:IUnknown:QueryInterface (in: This=0x893bf8, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd168 | out: ppvObject=0x5dd168*=0x893bb0) returned 0x0 [0200.162] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x893bb0, pProxy=0x893bf8, pAuthnSvc=0x5dd160, pAuthzSvc=0x5dd15c, pServerPrincName=0x5dd188, pAuthnLevel=0x5dd158, pImpLevel=0x5dd174, pAuthInfo=0x5dd198, pCapabilites=0x5dd170 | out: pAuthnSvc=0x5dd160*=0xa, pAuthzSvc=0x5dd15c*=0x0, pServerPrincName=0x5dd188, pAuthnLevel=0x5dd158*=0x6, pImpLevel=0x5dd174*=0x2, pAuthInfo=0x5dd198, pCapabilites=0x5dd170*=0x1) returned 0x0 [0200.162] WbemLocator:IUnknown:Release (This=0x893bb0) returned 0x2 [0200.162] WbemLocator:IUnknown:QueryInterface (in: This=0x893bf8, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd108 | out: ppvObject=0x5dd108*=0x893bf8) returned 0x0 [0200.162] WbemLocator:IUnknown:QueryInterface (in: This=0x893bf8, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd098 | out: ppvObject=0x5dd098*=0x893bb0) returned 0x0 [0200.162] WbemLocator:IClientSecurity:SetBlanket (This=0x893bb0, pProxy=0x893bf8, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0200.162] WbemLocator:IUnknown:Release (This=0x893bb0) returned 0x3 [0200.162] WbemLocator:IUnknown:Release (This=0x893bf8) returned 0x2 [0200.162] CoTaskMemFree (pv=0x85d5f0) [0200.162] WbemLocator:IUnknown:Release (This=0x893bf8) returned 0x1 [0200.162] SysStringLen (param_1=0x0) returned 0x0 [0200.162] CoGetContextToken (in: pToken=0x5dd130 | out: pToken=0x5dd130) returned 0x0 [0200.162] CoGetContextToken (in: pToken=0x5dd070 | out: pToken=0x5dd070) returned 0x0 [0200.162] WbemLocator:IUnknown:AddRef (This=0x893bf8) returned 0x2 [0200.162] WbemLocator:IUnknown:QueryInterface (in: This=0x893bf8, riid=0x5dd1b0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5dd190 | out: ppvObject=0x5dd190*=0x867c60) returned 0x0 [0200.163] WbemLocator:IUnknown:Release (This=0x893bf8) returned 0x2 [0200.164] WbemLocator:IUnknown:Release (This=0x867c60) returned 0x1 [0200.164] CoGetContextToken (in: pToken=0x5dd040 | out: pToken=0x5dd040) returned 0x0 [0200.164] CoGetContextToken (in: pToken=0x5dcf80 | out: pToken=0x5dcf80) returned 0x0 [0200.164] WbemLocator:IUnknown:AddRef (This=0x893bf8) returned 0x2 [0200.164] WbemLocator:IUnknown:QueryInterface (in: This=0x893bf8, riid=0x5dd0c0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x5dd0a0 | out: ppvObject=0x5dd0a0*=0x867c60) returned 0x0 [0200.164] WbemLocator:IUnknown:Release (This=0x893bf8) returned 0x2 [0200.164] WbemLocator:IUnknown:AddRef (This=0x867c60) returned 0x3 [0200.164] WbemLocator:IUnknown:QueryInterface (in: This=0x867c60, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd168 | out: ppvObject=0x5dd168*=0x893bb0) returned 0x0 [0200.164] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x893bb0, pProxy=0x867c60, pAuthnSvc=0x5dd160, pAuthzSvc=0x5dd15c, pServerPrincName=0x5dd188, pAuthnLevel=0x5dd158, pImpLevel=0x5dd174, pAuthInfo=0x5dd198, pCapabilites=0x5dd170 | out: pAuthnSvc=0x5dd160*=0xa, pAuthzSvc=0x5dd15c*=0x0, pServerPrincName=0x5dd188, pAuthnLevel=0x5dd158*=0x6, pImpLevel=0x5dd174*=0x2, pAuthInfo=0x5dd198, pCapabilites=0x5dd170*=0x1) returned 0x0 [0200.164] WbemLocator:IUnknown:Release (This=0x893bb0) returned 0x3 [0200.164] WbemLocator:IUnknown:QueryInterface (in: This=0x867c60, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd108 | out: ppvObject=0x5dd108*=0x893bf8) returned 0x0 [0200.164] WbemLocator:IUnknown:QueryInterface (in: This=0x867c60, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd098 | out: ppvObject=0x5dd098*=0x893bb0) returned 0x0 [0200.164] WbemLocator:IClientSecurity:SetBlanket (This=0x893bb0, pProxy=0x867c60, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0200.164] WbemLocator:IUnknown:Release (This=0x893bb0) returned 0x4 [0200.164] WbemLocator:IUnknown:Release (This=0x893bf8) returned 0x3 [0200.164] CoTaskMemFree (pv=0x85d5f0) [0200.164] WbemLocator:IUnknown:Release (This=0x867c60) returned 0x2 [0200.165] SysStringLen (param_1=0x0) returned 0x0 [0200.165] CoGetContextToken (in: pToken=0x5dcfe0 | out: pToken=0x5dcfe0) returned 0x0 [0200.165] WbemLocator:IUnknown:AddRef (This=0x867c60) returned 0x3 [0200.165] IWbemServices:ExecQuery (in: This=0x867c60, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x5dd4d8 | out: ppEnum=0x5dd4d8*=0x888f00) returned 0x0 [0200.182] IUnknown:QueryInterface (in: This=0x888f00, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd0e8 | out: ppvObject=0x5dd0e8*=0x888f08) returned 0x0 [0200.182] IClientSecurity:QueryBlanket (in: This=0x888f08, pProxy=0x888f00, pAuthnSvc=0x5dd0e0, pAuthzSvc=0x5dd0dc, pServerPrincName=0x5dd108, pAuthnLevel=0x5dd0d8, pImpLevel=0x5dd0f4, pAuthInfo=0x5dd118, pCapabilites=0x5dd0f0 | out: pAuthnSvc=0x5dd0e0*=0xa, pAuthzSvc=0x5dd0dc*=0x0, pServerPrincName=0x5dd108, pAuthnLevel=0x5dd0d8*=0x6, pImpLevel=0x5dd0f4*=0x2, pAuthInfo=0x5dd118, pCapabilites=0x5dd0f0*=0x1) returned 0x0 [0200.182] IUnknown:Release (This=0x888f08) returned 0x1 [0200.182] IUnknown:QueryInterface (in: This=0x888f00, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd088 | out: ppvObject=0x5dd088*=0x894a98) returned 0x0 [0200.182] IUnknown:QueryInterface (in: This=0x888f00, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd018 | out: ppvObject=0x5dd018*=0x888f08) returned 0x0 [0200.183] IClientSecurity:SetBlanket (This=0x888f08, pProxy=0x888f00, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0200.218] IUnknown:Release (This=0x888f08) returned 0x2 [0200.218] WbemLocator:IUnknown:Release (This=0x894a98) returned 0x1 [0200.218] CoTaskMemFree (pv=0x85d6e0) [0200.219] IUnknown:QueryInterface (in: This=0x888f00, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dccc0 | out: ppvObject=0x5dccc0*=0x894a98) returned 0x0 [0200.219] WbemLocator:IUnknown:QueryInterface (in: This=0x894a98, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5dcd40 | out: ppvObject=0x5dcd40*=0x0) returned 0x80004002 [0200.229] WbemLocator:IUnknown:QueryInterface (in: This=0x894a98, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5dcad8 | out: ppvObject=0x5dcad8*=0x0) returned 0x80004002 [0200.248] WbemLocator:IUnknown:AddRef (This=0x894a98) returned 0x3 [0200.248] CoGetContextToken (in: pToken=0x5dc990 | out: pToken=0x5dc990) returned 0x0 [0200.248] CoGetContextToken (in: pToken=0x5dc920 | out: pToken=0x5dc920) returned 0x0 [0200.248] IUnknown:QueryInterface (in: This=0x7f7028, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc978 | out: ppvObject=0x5dc978*=0x7f7040) returned 0x0 [0200.249] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7f7040, pAptType=0x5dca20 | out: pAptType=0x5dca20*=3) returned 0x0 [0200.249] IUnknown:Release (This=0x7f7040) returned 0x1 [0200.249] WbemLocator:IUnknown:QueryInterface (in: This=0x894a98, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc950 | out: ppvObject=0x5dc950*=0x894978) returned 0x0 [0200.250] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x894978, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5dc980 | out: pCid=0x5dc980*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0200.250] WbemLocator:IUnknown:Release (This=0x894978) returned 0x3 [0200.250] CoGetContextToken (in: pToken=0x5dc960 | out: pToken=0x5dc960) returned 0x0 [0200.250] WbemLocator:IUnknown:AddRef (This=0x894a98) returned 0x4 [0200.250] WbemLocator:IUnknown:QueryInterface (in: This=0x894a98, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dca78 | out: ppvObject=0x5dca78*=0x894a60) returned 0x0 [0200.251] WbemLocator:IUnknown:Release (This=0x894a98) returned 0x4 [0200.251] WbemLocator:IRpcOptions:Query (in: This=0x894a60, pPrx=0x894a98, dwProperty=2, pdwValue=0x5dcae8 | out: pdwValue=0x5dcae8) returned 0x80004002 [0200.251] WbemLocator:IUnknown:Release (This=0x894a60) returned 0x3 [0200.251] WbemLocator:IUnknown:Release (This=0x894a98) returned 0x2 [0200.251] CoGetContextToken (in: pToken=0x5dce60 | out: pToken=0x5dce60) returned 0x0 [0200.251] CoGetContextToken (in: pToken=0x5dcda0 | out: pToken=0x5dcda0) returned 0x0 [0200.252] WbemLocator:IUnknown:AddRef (This=0x894a98) returned 0x3 [0200.252] WbemLocator:IUnknown:QueryInterface (in: This=0x894a98, riid=0x5dcee0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5dcec0 | out: ppvObject=0x5dcec0*=0x888f00) returned 0x0 [0200.252] WbemLocator:IUnknown:Release (This=0x894a98) returned 0x3 [0200.252] IUnknown:Release (This=0x888f00) returned 0x2 [0200.252] IUnknown:Release (This=0x888f00) returned 0x1 [0200.253] WbemLocator:IUnknown:Release (This=0x867c60) returned 0x2 [0200.253] SysStringLen (param_1=0x0) returned 0x0 [0200.253] CoGetContextToken (in: pToken=0x5dd200 | out: pToken=0x5dd200) returned 0x0 [0200.253] CoGetContextToken (in: pToken=0x5dd140 | out: pToken=0x5dd140) returned 0x0 [0200.253] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd280*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd260 | out: ppvObject=0x5dd260*=0x87e5b0) returned 0x0 [0200.254] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.254] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x87e5b0, puCount=0x5dd500 | out: puCount=0x5dd500*=0x2) returned 0x0 [0200.254] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.254] CoGetContextToken (in: pToken=0x5dd200 | out: pToken=0x5dd200) returned 0x0 [0200.254] CoGetContextToken (in: pToken=0x5dd140 | out: pToken=0x5dd140) returned 0x0 [0200.254] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.254] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd280*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd260 | out: ppvObject=0x5dd260*=0x87e5b0) returned 0x0 [0200.255] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.255] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd500*=0x0, pszText=0x0 | out: puBuffLength=0x5dd500*=0xf, pszText=0x0) returned 0x0 [0200.255] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.255] CoGetContextToken (in: pToken=0x5dd200 | out: pToken=0x5dd200) returned 0x0 [0200.255] CoGetContextToken (in: pToken=0x5dd140 | out: pToken=0x5dd140) returned 0x0 [0200.255] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.255] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd280*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd260 | out: ppvObject=0x5dd260*=0x87e5b0) returned 0x0 [0200.256] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.256] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd500*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd500*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0200.256] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.256] CoTaskMemAlloc (cb=0x104) returned 0x8864e0 [0200.256] GetEnvironmentVariableW (in: lpName="PROCESSOR_ARCHITEW6432", lpBuffer=0x8864e0, nSize=0x80 | out: lpBuffer="") returned 0x0 [0200.256] CoTaskMemFree (pv=0x8864e0) [0200.257] CoGetContextToken (in: pToken=0x5dd080 | out: pToken=0x5dd080) returned 0x0 [0200.257] CoGetContextToken (in: pToken=0x5dcfc0 | out: pToken=0x5dcfc0) returned 0x0 [0200.257] WbemLocator:IUnknown:AddRef (This=0x894a98) returned 0x2 [0200.257] WbemLocator:IUnknown:QueryInterface (in: This=0x894a98, riid=0x5dd100*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5dd0e0 | out: ppvObject=0x5dd0e0*=0x888f00) returned 0x0 [0200.257] WbemLocator:IUnknown:Release (This=0x894a98) returned 0x2 [0200.257] IUnknown:AddRef (This=0x888f00) returned 0x3 [0200.257] IEnumWbemClassObject:Clone (in: This=0x888f00, ppEnum=0x5dd540 | out: ppEnum=0x5dd540*=0x87e120) returned 0x0 [0200.269] IUnknown:QueryInterface (in: This=0x87e120, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd198 | out: ppvObject=0x5dd198*=0x87e128) returned 0x0 [0200.269] IClientSecurity:QueryBlanket (in: This=0x87e128, pProxy=0x87e120, pAuthnSvc=0x5dd190, pAuthzSvc=0x5dd18c, pServerPrincName=0x5dd1b8, pAuthnLevel=0x5dd188, pImpLevel=0x5dd1a4, pAuthInfo=0x5dd1c8, pCapabilites=0x5dd1a0 | out: pAuthnSvc=0x5dd190*=0xa, pAuthzSvc=0x5dd18c*=0x0, pServerPrincName=0x5dd1b8, pAuthnLevel=0x5dd188*=0x6, pImpLevel=0x5dd1a4*=0x2, pAuthInfo=0x5dd1c8, pCapabilites=0x5dd1a0*=0x1) returned 0x0 [0200.269] IUnknown:Release (This=0x87e128) returned 0x1 [0200.269] IUnknown:QueryInterface (in: This=0x87e120, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd138 | out: ppvObject=0x5dd138*=0x894c38) returned 0x0 [0200.269] IUnknown:QueryInterface (in: This=0x87e120, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dd0c8 | out: ppvObject=0x5dd0c8*=0x87e128) returned 0x0 [0200.269] IClientSecurity:SetBlanket (This=0x87e128, pProxy=0x87e120, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0200.293] IUnknown:Release (This=0x87e128) returned 0x2 [0200.293] WbemLocator:IUnknown:Release (This=0x894c38) returned 0x1 [0200.293] CoTaskMemFree (pv=0x85d710) [0200.294] IUnknown:QueryInterface (in: This=0x87e120, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcd60 | out: ppvObject=0x5dcd60*=0x894c38) returned 0x0 [0200.294] WbemLocator:IUnknown:QueryInterface (in: This=0x894c38, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5dcde0 | out: ppvObject=0x5dcde0*=0x0) returned 0x80004002 [0200.298] WbemLocator:IUnknown:QueryInterface (in: This=0x894c38, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5dcb78 | out: ppvObject=0x5dcb78*=0x0) returned 0x80004002 [0200.311] WbemLocator:IUnknown:AddRef (This=0x894c38) returned 0x3 [0200.311] CoGetContextToken (in: pToken=0x5dca30 | out: pToken=0x5dca30) returned 0x0 [0200.311] CoGetContextToken (in: pToken=0x5dc9c0 | out: pToken=0x5dc9c0) returned 0x0 [0200.311] IUnknown:QueryInterface (in: This=0x7f7028, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dca18 | out: ppvObject=0x5dca18*=0x7f7040) returned 0x0 [0200.313] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7f7040, pAptType=0x5dcac0 | out: pAptType=0x5dcac0*=3) returned 0x0 [0200.313] IUnknown:Release (This=0x7f7040) returned 0x1 [0200.313] WbemLocator:IUnknown:QueryInterface (in: This=0x894c38, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc9f0 | out: ppvObject=0x5dc9f0*=0x894b18) returned 0x0 [0200.313] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x894b18, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5dca20 | out: pCid=0x5dca20*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0200.313] WbemLocator:IUnknown:Release (This=0x894b18) returned 0x3 [0200.314] CoGetContextToken (in: pToken=0x5dca00 | out: pToken=0x5dca00) returned 0x0 [0200.314] WbemLocator:IUnknown:AddRef (This=0x894c38) returned 0x4 [0200.314] WbemLocator:IUnknown:QueryInterface (in: This=0x894c38, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dcb18 | out: ppvObject=0x5dcb18*=0x894c00) returned 0x0 [0200.314] WbemLocator:IUnknown:Release (This=0x894c38) returned 0x4 [0200.314] WbemLocator:IRpcOptions:Query (in: This=0x894c00, pPrx=0x894c38, dwProperty=2, pdwValue=0x5dcb88 | out: pdwValue=0x5dcb88) returned 0x80004002 [0200.314] WbemLocator:IUnknown:Release (This=0x894c00) returned 0x3 [0200.315] WbemLocator:IUnknown:Release (This=0x894c38) returned 0x2 [0200.315] CoGetContextToken (in: pToken=0x5dcf00 | out: pToken=0x5dcf00) returned 0x0 [0200.315] CoGetContextToken (in: pToken=0x5dce40 | out: pToken=0x5dce40) returned 0x0 [0200.315] WbemLocator:IUnknown:AddRef (This=0x894c38) returned 0x3 [0200.315] WbemLocator:IUnknown:QueryInterface (in: This=0x894c38, riid=0x5dcf80*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5dcf60 | out: ppvObject=0x5dcf60*=0x87e120) returned 0x0 [0200.315] WbemLocator:IUnknown:Release (This=0x894c38) returned 0x3 [0200.315] IUnknown:Release (This=0x87e120) returned 0x2 [0200.316] IUnknown:Release (This=0x87e120) returned 0x1 [0200.316] IUnknown:Release (This=0x888f00) returned 0x2 [0200.316] SysStringLen (param_1=0x0) returned 0x0 [0200.316] CoGetContextToken (in: pToken=0x5dd380 | out: pToken=0x5dd380) returned 0x0 [0200.316] CoGetContextToken (in: pToken=0x5dd2c0 | out: pToken=0x5dd2c0) returned 0x0 [0200.316] WbemLocator:IUnknown:AddRef (This=0x894c38) returned 0x2 [0200.316] WbemLocator:IUnknown:QueryInterface (in: This=0x894c38, riid=0x5dd400*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x5dd3e0 | out: ppvObject=0x5dd3e0*=0x87e120) returned 0x0 [0200.316] WbemLocator:IUnknown:Release (This=0x894c38) returned 0x2 [0200.317] IUnknown:AddRef (This=0x87e120) returned 0x3 [0200.317] IEnumWbemClassObject:Reset (This=0x87e120) returned 0x0 [0200.340] IUnknown:Release (This=0x87e120) returned 0x2 [0200.340] CoTaskMemAlloc (cb=0x8) returned 0x8658a0 [0200.340] IEnumWbemClassObject:Next (in: This=0x87e120, lTimeout=-1, uCount=0x1, apObjects=0x8658a0, puReturned=0x5dd608 | out: apObjects=0x8658a0*=0x7e3b60, puReturned=0x5dd608*=0x1) returned 0x0 [0200.413] IUnknown:QueryInterface (in: This=0x7e3b60, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc930 | out: ppvObject=0x5dc930*=0x7e3b60) returned 0x0 [0200.413] IUnknown:QueryInterface (in: This=0x7e3b60, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x5dc9b0 | out: ppvObject=0x5dc9b0*=0x0) returned 0x80004002 [0200.413] IUnknown:QueryInterface (in: This=0x7e3b60, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x5dc748 | out: ppvObject=0x5dc748*=0x0) returned 0x80004002 [0200.413] IUnknown:AddRef (This=0x7e3b60) returned 0x3 [0200.413] CoGetContextToken (in: pToken=0x5dc600 | out: pToken=0x5dc600) returned 0x0 [0200.413] CoGetContextToken (in: pToken=0x5dc590 | out: pToken=0x5dc590) returned 0x0 [0200.413] IUnknown:QueryInterface (in: This=0x7f7028, riid=0x7ffadec5d270*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc5e8 | out: ppvObject=0x5dc5e8*=0x7f7040) returned 0x0 [0200.413] IComThreadingInfo:GetCurrentApartmentType (in: This=0x7f7040, pAptType=0x5dc690 | out: pAptType=0x5dc690*=3) returned 0x0 [0200.413] IUnknown:Release (This=0x7f7040) returned 0x1 [0200.413] IUnknown:QueryInterface (in: This=0x7e3b60, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc5c0 | out: ppvObject=0x5dc5c0*=0x7e3b68) returned 0x0 [0200.413] IMarshal:GetUnmarshalClass (in: This=0x7e3b68, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x5dc5f0 | out: pCid=0x5dc5f0*(Data1=0x4590f812, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24))) returned 0x0 [0200.413] IUnknown:Release (This=0x7e3b68) returned 0x3 [0200.413] CoGetContextToken (in: pToken=0x5dc5d0 | out: pToken=0x5dc5d0) returned 0x0 [0200.413] IUnknown:AddRef (This=0x7e3b60) returned 0x4 [0200.413] IUnknown:QueryInterface (in: This=0x7e3b60, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5dc6e8 | out: ppvObject=0x5dc6e8*=0x0) returned 0x80004002 [0200.413] IUnknown:Release (This=0x7e3b60) returned 0x3 [0200.414] IUnknown:Release (This=0x7e3b60) returned 0x2 [0200.414] CoGetContextToken (in: pToken=0x5dca90 | out: pToken=0x5dca90) returned 0x0 [0200.414] CoGetContextToken (in: pToken=0x5dc9d0 | out: pToken=0x5dc9d0) returned 0x0 [0200.414] IUnknown:AddRef (This=0x7e3b60) returned 0x3 [0200.414] IUnknown:QueryInterface (in: This=0x7e3b60, riid=0x5dcb10*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x5dcaf0 | out: ppvObject=0x5dcaf0*=0x7e3b60) returned 0x0 [0200.414] IUnknown:Release (This=0x7e3b60) returned 0x3 [0200.414] IUnknown:Release (This=0x7e3b60) returned 0x2 [0200.414] IUnknown:Release (This=0x7e3b60) returned 0x1 [0200.414] CoTaskMemFree (pv=0x8658a0) [0200.414] CoGetContextToken (in: pToken=0x5dd410 | out: pToken=0x5dd410) returned 0x0 [0200.414] IUnknown:AddRef (This=0x7e3b60) returned 0x2 [0200.414] IWbemClassObject:Get (in: This=0x7e3b60, wszName="__GENUS", lFlags=0, pVal=0x5dd580*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd57c*=0, plFlavor=0x5dd578*=0 | out: pVal=0x5dd580*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x5dd57c*=3, plFlavor=0x5dd578*=64) returned 0x0 [0200.414] IWbemClassObject:Get (in: This=0x7e3b60, wszName="__PATH", lFlags=0, pVal=0x5dd520*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd51c*=0, plFlavor=0x5dd518*=0 | out: pVal=0x5dd520*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@", varVal2=0x0), pType=0x5dd51c*=8, plFlavor=0x5dd518*=64) returned 0x0 [0200.414] SysStringLen (param_1="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@") returned 0x2c [0200.414] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4d8 [0200.414] SetEvent (hEvent=0x3c0) returned 1 [0200.415] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5dd408*=0x4d8, lpdwindex=0x5dd120 | out: lpdwindex=0x5dd120) returned 0x0 [0200.417] CoGetContextToken (in: pToken=0x5dd110 | out: pToken=0x5dd110) returned 0x0 [0200.417] CoGetContextToken (in: pToken=0x5dd050 | out: pToken=0x5dd050) returned 0x0 [0200.417] WbemDefPath:IUnknown:AddRef (This=0x8803b0) returned 0x2 [0200.417] WbemDefPath:IUnknown:QueryInterface (in: This=0x8803b0, riid=0x5dd190*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd170 | out: ppvObject=0x5dd170*=0x8803b0) returned 0x0 [0200.417] WbemDefPath:IUnknown:Release (This=0x8803b0) returned 0x2 [0200.418] WbemDefPath:IUnknown:Release (This=0x8803b0) returned 0x1 [0200.418] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0200.418] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0200.418] WbemDefPath:IUnknown:AddRef (This=0x8803b0) returned 0x2 [0200.418] WbemDefPath:IUnknown:QueryInterface (in: This=0x8803b0, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x8803b0) returned 0x0 [0200.418] WbemDefPath:IUnknown:Release (This=0x8803b0) returned 0x2 [0200.418] WbemDefPath:IWbemPath:SetText (This=0x8803b0, uMode=0x4, pszPath="\\\\LHNIWSJ\\root\\CIMV2:Win32_OperatingSystem=@") returned 0x0 [0200.418] WbemDefPath:IUnknown:Release (This=0x8803b0) returned 0x1 [0200.418] CoGetContextToken (in: pToken=0x5dd250 | out: pToken=0x5dd250) returned 0x0 [0200.418] CoGetContextToken (in: pToken=0x5dd190 | out: pToken=0x5dd190) returned 0x0 [0200.418] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.418] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd2d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2b0 | out: ppvObject=0x5dd2b0*=0x87e5b0) returned 0x0 [0200.418] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.418] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x87e5b0, puCount=0x5dd550 | out: puCount=0x5dd550*=0x2) returned 0x0 [0200.418] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.418] CoGetContextToken (in: pToken=0x5dd250 | out: pToken=0x5dd250) returned 0x0 [0200.418] CoGetContextToken (in: pToken=0x5dd190 | out: pToken=0x5dd190) returned 0x0 [0200.418] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.418] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd2d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2b0 | out: ppvObject=0x5dd2b0*=0x87e5b0) returned 0x0 [0200.418] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.418] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd550*=0x0, pszText=0x0 | out: puBuffLength=0x5dd550*=0xf, pszText=0x0) returned 0x0 [0200.418] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.418] CoGetContextToken (in: pToken=0x5dd250 | out: pToken=0x5dd250) returned 0x0 [0200.418] CoGetContextToken (in: pToken=0x5dd190 | out: pToken=0x5dd190) returned 0x0 [0200.418] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.418] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd2d0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2b0 | out: ppvObject=0x5dd2b0*=0x87e5b0) returned 0x0 [0200.418] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.419] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd550*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd550*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0200.419] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.419] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0200.419] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0200.419] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x87e5b0) returned 0x0 [0200.419] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.419] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x87e5b0, puCount=0x5dd590 | out: puCount=0x5dd590*=0x2) returned 0x0 [0200.419] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.419] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0200.419] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0200.419] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x87e5b0) returned 0x0 [0200.419] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.419] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd590*=0x0, pszText=0x0 | out: puBuffLength=0x5dd590*=0xf, pszText=0x0) returned 0x0 [0200.419] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.419] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0200.419] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0200.419] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.419] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x87e5b0) returned 0x0 [0200.419] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.419] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd590*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd590*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0200.419] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.419] IWbemClassObject:Get (in: This=0x7e3b60, wszName="Caption", lFlags=0, pVal=0x5dd580*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd57c*=0, plFlavor=0x5dd578*=0 | out: pVal=0x5dd580*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 10 Pro", varVal2=0x0), pType=0x5dd57c*=8, plFlavor=0x5dd578*=0) returned 0x0 [0200.419] SysStringLen (param_1="Microsoft Windows 10 Pro") returned 0x18 [0200.420] IWbemClassObject:Get (in: This=0x7e3b60, wszName="Caption", lFlags=0, pVal=0x5dd590*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd58c*=8, plFlavor=0x5dd588*=0 | out: pVal=0x5dd590*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Microsoft Windows 10 Pro", varVal2=0x0), pType=0x5dd58c*=8, plFlavor=0x5dd588*=0) returned 0x0 [0200.420] SysStringLen (param_1="Microsoft Windows 10 Pro") returned 0x18 [0200.420] CoTaskMemAlloc (cb=0x104) returned 0x885a40 [0200.420] GetEnvironmentVariableW (in: lpName="PROCESSOR_ARCHITEW6432", lpBuffer=0x885a40, nSize=0x80 | out: lpBuffer="") returned 0x0 [0200.420] CoTaskMemFree (pv=0x885a40) [0200.420] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0200.420] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0200.420] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.420] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x87e5b0) returned 0x0 [0200.420] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.420] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x87e5b0, puCount=0x5dd590 | out: puCount=0x5dd590*=0x2) returned 0x0 [0200.420] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.420] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0200.420] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0200.420] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.420] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x87e5b0) returned 0x0 [0200.420] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.420] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd590*=0x0, pszText=0x0 | out: puBuffLength=0x5dd590*=0xf, pszText=0x0) returned 0x0 [0200.420] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.420] CoGetContextToken (in: pToken=0x5dd290 | out: pToken=0x5dd290) returned 0x0 [0200.420] CoGetContextToken (in: pToken=0x5dd1d0 | out: pToken=0x5dd1d0) returned 0x0 [0200.420] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.420] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x5dd310*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x5dd2f0 | out: ppvObject=0x5dd2f0*=0x87e5b0) returned 0x0 [0200.420] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.420] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=4, puBuffLength=0x5dd590*=0xf, pszText="00000000000000" | out: puBuffLength=0x5dd590*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0200.421] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.421] IWbemClassObject:Get (in: This=0x7e3b60, wszName="Version", lFlags=0, pVal=0x5dd580*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd57c*=0, plFlavor=0x5dd578*=0 | out: pVal=0x5dd580*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="10.0.10240", varVal2=0x0), pType=0x5dd57c*=8, plFlavor=0x5dd578*=0) returned 0x0 [0200.421] SysStringLen (param_1="10.0.10240") returned 0xa [0200.421] IWbemClassObject:Get (in: This=0x7e3b60, wszName="Version", lFlags=0, pVal=0x5dd590*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x5dd58c*=8, plFlavor=0x5dd588*=0 | out: pVal=0x5dd590*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="10.0.10240", varVal2=0x0), pType=0x5dd58c*=8, plFlavor=0x5dd588*=0) returned 0x0 [0200.421] SysStringLen (param_1="10.0.10240") returned 0xa [0200.421] CoGetContextToken (in: pToken=0x5dd390 | out: pToken=0x5dd390) returned 0x0 [0200.421] WbemLocator:IUnknown:Release (This=0x894c38) returned 0x1 [0200.421] IUnknown:Release (This=0x87e120) returned 0x0 [0200.426] GetWindowTextLengthW (hWnd=0x7002e) returned 6 [0200.426] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0200.426] GetSystemMetrics (nIndex=42) returned 0 [0200.426] CoTaskMemAlloc (cb=0x12) returned 0x87da30 [0200.426] GetWindowTextW (in: hWnd=0x7002e, lpString=0x87da30, nMaxCount=7 | out: lpString="[HWID]") returned 6 [0200.426] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xd, wParam=0x7, lParam=0x87da30) returned 0x6 [0200.426] CoTaskMemFree (pv=0x87da30) [0200.426] GetWindowTextLengthW (hWnd=0x7002e) returned 6 [0200.426] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0200.427] GetSystemMetrics (nIndex=42) returned 0 [0200.427] CoTaskMemAlloc (cb=0x12) returned 0x87da30 [0200.427] GetWindowTextW (in: hWnd=0x7002e, lpString=0x87da30, nMaxCount=7 | out: lpString="[HWID]") returned 6 [0200.427] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xd, wParam=0x7, lParam=0x87da30) returned 0x6 [0200.427] CoTaskMemFree (pv=0x87da30) [0200.427] SetWindowTextW (hWnd=0x7002e, lpString="D2CA4DEF1F8BFBFF000506E3") returned 1 [0200.427] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xc, wParam=0x0, lParam=0x27590d0) returned 0x1 [0200.427] GetWindowTextLengthW (hWnd=0x7002e) returned 24 [0200.427] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0200.427] GetSystemMetrics (nIndex=42) returned 0 [0200.427] CoTaskMemAlloc (cb=0x36) returned 0x863700 [0200.427] GetWindowTextW (in: hWnd=0x7002e, lpString=0x863700, nMaxCount=25 | out: lpString="D2CA4DEF1F8BFBFF000506E3") returned 24 [0200.427] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xd, wParam=0x19, lParam=0x863700) returned 0x18 [0200.427] CoTaskMemFree (pv=0x863700) [0200.427] AdjustWindowRectEx (in: lpRect=0x5dd5b0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd5b0) returned 1 [0200.428] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x5dd5f0, fWinIni=0x0 | out: pvParam=0x5dd5f0) returned 1 [0200.428] SendMessageW (hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0200.428] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0200.428] DrawTextExW (in: hdc=0x42010685, lpchText="D2CA4DEF1F8BFBFF000506E3", cchText=24, lprc=0x5dd440, format=0x102400, lpdtp=0x2759490 | out: lpchText="D2CA4DEF1F8BFBFF000506E3", lprc=0x5dd440) returned 13 [0200.428] SetWindowPos (hWnd=0x7002e, hWndInsertAfter=0x0, X=112, Y=262, cx=161, cy=13, uFlags=0x16) returned 1 [0200.428] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x46, wParam=0x0, lParam=0x5dd520) returned 0x0 [0200.428] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x83, wParam=0x1, lParam=0x5dd4f0) returned 0x0 [0200.429] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x47, wParam=0x0, lParam=0x5dd520) returned 0x0 [0200.429] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x5, wParam=0x0, lParam=0xd00a1) returned 0x0 [0200.429] GetClientRect (in: hWnd=0x7002e, lpRect=0x5dcc80 | out: lpRect=0x5dcc80) returned 1 [0200.429] GetWindowRect (in: hWnd=0x7002e, lpRect=0x5dcc80 | out: lpRect=0x5dcc80) returned 1 [0200.429] GetParent (hWnd=0x7002e) returned 0x901f6 [0200.429] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x901f6, lpPoints=0x5dcc70, cPoints=0x2 | out: lpPoints=0x5dcc70) returned -6750289 [0200.732] InvalidateRect (hWnd=0x7002e, lpRect=0x0, bErase=1) returned 1 [0200.732] GetWindowTextLengthW (hWnd=0x7002e) returned 24 [0200.733] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0200.733] GetSystemMetrics (nIndex=42) returned 0 [0200.733] CoTaskMemAlloc (cb=0x36) returned 0x863080 [0200.733] GetWindowTextW (in: hWnd=0x7002e, lpString=0x863080, nMaxCount=25 | out: lpString="D2CA4DEF1F8BFBFF000506E3") returned 24 [0200.733] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xd, wParam=0x19, lParam=0x863080) returned 0x18 [0200.733] CoTaskMemFree (pv=0x863080) [0200.733] GetParent (hWnd=0x7002e) returned 0x901f6 [0200.733] InvalidateRect (hWnd=0x7002e, lpRect=0x0, bErase=1) returned 1 [0200.733] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0200.733] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0200.733] GetSystemMetrics (nIndex=42) returned 0 [0200.733] CoTaskMemAlloc (cb=0x22) returned 0x89c290 [0200.733] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c290, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0200.733] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c290) returned 0xe [0200.733] CoTaskMemFree (pv=0x89c290) [0200.733] InvalidateRect (hWnd=0x8003a, lpRect=0x0, bErase=0) returned 1 [0200.733] InvalidateRect (hWnd=0xd0028, lpRect=0x0, bErase=0) returned 1 [0200.733] InvalidateRect (hWnd=0xa018a, lpRect=0x0, bErase=0) returned 1 [0200.733] InvalidateRect (hWnd=0x5016e, lpRect=0x0, bErase=1) returned 1 [0200.734] InvalidateRect (hWnd=0xb0030, lpRect=0x0, bErase=1) returned 1 [0200.734] InvalidateRect (hWnd=0x7002e, lpRect=0x0, bErase=1) returned 1 [0200.734] InvalidateRect (hWnd=0x40148, lpRect=0x0, bErase=1) returned 1 [0200.734] InvalidateRect (hWnd=0x50208, lpRect=0x0, bErase=1) returned 1 [0200.775] GetWindowThreadProcessId (in: hWnd=0x901f6, lpdwProcessId=0x5dd8a0 | out: lpdwProcessId=0x5dd8a0) returned 0xe28 [0200.775] GetCurrentThreadId () returned 0xe28 [0200.776] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc174 [0200.777] PostMessageW (hWnd=0x901f6, Msg=0xc174, wParam=0x0, lParam=0x0) returned 1 [0200.779] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0200.779] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0200.779] GetSystemMetrics (nIndex=42) returned 0 [0200.779] CoTaskMemAlloc (cb=0x22) returned 0x89c5f0 [0200.779] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c5f0, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0200.779] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c5f0) returned 0xe [0200.779] CoTaskMemFree (pv=0x89c5f0) [0200.781] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5de2a0) returned 0x0 [0200.811] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5de2a0) returned 0x0 [0200.811] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0200.811] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0200.811] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0200.811] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0200.919] OleInitialize (pvReserved=0x0) returned 0x1 [0200.919] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x5ddbf0 | out: lplpMessageFilter=0x5ddbf0*=0x0) returned 0x0 [0200.947] GetFocus () returned 0x0 [0200.948] GetFocus () returned 0x0 [0200.948] SetFocus (hWnd=0x50208) returned 0x0 [0200.953] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0200.958] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0200.958] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0200.959] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0200.960] GetParent (hWnd=0x901f6) returned 0x0 [0200.961] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0200.961] SendMessageW (hWnd=0x50208, Msg=0x2111, wParam=0x1000208, lParam=0x50208) returned 0x0 [0200.962] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0200.993] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5ddcf0 | out: lpwndpl=0x5ddcf0) returned 1 [0200.994] GetClientRect (in: hWnd=0x901f6, lpRect=0x5ddb70 | out: lpRect=0x5ddb70) returned 1 [0200.995] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0200.995] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0200.995] GetSystemMetrics (nIndex=42) returned 0 [0200.995] CoTaskMemAlloc (cb=0x22) returned 0x89c740 [0200.995] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c740, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0200.995] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c740) returned 0xe [0200.995] CoTaskMemFree (pv=0x89c740) [0200.996] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dd920 | out: lpRect=0x5dd920) returned 1 [0200.999] GetSystemMetrics (nIndex=80) returned 1 [0201.001] GetDC (hWnd=0x0) returned 0xa0100d0 [0201.002] EnumDisplayMonitors (hdc=0xa0100d0, lprcClip=0x0, lpfnEnum=0x21640fc, dwData=0x0) returned 1 [0201.003] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x5dce20 | out: lpmi=0x5dce20) returned 1 [0201.004] GetDeviceCaps (hdc=0x62010726, index=12) returned 32 [0201.004] GetDeviceCaps (hdc=0x62010726, index=14) returned 1 [0201.004] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0201.004] GetCurrentObject (hdc=0x10105e0, type=0x1) returned 0x1b00017 [0201.004] GetCurrentObject (hdc=0x10105e0, type=0x2) returned 0x1900010 [0201.004] GetCurrentObject (hdc=0x10105e0, type=0x7) returned 0xc05073a [0201.004] GetCurrentObject (hdc=0x10105e0, type=0x6) returned 0x18a0048 [0201.005] SaveDC (hdc=0x10105e0) returned 1 [0201.006] GetNearestColor (hdc=0x10105e0, color=0xf0f0f0) returned 0xf0f0f0 [0201.011] CreateSolidBrush (color=0xf0f0f0) returned 0x2c100686 [0201.012] FillRect (hDC=0x10105e0, lprc=0x5dd450, hbr=0x2c100686) returned 1 [0201.013] DeleteObject (ho=0x2c100686) returned 1 [0201.014] RestoreDC (hdc=0x10105e0, nSavedDC=-1) returned 1 [0201.015] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.016] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x14, wParam=0x10105e0, lParam=0x0) returned 0x1 [0201.016] GetStockObject (i=5) returned 0x1900015 [0201.016] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.016] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x14, wParam=0x1010749, lParam=0x0) returned 0x1 [0201.016] GetStockObject (i=5) returned 0x1900015 [0201.016] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.017] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0201.017] GetStockObject (i=5) returned 0x1900015 [0201.017] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.017] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.018] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.018] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.018] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.027] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x14, wParam=0x1010749, lParam=0x0) returned 0x1 [0201.027] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5ddcd0 | out: lpwndpl=0x5ddcd0) returned 1 [0201.027] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x47, wParam=0x0, lParam=0x5de2a0) returned 0x0 [0201.027] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dda70 | out: lpRect=0x5dda70) returned 1 [0201.027] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5dda70 | out: lpRect=0x5dda70) returned 1 [0201.029] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x5, wParam=0x0, lParam=0x1780295) returned 0x0 [0201.029] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x3, wParam=0x0, lParam=0x680051) returned 0x0 [0201.029] GetClientRect (in: hWnd=0x901f6, lpRect=0x5ddb40 | out: lpRect=0x5ddb40) returned 1 [0201.029] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5ddb40 | out: lpRect=0x5ddb40) returned 1 [0201.047] PeekMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5de2e0) returned 1 [0201.048] IsWindowUnicode (hWnd=0x901f6) returned 1 [0201.048] GetMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5de2e0) returned 1 [0201.215] TranslateMessage (lpMsg=0x5de2f0) returned 0 [0201.216] DispatchMessageW (lpMsg=0x5de2f0) returned 0x0 [0201.216] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0201.216] PeekMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5de2e0) returned 1 [0201.216] IsWindowUnicode (hWnd=0x20232) returned 1 [0201.216] GetMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5de2e0) returned 1 [0201.216] TranslateMessage (lpMsg=0x5de2f0) returned 0 [0201.216] DispatchMessageW (lpMsg=0x5de2f0) returned 0x0 [0201.216] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0201.216] PeekMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5de2e0) returned 1 [0201.216] IsWindowUnicode (hWnd=0x901f6) returned 1 [0201.216] GetMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5de2e0) returned 1 [0201.216] TranslateMessage (lpMsg=0x5de2f0) returned 0 [0201.216] DispatchMessageW (lpMsg=0x5de2f0) returned 0x0 [0201.218] PeekMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5de2e0) returned 1 [0201.218] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x84, wParam=0x0, lParam=0x1c10130) returned 0x1 [0201.218] IsWindowUnicode (hWnd=0x8003a) returned 1 [0201.218] GetMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5de2e0) returned 1 [0201.218] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x84, wParam=0x0, lParam=0x1c10130) returned 0x1 [0201.219] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0201.220] SetCursor (hCursor=0x10003) returned 0x10007 [0201.220] TranslateMessage (lpMsg=0x5de2f0) returned 0 [0201.220] DispatchMessageW (lpMsg=0x5de2f0) returned 0x0 [0201.474] _TrackMouseEvent (in: lpEventTrack=0x275ad80 | out: lpEventTrack=0x275ad80) returned 1 [0201.474] SendMessageW (hWnd=0x8003a, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0201.475] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0201.476] InvalidateRect (hWnd=0x8003a, lpRect=0x0, bErase=0) returned 1 [0201.478] GetKeyState (nVirtKey=1) returned 0 [0201.478] GetKeyState (nVirtKey=2) returned 0 [0201.478] GetKeyState (nVirtKey=4) returned 0 [0201.478] GetKeyState (nVirtKey=5) returned 0 [0201.478] GetKeyState (nVirtKey=6) returned 0 [0201.479] PeekMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5de2e0) returned 1 [0201.479] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0201.483] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5de120) returned 0x0 [0201.483] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5de120) returned 0x0 [0201.483] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.484] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5ddb70 | out: lpwndpl=0x5ddb70) returned 1 [0201.484] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dd9f0 | out: lpRect=0x5dd9f0) returned 1 [0201.484] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0201.484] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0201.484] GetSystemMetrics (nIndex=42) returned 0 [0201.484] CoTaskMemAlloc (cb=0x22) returned 0x89c800 [0201.484] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c800, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0201.484] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c800) returned 0xe [0201.485] CoTaskMemFree (pv=0x89c800) [0201.485] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dd7a0 | out: lpRect=0x5dd7a0) returned 1 [0201.485] GetCurrentObject (hdc=0xa0100d0, type=0x1) returned 0x1b00017 [0201.485] GetCurrentObject (hdc=0xa0100d0, type=0x2) returned 0x1900010 [0201.485] GetCurrentObject (hdc=0xa0100d0, type=0x7) returned 0xc05073a [0201.485] GetCurrentObject (hdc=0xa0100d0, type=0x6) returned 0x18a0048 [0201.485] SaveDC (hdc=0xa0100d0) returned 1 [0201.485] GetNearestColor (hdc=0xa0100d0, color=0xf0f0f0) returned 0xf0f0f0 [0201.485] CreateSolidBrush (color=0xf0f0f0) returned 0x2d100686 [0201.485] FillRect (hDC=0xa0100d0, lprc=0x5dd2d0, hbr=0x2d100686) returned 1 [0201.485] DeleteObject (ho=0x2d100686) returned 1 [0201.485] RestoreDC (hdc=0xa0100d0, nSavedDC=-1) returned 1 [0201.485] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.486] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x14, wParam=0x1010749, lParam=0x0) returned 0x1 [0201.486] GetStockObject (i=5) returned 0x1900015 [0201.486] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.486] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x14, wParam=0x10105e0, lParam=0x0) returned 0x1 [0201.486] GetStockObject (i=5) returned 0x1900015 [0201.486] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.486] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0201.486] GetStockObject (i=5) returned 0x1900015 [0201.486] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.486] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.487] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.487] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.487] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0201.489] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x14, wParam=0x10105e0, lParam=0x0) returned 0x1 [0201.489] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5ddb50 | out: lpwndpl=0x5ddb50) returned 1 [0201.489] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x47, wParam=0x0, lParam=0x5de120) returned 0x0 [0201.489] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dd8f0 | out: lpRect=0x5dd8f0) returned 1 [0201.489] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5dd8f0 | out: lpRect=0x5dd8f0) returned 1 [0201.490] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x47, wParam=0x0, lParam=0x5de120) returned 0x0 [0201.491] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x84, wParam=0x0, lParam=0x1c10130) returned 0x1 [0201.491] IsWindowUnicode (hWnd=0x8003a) returned 1 [0201.491] GetMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5de2e0) returned 1 [0201.491] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x84, wParam=0x0, lParam=0x1c10130) returned 0x1 [0201.492] GetDlgItem (hDlg=0x901f6, nIDDlgItem=0) returned 0x0 [0201.492] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x210, wParam=0x201, lParam=0x15900df) returned 0x0 [0201.492] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x21, wParam=0x901f6, lParam=0x2010001) returned 0x1 [0201.492] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x21, wParam=0x901f6, lParam=0x2010001) returned 0x1 [0201.492] SetCursor (hCursor=0x10003) returned 0x10003 [0201.492] TranslateMessage (lpMsg=0x5de2f0) returned 0 [0201.492] DispatchMessageW (lpMsg=0x5de2f0) returned 0x0 [0201.493] GetKeyState (nVirtKey=1) returned -127 [0201.493] GetKeyState (nVirtKey=2) returned 0 [0201.493] GetKeyState (nVirtKey=4) returned 0 [0201.493] GetKeyState (nVirtKey=5) returned 0 [0201.493] GetKeyState (nVirtKey=6) returned 0 [0201.495] IsWindowVisible (hWnd=0x8003a) returned 1 [0201.495] IsWindowEnabled (hWnd=0x8003a) returned 1 [0201.495] SetFocus (hWnd=0x8003a) returned 0x50208 [0201.497] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x8, wParam=0x8003a, lParam=0x0) returned 0x0 [0201.497] SendMessageW (hWnd=0x50208, Msg=0x2111, wParam=0x2000208, lParam=0x50208) returned 0x0 [0201.497] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0201.498] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0201.499] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0201.508] InvalidateRect (hWnd=0x8003a, lpRect=0x0, bErase=0) returned 1 [0201.508] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x7, wParam=0x50208, lParam=0x0) returned 0x0 [0201.509] GetStockObject (i=5) returned 0x1900015 [0201.510] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x45 [0201.510] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0xd, wParam=0x46, lParam=0x8480e0) returned 0x45 [0201.591] GetDlgItem (hDlg=0x901f6, nIDDlgItem=524346) returned 0x8003a [0201.591] SendMessageW (hWnd=0x8003a, Msg=0x202b, wParam=0x8003a, lParam=0x5dcdc0) returned 0x0 [0201.591] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x202b, wParam=0x8003a, lParam=0x5dcdc0) returned 0x0 [0201.592] InvalidateRect (hWnd=0x8003a, lpRect=0x0, bErase=0) returned 1 [0201.592] GetFocus () returned 0x8003a [0201.592] GetFocus () returned 0x8003a [0201.592] GetFocus () returned 0x8003a [0201.592] GetKeyState (nVirtKey=1) returned -127 [0201.592] GetKeyState (nVirtKey=2) returned 0 [0201.592] GetKeyState (nVirtKey=4) returned 0 [0201.592] GetKeyState (nVirtKey=5) returned 0 [0201.592] GetKeyState (nVirtKey=6) returned 0 [0201.593] GetCapture () returned 0x0 [0202.230] SetCapture (hWnd=0x8003a) returned 0x0 [0202.230] GetKeyState (nVirtKey=1) returned -127 [0202.230] GetKeyState (nVirtKey=2) returned 0 [0202.230] GetKeyState (nVirtKey=4) returned 0 [0202.230] GetKeyState (nVirtKey=5) returned 0 [0202.230] GetKeyState (nVirtKey=6) returned 0 [0202.231] NotifyWinEvent (event=0x800a, hwnd=0x8003a, idObject=-4, idChild=0) [0202.232] InvalidateRect (hWnd=0x8003a, lpRect=0x5dd940, bErase=0) returned 1 [0202.233] PeekMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5de2e0) returned 1 [0202.233] IsWindowUnicode (hWnd=0x8003a) returned 1 [0202.233] GetMessageW (in: lpMsg=0x5de2e0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5de2e0) returned 1 [0202.233] TranslateMessage (lpMsg=0x5de2f0) returned 0 [0202.233] DispatchMessageW (lpMsg=0x5de2f0) returned 0x1 [0202.234] MapWindowPoints (in: hWndFrom=0x8003a, hWndTo=0x0, lpPoints=0x275b3d0, cPoints=0x1 | out: lpPoints=0x275b3d0) returned 28246109 [0202.238] NotifyWinEvent (event=0x800a, hwnd=0x8003a, idObject=-4, idChild=0) [0202.238] InvalidateRect (hWnd=0x8003a, lpRect=0x5dd890, bErase=0) returned 1 [0202.239] UpdateWindow (hWnd=0x8003a) returned 1 [0202.241] BeginPaint (in: hWnd=0x8003a, lpPaint=0x5dcea8 | out: lpPaint=0x5dcea8) returned 0xa0100d0 [0202.241] GdipCreateHalftonePalette () returned 0x370806b1 [0202.242] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0202.266] CreateCompatibleDC (hdc=0xa0100d0) returned 0x4d0106ab [0202.267] GetObjectType (h=0xa0100d0) returned 0x3 [0202.267] CreateCompatibleBitmap (hdc=0xa0100d0, cx=1, cy=1) returned 0xffffffff8d050727 [0202.268] GetDIBits (in: hdc=0xa0100d0, hbm=0xffffffff8d050727, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x5dc538, usage=0x0 | out: lpvBits=0x0, lpbmi=0x5dc538) returned 1 [0202.268] GetDIBits (in: hdc=0xa0100d0, hbm=0xffffffff8d050727, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x5dc538, usage=0x0 | out: lpvBits=0x0, lpbmi=0x5dc538) returned 1 [0202.269] DeleteObject (ho=0xffffffff8d050727) returned 1 [0202.269] CreateDIBSection (in: hdc=0xa0100d0, lpbmi=0x5dc710, usage=0x0, ppvBits=0x5dc708, hSection=0x0, offset=0x0 | out: ppvBits=0x5dc708) returned 0x2f0506c1 [0202.270] SelectObject (hdc=0x4d0106ab, h=0x2f0506c1) returned 0x185000f [0202.270] GdipCreateFromHDC (hdc=0x4d0106ab, graphics=0x5dcc20) returned 0x0 [0202.273] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0202.274] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=637, height=37, combineMode=0x0) returned 0x0 [0202.276] GdipCreateMatrix (matrix=0x5dcde0) returned 0x0 [0202.277] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0202.277] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dce40) returned 0x0 [0202.278] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e810 [0202.279] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89e810) returned 0x0 [0202.279] LocalFree (hMem=0x89e810) returned 0x0 [0202.281] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.281] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0202.283] GdipCreateRegion (region=0x5dcde0) returned 0x0 [0202.305] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0202.334] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dce10) returned 0x0 [0202.334] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dcee0) returned 0x0 [0202.336] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffdb40dbd) returned 0x0 [0202.377] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.378] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0202.569] SystemParametersInfoW (in: uiAction=0x42, uiParam=0x10, pvParam=0x5dca70, fWinIni=0x0 | out: pvParam=0x5dca70) returned 1 [0202.569] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc2d0) returned 0x0 [0202.570] GetCurrentObject (hdc=0x4d0106ab, type=0x1) returned 0x1b00017 [0202.570] GetCurrentObject (hdc=0x4d0106ab, type=0x2) returned 0x1900010 [0202.570] GetCurrentObject (hdc=0x4d0106ab, type=0x7) returned 0x2f0506c1 [0202.570] GetCurrentObject (hdc=0x4d0106ab, type=0x6) returned 0x18a0048 [0202.570] SaveDC (hdc=0x4d0106ab) returned 1 [0202.570] GetNearestColor (hdc=0x4d0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0202.570] GetNearestColor (hdc=0x4d0106ab, color=0xa0a0a0) returned 0xa0a0a0 [0202.570] GetNearestColor (hdc=0x4d0106ab, color=0x696969) returned 0x696969 [0202.570] GetNearestColor (hdc=0x4d0106ab, color=0xa0a0a0) returned 0xa0a0a0 [0202.570] GetNearestColor (hdc=0x4d0106ab, color=0x0) returned 0x0 [0202.570] GetNearestColor (hdc=0x4d0106ab, color=0xffffff) returned 0xffffff [0202.571] GetNearestColor (hdc=0x4d0106ab, color=0xe5e5e5) returned 0xe5e5e5 [0202.571] GetNearestColor (hdc=0x4d0106ab, color=0xd8d8d8) returned 0xd8d8d8 [0202.571] GetNearestColor (hdc=0x4d0106ab, color=0x0) returned 0x0 [0202.571] RestoreDC (hdc=0x4d0106ab, nSavedDC=-1) returned 1 [0202.572] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.573] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4d0106ab) returned 0x0 [0202.575] IsAppThemed () returned 0x1 [0202.576] GetThemeAppProperties () returned 0x3 [0202.576] GetThemeAppProperties () returned 0x3 [0202.577] OpenThemeData () returned 0x20002 [0202.601] IsAppThemed () returned 0x1 [0202.601] GetThemeAppProperties () returned 0x3 [0202.601] GetThemeAppProperties () returned 0x3 [0202.668] DrawTextExW (in: hdc=0x42010685, lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", cchText=69, lprc=0x5dc510, format=0x102415, lpdtp=0x275d6d8 | out: lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", lprc=0x5dc510) returned 13 [0202.672] IsAppThemed () returned 0x1 [0202.672] GetThemeAppProperties () returned 0x3 [0202.672] GetThemeAppProperties () returned 0x3 [0202.672] IsAppThemed () returned 0x1 [0202.672] GetThemeAppProperties () returned 0x3 [0202.672] GetThemeAppProperties () returned 0x3 [0202.696] IsAppThemed () returned 0x1 [0202.696] GetThemeAppProperties () returned 0x3 [0202.696] GetThemeAppProperties () returned 0x3 [0202.722] IsAppThemed () returned 0x1 [0202.722] GetThemeAppProperties () returned 0x3 [0202.722] GetThemeAppProperties () returned 0x3 [0202.723] IsThemePartDefined () returned 0x1 [0202.723] IsAppThemed () returned 0x1 [0202.723] GetThemeAppProperties () returned 0x3 [0202.723] GetThemeAppProperties () returned 0x3 [0202.724] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0202.724] IsAppThemed () returned 0x1 [0202.724] GetThemeAppProperties () returned 0x3 [0202.724] GetThemeAppProperties () returned 0x3 [0202.724] IsAppThemed () returned 0x1 [0202.724] GetThemeAppProperties () returned 0x3 [0202.724] GetThemeAppProperties () returned 0x3 [0202.724] IsThemePartDefined () returned 0x1 [0202.727] GdipCreateRegion (region=0x5dc5f0) returned 0x0 [0202.727] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0202.727] GdipCreateMatrix (matrix=0x5dc5f0) returned 0x0 [0202.727] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3217f0) returned 0x0 [0202.727] GdipIsMatrixIdentity (matrix=0x1c3217f0, result=0x5dc650) returned 0x0 [0202.727] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f710 [0202.727] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89f710) returned 0x0 [0202.727] LocalFree (hMem=0x89f710) returned 0x0 [0202.769] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef90 [0202.769] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89ef90) returned 0x0 [0202.769] LocalFree (hMem=0x89ef90) returned 0x0 [0202.769] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.769] GdipDeleteMatrix (matrix=0x1c3217f0) returned 0x0 [0202.769] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc6a0) returned 0x0 [0202.769] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc660) returned 0x0 [0202.771] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dc660) returned 0x0 [0202.820] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.820] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0202.820] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc6d0) returned 0x0 [0202.820] GetCurrentObject (hdc=0x4d0106ab, type=0x1) returned 0x1b00017 [0202.820] GetCurrentObject (hdc=0x4d0106ab, type=0x2) returned 0x1900010 [0202.820] GetCurrentObject (hdc=0x4d0106ab, type=0x7) returned 0x2f0506c1 [0202.820] GetCurrentObject (hdc=0x4d0106ab, type=0x6) returned 0x18a0048 [0202.821] SaveDC (hdc=0x4d0106ab) returned 1 [0202.823] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4904054e [0202.824] GetClipRgn (hdc=0x4d0106ab, hrgn=0x4904054e) returned 0 [0202.825] SelectClipRgn (hdc=0x4d0106ab, hrgn=0x57040572) returned 2 [0202.825] DeleteObject (ho=0x4904054e) returned 1 [0202.825] DeleteObject (ho=0x57040572) returned 1 [0202.826] OffsetViewportOrgEx (in: hdc=0x4d0106ab, x=0, y=0, lppt=0x275e148 | out: lppt=0x275e148) returned 1 [0202.827] DrawThemeParentBackground () returned 0x0 [0202.827] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dc110 | out: lpwndpl=0x5dc110) returned 1 [0202.827] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dbf90 | out: lpRect=0x5dbf90) returned 1 [0202.827] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0202.827] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0202.827] GetSystemMetrics (nIndex=42) returned 0 [0202.827] CoTaskMemAlloc (cb=0x22) returned 0x89c440 [0202.827] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c440, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0202.827] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c440) returned 0xe [0202.827] CoTaskMemFree (pv=0x89c440) [0202.827] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dbd40 | out: lpRect=0x5dbd40) returned 1 [0202.828] GetCurrentObject (hdc=0x4d0106ab, type=0x1) returned 0x1b00017 [0202.828] GetCurrentObject (hdc=0x4d0106ab, type=0x2) returned 0x1900010 [0202.828] GetCurrentObject (hdc=0x4d0106ab, type=0x7) returned 0x2f0506c1 [0202.828] GetCurrentObject (hdc=0x4d0106ab, type=0x6) returned 0x18a0048 [0202.828] SaveDC (hdc=0x4d0106ab) returned 2 [0202.828] GetNearestColor (hdc=0x4d0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0202.828] CreateSolidBrush (color=0xf0f0f0) returned 0x2e100686 [0202.828] FillRect (hDC=0x4d0106ab, lprc=0x5db870, hbr=0x2e100686) returned 1 [0202.829] DeleteObject (ho=0x2e100686) returned 1 [0202.829] RestoreDC (hdc=0x4d0106ab, nSavedDC=-1) returned 1 [0202.830] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0202.830] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0202.830] GetSystemMetrics (nIndex=42) returned 0 [0202.830] CoTaskMemAlloc (cb=0x22) returned 0x89cad0 [0202.830] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89cad0, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0202.830] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89cad0) returned 0xe [0202.830] CoTaskMemFree (pv=0x89cad0) [0202.830] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dbc40 | out: lpRect=0x5dbc40) returned 1 [0202.830] GetCurrentObject (hdc=0x4d0106ab, type=0x1) returned 0x1b00017 [0202.830] GetCurrentObject (hdc=0x4d0106ab, type=0x2) returned 0x1900010 [0202.830] GetCurrentObject (hdc=0x4d0106ab, type=0x7) returned 0x2f0506c1 [0202.830] GetCurrentObject (hdc=0x4d0106ab, type=0x6) returned 0x18a0048 [0202.830] SaveDC (hdc=0x4d0106ab) returned 2 [0202.831] GetNearestColor (hdc=0x4d0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0202.831] CreateSolidBrush (color=0xf0f0f0) returned 0x2f100686 [0202.831] FillRect (hDC=0x4d0106ab, lprc=0x5db770, hbr=0x2f100686) returned 1 [0202.831] DeleteObject (ho=0x2f100686) returned 1 [0202.831] RestoreDC (hdc=0x4d0106ab, nSavedDC=-1) returned 1 [0202.831] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0202.831] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0202.831] GetSystemMetrics (nIndex=42) returned 0 [0202.831] CoTaskMemAlloc (cb=0x22) returned 0x89c380 [0202.831] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c380, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0202.831] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c380) returned 0xe [0202.831] CoTaskMemFree (pv=0x89c380) [0202.832] RestoreDC (hdc=0x4d0106ab, nSavedDC=-1) returned 1 [0202.832] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.832] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4d0106ab) returned 0x0 [0202.832] IsAppThemed () returned 0x1 [0202.832] GetThemeAppProperties () returned 0x3 [0202.832] GetThemeAppProperties () returned 0x3 [0202.832] IsAppThemed () returned 0x1 [0202.832] GetThemeAppProperties () returned 0x3 [0202.832] GetThemeAppProperties () returned 0x3 [0202.832] IsThemePartDefined () returned 0x1 [0202.833] GdipCreateRegion (region=0x5dc4d0) returned 0x0 [0202.833] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0202.833] GdipCreateMatrix (matrix=0x5dc4d0) returned 0x0 [0202.833] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0202.833] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dc530) returned 0x0 [0202.833] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed10 [0202.833] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89ed10) returned 0x0 [0202.833] LocalFree (hMem=0x89ed10) returned 0x0 [0202.833] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f650 [0202.833] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89f650) returned 0x0 [0202.833] LocalFree (hMem=0x89f650) returned 0x0 [0202.833] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.834] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0202.834] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0202.834] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc540) returned 0x0 [0202.834] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dc540) returned 0x0 [0202.834] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.834] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0202.834] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc5b0) returned 0x0 [0202.834] GetCurrentObject (hdc=0x4d0106ab, type=0x1) returned 0x1b00017 [0202.834] GetCurrentObject (hdc=0x4d0106ab, type=0x2) returned 0x1900010 [0202.834] GetCurrentObject (hdc=0x4d0106ab, type=0x7) returned 0x2f0506c1 [0202.834] GetCurrentObject (hdc=0x4d0106ab, type=0x6) returned 0x18a0048 [0202.834] SaveDC (hdc=0x4d0106ab) returned 1 [0202.834] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x58040572 [0202.834] GetClipRgn (hdc=0x4d0106ab, hrgn=0x58040572) returned 0 [0202.834] SelectClipRgn (hdc=0x4d0106ab, hrgn=0x4b04054e) returned 2 [0202.834] DeleteObject (ho=0x58040572) returned 1 [0202.834] DeleteObject (ho=0x4b04054e) returned 1 [0202.834] OffsetViewportOrgEx (in: hdc=0x4d0106ab, x=0, y=0, lppt=0x275ee48 | out: lppt=0x275ee48) returned 1 [0202.834] IsAppThemed () returned 0x1 [0202.835] GetThemeAppProperties () returned 0x3 [0202.835] GetThemeAppProperties () returned 0x3 [0202.835] DrawThemeBackground () returned 0x0 [0202.836] RestoreDC (hdc=0x4d0106ab, nSavedDC=-1) returned 1 [0202.836] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.836] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4d0106ab) returned 0x0 [0202.836] GdipCreateRegion (region=0x5dc4a0) returned 0x0 [0202.836] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0202.836] GdipCreateMatrix (matrix=0x5dc4a0) returned 0x0 [0202.836] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3217f0) returned 0x0 [0202.836] GdipIsMatrixIdentity (matrix=0x1c3217f0, result=0x5dc500) returned 0x0 [0202.836] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f310 [0202.836] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89f310) returned 0x0 [0202.836] LocalFree (hMem=0x89f310) returned 0x0 [0202.836] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e7d0 [0202.836] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89e7d0) returned 0x0 [0202.836] LocalFree (hMem=0x89e7d0) returned 0x0 [0202.836] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.836] GdipDeleteMatrix (matrix=0x1c3217f0) returned 0x0 [0202.837] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc550) returned 0x0 [0202.837] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc510) returned 0x0 [0202.837] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dc510) returned 0x0 [0202.837] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.837] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0202.837] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc580) returned 0x0 [0202.837] GetCurrentObject (hdc=0x4d0106ab, type=0x1) returned 0x1b00017 [0202.837] GetCurrentObject (hdc=0x4d0106ab, type=0x2) returned 0x1900010 [0202.837] GetCurrentObject (hdc=0x4d0106ab, type=0x7) returned 0x2f0506c1 [0202.837] GetCurrentObject (hdc=0x4d0106ab, type=0x6) returned 0x18a0048 [0202.837] SaveDC (hdc=0x4d0106ab) returned 1 [0202.837] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c04054e [0202.837] GetClipRgn (hdc=0x4d0106ab, hrgn=0x4c04054e) returned 0 [0202.837] SelectClipRgn (hdc=0x4d0106ab, hrgn=0x59040572) returned 2 [0202.837] DeleteObject (ho=0x4c04054e) returned 1 [0202.837] DeleteObject (ho=0x59040572) returned 1 [0202.837] OffsetViewportOrgEx (in: hdc=0x4d0106ab, x=0, y=0, lppt=0x275f348 | out: lppt=0x275f348) returned 1 [0202.837] IsAppThemed () returned 0x1 [0202.837] GetThemeAppProperties () returned 0x3 [0202.838] GetThemeAppProperties () returned 0x3 [0202.838] GetThemeBackgroundContentRect () returned 0x0 [0202.838] RestoreDC (hdc=0x4d0106ab, nSavedDC=-1) returned 1 [0202.838] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.838] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4d0106ab) returned 0x0 [0202.839] IsAppThemed () returned 0x1 [0202.839] GetThemeAppProperties () returned 0x3 [0202.839] GetThemeAppProperties () returned 0x3 [0202.841] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dc670) returned 0x0 [0202.841] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc650) returned 0x0 [0202.841] GetCurrentObject (hdc=0x4d0106ab, type=0x1) returned 0x1b00017 [0202.841] GetCurrentObject (hdc=0x4d0106ab, type=0x2) returned 0x1900010 [0202.842] GetCurrentObject (hdc=0x4d0106ab, type=0x7) returned 0x2f0506c1 [0202.842] GetCurrentObject (hdc=0x4d0106ab, type=0x6) returned 0x18a0048 [0202.842] SaveDC (hdc=0x4d0106ab) returned 1 [0202.845] GetTextAlign (hdc=0x4d0106ab) returned 0x0 [0202.847] GetTextColor (hdc=0x4d0106ab) returned 0x0 [0202.847] GetCurrentObject (hdc=0x4d0106ab, type=0x6) returned 0x18a0048 [0202.847] GetObjectW (in: h=0x18a0048, c=92, pv=0x5dc0c0 | out: pv=0x5dc0c0) returned 92 [0202.847] SelectObject (hdc=0x4d0106ab, h=0x290a0573) returned 0x18a0048 [0202.895] GetBkMode (hdc=0x4d0106ab) returned 2 [0202.896] SetBkMode (hdc=0x4d0106ab, mode=1) returned 2 [0202.896] DrawTextExW (in: hdc=0x4d0106ab, lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", cchText=69, lprc=0x5dc150, format=0x102415, lpdtp=0x275f8a0 | out: lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", lprc=0x5dc150) returned 13 [0202.897] DrawTextExW (in: hdc=0x4d0106ab, lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", cchText=69, lprc=0x5dc200, format=0x102015, lpdtp=0x275f8a0 | out: lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", lprc=0x5dc200) returned 13 [0202.900] RestoreDC (hdc=0x4d0106ab, nSavedDC=-1) returned 1 [0202.900] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.900] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4d0106ab) returned 0x0 [0202.900] GetFocus () returned 0x8003a [0202.900] IsAppThemed () returned 0x1 [0202.900] GetThemeAppProperties () returned 0x3 [0202.900] GetThemeAppProperties () returned 0x3 [0202.900] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dcdb0) returned 0x0 [0202.902] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=637, cy=37, hdcSrc=0x4d0106ab, x1=0, y1=0, rop=0xcc0020) returned 1 [0202.902] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.902] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4d0106ab) returned 0x0 [0202.902] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0202.902] SelectObject (hdc=0x4d0106ab, h=0x185000f) returned 0x2f0506c1 [0202.903] DeleteDC (hdc=0x4d0106ab) returned 1 [0202.903] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0202.903] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0202.903] DeleteObject (ho=0x2f0506c1) returned 1 [0202.904] EndPaint (hWnd=0x8003a, lpPaint=0x5dceb8) returned 1 [0202.904] MapWindowPoints (in: hWndFrom=0x8003a, hWndTo=0x0, lpPoints=0x275fa08, cPoints=0x1 | out: lpPoints=0x275fa08) returned 28246109 [0202.905] WindowFromPoint (Point=0x1c100000130) returned 0x8003a [0202.905] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x84, wParam=0x0, lParam=0x1c10130) returned 0x1 [0202.906] NotifyWinEvent (event=0x800a, hwnd=0x8003a, idObject=-4, idChild=0) [0202.906] NotifyWinEvent (event=0x800c, hwnd=0x8003a, idObject=-4, idChild=0) [0203.086] AdjustWindowRectEx (in: lpRect=0x5dd680, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x5dd680) returned 1 [0203.146] AdjustWindowRectEx (in: lpRect=0x5dd580, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x5dd580) returned 1 [0203.146] GetDC (hWnd=0x0) returned 0x10105e0 [0203.146] GdipCreateFromHDC (hdc=0x10105e0, graphics=0x5dd340) returned 0x0 [0203.146] GdipGetFontHeight (font=0x235ebe0, graphics=0x1c3267f0, height=0x5dd310) returned 0x0 [0203.146] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.146] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0203.147] ReleaseDC (hWnd=0x0, hDC=0x10105e0) returned 1 [0203.147] GetSystemMetrics (nIndex=5) returned 1 [0203.147] GetSystemMetrics (nIndex=6) returned 1 [0203.147] AdjustWindowRectEx (in: lpRect=0x5dd5c0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd5c0) returned 1 [0203.147] AdjustWindowRectEx (in: lpRect=0x5dd580, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd580) returned 1 [0203.147] AdjustWindowRectEx (in: lpRect=0x5dd500, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x5dd500) returned 1 [0203.147] AdjustWindowRectEx (in: lpRect=0x5dd500, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x5dd500) returned 1 [0203.147] AdjustWindowRectEx (in: lpRect=0x5dd480, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd480) returned 1 [0203.147] AdjustWindowRectEx (in: lpRect=0x5dd480, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd480) returned 1 [0203.147] AdjustWindowRectEx (in: lpRect=0x5dd500, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd500) returned 1 [0203.147] AdjustWindowRectEx (in: lpRect=0x5dd500, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd500) returned 1 [0203.147] AdjustWindowRectEx (in: lpRect=0x5dd570, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5dd570) returned 1 [0203.147] GetSystemMetrics (nIndex=59) returned 1456 [0203.147] GetSystemMetrics (nIndex=60) returned 916 [0203.148] GetSystemMetrics (nIndex=34) returned 136 [0203.148] GetSystemMetrics (nIndex=35) returned 39 [0203.148] AdjustWindowRectEx (in: lpRect=0x5dd1f0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5dd1f0) returned 1 [0203.149] GetCurrentThreadId () returned 0xe28 [0203.149] GetCurrentThreadId () returned 0xe28 [0203.149] GetCurrentThreadId () returned 0xe28 [0203.149] GetCurrentThreadId () returned 0xe28 [0203.149] AdjustWindowRectEx (in: lpRect=0x5dd220, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd220) returned 1 [0203.149] DrawTextExW (in: hdc=0x42010685, lpchText="Put your decryption key here:", cchText=29, lprc=0x5dd0b0, format=0x2400, lpdtp=0x2760f30 | out: lpchText="Put your decryption key here:", lprc=0x5dd0b0) returned 13 [0203.150] GetCurrentThreadId () returned 0xe28 [0203.150] GetCurrentThreadId () returned 0xe28 [0203.150] AdjustWindowRectEx (in: lpRect=0x5dd310, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5dd310) returned 1 [0203.150] AdjustWindowRectEx (in: lpRect=0x5dd4e0, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5dd4e0) returned 1 [0203.150] GetSystemMetrics (nIndex=59) returned 1456 [0203.150] GetSystemMetrics (nIndex=60) returned 916 [0203.150] GetSystemMetrics (nIndex=34) returned 136 [0203.150] GetSystemMetrics (nIndex=35) returned 39 [0203.150] AdjustWindowRectEx (in: lpRect=0x5dcf90, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5dcf90) returned 1 [0203.150] AdjustWindowRectEx (in: lpRect=0x5dd160, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x5dd160) returned 1 [0203.151] CreateCompatibleDC (hdc=0x0) returned 0xffffffff8f010727 [0203.151] SelectObject (hdc=0xffffffff8f010727, h=0x580a0753) returned 0x18a0048 [0203.152] GetTextMetricsW (in: hdc=0xffffffff8f010727, lptm=0x5dd2c0 | out: lptm=0x5dd2c0) returned 1 [0203.152] GetTextExtentPoint32W (in: hdc=0xffffffff8f010727, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2761600 | out: psizl=0x2761600) returned 1 [0203.152] SelectObject (hdc=0xffffffff8f010727, h=0x18a0048) returned 0x580a0753 [0203.152] DeleteDC (hdc=0xffffffff8f010727) returned 1 [0203.152] AdjustWindowRectEx (in: lpRect=0x5dd100, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x5dd100) returned 1 [0203.152] AdjustWindowRectEx (in: lpRect=0x5dd2d0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x5dd2d0) returned 1 [0203.152] AdjustWindowRectEx (in: lpRect=0x5dcf90, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x5dcf90) returned 1 [0203.152] AdjustWindowRectEx (in: lpRect=0x5dd160, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x5dd160) returned 1 [0203.152] GetSystemMetrics (nIndex=34) returned 136 [0203.152] GetSystemMetrics (nIndex=35) returned 39 [0203.152] AdjustWindowRectEx (in: lpRect=0x5dd270, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd270) returned 1 [0203.152] AdjustWindowRectEx (in: lpRect=0x5dd190, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd190) returned 1 [0203.152] AdjustWindowRectEx (in: lpRect=0x5dd270, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd270) returned 1 [0203.152] AdjustWindowRectEx (in: lpRect=0x5dd190, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dd190) returned 1 [0203.152] AdjustWindowRectEx (in: lpRect=0x5dcf30, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dcf30) returned 1 [0203.152] AdjustWindowRectEx (in: lpRect=0x5dd270, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x5dd270) returned 1 [0203.152] AdjustWindowRectEx (in: lpRect=0x5dd190, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x5dd190) returned 1 [0203.154] GetProcessWindowStation () returned 0xc8 [0203.155] GetUserObjectInformationA (in: hObj=0xc8, nIndex=1, pvInfo=0x27617d8, nLength=0xc, lpnLengthNeeded=0x5dd550 | out: pvInfo=0x27617d8, lpnLengthNeeded=0x5dd550) returned 1 [0203.155] GetCapture () returned 0x8003a [0203.155] SendMessageW (hWnd=0x8003a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0203.155] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0203.156] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0203.483] ReleaseCapture () returned 1 [0203.483] GetActiveWindow () returned 0x901f6 [0203.483] GetCurrentActCtx (in: lphActCtx=0x5dd380 | out: lphActCtx=0x5dd380*=0x811d28) returned 1 [0203.483] AdjustWindowRectEx (in: lpRect=0x5dd230, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x5dd230) returned 1 [0203.483] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0203.483] CreateWindowExW (dwExStyle=0x10001, lpClassName="WindowsForms10.Window.8.app.0.378734a", lpWindowName="Key Validator", dwStyle=0x2c80000, X=-2147483648, Y=-2147483648, nWidth=421, nHeight=279, hWndParent=0x0, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x20160 [0203.484] SetWindowLongPtrW (hWnd=0x20160, nIndex=-4, dwNewLong=0x7ffaf7aa3240) returned 0x21609fc [0203.484] GetWindowLongPtrW (hWnd=0x20160, nIndex=-4) returned 0x7ffaf7aa3240 [0203.484] SetWindowLongPtrW (hWnd=0x20160, nIndex=-4, dwNewLong=0x2163d3c) returned 0x7ffaf7aa3240 [0203.484] GetWindowLongPtrW (hWnd=0x20160, nIndex=-4) returned 0x2163d3c [0203.484] GetWindowLongPtrW (hWnd=0x20160, nIndex=-16) returned 0x6c80000 [0203.484] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x81, wParam=0x0, lParam=0x5dc9d0) returned 0x1 [0203.485] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x83, wParam=0x0, lParam=0x5dca70) returned 0x0 [0203.485] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1, wParam=0x0, lParam=0x5dc9a0) returned 0x0 [0203.485] GetClientRect (in: hWnd=0x20160, lpRect=0x5dc180 | out: lpRect=0x5dc180) returned 1 [0203.485] GetWindowRect (in: hWnd=0x20160, lpRect=0x5dc180 | out: lpRect=0x5dc180) returned 1 [0203.486] SetWindowTextW (hWnd=0x20160, lpString="Key Validator") returned 1 [0203.486] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xc, wParam=0x0, lParam=0x2760130) returned 0x1 [0203.486] GetStartupInfoW (in: lpStartupInfo=0x2761a78 | out: lpStartupInfo=0x2761a78*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\CIiHmnxMn6Ps\\Desktop\\CryptoNarDecryptor.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0203.487] GetParent (hWnd=0x20160) returned 0x0 [0203.487] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0203.487] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.378734a", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x20224 [0203.488] SetWindowLongPtrW (hWnd=0x20224, nIndex=-4, dwNewLong=0x7ffaf7aa3240) returned 0x21607ec [0203.488] GetWindowLongPtrW (hWnd=0x20224, nIndex=-4) returned 0x7ffaf7aa3240 [0203.488] SetWindowLongPtrW (hWnd=0x20224, nIndex=-4, dwNewLong=0x2163c9c) returned 0x7ffaf7aa3240 [0203.488] GetWindowLongPtrW (hWnd=0x20224, nIndex=-4) returned 0x2163c9c [0203.488] GetWindowLongPtrW (hWnd=0x20224, nIndex=-16) returned 0x4c00000 [0203.488] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x24, wParam=0x0, lParam=0x5dca20) returned 0x0 [0203.488] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x81, wParam=0x0, lParam=0x5dc9a0) returned 0x1 [0203.488] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x83, wParam=0x0, lParam=0x5dca40) returned 0x0 [0203.489] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x1, wParam=0x0, lParam=0x5dc9a0) returned 0x0 [0203.489] SetWindowLongPtrW (hWnd=0x20160, nIndex=-8, dwNewLong=0x20224) returned 0x0 [0203.490] SendMessageW (hWnd=0x20160, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0203.490] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0203.490] SendMessageW (hWnd=0x20160, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0203.490] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0203.490] GetSystemMenu (hWnd=0x20160, bRevert=0) returned 0x900dd [0203.491] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dd240 | out: lpwndpl=0x5dd240) returned 1 [0203.491] EnableMenuItem (hMenu=0x900dd, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0203.491] EnableMenuItem (hMenu=0x900dd, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0203.491] EnableMenuItem (hMenu=0x900dd, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0203.491] EnableMenuItem (hMenu=0x900dd, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0203.491] EnableMenuItem (hMenu=0x900dd, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0203.491] GetClientRect (in: hWnd=0x20160, lpRect=0x5dd360 | out: lpRect=0x5dd360) returned 1 [0203.491] GetClientRect (in: hWnd=0x20160, lpRect=0x5dd240 | out: lpRect=0x5dd240) returned 1 [0203.491] GetWindowRect (in: hWnd=0x20160, lpRect=0x5dd240 | out: lpRect=0x5dd240) returned 1 [0203.491] SetWindowLongPtrW (hWnd=0x20160, nIndex=-8, dwNewLong=0x20224) returned 0x20224 [0203.818] GetSystemMetrics (nIndex=11) returned 32 [0203.818] GetSystemMetrics (nIndex=12) returned 32 [0203.819] CreateIconFromResourceEx (presbits=0x27646a0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xb0079 [0203.820] SendMessageW (hWnd=0x20224, Msg=0x80, wParam=0x1, lParam=0xb0079) returned 0x0 [0203.820] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x80, wParam=0x1, lParam=0xb0079) returned 0x0 [0203.823] GetWindowLongPtrW (hWnd=0x20160, nIndex=-16) returned 0x6c80000 [0203.823] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0203.823] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0203.823] GetSystemMetrics (nIndex=42) returned 0 [0203.823] CoTaskMemAlloc (cb=0x20) returned 0x89c380 [0203.823] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c380, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0203.823] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c380) returned 0xd [0203.824] CoTaskMemFree (pv=0x89c380) [0203.824] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0203.824] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0203.824] GetSystemMetrics (nIndex=42) returned 0 [0203.824] CoTaskMemAlloc (cb=0x20) returned 0x89cc80 [0203.824] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cc80, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0203.824] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cc80) returned 0xd [0203.824] CoTaskMemFree (pv=0x89cc80) [0203.824] GetWindowLongPtrW (hWnd=0x20160, nIndex=-16) returned 0x6c80000 [0203.824] GetWindowLongPtrW (hWnd=0x20160, nIndex=-20) returned 0x10101 [0203.824] SetWindowLongPtrW (hWnd=0x20160, nIndex=-16, dwNewLong=0x2c80000) returned 0x6c80000 [0203.824] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x5dd270) returned 0x0 [0203.824] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x5dd270) returned 0x0 [0203.825] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0203.825] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0203.825] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0203.825] SetWindowLongPtrW (hWnd=0x20160, nIndex=-20, dwNewLong=0x10001) returned 0x10101 [0203.825] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x5dd270) returned 0x0 [0203.825] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x5dd270) returned 0x0 [0203.826] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0203.826] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0203.826] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0203.827] SetWindowPos (hWnd=0x20160, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0203.827] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dd320) returned 0x0 [0203.827] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x83, wParam=0x1, lParam=0x5dd2f0) returned 0x0 [0203.827] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dcd50 | out: lpwndpl=0x5dcd50) returned 1 [0203.827] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x47, wParam=0x0, lParam=0x5dd320) returned 0x0 [0203.827] GetClientRect (in: hWnd=0x20160, lpRect=0x5dcaf0 | out: lpRect=0x5dcaf0) returned 1 [0203.827] GetWindowRect (in: hWnd=0x20160, lpRect=0x5dcaf0 | out: lpRect=0x5dcaf0) returned 1 [0203.828] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0203.828] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0203.828] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0203.828] RedrawWindow (hWnd=0x20160, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0203.829] GetSystemMenu (hWnd=0x20160, bRevert=0) returned 0x900dd [0203.829] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dd240 | out: lpwndpl=0x5dd240) returned 1 [0203.829] EnableMenuItem (hMenu=0x900dd, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0203.829] EnableMenuItem (hMenu=0x900dd, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0203.829] EnableMenuItem (hMenu=0x900dd, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0203.829] EnableMenuItem (hMenu=0x900dd, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0203.829] EnableMenuItem (hMenu=0x900dd, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0203.829] GetWindowLongPtrW (hWnd=0x901f6, nIndex=-8) returned 0x20232 [0203.829] GetWindowLongPtrW (hWnd=0x20160, nIndex=-8) returned 0x20224 [0203.829] SetWindowLongPtrW (hWnd=0x20160, nIndex=-8, dwNewLong=0x901f6) returned 0x20224 [0203.830] GetCurrentActCtx (in: lphActCtx=0x5dd570 | out: lphActCtx=0x5dd570*=0x811d28) returned 1 [0203.830] GetProcessWindowStation () returned 0xc8 [0203.835] GetCurrentThreadId () returned 0xe28 [0203.836] EnumThreadWindows (dwThreadId=0xe28, lpfn=0x216414c, lParam=0x0) returned 1 [0203.837] IsWindowVisible (hWnd=0x20224) returned 0 [0203.837] IsWindowVisible (hWnd=0x20160) returned 0 [0203.837] IsWindowVisible (hWnd=0x901f6) returned 1 [0203.837] IsWindowEnabled (hWnd=0x901f6) returned 1 [0203.837] IsWindowVisible (hWnd=0x20232) returned 0 [0203.837] IsWindowVisible (hWnd=0x50020) returned 0 [0203.837] IsWindowVisible (hWnd=0x20230) returned 0 [0203.837] IsWindowVisible (hWnd=0x60152) returned 0 [0203.837] GetActiveWindow () returned 0x901f6 [0203.838] GetFocus () returned 0x8003a [0203.839] IsWindow (hWnd=0x901f6) returned 1 [0203.839] EnableWindow (hWnd=0x901f6, bEnable=0) returned 0 [0203.839] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0203.840] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0203.840] GetWindowLongPtrW (hWnd=0x20160, nIndex=-8) returned 0x901f6 [0203.841] GetWindowThreadProcessId (in: hWnd=0x901f6, lpdwProcessId=0x5dd260 | out: lpdwProcessId=0x5dd260) returned 0xe28 [0203.841] GetCurrentThreadId () returned 0xe28 [0203.841] GetWindowLongPtrW (hWnd=0x20160, nIndex=-8) returned 0x901f6 [0203.841] IsWindowEnabled (hWnd=0x901f6) returned 0 [0203.841] IsWindowEnabled (hWnd=0x20160) returned 1 [0203.841] ShowWindow (hWnd=0x20160, nCmdShow=5) returned 0 [0203.841] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0203.841] GetCurrentActCtx (in: lphActCtx=0x5dc840 | out: lphActCtx=0x5dc840*=0x811d28) returned 1 [0203.841] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0203.841] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.378734a", lpWindowName="Submit Decryption Key", dwStyle=0x5601000b, X=79, Y=194, nWidth=262, nHeight=36, hWndParent=0x20160, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x2021e [0203.841] SetWindowLongPtrW (hWnd=0x2021e, nIndex=-4, dwNewLong=0x7ffaecc8f3f0) returned 0x216388c [0203.842] GetWindowLongPtrW (hWnd=0x2021e, nIndex=-4) returned 0x7ffaecc8f3f0 [0203.842] SetWindowLongPtrW (hWnd=0x2021e, nIndex=-4, dwNewLong=0x21640ac) returned 0x7ffaecc8f3f0 [0203.842] GetWindowLongPtrW (hWnd=0x2021e, nIndex=-4) returned 0x21640ac [0203.842] GetWindowLongPtrW (hWnd=0x2021e, nIndex=-16) returned 0x4601000b [0203.842] GetWindowLongPtrW (hWnd=0x2021e, nIndex=-12) returned 0x0 [0203.842] SetWindowLongPtrW (hWnd=0x2021e, nIndex=-12, dwNewLong=0x2021e) returned 0x0 [0203.842] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x81, wParam=0x0, lParam=0x5dbe90) returned 0x1 [0203.843] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x83, wParam=0x0, lParam=0x5dbf30) returned 0x0 [0203.843] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x1, wParam=0x0, lParam=0x5dbe50) returned 0x0 [0203.843] SendMessageW (hWnd=0x2021e, Msg=0x2055, wParam=0x2021e, lParam=0x3) returned 0x2 [0203.843] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0203.844] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0203.844] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0203.844] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0203.844] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0203.844] RedrawWindow (hWnd=0x2021e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0203.844] RedrawWindow (hWnd=0x20160, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0203.844] GetWindow (hWnd=0x2021e, uCmd=0x3) returned 0x0 [0203.844] GetClientRect (in: hWnd=0x2021e, lpRect=0x5db5c0 | out: lpRect=0x5db5c0) returned 1 [0203.844] GetWindowRect (in: hWnd=0x2021e, lpRect=0x5db5c0 | out: lpRect=0x5db5c0) returned 1 [0203.844] GetParent (hWnd=0x2021e) returned 0x20160 [0203.844] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20160, lpPoints=0x5db5b0, cPoints=0x2 | out: lpPoints=0x5db5b0) returned -8454251 [0203.845] SetWindowTextW (hWnd=0x2021e, lpString="Submit Decryption Key") returned 1 [0203.845] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xc, wParam=0x0, lParam=0x27600a8) returned 0x1 [0203.845] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x5, wParam=0x0, lParam=0x240106) returned 0x0 [0203.845] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x3, wParam=0x0, lParam=0xc2004f) returned 0x0 [0203.845] GetClientRect (in: hWnd=0x2021e, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0203.845] GetWindowRect (in: hWnd=0x2021e, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0203.845] GetParent (hWnd=0x2021e) returned 0x20160 [0203.846] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20160, lpPoints=0x5db6f0, cPoints=0x2 | out: lpPoints=0x5db6f0) returned -8454251 [0203.846] SendMessageW (hWnd=0x2021e, Msg=0x2210, wParam=0x21e0001, lParam=0x2021e) returned 0x0 [0203.846] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2210, wParam=0x21e0001, lParam=0x2021e) returned 0x0 [0203.846] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0203.846] GetParent (hWnd=0x2021e) returned 0x20160 [0203.846] GetCurrentActCtx (in: lphActCtx=0x5dc840 | out: lphActCtx=0x5dc840*=0x811d28) returned 1 [0203.846] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0203.847] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.378734a", lpWindowName="Put your decryption key here:", dwStyle=0x5600000d, X=9, Y=9, nWidth=145, nHeight=13, hWndParent=0x20160, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x20220 [0203.847] SetWindowLongPtrW (hWnd=0x20220, nIndex=-4, dwNewLong=0x7ffaecc560c0) returned 0x21639cc [0203.847] GetWindowLongPtrW (hWnd=0x20220, nIndex=-4) returned 0x7ffaecc560c0 [0203.848] SetWindowLongPtrW (hWnd=0x20220, nIndex=-4, dwNewLong=0x2163f1c) returned 0x7ffaecc560c0 [0203.848] GetWindowLongPtrW (hWnd=0x20220, nIndex=-4) returned 0x2163f1c [0203.848] GetWindowLongPtrW (hWnd=0x20220, nIndex=-16) returned 0x4600000d [0203.848] GetWindowLongPtrW (hWnd=0x20220, nIndex=-12) returned 0x0 [0203.848] SetWindowLongPtrW (hWnd=0x20220, nIndex=-12, dwNewLong=0x20220) returned 0x0 [0203.848] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x81, wParam=0x0, lParam=0x5dbe90) returned 0x1 [0203.848] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x83, wParam=0x0, lParam=0x5dbf30) returned 0x0 [0203.848] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x1, wParam=0x0, lParam=0x5dbe40) returned 0x0 [0203.849] GetWindow (hWnd=0x20220, uCmd=0x3) returned 0x2021e [0203.849] GetClientRect (in: hWnd=0x20220, lpRect=0x5db5b0 | out: lpRect=0x5db5b0) returned 1 [0203.849] GetWindowRect (in: hWnd=0x20220, lpRect=0x5db5b0 | out: lpRect=0x5db5b0) returned 1 [0203.849] GetParent (hWnd=0x20220) returned 0x20160 [0203.849] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20160, lpPoints=0x5db5a0, cPoints=0x2 | out: lpPoints=0x5db5a0) returned -8454251 [0203.849] SetWindowTextW (hWnd=0x20220, lpString="Put your decryption key here:") returned 1 [0203.850] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xc, wParam=0x0, lParam=0x2760008) returned 0x1 [0203.850] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x5, wParam=0x0, lParam=0xd0091) returned 0x0 [0203.850] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x3, wParam=0x0, lParam=0x90009) returned 0x0 [0203.850] GetClientRect (in: hWnd=0x20220, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0203.850] GetWindowRect (in: hWnd=0x20220, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0203.850] GetParent (hWnd=0x20220) returned 0x20160 [0203.850] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20160, lpPoints=0x5db6f0, cPoints=0x2 | out: lpPoints=0x5db6f0) returned -8454251 [0203.850] SendMessageW (hWnd=0x20220, Msg=0x2210, wParam=0x2200001, lParam=0x20220) returned 0x0 [0203.850] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x2210, wParam=0x2200001, lParam=0x20220) returned 0x0 [0203.850] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0203.850] GetParent (hWnd=0x20220) returned 0x20160 [0203.851] GetCurrentActCtx (in: lphActCtx=0x5dc7f0 | out: lphActCtx=0x5dc7f0*=0x811d28) returned 1 [0203.851] GetModuleHandleW (lpModuleName=0x0) returned 0x420000 [0203.851] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.RichEdit20W.app.0.378734a", lpWindowName=0x0, dwStyle=0x56210044, X=12, Y=29, nWidth=391, nHeight=146, hWndParent=0x20160, hMenu=0x0, hInstance=0x420000, lpParam=0x0) returned 0x2021a [0203.851] SetWindowLongPtrW (hWnd=0x2021a, nIndex=-4, dwNewLong=0x7ffadd2a9920) returned 0x2163b5c [0203.851] GetWindowLongPtrW (hWnd=0x2021a, nIndex=-4) returned 0x7ffadd2a9920 [0203.851] SetWindowLongPtrW (hWnd=0x2021a, nIndex=-4, dwNewLong=0x2163d8c) returned 0x7ffadd2a9920 [0203.851] GetWindowLongPtrW (hWnd=0x2021a, nIndex=-4) returned 0x2163d8c [0203.852] GetWindowLongPtrW (hWnd=0x2021a, nIndex=-16) returned 0x46210044 [0203.852] GetWindowLongPtrW (hWnd=0x2021a, nIndex=-12) returned 0x0 [0203.852] SetWindowLongPtrW (hWnd=0x2021a, nIndex=-12, dwNewLong=0x2021a) returned 0x0 [0203.852] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x81, wParam=0x0, lParam=0x5dbe30) returned 0x1 [0203.852] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x5d9f90) returned 0x0 [0203.853] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x5d9f90) returned 0x0 [0203.853] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x83, wParam=0x0, lParam=0x5dbee0) returned 0x0 [0203.853] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x1, wParam=0x0, lParam=0x5dbe30) returned 0x0 [0203.854] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x46, wParam=0x0, lParam=0x5da880) returned 0x0 [0203.854] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x83, wParam=0x1, lParam=0x5da850) returned 0x0 [0203.854] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x47, wParam=0x0, lParam=0x5da880) returned 0x0 [0203.854] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x5, wParam=0x0, lParam=0x8e0183) returned 0x0 [0203.854] GetClientRect (in: hWnd=0x2021a, lpRect=0x5da010 | out: lpRect=0x5da010) returned 1 [0203.854] GetWindowRect (in: hWnd=0x2021a, lpRect=0x5da010 | out: lpRect=0x5da010) returned 1 [0203.854] GetParent (hWnd=0x2021a) returned 0x20160 [0203.854] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20160, lpPoints=0x5da000, cPoints=0x2 | out: lpPoints=0x5da000) returned -8454251 [0203.854] GetParent (hWnd=0x2021a) returned 0x20160 [0203.857] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x5da9f0) returned 0x0 [0203.857] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x5da9f0) returned 0x1 [0203.860] GetWindow (hWnd=0x2021a, uCmd=0x3) returned 0x20220 [0203.860] GetClientRect (in: hWnd=0x2021a, lpRect=0x5db5d0 | out: lpRect=0x5db5d0) returned 1 [0203.860] GetWindowRect (in: hWnd=0x2021a, lpRect=0x5db5d0 | out: lpRect=0x5db5d0) returned 1 [0203.860] GetParent (hWnd=0x2021a) returned 0x20160 [0203.860] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20160, lpPoints=0x5db5c0, cPoints=0x2 | out: lpPoints=0x5db5c0) returned -8454251 [0203.860] SendMessageW (hWnd=0x2021a, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0203.860] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0203.861] SendMessageW (hWnd=0x2021a, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0203.861] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x445, wParam=0x0, lParam=0x4bf000f) returned 0x0 [0203.861] SendMessageW (hWnd=0x2021a, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0203.861] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x45b, wParam=0x1, lParam=0x0) returned 0x0 [0203.861] SendMessageW (hWnd=0x2021a, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x41 [0203.861] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x44d, wParam=0x4, lParam=0x1) returned 0x41 [0203.861] SendMessageW (hWnd=0x2021a, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0203.861] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x443, wParam=0x0, lParam=0xffffff) returned 0xffffff [0203.861] SendMessageW (hWnd=0x2021a, Msg=0x43a, wParam=0x0, lParam=0x5db3d0) returned 0xf800003f [0203.861] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x43a, wParam=0x0, lParam=0x5db3d0) returned 0xf800003f [0203.861] SendMessageW (hWnd=0x2021a, Msg=0x30, wParam=0x580a0753, lParam=0x0) returned 0x1 [0203.861] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x30, wParam=0x580a0753, lParam=0x0) returned 0x1 [0203.862] SendMessageW (hWnd=0x2021a, Msg=0x204e, wParam=0x2021a, lParam=0x5d9888) returned 0x0 [0203.862] SendMessageW (hWnd=0x2021a, Msg=0x43a, wParam=0x0, lParam=0x5dab10) returned 0xf800003f [0203.862] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x43a, wParam=0x0, lParam=0x5dab10) returned 0xf800003f [0203.863] GetSystemMetrics (nIndex=5) returned 1 [0203.863] GetSystemMetrics (nIndex=6) returned 1 [0203.863] SendMessageW (hWnd=0x2021a, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0203.863] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x435, wParam=0x0, lParam=0x7fffffff) returned 0x0 [0203.863] SendMessageW (hWnd=0x2021a, Msg=0x446, wParam=0x0, lParam=0x208eff20) returned 0x1 [0203.863] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x446, wParam=0x0, lParam=0x208eff20) returned 0x1 [0203.864] DragAcceptFiles (hWnd=0x2021a, fAccept=0) [0203.864] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x5db370) returned 0x0 [0203.864] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x5db370) returned 0x1 [0203.866] SendMessageW (hWnd=0x2021a, Msg=0xc, wParam=0x0, lParam=0x26b1318) returned 0x1 [0203.866] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0xc, wParam=0x0, lParam=0x26b1318) returned 0x1 [0203.866] SendMessageW (hWnd=0x2021a, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0203.866] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0xb9, wParam=0x0, lParam=0x0) returned 0x0 [0203.866] SendMessageW (hWnd=0x2021a, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0203.866] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x479, wParam=0x0, lParam=0x0) returned 0x82 [0203.866] SendMessageW (hWnd=0x2021a, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0203.866] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0xcd, wParam=0x0, lParam=0x0) returned 0x0 [0203.866] SendMessageW (hWnd=0x2021a, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0203.866] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x4e1, wParam=0x0, lParam=0x0) returned 0x1 [0203.867] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x5, wParam=0x0, lParam=0x8e0183) returned 0x0 [0203.867] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x3, wParam=0x0, lParam=0x1f000e) returned 0x0 [0203.867] GetClientRect (in: hWnd=0x2021a, lpRect=0x5db6e0 | out: lpRect=0x5db6e0) returned 1 [0203.867] GetWindowRect (in: hWnd=0x2021a, lpRect=0x5db6e0 | out: lpRect=0x5db6e0) returned 1 [0203.867] GetParent (hWnd=0x2021a) returned 0x20160 [0203.867] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x20160, lpPoints=0x5db6d0, cPoints=0x2 | out: lpPoints=0x5db6d0) returned -8454251 [0203.867] SendMessageW (hWnd=0x2021a, Msg=0x2210, wParam=0x21a0001, lParam=0x2021a) returned 0x0 [0203.867] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x2210, wParam=0x21a0001, lParam=0x2021a) returned 0x0 [0203.867] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0203.867] GetParent (hWnd=0x2021a) returned 0x20160 [0203.867] GetWindowThreadProcessId (in: hWnd=0x20160, lpdwProcessId=0x5dc7d0 | out: lpdwProcessId=0x5dc7d0) returned 0xe28 [0203.867] GetCurrentThreadId () returned 0xe28 [0203.867] PostMessageW (hWnd=0x20160, Msg=0xc174, wParam=0x0, lParam=0x0) returned 1 [0203.868] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0203.868] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0203.868] GetSystemMetrics (nIndex=42) returned 0 [0203.868] CoTaskMemAlloc (cb=0x20) returned 0x89c6b0 [0203.868] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c6b0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0203.868] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c6b0) returned 0xd [0203.868] CoTaskMemFree (pv=0x89c6b0) [0203.868] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dd1d0) returned 0x0 [0203.868] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dd1d0) returned 0x0 [0203.868] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dd1d0) returned 0x0 [0203.878] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x86, wParam=0x0, lParam=0x20160) returned 0x1 [0203.880] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dd1d0) returned 0x0 [0203.880] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dd1d0) returned 0x0 [0203.880] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dd1d0) returned 0x0 [0203.880] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x901f6) returned 0x1 [0203.881] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0203.881] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0203.881] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0203.882] GetFocus () returned 0x8003a [0203.882] IsChild (hWndParent=0x20160, hWnd=0x8003a) returned 0 [0203.883] GetFocus () returned 0x8003a [0203.883] SetFocus (hWnd=0x2021a) returned 0x8003a [0203.883] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x8, wParam=0x2021a, lParam=0x0) returned 0x0 [0203.883] GetCapture () returned 0x0 [0203.884] InvalidateRect (hWnd=0x8003a, lpRect=0x0, bErase=0) returned 1 [0203.884] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0203.884] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0203.885] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0203.885] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0203.885] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0203.886] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0203.886] GetParent (hWnd=0x20160) returned 0x0 [0203.886] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x7, wParam=0x8003a, lParam=0x0) returned 0x0 [0203.886] SendMessageW (hWnd=0x2021a, Msg=0x2111, wParam=0x100021a, lParam=0x2021a) returned 0x0 [0203.888] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.888] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0203.888] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0203.889] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0203.890] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dcc20 | out: lpwndpl=0x5dcc20) returned 1 [0203.890] GetClientRect (in: hWnd=0x20160, lpRect=0x5dcaa0 | out: lpRect=0x5dcaa0) returned 1 [0203.890] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0203.890] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0203.890] GetSystemMetrics (nIndex=42) returned 0 [0203.890] CoTaskMemAlloc (cb=0x20) returned 0x89c620 [0203.890] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c620, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0203.890] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c620) returned 0xd [0203.890] CoTaskMemFree (pv=0x89c620) [0203.891] GetClientRect (in: hWnd=0x20160, lpRect=0x5dc850 | out: lpRect=0x5dc850) returned 1 [0203.891] GetCurrentObject (hdc=0xa0100d0, type=0x1) returned 0x1b00017 [0203.891] GetCurrentObject (hdc=0xa0100d0, type=0x2) returned 0x1900010 [0203.891] GetCurrentObject (hdc=0xa0100d0, type=0x7) returned 0x510506ac [0203.891] GetCurrentObject (hdc=0xa0100d0, type=0x6) returned 0x18a0048 [0203.891] SaveDC (hdc=0xa0100d0) returned 1 [0203.892] GetNearestColor (hdc=0xa0100d0, color=0xf0f0f0) returned 0xf0f0f0 [0203.892] CreateSolidBrush (color=0xf0f0f0) returned 0x30100686 [0203.892] FillRect (hDC=0xa0100d0, lprc=0x5dc380, hbr=0x30100686) returned 1 [0203.892] DeleteObject (ho=0x30100686) returned 1 [0203.892] RestoreDC (hdc=0xa0100d0, nSavedDC=-1) returned 1 [0203.892] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.892] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x14, wParam=0x1010749, lParam=0x0) returned 0x1 [0203.892] GetStockObject (i=5) returned 0x1900015 [0203.893] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.893] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.898] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0203.899] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.900] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dcc20 | out: lpwndpl=0x5dcc20) returned 1 [0203.900] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dcaa0 | out: lpRect=0x5dcaa0) returned 1 [0203.900] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0203.900] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0203.900] GetSystemMetrics (nIndex=42) returned 0 [0203.900] CoTaskMemAlloc (cb=0x22) returned 0x89c620 [0203.900] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c620, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0203.900] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c620) returned 0xe [0203.900] CoTaskMemFree (pv=0x89c620) [0203.900] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dc850 | out: lpRect=0x5dc850) returned 1 [0203.900] GetCurrentObject (hdc=0x1010749, type=0x1) returned 0x1b00017 [0203.900] GetCurrentObject (hdc=0x1010749, type=0x2) returned 0x1900010 [0203.900] GetCurrentObject (hdc=0x1010749, type=0x7) returned 0xc05073a [0203.900] GetCurrentObject (hdc=0x1010749, type=0x6) returned 0x18a0048 [0203.900] SaveDC (hdc=0x1010749) returned 1 [0203.900] GetNearestColor (hdc=0x1010749, color=0xf0f0f0) returned 0xf0f0f0 [0203.901] CreateSolidBrush (color=0xf0f0f0) returned 0x31100686 [0203.901] FillRect (hDC=0x1010749, lprc=0x5dc380, hbr=0x31100686) returned 1 [0203.901] DeleteObject (ho=0x31100686) returned 1 [0203.901] RestoreDC (hdc=0x1010749, nSavedDC=-1) returned 1 [0203.901] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.901] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x14, wParam=0x10105e0, lParam=0x0) returned 0x1 [0203.901] GetStockObject (i=5) returned 0x1900015 [0203.901] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.901] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0203.901] GetStockObject (i=5) returned 0x1900015 [0203.902] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.902] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x14, wParam=0x1010749, lParam=0x0) returned 0x1 [0203.902] GetStockObject (i=5) returned 0x1900015 [0203.902] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.902] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.902] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.902] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.902] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0203.904] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0203.904] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dcc00 | out: lpwndpl=0x5dcc00) returned 1 [0203.904] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x47, wParam=0x0, lParam=0x5dd1d0) returned 0x0 [0203.904] GetClientRect (in: hWnd=0x20160, lpRect=0x5dc9a0 | out: lpRect=0x5dc9a0) returned 1 [0203.904] GetWindowRect (in: hWnd=0x20160, lpRect=0x5dc9a0 | out: lpRect=0x5dc9a0) returned 1 [0203.905] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0203.905] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0203.905] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0203.905] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dcc00 | out: lpwndpl=0x5dcc00) returned 1 [0203.905] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x47, wParam=0x0, lParam=0x5dd1d0) returned 0x0 [0203.905] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dc9a0 | out: lpRect=0x5dc9a0) returned 1 [0203.905] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5dc9a0 | out: lpRect=0x5dc9a0) returned 1 [0203.906] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x47, wParam=0x0, lParam=0x5dd1d0) returned 0x0 [0203.907] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x5, wParam=0x0, lParam=0xfa019f) returned 0x0 [0203.907] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x3, wParam=0x0, lParam=0x82006b) returned 0x0 [0203.907] GetClientRect (in: hWnd=0x20160, lpRect=0x5dca70 | out: lpRect=0x5dca70) returned 1 [0203.907] GetWindowRect (in: hWnd=0x20160, lpRect=0x5dca70 | out: lpRect=0x5dca70) returned 1 [0203.907] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.908] IsWindowUnicode (hWnd=0x20160) returned 1 [0203.908] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.908] TranslateMessage (lpMsg=0x5dd220) returned 0 [0203.908] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0203.908] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0203.908] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.908] IsWindowUnicode (hWnd=0x20224) returned 1 [0203.908] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.908] TranslateMessage (lpMsg=0x5dd220) returned 0 [0203.908] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0203.908] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0203.908] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.909] IsWindowUnicode (hWnd=0x20160) returned 1 [0203.950] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.950] TranslateMessage (lpMsg=0x5dd220) returned 0 [0203.950] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0203.950] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.950] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0203.950] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0203.951] IsWindowUnicode (hWnd=0x20160) returned 1 [0203.951] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.951] TranslateMessage (lpMsg=0x5dd220) returned 0 [0203.951] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0203.952] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0203.952] InvalidateRect (hWnd=0x8003a, lpRect=0x0, bErase=0) returned 1 [0203.952] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.952] IsWindowUnicode (hWnd=0x20160) returned 1 [0203.953] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.953] TranslateMessage (lpMsg=0x5dd220) returned 0 [0203.953] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0203.953] BeginPaint (in: hWnd=0x20160, lpPaint=0x5dc6c8 | out: lpPaint=0x5dc6c8) returned 0x10105e0 [0203.953] SelectPalette (hdc=0x10105e0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0203.953] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0203.953] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0203.953] GetSystemMetrics (nIndex=42) returned 0 [0203.953] CoTaskMemAlloc (cb=0x20) returned 0x89c6e0 [0203.953] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c6e0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0203.953] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c6e0) returned 0xd [0203.953] CoTaskMemFree (pv=0x89c6e0) [0203.953] SelectPalette (hdc=0x10105e0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0203.953] EndPaint (hWnd=0x20160, lpPaint=0x5dc6d8) returned 1 [0203.953] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.953] IsWindowUnicode (hWnd=0x2021e) returned 1 [0203.953] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.954] TranslateMessage (lpMsg=0x5dd220) returned 0 [0203.954] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0203.965] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x1010749 [0203.965] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0203.965] CreateCompatibleDC (hdc=0x1010749) returned 0x7c0106ab [0203.965] GetObjectType (h=0x1010749) returned 0x3 [0203.965] CreateCompatibleBitmap (hdc=0x1010749, cx=1, cy=1) returned 0x2f0501b1 [0203.965] GetDIBits (in: hdc=0x1010749, hbm=0x2f0501b1, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x5dbd38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x5dbd38) returned 1 [0203.965] GetDIBits (in: hdc=0x1010749, hbm=0x2f0501b1, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x5dbd38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x5dbd38) returned 1 [0203.965] DeleteObject (ho=0x2f0501b1) returned 1 [0203.965] CreateDIBSection (in: hdc=0x1010749, lpbmi=0x5dbf10, usage=0x0, ppvBits=0x5dbf08, hSection=0x0, offset=0x0 | out: ppvBits=0x5dbf08) returned 0x10050637 [0203.966] SelectObject (hdc=0x7c0106ab, h=0x10050637) returned 0x185000f [0203.966] GdipCreateFromHDC (hdc=0x7c0106ab, graphics=0x5dc420) returned 0x0 [0203.966] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0203.966] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0203.966] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0203.966] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0203.966] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dc5b0) returned 0x0 [0203.966] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0203.966] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89f050) returned 0x0 [0203.966] LocalFree (hMem=0x89f050) returned 0x0 [0203.966] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.966] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0203.966] GdipCreateRegion (region=0x5dc550) returned 0x0 [0203.966] GdipGetClip (graphics=0x1c3267f0, region=0x1c3216a0) returned 0x0 [0203.966] GdipIsInfiniteRegion (region=0x1c3216a0, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0203.966] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0203.967] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffdb10dbd) returned 0x0 [0203.967] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.967] GdipDeleteRegion (region=0x1c3216a0) returned 0x0 [0203.967] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0203.967] GetCurrentObject (hdc=0x7c0106ab, type=0x1) returned 0x1b00017 [0203.967] GetCurrentObject (hdc=0x7c0106ab, type=0x2) returned 0x1900010 [0203.967] GetCurrentObject (hdc=0x7c0106ab, type=0x7) returned 0x10050637 [0203.967] GetCurrentObject (hdc=0x7c0106ab, type=0x6) returned 0x18a0048 [0203.967] SaveDC (hdc=0x7c0106ab) returned 1 [0203.967] GetNearestColor (hdc=0x7c0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0203.967] GetNearestColor (hdc=0x7c0106ab, color=0xa0a0a0) returned 0xa0a0a0 [0203.967] GetNearestColor (hdc=0x7c0106ab, color=0x696969) returned 0x696969 [0203.967] GetNearestColor (hdc=0x7c0106ab, color=0xa0a0a0) returned 0xa0a0a0 [0203.967] GetNearestColor (hdc=0x7c0106ab, color=0x0) returned 0x0 [0203.967] GetNearestColor (hdc=0x7c0106ab, color=0xffffff) returned 0xffffff [0203.968] GetNearestColor (hdc=0x7c0106ab, color=0xe5e5e5) returned 0xe5e5e5 [0203.968] GetNearestColor (hdc=0x7c0106ab, color=0xd8d8d8) returned 0xd8d8d8 [0203.968] GetNearestColor (hdc=0x7c0106ab, color=0x0) returned 0x0 [0203.968] RestoreDC (hdc=0x7c0106ab, nSavedDC=-1) returned 1 [0203.968] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.968] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7c0106ab) returned 0x0 [0203.968] IsAppThemed () returned 0x1 [0203.968] GetThemeAppProperties () returned 0x3 [0203.968] GetThemeAppProperties () returned 0x3 [0203.968] IsAppThemed () returned 0x1 [0203.968] GetThemeAppProperties () returned 0x3 [0203.968] GetThemeAppProperties () returned 0x3 [0203.968] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x102415, lpdtp=0x2768af0 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0203.968] IsAppThemed () returned 0x1 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] IsAppThemed () returned 0x1 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] GetFocus () returned 0x2021a [0203.969] IsAppThemed () returned 0x1 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] IsAppThemed () returned 0x1 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] IsThemePartDefined () returned 0x1 [0203.969] IsAppThemed () returned 0x1 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0203.969] IsAppThemed () returned 0x1 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] IsAppThemed () returned 0x1 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] GetThemeAppProperties () returned 0x3 [0203.969] IsThemePartDefined () returned 0x1 [0203.969] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0203.970] GdipGetClip (graphics=0x1c3267f0, region=0x1c3216a0) returned 0x0 [0203.970] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0203.970] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3218c0) returned 0x0 [0203.970] GdipIsMatrixIdentity (matrix=0x1c3218c0, result=0x5dbdc0) returned 0x0 [0203.970] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f650 [0203.970] GdipGetMatrixElements (matrix=0x1c3218c0, matrixOut=0x89f650) returned 0x0 [0203.970] LocalFree (hMem=0x89f650) returned 0x0 [0203.970] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f190 [0203.970] GdipGetMatrixElements (matrix=0x1c3218c0, matrixOut=0x89f190) returned 0x0 [0203.970] LocalFree (hMem=0x89f190) returned 0x0 [0203.970] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.970] GdipDeleteMatrix (matrix=0x1c3218c0) returned 0x0 [0203.970] GdipIsInfiniteRegion (region=0x1c3216a0, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0203.970] GdipIsInfiniteRegion (region=0x1c3216a0, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0203.970] GdipGetRegionHRgn (region=0x1c3216a0, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0203.970] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.970] GdipDeleteRegion (region=0x1c3216a0) returned 0x0 [0203.970] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0203.970] GetCurrentObject (hdc=0x7c0106ab, type=0x1) returned 0x1b00017 [0203.971] GetCurrentObject (hdc=0x7c0106ab, type=0x2) returned 0x1900010 [0203.971] GetCurrentObject (hdc=0x7c0106ab, type=0x7) returned 0x10050637 [0203.971] GetCurrentObject (hdc=0x7c0106ab, type=0x6) returned 0x18a0048 [0203.971] SaveDC (hdc=0x7c0106ab) returned 1 [0203.971] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a040572 [0203.971] GetClipRgn (hdc=0x7c0106ab, hrgn=0x5a040572) returned 0 [0203.971] SelectClipRgn (hdc=0x7c0106ab, hrgn=0x5104054e) returned 2 [0203.971] DeleteObject (ho=0x5a040572) returned 1 [0203.971] DeleteObject (ho=0x5104054e) returned 1 [0203.972] OffsetViewportOrgEx (in: hdc=0x7c0106ab, x=0, y=0, lppt=0x2769500 | out: lppt=0x2769500) returned 1 [0203.972] DrawThemeParentBackground () returned 0x0 [0203.972] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0203.972] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0203.972] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0203.972] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0203.972] GetSystemMetrics (nIndex=42) returned 0 [0203.972] CoTaskMemAlloc (cb=0x20) returned 0x89c6e0 [0203.972] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c6e0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0203.972] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c6e0) returned 0xd [0203.972] CoTaskMemFree (pv=0x89c6e0) [0203.972] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0203.972] GetCurrentObject (hdc=0x7c0106ab, type=0x1) returned 0x1b00017 [0203.972] GetCurrentObject (hdc=0x7c0106ab, type=0x2) returned 0x1900010 [0203.972] GetCurrentObject (hdc=0x7c0106ab, type=0x7) returned 0x10050637 [0203.972] GetCurrentObject (hdc=0x7c0106ab, type=0x6) returned 0x18a0048 [0203.972] SaveDC (hdc=0x7c0106ab) returned 2 [0203.973] GetNearestColor (hdc=0x7c0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0203.973] CreateSolidBrush (color=0xf0f0f0) returned 0x32100686 [0203.973] FillRect (hDC=0x7c0106ab, lprc=0x5dafe0, hbr=0x32100686) returned 1 [0203.973] DeleteObject (ho=0x32100686) returned 1 [0203.973] RestoreDC (hdc=0x7c0106ab, nSavedDC=-1) returned 1 [0203.973] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0203.973] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0203.973] GetSystemMetrics (nIndex=42) returned 0 [0203.973] CoTaskMemAlloc (cb=0x20) returned 0x89c6e0 [0203.973] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c6e0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0203.973] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c6e0) returned 0xd [0203.973] CoTaskMemFree (pv=0x89c6e0) [0203.973] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0203.974] GetCurrentObject (hdc=0x7c0106ab, type=0x1) returned 0x1b00017 [0203.974] GetCurrentObject (hdc=0x7c0106ab, type=0x2) returned 0x1900010 [0203.974] GetCurrentObject (hdc=0x7c0106ab, type=0x7) returned 0x10050637 [0203.974] GetCurrentObject (hdc=0x7c0106ab, type=0x6) returned 0x18a0048 [0203.974] SaveDC (hdc=0x7c0106ab) returned 2 [0203.974] GetNearestColor (hdc=0x7c0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0203.974] CreateSolidBrush (color=0xf0f0f0) returned 0x33100686 [0203.974] FillRect (hDC=0x7c0106ab, lprc=0x5daee0, hbr=0x33100686) returned 1 [0203.974] DeleteObject (ho=0x33100686) returned 1 [0203.974] RestoreDC (hdc=0x7c0106ab, nSavedDC=-1) returned 1 [0203.974] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0203.974] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0203.974] GetSystemMetrics (nIndex=42) returned 0 [0203.974] CoTaskMemAlloc (cb=0x20) returned 0x89c6e0 [0203.975] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c6e0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0203.975] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c6e0) returned 0xd [0203.975] CoTaskMemFree (pv=0x89c6e0) [0203.975] RestoreDC (hdc=0x7c0106ab, nSavedDC=-1) returned 1 [0203.975] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.975] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7c0106ab) returned 0x0 [0203.975] IsAppThemed () returned 0x1 [0203.975] GetThemeAppProperties () returned 0x3 [0203.975] GetThemeAppProperties () returned 0x3 [0203.975] IsAppThemed () returned 0x1 [0203.975] GetThemeAppProperties () returned 0x3 [0203.975] GetThemeAppProperties () returned 0x3 [0203.975] IsThemePartDefined () returned 0x1 [0203.975] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0203.975] GdipGetClip (graphics=0x1c3267f0, region=0x1c3216a0) returned 0x0 [0203.975] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0203.975] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c321900) returned 0x0 [0203.975] GdipIsMatrixIdentity (matrix=0x1c321900, result=0x5dbca0) returned 0x0 [0203.976] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0203.976] GdipGetMatrixElements (matrix=0x1c321900, matrixOut=0x89f350) returned 0x0 [0203.976] LocalFree (hMem=0x89f350) returned 0x0 [0203.976] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0203.976] GdipGetMatrixElements (matrix=0x1c321900, matrixOut=0x89f050) returned 0x0 [0203.976] LocalFree (hMem=0x89f050) returned 0x0 [0203.976] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.976] GdipDeleteMatrix (matrix=0x1c321900) returned 0x0 [0203.976] GdipIsInfiniteRegion (region=0x1c3216a0, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0203.976] GdipIsInfiniteRegion (region=0x1c3216a0, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0203.976] GdipGetRegionHRgn (region=0x1c3216a0, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0203.976] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.976] GdipDeleteRegion (region=0x1c3216a0) returned 0x0 [0203.976] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0203.976] GetCurrentObject (hdc=0x7c0106ab, type=0x1) returned 0x1b00017 [0203.976] GetCurrentObject (hdc=0x7c0106ab, type=0x2) returned 0x1900010 [0203.976] GetCurrentObject (hdc=0x7c0106ab, type=0x7) returned 0x10050637 [0203.976] GetCurrentObject (hdc=0x7c0106ab, type=0x6) returned 0x18a0048 [0203.976] SaveDC (hdc=0x7c0106ab) returned 1 [0203.977] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5204054e [0203.977] GetClipRgn (hdc=0x7c0106ab, hrgn=0x5204054e) returned 0 [0203.977] SelectClipRgn (hdc=0x7c0106ab, hrgn=0x5c040572) returned 2 [0203.977] DeleteObject (ho=0x5204054e) returned 1 [0203.977] DeleteObject (ho=0x5c040572) returned 1 [0203.977] OffsetViewportOrgEx (in: hdc=0x7c0106ab, x=0, y=0, lppt=0x276a200 | out: lppt=0x276a200) returned 1 [0203.977] IsAppThemed () returned 0x1 [0203.977] GetThemeAppProperties () returned 0x3 [0203.977] GetThemeAppProperties () returned 0x3 [0203.977] DrawThemeBackground () returned 0x0 [0203.977] RestoreDC (hdc=0x7c0106ab, nSavedDC=-1) returned 1 [0203.977] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.977] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7c0106ab) returned 0x0 [0203.977] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0203.977] GdipGetClip (graphics=0x1c3267f0, region=0x1c3216a0) returned 0x0 [0203.977] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0203.977] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3218c0) returned 0x0 [0203.977] GdipIsMatrixIdentity (matrix=0x1c3218c0, result=0x5dbc70) returned 0x0 [0203.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0203.978] GdipGetMatrixElements (matrix=0x1c3218c0, matrixOut=0x89f350) returned 0x0 [0203.978] LocalFree (hMem=0x89f350) returned 0x0 [0203.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f5d0 [0203.978] GdipGetMatrixElements (matrix=0x1c3218c0, matrixOut=0x89f5d0) returned 0x0 [0203.978] LocalFree (hMem=0x89f5d0) returned 0x0 [0203.978] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.978] GdipDeleteMatrix (matrix=0x1c3218c0) returned 0x0 [0203.978] GdipIsInfiniteRegion (region=0x1c3216a0, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0203.978] GdipIsInfiniteRegion (region=0x1c3216a0, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0203.978] GdipGetRegionHRgn (region=0x1c3216a0, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0203.978] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.978] GdipDeleteRegion (region=0x1c3216a0) returned 0x0 [0203.978] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0203.978] GetCurrentObject (hdc=0x7c0106ab, type=0x1) returned 0x1b00017 [0203.978] GetCurrentObject (hdc=0x7c0106ab, type=0x2) returned 0x1900010 [0203.978] GetCurrentObject (hdc=0x7c0106ab, type=0x7) returned 0x10050637 [0203.978] GetCurrentObject (hdc=0x7c0106ab, type=0x6) returned 0x18a0048 [0203.978] SaveDC (hdc=0x7c0106ab) returned 1 [0203.979] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d040572 [0203.979] GetClipRgn (hdc=0x7c0106ab, hrgn=0x5d040572) returned 0 [0203.979] SelectClipRgn (hdc=0x7c0106ab, hrgn=0x5304054e) returned 2 [0203.979] DeleteObject (ho=0x5d040572) returned 1 [0203.979] DeleteObject (ho=0x5304054e) returned 1 [0203.979] OffsetViewportOrgEx (in: hdc=0x7c0106ab, x=0, y=0, lppt=0x276a700 | out: lppt=0x276a700) returned 1 [0203.979] IsAppThemed () returned 0x1 [0203.979] GetThemeAppProperties () returned 0x3 [0203.979] GetThemeAppProperties () returned 0x3 [0203.979] GetThemeBackgroundContentRect () returned 0x0 [0203.979] RestoreDC (hdc=0x7c0106ab, nSavedDC=-1) returned 1 [0203.979] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.979] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7c0106ab) returned 0x0 [0203.979] IsAppThemed () returned 0x1 [0203.979] GetThemeAppProperties () returned 0x3 [0203.979] GetThemeAppProperties () returned 0x3 [0203.979] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0203.979] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0203.979] GetCurrentObject (hdc=0x7c0106ab, type=0x1) returned 0x1b00017 [0203.979] GetCurrentObject (hdc=0x7c0106ab, type=0x2) returned 0x1900010 [0203.979] GetCurrentObject (hdc=0x7c0106ab, type=0x7) returned 0x10050637 [0203.980] GetCurrentObject (hdc=0x7c0106ab, type=0x6) returned 0x18a0048 [0203.980] SaveDC (hdc=0x7c0106ab) returned 1 [0203.980] GetTextAlign (hdc=0x7c0106ab) returned 0x0 [0203.980] GetTextColor (hdc=0x7c0106ab) returned 0x0 [0203.980] GetCurrentObject (hdc=0x7c0106ab, type=0x6) returned 0x18a0048 [0203.980] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0203.980] SelectObject (hdc=0x7c0106ab, h=0x290a0573) returned 0x18a0048 [0203.980] GetBkMode (hdc=0x7c0106ab) returned 2 [0203.980] SetBkMode (hdc=0x7c0106ab, mode=1) returned 2 [0203.980] DrawTextExW (in: hdc=0x7c0106ab, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x102415, lpdtp=0x276ac58 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0203.980] DrawTextExW (in: hdc=0x7c0106ab, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x102015, lpdtp=0x276ac58 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0203.981] RestoreDC (hdc=0x7c0106ab, nSavedDC=-1) returned 1 [0203.981] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.981] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7c0106ab) returned 0x0 [0203.981] GetFocus () returned 0x2021a [0203.981] IsAppThemed () returned 0x1 [0203.981] GetThemeAppProperties () returned 0x3 [0203.981] GetThemeAppProperties () returned 0x3 [0203.981] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0203.981] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0x7c0106ab, x1=0, y1=0, rop=0xcc0020) returned 1 [0203.982] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.982] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7c0106ab) returned 0x0 [0203.982] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0203.982] SelectObject (hdc=0x7c0106ab, h=0x185000f) returned 0x10050637 [0203.982] DeleteDC (hdc=0x7c0106ab) returned 1 [0203.982] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0203.982] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0203.982] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0203.982] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.982] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x201fffe) returned 0x0 [0203.982] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dc530) returned 0x0 [0203.982] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dc530) returned 0x0 [0203.983] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dc530) returned 0x0 [0203.983] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0203.984] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0203.984] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0203.984] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0203.986] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x202fffe) returned 0x0 [0203.986] IsWindowUnicode (hWnd=0x20220) returned 1 [0203.986] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0203.986] TranslateMessage (lpMsg=0x5dd220) returned 0 [0203.986] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0203.986] BeginPaint (in: hWnd=0x20220, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x10105e0 [0203.986] SelectPalette (hdc=0x10105e0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0203.986] CreateCompatibleDC (hdc=0x10105e0) returned 0x7e0106e3 [0203.986] SelectObject (hdc=0x7e0106e3, h=0x10050637) returned 0x185000f [0203.986] GdipCreateFromHDC (hdc=0x7e0106e3, graphics=0x5dc420) returned 0x0 [0203.987] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0203.987] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=145, height=13, combineMode=0x0) returned 0x0 [0204.001] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0204.001] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c321900) returned 0x0 [0204.001] GdipIsMatrixIdentity (matrix=0x1c321900, result=0x5dc5b0) returned 0x0 [0204.001] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eed0 [0204.001] GdipGetMatrixElements (matrix=0x1c321900, matrixOut=0x89eed0) returned 0x0 [0204.001] LocalFree (hMem=0x89eed0) returned 0x0 [0204.001] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.001] GdipDeleteMatrix (matrix=0x1c321900) returned 0x0 [0204.001] GdipCreateRegion (region=0x5dc550) returned 0x0 [0204.001] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.001] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0204.001] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0204.001] GetWindowTextLengthW (hWnd=0x20220) returned 29 [0204.002] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0204.002] GetSystemMetrics (nIndex=42) returned 0 [0204.002] CoTaskMemAlloc (cb=0x40) returned 0x895ae0 [0204.002] GetWindowTextW (in: hWnd=0x20220, lpString=0x895ae0, nMaxCount=30 | out: lpString="Put your decryption key here:") returned 29 [0204.002] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xd, wParam=0x1e, lParam=0x895ae0) returned 0x1d [0204.002] CoTaskMemFree (pv=0x895ae0) [0204.002] GetClientRect (in: hWnd=0x20220, lpRect=0x5dc5c0 | out: lpRect=0x5dc5c0) returned 1 [0204.003] GdipCreateRegion (region=0x5dc040) returned 0x0 [0204.003] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0204.003] GdipCreateMatrix (matrix=0x5dc040) returned 0x0 [0204.003] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3218b0) returned 0x0 [0204.003] GdipIsMatrixIdentity (matrix=0x1c3218b0, result=0x5dc0a0) returned 0x0 [0204.003] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f710 [0204.003] GdipGetMatrixElements (matrix=0x1c3218b0, matrixOut=0x89f710) returned 0x0 [0204.003] LocalFree (hMem=0x89f710) returned 0x0 [0204.009] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0204.009] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed50 [0204.009] GdipGetMatrixElements (matrix=0x1c3218b0, matrixOut=0x89ed50) returned 0x0 [0204.009] LocalFree (hMem=0x89ed50) returned 0x0 [0204.009] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.009] GdipDeleteMatrix (matrix=0x1c3218b0) returned 0x0 [0204.009] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0f0) returned 0x0 [0204.009] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0b0) returned 0x0 [0204.009] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x5dc0b0) returned 0x0 [0204.009] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.009] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0204.047] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc120) returned 0x0 [0204.047] GetCurrentObject (hdc=0x7e0106e3, type=0x1) returned 0x1b00017 [0204.047] GetCurrentObject (hdc=0x7e0106e3, type=0x2) returned 0x1900010 [0204.047] GetCurrentObject (hdc=0x7e0106e3, type=0x7) returned 0x10050637 [0204.047] GetCurrentObject (hdc=0x7e0106e3, type=0x6) returned 0x18a0048 [0204.047] SaveDC (hdc=0x7e0106e3) returned 1 [0204.047] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5404054e [0204.047] GetClipRgn (hdc=0x7e0106e3, hrgn=0x5404054e) returned 0 [0204.047] SelectClipRgn (hdc=0x7e0106e3, hrgn=0x60040572) returned 2 [0204.047] DeleteObject (ho=0x5404054e) returned 1 [0204.047] DeleteObject (ho=0x60040572) returned 1 [0204.048] OffsetViewportOrgEx (in: hdc=0x7e0106e3, x=0, y=0, lppt=0x276b4b8 | out: lppt=0x276b4b8) returned 1 [0204.048] GetNearestColor (hdc=0x7e0106e3, color=0xf0f0f0) returned 0xf0f0f0 [0204.048] CreateSolidBrush (color=0xf0f0f0) returned 0x34100686 [0204.048] FillRect (hDC=0x7e0106e3, lprc=0x5dc0f0, hbr=0x34100686) returned 1 [0204.048] DeleteObject (ho=0x34100686) returned 1 [0204.048] RestoreDC (hdc=0x7e0106e3, nSavedDC=-1) returned 1 [0204.048] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.048] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7e0106e3) returned 0x0 [0204.048] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffdaf0dbd) returned 0x0 [0204.048] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.048] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.048] GetWindowTextLengthW (hWnd=0x20220) returned 29 [0204.048] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0204.048] GetSystemMetrics (nIndex=42) returned 0 [0204.048] CoTaskMemAlloc (cb=0x40) returned 0x895ea0 [0204.048] GetWindowTextW (in: hWnd=0x20220, lpString=0x895ea0, nMaxCount=30 | out: lpString="Put your decryption key here:") returned 29 [0204.048] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xd, wParam=0x1e, lParam=0x895ea0) returned 0x1d [0204.048] CoTaskMemFree (pv=0x895ea0) [0204.051] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc180) returned 0x0 [0204.051] GetCurrentObject (hdc=0x7e0106e3, type=0x1) returned 0x1b00017 [0204.051] GetCurrentObject (hdc=0x7e0106e3, type=0x2) returned 0x1900010 [0204.051] GetCurrentObject (hdc=0x7e0106e3, type=0x7) returned 0x10050637 [0204.051] GetCurrentObject (hdc=0x7e0106e3, type=0x6) returned 0x18a0048 [0204.051] SaveDC (hdc=0x7e0106e3) returned 1 [0204.051] GetNearestColor (hdc=0x7e0106e3, color=0x0) returned 0x0 [0204.051] RestoreDC (hdc=0x7e0106e3, nSavedDC=-1) returned 1 [0204.051] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.051] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7e0106e3) returned 0x0 [0204.053] AdjustWindowRectEx (in: lpRect=0x5dc040, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dc040) returned 1 [0204.053] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x5dc0c0, fWinIni=0x0 | out: pvParam=0x5dc0c0) returned 1 [0204.053] SendMessageW (hWnd=0x20160, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.053] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.053] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dc060) returned 0x0 [0204.053] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc040) returned 0x0 [0204.053] GetCurrentObject (hdc=0x7e0106e3, type=0x1) returned 0x1b00017 [0204.053] GetCurrentObject (hdc=0x7e0106e3, type=0x2) returned 0x1900010 [0204.053] GetCurrentObject (hdc=0x7e0106e3, type=0x7) returned 0x10050637 [0204.053] GetCurrentObject (hdc=0x7e0106e3, type=0x6) returned 0x18a0048 [0204.053] SaveDC (hdc=0x7e0106e3) returned 1 [0204.053] GetTextAlign (hdc=0x7e0106e3) returned 0x0 [0204.053] GetTextColor (hdc=0x7e0106e3) returned 0x0 [0204.054] GetCurrentObject (hdc=0x7e0106e3, type=0x6) returned 0x18a0048 [0204.054] GetObjectW (in: h=0x18a0048, c=92, pv=0x5dbab0 | out: pv=0x5dbab0) returned 92 [0204.054] SelectObject (hdc=0x7e0106e3, h=0x290a0573) returned 0x18a0048 [0204.054] GetBkMode (hdc=0x7e0106e3) returned 2 [0204.054] SetBkMode (hdc=0x7e0106e3, mode=1) returned 2 [0204.054] DrawTextExW (in: hdc=0x7e0106e3, lpchText="Put your decryption key here:", cchText=29, lprc=0x5dbbf0, format=0x100000, lpdtp=0x276bbb0 | out: lpchText="Put your decryption key here:", lprc=0x5dbbf0) returned 13 [0204.054] RestoreDC (hdc=0x7e0106e3, nSavedDC=-1) returned 1 [0204.054] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.054] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7e0106e3) returned 0x0 [0204.054] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0204.054] BitBlt (hdc=0x10105e0, x=0, y=0, cx=145, cy=13, hdcSrc=0x7e0106e3, x1=0, y1=0, rop=0xcc0020) returned 1 [0204.054] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.054] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7e0106e3) returned 0x0 [0204.054] SelectPalette (hdc=0x10105e0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0204.055] SelectObject (hdc=0x7e0106e3, h=0x185000f) returned 0x10050637 [0204.055] DeleteDC (hdc=0x7e0106e3) returned 1 [0204.055] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.055] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0204.055] EndPaint (hWnd=0x20220, lpPaint=0x5dc628) returned 1 [0204.055] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.055] IsWindowUnicode (hWnd=0x2021a) returned 1 [0204.055] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.055] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.055] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.055] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0204.056] SendMessageW (hWnd=0x2021a, Msg=0x2111, wParam=0x400021a, lParam=0x2021a) returned 0x0 [0204.056] SendMessageW (hWnd=0x2021a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0204.056] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0204.057] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.057] IsWindowUnicode (hWnd=0x901f6) returned 1 [0204.057] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.057] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.057] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.057] BeginPaint (in: hWnd=0x901f6, lpPaint=0x5dc6c8 | out: lpPaint=0x5dc6c8) returned 0x10105e0 [0204.057] SelectPalette (hdc=0x10105e0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0204.057] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0204.057] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0204.057] GetSystemMetrics (nIndex=42) returned 0 [0204.057] CoTaskMemAlloc (cb=0x22) returned 0x89c710 [0204.057] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c710, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0204.058] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c710) returned 0xe [0204.058] CoTaskMemFree (pv=0x89c710) [0204.058] SelectPalette (hdc=0x10105e0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0204.058] EndPaint (hWnd=0x901f6, lpPaint=0x5dc6d8) returned 1 [0204.058] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.058] IsWindowUnicode (hWnd=0x8003a) returned 1 [0204.058] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.058] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.058] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.058] BeginPaint (in: hWnd=0x8003a, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x1010749 [0204.058] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0204.058] CreateCompatibleDC (hdc=0x1010749) returned 0xffffffff840106e3 [0204.058] GetObjectType (h=0x1010749) returned 0x3 [0204.058] CreateCompatibleBitmap (hdc=0x1010749, cx=1, cy=1) returned 0xffffffff850506ab [0204.058] GetDIBits (in: hdc=0x1010749, hbm=0xffffffff850506ab, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x5dbca8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x5dbca8) returned 1 [0204.058] GetDIBits (in: hdc=0x1010749, hbm=0xffffffff850506ab, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x5dbca8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x5dbca8) returned 1 [0204.058] DeleteObject (ho=0xffffffff850506ab) returned 1 [0204.059] CreateDIBSection (in: hdc=0x1010749, lpbmi=0x5dbe80, usage=0x0, ppvBits=0x5dbe78, hSection=0x0, offset=0x0 | out: ppvBits=0x5dbe78) returned 0x20050708 [0204.059] SelectObject (hdc=0xffffffff840106e3, h=0x20050708) returned 0x185000f [0204.059] GdipCreateFromHDC (hdc=0xffffffff840106e3, graphics=0x5dc390) returned 0x0 [0204.059] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0204.059] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=637, height=37, combineMode=0x0) returned 0x0 [0204.059] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0204.059] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c321900) returned 0x0 [0204.059] GdipIsMatrixIdentity (matrix=0x1c321900, result=0x5dc5b0) returned 0x0 [0204.059] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f650 [0204.059] GdipGetMatrixElements (matrix=0x1c321900, matrixOut=0x89f650) returned 0x0 [0204.059] LocalFree (hMem=0x89f650) returned 0x0 [0204.059] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.059] GdipDeleteMatrix (matrix=0x1c321900) returned 0x0 [0204.059] GdipCreateRegion (region=0x5dc550) returned 0x0 [0204.059] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.059] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0204.059] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0204.059] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffdad0dbd) returned 0x0 [0204.060] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.060] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.060] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0204.060] GetCurrentObject (hdc=0xffffffff840106e3, type=0x1) returned 0x1b00017 [0204.060] GetCurrentObject (hdc=0xffffffff840106e3, type=0x2) returned 0x1900010 [0204.060] GetCurrentObject (hdc=0xffffffff840106e3, type=0x7) returned 0x20050708 [0204.060] GetCurrentObject (hdc=0xffffffff840106e3, type=0x6) returned 0x18a0048 [0204.060] SaveDC (hdc=0xffffffff840106e3) returned 1 [0204.060] GetNearestColor (hdc=0xffffffff840106e3, color=0xf0f0f0) returned 0xf0f0f0 [0204.060] GetNearestColor (hdc=0xffffffff840106e3, color=0xa0a0a0) returned 0xa0a0a0 [0204.060] GetNearestColor (hdc=0xffffffff840106e3, color=0x696969) returned 0x696969 [0204.060] GetNearestColor (hdc=0xffffffff840106e3, color=0xa0a0a0) returned 0xa0a0a0 [0204.060] GetNearestColor (hdc=0xffffffff840106e3, color=0x0) returned 0x0 [0204.060] GetNearestColor (hdc=0xffffffff840106e3, color=0xffffff) returned 0xffffff [0204.060] GetNearestColor (hdc=0xffffffff840106e3, color=0xe5e5e5) returned 0xe5e5e5 [0204.060] GetNearestColor (hdc=0xffffffff840106e3, color=0xd8d8d8) returned 0xd8d8d8 [0204.060] GetNearestColor (hdc=0xffffffff840106e3, color=0x0) returned 0x0 [0204.061] RestoreDC (hdc=0xffffffff840106e3, nSavedDC=-1) returned 1 [0204.061] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.061] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff840106e3) returned 0x0 [0204.061] IsAppThemed () returned 0x1 [0204.061] GetThemeAppProperties () returned 0x3 [0204.061] GetThemeAppProperties () returned 0x3 [0204.061] IsAppThemed () returned 0x1 [0204.061] GetThemeAppProperties () returned 0x3 [0204.061] GetThemeAppProperties () returned 0x3 [0204.061] DrawTextExW (in: hdc=0x42010685, lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", cchText=69, lprc=0x5dbc80, format=0x102415, lpdtp=0x276d640 | out: lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", lprc=0x5dbc80) returned 13 [0204.062] IsAppThemed () returned 0x1 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] IsAppThemed () returned 0x1 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] GetFocus () returned 0x2021a [0204.062] IsAppThemed () returned 0x1 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] IsAppThemed () returned 0x1 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] IsThemePartDefined () returned 0x1 [0204.062] IsAppThemed () returned 0x1 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0204.062] IsAppThemed () returned 0x1 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] IsAppThemed () returned 0x1 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] GetThemeAppProperties () returned 0x3 [0204.062] IsThemePartDefined () returned 0x1 [0204.062] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0204.063] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.063] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0204.063] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0204.063] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dbdc0) returned 0x0 [0204.063] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee50 [0204.063] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89ee50) returned 0x0 [0204.063] LocalFree (hMem=0x89ee50) returned 0x0 [0204.063] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f310 [0204.063] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89f310) returned 0x0 [0204.063] LocalFree (hMem=0x89f310) returned 0x0 [0204.063] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.063] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0204.063] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0204.063] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0204.063] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0204.063] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.063] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.063] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0204.063] GetCurrentObject (hdc=0xffffffff840106e3, type=0x1) returned 0x1b00017 [0204.063] GetCurrentObject (hdc=0xffffffff840106e3, type=0x2) returned 0x1900010 [0204.063] GetCurrentObject (hdc=0xffffffff840106e3, type=0x7) returned 0x20050708 [0204.063] GetCurrentObject (hdc=0xffffffff840106e3, type=0x6) returned 0x18a0048 [0204.064] SaveDC (hdc=0xffffffff840106e3) returned 1 [0204.064] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x61040572 [0204.064] GetClipRgn (hdc=0xffffffff840106e3, hrgn=0x61040572) returned 0 [0204.064] SelectClipRgn (hdc=0xffffffff840106e3, hrgn=0x5704054e) returned 2 [0204.064] DeleteObject (ho=0x61040572) returned 1 [0204.064] DeleteObject (ho=0x5704054e) returned 1 [0204.064] OffsetViewportOrgEx (in: hdc=0xffffffff840106e3, x=0, y=0, lppt=0x276e050 | out: lppt=0x276e050) returned 1 [0204.064] DrawThemeParentBackground () returned 0x0 [0204.064] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0204.064] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0204.064] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0204.064] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0204.064] GetSystemMetrics (nIndex=42) returned 0 [0204.064] CoTaskMemAlloc (cb=0x22) returned 0x89c710 [0204.064] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c710, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0204.064] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c710) returned 0xe [0204.064] CoTaskMemFree (pv=0x89c710) [0204.064] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0204.064] GetCurrentObject (hdc=0xffffffff840106e3, type=0x1) returned 0x1b00017 [0204.064] GetCurrentObject (hdc=0xffffffff840106e3, type=0x2) returned 0x1900010 [0204.064] GetCurrentObject (hdc=0xffffffff840106e3, type=0x7) returned 0x20050708 [0204.065] GetCurrentObject (hdc=0xffffffff840106e3, type=0x6) returned 0x18a0048 [0204.065] SaveDC (hdc=0xffffffff840106e3) returned 2 [0204.065] GetNearestColor (hdc=0xffffffff840106e3, color=0xf0f0f0) returned 0xf0f0f0 [0204.069] CreateSolidBrush (color=0xf0f0f0) returned 0x35100686 [0204.069] FillRect (hDC=0xffffffff840106e3, lprc=0x5dafe0, hbr=0x35100686) returned 1 [0204.070] DeleteObject (ho=0x35100686) returned 1 [0204.070] RestoreDC (hdc=0xffffffff840106e3, nSavedDC=-1) returned 1 [0204.070] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0204.070] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0204.070] GetSystemMetrics (nIndex=42) returned 0 [0204.070] CoTaskMemAlloc (cb=0x22) returned 0x89c710 [0204.070] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c710, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0204.070] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c710) returned 0xe [0204.070] CoTaskMemFree (pv=0x89c710) [0204.070] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0204.070] GetCurrentObject (hdc=0xffffffff840106e3, type=0x1) returned 0x1b00017 [0204.070] GetCurrentObject (hdc=0xffffffff840106e3, type=0x2) returned 0x1900010 [0204.070] GetCurrentObject (hdc=0xffffffff840106e3, type=0x7) returned 0x20050708 [0204.071] GetCurrentObject (hdc=0xffffffff840106e3, type=0x6) returned 0x18a0048 [0204.071] SaveDC (hdc=0xffffffff840106e3) returned 2 [0204.071] GetNearestColor (hdc=0xffffffff840106e3, color=0xf0f0f0) returned 0xf0f0f0 [0204.071] CreateSolidBrush (color=0xf0f0f0) returned 0x36100686 [0204.071] FillRect (hDC=0xffffffff840106e3, lprc=0x5daee0, hbr=0x36100686) returned 1 [0204.071] DeleteObject (ho=0x36100686) returned 1 [0204.071] RestoreDC (hdc=0xffffffff840106e3, nSavedDC=-1) returned 1 [0204.071] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0204.071] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0204.071] GetSystemMetrics (nIndex=42) returned 0 [0204.071] CoTaskMemAlloc (cb=0x22) returned 0x89c710 [0204.071] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c710, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0204.071] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c710) returned 0xe [0204.071] CoTaskMemFree (pv=0x89c710) [0204.072] RestoreDC (hdc=0xffffffff840106e3, nSavedDC=-1) returned 1 [0204.072] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.072] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff840106e3) returned 0x0 [0204.072] IsAppThemed () returned 0x1 [0204.072] GetThemeAppProperties () returned 0x3 [0204.072] GetThemeAppProperties () returned 0x3 [0204.072] IsAppThemed () returned 0x1 [0204.072] GetThemeAppProperties () returned 0x3 [0204.072] GetThemeAppProperties () returned 0x3 [0204.072] IsThemePartDefined () returned 0x1 [0204.072] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0204.072] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.072] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0204.072] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3217f0) returned 0x0 [0204.072] GdipIsMatrixIdentity (matrix=0x1c3217f0, result=0x5dbca0) returned 0x0 [0204.072] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f090 [0204.072] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89f090) returned 0x0 [0204.072] LocalFree (hMem=0x89f090) returned 0x0 [0204.072] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f110 [0204.072] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89f110) returned 0x0 [0204.072] LocalFree (hMem=0x89f110) returned 0x0 [0204.073] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.073] GdipDeleteMatrix (matrix=0x1c3217f0) returned 0x0 [0204.073] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0204.073] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0204.073] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0204.073] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.073] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.073] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0204.073] GetCurrentObject (hdc=0xffffffff840106e3, type=0x1) returned 0x1b00017 [0204.073] GetCurrentObject (hdc=0xffffffff840106e3, type=0x2) returned 0x1900010 [0204.073] GetCurrentObject (hdc=0xffffffff840106e3, type=0x7) returned 0x20050708 [0204.073] GetCurrentObject (hdc=0xffffffff840106e3, type=0x6) returned 0x18a0048 [0204.073] SaveDC (hdc=0xffffffff840106e3) returned 1 [0204.073] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5804054e [0204.073] GetClipRgn (hdc=0xffffffff840106e3, hrgn=0x5804054e) returned 0 [0204.073] SelectClipRgn (hdc=0xffffffff840106e3, hrgn=0x63040572) returned 2 [0204.073] DeleteObject (ho=0x5804054e) returned 1 [0204.073] DeleteObject (ho=0x63040572) returned 1 [0204.073] OffsetViewportOrgEx (in: hdc=0xffffffff840106e3, x=0, y=0, lppt=0x276ed50 | out: lppt=0x276ed50) returned 1 [0204.073] IsAppThemed () returned 0x1 [0204.074] GetThemeAppProperties () returned 0x3 [0204.074] GetThemeAppProperties () returned 0x3 [0204.074] DrawThemeBackground () returned 0x0 [0204.074] RestoreDC (hdc=0xffffffff840106e3, nSavedDC=-1) returned 1 [0204.074] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.074] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff840106e3) returned 0x0 [0204.074] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0204.074] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.074] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0204.074] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0204.074] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dbc70) returned 0x0 [0204.074] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0204.074] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89f050) returned 0x0 [0204.074] LocalFree (hMem=0x89f050) returned 0x0 [0204.074] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed50 [0204.074] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89ed50) returned 0x0 [0204.074] LocalFree (hMem=0x89ed50) returned 0x0 [0204.074] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.074] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0204.074] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0204.074] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0204.074] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0204.075] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.075] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.075] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0204.075] GetCurrentObject (hdc=0xffffffff840106e3, type=0x1) returned 0x1b00017 [0204.075] GetCurrentObject (hdc=0xffffffff840106e3, type=0x2) returned 0x1900010 [0204.075] GetCurrentObject (hdc=0xffffffff840106e3, type=0x7) returned 0x20050708 [0204.075] GetCurrentObject (hdc=0xffffffff840106e3, type=0x6) returned 0x18a0048 [0204.075] SaveDC (hdc=0xffffffff840106e3) returned 1 [0204.075] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x64040572 [0204.075] GetClipRgn (hdc=0xffffffff840106e3, hrgn=0x64040572) returned 0 [0204.075] SelectClipRgn (hdc=0xffffffff840106e3, hrgn=0x5904054e) returned 2 [0204.075] DeleteObject (ho=0x64040572) returned 1 [0204.075] DeleteObject (ho=0x5904054e) returned 1 [0204.075] OffsetViewportOrgEx (in: hdc=0xffffffff840106e3, x=0, y=0, lppt=0x276f250 | out: lppt=0x276f250) returned 1 [0204.075] IsAppThemed () returned 0x1 [0204.075] GetThemeAppProperties () returned 0x3 [0204.075] GetThemeAppProperties () returned 0x3 [0204.075] GetThemeBackgroundContentRect () returned 0x0 [0204.075] RestoreDC (hdc=0xffffffff840106e3, nSavedDC=-1) returned 1 [0204.075] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.075] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff840106e3) returned 0x0 [0204.076] IsAppThemed () returned 0x1 [0204.076] GetThemeAppProperties () returned 0x3 [0204.076] GetThemeAppProperties () returned 0x3 [0204.076] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0204.076] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0204.076] GetCurrentObject (hdc=0xffffffff840106e3, type=0x1) returned 0x1b00017 [0204.076] GetCurrentObject (hdc=0xffffffff840106e3, type=0x2) returned 0x1900010 [0204.076] GetCurrentObject (hdc=0xffffffff840106e3, type=0x7) returned 0x20050708 [0204.076] GetCurrentObject (hdc=0xffffffff840106e3, type=0x6) returned 0x18a0048 [0204.076] SaveDC (hdc=0xffffffff840106e3) returned 1 [0204.076] GetTextAlign (hdc=0xffffffff840106e3) returned 0x0 [0204.076] GetTextColor (hdc=0xffffffff840106e3) returned 0x0 [0204.076] GetCurrentObject (hdc=0xffffffff840106e3, type=0x6) returned 0x18a0048 [0204.076] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0204.076] SelectObject (hdc=0xffffffff840106e3, h=0x290a0573) returned 0x18a0048 [0204.076] GetBkMode (hdc=0xffffffff840106e3) returned 2 [0204.076] SetBkMode (hdc=0xffffffff840106e3, mode=1) returned 2 [0204.076] DrawTextExW (in: hdc=0xffffffff840106e3, lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", cchText=69, lprc=0x5db8c0, format=0x102415, lpdtp=0x276f7a8 | out: lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", lprc=0x5db8c0) returned 13 [0204.077] DrawTextExW (in: hdc=0xffffffff840106e3, lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", cchText=69, lprc=0x5db970, format=0x102015, lpdtp=0x276f7a8 | out: lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", lprc=0x5db970) returned 13 [0204.078] RestoreDC (hdc=0xffffffff840106e3, nSavedDC=-1) returned 1 [0204.078] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.078] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff840106e3) returned 0x0 [0204.078] GetFocus () returned 0x2021a [0204.078] IsAppThemed () returned 0x1 [0204.078] GetThemeAppProperties () returned 0x3 [0204.078] GetThemeAppProperties () returned 0x3 [0204.078] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0204.078] BitBlt (hdc=0x1010749, x=0, y=0, cx=637, cy=37, hdcSrc=0xffffffff840106e3, x1=0, y1=0, rop=0xcc0020) returned 1 [0204.078] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.079] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff840106e3) returned 0x0 [0204.079] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0204.079] SelectObject (hdc=0xffffffff840106e3, h=0x185000f) returned 0x20050708 [0204.079] DeleteDC (hdc=0xffffffff840106e3) returned 1 [0204.079] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.079] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0204.079] DeleteObject (ho=0x20050708) returned 1 [0204.079] EndPaint (hWnd=0x8003a, lpPaint=0x5dc628) returned 1 [0204.079] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.079] IsWindowUnicode (hWnd=0xd0028) returned 1 [0204.079] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.080] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.080] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.080] BeginPaint (in: hWnd=0xd0028, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0204.080] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0204.080] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffff880106ab [0204.080] DeleteObject (ho=0x10050637) returned 1 [0204.080] GetObjectType (h=0xa0100d0) returned 0x3 [0204.080] CreateCompatibleBitmap (hdc=0xa0100d0, cx=1, cy=1) returned 0x310501b1 [0204.080] GetDIBits (in: hdc=0xa0100d0, hbm=0x310501b1, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x5dbd38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x5dbd38) returned 1 [0204.080] GetDIBits (in: hdc=0xa0100d0, hbm=0x310501b1, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x5dbd38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x5dbd38) returned 1 [0204.080] DeleteObject (ho=0x310501b1) returned 1 [0204.080] CreateDIBSection (in: hdc=0xa0100d0, lpbmi=0x5dbf10, usage=0x0, ppvBits=0x5dbf08, hSection=0x0, offset=0x0 | out: ppvBits=0x5dbf08) returned 0x11050637 [0204.085] SelectObject (hdc=0xffffffff880106ab, h=0x11050637) returned 0x185000f [0204.085] GdipCreateFromHDC (hdc=0xffffffff880106ab, graphics=0x5dc420) returned 0x0 [0204.085] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0204.085] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=296, height=23, combineMode=0x0) returned 0x0 [0204.085] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0204.085] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c321730) returned 0x0 [0204.085] GdipIsMatrixIdentity (matrix=0x1c321730, result=0x5dc5b0) returned 0x0 [0204.085] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f1d0 [0204.085] GdipGetMatrixElements (matrix=0x1c321730, matrixOut=0x89f1d0) returned 0x0 [0204.085] LocalFree (hMem=0x89f1d0) returned 0x0 [0204.085] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.085] GdipDeleteMatrix (matrix=0x1c321730) returned 0x0 [0204.085] GdipCreateRegion (region=0x5dc550) returned 0x0 [0204.085] GdipGetClip (graphics=0x1c3267f0, region=0x1c321770) returned 0x0 [0204.086] GdipIsInfiniteRegion (region=0x1c321770, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0204.086] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0204.086] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffdab0dbd) returned 0x0 [0204.086] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.086] GdipDeleteRegion (region=0x1c321770) returned 0x0 [0204.086] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0204.086] GetCurrentObject (hdc=0xffffffff880106ab, type=0x1) returned 0x1b00017 [0204.086] GetCurrentObject (hdc=0xffffffff880106ab, type=0x2) returned 0x1900010 [0204.086] GetCurrentObject (hdc=0xffffffff880106ab, type=0x7) returned 0x11050637 [0204.086] GetCurrentObject (hdc=0xffffffff880106ab, type=0x6) returned 0x18a0048 [0204.086] SaveDC (hdc=0xffffffff880106ab) returned 1 [0204.086] GetNearestColor (hdc=0xffffffff880106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.087] GetNearestColor (hdc=0xffffffff880106ab, color=0xa0a0a0) returned 0xa0a0a0 [0204.087] GetNearestColor (hdc=0xffffffff880106ab, color=0x696969) returned 0x696969 [0204.087] GetNearestColor (hdc=0xffffffff880106ab, color=0xa0a0a0) returned 0xa0a0a0 [0204.087] GetNearestColor (hdc=0xffffffff880106ab, color=0x0) returned 0x0 [0204.087] GetNearestColor (hdc=0xffffffff880106ab, color=0xffffff) returned 0xffffff [0204.087] GetNearestColor (hdc=0xffffffff880106ab, color=0xe5e5e5) returned 0xe5e5e5 [0204.087] GetNearestColor (hdc=0xffffffff880106ab, color=0xd8d8d8) returned 0xd8d8d8 [0204.087] GetNearestColor (hdc=0xffffffff880106ab, color=0x0) returned 0x0 [0204.087] RestoreDC (hdc=0xffffffff880106ab, nSavedDC=-1) returned 1 [0204.087] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.087] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff880106ab) returned 0x0 [0204.087] IsAppThemed () returned 0x1 [0204.087] GetThemeAppProperties () returned 0x3 [0204.087] GetThemeAppProperties () returned 0x3 [0204.088] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x5dc140, fWinIni=0x0 | out: pvParam=0x5dc140) returned 1 [0204.088] SendMessageW (hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.088] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.088] IsAppThemed () returned 0x1 [0204.088] GetThemeAppProperties () returned 0x3 [0204.088] GetThemeAppProperties () returned 0x3 [0204.088] DrawTextExW (in: hdc=0x42010685, lpchText="Copy The Bitcoin Address", cchText=24, lprc=0x5dbc80, format=0x102415, lpdtp=0x2771238 | out: lpchText="Copy The Bitcoin Address", lprc=0x5dbc80) returned 13 [0204.088] IsAppThemed () returned 0x1 [0204.088] GetThemeAppProperties () returned 0x3 [0204.088] GetThemeAppProperties () returned 0x3 [0204.088] IsAppThemed () returned 0x1 [0204.088] GetThemeAppProperties () returned 0x3 [0204.088] GetThemeAppProperties () returned 0x3 [0204.088] GetFocus () returned 0x2021a [0204.088] IsAppThemed () returned 0x1 [0204.088] GetThemeAppProperties () returned 0x3 [0204.088] GetThemeAppProperties () returned 0x3 [0204.088] IsAppThemed () returned 0x1 [0204.089] GetThemeAppProperties () returned 0x3 [0204.089] GetThemeAppProperties () returned 0x3 [0204.089] IsThemePartDefined () returned 0x1 [0204.089] IsAppThemed () returned 0x1 [0204.089] GetThemeAppProperties () returned 0x3 [0204.089] GetThemeAppProperties () returned 0x3 [0204.089] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0204.089] IsAppThemed () returned 0x1 [0204.089] GetThemeAppProperties () returned 0x3 [0204.089] GetThemeAppProperties () returned 0x3 [0204.089] IsAppThemed () returned 0x1 [0204.089] GetThemeAppProperties () returned 0x3 [0204.089] GetThemeAppProperties () returned 0x3 [0204.089] IsThemePartDefined () returned 0x1 [0204.089] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0204.089] GdipGetClip (graphics=0x1c3267f0, region=0x1c321770) returned 0x0 [0204.089] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0204.089] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0204.089] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dbdc0) returned 0x0 [0204.089] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef10 [0204.089] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89ef10) returned 0x0 [0204.089] LocalFree (hMem=0x89ef10) returned 0x0 [0204.089] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec50 [0204.089] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89ec50) returned 0x0 [0204.089] LocalFree (hMem=0x89ec50) returned 0x0 [0204.089] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.089] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0204.089] GdipIsInfiniteRegion (region=0x1c321770, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0204.090] GdipIsInfiniteRegion (region=0x1c321770, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0204.090] GdipGetRegionHRgn (region=0x1c321770, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0204.090] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.090] GdipDeleteRegion (region=0x1c321770) returned 0x0 [0204.090] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0204.090] GetCurrentObject (hdc=0xffffffff880106ab, type=0x1) returned 0x1b00017 [0204.090] GetCurrentObject (hdc=0xffffffff880106ab, type=0x2) returned 0x1900010 [0204.090] GetCurrentObject (hdc=0xffffffff880106ab, type=0x7) returned 0x11050637 [0204.090] GetCurrentObject (hdc=0xffffffff880106ab, type=0x6) returned 0x18a0048 [0204.090] SaveDC (hdc=0xffffffff880106ab) returned 1 [0204.090] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a04054e [0204.090] GetClipRgn (hdc=0xffffffff880106ab, hrgn=0x5a04054e) returned 0 [0204.090] SelectClipRgn (hdc=0xffffffff880106ab, hrgn=0x68040572) returned 2 [0204.090] DeleteObject (ho=0x5a04054e) returned 1 [0204.090] DeleteObject (ho=0x68040572) returned 1 [0204.090] OffsetViewportOrgEx (in: hdc=0xffffffff880106ab, x=0, y=0, lppt=0x2771c48 | out: lppt=0x2771c48) returned 1 [0204.090] DrawThemeParentBackground () returned 0x0 [0204.090] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0204.090] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0204.090] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0204.090] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0204.091] GetSystemMetrics (nIndex=42) returned 0 [0204.091] CoTaskMemAlloc (cb=0x22) returned 0x89c710 [0204.091] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c710, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0204.091] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c710) returned 0xe [0204.091] CoTaskMemFree (pv=0x89c710) [0204.091] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0204.091] GetCurrentObject (hdc=0xffffffff880106ab, type=0x1) returned 0x1b00017 [0204.091] GetCurrentObject (hdc=0xffffffff880106ab, type=0x2) returned 0x1900010 [0204.091] GetCurrentObject (hdc=0xffffffff880106ab, type=0x7) returned 0x11050637 [0204.091] GetCurrentObject (hdc=0xffffffff880106ab, type=0x6) returned 0x18a0048 [0204.091] SaveDC (hdc=0xffffffff880106ab) returned 2 [0204.091] GetNearestColor (hdc=0xffffffff880106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.091] CreateSolidBrush (color=0xf0f0f0) returned 0x37100686 [0204.091] FillRect (hDC=0xffffffff880106ab, lprc=0x5dafe0, hbr=0x37100686) returned 1 [0204.091] DeleteObject (ho=0x37100686) returned 1 [0204.091] RestoreDC (hdc=0xffffffff880106ab, nSavedDC=-1) returned 1 [0204.092] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0204.092] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0204.092] GetSystemMetrics (nIndex=42) returned 0 [0204.092] CoTaskMemAlloc (cb=0x22) returned 0x89c710 [0204.092] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c710, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0204.092] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c710) returned 0xe [0204.092] CoTaskMemFree (pv=0x89c710) [0204.092] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0204.092] GetCurrentObject (hdc=0xffffffff880106ab, type=0x1) returned 0x1b00017 [0204.092] GetCurrentObject (hdc=0xffffffff880106ab, type=0x2) returned 0x1900010 [0204.092] GetCurrentObject (hdc=0xffffffff880106ab, type=0x7) returned 0x11050637 [0204.092] GetCurrentObject (hdc=0xffffffff880106ab, type=0x6) returned 0x18a0048 [0204.093] SaveDC (hdc=0xffffffff880106ab) returned 2 [0204.093] GetNearestColor (hdc=0xffffffff880106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.093] CreateSolidBrush (color=0xf0f0f0) returned 0x38100686 [0204.093] FillRect (hDC=0xffffffff880106ab, lprc=0x5daee0, hbr=0x38100686) returned 1 [0204.093] DeleteObject (ho=0x38100686) returned 1 [0204.093] RestoreDC (hdc=0xffffffff880106ab, nSavedDC=-1) returned 1 [0204.093] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0204.093] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0204.093] GetSystemMetrics (nIndex=42) returned 0 [0204.093] CoTaskMemAlloc (cb=0x22) returned 0x89c710 [0204.093] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c710, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0204.093] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c710) returned 0xe [0204.093] CoTaskMemFree (pv=0x89c710) [0204.094] RestoreDC (hdc=0xffffffff880106ab, nSavedDC=-1) returned 1 [0204.095] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.095] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff880106ab) returned 0x0 [0204.095] IsAppThemed () returned 0x1 [0204.095] GetThemeAppProperties () returned 0x3 [0204.095] GetThemeAppProperties () returned 0x3 [0204.095] IsAppThemed () returned 0x1 [0204.095] GetThemeAppProperties () returned 0x3 [0204.095] GetThemeAppProperties () returned 0x3 [0204.095] IsThemePartDefined () returned 0x1 [0204.095] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0204.095] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.095] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0204.095] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3217f0) returned 0x0 [0204.095] GdipIsMatrixIdentity (matrix=0x1c3217f0, result=0x5dbca0) returned 0x0 [0204.095] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f310 [0204.095] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89f310) returned 0x0 [0204.095] LocalFree (hMem=0x89f310) returned 0x0 [0204.095] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f5d0 [0204.095] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89f5d0) returned 0x0 [0204.095] LocalFree (hMem=0x89f5d0) returned 0x0 [0204.095] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.095] GdipDeleteMatrix (matrix=0x1c3217f0) returned 0x0 [0204.095] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0204.095] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0204.095] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0204.095] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.095] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.095] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0204.095] GetCurrentObject (hdc=0xffffffff880106ab, type=0x1) returned 0x1b00017 [0204.096] GetCurrentObject (hdc=0xffffffff880106ab, type=0x2) returned 0x1900010 [0204.096] GetCurrentObject (hdc=0xffffffff880106ab, type=0x7) returned 0x11050637 [0204.096] GetCurrentObject (hdc=0xffffffff880106ab, type=0x6) returned 0x18a0048 [0204.096] SaveDC (hdc=0xffffffff880106ab) returned 1 [0204.096] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x69040572 [0204.096] GetClipRgn (hdc=0xffffffff880106ab, hrgn=0x69040572) returned 0 [0204.096] SelectClipRgn (hdc=0xffffffff880106ab, hrgn=0x5c04054e) returned 2 [0204.096] DeleteObject (ho=0x69040572) returned 1 [0204.096] DeleteObject (ho=0x5c04054e) returned 1 [0204.096] OffsetViewportOrgEx (in: hdc=0xffffffff880106ab, x=0, y=0, lppt=0x2772948 | out: lppt=0x2772948) returned 1 [0204.096] IsAppThemed () returned 0x1 [0204.096] GetThemeAppProperties () returned 0x3 [0204.096] GetThemeAppProperties () returned 0x3 [0204.096] DrawThemeBackground () returned 0x0 [0204.097] RestoreDC (hdc=0xffffffff880106ab, nSavedDC=-1) returned 1 [0204.097] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.097] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff880106ab) returned 0x0 [0204.097] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0204.097] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.097] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0204.098] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0204.098] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dbc70) returned 0x0 [0204.098] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e990 [0204.098] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89e990) returned 0x0 [0204.098] LocalFree (hMem=0x89e990) returned 0x0 [0204.098] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e810 [0204.098] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89e810) returned 0x0 [0204.098] LocalFree (hMem=0x89e810) returned 0x0 [0204.098] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.098] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0204.098] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0204.098] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0204.098] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0204.098] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.098] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.098] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0204.098] GetCurrentObject (hdc=0xffffffff880106ab, type=0x1) returned 0x1b00017 [0204.098] GetCurrentObject (hdc=0xffffffff880106ab, type=0x2) returned 0x1900010 [0204.098] GetCurrentObject (hdc=0xffffffff880106ab, type=0x7) returned 0x11050637 [0204.098] GetCurrentObject (hdc=0xffffffff880106ab, type=0x6) returned 0x18a0048 [0204.098] SaveDC (hdc=0xffffffff880106ab) returned 1 [0204.098] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d04054e [0204.098] GetClipRgn (hdc=0xffffffff880106ab, hrgn=0x5d04054e) returned 0 [0204.098] SelectClipRgn (hdc=0xffffffff880106ab, hrgn=0x6a040572) returned 2 [0204.098] DeleteObject (ho=0x5d04054e) returned 1 [0204.098] DeleteObject (ho=0x6a040572) returned 1 [0204.098] OffsetViewportOrgEx (in: hdc=0xffffffff880106ab, x=0, y=0, lppt=0x2772e48 | out: lppt=0x2772e48) returned 1 [0204.098] IsAppThemed () returned 0x1 [0204.098] GetThemeAppProperties () returned 0x3 [0204.099] GetThemeAppProperties () returned 0x3 [0204.099] GetThemeBackgroundContentRect () returned 0x0 [0204.099] RestoreDC (hdc=0xffffffff880106ab, nSavedDC=-1) returned 1 [0204.099] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.099] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff880106ab) returned 0x0 [0204.099] IsAppThemed () returned 0x1 [0204.099] GetThemeAppProperties () returned 0x3 [0204.099] GetThemeAppProperties () returned 0x3 [0204.099] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0204.099] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0204.099] GetCurrentObject (hdc=0xffffffff880106ab, type=0x1) returned 0x1b00017 [0204.099] GetCurrentObject (hdc=0xffffffff880106ab, type=0x2) returned 0x1900010 [0204.099] GetCurrentObject (hdc=0xffffffff880106ab, type=0x7) returned 0x11050637 [0204.099] GetCurrentObject (hdc=0xffffffff880106ab, type=0x6) returned 0x18a0048 [0204.099] SaveDC (hdc=0xffffffff880106ab) returned 1 [0204.099] GetTextAlign (hdc=0xffffffff880106ab) returned 0x0 [0204.099] GetTextColor (hdc=0xffffffff880106ab) returned 0x0 [0204.099] GetCurrentObject (hdc=0xffffffff880106ab, type=0x6) returned 0x18a0048 [0204.099] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0204.099] SelectObject (hdc=0xffffffff880106ab, h=0x290a0573) returned 0x18a0048 [0204.099] GetBkMode (hdc=0xffffffff880106ab) returned 2 [0204.099] SetBkMode (hdc=0xffffffff880106ab, mode=1) returned 2 [0204.099] DrawTextExW (in: hdc=0xffffffff880106ab, lpchText="Copy The Bitcoin Address", cchText=24, lprc=0x5db8c0, format=0x102415, lpdtp=0x27733a0 | out: lpchText="Copy The Bitcoin Address", lprc=0x5db8c0) returned 13 [0204.100] DrawTextExW (in: hdc=0xffffffff880106ab, lpchText="Copy The Bitcoin Address", cchText=24, lprc=0x5db970, format=0x102015, lpdtp=0x27733a0 | out: lpchText="Copy The Bitcoin Address", lprc=0x5db970) returned 13 [0204.100] RestoreDC (hdc=0xffffffff880106ab, nSavedDC=-1) returned 1 [0204.100] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.100] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff880106ab) returned 0x0 [0204.100] GetFocus () returned 0x2021a [0204.100] IsAppThemed () returned 0x1 [0204.100] GetThemeAppProperties () returned 0x3 [0204.100] GetThemeAppProperties () returned 0x3 [0204.100] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0204.101] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=296, cy=23, hdcSrc=0xffffffff880106ab, x1=0, y1=0, rop=0xcc0020) returned 1 [0204.101] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.101] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff880106ab) returned 0x0 [0204.101] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0204.101] SelectObject (hdc=0xffffffff880106ab, h=0x185000f) returned 0x11050637 [0204.101] DeleteDC (hdc=0xffffffff880106ab) returned 1 [0204.101] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.101] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0204.101] EndPaint (hWnd=0xd0028, lpPaint=0x5dc628) returned 1 [0204.101] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.101] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1590163) returned 0x1 [0204.101] IsWindowUnicode (hWnd=0x2021e) returned 1 [0204.101] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.101] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1590163) returned 0x1 [0204.101] SetCursor (hCursor=0x10003) returned 0x10003 [0204.101] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.101] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.101] _TrackMouseEvent (in: lpEventTrack=0x2773508 | out: lpEventTrack=0x2773508) returned 1 [0204.102] SendMessageW (hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0204.102] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0204.102] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0204.102] GetKeyState (nVirtKey=1) returned 0 [0204.102] GetKeyState (nVirtKey=2) returned 0 [0204.102] GetKeyState (nVirtKey=4) returned 0 [0204.102] GetKeyState (nVirtKey=5) returned 0 [0204.102] GetKeyState (nVirtKey=6) returned 0 [0204.102] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.102] IsWindowUnicode (hWnd=0x2021e) returned 1 [0204.102] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.102] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.102] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.102] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x10105e0 [0204.102] SelectPalette (hdc=0x10105e0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0204.102] CreateCompatibleDC (hdc=0x10105e0) returned 0xffffffff8a0106ab [0204.102] SelectObject (hdc=0xffffffff8a0106ab, h=0x11050637) returned 0x185000f [0204.102] GdipCreateFromHDC (hdc=0xffffffff8a0106ab, graphics=0x5dc420) returned 0x0 [0204.102] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0204.103] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0204.103] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0204.103] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c321730) returned 0x0 [0204.103] GdipIsMatrixIdentity (matrix=0x1c321730, result=0x5dc5b0) returned 0x0 [0204.103] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f250 [0204.103] GdipGetMatrixElements (matrix=0x1c321730, matrixOut=0x89f250) returned 0x0 [0204.103] LocalFree (hMem=0x89f250) returned 0x0 [0204.103] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.103] GdipDeleteMatrix (matrix=0x1c321730) returned 0x0 [0204.103] GdipCreateRegion (region=0x5dc550) returned 0x0 [0204.103] GdipGetClip (graphics=0x1c3267f0, region=0x1c321770) returned 0x0 [0204.103] GdipIsInfiniteRegion (region=0x1c321770, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0204.103] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0204.103] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffda90dbd) returned 0x0 [0204.103] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.103] GdipDeleteRegion (region=0x1c321770) returned 0x0 [0204.104] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0204.104] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x1) returned 0x1b00017 [0204.104] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x2) returned 0x1900010 [0204.104] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x7) returned 0x11050637 [0204.104] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x6) returned 0x18a0048 [0204.104] SaveDC (hdc=0xffffffff8a0106ab) returned 1 [0204.104] GetNearestColor (hdc=0xffffffff8a0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.104] GetNearestColor (hdc=0xffffffff8a0106ab, color=0xa0a0a0) returned 0xa0a0a0 [0204.104] GetNearestColor (hdc=0xffffffff8a0106ab, color=0x696969) returned 0x696969 [0204.104] GetNearestColor (hdc=0xffffffff8a0106ab, color=0xa0a0a0) returned 0xa0a0a0 [0204.104] GetNearestColor (hdc=0xffffffff8a0106ab, color=0x0) returned 0x0 [0204.104] GetNearestColor (hdc=0xffffffff8a0106ab, color=0xffffff) returned 0xffffff [0204.104] GetNearestColor (hdc=0xffffffff8a0106ab, color=0xe5e5e5) returned 0xe5e5e5 [0204.104] GetNearestColor (hdc=0xffffffff8a0106ab, color=0xd8d8d8) returned 0xd8d8d8 [0204.105] GetNearestColor (hdc=0xffffffff8a0106ab, color=0x0) returned 0x0 [0204.105] RestoreDC (hdc=0xffffffff8a0106ab, nSavedDC=-1) returned 1 [0204.105] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.105] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8a0106ab) returned 0x0 [0204.105] IsAppThemed () returned 0x1 [0204.105] GetThemeAppProperties () returned 0x3 [0204.105] GetThemeAppProperties () returned 0x3 [0204.105] IsAppThemed () returned 0x1 [0204.105] GetThemeAppProperties () returned 0x3 [0204.105] GetThemeAppProperties () returned 0x3 [0204.105] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x102415, lpdtp=0x2773e40 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0204.105] IsAppThemed () returned 0x1 [0204.105] GetThemeAppProperties () returned 0x3 [0204.105] GetThemeAppProperties () returned 0x3 [0204.105] IsAppThemed () returned 0x1 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] IsAppThemed () returned 0x1 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] IsAppThemed () returned 0x1 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] IsThemePartDefined () returned 0x1 [0204.106] IsAppThemed () returned 0x1 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0204.106] IsAppThemed () returned 0x1 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] IsAppThemed () returned 0x1 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] GetThemeAppProperties () returned 0x3 [0204.106] IsThemePartDefined () returned 0x1 [0204.106] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0204.106] GdipGetClip (graphics=0x1c3267f0, region=0x1c321770) returned 0x0 [0204.106] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0204.106] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0204.106] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dbdc0) returned 0x0 [0204.106] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f4d0 [0204.106] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89f4d0) returned 0x0 [0204.106] LocalFree (hMem=0x89f4d0) returned 0x0 [0204.106] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f250 [0204.106] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89f250) returned 0x0 [0204.107] LocalFree (hMem=0x89f250) returned 0x0 [0204.107] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.107] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0204.107] GdipIsInfiniteRegion (region=0x1c321770, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0204.107] GdipIsInfiniteRegion (region=0x1c321770, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0204.107] GdipGetRegionHRgn (region=0x1c321770, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0204.107] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.107] GdipDeleteRegion (region=0x1c321770) returned 0x0 [0204.107] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0204.107] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x1) returned 0x1b00017 [0204.107] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x2) returned 0x1900010 [0204.107] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x7) returned 0x11050637 [0204.107] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x6) returned 0x18a0048 [0204.107] SaveDC (hdc=0xffffffff8a0106ab) returned 1 [0204.107] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b040572 [0204.107] GetClipRgn (hdc=0xffffffff8a0106ab, hrgn=0x6b040572) returned 0 [0204.107] SelectClipRgn (hdc=0xffffffff8a0106ab, hrgn=0x6104054e) returned 2 [0204.107] DeleteObject (ho=0x6b040572) returned 1 [0204.107] DeleteObject (ho=0x6104054e) returned 1 [0204.107] OffsetViewportOrgEx (in: hdc=0xffffffff8a0106ab, x=0, y=0, lppt=0x2774850 | out: lppt=0x2774850) returned 1 [0204.108] DrawThemeParentBackground () returned 0x0 [0204.108] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0204.108] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0204.108] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0204.108] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0204.108] GetSystemMetrics (nIndex=42) returned 0 [0204.108] CoTaskMemAlloc (cb=0x20) returned 0x89c710 [0204.108] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c710, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0204.108] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c710) returned 0xd [0204.108] CoTaskMemFree (pv=0x89c710) [0204.108] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0204.108] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x1) returned 0x1b00017 [0204.108] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x2) returned 0x1900010 [0204.108] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x7) returned 0x11050637 [0204.108] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x6) returned 0x18a0048 [0204.108] SaveDC (hdc=0xffffffff8a0106ab) returned 2 [0204.108] GetNearestColor (hdc=0xffffffff8a0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.109] CreateSolidBrush (color=0xf0f0f0) returned 0x39100686 [0204.109] FillRect (hDC=0xffffffff8a0106ab, lprc=0x5dafe0, hbr=0x39100686) returned 1 [0204.109] DeleteObject (ho=0x39100686) returned 1 [0204.109] RestoreDC (hdc=0xffffffff8a0106ab, nSavedDC=-1) returned 1 [0204.109] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0204.109] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0204.109] GetSystemMetrics (nIndex=42) returned 0 [0204.109] CoTaskMemAlloc (cb=0x20) returned 0x89c710 [0204.109] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c710, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0204.109] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c710) returned 0xd [0204.109] CoTaskMemFree (pv=0x89c710) [0204.109] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0204.109] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x1) returned 0x1b00017 [0204.109] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x2) returned 0x1900010 [0204.109] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x7) returned 0x11050637 [0204.109] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x6) returned 0x18a0048 [0204.109] SaveDC (hdc=0xffffffff8a0106ab) returned 2 [0204.109] GetNearestColor (hdc=0xffffffff8a0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.110] CreateSolidBrush (color=0xf0f0f0) returned 0x3a100686 [0204.110] FillRect (hDC=0xffffffff8a0106ab, lprc=0x5daee0, hbr=0x3a100686) returned 1 [0204.110] DeleteObject (ho=0x3a100686) returned 1 [0204.110] RestoreDC (hdc=0xffffffff8a0106ab, nSavedDC=-1) returned 1 [0204.110] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0204.110] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0204.110] GetSystemMetrics (nIndex=42) returned 0 [0204.110] CoTaskMemAlloc (cb=0x20) returned 0x89c830 [0204.110] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c830, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0204.110] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c830) returned 0xd [0204.110] CoTaskMemFree (pv=0x89c830) [0204.110] RestoreDC (hdc=0xffffffff8a0106ab, nSavedDC=-1) returned 1 [0204.110] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.110] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8a0106ab) returned 0x0 [0204.110] IsAppThemed () returned 0x1 [0204.110] GetThemeAppProperties () returned 0x3 [0204.110] GetThemeAppProperties () returned 0x3 [0204.110] IsAppThemed () returned 0x1 [0204.110] GetThemeAppProperties () returned 0x3 [0204.110] GetThemeAppProperties () returned 0x3 [0204.110] IsThemePartDefined () returned 0x1 [0204.110] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0204.111] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.111] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0204.111] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3217f0) returned 0x0 [0204.111] GdipIsMatrixIdentity (matrix=0x1c3217f0, result=0x5dbca0) returned 0x0 [0204.111] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec90 [0204.111] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89ec90) returned 0x0 [0204.111] LocalFree (hMem=0x89ec90) returned 0x0 [0204.111] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e990 [0204.111] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89e990) returned 0x0 [0204.111] LocalFree (hMem=0x89e990) returned 0x0 [0204.111] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.111] GdipDeleteMatrix (matrix=0x1c3217f0) returned 0x0 [0204.111] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0204.111] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0204.111] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0204.111] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.111] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.111] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0204.111] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x1) returned 0x1b00017 [0204.111] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x2) returned 0x1900010 [0204.111] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x7) returned 0x11050637 [0204.111] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x6) returned 0x18a0048 [0204.111] SaveDC (hdc=0xffffffff8a0106ab) returned 1 [0204.111] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6204054e [0204.112] GetClipRgn (hdc=0xffffffff8a0106ab, hrgn=0x6204054e) returned 0 [0204.112] SelectClipRgn (hdc=0xffffffff8a0106ab, hrgn=0x6d040572) returned 2 [0204.112] DeleteObject (ho=0x6204054e) returned 1 [0204.121] DeleteObject (ho=0x6d040572) returned 1 [0204.121] OffsetViewportOrgEx (in: hdc=0xffffffff8a0106ab, x=0, y=0, lppt=0x2775550 | out: lppt=0x2775550) returned 1 [0204.121] IsAppThemed () returned 0x1 [0204.121] GetThemeAppProperties () returned 0x3 [0204.121] GetThemeAppProperties () returned 0x3 [0204.121] DrawThemeBackground () returned 0x0 [0204.121] RestoreDC (hdc=0xffffffff8a0106ab, nSavedDC=-1) returned 1 [0204.121] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.121] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8a0106ab) returned 0x0 [0204.121] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0204.121] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.121] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0204.121] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0204.121] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dbc70) returned 0x0 [0204.121] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f0d0 [0204.121] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89f0d0) returned 0x0 [0204.122] LocalFree (hMem=0x89f0d0) returned 0x0 [0204.122] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0204.122] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89f050) returned 0x0 [0204.122] LocalFree (hMem=0x89f050) returned 0x0 [0204.122] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.122] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0204.122] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0204.122] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0204.122] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0204.122] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.122] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.122] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0204.122] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x1) returned 0x1b00017 [0204.122] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x2) returned 0x1900010 [0204.122] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x7) returned 0x11050637 [0204.122] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x6) returned 0x18a0048 [0204.122] SaveDC (hdc=0xffffffff8a0106ab) returned 1 [0204.122] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e040572 [0204.122] GetClipRgn (hdc=0xffffffff8a0106ab, hrgn=0x6e040572) returned 0 [0204.122] SelectClipRgn (hdc=0xffffffff8a0106ab, hrgn=0x6304054e) returned 2 [0204.122] DeleteObject (ho=0x6e040572) returned 1 [0204.122] DeleteObject (ho=0x6304054e) returned 1 [0204.123] OffsetViewportOrgEx (in: hdc=0xffffffff8a0106ab, x=0, y=0, lppt=0x2775a50 | out: lppt=0x2775a50) returned 1 [0204.123] IsAppThemed () returned 0x1 [0204.123] GetThemeAppProperties () returned 0x3 [0204.123] GetThemeAppProperties () returned 0x3 [0204.123] GetThemeBackgroundContentRect () returned 0x0 [0204.123] RestoreDC (hdc=0xffffffff8a0106ab, nSavedDC=-1) returned 1 [0204.123] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.123] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8a0106ab) returned 0x0 [0204.123] IsAppThemed () returned 0x1 [0204.123] GetThemeAppProperties () returned 0x3 [0204.123] GetThemeAppProperties () returned 0x3 [0204.123] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0204.123] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0204.123] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x1) returned 0x1b00017 [0204.123] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x2) returned 0x1900010 [0204.123] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x7) returned 0x11050637 [0204.123] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x6) returned 0x18a0048 [0204.123] SaveDC (hdc=0xffffffff8a0106ab) returned 1 [0204.123] GetTextAlign (hdc=0xffffffff8a0106ab) returned 0x0 [0204.123] GetTextColor (hdc=0xffffffff8a0106ab) returned 0x0 [0204.123] GetCurrentObject (hdc=0xffffffff8a0106ab, type=0x6) returned 0x18a0048 [0204.123] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0204.124] SelectObject (hdc=0xffffffff8a0106ab, h=0x290a0573) returned 0x18a0048 [0204.124] GetBkMode (hdc=0xffffffff8a0106ab) returned 2 [0204.124] SetBkMode (hdc=0xffffffff8a0106ab, mode=1) returned 2 [0204.124] DrawTextExW (in: hdc=0xffffffff8a0106ab, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x102415, lpdtp=0x2775fa8 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0204.124] DrawTextExW (in: hdc=0xffffffff8a0106ab, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x102015, lpdtp=0x2775fa8 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0204.124] RestoreDC (hdc=0xffffffff8a0106ab, nSavedDC=-1) returned 1 [0204.124] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.124] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8a0106ab) returned 0x0 [0204.124] GetFocus () returned 0x2021a [0204.124] IsAppThemed () returned 0x1 [0204.125] GetThemeAppProperties () returned 0x3 [0204.125] GetThemeAppProperties () returned 0x3 [0204.125] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0204.125] BitBlt (hdc=0x10105e0, x=0, y=0, cx=262, cy=36, hdcSrc=0xffffffff8a0106ab, x1=0, y1=0, rop=0xcc0020) returned 1 [0204.125] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.125] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8a0106ab) returned 0x0 [0204.125] SelectPalette (hdc=0x10105e0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0204.125] SelectObject (hdc=0xffffffff8a0106ab, h=0x185000f) returned 0x11050637 [0204.125] DeleteDC (hdc=0xffffffff8a0106ab) returned 1 [0204.125] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.125] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0204.125] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0204.125] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.125] IsWindowUnicode (hWnd=0xa018a) returned 1 [0204.125] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.125] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.125] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.125] BeginPaint (in: hWnd=0xa018a, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x1010749 [0204.126] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0204.126] CreateCompatibleDC (hdc=0x1010749) returned 0xffffffff8c0106ab [0204.126] SelectObject (hdc=0xffffffff8c0106ab, h=0x11050637) returned 0x185000f [0204.126] GdipCreateFromHDC (hdc=0xffffffff8c0106ab, graphics=0x5dc420) returned 0x0 [0204.126] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0204.126] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=296, height=23, combineMode=0x0) returned 0x0 [0204.126] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0204.126] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c321730) returned 0x0 [0204.126] GdipIsMatrixIdentity (matrix=0x1c321730, result=0x5dc5b0) returned 0x0 [0204.126] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e7d0 [0204.126] GdipGetMatrixElements (matrix=0x1c321730, matrixOut=0x89e7d0) returned 0x0 [0204.126] LocalFree (hMem=0x89e7d0) returned 0x0 [0204.126] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.126] GdipDeleteMatrix (matrix=0x1c321730) returned 0x0 [0204.126] GdipCreateRegion (region=0x5dc550) returned 0x0 [0204.126] GdipGetClip (graphics=0x1c3267f0, region=0x1c321770) returned 0x0 [0204.126] GdipIsInfiniteRegion (region=0x1c321770, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0204.126] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0204.126] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffda70dbd) returned 0x0 [0204.126] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.127] GdipDeleteRegion (region=0x1c321770) returned 0x0 [0204.127] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0204.127] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x1) returned 0x1b00017 [0204.127] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x2) returned 0x1900010 [0204.127] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x7) returned 0x11050637 [0204.127] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x6) returned 0x18a0048 [0204.127] SaveDC (hdc=0xffffffff8c0106ab) returned 1 [0204.135] GetNearestColor (hdc=0xffffffff8c0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.135] GetNearestColor (hdc=0xffffffff8c0106ab, color=0xa0a0a0) returned 0xa0a0a0 [0204.135] GetNearestColor (hdc=0xffffffff8c0106ab, color=0x696969) returned 0x696969 [0204.135] GetNearestColor (hdc=0xffffffff8c0106ab, color=0xa0a0a0) returned 0xa0a0a0 [0204.135] GetNearestColor (hdc=0xffffffff8c0106ab, color=0x0) returned 0x0 [0204.135] GetNearestColor (hdc=0xffffffff8c0106ab, color=0xffffff) returned 0xffffff [0204.136] GetNearestColor (hdc=0xffffffff8c0106ab, color=0xe5e5e5) returned 0xe5e5e5 [0204.136] GetNearestColor (hdc=0xffffffff8c0106ab, color=0xd8d8d8) returned 0xd8d8d8 [0204.136] GetNearestColor (hdc=0xffffffff8c0106ab, color=0x0) returned 0x0 [0204.136] RestoreDC (hdc=0xffffffff8c0106ab, nSavedDC=-1) returned 1 [0204.136] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.136] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8c0106ab) returned 0x0 [0204.136] IsAppThemed () returned 0x1 [0204.136] GetThemeAppProperties () returned 0x3 [0204.136] GetThemeAppProperties () returned 0x3 [0204.136] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x5dc140, fWinIni=0x0 | out: pvParam=0x5dc140) returned 1 [0204.136] SendMessageW (hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.136] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.137] IsAppThemed () returned 0x1 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] DrawTextExW (in: hdc=0x42010685, lpchText="Copy Personal ID", cchText=16, lprc=0x5dbc80, format=0x102415, lpdtp=0x27769d8 | out: lpchText="Copy Personal ID", lprc=0x5dbc80) returned 13 [0204.137] IsAppThemed () returned 0x1 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] IsAppThemed () returned 0x1 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] GetFocus () returned 0x2021a [0204.137] IsAppThemed () returned 0x1 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] IsAppThemed () returned 0x1 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] IsThemePartDefined () returned 0x1 [0204.137] IsAppThemed () returned 0x1 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] GetThemeAppProperties () returned 0x3 [0204.137] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0204.138] IsAppThemed () returned 0x1 [0204.138] GetThemeAppProperties () returned 0x3 [0204.138] GetThemeAppProperties () returned 0x3 [0204.138] IsAppThemed () returned 0x1 [0204.138] GetThemeAppProperties () returned 0x3 [0204.138] GetThemeAppProperties () returned 0x3 [0204.138] IsThemePartDefined () returned 0x1 [0204.138] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0204.138] GdipGetClip (graphics=0x1c3267f0, region=0x1c321770) returned 0x0 [0204.138] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0204.138] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0204.138] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dbdc0) returned 0x0 [0204.138] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb50 [0204.138] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89eb50) returned 0x0 [0204.138] LocalFree (hMem=0x89eb50) returned 0x0 [0204.138] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f0d0 [0204.138] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89f0d0) returned 0x0 [0204.138] LocalFree (hMem=0x89f0d0) returned 0x0 [0204.138] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.139] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0204.139] GdipIsInfiniteRegion (region=0x1c321770, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0204.139] GdipIsInfiniteRegion (region=0x1c321770, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0204.139] GdipGetRegionHRgn (region=0x1c321770, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0204.139] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.139] GdipDeleteRegion (region=0x1c321770) returned 0x0 [0204.139] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0204.139] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x1) returned 0x1b00017 [0204.139] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x2) returned 0x1900010 [0204.139] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x7) returned 0x11050637 [0204.139] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x6) returned 0x18a0048 [0204.139] SaveDC (hdc=0xffffffff8c0106ab) returned 1 [0204.139] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6404054e [0204.139] GetClipRgn (hdc=0xffffffff8c0106ab, hrgn=0x6404054e) returned 0 [0204.139] SelectClipRgn (hdc=0xffffffff8c0106ab, hrgn=0x72040572) returned 2 [0204.139] DeleteObject (ho=0x6404054e) returned 1 [0204.139] DeleteObject (ho=0x72040572) returned 1 [0204.139] OffsetViewportOrgEx (in: hdc=0xffffffff8c0106ab, x=0, y=0, lppt=0x27773e8 | out: lppt=0x27773e8) returned 1 [0204.139] DrawThemeParentBackground () returned 0x0 [0204.140] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0204.140] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0204.140] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0204.140] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0204.140] GetSystemMetrics (nIndex=42) returned 0 [0204.140] CoTaskMemAlloc (cb=0x22) returned 0x89c710 [0204.140] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c710, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0204.140] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c710) returned 0xe [0204.140] CoTaskMemFree (pv=0x89c710) [0204.140] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0204.140] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x1) returned 0x1b00017 [0204.140] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x2) returned 0x1900010 [0204.140] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x7) returned 0x11050637 [0204.140] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x6) returned 0x18a0048 [0204.140] SaveDC (hdc=0xffffffff8c0106ab) returned 2 [0204.140] GetNearestColor (hdc=0xffffffff8c0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.140] CreateSolidBrush (color=0xf0f0f0) returned 0x3b100686 [0204.140] FillRect (hDC=0xffffffff8c0106ab, lprc=0x5dafe0, hbr=0x3b100686) returned 1 [0204.140] DeleteObject (ho=0x3b100686) returned 1 [0204.141] RestoreDC (hdc=0xffffffff8c0106ab, nSavedDC=-1) returned 1 [0204.141] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0204.141] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0204.141] GetSystemMetrics (nIndex=42) returned 0 [0204.141] CoTaskMemAlloc (cb=0x22) returned 0x89c710 [0204.141] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c710, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0204.141] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c710) returned 0xe [0204.141] CoTaskMemFree (pv=0x89c710) [0204.141] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0204.141] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x1) returned 0x1b00017 [0204.141] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x2) returned 0x1900010 [0204.141] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x7) returned 0x11050637 [0204.141] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x6) returned 0x18a0048 [0204.141] SaveDC (hdc=0xffffffff8c0106ab) returned 2 [0204.141] GetNearestColor (hdc=0xffffffff8c0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.141] CreateSolidBrush (color=0xf0f0f0) returned 0x3c100686 [0204.141] FillRect (hDC=0xffffffff8c0106ab, lprc=0x5daee0, hbr=0x3c100686) returned 1 [0204.141] DeleteObject (ho=0x3c100686) returned 1 [0204.141] RestoreDC (hdc=0xffffffff8c0106ab, nSavedDC=-1) returned 1 [0204.141] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0204.141] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0204.141] GetSystemMetrics (nIndex=42) returned 0 [0204.141] CoTaskMemAlloc (cb=0x22) returned 0x89c710 [0204.142] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89c710, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0204.142] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89c710) returned 0xe [0204.142] CoTaskMemFree (pv=0x89c710) [0204.142] RestoreDC (hdc=0xffffffff8c0106ab, nSavedDC=-1) returned 1 [0204.142] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.142] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8c0106ab) returned 0x0 [0204.142] IsAppThemed () returned 0x1 [0204.142] GetThemeAppProperties () returned 0x3 [0204.142] GetThemeAppProperties () returned 0x3 [0204.142] IsAppThemed () returned 0x1 [0204.142] GetThemeAppProperties () returned 0x3 [0204.142] GetThemeAppProperties () returned 0x3 [0204.142] IsThemePartDefined () returned 0x1 [0204.142] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0204.142] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.142] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0204.142] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3217f0) returned 0x0 [0204.142] GdipIsMatrixIdentity (matrix=0x1c3217f0, result=0x5dbca0) returned 0x0 [0204.142] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f290 [0204.142] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89f290) returned 0x0 [0204.142] LocalFree (hMem=0x89f290) returned 0x0 [0204.142] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f5d0 [0204.142] GdipGetMatrixElements (matrix=0x1c3217f0, matrixOut=0x89f5d0) returned 0x0 [0204.142] LocalFree (hMem=0x89f5d0) returned 0x0 [0204.142] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.142] GdipDeleteMatrix (matrix=0x1c3217f0) returned 0x0 [0204.143] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0204.143] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0204.143] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0204.143] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.143] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.143] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0204.143] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x1) returned 0x1b00017 [0204.143] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x2) returned 0x1900010 [0204.143] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x7) returned 0x11050637 [0204.143] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x6) returned 0x18a0048 [0204.143] SaveDC (hdc=0xffffffff8c0106ab) returned 1 [0204.143] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x73040572 [0204.143] GetClipRgn (hdc=0xffffffff8c0106ab, hrgn=0x73040572) returned 0 [0204.143] SelectClipRgn (hdc=0xffffffff8c0106ab, hrgn=0x6604054e) returned 2 [0204.143] DeleteObject (ho=0x73040572) returned 1 [0204.143] DeleteObject (ho=0x6604054e) returned 1 [0204.178] OffsetViewportOrgEx (in: hdc=0xffffffff8c0106ab, x=0, y=0, lppt=0x27780e8 | out: lppt=0x27780e8) returned 1 [0204.178] IsAppThemed () returned 0x1 [0204.179] GetThemeAppProperties () returned 0x3 [0204.179] GetThemeAppProperties () returned 0x3 [0204.179] DrawThemeBackground () returned 0x0 [0204.179] RestoreDC (hdc=0xffffffff8c0106ab, nSavedDC=-1) returned 1 [0204.179] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.179] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8c0106ab) returned 0x0 [0204.179] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0204.179] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.179] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0204.179] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0204.179] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dbc70) returned 0x0 [0204.179] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f4d0 [0204.179] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89f4d0) returned 0x0 [0204.179] LocalFree (hMem=0x89f4d0) returned 0x0 [0204.179] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef50 [0204.179] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89ef50) returned 0x0 [0204.179] LocalFree (hMem=0x89ef50) returned 0x0 [0204.179] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.179] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0204.179] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0204.179] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0204.179] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0204.179] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.180] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.180] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0204.180] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x1) returned 0x1b00017 [0204.180] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x2) returned 0x1900010 [0204.180] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x7) returned 0x11050637 [0204.180] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x6) returned 0x18a0048 [0204.180] SaveDC (hdc=0xffffffff8c0106ab) returned 1 [0204.180] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6704054e [0204.180] GetClipRgn (hdc=0xffffffff8c0106ab, hrgn=0x6704054e) returned 0 [0204.180] SelectClipRgn (hdc=0xffffffff8c0106ab, hrgn=0x74040572) returned 2 [0204.180] DeleteObject (ho=0x6704054e) returned 1 [0204.180] DeleteObject (ho=0x74040572) returned 1 [0204.180] OffsetViewportOrgEx (in: hdc=0xffffffff8c0106ab, x=0, y=0, lppt=0x27785e8 | out: lppt=0x27785e8) returned 1 [0204.180] IsAppThemed () returned 0x1 [0204.180] GetThemeAppProperties () returned 0x3 [0204.180] GetThemeAppProperties () returned 0x3 [0204.180] GetThemeBackgroundContentRect () returned 0x0 [0204.180] RestoreDC (hdc=0xffffffff8c0106ab, nSavedDC=-1) returned 1 [0204.180] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.180] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8c0106ab) returned 0x0 [0204.180] IsAppThemed () returned 0x1 [0204.181] GetThemeAppProperties () returned 0x3 [0204.181] GetThemeAppProperties () returned 0x3 [0204.181] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0204.181] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0204.181] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x1) returned 0x1b00017 [0204.181] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x2) returned 0x1900010 [0204.181] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x7) returned 0x11050637 [0204.181] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x6) returned 0x18a0048 [0204.181] SaveDC (hdc=0xffffffff8c0106ab) returned 1 [0204.181] GetTextAlign (hdc=0xffffffff8c0106ab) returned 0x0 [0204.181] GetTextColor (hdc=0xffffffff8c0106ab) returned 0x0 [0204.181] GetCurrentObject (hdc=0xffffffff8c0106ab, type=0x6) returned 0x18a0048 [0204.181] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0204.181] SelectObject (hdc=0xffffffff8c0106ab, h=0x290a0573) returned 0x18a0048 [0204.181] GetBkMode (hdc=0xffffffff8c0106ab) returned 2 [0204.181] SetBkMode (hdc=0xffffffff8c0106ab, mode=1) returned 2 [0204.181] DrawTextExW (in: hdc=0xffffffff8c0106ab, lpchText="Copy Personal ID", cchText=16, lprc=0x5db8c0, format=0x102415, lpdtp=0x2778b40 | out: lpchText="Copy Personal ID", lprc=0x5db8c0) returned 13 [0204.181] DrawTextExW (in: hdc=0xffffffff8c0106ab, lpchText="Copy Personal ID", cchText=16, lprc=0x5db970, format=0x102015, lpdtp=0x2778b40 | out: lpchText="Copy Personal ID", lprc=0x5db970) returned 13 [0204.182] RestoreDC (hdc=0xffffffff8c0106ab, nSavedDC=-1) returned 1 [0204.182] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.182] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8c0106ab) returned 0x0 [0204.182] GetFocus () returned 0x2021a [0204.182] IsAppThemed () returned 0x1 [0204.182] GetThemeAppProperties () returned 0x3 [0204.182] GetThemeAppProperties () returned 0x3 [0204.182] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0204.182] BitBlt (hdc=0x1010749, x=0, y=0, cx=296, cy=23, hdcSrc=0xffffffff8c0106ab, x1=0, y1=0, rop=0xcc0020) returned 1 [0204.182] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.182] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8c0106ab) returned 0x0 [0204.182] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0204.183] SelectObject (hdc=0xffffffff8c0106ab, h=0x185000f) returned 0x11050637 [0204.183] DeleteDC (hdc=0xffffffff8c0106ab) returned 1 [0204.183] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.183] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0204.183] EndPaint (hWnd=0xa018a, lpPaint=0x5dc628) returned 1 [0204.183] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.183] IsWindowUnicode (hWnd=0x5016e) returned 1 [0204.183] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.183] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.183] DispatchMessageW (lpMsg=0x5dd220) returned 0x1 [0204.183] BeginPaint (in: hWnd=0x5016e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0204.183] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0204.183] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffff8e0106ab [0204.183] SelectObject (hdc=0xffffffff8e0106ab, h=0x11050637) returned 0x185000f [0204.183] GdipCreateFromHDC (hdc=0xffffffff8e0106ab, graphics=0x5dc420) returned 0x0 [0204.184] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0204.184] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=211, height=13, combineMode=0x0) returned 0x0 [0204.184] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0204.184] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c321730) returned 0x0 [0204.184] GdipIsMatrixIdentity (matrix=0x1c321730, result=0x5dc5b0) returned 0x0 [0204.184] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f690 [0204.184] GdipGetMatrixElements (matrix=0x1c321730, matrixOut=0x89f690) returned 0x0 [0204.184] LocalFree (hMem=0x89f690) returned 0x0 [0204.184] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.184] GdipDeleteMatrix (matrix=0x1c321730) returned 0x0 [0204.184] GdipCreateRegion (region=0x5dc550) returned 0x0 [0204.184] GdipGetClip (graphics=0x1c3267f0, region=0x1c321770) returned 0x0 [0204.184] GdipIsInfiniteRegion (region=0x1c321770, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0204.184] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0204.184] GetWindowTextLengthW (hWnd=0x5016e) returned 34 [0204.184] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0204.184] GetSystemMetrics (nIndex=42) returned 0 [0204.184] CoTaskMemAlloc (cb=0x4a) returned 0x876180 [0204.184] GetWindowTextW (in: hWnd=0x5016e, lpString=0x876180, nMaxCount=35 | out: lpString="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq") returned 34 [0204.184] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0xd, wParam=0x23, lParam=0x876180) returned 0x22 [0204.184] CoTaskMemFree (pv=0x876180) [0204.184] GetClientRect (in: hWnd=0x5016e, lpRect=0x5dc5c0 | out: lpRect=0x5dc5c0) returned 1 [0204.185] GdipCreateRegion (region=0x5dc040) returned 0x0 [0204.185] GdipGetClip (graphics=0x1c3267f0, region=0x1c321830) returned 0x0 [0204.185] GdipCreateMatrix (matrix=0x5dc040) returned 0x0 [0204.185] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3218f0) returned 0x0 [0204.185] GdipIsMatrixIdentity (matrix=0x1c3218f0, result=0x5dc0a0) returned 0x0 [0204.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f4d0 [0204.185] GdipGetMatrixElements (matrix=0x1c3218f0, matrixOut=0x89f4d0) returned 0x0 [0204.185] LocalFree (hMem=0x89f4d0) returned 0x0 [0204.185] GdipCombineRegionRegion (region=0x1c321830, region2=0x1c321770, combineMode=0x1) returned 0x0 [0204.185] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f290 [0204.185] GdipGetMatrixElements (matrix=0x1c3218f0, matrixOut=0x89f290) returned 0x0 [0204.185] LocalFree (hMem=0x89f290) returned 0x0 [0204.185] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.185] GdipDeleteMatrix (matrix=0x1c3218f0) returned 0x0 [0204.185] GdipIsInfiniteRegion (region=0x1c321830, graphics=0x1c3267f0, result=0x5dc0f0) returned 0x0 [0204.185] GdipIsInfiniteRegion (region=0x1c321830, graphics=0x1c3267f0, result=0x5dc0b0) returned 0x0 [0204.185] GdipGetRegionHRgn (region=0x1c321830, graphics=0x1c3267f0, hRgn=0x5dc0b0) returned 0x0 [0204.185] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.185] GdipDeleteRegion (region=0x1c321830) returned 0x0 [0204.185] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc120) returned 0x0 [0204.185] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x1) returned 0x1b00017 [0204.186] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x2) returned 0x1900010 [0204.186] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x7) returned 0x11050637 [0204.186] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x6) returned 0x18a0048 [0204.186] SaveDC (hdc=0xffffffff8e0106ab) returned 1 [0204.186] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x75040572 [0204.186] GetClipRgn (hdc=0xffffffff8e0106ab, hrgn=0x75040572) returned 0 [0204.186] SelectClipRgn (hdc=0xffffffff8e0106ab, hrgn=0x6a04054e) returned 2 [0204.186] DeleteObject (ho=0x75040572) returned 1 [0204.186] DeleteObject (ho=0x6a04054e) returned 1 [0204.186] OffsetViewportOrgEx (in: hdc=0xffffffff8e0106ab, x=0, y=0, lppt=0x27793a8 | out: lppt=0x27793a8) returned 1 [0204.186] GetNearestColor (hdc=0xffffffff8e0106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.186] CreateSolidBrush (color=0xf0f0f0) returned 0x3d100686 [0204.186] FillRect (hDC=0xffffffff8e0106ab, lprc=0x5dc0f0, hbr=0x3d100686) returned 1 [0204.186] DeleteObject (ho=0x3d100686) returned 1 [0204.186] RestoreDC (hdc=0xffffffff8e0106ab, nSavedDC=-1) returned 1 [0204.186] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.187] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8e0106ab) returned 0x0 [0204.187] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffda50dbd) returned 0x0 [0204.187] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.187] GdipDeleteRegion (region=0x1c321770) returned 0x0 [0204.187] GetWindowTextLengthW (hWnd=0x5016e) returned 34 [0204.187] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0204.187] GetSystemMetrics (nIndex=42) returned 0 [0204.187] CoTaskMemAlloc (cb=0x4a) returned 0x8766c0 [0204.187] GetWindowTextW (in: hWnd=0x5016e, lpString=0x8766c0, nMaxCount=35 | out: lpString="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq") returned 34 [0204.187] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0xd, wParam=0x23, lParam=0x8766c0) returned 0x22 [0204.187] CoTaskMemFree (pv=0x8766c0) [0204.187] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc180) returned 0x0 [0204.187] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x1) returned 0x1b00017 [0204.187] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x2) returned 0x1900010 [0204.187] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x7) returned 0x11050637 [0204.187] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x6) returned 0x18a0048 [0204.187] SaveDC (hdc=0xffffffff8e0106ab) returned 1 [0204.187] GetNearestColor (hdc=0xffffffff8e0106ab, color=0x0) returned 0x0 [0204.187] RestoreDC (hdc=0xffffffff8e0106ab, nSavedDC=-1) returned 1 [0204.187] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.188] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8e0106ab) returned 0x0 [0204.188] AdjustWindowRectEx (in: lpRect=0x5dc040, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dc040) returned 1 [0204.188] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x5dc0c0, fWinIni=0x0 | out: pvParam=0x5dc0c0) returned 1 [0204.188] SendMessageW (hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.188] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.188] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dc060) returned 0x0 [0204.188] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc040) returned 0x0 [0204.188] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x1) returned 0x1b00017 [0204.188] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x2) returned 0x1900010 [0204.188] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x7) returned 0x11050637 [0204.188] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x6) returned 0x18a0048 [0204.188] SaveDC (hdc=0xffffffff8e0106ab) returned 1 [0204.188] GetTextAlign (hdc=0xffffffff8e0106ab) returned 0x0 [0204.188] GetTextColor (hdc=0xffffffff8e0106ab) returned 0x0 [0204.188] GetCurrentObject (hdc=0xffffffff8e0106ab, type=0x6) returned 0x18a0048 [0204.188] GetObjectW (in: h=0x18a0048, c=92, pv=0x5dbab0 | out: pv=0x5dbab0) returned 92 [0204.188] SelectObject (hdc=0xffffffff8e0106ab, h=0x290a0573) returned 0x18a0048 [0204.189] GetBkMode (hdc=0xffffffff8e0106ab) returned 2 [0204.189] SetBkMode (hdc=0xffffffff8e0106ab, mode=1) returned 2 [0204.189] DrawTextExW (in: hdc=0xffffffff8e0106ab, lpchText="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq", cchText=34, lprc=0x5dbbf0, format=0x100000, lpdtp=0x2779aa8 | out: lpchText="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq", lprc=0x5dbbf0) returned 13 [0204.190] RestoreDC (hdc=0xffffffff8e0106ab, nSavedDC=-1) returned 1 [0204.190] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.190] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8e0106ab) returned 0x0 [0204.190] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0204.190] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=211, cy=13, hdcSrc=0xffffffff8e0106ab, x1=0, y1=0, rop=0xcc0020) returned 1 [0204.193] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.193] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff8e0106ab) returned 0x0 [0204.193] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0204.193] SelectObject (hdc=0xffffffff8e0106ab, h=0x185000f) returned 0x11050637 [0204.193] DeleteDC (hdc=0xffffffff8e0106ab) returned 1 [0204.194] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.194] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0204.194] EndPaint (hWnd=0x5016e, lpPaint=0x5dc628) returned 1 [0204.194] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.194] IsWindowUnicode (hWnd=0xb0030) returned 1 [0204.194] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.194] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.194] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.194] BeginPaint (in: hWnd=0xb0030, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x10105e0 [0204.194] SelectPalette (hdc=0x10105e0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0204.194] CreateCompatibleDC (hdc=0x10105e0) returned 0xffffffff900106ab [0204.194] SelectObject (hdc=0xffffffff900106ab, h=0x11050637) returned 0x185000f [0204.194] GdipCreateFromHDC (hdc=0xffffffff900106ab, graphics=0x5dc420) returned 0x0 [0204.194] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0204.195] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=83, height=13, combineMode=0x0) returned 0x0 [0204.195] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0204.195] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x235ec20) returned 0x0 [0204.195] GdipIsMatrixIdentity (matrix=0x235ec20, result=0x5dc5b0) returned 0x0 [0204.195] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ead0 [0204.195] GdipGetMatrixElements (matrix=0x235ec20, matrixOut=0x89ead0) returned 0x0 [0204.195] LocalFree (hMem=0x89ead0) returned 0x0 [0204.195] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.195] GdipDeleteMatrix (matrix=0x235ec20) returned 0x0 [0204.195] GdipCreateRegion (region=0x5dc550) returned 0x0 [0204.195] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.195] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0204.195] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0204.195] GetWindowTextLengthW (hWnd=0xb0030) returned 16 [0204.195] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0204.195] GetSystemMetrics (nIndex=42) returned 0 [0204.195] CoTaskMemAlloc (cb=0x26) returned 0x89c710 [0204.195] GetWindowTextW (in: hWnd=0xb0030, lpString=0x89c710, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0204.195] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0xd, wParam=0x11, lParam=0x89c710) returned 0x10 [0204.195] CoTaskMemFree (pv=0x89c710) [0204.195] GetClientRect (in: hWnd=0xb0030, lpRect=0x5dc5c0 | out: lpRect=0x5dc5c0) returned 1 [0204.196] GdipCreateRegion (region=0x5dc040) returned 0x0 [0204.196] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0204.196] GdipCreateMatrix (matrix=0x5dc040) returned 0x0 [0204.196] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3218b0) returned 0x0 [0204.196] GdipIsMatrixIdentity (matrix=0x1c3218b0, result=0x5dc0a0) returned 0x0 [0204.196] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f1d0 [0204.196] GdipGetMatrixElements (matrix=0x1c3218b0, matrixOut=0x89f1d0) returned 0x0 [0204.196] LocalFree (hMem=0x89f1d0) returned 0x0 [0204.196] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0204.196] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f1d0 [0204.196] GdipGetMatrixElements (matrix=0x1c3218b0, matrixOut=0x89f1d0) returned 0x0 [0204.196] LocalFree (hMem=0x89f1d0) returned 0x0 [0204.196] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.196] GdipDeleteMatrix (matrix=0x1c3218b0) returned 0x0 [0204.196] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0f0) returned 0x0 [0204.196] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0b0) returned 0x0 [0204.196] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x5dc0b0) returned 0x0 [0204.196] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.196] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0204.196] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc120) returned 0x0 [0204.197] GetCurrentObject (hdc=0xffffffff900106ab, type=0x1) returned 0x1b00017 [0204.197] GetCurrentObject (hdc=0xffffffff900106ab, type=0x2) returned 0x1900010 [0204.197] GetCurrentObject (hdc=0xffffffff900106ab, type=0x7) returned 0x11050637 [0204.197] GetCurrentObject (hdc=0xffffffff900106ab, type=0x6) returned 0x18a0048 [0204.197] SaveDC (hdc=0xffffffff900106ab) returned 1 [0204.197] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b04054e [0204.197] GetClipRgn (hdc=0xffffffff900106ab, hrgn=0x6b04054e) returned 0 [0204.197] SelectClipRgn (hdc=0xffffffff900106ab, hrgn=0x77040572) returned 2 [0204.197] DeleteObject (ho=0x6b04054e) returned 1 [0204.197] DeleteObject (ho=0x77040572) returned 1 [0204.197] OffsetViewportOrgEx (in: hdc=0xffffffff900106ab, x=0, y=0, lppt=0x277a1f0 | out: lppt=0x277a1f0) returned 1 [0204.197] GetNearestColor (hdc=0xffffffff900106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.197] CreateSolidBrush (color=0xf0f0f0) returned 0x3e100686 [0204.197] FillRect (hDC=0xffffffff900106ab, lprc=0x5dc0f0, hbr=0x3e100686) returned 1 [0204.197] DeleteObject (ho=0x3e100686) returned 1 [0204.198] RestoreDC (hdc=0xffffffff900106ab, nSavedDC=-1) returned 1 [0204.198] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.198] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff900106ab) returned 0x0 [0204.198] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffda30dbd) returned 0x0 [0204.198] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.198] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.198] GetWindowTextLengthW (hWnd=0xb0030) returned 16 [0204.198] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0204.198] GetSystemMetrics (nIndex=42) returned 0 [0204.198] CoTaskMemAlloc (cb=0x26) returned 0x89c710 [0204.198] GetWindowTextW (in: hWnd=0xb0030, lpString=0x89c710, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0204.198] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0xd, wParam=0x11, lParam=0x89c710) returned 0x10 [0204.198] CoTaskMemFree (pv=0x89c710) [0204.198] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc180) returned 0x0 [0204.198] GetCurrentObject (hdc=0xffffffff900106ab, type=0x1) returned 0x1b00017 [0204.198] GetCurrentObject (hdc=0xffffffff900106ab, type=0x2) returned 0x1900010 [0204.198] GetCurrentObject (hdc=0xffffffff900106ab, type=0x7) returned 0x11050637 [0204.198] GetCurrentObject (hdc=0xffffffff900106ab, type=0x6) returned 0x18a0048 [0204.198] SaveDC (hdc=0xffffffff900106ab) returned 1 [0204.199] GetNearestColor (hdc=0xffffffff900106ab, color=0x0) returned 0x0 [0204.199] RestoreDC (hdc=0xffffffff900106ab, nSavedDC=-1) returned 1 [0204.199] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.199] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff900106ab) returned 0x0 [0204.199] AdjustWindowRectEx (in: lpRect=0x5dc040, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dc040) returned 1 [0204.199] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x5dc0c0, fWinIni=0x0 | out: pvParam=0x5dc0c0) returned 1 [0204.199] SendMessageW (hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.199] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.199] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dc060) returned 0x0 [0204.199] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc040) returned 0x0 [0204.199] GetCurrentObject (hdc=0xffffffff900106ab, type=0x1) returned 0x1b00017 [0204.199] GetCurrentObject (hdc=0xffffffff900106ab, type=0x2) returned 0x1900010 [0204.199] GetCurrentObject (hdc=0xffffffff900106ab, type=0x7) returned 0x11050637 [0204.199] GetCurrentObject (hdc=0xffffffff900106ab, type=0x6) returned 0x18a0048 [0204.199] SaveDC (hdc=0xffffffff900106ab) returned 1 [0204.200] GetTextAlign (hdc=0xffffffff900106ab) returned 0x0 [0204.200] GetTextColor (hdc=0xffffffff900106ab) returned 0x0 [0204.200] GetCurrentObject (hdc=0xffffffff900106ab, type=0x6) returned 0x18a0048 [0204.200] GetObjectW (in: h=0x18a0048, c=92, pv=0x5dbab0 | out: pv=0x5dbab0) returned 92 [0204.200] SelectObject (hdc=0xffffffff900106ab, h=0x290a0573) returned 0x18a0048 [0204.200] GetBkMode (hdc=0xffffffff900106ab) returned 2 [0204.200] SetBkMode (hdc=0xffffffff900106ab, mode=1) returned 2 [0204.200] DrawTextExW (in: hdc=0xffffffff900106ab, lpchText="Bitcoin Address:", cchText=16, lprc=0x5dbbf0, format=0x100000, lpdtp=0x277a8d0 | out: lpchText="Bitcoin Address:", lprc=0x5dbbf0) returned 13 [0204.200] RestoreDC (hdc=0xffffffff900106ab, nSavedDC=-1) returned 1 [0204.200] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.200] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff900106ab) returned 0x0 [0204.200] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0204.200] BitBlt (hdc=0x10105e0, x=0, y=0, cx=83, cy=13, hdcSrc=0xffffffff900106ab, x1=0, y1=0, rop=0xcc0020) returned 1 [0204.200] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.200] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff900106ab) returned 0x0 [0204.201] SelectPalette (hdc=0x10105e0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0204.201] SelectObject (hdc=0xffffffff900106ab, h=0x185000f) returned 0x11050637 [0204.201] DeleteDC (hdc=0xffffffff900106ab) returned 1 [0204.201] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.201] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0204.201] EndPaint (hWnd=0xb0030, lpPaint=0x5dc628) returned 1 [0204.201] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.201] IsWindowUnicode (hWnd=0x7002e) returned 1 [0204.201] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.201] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.201] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.201] BeginPaint (in: hWnd=0x7002e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x1010749 [0204.201] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0204.201] CreateCompatibleDC (hdc=0x1010749) returned 0xffffffff920106ab [0204.201] SelectObject (hdc=0xffffffff920106ab, h=0x11050637) returned 0x185000f [0204.201] GdipCreateFromHDC (hdc=0xffffffff920106ab, graphics=0x5dc420) returned 0x0 [0204.202] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0204.202] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=161, height=13, combineMode=0x0) returned 0x0 [0204.202] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0204.202] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327050) returned 0x0 [0204.202] GdipIsMatrixIdentity (matrix=0x1c327050, result=0x5dc5b0) returned 0x0 [0204.202] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee10 [0204.202] GdipGetMatrixElements (matrix=0x1c327050, matrixOut=0x89ee10) returned 0x0 [0204.202] LocalFree (hMem=0x89ee10) returned 0x0 [0204.202] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.202] GdipDeleteMatrix (matrix=0x1c327050) returned 0x0 [0204.202] GdipCreateRegion (region=0x5dc550) returned 0x0 [0204.202] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.202] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0204.202] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0204.202] GetWindowTextLengthW (hWnd=0x7002e) returned 24 [0204.202] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0204.202] GetSystemMetrics (nIndex=42) returned 0 [0204.202] CoTaskMemAlloc (cb=0x36) returned 0x89ed50 [0204.202] GetWindowTextW (in: hWnd=0x7002e, lpString=0x89ed50, nMaxCount=25 | out: lpString="D2CA4DEF1F8BFBFF000506E3") returned 24 [0204.202] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xd, wParam=0x19, lParam=0x89ed50) returned 0x18 [0204.202] CoTaskMemFree (pv=0x89ed50) [0204.202] GetClientRect (in: hWnd=0x7002e, lpRect=0x5dc5c0 | out: lpRect=0x5dc5c0) returned 1 [0204.203] GdipCreateRegion (region=0x5dc040) returned 0x0 [0204.203] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0204.203] GdipCreateMatrix (matrix=0x5dc040) returned 0x0 [0204.203] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327210) returned 0x0 [0204.203] GdipIsMatrixIdentity (matrix=0x1c327210, result=0x5dc0a0) returned 0x0 [0204.203] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb10 [0204.203] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89eb10) returned 0x0 [0204.203] LocalFree (hMem=0x89eb10) returned 0x0 [0204.203] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0204.203] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e850 [0204.203] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89e850) returned 0x0 [0204.203] LocalFree (hMem=0x89e850) returned 0x0 [0204.203] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.203] GdipDeleteMatrix (matrix=0x1c327210) returned 0x0 [0204.203] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0f0) returned 0x0 [0204.203] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0b0) returned 0x0 [0204.203] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x5dc0b0) returned 0x0 [0204.203] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.203] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0204.203] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc120) returned 0x0 [0204.203] GetCurrentObject (hdc=0xffffffff920106ab, type=0x1) returned 0x1b00017 [0204.204] GetCurrentObject (hdc=0xffffffff920106ab, type=0x2) returned 0x1900010 [0204.204] GetCurrentObject (hdc=0xffffffff920106ab, type=0x7) returned 0x11050637 [0204.204] GetCurrentObject (hdc=0xffffffff920106ab, type=0x6) returned 0x18a0048 [0204.204] SaveDC (hdc=0xffffffff920106ab) returned 1 [0204.204] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x78040572 [0204.204] GetClipRgn (hdc=0xffffffff920106ab, hrgn=0x78040572) returned 0 [0204.204] SelectClipRgn (hdc=0xffffffff920106ab, hrgn=0x6d04054e) returned 2 [0204.204] DeleteObject (ho=0x78040572) returned 1 [0204.204] DeleteObject (ho=0x6d04054e) returned 1 [0204.204] OffsetViewportOrgEx (in: hdc=0xffffffff920106ab, x=0, y=0, lppt=0x277aee0 | out: lppt=0x277aee0) returned 1 [0204.204] GetNearestColor (hdc=0xffffffff920106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.204] CreateSolidBrush (color=0xf0f0f0) returned 0x3f100686 [0204.204] FillRect (hDC=0xffffffff920106ab, lprc=0x5dc0f0, hbr=0x3f100686) returned 1 [0204.204] DeleteObject (ho=0x3f100686) returned 1 [0204.204] RestoreDC (hdc=0xffffffff920106ab, nSavedDC=-1) returned 1 [0204.205] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.205] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff920106ab) returned 0x0 [0204.205] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffda10dbd) returned 0x0 [0204.205] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.205] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.205] GetWindowTextLengthW (hWnd=0x7002e) returned 24 [0204.205] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0204.205] GetSystemMetrics (nIndex=42) returned 0 [0204.205] CoTaskMemAlloc (cb=0x36) returned 0x89ee50 [0204.205] GetWindowTextW (in: hWnd=0x7002e, lpString=0x89ee50, nMaxCount=25 | out: lpString="D2CA4DEF1F8BFBFF000506E3") returned 24 [0204.205] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xd, wParam=0x19, lParam=0x89ee50) returned 0x18 [0204.205] CoTaskMemFree (pv=0x89ee50) [0204.205] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc180) returned 0x0 [0204.205] GetCurrentObject (hdc=0xffffffff920106ab, type=0x1) returned 0x1b00017 [0204.205] GetCurrentObject (hdc=0xffffffff920106ab, type=0x2) returned 0x1900010 [0204.205] GetCurrentObject (hdc=0xffffffff920106ab, type=0x7) returned 0x11050637 [0204.205] GetCurrentObject (hdc=0xffffffff920106ab, type=0x6) returned 0x18a0048 [0204.205] SaveDC (hdc=0xffffffff920106ab) returned 1 [0204.206] GetNearestColor (hdc=0xffffffff920106ab, color=0x0) returned 0x0 [0204.206] RestoreDC (hdc=0xffffffff920106ab, nSavedDC=-1) returned 1 [0204.206] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.206] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff920106ab) returned 0x0 [0204.206] AdjustWindowRectEx (in: lpRect=0x5dc040, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dc040) returned 1 [0204.206] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dc060) returned 0x0 [0204.206] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc040) returned 0x0 [0204.206] GetCurrentObject (hdc=0xffffffff920106ab, type=0x1) returned 0x1b00017 [0204.206] GetCurrentObject (hdc=0xffffffff920106ab, type=0x2) returned 0x1900010 [0204.206] GetCurrentObject (hdc=0xffffffff920106ab, type=0x7) returned 0x11050637 [0204.206] GetCurrentObject (hdc=0xffffffff920106ab, type=0x6) returned 0x18a0048 [0204.206] SaveDC (hdc=0xffffffff920106ab) returned 1 [0204.206] GetTextAlign (hdc=0xffffffff920106ab) returned 0x0 [0204.206] GetTextColor (hdc=0xffffffff920106ab) returned 0x0 [0204.206] GetCurrentObject (hdc=0xffffffff920106ab, type=0x6) returned 0x18a0048 [0204.206] GetObjectW (in: h=0x18a0048, c=92, pv=0x5dbab0 | out: pv=0x5dbab0) returned 92 [0204.207] SelectObject (hdc=0xffffffff920106ab, h=0x290a0573) returned 0x18a0048 [0204.207] GetBkMode (hdc=0xffffffff920106ab) returned 2 [0204.207] SetBkMode (hdc=0xffffffff920106ab, mode=1) returned 2 [0204.207] DrawTextExW (in: hdc=0xffffffff920106ab, lpchText="D2CA4DEF1F8BFBFF000506E3", cchText=24, lprc=0x5dbbf0, format=0x100000, lpdtp=0x277b5d0 | out: lpchText="D2CA4DEF1F8BFBFF000506E3", lprc=0x5dbbf0) returned 13 [0204.207] RestoreDC (hdc=0xffffffff920106ab, nSavedDC=-1) returned 1 [0204.207] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.207] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff920106ab) returned 0x0 [0204.207] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0204.207] BitBlt (hdc=0x1010749, x=0, y=0, cx=161, cy=13, hdcSrc=0xffffffff920106ab, x1=0, y1=0, rop=0xcc0020) returned 1 [0204.207] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.207] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff920106ab) returned 0x0 [0204.208] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0204.208] SelectObject (hdc=0xffffffff920106ab, h=0x185000f) returned 0x11050637 [0204.208] DeleteDC (hdc=0xffffffff920106ab) returned 1 [0204.208] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.208] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0204.208] EndPaint (hWnd=0x7002e, lpPaint=0x5dc628) returned 1 [0204.208] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.208] IsWindowUnicode (hWnd=0x40148) returned 1 [0204.208] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.208] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.208] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.208] BeginPaint (in: hWnd=0x40148, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0204.208] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0204.208] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffff940106ab [0204.208] SelectObject (hdc=0xffffffff940106ab, h=0x11050637) returned 0x185000f [0204.208] GdipCreateFromHDC (hdc=0xffffffff940106ab, graphics=0x5dc420) returned 0x0 [0204.209] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0204.209] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=65, height=13, combineMode=0x0) returned 0x0 [0204.209] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0204.209] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e50) returned 0x0 [0204.209] GdipIsMatrixIdentity (matrix=0x1c326e50, result=0x5dc5b0) returned 0x0 [0204.209] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f590 [0204.209] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89f590) returned 0x0 [0204.209] LocalFree (hMem=0x89f590) returned 0x0 [0204.209] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.209] GdipDeleteMatrix (matrix=0x1c326e50) returned 0x0 [0204.209] GdipCreateRegion (region=0x5dc550) returned 0x0 [0204.209] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.209] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0204.209] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0204.209] GetWindowTextLengthW (hWnd=0x40148) returned 12 [0204.209] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0204.209] GetSystemMetrics (nIndex=42) returned 0 [0204.209] CoTaskMemAlloc (cb=0x1e) returned 0x89c710 [0204.209] GetWindowTextW (in: hWnd=0x40148, lpString=0x89c710, nMaxCount=13 | out: lpString="Personal ID:") returned 12 [0204.209] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0xd, wParam=0xd, lParam=0x89c710) returned 0xc [0204.209] CoTaskMemFree (pv=0x89c710) [0204.209] GetClientRect (in: hWnd=0x40148, lpRect=0x5dc5c0 | out: lpRect=0x5dc5c0) returned 1 [0204.209] GdipCreateRegion (region=0x5dc040) returned 0x0 [0204.210] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0204.210] GdipCreateMatrix (matrix=0x5dc040) returned 0x0 [0204.210] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e10) returned 0x0 [0204.210] GdipIsMatrixIdentity (matrix=0x1c326e10, result=0x5dc0a0) returned 0x0 [0204.210] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec90 [0204.210] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89ec90) returned 0x0 [0204.210] LocalFree (hMem=0x89ec90) returned 0x0 [0204.210] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0204.210] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f550 [0204.210] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89f550) returned 0x0 [0204.210] LocalFree (hMem=0x89f550) returned 0x0 [0204.210] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.210] GdipDeleteMatrix (matrix=0x1c326e10) returned 0x0 [0204.210] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0f0) returned 0x0 [0204.210] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0b0) returned 0x0 [0204.210] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x5dc0b0) returned 0x0 [0204.210] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.210] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0204.210] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc120) returned 0x0 [0204.210] GetCurrentObject (hdc=0xffffffff940106ab, type=0x1) returned 0x1b00017 [0204.210] GetCurrentObject (hdc=0xffffffff940106ab, type=0x2) returned 0x1900010 [0204.210] GetCurrentObject (hdc=0xffffffff940106ab, type=0x7) returned 0x11050637 [0204.210] GetCurrentObject (hdc=0xffffffff940106ab, type=0x6) returned 0x18a0048 [0204.210] SaveDC (hdc=0xffffffff940106ab) returned 1 [0204.210] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e04054e [0204.210] GetClipRgn (hdc=0xffffffff940106ab, hrgn=0x6e04054e) returned 0 [0204.210] SelectClipRgn (hdc=0xffffffff940106ab, hrgn=0x7a040572) returned 2 [0204.211] DeleteObject (ho=0x6e04054e) returned 1 [0204.211] DeleteObject (ho=0x7a040572) returned 1 [0204.211] OffsetViewportOrgEx (in: hdc=0xffffffff940106ab, x=0, y=0, lppt=0x277bd10 | out: lppt=0x277bd10) returned 1 [0204.211] GetNearestColor (hdc=0xffffffff940106ab, color=0xf0f0f0) returned 0xf0f0f0 [0204.211] CreateSolidBrush (color=0xf0f0f0) returned 0x40100686 [0204.211] FillRect (hDC=0xffffffff940106ab, lprc=0x5dc0f0, hbr=0x40100686) returned 1 [0204.211] DeleteObject (ho=0x40100686) returned 1 [0204.211] RestoreDC (hdc=0xffffffff940106ab, nSavedDC=-1) returned 1 [0204.211] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.211] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff940106ab) returned 0x0 [0204.211] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd9f0dbd) returned 0x0 [0204.211] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.211] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.211] GetWindowTextLengthW (hWnd=0x40148) returned 12 [0204.211] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0204.211] GetSystemMetrics (nIndex=42) returned 0 [0204.211] CoTaskMemAlloc (cb=0x1e) returned 0x89c710 [0204.211] GetWindowTextW (in: hWnd=0x40148, lpString=0x89c710, nMaxCount=13 | out: lpString="Personal ID:") returned 12 [0204.211] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0xd, wParam=0xd, lParam=0x89c710) returned 0xc [0204.211] CoTaskMemFree (pv=0x89c710) [0204.211] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc180) returned 0x0 [0204.212] GetCurrentObject (hdc=0xffffffff940106ab, type=0x1) returned 0x1b00017 [0204.212] GetCurrentObject (hdc=0xffffffff940106ab, type=0x2) returned 0x1900010 [0204.212] GetCurrentObject (hdc=0xffffffff940106ab, type=0x7) returned 0x11050637 [0204.212] GetCurrentObject (hdc=0xffffffff940106ab, type=0x6) returned 0x18a0048 [0204.212] SaveDC (hdc=0xffffffff940106ab) returned 1 [0204.212] GetNearestColor (hdc=0xffffffff940106ab, color=0x0) returned 0x0 [0204.212] RestoreDC (hdc=0xffffffff940106ab, nSavedDC=-1) returned 1 [0204.212] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.212] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff940106ab) returned 0x0 [0204.212] AdjustWindowRectEx (in: lpRect=0x5dc040, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dc040) returned 1 [0204.212] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x5dc0c0, fWinIni=0x0 | out: pvParam=0x5dc0c0) returned 1 [0204.212] SendMessageW (hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.212] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0204.212] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dc060) returned 0x0 [0204.212] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc040) returned 0x0 [0204.213] GetCurrentObject (hdc=0xffffffff940106ab, type=0x1) returned 0x1b00017 [0204.213] GetCurrentObject (hdc=0xffffffff940106ab, type=0x2) returned 0x1900010 [0204.213] GetCurrentObject (hdc=0xffffffff940106ab, type=0x7) returned 0x11050637 [0204.213] GetCurrentObject (hdc=0xffffffff940106ab, type=0x6) returned 0x18a0048 [0204.213] SaveDC (hdc=0xffffffff940106ab) returned 1 [0204.213] GetTextAlign (hdc=0xffffffff940106ab) returned 0x0 [0204.213] GetTextColor (hdc=0xffffffff940106ab) returned 0x0 [0204.213] GetCurrentObject (hdc=0xffffffff940106ab, type=0x6) returned 0x18a0048 [0204.213] GetObjectW (in: h=0x18a0048, c=92, pv=0x5dbab0 | out: pv=0x5dbab0) returned 92 [0204.213] SelectObject (hdc=0xffffffff940106ab, h=0x290a0573) returned 0x18a0048 [0204.213] GetBkMode (hdc=0xffffffff940106ab) returned 2 [0204.213] SetBkMode (hdc=0xffffffff940106ab, mode=1) returned 2 [0204.213] DrawTextExW (in: hdc=0xffffffff940106ab, lpchText="Personal ID:", cchText=12, lprc=0x5dbbf0, format=0x100000, lpdtp=0x277c3e8 | out: lpchText="Personal ID:", lprc=0x5dbbf0) returned 13 [0204.214] RestoreDC (hdc=0xffffffff940106ab, nSavedDC=-1) returned 1 [0204.214] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.214] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff940106ab) returned 0x0 [0204.214] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0204.214] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=65, cy=13, hdcSrc=0xffffffff940106ab, x1=0, y1=0, rop=0xcc0020) returned 1 [0204.214] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.214] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff940106ab) returned 0x0 [0204.214] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0204.214] SelectObject (hdc=0xffffffff940106ab, h=0x185000f) returned 0x11050637 [0204.214] DeleteDC (hdc=0xffffffff940106ab) returned 1 [0204.214] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.214] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0204.214] EndPaint (hWnd=0x40148, lpPaint=0x5dc628) returned 1 [0204.214] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.214] IsWindowUnicode (hWnd=0x50208) returned 1 [0204.214] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.214] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.214] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.215] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0204.215] SendMessageW (hWnd=0x50208, Msg=0x2111, wParam=0x4000208, lParam=0x50208) returned 0x0 [0204.215] SendMessageW (hWnd=0x50208, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0204.215] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0204.286] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.286] IsWindowUnicode (hWnd=0x20160) returned 1 [0204.286] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.287] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.287] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.287] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0204.288] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0204.288] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0204.289] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0204.289] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.289] IsWindowUnicode (hWnd=0x20230) returned 1 [0204.289] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.289] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.289] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.289] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.289] IsWindowUnicode (hWnd=0x2021e) returned 1 [0204.289] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.289] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.289] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.289] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.289] IsWindowUnicode (hWnd=0x2021e) returned 1 [0204.290] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.290] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.290] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.290] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2a1, wParam=0x0, lParam=0x1500a9) returned 0x0 [0204.291] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0204.291] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0204.291] WaitMessage () returned 1 [0204.330] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.331] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1590163) returned 0x1 [0204.331] IsWindowUnicode (hWnd=0x2021e) returned 1 [0204.331] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.331] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1590163) returned 0x1 [0204.331] GetDlgItem (hDlg=0x20160, nIDDlgItem=0) returned 0x0 [0204.331] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x210, wParam=0x201, lParam=0xd700f8) returned 0x0 [0204.331] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0204.331] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0204.331] SetCursor (hCursor=0x10003) returned 0x10003 [0204.331] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.331] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.331] GetKeyState (nVirtKey=1) returned -127 [0204.331] GetKeyState (nVirtKey=2) returned 0 [0204.331] GetKeyState (nVirtKey=4) returned 0 [0204.331] GetKeyState (nVirtKey=5) returned 0 [0204.331] GetKeyState (nVirtKey=6) returned 0 [0204.331] IsWindowVisible (hWnd=0x2021e) returned 1 [0204.332] IsWindowEnabled (hWnd=0x2021e) returned 1 [0204.332] SetFocus (hWnd=0x2021e) returned 0x2021a [0204.332] GetFocus () returned 0x2021e [0204.332] IsChild (hWndParent=0x20160, hWnd=0x2021e) returned 1 [0204.332] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x8, wParam=0x2021e, lParam=0x0) returned 0x0 [0204.332] SendMessageW (hWnd=0x2021a, Msg=0x2111, wParam=0x200021a, lParam=0x2021a) returned 0x0 [0204.332] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0204.333] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0204.333] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0204.334] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0204.334] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x7, wParam=0x2021a, lParam=0x0) returned 0x0 [0204.334] GetStockObject (i=5) returned 0x1900015 [0204.334] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0204.334] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xd, wParam=0x16, lParam=0x89f510) returned 0x15 [0204.334] GetDlgItem (hDlg=0x20160, nIDDlgItem=131614) returned 0x2021e [0204.334] SendMessageW (hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5dbcf0) returned 0x0 [0204.334] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5dbcf0) returned 0x0 [0204.334] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0204.334] GetFocus () returned 0x2021e [0204.334] GetFocus () returned 0x2021e [0204.334] GetFocus () returned 0x2021e [0204.334] GetKeyState (nVirtKey=1) returned -127 [0204.334] GetKeyState (nVirtKey=2) returned 0 [0204.334] GetKeyState (nVirtKey=4) returned 0 [0204.334] GetKeyState (nVirtKey=5) returned 0 [0204.334] GetKeyState (nVirtKey=6) returned 0 [0204.334] GetCapture () returned 0x0 [0204.334] SetCapture (hWnd=0x2021e) returned 0x0 [0204.335] GetKeyState (nVirtKey=1) returned -127 [0204.335] GetKeyState (nVirtKey=2) returned 0 [0204.335] GetKeyState (nVirtKey=4) returned 0 [0204.335] GetKeyState (nVirtKey=5) returned 0 [0204.335] GetKeyState (nVirtKey=6) returned 0 [0204.335] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0204.335] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc870, bErase=0) returned 1 [0204.335] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.335] IsWindowUnicode (hWnd=0x2021e) returned 1 [0204.335] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0204.335] TranslateMessage (lpMsg=0x5dd220) returned 0 [0204.335] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0204.335] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x277c5a8, cPoints=0x1 | out: lpPoints=0x277c5a8) returned 21233850 [0204.335] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0204.335] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc7c0, bErase=0) returned 1 [0204.335] UpdateWindow (hWnd=0x2021e) returned 1 [0204.335] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dbdd8 | out: lpPaint=0x5dbdd8) returned 0x1010749 [0204.335] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0204.335] CreateCompatibleDC (hdc=0x1010749) returned 0x43010708 [0204.335] SelectObject (hdc=0x43010708, h=0x11050637) returned 0x185000f [0204.335] GdipCreateFromHDC (hdc=0x43010708, graphics=0x5dbbe0) returned 0x0 [0204.336] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0204.336] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0204.336] GdipCreateMatrix (matrix=0x5dbd10) returned 0x0 [0204.336] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f90) returned 0x0 [0204.336] GdipIsMatrixIdentity (matrix=0x1c326f90, result=0x5dbd70) returned 0x0 [0204.336] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f3d0 [0204.336] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89f3d0) returned 0x0 [0204.336] LocalFree (hMem=0x89f3d0) returned 0x0 [0204.336] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.336] GdipDeleteMatrix (matrix=0x1c326f90) returned 0x0 [0204.336] GdipCreateRegion (region=0x5dbd10) returned 0x0 [0204.336] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.336] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbd40) returned 0x0 [0204.336] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dbe10) returned 0x0 [0204.336] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd9d0dbd) returned 0x0 [0204.336] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.336] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.337] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db200) returned 0x0 [0204.337] GetCurrentObject (hdc=0x43010708, type=0x1) returned 0x1b00017 [0204.337] GetCurrentObject (hdc=0x43010708, type=0x2) returned 0x1900010 [0204.337] GetCurrentObject (hdc=0x43010708, type=0x7) returned 0x11050637 [0204.337] GetCurrentObject (hdc=0x43010708, type=0x6) returned 0x18a0048 [0204.337] SaveDC (hdc=0x43010708) returned 1 [0204.337] GetNearestColor (hdc=0x43010708, color=0xf0f0f0) returned 0xf0f0f0 [0204.337] GetNearestColor (hdc=0x43010708, color=0xa0a0a0) returned 0xa0a0a0 [0204.337] GetNearestColor (hdc=0x43010708, color=0x696969) returned 0x696969 [0204.338] GetNearestColor (hdc=0x43010708, color=0xa0a0a0) returned 0xa0a0a0 [0204.338] GetNearestColor (hdc=0x43010708, color=0x0) returned 0x0 [0204.338] GetNearestColor (hdc=0x43010708, color=0xffffff) returned 0xffffff [0204.338] GetNearestColor (hdc=0x43010708, color=0xe5e5e5) returned 0xe5e5e5 [0204.338] GetNearestColor (hdc=0x43010708, color=0xd8d8d8) returned 0xd8d8d8 [0204.338] GetNearestColor (hdc=0x43010708, color=0x0) returned 0x0 [0204.338] RestoreDC (hdc=0x43010708, nSavedDC=-1) returned 1 [0204.338] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.338] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x43010708) returned 0x0 [0204.338] IsAppThemed () returned 0x1 [0204.338] GetThemeAppProperties () returned 0x3 [0204.338] GetThemeAppProperties () returned 0x3 [0204.338] IsAppThemed () returned 0x1 [0204.338] GetThemeAppProperties () returned 0x3 [0204.338] GetThemeAppProperties () returned 0x3 [0204.338] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db440, format=0x102415, lpdtp=0x277ced0 | out: lpchText="Submit Decryption Key", lprc=0x5db440) returned 13 [0204.339] IsAppThemed () returned 0x1 [0204.339] GetThemeAppProperties () returned 0x3 [0204.339] GetThemeAppProperties () returned 0x3 [0204.339] IsAppThemed () returned 0x1 [0204.339] GetThemeAppProperties () returned 0x3 [0204.339] GetThemeAppProperties () returned 0x3 [0204.339] IsAppThemed () returned 0x1 [0204.340] GetThemeAppProperties () returned 0x3 [0204.340] GetThemeAppProperties () returned 0x3 [0204.340] IsAppThemed () returned 0x1 [0204.340] GetThemeAppProperties () returned 0x3 [0204.340] GetThemeAppProperties () returned 0x3 [0204.340] IsThemePartDefined () returned 0x1 [0204.340] IsAppThemed () returned 0x1 [0204.340] GetThemeAppProperties () returned 0x3 [0204.340] GetThemeAppProperties () returned 0x3 [0204.340] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0204.340] IsAppThemed () returned 0x1 [0204.340] GetThemeAppProperties () returned 0x3 [0204.340] GetThemeAppProperties () returned 0x3 [0204.340] IsAppThemed () returned 0x1 [0204.340] GetThemeAppProperties () returned 0x3 [0204.340] GetThemeAppProperties () returned 0x3 [0204.340] IsThemePartDefined () returned 0x1 [0204.340] GdipCreateRegion (region=0x5db520) returned 0x0 [0204.340] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.340] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0204.340] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3272d0) returned 0x0 [0204.340] GdipIsMatrixIdentity (matrix=0x1c3272d0, result=0x5db580) returned 0x0 [0204.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0204.340] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89f450) returned 0x0 [0204.340] LocalFree (hMem=0x89f450) returned 0x0 [0204.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0204.341] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89f450) returned 0x0 [0204.341] LocalFree (hMem=0x89f450) returned 0x0 [0204.341] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.341] GdipDeleteMatrix (matrix=0x1c3272d0) returned 0x0 [0204.341] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db5d0) returned 0x0 [0204.341] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db590) returned 0x0 [0204.341] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db590) returned 0x0 [0204.341] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.341] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.341] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db600) returned 0x0 [0204.341] GetCurrentObject (hdc=0x43010708, type=0x1) returned 0x1b00017 [0204.341] GetCurrentObject (hdc=0x43010708, type=0x2) returned 0x1900010 [0204.341] GetCurrentObject (hdc=0x43010708, type=0x7) returned 0x11050637 [0204.341] GetCurrentObject (hdc=0x43010708, type=0x6) returned 0x18a0048 [0204.341] SaveDC (hdc=0x43010708) returned 1 [0204.341] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b040572 [0204.341] GetClipRgn (hdc=0x43010708, hrgn=0x7b040572) returned 0 [0204.341] SelectClipRgn (hdc=0x43010708, hrgn=0x7104054e) returned 2 [0204.342] DeleteObject (ho=0x7b040572) returned 1 [0204.342] DeleteObject (ho=0x7104054e) returned 1 [0204.342] OffsetViewportOrgEx (in: hdc=0x43010708, x=0, y=0, lppt=0x277d8e0 | out: lppt=0x277d8e0) returned 1 [0204.342] DrawThemeParentBackground () returned 0x0 [0204.342] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db040 | out: lpwndpl=0x5db040) returned 1 [0204.342] GetClientRect (in: hWnd=0x20160, lpRect=0x5daec0 | out: lpRect=0x5daec0) returned 1 [0204.342] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0204.342] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0204.342] GetSystemMetrics (nIndex=42) returned 0 [0204.342] CoTaskMemAlloc (cb=0x20) returned 0x89c710 [0204.342] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c710, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0204.342] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c710) returned 0xd [0204.342] CoTaskMemFree (pv=0x89c710) [0204.342] GetClientRect (in: hWnd=0x20160, lpRect=0x5dac70 | out: lpRect=0x5dac70) returned 1 [0204.342] GetCurrentObject (hdc=0x43010708, type=0x1) returned 0x1b00017 [0204.342] GetCurrentObject (hdc=0x43010708, type=0x2) returned 0x1900010 [0204.342] GetCurrentObject (hdc=0x43010708, type=0x7) returned 0x11050637 [0204.342] GetCurrentObject (hdc=0x43010708, type=0x6) returned 0x18a0048 [0204.342] SaveDC (hdc=0x43010708) returned 2 [0204.343] GetNearestColor (hdc=0x43010708, color=0xf0f0f0) returned 0xf0f0f0 [0204.343] CreateSolidBrush (color=0xf0f0f0) returned 0x41100686 [0204.343] FillRect (hDC=0x43010708, lprc=0x5da7a0, hbr=0x41100686) returned 1 [0204.343] DeleteObject (ho=0x41100686) returned 1 [0204.343] RestoreDC (hdc=0x43010708, nSavedDC=-1) returned 1 [0204.343] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0204.344] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0204.344] GetSystemMetrics (nIndex=42) returned 0 [0204.344] CoTaskMemAlloc (cb=0x20) returned 0x89c710 [0204.344] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c710, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0204.344] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c710) returned 0xd [0204.344] CoTaskMemFree (pv=0x89c710) [0204.344] GetClientRect (in: hWnd=0x20160, lpRect=0x5dab70 | out: lpRect=0x5dab70) returned 1 [0204.344] GetCurrentObject (hdc=0x43010708, type=0x1) returned 0x1b00017 [0204.344] GetCurrentObject (hdc=0x43010708, type=0x2) returned 0x1900010 [0204.344] GetCurrentObject (hdc=0x43010708, type=0x7) returned 0x11050637 [0204.344] GetCurrentObject (hdc=0x43010708, type=0x6) returned 0x18a0048 [0204.344] SaveDC (hdc=0x43010708) returned 2 [0204.344] GetNearestColor (hdc=0x43010708, color=0xf0f0f0) returned 0xf0f0f0 [0204.344] CreateSolidBrush (color=0xf0f0f0) returned 0x42100686 [0204.344] FillRect (hDC=0x43010708, lprc=0x5da6a0, hbr=0x42100686) returned 1 [0204.344] DeleteObject (ho=0x42100686) returned 1 [0204.344] RestoreDC (hdc=0x43010708, nSavedDC=-1) returned 1 [0204.345] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0204.345] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0204.345] GetSystemMetrics (nIndex=42) returned 0 [0204.345] CoTaskMemAlloc (cb=0x20) returned 0x89c710 [0204.345] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c710, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0204.345] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c710) returned 0xd [0204.345] CoTaskMemFree (pv=0x89c710) [0204.345] RestoreDC (hdc=0x43010708, nSavedDC=-1) returned 1 [0204.345] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.345] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x43010708) returned 0x0 [0204.345] IsAppThemed () returned 0x1 [0204.345] GetThemeAppProperties () returned 0x3 [0204.345] GetThemeAppProperties () returned 0x3 [0204.345] IsAppThemed () returned 0x1 [0204.345] GetThemeAppProperties () returned 0x3 [0204.345] GetThemeAppProperties () returned 0x3 [0204.345] IsThemePartDefined () returned 0x1 [0204.345] GdipCreateRegion (region=0x5db400) returned 0x0 [0204.345] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.345] GdipCreateMatrix (matrix=0x5db400) returned 0x0 [0204.345] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326c10) returned 0x0 [0204.345] GdipIsMatrixIdentity (matrix=0x1c326c10, result=0x5db460) returned 0x0 [0204.346] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb10 [0204.346] GdipGetMatrixElements (matrix=0x1c326c10, matrixOut=0x89eb10) returned 0x0 [0204.346] LocalFree (hMem=0x89eb10) returned 0x0 [0204.346] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0204.346] GdipGetMatrixElements (matrix=0x1c326c10, matrixOut=0x89ec10) returned 0x0 [0204.346] LocalFree (hMem=0x89ec10) returned 0x0 [0204.346] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.346] GdipDeleteMatrix (matrix=0x1c326c10) returned 0x0 [0204.346] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db4b0) returned 0x0 [0204.346] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db470) returned 0x0 [0204.346] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db470) returned 0x0 [0204.346] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.346] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.352] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4e0) returned 0x0 [0204.352] GetCurrentObject (hdc=0x43010708, type=0x1) returned 0x1b00017 [0204.352] GetCurrentObject (hdc=0x43010708, type=0x2) returned 0x1900010 [0204.352] GetCurrentObject (hdc=0x43010708, type=0x7) returned 0x11050637 [0204.352] GetCurrentObject (hdc=0x43010708, type=0x6) returned 0x18a0048 [0204.352] SaveDC (hdc=0x43010708) returned 1 [0204.352] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7204054e [0204.352] GetClipRgn (hdc=0x43010708, hrgn=0x7204054e) returned 0 [0204.352] SelectClipRgn (hdc=0x43010708, hrgn=0x7d040572) returned 2 [0204.352] DeleteObject (ho=0x7204054e) returned 1 [0204.352] DeleteObject (ho=0x7d040572) returned 1 [0204.352] OffsetViewportOrgEx (in: hdc=0x43010708, x=0, y=0, lppt=0x277e5e0 | out: lppt=0x277e5e0) returned 1 [0204.352] IsAppThemed () returned 0x1 [0204.352] GetThemeAppProperties () returned 0x3 [0204.352] GetThemeAppProperties () returned 0x3 [0204.352] DrawThemeBackground () returned 0x0 [0204.353] RestoreDC (hdc=0x43010708, nSavedDC=-1) returned 1 [0204.353] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.353] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x43010708) returned 0x0 [0204.353] GdipCreateRegion (region=0x5db3d0) returned 0x0 [0204.353] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0204.353] GdipCreateMatrix (matrix=0x5db3d0) returned 0x0 [0204.353] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327210) returned 0x0 [0204.353] GdipIsMatrixIdentity (matrix=0x1c327210, result=0x5db430) returned 0x0 [0204.353] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ead0 [0204.353] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89ead0) returned 0x0 [0204.353] LocalFree (hMem=0x89ead0) returned 0x0 [0204.353] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f710 [0204.353] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89f710) returned 0x0 [0204.353] LocalFree (hMem=0x89f710) returned 0x0 [0204.353] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.353] GdipDeleteMatrix (matrix=0x1c327210) returned 0x0 [0204.353] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db480) returned 0x0 [0204.353] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db440) returned 0x0 [0204.353] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db440) returned 0x0 [0204.353] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.354] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0204.354] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4b0) returned 0x0 [0204.354] GetCurrentObject (hdc=0x43010708, type=0x1) returned 0x1b00017 [0204.354] GetCurrentObject (hdc=0x43010708, type=0x2) returned 0x1900010 [0204.354] GetCurrentObject (hdc=0x43010708, type=0x7) returned 0x11050637 [0204.354] GetCurrentObject (hdc=0x43010708, type=0x6) returned 0x18a0048 [0204.354] SaveDC (hdc=0x43010708) returned 1 [0204.354] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7e040572 [0204.354] GetClipRgn (hdc=0x43010708, hrgn=0x7e040572) returned 0 [0204.354] SelectClipRgn (hdc=0x43010708, hrgn=0x7304054e) returned 2 [0204.354] DeleteObject (ho=0x7e040572) returned 1 [0204.354] DeleteObject (ho=0x7304054e) returned 1 [0204.354] OffsetViewportOrgEx (in: hdc=0x43010708, x=0, y=0, lppt=0x277eae0 | out: lppt=0x277eae0) returned 1 [0204.354] IsAppThemed () returned 0x1 [0204.354] GetThemeAppProperties () returned 0x3 [0204.354] GetThemeAppProperties () returned 0x3 [0204.354] GetThemeBackgroundContentRect () returned 0x0 [0204.354] RestoreDC (hdc=0x43010708, nSavedDC=-1) returned 1 [0204.354] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.354] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x43010708) returned 0x0 [0204.354] IsAppThemed () returned 0x1 [0204.355] GetThemeAppProperties () returned 0x3 [0204.355] GetThemeAppProperties () returned 0x3 [0204.355] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5db5a0) returned 0x0 [0204.355] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db580) returned 0x0 [0204.355] GetCurrentObject (hdc=0x43010708, type=0x1) returned 0x1b00017 [0204.355] GetCurrentObject (hdc=0x43010708, type=0x2) returned 0x1900010 [0204.355] GetCurrentObject (hdc=0x43010708, type=0x7) returned 0x11050637 [0204.355] GetCurrentObject (hdc=0x43010708, type=0x6) returned 0x18a0048 [0204.355] SaveDC (hdc=0x43010708) returned 1 [0204.355] GetTextAlign (hdc=0x43010708) returned 0x0 [0204.355] GetTextColor (hdc=0x43010708) returned 0x0 [0204.355] GetCurrentObject (hdc=0x43010708, type=0x6) returned 0x18a0048 [0204.355] GetObjectW (in: h=0x18a0048, c=92, pv=0x5daff0 | out: pv=0x5daff0) returned 92 [0204.355] SelectObject (hdc=0x43010708, h=0x290a0573) returned 0x18a0048 [0204.355] GetBkMode (hdc=0x43010708) returned 2 [0204.355] SetBkMode (hdc=0x43010708, mode=1) returned 2 [0204.355] DrawTextExW (in: hdc=0x43010708, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db080, format=0x102415, lpdtp=0x277f038 | out: lpchText="Submit Decryption Key", lprc=0x5db080) returned 13 [0204.356] DrawTextExW (in: hdc=0x43010708, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db130, format=0x102015, lpdtp=0x277f038 | out: lpchText="Submit Decryption Key", lprc=0x5db130) returned 13 [0204.356] RestoreDC (hdc=0x43010708, nSavedDC=-1) returned 1 [0204.356] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.356] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x43010708) returned 0x0 [0204.356] GetFocus () returned 0x2021e [0204.356] IsAppThemed () returned 0x1 [0204.356] GetThemeAppProperties () returned 0x3 [0204.356] GetThemeAppProperties () returned 0x3 [0204.356] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbce0) returned 0x0 [0204.356] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0x43010708, x1=0, y1=0, rop=0xcc0020) returned 1 [0204.356] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.356] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x43010708) returned 0x0 [0204.356] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0204.357] SelectObject (hdc=0x43010708, h=0x185000f) returned 0x11050637 [0204.357] DeleteDC (hdc=0x43010708) returned 1 [0204.357] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0204.357] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0204.357] EndPaint (hWnd=0x2021e, lpPaint=0x5dbde8) returned 1 [0204.357] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x277f1a0, cPoints=0x1 | out: lpPoints=0x277f1a0) returned 21233850 [0204.357] WindowFromPoint (Point=0x15900000163) returned 0x2021e [0204.357] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1590163) returned 0x1 [0204.357] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0204.357] NotifyWinEvent (event=0x800c, hwnd=0x2021e, idObject=-4, idChild=0) [0204.417] SendMessageW (hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0204.417] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0204.473] GetProcessWindowStation () returned 0xc8 [0204.473] GetActiveWindow () returned 0x20160 [0204.473] GetCurrentActCtx (in: lphActCtx=0x5dc620 | out: lphActCtx=0x5dc620*=0x811d28) returned 1 [0204.474] GetCurrentThreadId () returned 0xe28 [0204.474] EnumThreadWindows (dwThreadId=0xe28, lpfn=0x216405c, lParam=0x0) returned 1 [0204.474] IsWindowVisible (hWnd=0x20160) returned 1 [0204.474] IsWindowEnabled (hWnd=0x20160) returned 1 [0204.474] IsWindowVisible (hWnd=0x901f6) returned 1 [0204.474] IsWindowEnabled (hWnd=0x901f6) returned 0 [0204.474] IsWindowVisible (hWnd=0x20232) returned 0 [0204.474] IsWindowVisible (hWnd=0x20224) returned 0 [0204.474] IsWindowVisible (hWnd=0x50020) returned 0 [0204.474] IsWindowVisible (hWnd=0x20230) returned 0 [0204.474] IsWindowVisible (hWnd=0x60152) returned 0 [0204.474] GetActiveWindow () returned 0x20160 [0204.474] GetFocus () returned 0x2021e [0204.474] IsWindow (hWnd=0x20160) returned 1 [0204.474] EnableWindow (hWnd=0x20160, bEnable=0) returned 0 [0204.475] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0204.475] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0204.476] MessageBoxW (hWnd=0x20160, lpText="The decryption key has bad format.", lpCaption="Error", uType=0x10) returned 25821256 [0204.488] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0205.382] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x2021c) returned 0x1 [0205.383] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0205.383] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0205.383] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0205.384] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0205.384] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0205.384] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0205.385] GetFocus () returned 0x20216 [0205.385] IsChild (hWndParent=0x20160, hWnd=0x20216) returned 0 [0205.385] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x8, wParam=0x20216, lParam=0x0) returned 0x0 [0205.385] GetCapture () returned 0x2021e [0205.385] ReleaseCapture () returned 1 [0205.385] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0205.385] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0205.385] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0205.388] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0205.388] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0205.389] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0xa0100d0 [0205.389] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0205.389] CreateCompatibleDC (hdc=0xa0100d0) returned 0x490106d5 [0205.389] SelectObject (hdc=0x490106d5, h=0x11050637) returned 0x185000f [0205.389] GdipCreateFromHDC (hdc=0x490106d5, graphics=0x5db3f0) returned 0x0 [0205.389] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0205.389] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0205.389] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0205.389] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327050) returned 0x0 [0205.389] GdipIsMatrixIdentity (matrix=0x1c327050, result=0x5db580) returned 0x0 [0205.389] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee10 [0205.390] GdipGetMatrixElements (matrix=0x1c327050, matrixOut=0x89ee10) returned 0x0 [0205.390] LocalFree (hMem=0x89ee10) returned 0x0 [0205.390] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.390] GdipDeleteMatrix (matrix=0x1c327050) returned 0x0 [0205.390] GdipCreateRegion (region=0x5db520) returned 0x0 [0205.390] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.390] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0205.390] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0205.390] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd9b0dbd) returned 0x0 [0205.390] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.390] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.391] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0205.391] GetCurrentObject (hdc=0x490106d5, type=0x1) returned 0x1b00017 [0205.391] GetCurrentObject (hdc=0x490106d5, type=0x2) returned 0x1900010 [0205.391] GetCurrentObject (hdc=0x490106d5, type=0x7) returned 0x11050637 [0205.391] GetCurrentObject (hdc=0x490106d5, type=0x6) returned 0x18a0048 [0205.391] SaveDC (hdc=0x490106d5) returned 1 [0205.392] GetNearestColor (hdc=0x490106d5, color=0xf0f0f0) returned 0xf0f0f0 [0205.392] GetNearestColor (hdc=0x490106d5, color=0xa0a0a0) returned 0xa0a0a0 [0205.392] GetNearestColor (hdc=0x490106d5, color=0x696969) returned 0x696969 [0205.392] GetNearestColor (hdc=0x490106d5, color=0xa0a0a0) returned 0xa0a0a0 [0205.392] GetNearestColor (hdc=0x490106d5, color=0x0) returned 0x0 [0205.392] GetNearestColor (hdc=0x490106d5, color=0xffffff) returned 0xffffff [0205.392] GetNearestColor (hdc=0x490106d5, color=0xe5e5e5) returned 0xe5e5e5 [0205.392] GetNearestColor (hdc=0x490106d5, color=0xd8d8d8) returned 0xd8d8d8 [0205.392] GetNearestColor (hdc=0x490106d5, color=0x0) returned 0x0 [0205.392] RestoreDC (hdc=0x490106d5, nSavedDC=-1) returned 1 [0205.392] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.392] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x490106d5) returned 0x0 [0205.392] IsAppThemed () returned 0x1 [0205.392] GetThemeAppProperties () returned 0x3 [0205.392] GetThemeAppProperties () returned 0x3 [0205.393] IsAppThemed () returned 0x1 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x102415, lpdtp=0x277fe78 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0205.393] IsAppThemed () returned 0x1 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] IsAppThemed () returned 0x1 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] IsAppThemed () returned 0x1 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] IsAppThemed () returned 0x1 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] IsThemePartDefined () returned 0x1 [0205.393] IsAppThemed () returned 0x1 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] GetThemeAppProperties () returned 0x3 [0205.393] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0205.393] IsAppThemed () returned 0x1 [0205.394] GetThemeAppProperties () returned 0x3 [0205.394] GetThemeAppProperties () returned 0x3 [0205.394] IsAppThemed () returned 0x1 [0205.394] GetThemeAppProperties () returned 0x3 [0205.394] GetThemeAppProperties () returned 0x3 [0205.394] IsThemePartDefined () returned 0x1 [0205.394] GdipCreateRegion (region=0x5dad30) returned 0x0 [0205.394] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.394] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0205.394] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326ed0) returned 0x0 [0205.394] GdipIsMatrixIdentity (matrix=0x1c326ed0, result=0x5dad90) returned 0x0 [0205.394] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0205.394] GdipGetMatrixElements (matrix=0x1c326ed0, matrixOut=0x89f450) returned 0x0 [0205.394] LocalFree (hMem=0x89f450) returned 0x0 [0205.394] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb10 [0205.394] GdipGetMatrixElements (matrix=0x1c326ed0, matrixOut=0x89eb10) returned 0x0 [0205.394] LocalFree (hMem=0x89eb10) returned 0x0 [0205.394] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.394] GdipDeleteMatrix (matrix=0x1c326ed0) returned 0x0 [0205.394] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0205.394] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0205.394] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0205.394] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.394] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.394] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0205.394] GetCurrentObject (hdc=0x490106d5, type=0x1) returned 0x1b00017 [0205.394] GetCurrentObject (hdc=0x490106d5, type=0x2) returned 0x1900010 [0205.394] GetCurrentObject (hdc=0x490106d5, type=0x7) returned 0x11050637 [0205.394] GetCurrentObject (hdc=0x490106d5, type=0x6) returned 0x18a0048 [0205.395] SaveDC (hdc=0x490106d5) returned 1 [0205.395] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7404054e [0205.395] GetClipRgn (hdc=0x490106d5, hrgn=0x7404054e) returned 0 [0205.395] SelectClipRgn (hdc=0x490106d5, hrgn=0xffffffff84040572) returned 2 [0205.395] DeleteObject (ho=0x7404054e) returned 1 [0205.395] DeleteObject (ho=0xffffffff84040572) returned 1 [0205.395] OffsetViewportOrgEx (in: hdc=0x490106d5, x=0, y=0, lppt=0x2780888 | out: lppt=0x2780888) returned 1 [0205.395] DrawThemeParentBackground () returned 0x11050637 [0205.395] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0205.395] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0205.395] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0205.395] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0205.395] GetSystemMetrics (nIndex=42) returned 0 [0205.395] CoTaskMemAlloc (cb=0x20) returned 0x89c830 [0205.395] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c830, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0205.395] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c830) returned 0xd [0205.395] CoTaskMemFree (pv=0x89c830) [0205.395] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0205.395] GetCurrentObject (hdc=0x490106d5, type=0x1) returned 0x1b00017 [0205.395] GetCurrentObject (hdc=0x490106d5, type=0x2) returned 0x1900010 [0205.395] GetCurrentObject (hdc=0x490106d5, type=0x7) returned 0x11050637 [0205.396] GetCurrentObject (hdc=0x490106d5, type=0x6) returned 0x18a0048 [0205.396] SaveDC (hdc=0x490106d5) returned 2 [0205.396] GetNearestColor (hdc=0x490106d5, color=0xf0f0f0) returned 0xf0f0f0 [0205.396] CreateSolidBrush (color=0xf0f0f0) returned 0x43100686 [0205.396] FillRect (hDC=0x490106d5, lprc=0x5d9fb0, hbr=0x43100686) returned 1 [0205.396] DeleteObject (ho=0x43100686) returned 1 [0205.396] RestoreDC (hdc=0x490106d5, nSavedDC=-1) returned 1 [0205.396] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0205.396] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0205.396] GetSystemMetrics (nIndex=42) returned 0 [0205.396] CoTaskMemAlloc (cb=0x20) returned 0x89c830 [0205.396] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c830, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0205.396] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c830) returned 0xd [0205.396] CoTaskMemFree (pv=0x89c830) [0205.396] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0205.396] GetCurrentObject (hdc=0x490106d5, type=0x1) returned 0x1b00017 [0205.396] GetCurrentObject (hdc=0x490106d5, type=0x2) returned 0x1900010 [0205.396] GetCurrentObject (hdc=0x490106d5, type=0x7) returned 0x11050637 [0205.396] GetCurrentObject (hdc=0x490106d5, type=0x6) returned 0x18a0048 [0205.397] SaveDC (hdc=0x490106d5) returned 2 [0205.397] GetNearestColor (hdc=0x490106d5, color=0xf0f0f0) returned 0xf0f0f0 [0205.397] CreateSolidBrush (color=0xf0f0f0) returned 0x44100686 [0205.397] FillRect (hDC=0x490106d5, lprc=0x5d9eb0, hbr=0x44100686) returned 1 [0205.397] DeleteObject (ho=0x44100686) returned 1 [0205.397] RestoreDC (hdc=0x490106d5, nSavedDC=-1) returned 1 [0205.397] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0205.397] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0205.397] GetSystemMetrics (nIndex=42) returned 0 [0205.397] CoTaskMemAlloc (cb=0x20) returned 0x89c830 [0205.397] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c830, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0205.397] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c830) returned 0xd [0205.397] CoTaskMemFree (pv=0x89c830) [0205.397] RestoreDC (hdc=0x490106d5, nSavedDC=-1) returned 1 [0205.400] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.400] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x490106d5) returned 0x0 [0205.400] IsAppThemed () returned 0x1 [0205.400] GetThemeAppProperties () returned 0x3 [0205.400] GetThemeAppProperties () returned 0x3 [0205.400] IsAppThemed () returned 0x1 [0205.400] GetThemeAppProperties () returned 0x3 [0205.400] GetThemeAppProperties () returned 0x3 [0205.400] IsThemePartDefined () returned 0x1 [0205.400] GdipCreateRegion (region=0x5dac10) returned 0x0 [0205.400] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.400] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0205.400] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e50) returned 0x0 [0205.400] GdipIsMatrixIdentity (matrix=0x1c326e50, result=0x5dac70) returned 0x0 [0205.400] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f590 [0205.400] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89f590) returned 0x0 [0205.401] LocalFree (hMem=0x89f590) returned 0x0 [0205.401] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed50 [0205.401] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89ed50) returned 0x0 [0205.401] LocalFree (hMem=0x89ed50) returned 0x0 [0205.401] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.401] GdipDeleteMatrix (matrix=0x1c326e50) returned 0x0 [0205.401] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0205.401] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0205.401] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0205.401] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.401] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.401] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0205.401] GetCurrentObject (hdc=0x490106d5, type=0x1) returned 0x1b00017 [0205.401] GetCurrentObject (hdc=0x490106d5, type=0x2) returned 0x1900010 [0205.401] GetCurrentObject (hdc=0x490106d5, type=0x7) returned 0x11050637 [0205.401] GetCurrentObject (hdc=0x490106d5, type=0x6) returned 0x18a0048 [0205.401] SaveDC (hdc=0x490106d5) returned 1 [0205.401] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff85040572 [0205.401] GetClipRgn (hdc=0x490106d5, hrgn=0xffffffff85040572) returned 0 [0205.401] SelectClipRgn (hdc=0x490106d5, hrgn=0x7604054e) returned 2 [0205.401] DeleteObject (ho=0xffffffff85040572) returned 1 [0205.401] DeleteObject (ho=0x7604054e) returned 1 [0205.401] OffsetViewportOrgEx (in: hdc=0x490106d5, x=0, y=0, lppt=0x2781588 | out: lppt=0x2781588) returned 1 [0205.401] IsAppThemed () returned 0x1 [0205.402] GetThemeAppProperties () returned 0x3 [0205.402] GetThemeAppProperties () returned 0x3 [0205.402] DrawThemeBackground () returned 0x0 [0205.402] RestoreDC (hdc=0x490106d5, nSavedDC=-1) returned 1 [0205.402] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.402] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x490106d5) returned 0x0 [0205.402] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0205.402] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.402] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0205.402] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e10) returned 0x0 [0205.402] GdipIsMatrixIdentity (matrix=0x1c326e10, result=0x5dac40) returned 0x0 [0205.402] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec90 [0205.402] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89ec90) returned 0x0 [0205.402] LocalFree (hMem=0x89ec90) returned 0x0 [0205.402] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f710 [0205.402] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89f710) returned 0x0 [0205.402] LocalFree (hMem=0x89f710) returned 0x0 [0205.402] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.402] GdipDeleteMatrix (matrix=0x1c326e10) returned 0x0 [0205.402] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0205.402] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0205.402] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0205.402] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.402] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.402] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0205.402] GetCurrentObject (hdc=0x490106d5, type=0x1) returned 0x1b00017 [0205.402] GetCurrentObject (hdc=0x490106d5, type=0x2) returned 0x1900010 [0205.402] GetCurrentObject (hdc=0x490106d5, type=0x7) returned 0x11050637 [0205.403] GetCurrentObject (hdc=0x490106d5, type=0x6) returned 0x18a0048 [0205.403] SaveDC (hdc=0x490106d5) returned 1 [0205.403] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7704054e [0205.403] GetClipRgn (hdc=0x490106d5, hrgn=0x7704054e) returned 0 [0205.403] SelectClipRgn (hdc=0x490106d5, hrgn=0xffffffff86040572) returned 2 [0205.403] DeleteObject (ho=0x7704054e) returned 1 [0205.403] DeleteObject (ho=0xffffffff86040572) returned 1 [0205.403] OffsetViewportOrgEx (in: hdc=0x490106d5, x=0, y=0, lppt=0x2781a88 | out: lppt=0x2781a88) returned 1 [0205.403] IsAppThemed () returned 0x1 [0205.403] GetThemeAppProperties () returned 0x3 [0205.403] GetThemeAppProperties () returned 0x3 [0205.403] GetThemeBackgroundContentRect () returned 0x0 [0205.403] RestoreDC (hdc=0x490106d5, nSavedDC=-1) returned 1 [0205.403] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.403] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x490106d5) returned 0x0 [0205.403] IsAppThemed () returned 0x1 [0205.403] GetThemeAppProperties () returned 0x3 [0205.403] GetThemeAppProperties () returned 0x3 [0205.403] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0205.403] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0205.403] GetCurrentObject (hdc=0x490106d5, type=0x1) returned 0x1b00017 [0205.403] GetCurrentObject (hdc=0x490106d5, type=0x2) returned 0x1900010 [0205.403] GetCurrentObject (hdc=0x490106d5, type=0x7) returned 0x11050637 [0205.403] GetCurrentObject (hdc=0x490106d5, type=0x6) returned 0x18a0048 [0205.404] SaveDC (hdc=0x490106d5) returned 1 [0205.404] GetTextAlign (hdc=0x490106d5) returned 0x0 [0205.404] GetTextColor (hdc=0x490106d5) returned 0x0 [0205.404] GetCurrentObject (hdc=0x490106d5, type=0x6) returned 0x18a0048 [0205.404] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0205.404] SelectObject (hdc=0x490106d5, h=0x290a0573) returned 0x18a0048 [0205.404] GetBkMode (hdc=0x490106d5) returned 2 [0205.404] SetBkMode (hdc=0x490106d5, mode=1) returned 2 [0205.404] DrawTextExW (in: hdc=0x490106d5, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x102415, lpdtp=0x2781fe0 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0205.404] DrawTextExW (in: hdc=0x490106d5, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x102015, lpdtp=0x2781fe0 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0205.405] RestoreDC (hdc=0x490106d5, nSavedDC=-1) returned 1 [0205.405] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.405] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x490106d5) returned 0x0 [0205.405] GetFocus () returned 0x20216 [0205.405] IsAppThemed () returned 0x1 [0205.405] GetThemeAppProperties () returned 0x3 [0205.405] GetThemeAppProperties () returned 0x3 [0205.405] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0205.405] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x490106d5, x1=0, y1=0, rop=0xcc0020) returned 1 [0205.405] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.405] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x490106d5) returned 0x0 [0205.405] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0205.405] SelectObject (hdc=0x490106d5, h=0x185000f) returned 0x11050637 [0205.405] DeleteDC (hdc=0x490106d5) returned 1 [0205.405] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.405] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0205.405] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0205.406] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0205.406] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0205.406] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0xa0100d0 [0205.406] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0205.406] CreateCompatibleDC (hdc=0xa0100d0) returned 0x4a0106d5 [0205.406] SelectObject (hdc=0x4a0106d5, h=0x11050637) returned 0x185000f [0205.406] GdipCreateFromHDC (hdc=0x4a0106d5, graphics=0x5db3f0) returned 0x0 [0205.406] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0205.406] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0205.406] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0205.406] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327290) returned 0x0 [0205.406] GdipIsMatrixIdentity (matrix=0x1c327290, result=0x5db580) returned 0x0 [0205.406] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f110 [0205.406] GdipGetMatrixElements (matrix=0x1c327290, matrixOut=0x89f110) returned 0x0 [0205.406] LocalFree (hMem=0x89f110) returned 0x0 [0205.406] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.406] GdipDeleteMatrix (matrix=0x1c327290) returned 0x0 [0205.406] GdipCreateRegion (region=0x5db520) returned 0x0 [0205.406] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.406] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0205.407] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0205.407] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd990dbd) returned 0x0 [0205.407] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.407] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.407] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0205.407] GetCurrentObject (hdc=0x4a0106d5, type=0x1) returned 0x1b00017 [0205.407] GetCurrentObject (hdc=0x4a0106d5, type=0x2) returned 0x1900010 [0205.407] GetCurrentObject (hdc=0x4a0106d5, type=0x7) returned 0x11050637 [0205.407] GetCurrentObject (hdc=0x4a0106d5, type=0x6) returned 0x18a0048 [0205.407] SaveDC (hdc=0x4a0106d5) returned 1 [0205.407] GetNearestColor (hdc=0x4a0106d5, color=0xf0f0f0) returned 0xf0f0f0 [0205.408] GetNearestColor (hdc=0x4a0106d5, color=0xa0a0a0) returned 0xa0a0a0 [0205.408] GetNearestColor (hdc=0x4a0106d5, color=0x696969) returned 0x696969 [0205.408] GetNearestColor (hdc=0x4a0106d5, color=0xa0a0a0) returned 0xa0a0a0 [0205.408] GetNearestColor (hdc=0x4a0106d5, color=0x0) returned 0x0 [0205.408] GetNearestColor (hdc=0x4a0106d5, color=0xffffff) returned 0xffffff [0205.408] GetNearestColor (hdc=0x4a0106d5, color=0xe5e5e5) returned 0xe5e5e5 [0205.408] GetNearestColor (hdc=0x4a0106d5, color=0xd8d8d8) returned 0xd8d8d8 [0205.408] GetNearestColor (hdc=0x4a0106d5, color=0x0) returned 0x0 [0205.408] RestoreDC (hdc=0x4a0106d5, nSavedDC=-1) returned 1 [0205.408] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.408] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4a0106d5) returned 0x0 [0205.408] IsAppThemed () returned 0x1 [0205.408] GetThemeAppProperties () returned 0x3 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] IsAppThemed () returned 0x1 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x102415, lpdtp=0x2782a30 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0205.409] IsAppThemed () returned 0x1 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] IsAppThemed () returned 0x1 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] GetFocus () returned 0x20216 [0205.409] IsAppThemed () returned 0x1 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] IsAppThemed () returned 0x1 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] IsThemePartDefined () returned 0x1 [0205.409] IsAppThemed () returned 0x1 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] GetThemeAppProperties () returned 0x3 [0205.409] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0205.409] IsAppThemed () returned 0x1 [0205.410] GetThemeAppProperties () returned 0x3 [0205.410] GetThemeAppProperties () returned 0x3 [0205.410] IsAppThemed () returned 0x1 [0205.410] GetThemeAppProperties () returned 0x3 [0205.410] GetThemeAppProperties () returned 0x3 [0205.410] IsThemePartDefined () returned 0x1 [0205.410] GdipCreateRegion (region=0x5dad30) returned 0x0 [0205.410] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.410] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0205.410] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326fd0) returned 0x0 [0205.410] GdipIsMatrixIdentity (matrix=0x1c326fd0, result=0x5dad90) returned 0x0 [0205.410] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f2d0 [0205.410] GdipGetMatrixElements (matrix=0x1c326fd0, matrixOut=0x89f2d0) returned 0x0 [0205.410] LocalFree (hMem=0x89f2d0) returned 0x0 [0205.410] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed50 [0205.410] GdipGetMatrixElements (matrix=0x1c326fd0, matrixOut=0x89ed50) returned 0x0 [0205.410] LocalFree (hMem=0x89ed50) returned 0x0 [0205.410] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.410] GdipDeleteMatrix (matrix=0x1c326fd0) returned 0x0 [0205.410] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0205.410] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0205.410] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0205.410] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.410] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.410] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0205.410] GetCurrentObject (hdc=0x4a0106d5, type=0x1) returned 0x1b00017 [0205.410] GetCurrentObject (hdc=0x4a0106d5, type=0x2) returned 0x1900010 [0205.410] GetCurrentObject (hdc=0x4a0106d5, type=0x7) returned 0x11050637 [0205.410] GetCurrentObject (hdc=0x4a0106d5, type=0x6) returned 0x18a0048 [0205.411] SaveDC (hdc=0x4a0106d5) returned 1 [0205.411] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff87040572 [0205.411] GetClipRgn (hdc=0x4a0106d5, hrgn=0xffffffff87040572) returned 0 [0205.411] SelectClipRgn (hdc=0x4a0106d5, hrgn=0x7b04054e) returned 2 [0205.411] DeleteObject (ho=0xffffffff87040572) returned 1 [0205.411] DeleteObject (ho=0x7b04054e) returned 1 [0205.411] OffsetViewportOrgEx (in: hdc=0x4a0106d5, x=0, y=0, lppt=0x2783440 | out: lppt=0x2783440) returned 1 [0205.411] DrawThemeParentBackground () returned 0x0 [0205.411] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0205.411] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0205.411] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0205.411] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0205.411] GetSystemMetrics (nIndex=42) returned 0 [0205.411] CoTaskMemAlloc (cb=0x20) returned 0x89c830 [0205.411] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c830, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0205.411] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c830) returned 0xd [0205.411] CoTaskMemFree (pv=0x89c830) [0205.411] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0205.411] GetCurrentObject (hdc=0x4a0106d5, type=0x1) returned 0x1b00017 [0205.411] GetCurrentObject (hdc=0x4a0106d5, type=0x2) returned 0x1900010 [0205.412] GetCurrentObject (hdc=0x4a0106d5, type=0x7) returned 0x11050637 [0205.412] GetCurrentObject (hdc=0x4a0106d5, type=0x6) returned 0x18a0048 [0205.412] SaveDC (hdc=0x4a0106d5) returned 2 [0205.412] GetNearestColor (hdc=0x4a0106d5, color=0xf0f0f0) returned 0xf0f0f0 [0205.412] CreateSolidBrush (color=0xf0f0f0) returned 0x45100686 [0205.412] FillRect (hDC=0x4a0106d5, lprc=0x5d9fb0, hbr=0x45100686) returned 1 [0205.412] DeleteObject (ho=0x45100686) returned 1 [0205.412] RestoreDC (hdc=0x4a0106d5, nSavedDC=-1) returned 1 [0205.412] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0205.412] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0205.412] GetSystemMetrics (nIndex=42) returned 0 [0205.412] CoTaskMemAlloc (cb=0x20) returned 0x89c830 [0205.412] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c830, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0205.412] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c830) returned 0xd [0205.412] CoTaskMemFree (pv=0x89c830) [0205.412] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0205.412] GetCurrentObject (hdc=0x4a0106d5, type=0x1) returned 0x1b00017 [0205.412] GetCurrentObject (hdc=0x4a0106d5, type=0x2) returned 0x1900010 [0205.412] GetCurrentObject (hdc=0x4a0106d5, type=0x7) returned 0x11050637 [0205.412] GetCurrentObject (hdc=0x4a0106d5, type=0x6) returned 0x18a0048 [0205.412] SaveDC (hdc=0x4a0106d5) returned 2 [0205.412] GetNearestColor (hdc=0x4a0106d5, color=0xf0f0f0) returned 0xf0f0f0 [0205.413] CreateSolidBrush (color=0xf0f0f0) returned 0x46100686 [0205.413] FillRect (hDC=0x4a0106d5, lprc=0x5d9eb0, hbr=0x46100686) returned 1 [0205.413] DeleteObject (ho=0x46100686) returned 1 [0205.413] RestoreDC (hdc=0x4a0106d5, nSavedDC=-1) returned 1 [0205.413] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0205.413] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0205.413] GetSystemMetrics (nIndex=42) returned 0 [0205.413] CoTaskMemAlloc (cb=0x20) returned 0x89c830 [0205.413] GetWindowTextW (in: hWnd=0x20160, lpString=0x89c830, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0205.413] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89c830) returned 0xd [0205.413] CoTaskMemFree (pv=0x89c830) [0205.413] RestoreDC (hdc=0x4a0106d5, nSavedDC=-1) returned 1 [0205.413] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.413] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4a0106d5) returned 0x0 [0205.413] IsAppThemed () returned 0x1 [0205.413] GetThemeAppProperties () returned 0x3 [0205.413] GetThemeAppProperties () returned 0x3 [0205.413] IsAppThemed () returned 0x1 [0205.413] GetThemeAppProperties () returned 0x3 [0205.413] GetThemeAppProperties () returned 0x3 [0205.413] IsThemePartDefined () returned 0x1 [0205.413] GdipCreateRegion (region=0x5dac10) returned 0x0 [0205.413] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.413] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0205.413] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3271d0) returned 0x0 [0205.413] GdipIsMatrixIdentity (matrix=0x1c3271d0, result=0x5dac70) returned 0x0 [0205.416] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f5d0 [0205.416] GdipGetMatrixElements (matrix=0x1c3271d0, matrixOut=0x89f5d0) returned 0x0 [0205.416] LocalFree (hMem=0x89f5d0) returned 0x0 [0205.416] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0205.416] GdipGetMatrixElements (matrix=0x1c3271d0, matrixOut=0x89f450) returned 0x0 [0205.416] LocalFree (hMem=0x89f450) returned 0x0 [0205.417] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.417] GdipDeleteMatrix (matrix=0x1c3271d0) returned 0x0 [0205.417] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0205.417] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0205.417] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0205.417] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.417] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.417] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0205.417] GetCurrentObject (hdc=0x4a0106d5, type=0x1) returned 0x1b00017 [0205.417] GetCurrentObject (hdc=0x4a0106d5, type=0x2) returned 0x1900010 [0205.417] GetCurrentObject (hdc=0x4a0106d5, type=0x7) returned 0x11050637 [0205.417] GetCurrentObject (hdc=0x4a0106d5, type=0x6) returned 0x18a0048 [0205.417] SaveDC (hdc=0x4a0106d5) returned 1 [0205.417] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7c04054e [0205.417] GetClipRgn (hdc=0x4a0106d5, hrgn=0x7c04054e) returned 0 [0205.417] SelectClipRgn (hdc=0x4a0106d5, hrgn=0xffffffff89040572) returned 2 [0205.417] DeleteObject (ho=0x7c04054e) returned 1 [0205.417] DeleteObject (ho=0xffffffff89040572) returned 1 [0205.417] OffsetViewportOrgEx (in: hdc=0x4a0106d5, x=0, y=0, lppt=0x2784140 | out: lppt=0x2784140) returned 1 [0205.417] IsAppThemed () returned 0x1 [0205.417] GetThemeAppProperties () returned 0x3 [0205.417] GetThemeAppProperties () returned 0x3 [0205.417] DrawThemeBackground () returned 0x0 [0205.418] RestoreDC (hdc=0x4a0106d5, nSavedDC=-1) returned 1 [0205.418] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.418] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4a0106d5) returned 0x0 [0205.418] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0205.418] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.418] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0205.418] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327210) returned 0x0 [0205.418] GdipIsMatrixIdentity (matrix=0x1c327210, result=0x5dac40) returned 0x0 [0205.418] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f210 [0205.418] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89f210) returned 0x0 [0205.418] LocalFree (hMem=0x89f210) returned 0x0 [0205.418] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f090 [0205.418] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89f090) returned 0x0 [0205.418] LocalFree (hMem=0x89f090) returned 0x0 [0205.418] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.418] GdipDeleteMatrix (matrix=0x1c327210) returned 0x0 [0205.418] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0205.418] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0205.418] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0205.418] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.418] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.418] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0205.418] GetCurrentObject (hdc=0x4a0106d5, type=0x1) returned 0x1b00017 [0205.418] GetCurrentObject (hdc=0x4a0106d5, type=0x2) returned 0x1900010 [0205.418] GetCurrentObject (hdc=0x4a0106d5, type=0x7) returned 0x11050637 [0205.419] GetCurrentObject (hdc=0x4a0106d5, type=0x6) returned 0x18a0048 [0205.419] SaveDC (hdc=0x4a0106d5) returned 1 [0205.419] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8a040572 [0205.419] GetClipRgn (hdc=0x4a0106d5, hrgn=0xffffffff8a040572) returned 0 [0205.419] SelectClipRgn (hdc=0x4a0106d5, hrgn=0x7d04054e) returned 2 [0205.419] DeleteObject (ho=0xffffffff8a040572) returned 1 [0205.419] DeleteObject (ho=0x7d04054e) returned 1 [0205.419] OffsetViewportOrgEx (in: hdc=0x4a0106d5, x=0, y=0, lppt=0x2784640 | out: lppt=0x2784640) returned 1 [0205.419] IsAppThemed () returned 0x1 [0205.419] GetThemeAppProperties () returned 0x3 [0205.419] GetThemeAppProperties () returned 0x3 [0205.419] GetThemeBackgroundContentRect () returned 0x0 [0205.419] RestoreDC (hdc=0x4a0106d5, nSavedDC=-1) returned 1 [0205.419] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.419] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4a0106d5) returned 0x0 [0205.419] IsAppThemed () returned 0x1 [0205.419] GetThemeAppProperties () returned 0x3 [0205.419] GetThemeAppProperties () returned 0x3 [0205.419] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0205.419] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0205.419] GetCurrentObject (hdc=0x4a0106d5, type=0x1) returned 0x1b00017 [0205.419] GetCurrentObject (hdc=0x4a0106d5, type=0x2) returned 0x1900010 [0205.419] GetCurrentObject (hdc=0x4a0106d5, type=0x7) returned 0x11050637 [0205.419] GetCurrentObject (hdc=0x4a0106d5, type=0x6) returned 0x18a0048 [0205.419] SaveDC (hdc=0x4a0106d5) returned 1 [0205.419] GetTextAlign (hdc=0x4a0106d5) returned 0x0 [0205.419] GetTextColor (hdc=0x4a0106d5) returned 0x0 [0205.420] GetCurrentObject (hdc=0x4a0106d5, type=0x6) returned 0x18a0048 [0205.420] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0205.420] SelectObject (hdc=0x4a0106d5, h=0x290a0573) returned 0x18a0048 [0205.420] GetBkMode (hdc=0x4a0106d5) returned 2 [0205.420] SetBkMode (hdc=0x4a0106d5, mode=1) returned 2 [0205.420] DrawTextExW (in: hdc=0x4a0106d5, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x102415, lpdtp=0x2784b98 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0205.420] DrawTextExW (in: hdc=0x4a0106d5, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x102015, lpdtp=0x2784b98 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0205.420] RestoreDC (hdc=0x4a0106d5, nSavedDC=-1) returned 1 [0205.420] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.420] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4a0106d5) returned 0x0 [0205.420] GetFocus () returned 0x20216 [0205.420] IsAppThemed () returned 0x1 [0205.421] GetThemeAppProperties () returned 0x3 [0205.421] GetThemeAppProperties () returned 0x3 [0205.421] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0205.421] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x4a0106d5, x1=0, y1=0, rop=0xcc0020) returned 1 [0205.421] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.421] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4a0106d5) returned 0x0 [0205.421] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0205.421] SelectObject (hdc=0x4a0106d5, h=0x185000f) returned 0x11050637 [0205.421] DeleteDC (hdc=0x4a0106d5) returned 1 [0205.421] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.421] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0205.421] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0205.421] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0205.422] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0205.422] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0205.422] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0205.432] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0205.477] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0205.484] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0205.484] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0205.484] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0205.549] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0205.550] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0205.550] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0205.551] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0205.632] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0205.633] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0205.633] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0205.633] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0205.722] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0205.722] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0205.722] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0205.722] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x2021c) returned 0x1 [0205.723] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0205.723] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0205.723] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0205.724] GetFocus () returned 0x2021c [0205.725] GetAncestor (hwnd=0x2021c, gaFlags=0x1) returned 0x10010 [0205.725] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0 [0205.725] SetFocus (hWnd=0x2021e) returned 0x0 [0205.729] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0205.730] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0205.730] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0205.732] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0205.732] GetFocus () returned 0x20160 [0205.732] SetFocus (hWnd=0x2021e) returned 0x0 [0205.739] IsWindow (hWnd=0x20160) returned 1 [0205.739] EnableWindow (hWnd=0x20160, bEnable=1) returned 1 [0205.739] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0205.739] IsWindow (hWnd=0x20160) returned 1 [0205.740] SetActiveWindow (hWnd=0x20160) returned 0x20160 [0205.740] IsWindow (hWnd=0x2021e) returned 1 [0205.740] SetFocus (hWnd=0x2021e) returned 0x20160 [0205.740] GetFocus () returned 0x2021e [0205.740] IsChild (hWndParent=0x20160, hWnd=0x2021e) returned 1 [0205.740] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x8, wParam=0x2021e, lParam=0x0) returned 0x0 [0205.740] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0205.741] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0205.743] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0205.744] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x7, wParam=0x20160, lParam=0x0) returned 0x0 [0205.744] GetStockObject (i=5) returned 0x1900015 [0205.744] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0205.744] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xd, wParam=0x16, lParam=0x89ee50) returned 0x15 [0205.744] GetDlgItem (hDlg=0x20160, nIDDlgItem=131614) returned 0x2021e [0205.744] SendMessageW (hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5db790) returned 0x0 [0205.744] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5db790) returned 0x0 [0205.744] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0205.744] SendMessageW (hWnd=0x20160, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0205.745] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0205.745] GetFocus () returned 0x2021e [0205.745] GetCapture () returned 0x0 [0205.745] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0205.745] IsWindowUnicode (hWnd=0x2021e) returned 1 [0205.745] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0205.745] TranslateMessage (lpMsg=0x5dd220) returned 0 [0205.745] DispatchMessageW (lpMsg=0x5dd220) returned 0x1 [0205.746] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0205.746] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0205.746] CreateCompatibleDC (hdc=0xa0100d0) returned 0x5010759 [0205.746] SelectObject (hdc=0x5010759, h=0x11050637) returned 0x185000f [0205.746] GdipCreateFromHDC (hdc=0x5010759, graphics=0x5dc420) returned 0x0 [0205.746] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0205.746] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0205.746] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0205.746] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327090) returned 0x0 [0205.746] GdipIsMatrixIdentity (matrix=0x1c327090, result=0x5dc5b0) returned 0x0 [0205.746] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb10 [0205.746] GdipGetMatrixElements (matrix=0x1c327090, matrixOut=0x89eb10) returned 0x0 [0205.746] LocalFree (hMem=0x89eb10) returned 0x0 [0205.746] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.746] GdipDeleteMatrix (matrix=0x1c327090) returned 0x0 [0205.747] GdipCreateRegion (region=0x5dc550) returned 0x0 [0205.747] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.747] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0205.747] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0205.747] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd970dbd) returned 0x0 [0205.747] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.747] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.747] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0205.747] GetCurrentObject (hdc=0x5010759, type=0x1) returned 0x1b00017 [0205.747] GetCurrentObject (hdc=0x5010759, type=0x2) returned 0x1900010 [0205.747] GetCurrentObject (hdc=0x5010759, type=0x7) returned 0x11050637 [0205.747] GetCurrentObject (hdc=0x5010759, type=0x6) returned 0x18a0048 [0205.747] SaveDC (hdc=0x5010759) returned 1 [0205.747] GetNearestColor (hdc=0x5010759, color=0xf0f0f0) returned 0xf0f0f0 [0205.747] GetNearestColor (hdc=0x5010759, color=0xa0a0a0) returned 0xa0a0a0 [0205.748] GetNearestColor (hdc=0x5010759, color=0x696969) returned 0x696969 [0205.748] GetNearestColor (hdc=0x5010759, color=0xa0a0a0) returned 0xa0a0a0 [0205.748] GetNearestColor (hdc=0x5010759, color=0x0) returned 0x0 [0205.748] GetNearestColor (hdc=0x5010759, color=0xffffff) returned 0xffffff [0205.748] GetNearestColor (hdc=0x5010759, color=0xe5e5e5) returned 0xe5e5e5 [0205.748] GetNearestColor (hdc=0x5010759, color=0xd8d8d8) returned 0xd8d8d8 [0205.748] GetNearestColor (hdc=0x5010759, color=0x0) returned 0x0 [0205.748] RestoreDC (hdc=0x5010759, nSavedDC=-1) returned 1 [0205.748] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.748] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x5010759) returned 0x0 [0205.748] IsAppThemed () returned 0x1 [0205.748] GetThemeAppProperties () returned 0x3 [0205.748] GetThemeAppProperties () returned 0x3 [0205.748] IsAppThemed () returned 0x1 [0205.748] GetThemeAppProperties () returned 0x3 [0205.748] GetThemeAppProperties () returned 0x3 [0205.748] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x102415, lpdtp=0x2785680 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0205.749] IsAppThemed () returned 0x1 [0205.749] GetThemeAppProperties () returned 0x3 [0205.749] GetThemeAppProperties () returned 0x3 [0205.749] IsAppThemed () returned 0x1 [0205.749] GetThemeAppProperties () returned 0x3 [0205.749] GetThemeAppProperties () returned 0x3 [0205.749] GetFocus () returned 0x2021e [0205.749] IsAppThemed () returned 0x1 [0205.749] GetThemeAppProperties () returned 0x3 [0205.749] GetThemeAppProperties () returned 0x3 [0205.749] IsAppThemed () returned 0x1 [0205.749] GetThemeAppProperties () returned 0x3 [0205.749] GetThemeAppProperties () returned 0x3 [0205.749] IsThemePartDefined () returned 0x1 [0205.749] IsAppThemed () returned 0x1 [0205.749] GetThemeAppProperties () returned 0x3 [0205.749] GetThemeAppProperties () returned 0x3 [0205.749] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0205.750] IsAppThemed () returned 0x1 [0205.750] GetThemeAppProperties () returned 0x3 [0205.750] GetThemeAppProperties () returned 0x3 [0205.750] IsAppThemed () returned 0x1 [0205.750] GetThemeAppProperties () returned 0x3 [0205.750] GetThemeAppProperties () returned 0x3 [0205.750] IsThemePartDefined () returned 0x1 [0205.750] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0205.750] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.750] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0205.750] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f90) returned 0x0 [0205.750] GdipIsMatrixIdentity (matrix=0x1c326f90, result=0x5dbdc0) returned 0x0 [0205.750] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f510 [0205.750] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89f510) returned 0x0 [0205.750] LocalFree (hMem=0x89f510) returned 0x0 [0205.750] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0205.750] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89ec10) returned 0x0 [0205.750] LocalFree (hMem=0x89ec10) returned 0x0 [0205.750] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.750] GdipDeleteMatrix (matrix=0x1c326f90) returned 0x0 [0205.750] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0205.750] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0205.750] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0205.751] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.751] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.751] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0205.751] GetCurrentObject (hdc=0x5010759, type=0x1) returned 0x1b00017 [0205.751] GetCurrentObject (hdc=0x5010759, type=0x2) returned 0x1900010 [0205.751] GetCurrentObject (hdc=0x5010759, type=0x7) returned 0x11050637 [0205.751] GetCurrentObject (hdc=0x5010759, type=0x6) returned 0x18a0048 [0205.751] SaveDC (hdc=0x5010759) returned 1 [0205.752] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb04074d [0205.752] GetClipRgn (hdc=0x5010759, hrgn=0xb04074d) returned 0 [0205.752] SelectClipRgn (hdc=0x5010759, hrgn=0xffffffff8b04054e) returned 2 [0205.752] DeleteObject (ho=0xb04074d) returned 1 [0205.752] DeleteObject (ho=0xffffffff8b04054e) returned 1 [0205.752] OffsetViewportOrgEx (in: hdc=0x5010759, x=0, y=0, lppt=0x2786090 | out: lppt=0x2786090) returned 1 [0205.752] DrawThemeParentBackground () returned 0x1 [0205.752] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0205.752] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0205.753] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0205.753] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0205.753] GetSystemMetrics (nIndex=42) returned 0 [0205.753] CoTaskMemAlloc (cb=0x20) returned 0x89d220 [0205.753] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d220, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0205.753] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d220) returned 0xd [0205.753] CoTaskMemFree (pv=0x89d220) [0205.753] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0205.753] GetCurrentObject (hdc=0x5010759, type=0x1) returned 0x1b00017 [0205.753] GetCurrentObject (hdc=0x5010759, type=0x2) returned 0x1900010 [0205.753] GetCurrentObject (hdc=0x5010759, type=0x7) returned 0x11050637 [0205.753] GetCurrentObject (hdc=0x5010759, type=0x6) returned 0x18a0048 [0205.753] SaveDC (hdc=0x5010759) returned 2 [0205.753] GetNearestColor (hdc=0x5010759, color=0xf0f0f0) returned 0xf0f0f0 [0205.753] CreateSolidBrush (color=0xf0f0f0) returned 0x48100686 [0205.753] FillRect (hDC=0x5010759, lprc=0x5dafe0, hbr=0x48100686) returned 1 [0205.754] DeleteObject (ho=0x48100686) returned 1 [0205.754] RestoreDC (hdc=0x5010759, nSavedDC=-1) returned 1 [0205.754] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0205.754] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0205.754] GetSystemMetrics (nIndex=42) returned 0 [0205.754] CoTaskMemAlloc (cb=0x20) returned 0x89d3d0 [0205.754] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d3d0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0205.754] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d3d0) returned 0xd [0205.754] CoTaskMemFree (pv=0x89d3d0) [0205.754] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0205.754] GetCurrentObject (hdc=0x5010759, type=0x1) returned 0x1b00017 [0205.754] GetCurrentObject (hdc=0x5010759, type=0x2) returned 0x1900010 [0205.754] GetCurrentObject (hdc=0x5010759, type=0x7) returned 0x11050637 [0205.754] GetCurrentObject (hdc=0x5010759, type=0x6) returned 0x18a0048 [0205.754] SaveDC (hdc=0x5010759) returned 2 [0205.754] GetNearestColor (hdc=0x5010759, color=0xf0f0f0) returned 0xf0f0f0 [0205.755] CreateSolidBrush (color=0xf0f0f0) returned 0x49100686 [0205.755] FillRect (hDC=0x5010759, lprc=0x5daee0, hbr=0x49100686) returned 1 [0205.755] DeleteObject (ho=0x49100686) returned 1 [0205.755] RestoreDC (hdc=0x5010759, nSavedDC=-1) returned 1 [0205.755] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0205.755] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0205.755] GetSystemMetrics (nIndex=42) returned 0 [0205.755] CoTaskMemAlloc (cb=0x20) returned 0x89d2b0 [0205.755] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d2b0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0205.755] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d2b0) returned 0xd [0205.755] CoTaskMemFree (pv=0x89d2b0) [0205.755] RestoreDC (hdc=0x5010759, nSavedDC=-1) returned 1 [0205.755] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.755] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x5010759) returned 0x0 [0205.755] IsAppThemed () returned 0x1 [0205.755] GetThemeAppProperties () returned 0x3 [0205.755] GetThemeAppProperties () returned 0x3 [0205.755] IsAppThemed () returned 0x1 [0205.756] GetThemeAppProperties () returned 0x3 [0205.756] GetThemeAppProperties () returned 0x3 [0205.756] IsThemePartDefined () returned 0x1 [0205.756] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0205.756] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.756] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0205.756] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327290) returned 0x0 [0205.756] GdipIsMatrixIdentity (matrix=0x1c327290, result=0x5dbca0) returned 0x0 [0205.756] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f290 [0205.756] GdipGetMatrixElements (matrix=0x1c327290, matrixOut=0x89f290) returned 0x0 [0205.756] LocalFree (hMem=0x89f290) returned 0x0 [0205.756] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0205.756] GdipGetMatrixElements (matrix=0x1c327290, matrixOut=0x89ec10) returned 0x0 [0205.756] LocalFree (hMem=0x89ec10) returned 0x0 [0205.756] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.756] GdipDeleteMatrix (matrix=0x1c327290) returned 0x0 [0205.756] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0205.756] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0205.756] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0205.756] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.756] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.756] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0205.757] GetCurrentObject (hdc=0x5010759, type=0x1) returned 0x1b00017 [0205.757] GetCurrentObject (hdc=0x5010759, type=0x2) returned 0x1900010 [0205.757] GetCurrentObject (hdc=0x5010759, type=0x7) returned 0x11050637 [0205.757] GetCurrentObject (hdc=0x5010759, type=0x6) returned 0x18a0048 [0205.757] SaveDC (hdc=0x5010759) returned 1 [0205.757] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8c04054e [0205.757] GetClipRgn (hdc=0x5010759, hrgn=0xffffffff8c04054e) returned 0 [0205.757] SelectClipRgn (hdc=0x5010759, hrgn=0xd04074d) returned 2 [0205.757] DeleteObject (ho=0xffffffff8c04054e) returned 1 [0205.757] DeleteObject (ho=0xd04074d) returned 1 [0205.757] OffsetViewportOrgEx (in: hdc=0x5010759, x=0, y=0, lppt=0x2786d90 | out: lppt=0x2786d90) returned 1 [0205.757] IsAppThemed () returned 0x1 [0205.757] GetThemeAppProperties () returned 0x3 [0205.757] GetThemeAppProperties () returned 0x3 [0205.757] DrawThemeBackground () returned 0x0 [0205.759] RestoreDC (hdc=0x5010759, nSavedDC=-1) returned 1 [0205.759] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.759] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x5010759) returned 0x0 [0205.759] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0205.759] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0205.759] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0205.759] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327190) returned 0x0 [0205.759] GdipIsMatrixIdentity (matrix=0x1c327190, result=0x5dbc70) returned 0x0 [0205.759] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f490 [0205.759] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89f490) returned 0x0 [0205.759] LocalFree (hMem=0x89f490) returned 0x0 [0205.759] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec50 [0205.759] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89ec50) returned 0x0 [0205.760] LocalFree (hMem=0x89ec50) returned 0x0 [0205.760] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.760] GdipDeleteMatrix (matrix=0x1c327190) returned 0x0 [0205.760] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0205.760] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0205.760] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0205.760] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.760] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0205.760] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0205.760] GetCurrentObject (hdc=0x5010759, type=0x1) returned 0x1b00017 [0205.760] GetCurrentObject (hdc=0x5010759, type=0x2) returned 0x1900010 [0205.760] GetCurrentObject (hdc=0x5010759, type=0x7) returned 0x11050637 [0205.760] GetCurrentObject (hdc=0x5010759, type=0x6) returned 0x18a0048 [0205.760] SaveDC (hdc=0x5010759) returned 1 [0205.760] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe04074d [0205.760] GetClipRgn (hdc=0x5010759, hrgn=0xe04074d) returned 0 [0205.760] SelectClipRgn (hdc=0x5010759, hrgn=0xffffffff8d04054e) returned 2 [0205.761] DeleteObject (ho=0xe04074d) returned 1 [0205.761] DeleteObject (ho=0xffffffff8d04054e) returned 1 [0205.761] OffsetViewportOrgEx (in: hdc=0x5010759, x=0, y=0, lppt=0x2787290 | out: lppt=0x2787290) returned 1 [0205.761] IsAppThemed () returned 0x1 [0205.761] GetThemeAppProperties () returned 0x3 [0205.761] GetThemeAppProperties () returned 0x3 [0205.761] GetThemeBackgroundContentRect () returned 0x0 [0205.761] RestoreDC (hdc=0x5010759, nSavedDC=-1) returned 1 [0205.761] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.761] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x5010759) returned 0x0 [0205.761] IsAppThemed () returned 0x1 [0205.762] GetThemeAppProperties () returned 0x3 [0205.762] GetThemeAppProperties () returned 0x3 [0205.762] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0205.762] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0205.762] GetCurrentObject (hdc=0x5010759, type=0x1) returned 0x1b00017 [0205.762] GetCurrentObject (hdc=0x5010759, type=0x2) returned 0x1900010 [0205.762] GetCurrentObject (hdc=0x5010759, type=0x7) returned 0x11050637 [0205.762] GetCurrentObject (hdc=0x5010759, type=0x6) returned 0x18a0048 [0205.762] SaveDC (hdc=0x5010759) returned 1 [0205.762] GetTextAlign (hdc=0x5010759) returned 0x0 [0205.762] GetTextColor (hdc=0x5010759) returned 0x0 [0205.762] GetCurrentObject (hdc=0x5010759, type=0x6) returned 0x18a0048 [0205.765] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0205.765] SelectObject (hdc=0x5010759, h=0x290a0573) returned 0x18a0048 [0205.765] GetBkMode (hdc=0x5010759) returned 2 [0205.765] SetBkMode (hdc=0x5010759, mode=1) returned 2 [0205.765] DrawTextExW (in: hdc=0x5010759, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x102415, lpdtp=0x27877e8 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0205.765] DrawTextExW (in: hdc=0x5010759, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x102015, lpdtp=0x27877e8 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0205.766] RestoreDC (hdc=0x5010759, nSavedDC=-1) returned 1 [0205.766] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.766] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x5010759) returned 0x0 [0205.766] GetFocus () returned 0x2021e [0205.766] IsAppThemed () returned 0x1 [0205.766] GetThemeAppProperties () returned 0x3 [0205.766] GetThemeAppProperties () returned 0x3 [0205.766] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0205.766] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x5010759, x1=0, y1=0, rop=0xcc0020) returned 1 [0205.766] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.766] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x5010759) returned 0x0 [0205.767] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0205.767] SelectObject (hdc=0x5010759, h=0x185000f) returned 0x11050637 [0205.767] DeleteDC (hdc=0x5010759) returned 1 [0205.767] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0205.767] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0205.767] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0205.767] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0205.767] IsWindowUnicode (hWnd=0x20160) returned 1 [0205.767] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0205.767] TranslateMessage (lpMsg=0x5dd220) returned 0 [0205.767] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0205.767] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0205.769] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0205.769] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0205.769] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0205.770] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0205.770] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0205.770] WaitMessage () returned 1 [0205.800] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0205.800] IsWindowUnicode (hWnd=0x20160) returned 1 [0205.800] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0205.800] TranslateMessage (lpMsg=0x5dd220) returned 0 [0205.800] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0205.801] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0205.802] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0205.802] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0205.802] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0205.803] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0205.803] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0205.803] WaitMessage () returned 1 [0205.864] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0205.864] IsWindowUnicode (hWnd=0x20160) returned 1 [0205.864] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0205.864] TranslateMessage (lpMsg=0x5dd220) returned 0 [0205.864] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0205.864] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0205.866] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0205.866] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0205.866] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0205.867] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0205.867] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0205.867] WaitMessage () returned 1 [0205.940] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0205.940] IsWindowUnicode (hWnd=0x20160) returned 1 [0205.940] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0205.940] TranslateMessage (lpMsg=0x5dd220) returned 0 [0205.940] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0205.940] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0205.941] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0205.942] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0205.942] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0205.942] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0205.942] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0205.942] WaitMessage () returned 1 [0206.023] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.023] IsWindowUnicode (hWnd=0x20160) returned 1 [0206.023] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.023] TranslateMessage (lpMsg=0x5dd220) returned 0 [0206.023] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0206.024] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0206.025] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0206.025] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0206.026] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0206.026] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.026] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.026] WaitMessage () returned 1 [0206.057] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.057] IsWindowUnicode (hWnd=0x20230) returned 1 [0206.057] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.057] TranslateMessage (lpMsg=0x5dd220) returned 0 [0206.057] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0206.057] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.057] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.057] WaitMessage () returned 1 [0206.101] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.101] IsWindowUnicode (hWnd=0x20160) returned 1 [0206.101] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.101] TranslateMessage (lpMsg=0x5dd220) returned 0 [0206.101] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0206.101] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0206.103] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0206.103] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0206.103] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0206.103] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.103] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.103] WaitMessage () returned 1 [0206.180] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.180] IsWindowUnicode (hWnd=0x20160) returned 1 [0206.180] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.180] TranslateMessage (lpMsg=0x5dd220) returned 0 [0206.180] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0206.180] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0206.182] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0206.182] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0206.182] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0206.182] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.182] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.182] WaitMessage () returned 1 [0206.257] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.258] IsWindowUnicode (hWnd=0x20160) returned 1 [0206.258] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.258] TranslateMessage (lpMsg=0x5dd220) returned 0 [0206.258] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0206.258] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0206.259] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0206.259] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0206.259] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0206.260] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.260] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.260] WaitMessage () returned 1 [0206.337] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.337] IsWindowUnicode (hWnd=0x20160) returned 1 [0206.337] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0206.337] TranslateMessage (lpMsg=0x5dd220) returned 0 [0206.337] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0206.338] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0206.338] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0206.338] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0206.338] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0206.339] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.339] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.339] WaitMessage () returned 1 [0206.896] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.896] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0206.896] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0206.896] WaitMessage () returned 1 [0207.197] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.197] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14f00ff) returned 0x1 [0207.197] IsWindowUnicode (hWnd=0x2021e) returned 1 [0207.197] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.198] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14f00ff) returned 0x1 [0207.198] SetCursor (hCursor=0x10003) returned 0x10003 [0207.198] TranslateMessage (lpMsg=0x5dd220) returned 0 [0207.198] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0207.198] _TrackMouseEvent (in: lpEventTrack=0x2773508 | out: lpEventTrack=0x2773508) returned 1 [0207.198] SendMessageW (hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0207.198] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0207.198] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0207.198] GetKeyState (nVirtKey=1) returned 0 [0207.198] GetKeyState (nVirtKey=2) returned 0 [0207.198] GetKeyState (nVirtKey=4) returned 0 [0207.198] GetKeyState (nVirtKey=5) returned 0 [0207.198] GetKeyState (nVirtKey=6) returned 0 [0207.198] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.198] IsWindowUnicode (hWnd=0x2021e) returned 1 [0207.198] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.198] TranslateMessage (lpMsg=0x5dd220) returned 0 [0207.198] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0207.198] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0207.198] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0207.199] CreateCompatibleDC (hdc=0xa0100d0) returned 0x530106d6 [0207.199] SelectObject (hdc=0x530106d6, h=0x11050637) returned 0x185000f [0207.199] GdipCreateFromHDC (hdc=0x530106d6, graphics=0x5dc420) returned 0x0 [0207.199] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0207.199] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0207.199] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0207.199] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e10) returned 0x0 [0207.199] GdipIsMatrixIdentity (matrix=0x1c326e10, result=0x5dc5b0) returned 0x0 [0207.199] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ead0 [0207.199] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89ead0) returned 0x0 [0207.199] LocalFree (hMem=0x89ead0) returned 0x0 [0207.199] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.199] GdipDeleteMatrix (matrix=0x1c326e10) returned 0x0 [0207.199] GdipCreateRegion (region=0x5dc550) returned 0x0 [0207.199] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.199] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0207.200] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0207.200] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd950dbd) returned 0x0 [0207.200] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.200] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.200] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0207.200] GetCurrentObject (hdc=0x530106d6, type=0x1) returned 0x1b00017 [0207.200] GetCurrentObject (hdc=0x530106d6, type=0x2) returned 0x1900010 [0207.200] GetCurrentObject (hdc=0x530106d6, type=0x7) returned 0x11050637 [0207.200] GetCurrentObject (hdc=0x530106d6, type=0x6) returned 0x18a0048 [0207.200] SaveDC (hdc=0x530106d6) returned 1 [0207.201] GetNearestColor (hdc=0x530106d6, color=0xf0f0f0) returned 0xf0f0f0 [0207.201] GetNearestColor (hdc=0x530106d6, color=0xa0a0a0) returned 0xa0a0a0 [0207.201] GetNearestColor (hdc=0x530106d6, color=0x696969) returned 0x696969 [0207.201] GetNearestColor (hdc=0x530106d6, color=0xa0a0a0) returned 0xa0a0a0 [0207.201] GetNearestColor (hdc=0x530106d6, color=0x0) returned 0x0 [0207.201] GetNearestColor (hdc=0x530106d6, color=0xffffff) returned 0xffffff [0207.201] GetNearestColor (hdc=0x530106d6, color=0xe5e5e5) returned 0xe5e5e5 [0207.201] GetNearestColor (hdc=0x530106d6, color=0xd8d8d8) returned 0xd8d8d8 [0207.201] GetNearestColor (hdc=0x530106d6, color=0x0) returned 0x0 [0207.201] RestoreDC (hdc=0x530106d6, nSavedDC=-1) returned 1 [0207.201] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.202] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x530106d6) returned 0x0 [0207.202] IsAppThemed () returned 0x1 [0207.202] GetThemeAppProperties () returned 0x3 [0207.202] GetThemeAppProperties () returned 0x3 [0207.202] IsAppThemed () returned 0x1 [0207.202] GetThemeAppProperties () returned 0x3 [0207.202] GetThemeAppProperties () returned 0x3 [0207.202] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x102415, lpdtp=0x27884c8 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0207.202] IsAppThemed () returned 0x1 [0207.202] GetThemeAppProperties () returned 0x3 [0207.202] GetThemeAppProperties () returned 0x3 [0207.202] IsAppThemed () returned 0x1 [0207.202] GetThemeAppProperties () returned 0x3 [0207.202] GetThemeAppProperties () returned 0x3 [0207.202] IsAppThemed () returned 0x1 [0207.202] GetThemeAppProperties () returned 0x3 [0207.202] GetThemeAppProperties () returned 0x3 [0207.202] IsAppThemed () returned 0x1 [0207.203] GetThemeAppProperties () returned 0x3 [0207.203] GetThemeAppProperties () returned 0x3 [0207.203] IsThemePartDefined () returned 0x1 [0207.203] IsAppThemed () returned 0x1 [0207.203] GetThemeAppProperties () returned 0x3 [0207.203] GetThemeAppProperties () returned 0x3 [0207.203] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0207.203] IsAppThemed () returned 0x1 [0207.203] GetThemeAppProperties () returned 0x3 [0207.203] GetThemeAppProperties () returned 0x3 [0207.203] IsAppThemed () returned 0x1 [0207.203] GetThemeAppProperties () returned 0x3 [0207.203] GetThemeAppProperties () returned 0x3 [0207.203] IsThemePartDefined () returned 0x1 [0207.203] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0207.203] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.203] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0207.203] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327290) returned 0x0 [0207.203] GdipIsMatrixIdentity (matrix=0x1c327290, result=0x5dbdc0) returned 0x0 [0207.203] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f190 [0207.203] GdipGetMatrixElements (matrix=0x1c327290, matrixOut=0x89f190) returned 0x0 [0207.203] LocalFree (hMem=0x89f190) returned 0x0 [0207.203] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0207.203] GdipGetMatrixElements (matrix=0x1c327290, matrixOut=0x89f350) returned 0x0 [0207.203] LocalFree (hMem=0x89f350) returned 0x0 [0207.203] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.204] GdipDeleteMatrix (matrix=0x1c327290) returned 0x0 [0207.204] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0207.204] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0207.204] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0207.204] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.204] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.204] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0207.204] GetCurrentObject (hdc=0x530106d6, type=0x1) returned 0x1b00017 [0207.204] GetCurrentObject (hdc=0x530106d6, type=0x2) returned 0x1900010 [0207.204] GetCurrentObject (hdc=0x530106d6, type=0x7) returned 0x11050637 [0207.204] GetCurrentObject (hdc=0x530106d6, type=0x6) returned 0x18a0048 [0207.204] SaveDC (hdc=0x530106d6) returned 1 [0207.204] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8e04054e [0207.204] GetClipRgn (hdc=0x530106d6, hrgn=0xffffffff8e04054e) returned 0 [0207.204] SelectClipRgn (hdc=0x530106d6, hrgn=0x1204074d) returned 2 [0207.204] DeleteObject (ho=0xffffffff8e04054e) returned 1 [0207.205] DeleteObject (ho=0x1204074d) returned 1 [0207.205] OffsetViewportOrgEx (in: hdc=0x530106d6, x=0, y=0, lppt=0x2788ed8 | out: lppt=0x2788ed8) returned 1 [0207.205] DrawThemeParentBackground () returned 0x0 [0207.205] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0207.205] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0207.205] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.205] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.205] GetSystemMetrics (nIndex=42) returned 0 [0207.205] CoTaskMemAlloc (cb=0x20) returned 0x89d370 [0207.205] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d370, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.205] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d370) returned 0xd [0207.205] CoTaskMemFree (pv=0x89d370) [0207.205] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0207.205] GetCurrentObject (hdc=0x530106d6, type=0x1) returned 0x1b00017 [0207.205] GetCurrentObject (hdc=0x530106d6, type=0x2) returned 0x1900010 [0207.205] GetCurrentObject (hdc=0x530106d6, type=0x7) returned 0x11050637 [0207.205] GetCurrentObject (hdc=0x530106d6, type=0x6) returned 0x18a0048 [0207.205] SaveDC (hdc=0x530106d6) returned 2 [0207.206] GetNearestColor (hdc=0x530106d6, color=0xf0f0f0) returned 0xf0f0f0 [0207.206] CreateSolidBrush (color=0xf0f0f0) returned 0x4a100686 [0207.206] FillRect (hDC=0x530106d6, lprc=0x5dafe0, hbr=0x4a100686) returned 1 [0207.206] DeleteObject (ho=0x4a100686) returned 1 [0207.206] RestoreDC (hdc=0x530106d6, nSavedDC=-1) returned 1 [0207.207] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.207] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.207] GetSystemMetrics (nIndex=42) returned 0 [0207.207] CoTaskMemAlloc (cb=0x20) returned 0x89d1c0 [0207.207] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d1c0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.207] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d1c0) returned 0xd [0207.207] CoTaskMemFree (pv=0x89d1c0) [0207.207] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0207.207] GetCurrentObject (hdc=0x530106d6, type=0x1) returned 0x1b00017 [0207.207] GetCurrentObject (hdc=0x530106d6, type=0x2) returned 0x1900010 [0207.207] GetCurrentObject (hdc=0x530106d6, type=0x7) returned 0x11050637 [0207.207] GetCurrentObject (hdc=0x530106d6, type=0x6) returned 0x18a0048 [0207.208] SaveDC (hdc=0x530106d6) returned 2 [0207.208] GetNearestColor (hdc=0x530106d6, color=0xf0f0f0) returned 0xf0f0f0 [0207.208] CreateSolidBrush (color=0xf0f0f0) returned 0x4b100686 [0207.208] FillRect (hDC=0x530106d6, lprc=0x5daee0, hbr=0x4b100686) returned 1 [0207.208] DeleteObject (ho=0x4b100686) returned 1 [0207.208] RestoreDC (hdc=0x530106d6, nSavedDC=-1) returned 1 [0207.208] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.208] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.208] GetSystemMetrics (nIndex=42) returned 0 [0207.208] CoTaskMemAlloc (cb=0x20) returned 0x89d190 [0207.208] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d190, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.208] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d190) returned 0xd [0207.208] CoTaskMemFree (pv=0x89d190) [0207.208] RestoreDC (hdc=0x530106d6, nSavedDC=-1) returned 1 [0207.209] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.209] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x530106d6) returned 0x0 [0207.209] IsAppThemed () returned 0x1 [0207.209] GetThemeAppProperties () returned 0x3 [0207.209] GetThemeAppProperties () returned 0x3 [0207.209] IsAppThemed () returned 0x1 [0207.209] GetThemeAppProperties () returned 0x3 [0207.209] GetThemeAppProperties () returned 0x3 [0207.209] IsThemePartDefined () returned 0x1 [0207.209] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0207.209] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.209] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0207.209] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e10) returned 0x0 [0207.209] GdipIsMatrixIdentity (matrix=0x1c326e10, result=0x5dbca0) returned 0x0 [0207.209] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f6d0 [0207.209] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89f6d0) returned 0x0 [0207.209] LocalFree (hMem=0x89f6d0) returned 0x0 [0207.209] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea50 [0207.209] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89ea50) returned 0x0 [0207.209] LocalFree (hMem=0x89ea50) returned 0x0 [0207.209] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.209] GdipDeleteMatrix (matrix=0x1c326e10) returned 0x0 [0207.209] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0207.209] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0207.210] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0207.210] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.210] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.210] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0207.210] GetCurrentObject (hdc=0x530106d6, type=0x1) returned 0x1b00017 [0207.210] GetCurrentObject (hdc=0x530106d6, type=0x2) returned 0x1900010 [0207.210] GetCurrentObject (hdc=0x530106d6, type=0x7) returned 0x11050637 [0207.210] GetCurrentObject (hdc=0x530106d6, type=0x6) returned 0x18a0048 [0207.210] SaveDC (hdc=0x530106d6) returned 1 [0207.210] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1304074d [0207.210] GetClipRgn (hdc=0x530106d6, hrgn=0x1304074d) returned 0 [0207.210] SelectClipRgn (hdc=0x530106d6, hrgn=0xffffffff9004054e) returned 2 [0207.211] DeleteObject (ho=0x1304074d) returned 1 [0207.211] DeleteObject (ho=0xffffffff9004054e) returned 1 [0207.211] OffsetViewportOrgEx (in: hdc=0x530106d6, x=0, y=0, lppt=0x2789bd8 | out: lppt=0x2789bd8) returned 1 [0207.211] IsAppThemed () returned 0x1 [0207.211] GetThemeAppProperties () returned 0x3 [0207.211] GetThemeAppProperties () returned 0x3 [0207.211] DrawThemeBackground () returned 0x0 [0207.211] RestoreDC (hdc=0x530106d6, nSavedDC=-1) returned 1 [0207.211] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.211] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x530106d6) returned 0x0 [0207.211] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0207.211] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.211] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0207.211] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3272d0) returned 0x0 [0207.211] GdipIsMatrixIdentity (matrix=0x1c3272d0, result=0x5dbc70) returned 0x0 [0207.211] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e850 [0207.211] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89e850) returned 0x0 [0207.211] LocalFree (hMem=0x89e850) returned 0x0 [0207.211] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb50 [0207.211] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89eb50) returned 0x0 [0207.211] LocalFree (hMem=0x89eb50) returned 0x0 [0207.212] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.212] GdipDeleteMatrix (matrix=0x1c3272d0) returned 0x0 [0207.212] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0207.212] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0207.212] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0207.212] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.212] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.212] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0207.212] GetCurrentObject (hdc=0x530106d6, type=0x1) returned 0x1b00017 [0207.212] GetCurrentObject (hdc=0x530106d6, type=0x2) returned 0x1900010 [0207.212] GetCurrentObject (hdc=0x530106d6, type=0x7) returned 0x11050637 [0207.212] GetCurrentObject (hdc=0x530106d6, type=0x6) returned 0x18a0048 [0207.212] SaveDC (hdc=0x530106d6) returned 1 [0207.212] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9104054e [0207.212] GetClipRgn (hdc=0x530106d6, hrgn=0xffffffff9104054e) returned 0 [0207.212] SelectClipRgn (hdc=0x530106d6, hrgn=0x1404074d) returned 2 [0207.213] DeleteObject (ho=0xffffffff9104054e) returned 1 [0207.213] DeleteObject (ho=0x1404074d) returned 1 [0207.213] OffsetViewportOrgEx (in: hdc=0x530106d6, x=0, y=0, lppt=0x278a0d8 | out: lppt=0x278a0d8) returned 1 [0207.213] IsAppThemed () returned 0x1 [0207.213] GetThemeAppProperties () returned 0x3 [0207.213] GetThemeAppProperties () returned 0x3 [0207.213] GetThemeBackgroundContentRect () returned 0x0 [0207.213] RestoreDC (hdc=0x530106d6, nSavedDC=-1) returned 1 [0207.213] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.213] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x530106d6) returned 0x0 [0207.213] IsAppThemed () returned 0x1 [0207.213] GetThemeAppProperties () returned 0x3 [0207.213] GetThemeAppProperties () returned 0x3 [0207.213] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0207.213] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0207.213] GetCurrentObject (hdc=0x530106d6, type=0x1) returned 0x1b00017 [0207.213] GetCurrentObject (hdc=0x530106d6, type=0x2) returned 0x1900010 [0207.213] GetCurrentObject (hdc=0x530106d6, type=0x7) returned 0x11050637 [0207.213] GetCurrentObject (hdc=0x530106d6, type=0x6) returned 0x18a0048 [0207.213] SaveDC (hdc=0x530106d6) returned 1 [0207.214] GetTextAlign (hdc=0x530106d6) returned 0x0 [0207.214] GetTextColor (hdc=0x530106d6) returned 0x0 [0207.214] GetCurrentObject (hdc=0x530106d6, type=0x6) returned 0x18a0048 [0207.214] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0207.214] SelectObject (hdc=0x530106d6, h=0x290a0573) returned 0x18a0048 [0207.214] GetBkMode (hdc=0x530106d6) returned 2 [0207.214] SetBkMode (hdc=0x530106d6, mode=1) returned 2 [0207.214] DrawTextExW (in: hdc=0x530106d6, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x102415, lpdtp=0x278a630 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0207.214] DrawTextExW (in: hdc=0x530106d6, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x102015, lpdtp=0x278a630 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0207.215] RestoreDC (hdc=0x530106d6, nSavedDC=-1) returned 1 [0207.215] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.215] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x530106d6) returned 0x0 [0207.215] GetFocus () returned 0x2021e [0207.215] IsAppThemed () returned 0x1 [0207.215] GetThemeAppProperties () returned 0x3 [0207.215] GetThemeAppProperties () returned 0x3 [0207.215] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0207.215] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x530106d6, x1=0, y1=0, rop=0xcc0020) returned 1 [0207.215] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.215] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x530106d6) returned 0x0 [0207.215] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0207.215] SelectObject (hdc=0x530106d6, h=0x185000f) returned 0x11050637 [0207.215] DeleteDC (hdc=0x530106d6) returned 1 [0207.215] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.215] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0207.215] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0207.216] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0207.216] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0207.216] WaitMessage () returned 1 [0207.304] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.305] IsWindowUnicode (hWnd=0x2021e) returned 1 [0207.305] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.305] TranslateMessage (lpMsg=0x5dd220) returned 0 [0207.305] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0207.305] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.305] IsWindowUnicode (hWnd=0x2021e) returned 1 [0207.305] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.305] TranslateMessage (lpMsg=0x5dd220) returned 0 [0207.305] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0207.305] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2a1, wParam=0x0, lParam=0xb0045) returned 0x0 [0207.305] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0207.305] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0207.305] WaitMessage () returned 1 [0207.420] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.421] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14f00ff) returned 0x1 [0207.421] IsWindowUnicode (hWnd=0x2021e) returned 1 [0207.421] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.421] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14f00ff) returned 0x1 [0207.421] GetDlgItem (hDlg=0x20160, nIDDlgItem=0) returned 0x0 [0207.421] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x210, wParam=0x201, lParam=0xcd0094) returned 0x0 [0207.421] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0207.421] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0207.421] SetCursor (hCursor=0x10003) returned 0x10003 [0207.421] TranslateMessage (lpMsg=0x5dd220) returned 0 [0207.421] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0207.421] GetKeyState (nVirtKey=1) returned -127 [0207.421] GetKeyState (nVirtKey=2) returned 0 [0207.421] GetKeyState (nVirtKey=4) returned 0 [0207.421] GetKeyState (nVirtKey=5) returned 0 [0207.421] GetKeyState (nVirtKey=6) returned 0 [0207.421] IsWindowVisible (hWnd=0x2021e) returned 1 [0207.421] IsWindowEnabled (hWnd=0x2021e) returned 1 [0207.421] SetFocus (hWnd=0x2021e) returned 0x2021e [0207.421] GetFocus () returned 0x2021e [0207.422] GetFocus () returned 0x2021e [0207.422] GetFocus () returned 0x2021e [0207.422] GetKeyState (nVirtKey=1) returned -127 [0207.422] GetKeyState (nVirtKey=2) returned 0 [0207.422] GetKeyState (nVirtKey=4) returned 0 [0207.422] GetKeyState (nVirtKey=5) returned 0 [0207.422] GetKeyState (nVirtKey=6) returned 0 [0207.422] GetCapture () returned 0x0 [0207.422] SetCapture (hWnd=0x2021e) returned 0x0 [0207.422] GetKeyState (nVirtKey=1) returned -127 [0207.422] GetKeyState (nVirtKey=2) returned 0 [0207.422] GetKeyState (nVirtKey=4) returned 0 [0207.422] GetKeyState (nVirtKey=5) returned 0 [0207.422] GetKeyState (nVirtKey=6) returned 0 [0207.422] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0207.422] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc870, bErase=0) returned 1 [0207.422] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.422] IsWindowUnicode (hWnd=0x2021e) returned 1 [0207.422] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0207.423] TranslateMessage (lpMsg=0x5dd220) returned 0 [0207.423] DispatchMessageW (lpMsg=0x5dd220) returned 0x1 [0207.423] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x278a868, cPoints=0x1 | out: lpPoints=0x278a868) returned 21233850 [0207.423] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0207.423] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc7c0, bErase=0) returned 1 [0207.423] UpdateWindow (hWnd=0x2021e) returned 1 [0207.423] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dbdd8 | out: lpPaint=0x5dbdd8) returned 0xa0100d0 [0207.423] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0207.423] CreateCompatibleDC (hdc=0xa0100d0) returned 0x540106d6 [0207.423] SelectObject (hdc=0x540106d6, h=0x11050637) returned 0x185000f [0207.423] GdipCreateFromHDC (hdc=0x540106d6, graphics=0x5dbbe0) returned 0x0 [0207.423] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0207.423] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0207.424] GdipCreateMatrix (matrix=0x5dbd10) returned 0x0 [0207.424] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326dd0) returned 0x0 [0207.424] GdipIsMatrixIdentity (matrix=0x1c326dd0, result=0x5dbd70) returned 0x0 [0207.424] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0207.424] GdipGetMatrixElements (matrix=0x1c326dd0, matrixOut=0x89f050) returned 0x0 [0207.424] LocalFree (hMem=0x89f050) returned 0x0 [0207.424] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.424] GdipDeleteMatrix (matrix=0x1c326dd0) returned 0x0 [0207.424] GdipCreateRegion (region=0x5dbd10) returned 0x0 [0207.424] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.424] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbd40) returned 0x0 [0207.424] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dbe10) returned 0x0 [0207.424] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd930dbd) returned 0x0 [0207.424] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.424] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.425] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db200) returned 0x0 [0207.425] GetCurrentObject (hdc=0x540106d6, type=0x1) returned 0x1b00017 [0207.425] GetCurrentObject (hdc=0x540106d6, type=0x2) returned 0x1900010 [0207.425] GetCurrentObject (hdc=0x540106d6, type=0x7) returned 0x11050637 [0207.425] GetCurrentObject (hdc=0x540106d6, type=0x6) returned 0x18a0048 [0207.425] SaveDC (hdc=0x540106d6) returned 1 [0207.425] GetNearestColor (hdc=0x540106d6, color=0xf0f0f0) returned 0xf0f0f0 [0207.425] GetNearestColor (hdc=0x540106d6, color=0xa0a0a0) returned 0xa0a0a0 [0207.425] GetNearestColor (hdc=0x540106d6, color=0x696969) returned 0x696969 [0207.426] GetNearestColor (hdc=0x540106d6, color=0xa0a0a0) returned 0xa0a0a0 [0207.426] GetNearestColor (hdc=0x540106d6, color=0x0) returned 0x0 [0207.426] GetNearestColor (hdc=0x540106d6, color=0xffffff) returned 0xffffff [0207.426] GetNearestColor (hdc=0x540106d6, color=0xe5e5e5) returned 0xe5e5e5 [0207.426] GetNearestColor (hdc=0x540106d6, color=0xd8d8d8) returned 0xd8d8d8 [0207.426] GetNearestColor (hdc=0x540106d6, color=0x0) returned 0x0 [0207.426] RestoreDC (hdc=0x540106d6, nSavedDC=-1) returned 1 [0207.426] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.426] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x540106d6) returned 0x0 [0207.426] IsAppThemed () returned 0x1 [0207.426] GetThemeAppProperties () returned 0x3 [0207.426] GetThemeAppProperties () returned 0x3 [0207.427] IsAppThemed () returned 0x1 [0207.427] GetThemeAppProperties () returned 0x3 [0207.427] GetThemeAppProperties () returned 0x3 [0207.427] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db440, format=0x102415, lpdtp=0x278b190 | out: lpchText="Submit Decryption Key", lprc=0x5db440) returned 13 [0207.427] IsAppThemed () returned 0x1 [0207.427] GetThemeAppProperties () returned 0x3 [0207.427] GetThemeAppProperties () returned 0x3 [0207.427] IsAppThemed () returned 0x1 [0207.427] GetThemeAppProperties () returned 0x3 [0207.427] GetThemeAppProperties () returned 0x3 [0207.427] IsAppThemed () returned 0x1 [0207.428] GetThemeAppProperties () returned 0x3 [0207.428] GetThemeAppProperties () returned 0x3 [0207.428] IsAppThemed () returned 0x1 [0207.428] GetThemeAppProperties () returned 0x3 [0207.428] GetThemeAppProperties () returned 0x3 [0207.428] IsThemePartDefined () returned 0x1 [0207.428] IsAppThemed () returned 0x1 [0207.428] GetThemeAppProperties () returned 0x3 [0207.428] GetThemeAppProperties () returned 0x3 [0207.428] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0207.428] IsAppThemed () returned 0x1 [0207.428] GetThemeAppProperties () returned 0x3 [0207.428] GetThemeAppProperties () returned 0x3 [0207.428] IsAppThemed () returned 0x1 [0207.428] GetThemeAppProperties () returned 0x3 [0207.428] GetThemeAppProperties () returned 0x3 [0207.429] IsThemePartDefined () returned 0x1 [0207.429] GdipCreateRegion (region=0x5db520) returned 0x0 [0207.429] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.429] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0207.429] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326c90) returned 0x0 [0207.429] GdipIsMatrixIdentity (matrix=0x1c326c90, result=0x5db580) returned 0x0 [0207.429] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f250 [0207.429] GdipGetMatrixElements (matrix=0x1c326c90, matrixOut=0x89f250) returned 0x0 [0207.430] LocalFree (hMem=0x89f250) returned 0x0 [0207.430] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec90 [0207.430] GdipGetMatrixElements (matrix=0x1c326c90, matrixOut=0x89ec90) returned 0x0 [0207.430] LocalFree (hMem=0x89ec90) returned 0x0 [0207.430] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.430] GdipDeleteMatrix (matrix=0x1c326c90) returned 0x0 [0207.430] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db5d0) returned 0x0 [0207.430] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db590) returned 0x0 [0207.430] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db590) returned 0x0 [0207.430] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.430] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.430] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db600) returned 0x0 [0207.430] GetCurrentObject (hdc=0x540106d6, type=0x1) returned 0x1b00017 [0207.430] GetCurrentObject (hdc=0x540106d6, type=0x2) returned 0x1900010 [0207.430] GetCurrentObject (hdc=0x540106d6, type=0x7) returned 0x11050637 [0207.431] GetCurrentObject (hdc=0x540106d6, type=0x6) returned 0x18a0048 [0207.431] SaveDC (hdc=0x540106d6) returned 1 [0207.431] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1504074d [0207.431] GetClipRgn (hdc=0x540106d6, hrgn=0x1504074d) returned 0 [0207.431] SelectClipRgn (hdc=0x540106d6, hrgn=0xffffffff9504054e) returned 2 [0207.431] DeleteObject (ho=0x1504074d) returned 1 [0207.431] DeleteObject (ho=0xffffffff9504054e) returned 1 [0207.431] OffsetViewportOrgEx (in: hdc=0x540106d6, x=0, y=0, lppt=0x278bba0 | out: lppt=0x278bba0) returned 1 [0207.431] DrawThemeParentBackground () returned 0x0 [0207.431] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db040 | out: lpwndpl=0x5db040) returned 1 [0207.431] GetClientRect (in: hWnd=0x20160, lpRect=0x5daec0 | out: lpRect=0x5daec0) returned 1 [0207.432] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.432] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.432] GetSystemMetrics (nIndex=42) returned 0 [0207.432] CoTaskMemAlloc (cb=0x20) returned 0x89d310 [0207.432] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d310, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.432] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d310) returned 0xd [0207.432] CoTaskMemFree (pv=0x89d310) [0207.432] GetClientRect (in: hWnd=0x20160, lpRect=0x5dac70 | out: lpRect=0x5dac70) returned 1 [0207.432] GetCurrentObject (hdc=0x540106d6, type=0x1) returned 0x1b00017 [0207.432] GetCurrentObject (hdc=0x540106d6, type=0x2) returned 0x1900010 [0207.432] GetCurrentObject (hdc=0x540106d6, type=0x7) returned 0x11050637 [0207.432] GetCurrentObject (hdc=0x540106d6, type=0x6) returned 0x18a0048 [0207.432] SaveDC (hdc=0x540106d6) returned 2 [0207.432] GetNearestColor (hdc=0x540106d6, color=0xf0f0f0) returned 0xf0f0f0 [0207.433] CreateSolidBrush (color=0xf0f0f0) returned 0x4c100686 [0207.433] FillRect (hDC=0x540106d6, lprc=0x5da7a0, hbr=0x4c100686) returned 1 [0207.433] DeleteObject (ho=0x4c100686) returned 1 [0207.433] RestoreDC (hdc=0x540106d6, nSavedDC=-1) returned 1 [0207.433] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.433] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.433] GetSystemMetrics (nIndex=42) returned 0 [0207.433] CoTaskMemAlloc (cb=0x20) returned 0x89d370 [0207.433] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d370, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.433] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d370) returned 0xd [0207.433] CoTaskMemFree (pv=0x89d370) [0207.433] GetClientRect (in: hWnd=0x20160, lpRect=0x5dab70 | out: lpRect=0x5dab70) returned 1 [0207.433] GetCurrentObject (hdc=0x540106d6, type=0x1) returned 0x1b00017 [0207.433] GetCurrentObject (hdc=0x540106d6, type=0x2) returned 0x1900010 [0207.433] GetCurrentObject (hdc=0x540106d6, type=0x7) returned 0x11050637 [0207.433] GetCurrentObject (hdc=0x540106d6, type=0x6) returned 0x18a0048 [0207.434] SaveDC (hdc=0x540106d6) returned 2 [0207.434] GetNearestColor (hdc=0x540106d6, color=0xf0f0f0) returned 0xf0f0f0 [0207.434] CreateSolidBrush (color=0xf0f0f0) returned 0x4d100686 [0207.434] FillRect (hDC=0x540106d6, lprc=0x5da6a0, hbr=0x4d100686) returned 1 [0207.434] DeleteObject (ho=0x4d100686) returned 1 [0207.434] RestoreDC (hdc=0x540106d6, nSavedDC=-1) returned 1 [0207.434] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.434] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.434] GetSystemMetrics (nIndex=42) returned 0 [0207.434] CoTaskMemAlloc (cb=0x20) returned 0x89ce60 [0207.434] GetWindowTextW (in: hWnd=0x20160, lpString=0x89ce60, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.434] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89ce60) returned 0xd [0207.434] CoTaskMemFree (pv=0x89ce60) [0207.434] RestoreDC (hdc=0x540106d6, nSavedDC=-1) returned 1 [0207.435] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.435] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x540106d6) returned 0x0 [0207.435] IsAppThemed () returned 0x1 [0207.435] GetThemeAppProperties () returned 0x3 [0207.435] GetThemeAppProperties () returned 0x3 [0207.435] IsAppThemed () returned 0x1 [0207.435] GetThemeAppProperties () returned 0x3 [0207.435] GetThemeAppProperties () returned 0x3 [0207.435] IsThemePartDefined () returned 0x1 [0207.435] GdipCreateRegion (region=0x5db400) returned 0x0 [0207.435] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.435] GdipCreateMatrix (matrix=0x5db400) returned 0x0 [0207.435] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e10) returned 0x0 [0207.435] GdipIsMatrixIdentity (matrix=0x1c326e10, result=0x5db460) returned 0x0 [0207.435] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0207.435] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89f450) returned 0x0 [0207.435] LocalFree (hMem=0x89f450) returned 0x0 [0207.435] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f310 [0207.435] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89f310) returned 0x0 [0207.436] LocalFree (hMem=0x89f310) returned 0x0 [0207.436] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.436] GdipDeleteMatrix (matrix=0x1c326e10) returned 0x0 [0207.436] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db4b0) returned 0x0 [0207.436] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db470) returned 0x0 [0207.436] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db470) returned 0x0 [0207.436] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.436] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.436] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4e0) returned 0x0 [0207.436] GetCurrentObject (hdc=0x540106d6, type=0x1) returned 0x1b00017 [0207.436] GetCurrentObject (hdc=0x540106d6, type=0x2) returned 0x1900010 [0207.436] GetCurrentObject (hdc=0x540106d6, type=0x7) returned 0x11050637 [0207.436] GetCurrentObject (hdc=0x540106d6, type=0x6) returned 0x18a0048 [0207.436] SaveDC (hdc=0x540106d6) returned 1 [0207.436] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9604054e [0207.436] GetClipRgn (hdc=0x540106d6, hrgn=0xffffffff9604054e) returned 0 [0207.436] SelectClipRgn (hdc=0x540106d6, hrgn=0x1704074d) returned 2 [0207.436] DeleteObject (ho=0xffffffff9604054e) returned 1 [0207.436] DeleteObject (ho=0x1704074d) returned 1 [0207.437] OffsetViewportOrgEx (in: hdc=0x540106d6, x=0, y=0, lppt=0x278c8a0 | out: lppt=0x278c8a0) returned 1 [0207.437] IsAppThemed () returned 0x1 [0207.437] GetThemeAppProperties () returned 0x3 [0207.437] GetThemeAppProperties () returned 0x3 [0207.437] DrawThemeBackground () returned 0x0 [0207.437] RestoreDC (hdc=0x540106d6, nSavedDC=-1) returned 1 [0207.437] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.437] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x540106d6) returned 0x0 [0207.437] GdipCreateRegion (region=0x5db3d0) returned 0x0 [0207.437] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.437] GdipCreateMatrix (matrix=0x5db3d0) returned 0x0 [0207.437] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326dd0) returned 0x0 [0207.437] GdipIsMatrixIdentity (matrix=0x1c326dd0, result=0x5db430) returned 0x0 [0207.437] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0207.437] GdipGetMatrixElements (matrix=0x1c326dd0, matrixOut=0x89f450) returned 0x0 [0207.437] LocalFree (hMem=0x89f450) returned 0x0 [0207.438] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f590 [0207.438] GdipGetMatrixElements (matrix=0x1c326dd0, matrixOut=0x89f590) returned 0x0 [0207.438] LocalFree (hMem=0x89f590) returned 0x0 [0207.438] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.438] GdipDeleteMatrix (matrix=0x1c326dd0) returned 0x0 [0207.438] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db480) returned 0x0 [0207.438] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db440) returned 0x0 [0207.438] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db440) returned 0x0 [0207.438] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.438] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.438] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4b0) returned 0x0 [0207.438] GetCurrentObject (hdc=0x540106d6, type=0x1) returned 0x1b00017 [0207.438] GetCurrentObject (hdc=0x540106d6, type=0x2) returned 0x1900010 [0207.438] GetCurrentObject (hdc=0x540106d6, type=0x7) returned 0x11050637 [0207.438] GetCurrentObject (hdc=0x540106d6, type=0x6) returned 0x18a0048 [0207.438] SaveDC (hdc=0x540106d6) returned 1 [0207.439] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1804074d [0207.439] GetClipRgn (hdc=0x540106d6, hrgn=0x1804074d) returned 0 [0207.439] SelectClipRgn (hdc=0x540106d6, hrgn=0xffffffff9704054e) returned 2 [0207.439] DeleteObject (ho=0x1804074d) returned 1 [0207.439] DeleteObject (ho=0xffffffff9704054e) returned 1 [0207.439] OffsetViewportOrgEx (in: hdc=0x540106d6, x=0, y=0, lppt=0x278cda0 | out: lppt=0x278cda0) returned 1 [0207.439] IsAppThemed () returned 0x1 [0207.439] GetThemeAppProperties () returned 0x3 [0207.439] GetThemeAppProperties () returned 0x3 [0207.439] GetThemeBackgroundContentRect () returned 0x0 [0207.439] RestoreDC (hdc=0x540106d6, nSavedDC=-1) returned 1 [0207.439] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.439] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x540106d6) returned 0x0 [0207.439] IsAppThemed () returned 0x1 [0207.439] GetThemeAppProperties () returned 0x3 [0207.439] GetThemeAppProperties () returned 0x3 [0207.439] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5db5a0) returned 0x0 [0207.439] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db580) returned 0x0 [0207.440] GetCurrentObject (hdc=0x540106d6, type=0x1) returned 0x1b00017 [0207.440] GetCurrentObject (hdc=0x540106d6, type=0x2) returned 0x1900010 [0207.440] GetCurrentObject (hdc=0x540106d6, type=0x7) returned 0x11050637 [0207.440] GetCurrentObject (hdc=0x540106d6, type=0x6) returned 0x18a0048 [0207.440] SaveDC (hdc=0x540106d6) returned 1 [0207.440] GetTextAlign (hdc=0x540106d6) returned 0x0 [0207.440] GetTextColor (hdc=0x540106d6) returned 0x0 [0207.440] GetCurrentObject (hdc=0x540106d6, type=0x6) returned 0x18a0048 [0207.440] GetObjectW (in: h=0x18a0048, c=92, pv=0x5daff0 | out: pv=0x5daff0) returned 92 [0207.440] SelectObject (hdc=0x540106d6, h=0x290a0573) returned 0x18a0048 [0207.440] GetBkMode (hdc=0x540106d6) returned 2 [0207.440] SetBkMode (hdc=0x540106d6, mode=1) returned 2 [0207.440] DrawTextExW (in: hdc=0x540106d6, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db080, format=0x102415, lpdtp=0x278d2f8 | out: lpchText="Submit Decryption Key", lprc=0x5db080) returned 13 [0207.440] DrawTextExW (in: hdc=0x540106d6, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db130, format=0x102015, lpdtp=0x278d2f8 | out: lpchText="Submit Decryption Key", lprc=0x5db130) returned 13 [0207.441] RestoreDC (hdc=0x540106d6, nSavedDC=-1) returned 1 [0207.441] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.441] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x540106d6) returned 0x0 [0207.441] GetFocus () returned 0x2021e [0207.441] IsAppThemed () returned 0x1 [0207.441] GetThemeAppProperties () returned 0x3 [0207.441] GetThemeAppProperties () returned 0x3 [0207.441] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbce0) returned 0x0 [0207.441] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x540106d6, x1=0, y1=0, rop=0xcc0020) returned 1 [0207.441] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.441] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x540106d6) returned 0x0 [0207.442] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0207.442] SelectObject (hdc=0x540106d6, h=0x185000f) returned 0x11050637 [0207.442] DeleteDC (hdc=0x540106d6) returned 1 [0207.442] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.442] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0207.442] EndPaint (hWnd=0x2021e, lpPaint=0x5dbde8) returned 1 [0207.442] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x278d460, cPoints=0x1 | out: lpPoints=0x278d460) returned 21233850 [0207.442] WindowFromPoint (Point=0x14f000000ff) returned 0x2021e [0207.442] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14f00ff) returned 0x1 [0207.442] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0207.442] NotifyWinEvent (event=0x800c, hwnd=0x2021e, idObject=-4, idChild=0) [0207.443] SendMessageW (hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0207.443] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0207.443] GetProcessWindowStation () returned 0xc8 [0207.443] GetActiveWindow () returned 0x20160 [0207.443] GetCurrentActCtx (in: lphActCtx=0x5dc620 | out: lphActCtx=0x5dc620*=0x811d28) returned 1 [0207.443] GetCurrentThreadId () returned 0xe28 [0207.443] EnumThreadWindows (dwThreadId=0xe28, lpfn=0x21641ec, lParam=0x0) returned 1 [0207.443] IsWindowVisible (hWnd=0x20160) returned 1 [0207.443] IsWindowEnabled (hWnd=0x20160) returned 1 [0207.444] IsWindowVisible (hWnd=0x901f6) returned 1 [0207.444] IsWindowEnabled (hWnd=0x901f6) returned 0 [0207.444] IsWindowVisible (hWnd=0x20232) returned 0 [0207.444] IsWindowVisible (hWnd=0x20224) returned 0 [0207.444] IsWindowVisible (hWnd=0x50020) returned 0 [0207.444] IsWindowVisible (hWnd=0x20230) returned 0 [0207.444] IsWindowVisible (hWnd=0x60152) returned 0 [0207.444] GetActiveWindow () returned 0x20160 [0207.444] GetFocus () returned 0x2021e [0207.444] IsWindow (hWnd=0x20160) returned 1 [0207.444] EnableWindow (hWnd=0x20160, bEnable=0) returned 0 [0207.444] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0207.445] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0207.445] MessageBoxW (hWnd=0x20160, lpText="The decryption key has bad format.", lpCaption="Error", uType=0x10) returned 0 [0207.447] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0207.454] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x3021c) returned 0x1 [0207.456] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0207.456] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0207.456] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0207.456] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0207.457] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0207.457] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0207.458] GetFocus () returned 0x30212 [0207.458] IsChild (hWndParent=0x20160, hWnd=0x30212) returned 0 [0207.458] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x8, wParam=0x30212, lParam=0x0) returned 0x0 [0207.458] GetCapture () returned 0x2021e [0207.458] ReleaseCapture () returned 1 [0207.458] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0207.458] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0207.459] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0207.460] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0207.463] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0207.463] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0x1010749 [0207.464] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0207.464] CreateCompatibleDC (hdc=0x1010749) returned 0x7d010713 [0207.464] SelectObject (hdc=0x7d010713, h=0x11050637) returned 0x185000f [0207.464] GdipCreateFromHDC (hdc=0x7d010713, graphics=0x5db3f0) returned 0x0 [0207.464] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0207.464] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0207.464] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0207.464] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327110) returned 0x0 [0207.464] GdipIsMatrixIdentity (matrix=0x1c327110, result=0x5db580) returned 0x0 [0207.464] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0207.464] GdipGetMatrixElements (matrix=0x1c327110, matrixOut=0x89f050) returned 0x0 [0207.464] LocalFree (hMem=0x89f050) returned 0x0 [0207.464] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.464] GdipDeleteMatrix (matrix=0x1c327110) returned 0x0 [0207.465] GdipCreateRegion (region=0x5db520) returned 0x0 [0207.465] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.465] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0207.465] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0207.465] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd910dbd) returned 0x0 [0207.465] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.465] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.465] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0207.465] GetCurrentObject (hdc=0x7d010713, type=0x1) returned 0x1b00017 [0207.465] GetCurrentObject (hdc=0x7d010713, type=0x2) returned 0x1900010 [0207.466] GetCurrentObject (hdc=0x7d010713, type=0x7) returned 0x11050637 [0207.466] GetCurrentObject (hdc=0x7d010713, type=0x6) returned 0x18a0048 [0207.466] SaveDC (hdc=0x7d010713) returned 1 [0207.466] GetNearestColor (hdc=0x7d010713, color=0xf0f0f0) returned 0xf0f0f0 [0207.466] GetNearestColor (hdc=0x7d010713, color=0xa0a0a0) returned 0xa0a0a0 [0207.466] GetNearestColor (hdc=0x7d010713, color=0x696969) returned 0x696969 [0207.466] GetNearestColor (hdc=0x7d010713, color=0xa0a0a0) returned 0xa0a0a0 [0207.466] GetNearestColor (hdc=0x7d010713, color=0x0) returned 0x0 [0207.466] GetNearestColor (hdc=0x7d010713, color=0xffffff) returned 0xffffff [0207.466] GetNearestColor (hdc=0x7d010713, color=0xe5e5e5) returned 0xe5e5e5 [0207.467] GetNearestColor (hdc=0x7d010713, color=0xd8d8d8) returned 0xd8d8d8 [0207.467] GetNearestColor (hdc=0x7d010713, color=0x0) returned 0x0 [0207.467] RestoreDC (hdc=0x7d010713, nSavedDC=-1) returned 1 [0207.467] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.467] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7d010713) returned 0x0 [0207.467] IsAppThemed () returned 0x1 [0207.467] GetThemeAppProperties () returned 0x3 [0207.467] GetThemeAppProperties () returned 0x3 [0207.467] IsAppThemed () returned 0x1 [0207.467] GetThemeAppProperties () returned 0x3 [0207.467] GetThemeAppProperties () returned 0x3 [0207.467] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x102415, lpdtp=0x278e078 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0207.468] IsAppThemed () returned 0x1 [0207.468] GetThemeAppProperties () returned 0x3 [0207.468] GetThemeAppProperties () returned 0x3 [0207.468] IsAppThemed () returned 0x1 [0207.468] GetThemeAppProperties () returned 0x3 [0207.468] GetThemeAppProperties () returned 0x3 [0207.468] IsAppThemed () returned 0x1 [0207.468] GetThemeAppProperties () returned 0x3 [0207.468] GetThemeAppProperties () returned 0x3 [0207.468] IsAppThemed () returned 0x1 [0207.469] GetThemeAppProperties () returned 0x3 [0207.469] GetThemeAppProperties () returned 0x3 [0207.469] IsThemePartDefined () returned 0x1 [0207.469] IsAppThemed () returned 0x1 [0207.469] GetThemeAppProperties () returned 0x3 [0207.469] GetThemeAppProperties () returned 0x3 [0207.469] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0207.469] IsAppThemed () returned 0x1 [0207.469] GetThemeAppProperties () returned 0x3 [0207.469] GetThemeAppProperties () returned 0x3 [0207.469] IsAppThemed () returned 0x1 [0207.469] GetThemeAppProperties () returned 0x3 [0207.469] GetThemeAppProperties () returned 0x3 [0207.469] IsThemePartDefined () returned 0x1 [0207.469] GdipCreateRegion (region=0x5dad30) returned 0x0 [0207.469] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.469] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0207.469] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f90) returned 0x0 [0207.469] GdipIsMatrixIdentity (matrix=0x1c326f90, result=0x5dad90) returned 0x0 [0207.470] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f650 [0207.470] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89f650) returned 0x0 [0207.470] LocalFree (hMem=0x89f650) returned 0x0 [0207.470] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0207.470] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89f350) returned 0x0 [0207.470] LocalFree (hMem=0x89f350) returned 0x0 [0207.470] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.470] GdipDeleteMatrix (matrix=0x1c326f90) returned 0x0 [0207.470] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0207.470] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0207.470] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0207.470] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.470] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.470] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0207.470] GetCurrentObject (hdc=0x7d010713, type=0x1) returned 0x1b00017 [0207.470] GetCurrentObject (hdc=0x7d010713, type=0x2) returned 0x1900010 [0207.470] GetCurrentObject (hdc=0x7d010713, type=0x7) returned 0x11050637 [0207.470] GetCurrentObject (hdc=0x7d010713, type=0x6) returned 0x18a0048 [0207.471] SaveDC (hdc=0x7d010713) returned 1 [0207.471] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9804054e [0207.471] GetClipRgn (hdc=0x7d010713, hrgn=0xffffffff9804054e) returned 0 [0207.471] SelectClipRgn (hdc=0x7d010713, hrgn=0x1e04074d) returned 2 [0207.471] DeleteObject (ho=0xffffffff9804054e) returned 1 [0207.471] DeleteObject (ho=0x1e04074d) returned 1 [0207.471] OffsetViewportOrgEx (in: hdc=0x7d010713, x=0, y=0, lppt=0x278ea88 | out: lppt=0x278ea88) returned 1 [0207.471] DrawThemeParentBackground () returned 0x0 [0207.471] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0207.471] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0207.471] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.471] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.472] GetSystemMetrics (nIndex=42) returned 0 [0207.472] CoTaskMemAlloc (cb=0x20) returned 0x89d3d0 [0207.472] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d3d0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.472] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d3d0) returned 0xd [0207.472] CoTaskMemFree (pv=0x89d3d0) [0207.472] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0207.472] GetCurrentObject (hdc=0x7d010713, type=0x1) returned 0x1b00017 [0207.472] GetCurrentObject (hdc=0x7d010713, type=0x2) returned 0x1900010 [0207.472] GetCurrentObject (hdc=0x7d010713, type=0x7) returned 0x11050637 [0207.472] GetCurrentObject (hdc=0x7d010713, type=0x6) returned 0x18a0048 [0207.472] SaveDC (hdc=0x7d010713) returned 2 [0207.472] GetNearestColor (hdc=0x7d010713, color=0xf0f0f0) returned 0xf0f0f0 [0207.472] CreateSolidBrush (color=0xf0f0f0) returned 0x4e100686 [0207.472] FillRect (hDC=0x7d010713, lprc=0x5d9fb0, hbr=0x4e100686) returned 1 [0207.473] DeleteObject (ho=0x4e100686) returned 1 [0207.473] RestoreDC (hdc=0x7d010713, nSavedDC=-1) returned 1 [0207.473] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.473] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.473] GetSystemMetrics (nIndex=42) returned 0 [0207.473] CoTaskMemAlloc (cb=0x20) returned 0x89d160 [0207.473] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d160, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.473] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d160) returned 0xd [0207.473] CoTaskMemFree (pv=0x89d160) [0207.473] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0207.473] GetCurrentObject (hdc=0x7d010713, type=0x1) returned 0x1b00017 [0207.473] GetCurrentObject (hdc=0x7d010713, type=0x2) returned 0x1900010 [0207.473] GetCurrentObject (hdc=0x7d010713, type=0x7) returned 0x11050637 [0207.473] GetCurrentObject (hdc=0x7d010713, type=0x6) returned 0x18a0048 [0207.474] SaveDC (hdc=0x7d010713) returned 2 [0207.474] GetNearestColor (hdc=0x7d010713, color=0xf0f0f0) returned 0xf0f0f0 [0207.474] CreateSolidBrush (color=0xf0f0f0) returned 0x4f100686 [0207.474] FillRect (hDC=0x7d010713, lprc=0x5d9eb0, hbr=0x4f100686) returned 1 [0207.474] DeleteObject (ho=0x4f100686) returned 1 [0207.474] RestoreDC (hdc=0x7d010713, nSavedDC=-1) returned 1 [0207.474] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.474] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.474] GetSystemMetrics (nIndex=42) returned 0 [0207.474] CoTaskMemAlloc (cb=0x20) returned 0x89d010 [0207.474] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d010, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.474] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d010) returned 0xd [0207.474] CoTaskMemFree (pv=0x89d010) [0207.475] RestoreDC (hdc=0x7d010713, nSavedDC=-1) returned 1 [0207.475] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.475] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7d010713) returned 0x0 [0207.475] IsAppThemed () returned 0x1 [0207.475] GetThemeAppProperties () returned 0x3 [0207.475] GetThemeAppProperties () returned 0x3 [0207.475] IsAppThemed () returned 0x1 [0207.475] GetThemeAppProperties () returned 0x3 [0207.475] GetThemeAppProperties () returned 0x3 [0207.475] IsThemePartDefined () returned 0x1 [0207.475] GdipCreateRegion (region=0x5dac10) returned 0x0 [0207.475] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.475] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0207.475] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326cd0) returned 0x0 [0207.475] GdipIsMatrixIdentity (matrix=0x1c326cd0, result=0x5dac70) returned 0x0 [0207.475] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f210 [0207.475] GdipGetMatrixElements (matrix=0x1c326cd0, matrixOut=0x89f210) returned 0x0 [0207.475] LocalFree (hMem=0x89f210) returned 0x0 [0207.475] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0207.475] GdipGetMatrixElements (matrix=0x1c326cd0, matrixOut=0x89f450) returned 0x0 [0207.476] LocalFree (hMem=0x89f450) returned 0x0 [0207.476] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.476] GdipDeleteMatrix (matrix=0x1c326cd0) returned 0x0 [0207.476] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0207.476] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0207.476] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0207.476] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.480] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.480] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0207.480] GetCurrentObject (hdc=0x7d010713, type=0x1) returned 0x1b00017 [0207.480] GetCurrentObject (hdc=0x7d010713, type=0x2) returned 0x1900010 [0207.480] GetCurrentObject (hdc=0x7d010713, type=0x7) returned 0x11050637 [0207.480] GetCurrentObject (hdc=0x7d010713, type=0x6) returned 0x18a0048 [0207.481] SaveDC (hdc=0x7d010713) returned 1 [0207.481] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1f04074d [0207.481] GetClipRgn (hdc=0x7d010713, hrgn=0x1f04074d) returned 0 [0207.481] SelectClipRgn (hdc=0x7d010713, hrgn=0xffffffff9a04054e) returned 2 [0207.481] DeleteObject (ho=0x1f04074d) returned 1 [0207.481] DeleteObject (ho=0xffffffff9a04054e) returned 1 [0207.481] OffsetViewportOrgEx (in: hdc=0x7d010713, x=0, y=0, lppt=0x278f788 | out: lppt=0x278f788) returned 1 [0207.481] IsAppThemed () returned 0x1 [0207.481] GetThemeAppProperties () returned 0x3 [0207.481] GetThemeAppProperties () returned 0x3 [0207.481] DrawThemeBackground () returned 0x0 [0207.481] RestoreDC (hdc=0x7d010713, nSavedDC=-1) returned 1 [0207.481] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.481] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7d010713) returned 0x0 [0207.481] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0207.482] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.482] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0207.482] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327290) returned 0x0 [0207.482] GdipIsMatrixIdentity (matrix=0x1c327290, result=0x5dac40) returned 0x0 [0207.482] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e890 [0207.482] GdipGetMatrixElements (matrix=0x1c327290, matrixOut=0x89e890) returned 0x0 [0207.482] LocalFree (hMem=0x89e890) returned 0x0 [0207.482] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e850 [0207.482] GdipGetMatrixElements (matrix=0x1c327290, matrixOut=0x89e850) returned 0x0 [0207.482] LocalFree (hMem=0x89e850) returned 0x0 [0207.482] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.482] GdipDeleteMatrix (matrix=0x1c327290) returned 0x0 [0207.482] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0207.482] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0207.482] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0207.482] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.482] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.482] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0207.482] GetCurrentObject (hdc=0x7d010713, type=0x1) returned 0x1b00017 [0207.482] GetCurrentObject (hdc=0x7d010713, type=0x2) returned 0x1900010 [0207.483] GetCurrentObject (hdc=0x7d010713, type=0x7) returned 0x11050637 [0207.483] GetCurrentObject (hdc=0x7d010713, type=0x6) returned 0x18a0048 [0207.483] SaveDC (hdc=0x7d010713) returned 1 [0207.483] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9b04054e [0207.483] GetClipRgn (hdc=0x7d010713, hrgn=0xffffffff9b04054e) returned 0 [0207.483] SelectClipRgn (hdc=0x7d010713, hrgn=0x2004074d) returned 2 [0207.483] DeleteObject (ho=0xffffffff9b04054e) returned 1 [0207.483] DeleteObject (ho=0x2004074d) returned 1 [0207.483] OffsetViewportOrgEx (in: hdc=0x7d010713, x=0, y=0, lppt=0x278fc88 | out: lppt=0x278fc88) returned 1 [0207.483] IsAppThemed () returned 0x1 [0207.483] GetThemeAppProperties () returned 0x3 [0207.483] GetThemeAppProperties () returned 0x3 [0207.483] GetThemeBackgroundContentRect () returned 0x0 [0207.483] RestoreDC (hdc=0x7d010713, nSavedDC=-1) returned 1 [0207.483] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.483] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7d010713) returned 0x0 [0207.483] IsAppThemed () returned 0x1 [0207.484] GetThemeAppProperties () returned 0x3 [0207.484] GetThemeAppProperties () returned 0x3 [0207.484] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0207.484] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0207.484] GetCurrentObject (hdc=0x7d010713, type=0x1) returned 0x1b00017 [0207.484] GetCurrentObject (hdc=0x7d010713, type=0x2) returned 0x1900010 [0207.484] GetCurrentObject (hdc=0x7d010713, type=0x7) returned 0x11050637 [0207.484] GetCurrentObject (hdc=0x7d010713, type=0x6) returned 0x18a0048 [0207.484] SaveDC (hdc=0x7d010713) returned 1 [0207.484] GetTextAlign (hdc=0x7d010713) returned 0x0 [0207.484] GetTextColor (hdc=0x7d010713) returned 0x0 [0207.484] GetCurrentObject (hdc=0x7d010713, type=0x6) returned 0x18a0048 [0207.484] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0207.485] SelectObject (hdc=0x7d010713, h=0x290a0573) returned 0x18a0048 [0207.485] GetBkMode (hdc=0x7d010713) returned 2 [0207.485] SetBkMode (hdc=0x7d010713, mode=1) returned 2 [0207.485] DrawTextExW (in: hdc=0x7d010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x102415, lpdtp=0x27901e0 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0207.485] DrawTextExW (in: hdc=0x7d010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x102015, lpdtp=0x27901e0 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0207.485] RestoreDC (hdc=0x7d010713, nSavedDC=-1) returned 1 [0207.485] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.485] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7d010713) returned 0x0 [0207.485] GetFocus () returned 0x30212 [0207.486] IsAppThemed () returned 0x1 [0207.486] GetThemeAppProperties () returned 0x3 [0207.486] GetThemeAppProperties () returned 0x3 [0207.486] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0207.486] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0x7d010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0207.486] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.486] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7d010713) returned 0x0 [0207.486] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0207.486] SelectObject (hdc=0x7d010713, h=0x185000f) returned 0x11050637 [0207.486] DeleteDC (hdc=0x7d010713) returned 1 [0207.486] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.486] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0207.486] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0207.486] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0207.486] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0207.487] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0x1010749 [0207.487] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0207.487] CreateCompatibleDC (hdc=0x1010749) returned 0x7e010713 [0207.487] SelectObject (hdc=0x7e010713, h=0x11050637) returned 0x185000f [0207.487] GdipCreateFromHDC (hdc=0x7e010713, graphics=0x5db3f0) returned 0x0 [0207.487] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0207.487] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0207.487] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0207.487] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326cd0) returned 0x0 [0207.487] GdipIsMatrixIdentity (matrix=0x1c326cd0, result=0x5db580) returned 0x0 [0207.487] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e7d0 [0207.487] GdipGetMatrixElements (matrix=0x1c326cd0, matrixOut=0x89e7d0) returned 0x0 [0207.487] LocalFree (hMem=0x89e7d0) returned 0x0 [0207.488] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.488] GdipDeleteMatrix (matrix=0x1c326cd0) returned 0x0 [0207.488] GdipCreateRegion (region=0x5db520) returned 0x0 [0207.488] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.488] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0207.488] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0207.488] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd8f0dbd) returned 0x0 [0207.488] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.489] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.489] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0207.489] GetCurrentObject (hdc=0x7e010713, type=0x1) returned 0x1b00017 [0207.489] GetCurrentObject (hdc=0x7e010713, type=0x2) returned 0x1900010 [0207.489] GetCurrentObject (hdc=0x7e010713, type=0x7) returned 0x11050637 [0207.489] GetCurrentObject (hdc=0x7e010713, type=0x6) returned 0x18a0048 [0207.489] SaveDC (hdc=0x7e010713) returned 1 [0207.489] GetNearestColor (hdc=0x7e010713, color=0xf0f0f0) returned 0xf0f0f0 [0207.490] GetNearestColor (hdc=0x7e010713, color=0xa0a0a0) returned 0xa0a0a0 [0207.490] GetNearestColor (hdc=0x7e010713, color=0x696969) returned 0x696969 [0207.490] GetNearestColor (hdc=0x7e010713, color=0xa0a0a0) returned 0xa0a0a0 [0207.490] GetNearestColor (hdc=0x7e010713, color=0x0) returned 0x0 [0207.490] GetNearestColor (hdc=0x7e010713, color=0xffffff) returned 0xffffff [0207.490] GetNearestColor (hdc=0x7e010713, color=0xe5e5e5) returned 0xe5e5e5 [0207.490] GetNearestColor (hdc=0x7e010713, color=0xd8d8d8) returned 0xd8d8d8 [0207.490] GetNearestColor (hdc=0x7e010713, color=0x0) returned 0x0 [0207.490] RestoreDC (hdc=0x7e010713, nSavedDC=-1) returned 1 [0207.490] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.490] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7e010713) returned 0x0 [0207.490] IsAppThemed () returned 0x1 [0207.491] GetThemeAppProperties () returned 0x3 [0207.491] GetThemeAppProperties () returned 0x3 [0207.491] IsAppThemed () returned 0x1 [0207.491] GetThemeAppProperties () returned 0x3 [0207.491] GetThemeAppProperties () returned 0x3 [0207.491] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x102415, lpdtp=0x2790c30 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0207.491] IsAppThemed () returned 0x1 [0207.491] GetThemeAppProperties () returned 0x3 [0207.491] GetThemeAppProperties () returned 0x3 [0207.491] IsAppThemed () returned 0x1 [0207.491] GetThemeAppProperties () returned 0x3 [0207.491] GetThemeAppProperties () returned 0x3 [0207.491] GetFocus () returned 0x30212 [0207.491] IsAppThemed () returned 0x1 [0207.491] GetThemeAppProperties () returned 0x3 [0207.491] GetThemeAppProperties () returned 0x3 [0207.491] IsAppThemed () returned 0x1 [0207.493] GetThemeAppProperties () returned 0x3 [0207.493] GetThemeAppProperties () returned 0x3 [0207.493] IsThemePartDefined () returned 0x1 [0207.493] IsAppThemed () returned 0x1 [0207.493] GetThemeAppProperties () returned 0x3 [0207.493] GetThemeAppProperties () returned 0x3 [0207.493] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0207.493] IsAppThemed () returned 0x1 [0207.493] GetThemeAppProperties () returned 0x3 [0207.493] GetThemeAppProperties () returned 0x3 [0207.493] IsAppThemed () returned 0x1 [0207.493] GetThemeAppProperties () returned 0x3 [0207.493] GetThemeAppProperties () returned 0x3 [0207.493] IsThemePartDefined () returned 0x1 [0207.494] GdipCreateRegion (region=0x5dad30) returned 0x0 [0207.494] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.494] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0207.494] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327210) returned 0x0 [0207.494] GdipIsMatrixIdentity (matrix=0x1c327210, result=0x5dad90) returned 0x0 [0207.494] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e7d0 [0207.494] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89e7d0) returned 0x0 [0207.494] LocalFree (hMem=0x89e7d0) returned 0x0 [0207.494] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb90 [0207.494] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89eb90) returned 0x0 [0207.494] LocalFree (hMem=0x89eb90) returned 0x0 [0207.494] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.494] GdipDeleteMatrix (matrix=0x1c327210) returned 0x0 [0207.494] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0207.494] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0207.494] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0207.494] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.494] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.494] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0207.494] GetCurrentObject (hdc=0x7e010713, type=0x1) returned 0x1b00017 [0207.494] GetCurrentObject (hdc=0x7e010713, type=0x2) returned 0x1900010 [0207.495] GetCurrentObject (hdc=0x7e010713, type=0x7) returned 0x11050637 [0207.495] GetCurrentObject (hdc=0x7e010713, type=0x6) returned 0x18a0048 [0207.495] SaveDC (hdc=0x7e010713) returned 1 [0207.495] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2104074d [0207.495] GetClipRgn (hdc=0x7e010713, hrgn=0x2104074d) returned 0 [0207.495] SelectClipRgn (hdc=0x7e010713, hrgn=0xffffffff9f04054e) returned 2 [0207.495] DeleteObject (ho=0x2104074d) returned 1 [0207.495] DeleteObject (ho=0xffffffff9f04054e) returned 1 [0207.495] OffsetViewportOrgEx (in: hdc=0x7e010713, x=0, y=0, lppt=0x2791640 | out: lppt=0x2791640) returned 1 [0207.495] DrawThemeParentBackground () returned 0xd [0207.495] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0207.495] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0207.495] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.495] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.496] GetSystemMetrics (nIndex=42) returned 0 [0207.496] CoTaskMemAlloc (cb=0x20) returned 0x89d130 [0207.496] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d130, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.496] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d130) returned 0xd [0207.496] CoTaskMemFree (pv=0x89d130) [0207.496] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0207.496] GetCurrentObject (hdc=0x7e010713, type=0x1) returned 0x1b00017 [0207.496] GetCurrentObject (hdc=0x7e010713, type=0x2) returned 0x1900010 [0207.496] GetCurrentObject (hdc=0x7e010713, type=0x7) returned 0x11050637 [0207.496] GetCurrentObject (hdc=0x7e010713, type=0x6) returned 0x18a0048 [0207.496] SaveDC (hdc=0x7e010713) returned 2 [0207.496] GetNearestColor (hdc=0x7e010713, color=0xf0f0f0) returned 0xf0f0f0 [0207.496] CreateSolidBrush (color=0xf0f0f0) returned 0x50100686 [0207.496] FillRect (hDC=0x7e010713, lprc=0x5d9fb0, hbr=0x50100686) returned 1 [0207.496] DeleteObject (ho=0x50100686) returned 1 [0207.496] RestoreDC (hdc=0x7e010713, nSavedDC=-1) returned 1 [0207.496] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.496] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.496] GetSystemMetrics (nIndex=42) returned 0 [0207.497] CoTaskMemAlloc (cb=0x20) returned 0x89d490 [0207.497] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d490, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.497] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d490) returned 0xd [0207.497] CoTaskMemFree (pv=0x89d490) [0207.497] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0207.497] GetCurrentObject (hdc=0x7e010713, type=0x1) returned 0x1b00017 [0207.497] GetCurrentObject (hdc=0x7e010713, type=0x2) returned 0x1900010 [0207.497] GetCurrentObject (hdc=0x7e010713, type=0x7) returned 0x11050637 [0207.497] GetCurrentObject (hdc=0x7e010713, type=0x6) returned 0x18a0048 [0207.497] SaveDC (hdc=0x7e010713) returned 2 [0207.497] GetNearestColor (hdc=0x7e010713, color=0xf0f0f0) returned 0xf0f0f0 [0207.497] CreateSolidBrush (color=0xf0f0f0) returned 0x51100686 [0207.497] FillRect (hDC=0x7e010713, lprc=0x5d9eb0, hbr=0x51100686) returned 1 [0207.497] DeleteObject (ho=0x51100686) returned 1 [0207.497] RestoreDC (hdc=0x7e010713, nSavedDC=-1) returned 1 [0207.497] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0207.497] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0207.497] GetSystemMetrics (nIndex=42) returned 0 [0207.497] CoTaskMemAlloc (cb=0x20) returned 0x89d4f0 [0207.497] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d4f0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0207.497] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d4f0) returned 0xd [0207.498] CoTaskMemFree (pv=0x89d4f0) [0207.498] RestoreDC (hdc=0x7e010713, nSavedDC=-1) returned 1 [0207.498] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.498] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7e010713) returned 0x0 [0207.498] IsAppThemed () returned 0x1 [0207.498] GetThemeAppProperties () returned 0x3 [0207.498] GetThemeAppProperties () returned 0x3 [0207.498] IsAppThemed () returned 0x1 [0207.498] GetThemeAppProperties () returned 0x3 [0207.498] GetThemeAppProperties () returned 0x3 [0207.498] IsThemePartDefined () returned 0x1 [0207.499] GdipCreateRegion (region=0x5dac10) returned 0x0 [0207.499] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.499] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0207.499] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327010) returned 0x0 [0207.499] GdipIsMatrixIdentity (matrix=0x1c327010, result=0x5dac70) returned 0x0 [0207.499] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e990 [0207.499] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89e990) returned 0x0 [0207.499] LocalFree (hMem=0x89e990) returned 0x0 [0207.499] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f5d0 [0207.499] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89f5d0) returned 0x0 [0207.499] LocalFree (hMem=0x89f5d0) returned 0x0 [0207.499] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.500] GdipDeleteMatrix (matrix=0x1c327010) returned 0x0 [0207.500] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0207.500] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0207.500] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0207.500] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.500] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.500] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0207.500] GetCurrentObject (hdc=0x7e010713, type=0x1) returned 0x1b00017 [0207.500] GetCurrentObject (hdc=0x7e010713, type=0x2) returned 0x1900010 [0207.500] GetCurrentObject (hdc=0x7e010713, type=0x7) returned 0x11050637 [0207.500] GetCurrentObject (hdc=0x7e010713, type=0x6) returned 0x18a0048 [0207.500] SaveDC (hdc=0x7e010713) returned 1 [0207.500] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa004054e [0207.500] GetClipRgn (hdc=0x7e010713, hrgn=0xffffffffa004054e) returned 0 [0207.500] SelectClipRgn (hdc=0x7e010713, hrgn=0x2304074d) returned 2 [0207.500] DeleteObject (ho=0xffffffffa004054e) returned 1 [0207.500] DeleteObject (ho=0x2304074d) returned 1 [0207.500] OffsetViewportOrgEx (in: hdc=0x7e010713, x=0, y=0, lppt=0x2792340 | out: lppt=0x2792340) returned 1 [0207.500] IsAppThemed () returned 0x1 [0207.500] GetThemeAppProperties () returned 0x3 [0207.500] GetThemeAppProperties () returned 0x3 [0207.500] DrawThemeBackground () returned 0x0 [0207.500] RestoreDC (hdc=0x7e010713, nSavedDC=-1) returned 1 [0207.500] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.501] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7e010713) returned 0x0 [0207.501] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0207.501] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0207.501] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0207.501] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327090) returned 0x0 [0207.501] GdipIsMatrixIdentity (matrix=0x1c327090, result=0x5dac40) returned 0x0 [0207.501] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e990 [0207.501] GdipGetMatrixElements (matrix=0x1c327090, matrixOut=0x89e990) returned 0x0 [0207.501] LocalFree (hMem=0x89e990) returned 0x0 [0207.501] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f710 [0207.501] GdipGetMatrixElements (matrix=0x1c327090, matrixOut=0x89f710) returned 0x0 [0207.501] LocalFree (hMem=0x89f710) returned 0x0 [0207.501] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.501] GdipDeleteMatrix (matrix=0x1c327090) returned 0x0 [0207.501] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0207.501] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0207.501] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0207.501] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.501] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0207.501] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0207.501] GetCurrentObject (hdc=0x7e010713, type=0x1) returned 0x1b00017 [0207.501] GetCurrentObject (hdc=0x7e010713, type=0x2) returned 0x1900010 [0207.501] GetCurrentObject (hdc=0x7e010713, type=0x7) returned 0x11050637 [0207.501] GetCurrentObject (hdc=0x7e010713, type=0x6) returned 0x18a0048 [0207.501] SaveDC (hdc=0x7e010713) returned 1 [0207.501] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2404074d [0207.502] GetClipRgn (hdc=0x7e010713, hrgn=0x2404074d) returned 0 [0207.502] SelectClipRgn (hdc=0x7e010713, hrgn=0xffffffffa104054e) returned 2 [0207.502] DeleteObject (ho=0x2404074d) returned 1 [0207.502] DeleteObject (ho=0xffffffffa104054e) returned 1 [0207.502] OffsetViewportOrgEx (in: hdc=0x7e010713, x=0, y=0, lppt=0x2792840 | out: lppt=0x2792840) returned 1 [0207.502] IsAppThemed () returned 0x1 [0207.502] GetThemeAppProperties () returned 0x3 [0207.502] GetThemeAppProperties () returned 0x3 [0207.502] GetThemeBackgroundContentRect () returned 0x0 [0207.502] RestoreDC (hdc=0x7e010713, nSavedDC=-1) returned 1 [0207.502] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.502] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7e010713) returned 0x0 [0207.502] IsAppThemed () returned 0x1 [0207.502] GetThemeAppProperties () returned 0x3 [0207.502] GetThemeAppProperties () returned 0x3 [0207.502] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0207.502] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0207.502] GetCurrentObject (hdc=0x7e010713, type=0x1) returned 0x1b00017 [0207.502] GetCurrentObject (hdc=0x7e010713, type=0x2) returned 0x1900010 [0207.502] GetCurrentObject (hdc=0x7e010713, type=0x7) returned 0x11050637 [0207.502] GetCurrentObject (hdc=0x7e010713, type=0x6) returned 0x18a0048 [0207.502] SaveDC (hdc=0x7e010713) returned 1 [0207.502] GetTextAlign (hdc=0x7e010713) returned 0x0 [0207.502] GetTextColor (hdc=0x7e010713) returned 0x0 [0207.503] GetCurrentObject (hdc=0x7e010713, type=0x6) returned 0x18a0048 [0207.503] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0207.503] SelectObject (hdc=0x7e010713, h=0x290a0573) returned 0x18a0048 [0207.503] GetBkMode (hdc=0x7e010713) returned 2 [0207.503] SetBkMode (hdc=0x7e010713, mode=1) returned 2 [0207.503] DrawTextExW (in: hdc=0x7e010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x102415, lpdtp=0x2792d98 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0207.503] DrawTextExW (in: hdc=0x7e010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x102015, lpdtp=0x2792d98 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0207.503] RestoreDC (hdc=0x7e010713, nSavedDC=-1) returned 1 [0207.503] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.504] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7e010713) returned 0x0 [0207.504] GetFocus () returned 0x30212 [0207.504] IsAppThemed () returned 0x1 [0207.504] GetThemeAppProperties () returned 0x3 [0207.504] GetThemeAppProperties () returned 0x3 [0207.504] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0207.504] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0x7e010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0207.504] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.504] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7e010713) returned 0x0 [0207.504] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0207.504] SelectObject (hdc=0x7e010713, h=0x185000f) returned 0x11050637 [0207.504] DeleteDC (hdc=0x7e010713) returned 1 [0207.504] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0207.504] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0207.504] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0207.516] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0207.602] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0208.140] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0208.140] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0208.140] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0208.140] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x3021c) returned 0x1 [0208.141] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0208.142] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0208.142] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0208.142] GetFocus () returned 0x3021c [0208.142] GetAncestor (hwnd=0x3021c, gaFlags=0x1) returned 0x10010 [0208.142] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0 [0208.142] SetFocus (hWnd=0x2021e) returned 0x0 [0208.143] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0208.145] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0208.145] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0208.145] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0208.145] GetFocus () returned 0x20160 [0208.145] SetFocus (hWnd=0x2021e) returned 0x0 [0208.148] IsWindow (hWnd=0x20160) returned 1 [0208.149] EnableWindow (hWnd=0x20160, bEnable=1) returned 1 [0208.149] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0208.149] IsWindow (hWnd=0x20160) returned 1 [0208.149] SetActiveWindow (hWnd=0x20160) returned 0x20160 [0208.149] IsWindow (hWnd=0x2021e) returned 1 [0208.149] SetFocus (hWnd=0x2021e) returned 0x20160 [0208.149] GetFocus () returned 0x2021e [0208.149] IsChild (hWndParent=0x20160, hWnd=0x2021e) returned 1 [0208.149] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x8, wParam=0x2021e, lParam=0x0) returned 0x0 [0208.149] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0208.150] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0208.151] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0208.151] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x7, wParam=0x20160, lParam=0x0) returned 0x0 [0208.151] GetStockObject (i=5) returned 0x1900015 [0208.151] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0208.151] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xd, wParam=0x16, lParam=0x89eb10) returned 0x15 [0208.151] GetDlgItem (hDlg=0x20160, nIDDlgItem=131614) returned 0x2021e [0208.151] SendMessageW (hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5db790) returned 0x0 [0208.151] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5db790) returned 0x0 [0208.151] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0208.152] SendMessageW (hWnd=0x20160, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0208.152] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0208.152] GetFocus () returned 0x2021e [0208.152] GetCapture () returned 0x0 [0208.152] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0208.152] IsWindowUnicode (hWnd=0x2021e) returned 1 [0208.152] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0208.152] TranslateMessage (lpMsg=0x5dd220) returned 0 [0208.152] DispatchMessageW (lpMsg=0x5dd220) returned 0x1 [0208.152] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0208.152] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0208.152] CreateCompatibleDC (hdc=0xa0100d0) returned 0x590106d5 [0208.152] SelectObject (hdc=0x590106d5, h=0x11050637) returned 0x185000f [0208.152] GdipCreateFromHDC (hdc=0x590106d5, graphics=0x5dc420) returned 0x0 [0208.153] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0208.153] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0208.153] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0208.153] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f10) returned 0x0 [0208.153] GdipIsMatrixIdentity (matrix=0x1c326f10, result=0x5dc5b0) returned 0x0 [0208.153] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb90 [0208.153] GdipGetMatrixElements (matrix=0x1c326f10, matrixOut=0x89eb90) returned 0x0 [0208.153] LocalFree (hMem=0x89eb90) returned 0x0 [0208.153] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.153] GdipDeleteMatrix (matrix=0x1c326f10) returned 0x0 [0208.153] GdipCreateRegion (region=0x5dc550) returned 0x0 [0208.153] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0208.153] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0208.153] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0208.153] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd8d0dbd) returned 0x0 [0208.153] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.153] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0208.154] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0208.154] GetCurrentObject (hdc=0x590106d5, type=0x1) returned 0x1b00017 [0208.154] GetCurrentObject (hdc=0x590106d5, type=0x2) returned 0x1900010 [0208.155] GetCurrentObject (hdc=0x590106d5, type=0x7) returned 0x11050637 [0208.155] GetCurrentObject (hdc=0x590106d5, type=0x6) returned 0x18a0048 [0208.155] SaveDC (hdc=0x590106d5) returned 1 [0208.155] GetNearestColor (hdc=0x590106d5, color=0xf0f0f0) returned 0xf0f0f0 [0208.155] GetNearestColor (hdc=0x590106d5, color=0xa0a0a0) returned 0xa0a0a0 [0208.155] GetNearestColor (hdc=0x590106d5, color=0x696969) returned 0x696969 [0208.155] GetNearestColor (hdc=0x590106d5, color=0xa0a0a0) returned 0xa0a0a0 [0208.155] GetNearestColor (hdc=0x590106d5, color=0x0) returned 0x0 [0208.155] GetNearestColor (hdc=0x590106d5, color=0xffffff) returned 0xffffff [0208.155] GetNearestColor (hdc=0x590106d5, color=0xe5e5e5) returned 0xe5e5e5 [0208.155] GetNearestColor (hdc=0x590106d5, color=0xd8d8d8) returned 0xd8d8d8 [0208.156] GetNearestColor (hdc=0x590106d5, color=0x0) returned 0x0 [0208.156] RestoreDC (hdc=0x590106d5, nSavedDC=-1) returned 1 [0208.156] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.156] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x590106d5) returned 0x0 [0208.156] IsAppThemed () returned 0x1 [0208.156] GetThemeAppProperties () returned 0x3 [0208.156] GetThemeAppProperties () returned 0x3 [0208.156] IsAppThemed () returned 0x1 [0208.156] GetThemeAppProperties () returned 0x3 [0208.156] GetThemeAppProperties () returned 0x3 [0208.156] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x102415, lpdtp=0x2793880 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0208.156] IsAppThemed () returned 0x1 [0208.156] GetThemeAppProperties () returned 0x3 [0208.156] GetThemeAppProperties () returned 0x3 [0208.156] IsAppThemed () returned 0x1 [0208.156] GetThemeAppProperties () returned 0x3 [0208.156] GetThemeAppProperties () returned 0x3 [0208.157] GetFocus () returned 0x2021e [0208.157] IsAppThemed () returned 0x1 [0208.157] GetThemeAppProperties () returned 0x3 [0208.157] GetThemeAppProperties () returned 0x3 [0208.157] IsAppThemed () returned 0x1 [0208.157] GetThemeAppProperties () returned 0x3 [0208.157] GetThemeAppProperties () returned 0x3 [0208.157] IsThemePartDefined () returned 0x1 [0208.157] IsAppThemed () returned 0x1 [0208.157] GetThemeAppProperties () returned 0x3 [0208.157] GetThemeAppProperties () returned 0x3 [0208.157] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0208.157] IsAppThemed () returned 0x1 [0208.157] GetThemeAppProperties () returned 0x3 [0208.157] GetThemeAppProperties () returned 0x3 [0208.157] IsAppThemed () returned 0x1 [0208.157] GetThemeAppProperties () returned 0x3 [0208.157] GetThemeAppProperties () returned 0x3 [0208.157] IsThemePartDefined () returned 0x1 [0208.157] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0208.157] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0208.157] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0208.157] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327310) returned 0x0 [0208.157] GdipIsMatrixIdentity (matrix=0x1c327310, result=0x5dbdc0) returned 0x0 [0208.157] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ead0 [0208.157] GdipGetMatrixElements (matrix=0x1c327310, matrixOut=0x89ead0) returned 0x0 [0208.158] LocalFree (hMem=0x89ead0) returned 0x0 [0208.158] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0208.158] GdipGetMatrixElements (matrix=0x1c327310, matrixOut=0x89f050) returned 0x0 [0208.158] LocalFree (hMem=0x89f050) returned 0x0 [0208.158] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.158] GdipDeleteMatrix (matrix=0x1c327310) returned 0x0 [0208.158] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0208.158] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0208.158] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0208.158] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.158] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0208.158] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0208.158] GetCurrentObject (hdc=0x590106d5, type=0x1) returned 0x1b00017 [0208.158] GetCurrentObject (hdc=0x590106d5, type=0x2) returned 0x1900010 [0208.158] GetCurrentObject (hdc=0x590106d5, type=0x7) returned 0x11050637 [0208.158] GetCurrentObject (hdc=0x590106d5, type=0x6) returned 0x18a0048 [0208.158] SaveDC (hdc=0x590106d5) returned 1 [0208.158] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1e04063b [0208.159] GetClipRgn (hdc=0x590106d5, hrgn=0x1e04063b) returned 0 [0208.159] SelectClipRgn (hdc=0x590106d5, hrgn=0xffffffffb204054e) returned 2 [0208.159] DeleteObject (ho=0x1e04063b) returned 1 [0208.159] DeleteObject (ho=0xffffffffb204054e) returned 1 [0208.159] OffsetViewportOrgEx (in: hdc=0x590106d5, x=0, y=0, lppt=0x2794290 | out: lppt=0x2794290) returned 1 [0208.159] DrawThemeParentBackground () returned 0x0 [0208.159] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0208.159] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0208.171] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0208.171] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0208.171] GetSystemMetrics (nIndex=42) returned 0 [0208.171] CoTaskMemAlloc (cb=0x20) returned 0x89cf50 [0208.171] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cf50, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0208.172] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cf50) returned 0xd [0208.172] CoTaskMemFree (pv=0x89cf50) [0208.172] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0208.172] GetCurrentObject (hdc=0x590106d5, type=0x1) returned 0x1b00017 [0208.172] GetCurrentObject (hdc=0x590106d5, type=0x2) returned 0x1900010 [0208.172] GetCurrentObject (hdc=0x590106d5, type=0x7) returned 0x11050637 [0208.172] GetCurrentObject (hdc=0x590106d5, type=0x6) returned 0x18a0048 [0208.172] SaveDC (hdc=0x590106d5) returned 2 [0208.172] GetNearestColor (hdc=0x590106d5, color=0xf0f0f0) returned 0xf0f0f0 [0208.173] CreateSolidBrush (color=0xf0f0f0) returned 0x53100686 [0208.173] FillRect (hDC=0x590106d5, lprc=0x5dafe0, hbr=0x53100686) returned 1 [0208.173] DeleteObject (ho=0x53100686) returned 1 [0208.173] RestoreDC (hdc=0x590106d5, nSavedDC=-1) returned 1 [0208.173] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0208.173] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0208.173] GetSystemMetrics (nIndex=42) returned 0 [0208.173] CoTaskMemAlloc (cb=0x20) returned 0x89cfb0 [0208.173] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cfb0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0208.173] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cfb0) returned 0xd [0208.173] CoTaskMemFree (pv=0x89cfb0) [0208.173] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0208.173] GetCurrentObject (hdc=0x590106d5, type=0x1) returned 0x1b00017 [0208.173] GetCurrentObject (hdc=0x590106d5, type=0x2) returned 0x1900010 [0208.173] GetCurrentObject (hdc=0x590106d5, type=0x7) returned 0x11050637 [0208.173] GetCurrentObject (hdc=0x590106d5, type=0x6) returned 0x18a0048 [0208.174] SaveDC (hdc=0x590106d5) returned 2 [0208.174] GetNearestColor (hdc=0x590106d5, color=0xf0f0f0) returned 0xf0f0f0 [0208.174] CreateSolidBrush (color=0xf0f0f0) returned 0x54100686 [0208.174] FillRect (hDC=0x590106d5, lprc=0x5daee0, hbr=0x54100686) returned 1 [0208.175] DeleteObject (ho=0x54100686) returned 1 [0208.182] RestoreDC (hdc=0x590106d5, nSavedDC=-1) returned 1 [0208.182] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0208.182] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0208.182] GetSystemMetrics (nIndex=42) returned 0 [0208.182] CoTaskMemAlloc (cb=0x20) returned 0x89d3d0 [0208.182] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d3d0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0208.182] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d3d0) returned 0xd [0208.182] CoTaskMemFree (pv=0x89d3d0) [0208.182] RestoreDC (hdc=0x590106d5, nSavedDC=-1) returned 1 [0208.182] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.182] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x590106d5) returned 0x0 [0208.182] IsAppThemed () returned 0x1 [0208.182] GetThemeAppProperties () returned 0x3 [0208.182] GetThemeAppProperties () returned 0x3 [0208.183] IsAppThemed () returned 0x1 [0208.183] GetThemeAppProperties () returned 0x3 [0208.183] GetThemeAppProperties () returned 0x3 [0208.183] IsThemePartDefined () returned 0x1 [0208.183] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0208.183] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0208.183] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0208.183] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d90) returned 0x0 [0208.183] GdipIsMatrixIdentity (matrix=0x1c326d90, result=0x5dbca0) returned 0x0 [0208.183] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f0d0 [0208.183] GdipGetMatrixElements (matrix=0x1c326d90, matrixOut=0x89f0d0) returned 0x0 [0208.183] LocalFree (hMem=0x89f0d0) returned 0x0 [0208.183] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f710 [0208.183] GdipGetMatrixElements (matrix=0x1c326d90, matrixOut=0x89f710) returned 0x0 [0208.183] LocalFree (hMem=0x89f710) returned 0x0 [0208.183] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.183] GdipDeleteMatrix (matrix=0x1c326d90) returned 0x0 [0208.183] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0208.183] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0208.183] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0208.183] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.183] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0208.184] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0208.184] GetCurrentObject (hdc=0x590106d5, type=0x1) returned 0x1b00017 [0208.184] GetCurrentObject (hdc=0x590106d5, type=0x2) returned 0x1900010 [0208.184] GetCurrentObject (hdc=0x590106d5, type=0x7) returned 0x11050637 [0208.184] GetCurrentObject (hdc=0x590106d5, type=0x6) returned 0x18a0048 [0208.185] SaveDC (hdc=0x590106d5) returned 1 [0208.185] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb304054e [0208.185] GetClipRgn (hdc=0x590106d5, hrgn=0xffffffffb304054e) returned 0 [0208.185] SelectClipRgn (hdc=0x590106d5, hrgn=0x2004063b) returned 2 [0208.185] DeleteObject (ho=0xffffffffb304054e) returned 1 [0208.185] DeleteObject (ho=0x2004063b) returned 1 [0208.185] OffsetViewportOrgEx (in: hdc=0x590106d5, x=0, y=0, lppt=0x2794f90 | out: lppt=0x2794f90) returned 1 [0208.185] IsAppThemed () returned 0x1 [0208.185] GetThemeAppProperties () returned 0x3 [0208.185] GetThemeAppProperties () returned 0x3 [0208.185] DrawThemeBackground () returned 0x0 [0208.185] RestoreDC (hdc=0x590106d5, nSavedDC=-1) returned 1 [0208.185] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.185] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x590106d5) returned 0x0 [0208.186] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0208.186] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0208.186] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0208.186] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326fd0) returned 0x0 [0208.186] GdipIsMatrixIdentity (matrix=0x1c326fd0, result=0x5dbc70) returned 0x0 [0208.186] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e850 [0208.186] GdipGetMatrixElements (matrix=0x1c326fd0, matrixOut=0x89e850) returned 0x0 [0208.186] LocalFree (hMem=0x89e850) returned 0x0 [0208.186] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0208.186] GdipGetMatrixElements (matrix=0x1c326fd0, matrixOut=0x89f050) returned 0x0 [0208.186] LocalFree (hMem=0x89f050) returned 0x0 [0208.186] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.186] GdipDeleteMatrix (matrix=0x1c326fd0) returned 0x0 [0208.186] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0208.186] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0208.186] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0208.186] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.187] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0208.187] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0208.187] GetCurrentObject (hdc=0x590106d5, type=0x1) returned 0x1b00017 [0208.187] GetCurrentObject (hdc=0x590106d5, type=0x2) returned 0x1900010 [0208.187] GetCurrentObject (hdc=0x590106d5, type=0x7) returned 0x11050637 [0208.187] GetCurrentObject (hdc=0x590106d5, type=0x6) returned 0x18a0048 [0208.187] SaveDC (hdc=0x590106d5) returned 1 [0208.187] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2104063b [0208.187] GetClipRgn (hdc=0x590106d5, hrgn=0x2104063b) returned 0 [0208.187] SelectClipRgn (hdc=0x590106d5, hrgn=0xffffffffb404054e) returned 2 [0208.188] DeleteObject (ho=0x2104063b) returned 1 [0208.188] DeleteObject (ho=0xffffffffb404054e) returned 1 [0208.188] OffsetViewportOrgEx (in: hdc=0x590106d5, x=0, y=0, lppt=0x2795490 | out: lppt=0x2795490) returned 1 [0208.188] IsAppThemed () returned 0x1 [0208.188] GetThemeAppProperties () returned 0x3 [0208.188] GetThemeAppProperties () returned 0x3 [0208.188] GetThemeBackgroundContentRect () returned 0x0 [0208.188] RestoreDC (hdc=0x590106d5, nSavedDC=-1) returned 1 [0208.188] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.188] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x590106d5) returned 0x0 [0208.188] IsAppThemed () returned 0x1 [0208.188] GetThemeAppProperties () returned 0x3 [0208.188] GetThemeAppProperties () returned 0x3 [0208.188] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0208.188] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0208.188] GetCurrentObject (hdc=0x590106d5, type=0x1) returned 0x1b00017 [0208.189] GetCurrentObject (hdc=0x590106d5, type=0x2) returned 0x1900010 [0208.189] GetCurrentObject (hdc=0x590106d5, type=0x7) returned 0x11050637 [0208.189] GetCurrentObject (hdc=0x590106d5, type=0x6) returned 0x18a0048 [0208.189] SaveDC (hdc=0x590106d5) returned 1 [0208.189] GetTextAlign (hdc=0x590106d5) returned 0x0 [0208.189] GetTextColor (hdc=0x590106d5) returned 0x0 [0208.189] GetCurrentObject (hdc=0x590106d5, type=0x6) returned 0x18a0048 [0208.189] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0208.189] SelectObject (hdc=0x590106d5, h=0x290a0573) returned 0x18a0048 [0208.190] GetBkMode (hdc=0x590106d5) returned 2 [0208.190] SetBkMode (hdc=0x590106d5, mode=1) returned 2 [0208.190] DrawTextExW (in: hdc=0x590106d5, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x102415, lpdtp=0x27959e8 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0208.190] DrawTextExW (in: hdc=0x590106d5, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x102015, lpdtp=0x27959e8 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0208.195] RestoreDC (hdc=0x590106d5, nSavedDC=-1) returned 1 [0208.195] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.195] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x590106d5) returned 0x0 [0208.195] GetFocus () returned 0x2021e [0208.195] IsAppThemed () returned 0x1 [0208.195] GetThemeAppProperties () returned 0x3 [0208.195] GetThemeAppProperties () returned 0x3 [0208.195] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0208.195] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x590106d5, x1=0, y1=0, rop=0xcc0020) returned 1 [0208.196] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.196] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x590106d5) returned 0x0 [0208.196] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0208.196] SelectObject (hdc=0x590106d5, h=0x185000f) returned 0x11050637 [0208.196] DeleteDC (hdc=0x590106d5) returned 1 [0208.199] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0208.199] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0208.199] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0208.199] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0208.199] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0208.199] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0208.199] WaitMessage () returned 1 [0208.489] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0208.489] IsWindowUnicode (hWnd=0x20230) returned 1 [0208.489] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0208.489] TranslateMessage (lpMsg=0x5dd220) returned 0 [0208.489] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0208.489] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0208.489] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0208.489] WaitMessage () returned 1 [0210.012] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.012] IsWindowUnicode (hWnd=0x2021e) returned 1 [0210.012] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.012] GetKeyState (nVirtKey=16) returned 0 [0210.012] GetKeyState (nVirtKey=17) returned 0 [0210.013] GetKeyState (nVirtKey=18) returned -127 [0210.013] SendMessageW (hWnd=0x2021e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0210.013] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0210.014] GetParent (hWnd=0x20160) returned 0x0 [0210.014] SendMessageW (hWnd=0x20160, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0210.014] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0210.135] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0210.136] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0210.136] GetStockObject (i=5) returned 0x1900015 [0210.136] GetStockObject (i=5) returned 0x1900015 [0210.136] GetDlgItem (hDlg=0x20160, nIDDlgItem=131614) returned 0x2021e [0210.136] SendMessageW (hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5dad60) returned 0x0 [0210.136] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5dad60) returned 0x0 [0210.136] RedrawWindow (hWnd=0x2021e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0210.136] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0210.136] GetStockObject (i=5) returned 0x1900015 [0210.137] GetDlgItem (hDlg=0x20160, nIDDlgItem=131616) returned 0x20220 [0210.137] SendMessageW (hWnd=0x20220, Msg=0x202b, wParam=0x20220, lParam=0x5daeb0) returned 0x0 [0210.137] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x202b, wParam=0x20220, lParam=0x5daeb0) returned 0x0 [0210.137] RedrawWindow (hWnd=0x20220, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0210.137] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0210.137] RedrawWindow (hWnd=0x2021a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0210.137] RedrawWindow (hWnd=0x20160, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0210.151] GetKeyState (nVirtKey=16) returned 0 [0210.152] GetKeyState (nVirtKey=17) returned 0 [0210.152] GetKeyState (nVirtKey=18) returned -127 [0210.296] TranslateMessage (lpMsg=0x5dd220) returned 1 [0210.296] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0210.297] GetKeyState (nVirtKey=16) returned 0 [0210.297] GetKeyState (nVirtKey=17) returned 0 [0210.298] GetKeyState (nVirtKey=18) returned -127 [0210.315] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0210.315] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.315] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dd050) returned 0x0 [0210.315] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dd050) returned 0x0 [0210.316] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dca80 | out: lpwndpl=0x5dca80) returned 1 [0210.316] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0210.316] GetClientRect (in: hWnd=0x20160, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0210.316] GetWindowRect (in: hWnd=0x20160, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0210.317] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0210.317] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0210.317] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0210.317] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dca80 | out: lpwndpl=0x5dca80) returned 1 [0210.317] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0210.317] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0210.317] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0210.318] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0210.319] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0210.320] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0210.320] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0210.320] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0210.321] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0210.321] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0210.321] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0210.321] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0210.321] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0210.321] GetFocus () returned 0x0 [0210.321] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0210.321] GetCapture () returned 0x0 [0210.321] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0210.322] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0210.322] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0210.322] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1530102) returned 0x1 [0210.322] IsWindowUnicode (hWnd=0x2021e) returned 1 [0210.322] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.322] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1530102) returned 0x1 [0210.322] SetCursor (hCursor=0x10003) returned 0x10003 [0210.322] TranslateMessage (lpMsg=0x5dd220) returned 0 [0210.322] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0210.322] _TrackMouseEvent (in: lpEventTrack=0x2773508 | out: lpEventTrack=0x2773508) returned 1 [0210.322] SendMessageW (hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0210.323] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0210.323] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0210.323] GetKeyState (nVirtKey=1) returned 0 [0210.323] GetKeyState (nVirtKey=2) returned 0 [0210.323] GetKeyState (nVirtKey=4) returned 0 [0210.323] GetKeyState (nVirtKey=5) returned 0 [0210.323] GetKeyState (nVirtKey=6) returned 0 [0210.323] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.323] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1530102) returned 0x1 [0210.323] IsWindowUnicode (hWnd=0x2021e) returned 1 [0210.323] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.323] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1530102) returned 0x1 [0210.323] SetCursor (hCursor=0x10003) returned 0x10003 [0210.323] TranslateMessage (lpMsg=0x5dd220) returned 0 [0210.323] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0210.323] GetKeyState (nVirtKey=1) returned 0 [0210.323] GetKeyState (nVirtKey=2) returned 0 [0210.323] GetKeyState (nVirtKey=4) returned 0 [0210.323] GetKeyState (nVirtKey=5) returned 0 [0210.323] GetKeyState (nVirtKey=6) returned 0 [0210.323] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.323] IsWindowUnicode (hWnd=0x20160) returned 1 [0210.323] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.323] TranslateMessage (lpMsg=0x5dd220) returned 0 [0210.324] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0210.324] BeginPaint (in: hWnd=0x20160, lpPaint=0x5dc6c8 | out: lpPaint=0x5dc6c8) returned 0xa0100d0 [0210.324] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0210.324] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0210.324] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0210.324] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0210.325] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dbf90 | out: lpwndpl=0x5dbf90) returned 1 [0210.325] GetClientRect (in: hWnd=0x20160, lpRect=0x5dbe10 | out: lpRect=0x5dbe10) returned 1 [0210.325] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.325] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.325] GetSystemMetrics (nIndex=42) returned 0 [0210.325] CoTaskMemAlloc (cb=0x20) returned 0x89d550 [0210.325] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d550, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.325] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d550) returned 0xd [0210.325] CoTaskMemFree (pv=0x89d550) [0210.325] GetClientRect (in: hWnd=0x20160, lpRect=0x5dbbc0 | out: lpRect=0x5dbbc0) returned 1 [0210.325] GetCurrentObject (hdc=0xa0100d0, type=0x1) returned 0x1b00017 [0210.325] GetCurrentObject (hdc=0xa0100d0, type=0x2) returned 0x1900010 [0210.325] GetCurrentObject (hdc=0xa0100d0, type=0x7) returned 0x510506ac [0210.325] GetCurrentObject (hdc=0xa0100d0, type=0x6) returned 0x18a0048 [0210.326] SaveDC (hdc=0xa0100d0) returned 1 [0210.326] GetNearestColor (hdc=0xa0100d0, color=0xf0f0f0) returned 0xf0f0f0 [0210.326] CreateSolidBrush (color=0xf0f0f0) returned 0x55100686 [0210.326] FillRect (hDC=0xa0100d0, lprc=0x5db6f0, hbr=0x55100686) returned 1 [0210.326] DeleteObject (ho=0x55100686) returned 1 [0210.326] RestoreDC (hdc=0xa0100d0, nSavedDC=-1) returned 1 [0210.326] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0210.326] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.326] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.326] GetSystemMetrics (nIndex=42) returned 0 [0210.326] CoTaskMemAlloc (cb=0x20) returned 0x89d1c0 [0210.326] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d1c0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.326] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d1c0) returned 0xd [0210.326] CoTaskMemFree (pv=0x89d1c0) [0210.327] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0210.327] EndPaint (hWnd=0x20160, lpPaint=0x5dc6d8) returned 1 [0210.327] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.327] IsWindowUnicode (hWnd=0x2021e) returned 1 [0210.327] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.327] TranslateMessage (lpMsg=0x5dd220) returned 0 [0210.327] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0210.327] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x10105e0 [0210.327] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0210.327] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x14, wParam=0x10105e0, lParam=0x0) returned 0x1 [0210.327] GetStockObject (i=5) returned 0x1900015 [0210.333] SelectPalette (hdc=0x10105e0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0210.333] CreateCompatibleDC (hdc=0x10105e0) returned 0x6f0106d6 [0210.333] SelectObject (hdc=0x6f0106d6, h=0x11050637) returned 0x185000f [0210.333] GdipCreateFromHDC (hdc=0x6f0106d6, graphics=0x5dc420) returned 0x0 [0210.333] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0210.333] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0210.333] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0210.333] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d50) returned 0x0 [0210.333] GdipIsMatrixIdentity (matrix=0x1c326d50, result=0x5dc5b0) returned 0x0 [0210.333] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e9d0 [0210.333] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89e9d0) returned 0x0 [0210.333] LocalFree (hMem=0x89e9d0) returned 0x0 [0210.333] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.333] GdipDeleteMatrix (matrix=0x1c326d50) returned 0x0 [0210.334] GdipCreateRegion (region=0x5dc550) returned 0x0 [0210.334] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.334] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0210.334] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0210.334] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd8b0dbd) returned 0x0 [0210.334] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.334] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.334] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0210.334] GetCurrentObject (hdc=0x6f0106d6, type=0x1) returned 0x1b00017 [0210.334] GetCurrentObject (hdc=0x6f0106d6, type=0x2) returned 0x1900010 [0210.334] GetCurrentObject (hdc=0x6f0106d6, type=0x7) returned 0x11050637 [0210.334] GetCurrentObject (hdc=0x6f0106d6, type=0x6) returned 0x18a0048 [0210.335] SaveDC (hdc=0x6f0106d6) returned 1 [0210.335] GetNearestColor (hdc=0x6f0106d6, color=0xf0f0f0) returned 0xf0f0f0 [0210.335] GetNearestColor (hdc=0x6f0106d6, color=0xa0a0a0) returned 0xa0a0a0 [0210.335] GetNearestColor (hdc=0x6f0106d6, color=0x696969) returned 0x696969 [0210.335] GetNearestColor (hdc=0x6f0106d6, color=0xa0a0a0) returned 0xa0a0a0 [0210.335] GetNearestColor (hdc=0x6f0106d6, color=0x0) returned 0x0 [0210.335] GetNearestColor (hdc=0x6f0106d6, color=0xffffff) returned 0xffffff [0210.335] GetNearestColor (hdc=0x6f0106d6, color=0xe5e5e5) returned 0xe5e5e5 [0210.335] GetNearestColor (hdc=0x6f0106d6, color=0xd8d8d8) returned 0xd8d8d8 [0210.335] GetNearestColor (hdc=0x6f0106d6, color=0x0) returned 0x0 [0210.335] RestoreDC (hdc=0x6f0106d6, nSavedDC=-1) returned 1 [0210.335] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.335] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x6f0106d6) returned 0x0 [0210.336] IsAppThemed () returned 0x1 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] IsAppThemed () returned 0x1 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x2415, lpdtp=0x2796da8 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0210.336] IsAppThemed () returned 0x1 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] IsAppThemed () returned 0x1 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] IsAppThemed () returned 0x1 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] IsAppThemed () returned 0x1 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] GetThemeAppProperties () returned 0x3 [0210.336] IsThemePartDefined () returned 0x1 [0210.336] IsAppThemed () returned 0x1 [0210.337] GetThemeAppProperties () returned 0x3 [0210.337] GetThemeAppProperties () returned 0x3 [0210.337] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0210.337] IsAppThemed () returned 0x1 [0210.337] GetThemeAppProperties () returned 0x3 [0210.337] GetThemeAppProperties () returned 0x3 [0210.337] IsAppThemed () returned 0x1 [0210.337] GetThemeAppProperties () returned 0x3 [0210.337] GetThemeAppProperties () returned 0x3 [0210.337] IsThemePartDefined () returned 0x1 [0210.337] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0210.337] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.337] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0210.337] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327110) returned 0x0 [0210.337] GdipIsMatrixIdentity (matrix=0x1c327110, result=0x5dbdc0) returned 0x0 [0210.337] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb50 [0210.337] GdipGetMatrixElements (matrix=0x1c327110, matrixOut=0x89eb50) returned 0x0 [0210.337] LocalFree (hMem=0x89eb50) returned 0x0 [0210.337] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e990 [0210.337] GdipGetMatrixElements (matrix=0x1c327110, matrixOut=0x89e990) returned 0x0 [0210.337] LocalFree (hMem=0x89e990) returned 0x0 [0210.337] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.337] GdipDeleteMatrix (matrix=0x1c327110) returned 0x0 [0210.337] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0210.337] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0210.338] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0210.338] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.338] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.338] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0210.338] GetCurrentObject (hdc=0x6f0106d6, type=0x1) returned 0x1b00017 [0210.338] GetCurrentObject (hdc=0x6f0106d6, type=0x2) returned 0x1900010 [0210.338] GetCurrentObject (hdc=0x6f0106d6, type=0x7) returned 0x11050637 [0210.338] GetCurrentObject (hdc=0x6f0106d6, type=0x6) returned 0x18a0048 [0210.338] SaveDC (hdc=0x6f0106d6) returned 1 [0210.338] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb504054e [0210.338] GetClipRgn (hdc=0x6f0106d6, hrgn=0xffffffffb504054e) returned 0 [0210.338] SelectClipRgn (hdc=0x6f0106d6, hrgn=0x2504063b) returned 2 [0210.338] DeleteObject (ho=0xffffffffb504054e) returned 1 [0210.338] DeleteObject (ho=0x2504063b) returned 1 [0210.338] OffsetViewportOrgEx (in: hdc=0x6f0106d6, x=0, y=0, lppt=0x27977b8 | out: lppt=0x27977b8) returned 1 [0210.338] DrawThemeParentBackground () returned 0x0 [0210.338] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0210.339] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0210.339] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.339] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.339] GetSystemMetrics (nIndex=42) returned 0 [0210.339] CoTaskMemAlloc (cb=0x20) returned 0x89d550 [0210.339] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d550, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.339] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d550) returned 0xd [0210.339] CoTaskMemFree (pv=0x89d550) [0210.339] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0210.339] GetCurrentObject (hdc=0x6f0106d6, type=0x1) returned 0x1b00017 [0210.339] GetCurrentObject (hdc=0x6f0106d6, type=0x2) returned 0x1900010 [0210.339] GetCurrentObject (hdc=0x6f0106d6, type=0x7) returned 0x11050637 [0210.339] GetCurrentObject (hdc=0x6f0106d6, type=0x6) returned 0x18a0048 [0210.339] SaveDC (hdc=0x6f0106d6) returned 2 [0210.339] GetNearestColor (hdc=0x6f0106d6, color=0xf0f0f0) returned 0xf0f0f0 [0210.339] CreateSolidBrush (color=0xf0f0f0) returned 0x56100686 [0210.339] FillRect (hDC=0x6f0106d6, lprc=0x5dafe0, hbr=0x56100686) returned 1 [0210.340] DeleteObject (ho=0x56100686) returned 1 [0210.340] RestoreDC (hdc=0x6f0106d6, nSavedDC=-1) returned 1 [0210.340] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.340] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.340] GetSystemMetrics (nIndex=42) returned 0 [0210.340] CoTaskMemAlloc (cb=0x20) returned 0x89cf80 [0210.340] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cf80, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.340] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cf80) returned 0xd [0210.340] CoTaskMemFree (pv=0x89cf80) [0210.340] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0210.340] GetCurrentObject (hdc=0x6f0106d6, type=0x1) returned 0x1b00017 [0210.340] GetCurrentObject (hdc=0x6f0106d6, type=0x2) returned 0x1900010 [0210.340] GetCurrentObject (hdc=0x6f0106d6, type=0x7) returned 0x11050637 [0210.340] GetCurrentObject (hdc=0x6f0106d6, type=0x6) returned 0x18a0048 [0210.340] SaveDC (hdc=0x6f0106d6) returned 2 [0210.340] GetNearestColor (hdc=0x6f0106d6, color=0xf0f0f0) returned 0xf0f0f0 [0210.340] CreateSolidBrush (color=0xf0f0f0) returned 0x57100686 [0210.341] FillRect (hDC=0x6f0106d6, lprc=0x5daee0, hbr=0x57100686) returned 1 [0210.341] DeleteObject (ho=0x57100686) returned 1 [0210.341] RestoreDC (hdc=0x6f0106d6, nSavedDC=-1) returned 1 [0210.341] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.341] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.341] GetSystemMetrics (nIndex=42) returned 0 [0210.341] CoTaskMemAlloc (cb=0x20) returned 0x89d130 [0210.341] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d130, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.341] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d130) returned 0xd [0210.341] CoTaskMemFree (pv=0x89d130) [0210.341] RestoreDC (hdc=0x6f0106d6, nSavedDC=-1) returned 1 [0210.341] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.341] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x6f0106d6) returned 0x0 [0210.341] IsAppThemed () returned 0x1 [0210.341] GetThemeAppProperties () returned 0x3 [0210.341] GetThemeAppProperties () returned 0x3 [0210.341] IsAppThemed () returned 0x1 [0210.341] GetThemeAppProperties () returned 0x3 [0210.342] GetThemeAppProperties () returned 0x3 [0210.342] IsThemePartDefined () returned 0x1 [0210.342] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0210.342] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.342] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0210.342] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327190) returned 0x0 [0210.342] GdipIsMatrixIdentity (matrix=0x1c327190, result=0x5dbca0) returned 0x0 [0210.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e7d0 [0210.342] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89e7d0) returned 0x0 [0210.342] LocalFree (hMem=0x89e7d0) returned 0x0 [0210.342] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0210.342] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89ec10) returned 0x0 [0210.342] LocalFree (hMem=0x89ec10) returned 0x0 [0210.342] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.342] GdipDeleteMatrix (matrix=0x1c327190) returned 0x0 [0210.342] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0210.342] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0210.342] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0210.342] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.342] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.342] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0210.343] GetCurrentObject (hdc=0x6f0106d6, type=0x1) returned 0x1b00017 [0210.343] GetCurrentObject (hdc=0x6f0106d6, type=0x2) returned 0x1900010 [0210.343] GetCurrentObject (hdc=0x6f0106d6, type=0x7) returned 0x11050637 [0210.343] GetCurrentObject (hdc=0x6f0106d6, type=0x6) returned 0x18a0048 [0210.343] SaveDC (hdc=0x6f0106d6) returned 1 [0210.343] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2604063b [0210.343] GetClipRgn (hdc=0x6f0106d6, hrgn=0x2604063b) returned 0 [0210.343] SelectClipRgn (hdc=0x6f0106d6, hrgn=0xffffffffb704054e) returned 2 [0210.343] DeleteObject (ho=0x2604063b) returned 1 [0210.343] DeleteObject (ho=0xffffffffb704054e) returned 1 [0210.343] OffsetViewportOrgEx (in: hdc=0x6f0106d6, x=0, y=0, lppt=0x27984b8 | out: lppt=0x27984b8) returned 1 [0210.343] IsAppThemed () returned 0x1 [0210.343] GetThemeAppProperties () returned 0x3 [0210.343] GetThemeAppProperties () returned 0x3 [0210.343] DrawThemeBackground () returned 0x0 [0210.343] RestoreDC (hdc=0x6f0106d6, nSavedDC=-1) returned 1 [0210.343] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.343] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x6f0106d6) returned 0x0 [0210.344] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0210.344] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.344] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0210.344] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326cd0) returned 0x0 [0210.344] GdipIsMatrixIdentity (matrix=0x1c326cd0, result=0x5dbc70) returned 0x0 [0210.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f090 [0210.344] GdipGetMatrixElements (matrix=0x1c326cd0, matrixOut=0x89f090) returned 0x0 [0210.344] LocalFree (hMem=0x89f090) returned 0x0 [0210.344] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f110 [0210.344] GdipGetMatrixElements (matrix=0x1c326cd0, matrixOut=0x89f110) returned 0x0 [0210.344] LocalFree (hMem=0x89f110) returned 0x0 [0210.344] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.344] GdipDeleteMatrix (matrix=0x1c326cd0) returned 0x0 [0210.344] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0210.344] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0210.344] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0210.344] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.344] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.344] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0210.344] GetCurrentObject (hdc=0x6f0106d6, type=0x1) returned 0x1b00017 [0210.344] GetCurrentObject (hdc=0x6f0106d6, type=0x2) returned 0x1900010 [0210.344] GetCurrentObject (hdc=0x6f0106d6, type=0x7) returned 0x11050637 [0210.344] GetCurrentObject (hdc=0x6f0106d6, type=0x6) returned 0x18a0048 [0210.345] SaveDC (hdc=0x6f0106d6) returned 1 [0210.345] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb804054e [0210.345] GetClipRgn (hdc=0x6f0106d6, hrgn=0xffffffffb804054e) returned 0 [0210.345] SelectClipRgn (hdc=0x6f0106d6, hrgn=0x2704063b) returned 2 [0210.345] DeleteObject (ho=0xffffffffb804054e) returned 1 [0210.345] DeleteObject (ho=0x2704063b) returned 1 [0210.345] OffsetViewportOrgEx (in: hdc=0x6f0106d6, x=0, y=0, lppt=0x27989b8 | out: lppt=0x27989b8) returned 1 [0210.345] IsAppThemed () returned 0x1 [0210.346] GetThemeAppProperties () returned 0x3 [0210.346] GetThemeAppProperties () returned 0x3 [0210.346] GetThemeBackgroundContentRect () returned 0x0 [0210.346] RestoreDC (hdc=0x6f0106d6, nSavedDC=-1) returned 1 [0210.346] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.346] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x6f0106d6) returned 0x0 [0210.346] IsAppThemed () returned 0x1 [0210.346] GetThemeAppProperties () returned 0x3 [0210.346] GetThemeAppProperties () returned 0x3 [0210.346] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0210.346] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0210.346] GetCurrentObject (hdc=0x6f0106d6, type=0x1) returned 0x1b00017 [0210.346] GetCurrentObject (hdc=0x6f0106d6, type=0x2) returned 0x1900010 [0210.346] GetCurrentObject (hdc=0x6f0106d6, type=0x7) returned 0x11050637 [0210.346] GetCurrentObject (hdc=0x6f0106d6, type=0x6) returned 0x18a0048 [0210.346] SaveDC (hdc=0x6f0106d6) returned 1 [0210.346] GetTextAlign (hdc=0x6f0106d6) returned 0x0 [0210.346] GetTextColor (hdc=0x6f0106d6) returned 0x0 [0210.346] GetCurrentObject (hdc=0x6f0106d6, type=0x6) returned 0x18a0048 [0210.346] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0210.347] SelectObject (hdc=0x6f0106d6, h=0x290a0573) returned 0x18a0048 [0210.347] GetBkMode (hdc=0x6f0106d6) returned 2 [0210.347] SetBkMode (hdc=0x6f0106d6, mode=1) returned 2 [0210.347] DrawTextExW (in: hdc=0x6f0106d6, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x2415, lpdtp=0x2798f10 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0210.359] DrawTextExW (in: hdc=0x6f0106d6, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x2015, lpdtp=0x2798f10 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0210.359] RestoreDC (hdc=0x6f0106d6, nSavedDC=-1) returned 1 [0210.359] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.359] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x6f0106d6) returned 0x0 [0210.359] GetFocus () returned 0x0 [0210.359] IsAppThemed () returned 0x1 [0210.359] GetThemeAppProperties () returned 0x3 [0210.359] GetThemeAppProperties () returned 0x3 [0210.359] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0210.359] BitBlt (hdc=0x10105e0, x=0, y=0, cx=262, cy=36, hdcSrc=0x6f0106d6, x1=0, y1=0, rop=0xcc0020) returned 1 [0210.360] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.360] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x6f0106d6) returned 0x0 [0210.360] SelectPalette (hdc=0x10105e0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0210.360] SelectObject (hdc=0x6f0106d6, h=0x185000f) returned 0x11050637 [0210.360] DeleteDC (hdc=0x6f0106d6) returned 1 [0210.360] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.360] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0210.360] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0210.360] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.360] IsWindowUnicode (hWnd=0x20220) returned 1 [0210.360] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.360] TranslateMessage (lpMsg=0x5dd220) returned 0 [0210.360] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0210.360] BeginPaint (in: hWnd=0x20220, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x1010749 [0210.360] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0210.360] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0210.360] CreateCompatibleDC (hdc=0x1010749) returned 0x720106d6 [0210.361] SelectObject (hdc=0x720106d6, h=0x11050637) returned 0x185000f [0210.361] GdipCreateFromHDC (hdc=0x720106d6, graphics=0x5dc420) returned 0x0 [0210.361] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0210.361] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=145, height=13, combineMode=0x0) returned 0x0 [0210.361] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0210.361] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327010) returned 0x0 [0210.361] GdipIsMatrixIdentity (matrix=0x1c327010, result=0x5dc5b0) returned 0x0 [0210.361] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed50 [0210.361] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89ed50) returned 0x0 [0210.361] LocalFree (hMem=0x89ed50) returned 0x0 [0210.361] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.361] GdipDeleteMatrix (matrix=0x1c327010) returned 0x0 [0210.361] GdipCreateRegion (region=0x5dc550) returned 0x0 [0210.361] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.361] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0210.361] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0210.361] GetWindowTextLengthW (hWnd=0x20220) returned 29 [0210.361] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0210.361] GetSystemMetrics (nIndex=42) returned 0 [0210.361] CoTaskMemAlloc (cb=0x40) returned 0x896210 [0210.361] GetWindowTextW (in: hWnd=0x20220, lpString=0x896210, nMaxCount=30 | out: lpString="Put your decryption key here:") returned 29 [0210.361] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xd, wParam=0x1e, lParam=0x896210) returned 0x1d [0210.361] CoTaskMemFree (pv=0x896210) [0210.361] GetClientRect (in: hWnd=0x20220, lpRect=0x5dc5c0 | out: lpRect=0x5dc5c0) returned 1 [0210.362] GdipCreateRegion (region=0x5dc040) returned 0x0 [0210.362] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0210.362] GdipCreateMatrix (matrix=0x5dc040) returned 0x0 [0210.362] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f90) returned 0x0 [0210.362] GdipIsMatrixIdentity (matrix=0x1c326f90, result=0x5dc0a0) returned 0x0 [0210.362] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec50 [0210.362] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89ec50) returned 0x0 [0210.362] LocalFree (hMem=0x89ec50) returned 0x0 [0210.362] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0210.362] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb10 [0210.362] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89eb10) returned 0x0 [0210.362] LocalFree (hMem=0x89eb10) returned 0x0 [0210.362] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.362] GdipDeleteMatrix (matrix=0x1c326f90) returned 0x0 [0210.362] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0f0) returned 0x0 [0210.362] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0b0) returned 0x0 [0210.362] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x5dc0b0) returned 0x0 [0210.362] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.362] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0210.362] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc120) returned 0x0 [0210.362] GetCurrentObject (hdc=0x720106d6, type=0x1) returned 0x1b00017 [0210.362] GetCurrentObject (hdc=0x720106d6, type=0x2) returned 0x1900010 [0210.362] GetCurrentObject (hdc=0x720106d6, type=0x7) returned 0x11050637 [0210.362] GetCurrentObject (hdc=0x720106d6, type=0x6) returned 0x18a0048 [0210.363] SaveDC (hdc=0x720106d6) returned 1 [0210.363] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2804063b [0210.363] GetClipRgn (hdc=0x720106d6, hrgn=0x2804063b) returned 0 [0210.363] SelectClipRgn (hdc=0x720106d6, hrgn=0xffffffffbb04054e) returned 2 [0210.363] DeleteObject (ho=0x2804063b) returned 1 [0210.363] DeleteObject (ho=0xffffffffbb04054e) returned 1 [0210.363] OffsetViewportOrgEx (in: hdc=0x720106d6, x=0, y=0, lppt=0x2799628 | out: lppt=0x2799628) returned 1 [0210.363] GetNearestColor (hdc=0x720106d6, color=0xf0f0f0) returned 0xf0f0f0 [0210.363] CreateSolidBrush (color=0xf0f0f0) returned 0x58100686 [0210.364] FillRect (hDC=0x720106d6, lprc=0x5dc0f0, hbr=0x58100686) returned 1 [0210.364] DeleteObject (ho=0x58100686) returned 1 [0210.364] RestoreDC (hdc=0x720106d6, nSavedDC=-1) returned 1 [0210.364] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.364] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x720106d6) returned 0x0 [0210.364] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd890dbd) returned 0x0 [0210.364] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.364] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.364] GetWindowTextLengthW (hWnd=0x20220) returned 29 [0210.364] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0210.364] GetSystemMetrics (nIndex=42) returned 0 [0210.364] CoTaskMemAlloc (cb=0x40) returned 0x895400 [0210.364] GetWindowTextW (in: hWnd=0x20220, lpString=0x895400, nMaxCount=30 | out: lpString="Put your decryption key here:") returned 29 [0210.364] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xd, wParam=0x1e, lParam=0x895400) returned 0x1d [0210.364] CoTaskMemFree (pv=0x895400) [0210.364] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc180) returned 0x0 [0210.364] GetCurrentObject (hdc=0x720106d6, type=0x1) returned 0x1b00017 [0210.364] GetCurrentObject (hdc=0x720106d6, type=0x2) returned 0x1900010 [0210.364] GetCurrentObject (hdc=0x720106d6, type=0x7) returned 0x11050637 [0210.364] GetCurrentObject (hdc=0x720106d6, type=0x6) returned 0x18a0048 [0210.364] SaveDC (hdc=0x720106d6) returned 1 [0210.364] GetNearestColor (hdc=0x720106d6, color=0x0) returned 0x0 [0210.364] RestoreDC (hdc=0x720106d6, nSavedDC=-1) returned 1 [0210.364] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.364] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x720106d6) returned 0x0 [0210.365] AdjustWindowRectEx (in: lpRect=0x5dc040, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dc040) returned 1 [0210.365] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dc060) returned 0x0 [0210.365] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc040) returned 0x0 [0210.365] GetCurrentObject (hdc=0x720106d6, type=0x1) returned 0x1b00017 [0210.365] GetCurrentObject (hdc=0x720106d6, type=0x2) returned 0x1900010 [0210.365] GetCurrentObject (hdc=0x720106d6, type=0x7) returned 0x11050637 [0210.365] GetCurrentObject (hdc=0x720106d6, type=0x6) returned 0x18a0048 [0210.365] SaveDC (hdc=0x720106d6) returned 1 [0210.365] GetTextAlign (hdc=0x720106d6) returned 0x0 [0210.365] GetTextColor (hdc=0x720106d6) returned 0x0 [0210.365] GetCurrentObject (hdc=0x720106d6, type=0x6) returned 0x18a0048 [0210.365] GetObjectW (in: h=0x18a0048, c=92, pv=0x5dbab0 | out: pv=0x5dbab0) returned 92 [0210.365] SelectObject (hdc=0x720106d6, h=0x290a0573) returned 0x18a0048 [0210.365] GetBkMode (hdc=0x720106d6) returned 2 [0210.365] SetBkMode (hdc=0x720106d6, mode=1) returned 2 [0210.365] DrawTextExW (in: hdc=0x720106d6, lpchText="Put your decryption key here:", cchText=29, lprc=0x5dbbf0, format=0x0, lpdtp=0x2799d20 | out: lpchText="Put your decryption key here:", lprc=0x5dbbf0) returned 13 [0210.365] RestoreDC (hdc=0x720106d6, nSavedDC=-1) returned 1 [0210.365] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.365] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x720106d6) returned 0x0 [0210.365] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0210.365] BitBlt (hdc=0x1010749, x=0, y=0, cx=145, cy=13, hdcSrc=0x720106d6, x1=0, y1=0, rop=0xcc0020) returned 1 [0210.366] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.366] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x720106d6) returned 0x0 [0210.366] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0210.366] SelectObject (hdc=0x720106d6, h=0x185000f) returned 0x11050637 [0210.366] DeleteDC (hdc=0x720106d6) returned 1 [0210.366] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.366] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0210.366] EndPaint (hWnd=0x20220, lpPaint=0x5dc628) returned 1 [0210.366] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.366] IsWindowUnicode (hWnd=0x2021a) returned 1 [0210.366] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.366] TranslateMessage (lpMsg=0x5dd220) returned 0 [0210.366] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0210.366] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0210.366] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0210.367] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0210.367] SendMessageW (hWnd=0x2021a, Msg=0x2111, wParam=0x400021a, lParam=0x2021a) returned 0x0 [0210.367] SendMessageW (hWnd=0x2021a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0210.367] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0210.367] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0210.367] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0210.367] WaitMessage () returned 1 [0210.410] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.410] IsWindowUnicode (hWnd=0x2021e) returned 1 [0210.410] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.410] TranslateMessage (lpMsg=0x5dd220) returned 0 [0210.410] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0210.410] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.410] IsWindowUnicode (hWnd=0x2021e) returned 1 [0210.410] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.410] TranslateMessage (lpMsg=0x5dd220) returned 0 [0210.410] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0210.410] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2a1, wParam=0x0, lParam=0xf0048) returned 0x0 [0210.411] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0210.411] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0210.411] WaitMessage () returned 1 [0210.567] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.568] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1530102) returned 0x1 [0210.568] IsWindowUnicode (hWnd=0x2021e) returned 1 [0210.568] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.568] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1530102) returned 0x1 [0210.568] GetDlgItem (hDlg=0x20160, nIDDlgItem=0) returned 0x0 [0210.568] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x210, wParam=0x201, lParam=0xd10097) returned 0x0 [0210.568] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0210.568] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0210.568] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dd080) returned 0x0 [0210.568] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dd080) returned 0x0 [0210.568] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dd080) returned 0x0 [0210.569] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dcab0 | out: lpwndpl=0x5dcab0) returned 1 [0210.569] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x47, wParam=0x0, lParam=0x5dd080) returned 0x0 [0210.569] GetClientRect (in: hWnd=0x20160, lpRect=0x5dc850 | out: lpRect=0x5dc850) returned 1 [0210.569] GetWindowRect (in: hWnd=0x20160, lpRect=0x5dc850 | out: lpRect=0x5dc850) returned 1 [0210.570] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0210.570] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0210.570] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0210.571] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dcab0 | out: lpwndpl=0x5dcab0) returned 1 [0210.571] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x47, wParam=0x0, lParam=0x5dd080) returned 0x0 [0210.571] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dc850 | out: lpRect=0x5dc850) returned 1 [0210.571] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5dc850 | out: lpRect=0x5dc850) returned 1 [0210.572] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x47, wParam=0x0, lParam=0x5dd080) returned 0x0 [0210.573] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0210.573] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0210.573] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0210.573] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0210.573] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0210.573] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0210.574] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0210.574] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0210.574] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0210.575] GetFocus () returned 0x0 [0210.575] SetFocus (hWnd=0x2021e) returned 0x0 [0210.575] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0210.576] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0210.576] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0210.576] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0210.576] GetStockObject (i=5) returned 0x1900015 [0210.576] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0210.576] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xd, wParam=0x16, lParam=0x89e990) returned 0x15 [0210.576] GetDlgItem (hDlg=0x20160, nIDDlgItem=131614) returned 0x2021e [0210.577] SendMessageW (hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5dbd60) returned 0x0 [0210.577] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5dbd60) returned 0x0 [0210.577] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0210.577] SetCursor (hCursor=0x10003) returned 0x10003 [0210.577] TranslateMessage (lpMsg=0x5dd220) returned 0 [0210.577] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0210.577] GetKeyState (nVirtKey=1) returned -127 [0210.577] GetKeyState (nVirtKey=2) returned 0 [0210.577] GetKeyState (nVirtKey=4) returned 0 [0210.577] GetKeyState (nVirtKey=5) returned 0 [0210.577] GetKeyState (nVirtKey=6) returned 0 [0210.577] IsWindowVisible (hWnd=0x2021e) returned 1 [0210.577] IsWindowEnabled (hWnd=0x2021e) returned 1 [0210.577] SetFocus (hWnd=0x2021e) returned 0x2021e [0210.577] GetFocus () returned 0x2021e [0210.577] GetFocus () returned 0x2021e [0210.578] GetFocus () returned 0x2021e [0210.578] GetKeyState (nVirtKey=1) returned -127 [0210.578] GetKeyState (nVirtKey=2) returned 0 [0210.578] GetKeyState (nVirtKey=4) returned 0 [0210.578] GetKeyState (nVirtKey=5) returned 0 [0210.578] GetKeyState (nVirtKey=6) returned 0 [0210.578] GetCapture () returned 0x0 [0210.578] SetCapture (hWnd=0x2021e) returned 0x0 [0210.578] GetKeyState (nVirtKey=1) returned -127 [0210.578] GetKeyState (nVirtKey=2) returned 0 [0210.578] GetKeyState (nVirtKey=4) returned 0 [0210.578] GetKeyState (nVirtKey=5) returned 0 [0210.578] GetKeyState (nVirtKey=6) returned 0 [0210.578] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0210.578] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc870, bErase=0) returned 1 [0210.578] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.578] IsWindowUnicode (hWnd=0x2021e) returned 1 [0210.578] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.578] TranslateMessage (lpMsg=0x5dd220) returned 0 [0210.578] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0210.578] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x2799ea8, cPoints=0x1 | out: lpPoints=0x2799ea8) returned 21233850 [0210.578] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0210.578] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc7c0, bErase=0) returned 1 [0210.578] UpdateWindow (hWnd=0x2021e) returned 1 [0210.579] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dbdd8 | out: lpPaint=0x5dbdd8) returned 0xa0100d0 [0210.579] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0210.579] CreateCompatibleDC (hdc=0xa0100d0) returned 0x7b0106d6 [0210.579] SelectObject (hdc=0x7b0106d6, h=0x11050637) returned 0x185000f [0210.579] GdipCreateFromHDC (hdc=0x7b0106d6, graphics=0x5dbbe0) returned 0x0 [0210.579] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0210.579] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0210.579] GdipCreateMatrix (matrix=0x5dbd10) returned 0x0 [0210.579] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326c10) returned 0x0 [0210.579] GdipIsMatrixIdentity (matrix=0x1c326c10, result=0x5dbd70) returned 0x0 [0210.579] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f250 [0210.579] GdipGetMatrixElements (matrix=0x1c326c10, matrixOut=0x89f250) returned 0x0 [0210.579] LocalFree (hMem=0x89f250) returned 0x0 [0210.579] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.579] GdipDeleteMatrix (matrix=0x1c326c10) returned 0x0 [0210.579] GdipCreateRegion (region=0x5dbd10) returned 0x0 [0210.579] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.579] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbd40) returned 0x0 [0210.580] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dbe10) returned 0x0 [0210.580] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd870dbd) returned 0x0 [0210.580] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.580] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.580] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db200) returned 0x0 [0210.580] GetCurrentObject (hdc=0x7b0106d6, type=0x1) returned 0x1b00017 [0210.580] GetCurrentObject (hdc=0x7b0106d6, type=0x2) returned 0x1900010 [0210.580] GetCurrentObject (hdc=0x7b0106d6, type=0x7) returned 0x11050637 [0210.580] GetCurrentObject (hdc=0x7b0106d6, type=0x6) returned 0x18a0048 [0210.580] SaveDC (hdc=0x7b0106d6) returned 1 [0210.581] GetNearestColor (hdc=0x7b0106d6, color=0xf0f0f0) returned 0xf0f0f0 [0210.581] GetNearestColor (hdc=0x7b0106d6, color=0xa0a0a0) returned 0xa0a0a0 [0210.581] GetNearestColor (hdc=0x7b0106d6, color=0x696969) returned 0x696969 [0210.581] GetNearestColor (hdc=0x7b0106d6, color=0xa0a0a0) returned 0xa0a0a0 [0210.581] GetNearestColor (hdc=0x7b0106d6, color=0x0) returned 0x0 [0210.581] GetNearestColor (hdc=0x7b0106d6, color=0xffffff) returned 0xffffff [0210.581] GetNearestColor (hdc=0x7b0106d6, color=0xe5e5e5) returned 0xe5e5e5 [0210.581] GetNearestColor (hdc=0x7b0106d6, color=0xd8d8d8) returned 0xd8d8d8 [0210.581] GetNearestColor (hdc=0x7b0106d6, color=0x0) returned 0x0 [0210.581] RestoreDC (hdc=0x7b0106d6, nSavedDC=-1) returned 1 [0210.581] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.582] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7b0106d6) returned 0x0 [0210.582] IsAppThemed () returned 0x1 [0210.582] GetThemeAppProperties () returned 0x3 [0210.582] GetThemeAppProperties () returned 0x3 [0210.582] IsAppThemed () returned 0x1 [0210.582] GetThemeAppProperties () returned 0x3 [0210.582] GetThemeAppProperties () returned 0x3 [0210.582] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db440, format=0x2415, lpdtp=0x279a7d0 | out: lpchText="Submit Decryption Key", lprc=0x5db440) returned 13 [0210.582] IsAppThemed () returned 0x1 [0210.582] GetThemeAppProperties () returned 0x3 [0210.582] GetThemeAppProperties () returned 0x3 [0210.583] IsAppThemed () returned 0x1 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] IsAppThemed () returned 0x1 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] IsAppThemed () returned 0x1 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] IsThemePartDefined () returned 0x1 [0210.583] IsAppThemed () returned 0x1 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0210.583] IsAppThemed () returned 0x1 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] IsAppThemed () returned 0x1 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] GetThemeAppProperties () returned 0x3 [0210.583] IsThemePartDefined () returned 0x1 [0210.583] GdipCreateRegion (region=0x5db520) returned 0x0 [0210.583] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.583] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0210.584] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327290) returned 0x0 [0210.584] GdipIsMatrixIdentity (matrix=0x1c327290, result=0x5db580) returned 0x0 [0210.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f250 [0210.584] GdipGetMatrixElements (matrix=0x1c327290, matrixOut=0x89f250) returned 0x0 [0210.584] LocalFree (hMem=0x89f250) returned 0x0 [0210.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0210.584] GdipGetMatrixElements (matrix=0x1c327290, matrixOut=0x89f350) returned 0x0 [0210.584] LocalFree (hMem=0x89f350) returned 0x0 [0210.584] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.584] GdipDeleteMatrix (matrix=0x1c327290) returned 0x0 [0210.584] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db5d0) returned 0x0 [0210.584] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db590) returned 0x0 [0210.584] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db590) returned 0x0 [0210.584] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.584] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.584] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db600) returned 0x0 [0210.584] GetCurrentObject (hdc=0x7b0106d6, type=0x1) returned 0x1b00017 [0210.584] GetCurrentObject (hdc=0x7b0106d6, type=0x2) returned 0x1900010 [0210.584] GetCurrentObject (hdc=0x7b0106d6, type=0x7) returned 0x11050637 [0210.584] GetCurrentObject (hdc=0x7b0106d6, type=0x6) returned 0x18a0048 [0210.585] SaveDC (hdc=0x7b0106d6) returned 1 [0210.585] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbc04054e [0210.585] GetClipRgn (hdc=0x7b0106d6, hrgn=0xffffffffbc04054e) returned 0 [0210.585] SelectClipRgn (hdc=0x7b0106d6, hrgn=0x2b04063b) returned 2 [0210.585] DeleteObject (ho=0xffffffffbc04054e) returned 1 [0210.585] DeleteObject (ho=0x2b04063b) returned 1 [0210.585] OffsetViewportOrgEx (in: hdc=0x7b0106d6, x=0, y=0, lppt=0x279b1e0 | out: lppt=0x279b1e0) returned 1 [0210.585] DrawThemeParentBackground () returned 0x0 [0210.585] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db040 | out: lpwndpl=0x5db040) returned 1 [0210.585] GetClientRect (in: hWnd=0x20160, lpRect=0x5daec0 | out: lpRect=0x5daec0) returned 1 [0210.585] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.585] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.585] GetSystemMetrics (nIndex=42) returned 0 [0210.585] CoTaskMemAlloc (cb=0x20) returned 0x89d2b0 [0210.585] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d2b0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.585] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d2b0) returned 0xd [0210.585] CoTaskMemFree (pv=0x89d2b0) [0210.585] GetClientRect (in: hWnd=0x20160, lpRect=0x5dac70 | out: lpRect=0x5dac70) returned 1 [0210.586] GetCurrentObject (hdc=0x7b0106d6, type=0x1) returned 0x1b00017 [0210.586] GetCurrentObject (hdc=0x7b0106d6, type=0x2) returned 0x1900010 [0210.586] GetCurrentObject (hdc=0x7b0106d6, type=0x7) returned 0x11050637 [0210.586] GetCurrentObject (hdc=0x7b0106d6, type=0x6) returned 0x18a0048 [0210.586] SaveDC (hdc=0x7b0106d6) returned 2 [0210.586] GetNearestColor (hdc=0x7b0106d6, color=0xf0f0f0) returned 0xf0f0f0 [0210.586] CreateSolidBrush (color=0xf0f0f0) returned 0x59100686 [0210.586] FillRect (hDC=0x7b0106d6, lprc=0x5da7a0, hbr=0x59100686) returned 1 [0210.586] DeleteObject (ho=0x59100686) returned 1 [0210.586] RestoreDC (hdc=0x7b0106d6, nSavedDC=-1) returned 1 [0210.586] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.586] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.586] GetSystemMetrics (nIndex=42) returned 0 [0210.586] CoTaskMemAlloc (cb=0x20) returned 0x89d190 [0210.587] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d190, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.587] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d190) returned 0xd [0210.587] CoTaskMemFree (pv=0x89d190) [0210.587] GetClientRect (in: hWnd=0x20160, lpRect=0x5dab70 | out: lpRect=0x5dab70) returned 1 [0210.587] GetCurrentObject (hdc=0x7b0106d6, type=0x1) returned 0x1b00017 [0210.587] GetCurrentObject (hdc=0x7b0106d6, type=0x2) returned 0x1900010 [0210.587] GetCurrentObject (hdc=0x7b0106d6, type=0x7) returned 0x11050637 [0210.587] GetCurrentObject (hdc=0x7b0106d6, type=0x6) returned 0x18a0048 [0210.587] SaveDC (hdc=0x7b0106d6) returned 2 [0210.587] GetNearestColor (hdc=0x7b0106d6, color=0xf0f0f0) returned 0xf0f0f0 [0210.587] CreateSolidBrush (color=0xf0f0f0) returned 0x5a100686 [0210.587] FillRect (hDC=0x7b0106d6, lprc=0x5da6a0, hbr=0x5a100686) returned 1 [0210.587] DeleteObject (ho=0x5a100686) returned 1 [0210.587] RestoreDC (hdc=0x7b0106d6, nSavedDC=-1) returned 1 [0210.588] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.588] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.588] GetSystemMetrics (nIndex=42) returned 0 [0210.588] CoTaskMemAlloc (cb=0x20) returned 0x89d070 [0210.588] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d070, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.588] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d070) returned 0xd [0210.588] CoTaskMemFree (pv=0x89d070) [0210.588] RestoreDC (hdc=0x7b0106d6, nSavedDC=-1) returned 1 [0210.588] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.588] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7b0106d6) returned 0x0 [0210.588] IsAppThemed () returned 0x1 [0210.588] GetThemeAppProperties () returned 0x3 [0210.588] GetThemeAppProperties () returned 0x3 [0210.588] IsAppThemed () returned 0x1 [0210.588] GetThemeAppProperties () returned 0x3 [0210.588] GetThemeAppProperties () returned 0x3 [0210.588] IsThemePartDefined () returned 0x1 [0210.588] GdipCreateRegion (region=0x5db400) returned 0x0 [0210.588] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.588] GdipCreateMatrix (matrix=0x5db400) returned 0x0 [0210.588] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326cd0) returned 0x0 [0210.589] GdipIsMatrixIdentity (matrix=0x1c326cd0, result=0x5db460) returned 0x0 [0210.589] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f0d0 [0210.589] GdipGetMatrixElements (matrix=0x1c326cd0, matrixOut=0x89f0d0) returned 0x0 [0210.589] LocalFree (hMem=0x89f0d0) returned 0x0 [0210.589] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0210.589] GdipGetMatrixElements (matrix=0x1c326cd0, matrixOut=0x89f050) returned 0x0 [0210.589] LocalFree (hMem=0x89f050) returned 0x0 [0210.589] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.589] GdipDeleteMatrix (matrix=0x1c326cd0) returned 0x0 [0210.589] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db4b0) returned 0x0 [0210.589] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db470) returned 0x0 [0210.589] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db470) returned 0x0 [0210.589] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.589] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.589] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4e0) returned 0x0 [0210.589] GetCurrentObject (hdc=0x7b0106d6, type=0x1) returned 0x1b00017 [0210.589] GetCurrentObject (hdc=0x7b0106d6, type=0x2) returned 0x1900010 [0210.589] GetCurrentObject (hdc=0x7b0106d6, type=0x7) returned 0x11050637 [0210.589] GetCurrentObject (hdc=0x7b0106d6, type=0x6) returned 0x18a0048 [0210.589] SaveDC (hdc=0x7b0106d6) returned 1 [0210.590] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2c04063b [0210.590] GetClipRgn (hdc=0x7b0106d6, hrgn=0x2c04063b) returned 0 [0210.590] SelectClipRgn (hdc=0x7b0106d6, hrgn=0xffffffffbe04054e) returned 2 [0210.590] DeleteObject (ho=0x2c04063b) returned 1 [0210.590] DeleteObject (ho=0xffffffffbe04054e) returned 1 [0210.590] OffsetViewportOrgEx (in: hdc=0x7b0106d6, x=0, y=0, lppt=0x279bee0 | out: lppt=0x279bee0) returned 1 [0210.590] IsAppThemed () returned 0x1 [0210.590] GetThemeAppProperties () returned 0x3 [0210.590] GetThemeAppProperties () returned 0x3 [0210.590] DrawThemeBackground () returned 0x0 [0210.590] RestoreDC (hdc=0x7b0106d6, nSavedDC=-1) returned 1 [0210.590] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.590] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7b0106d6) returned 0x0 [0210.590] GdipCreateRegion (region=0x5db3d0) returned 0x0 [0210.590] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.590] GdipCreateMatrix (matrix=0x5db3d0) returned 0x0 [0210.590] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326c10) returned 0x0 [0210.590] GdipIsMatrixIdentity (matrix=0x1c326c10, result=0x5db430) returned 0x0 [0210.591] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb50 [0210.591] GdipGetMatrixElements (matrix=0x1c326c10, matrixOut=0x89eb50) returned 0x0 [0210.591] LocalFree (hMem=0x89eb50) returned 0x0 [0210.591] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f0d0 [0210.591] GdipGetMatrixElements (matrix=0x1c326c10, matrixOut=0x89f0d0) returned 0x0 [0210.591] LocalFree (hMem=0x89f0d0) returned 0x0 [0210.591] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.591] GdipDeleteMatrix (matrix=0x1c326c10) returned 0x0 [0210.591] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db480) returned 0x0 [0210.591] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db440) returned 0x0 [0210.591] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db440) returned 0x0 [0210.591] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.591] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.591] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4b0) returned 0x0 [0210.591] GetCurrentObject (hdc=0x7b0106d6, type=0x1) returned 0x1b00017 [0210.591] GetCurrentObject (hdc=0x7b0106d6, type=0x2) returned 0x1900010 [0210.591] GetCurrentObject (hdc=0x7b0106d6, type=0x7) returned 0x11050637 [0210.591] GetCurrentObject (hdc=0x7b0106d6, type=0x6) returned 0x18a0048 [0210.591] SaveDC (hdc=0x7b0106d6) returned 1 [0210.592] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbf04054e [0210.592] GetClipRgn (hdc=0x7b0106d6, hrgn=0xffffffffbf04054e) returned 0 [0210.592] SelectClipRgn (hdc=0x7b0106d6, hrgn=0x2d04063b) returned 2 [0210.592] DeleteObject (ho=0xffffffffbf04054e) returned 1 [0210.592] DeleteObject (ho=0x2d04063b) returned 1 [0210.592] OffsetViewportOrgEx (in: hdc=0x7b0106d6, x=0, y=0, lppt=0x279c3e0 | out: lppt=0x279c3e0) returned 1 [0210.592] IsAppThemed () returned 0x1 [0210.592] GetThemeAppProperties () returned 0x3 [0210.592] GetThemeAppProperties () returned 0x3 [0210.592] GetThemeBackgroundContentRect () returned 0x0 [0210.592] RestoreDC (hdc=0x7b0106d6, nSavedDC=-1) returned 1 [0210.592] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.592] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7b0106d6) returned 0x0 [0210.592] IsAppThemed () returned 0x1 [0210.592] GetThemeAppProperties () returned 0x3 [0210.592] GetThemeAppProperties () returned 0x3 [0210.592] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5db5a0) returned 0x0 [0210.592] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db580) returned 0x0 [0210.592] GetCurrentObject (hdc=0x7b0106d6, type=0x1) returned 0x1b00017 [0210.592] GetCurrentObject (hdc=0x7b0106d6, type=0x2) returned 0x1900010 [0210.592] GetCurrentObject (hdc=0x7b0106d6, type=0x7) returned 0x11050637 [0210.592] GetCurrentObject (hdc=0x7b0106d6, type=0x6) returned 0x18a0048 [0210.593] SaveDC (hdc=0x7b0106d6) returned 1 [0210.593] GetTextAlign (hdc=0x7b0106d6) returned 0x0 [0210.593] GetTextColor (hdc=0x7b0106d6) returned 0x0 [0210.593] GetCurrentObject (hdc=0x7b0106d6, type=0x6) returned 0x18a0048 [0210.593] GetObjectW (in: h=0x18a0048, c=92, pv=0x5daff0 | out: pv=0x5daff0) returned 92 [0210.593] SelectObject (hdc=0x7b0106d6, h=0x290a0573) returned 0x18a0048 [0210.593] GetBkMode (hdc=0x7b0106d6) returned 2 [0210.593] SetBkMode (hdc=0x7b0106d6, mode=1) returned 2 [0210.593] DrawTextExW (in: hdc=0x7b0106d6, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db080, format=0x2415, lpdtp=0x279c938 | out: lpchText="Submit Decryption Key", lprc=0x5db080) returned 13 [0210.593] DrawTextExW (in: hdc=0x7b0106d6, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db130, format=0x2015, lpdtp=0x279c938 | out: lpchText="Submit Decryption Key", lprc=0x5db130) returned 13 [0210.594] RestoreDC (hdc=0x7b0106d6, nSavedDC=-1) returned 1 [0210.594] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.594] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7b0106d6) returned 0x0 [0210.594] GetFocus () returned 0x2021e [0210.594] IsAppThemed () returned 0x1 [0210.594] GetThemeAppProperties () returned 0x3 [0210.594] GetThemeAppProperties () returned 0x3 [0210.594] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbce0) returned 0x0 [0210.594] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x7b0106d6, x1=0, y1=0, rop=0xcc0020) returned 1 [0210.594] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.594] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x7b0106d6) returned 0x0 [0210.594] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0210.594] SelectObject (hdc=0x7b0106d6, h=0x185000f) returned 0x11050637 [0210.595] DeleteDC (hdc=0x7b0106d6) returned 1 [0210.595] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.595] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0210.595] EndPaint (hWnd=0x2021e, lpPaint=0x5dbde8) returned 1 [0210.595] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x279caa0, cPoints=0x1 | out: lpPoints=0x279caa0) returned 21233850 [0210.595] WindowFromPoint (Point=0x15300000102) returned 0x2021e [0210.595] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1530102) returned 0x1 [0210.595] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0210.595] NotifyWinEvent (event=0x800c, hwnd=0x2021e, idObject=-4, idChild=0) [0210.595] SendMessageW (hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0210.595] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0210.595] GetProcessWindowStation () returned 0xc8 [0210.595] GetActiveWindow () returned 0x20160 [0210.596] GetCurrentActCtx (in: lphActCtx=0x5dc620 | out: lphActCtx=0x5dc620*=0x811d28) returned 1 [0210.596] GetCurrentThreadId () returned 0xe28 [0210.596] EnumThreadWindows (dwThreadId=0xe28, lpfn=0x216428c, lParam=0x0) returned 1 [0210.596] IsWindowVisible (hWnd=0x20160) returned 1 [0210.596] IsWindowEnabled (hWnd=0x20160) returned 1 [0210.596] IsWindowVisible (hWnd=0x901f6) returned 1 [0210.596] IsWindowEnabled (hWnd=0x901f6) returned 0 [0210.596] IsWindowVisible (hWnd=0x20232) returned 0 [0210.596] IsWindowVisible (hWnd=0x20224) returned 0 [0210.596] IsWindowVisible (hWnd=0x50020) returned 0 [0210.596] IsWindowVisible (hWnd=0x20230) returned 0 [0210.596] IsWindowVisible (hWnd=0x60152) returned 0 [0210.596] GetActiveWindow () returned 0x20160 [0210.596] GetFocus () returned 0x2021e [0210.596] IsWindow (hWnd=0x20160) returned 1 [0210.596] EnableWindow (hWnd=0x20160, bEnable=0) returned 0 [0210.596] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0210.597] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0210.597] MessageBoxW (hWnd=0x20160, lpText="The decryption key has bad format.", lpCaption="Error", uType=0x10) returned 1 [0210.604] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0210.612] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x4021c) returned 0x1 [0210.613] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0210.613] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0210.614] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0210.614] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0210.614] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0210.614] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0210.616] GetFocus () returned 0x40216 [0210.616] IsChild (hWndParent=0x20160, hWnd=0x40216) returned 0 [0210.616] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x8, wParam=0x40216, lParam=0x0) returned 0x0 [0210.616] GetCapture () returned 0x2021e [0210.616] ReleaseCapture () returned 1 [0210.616] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0210.616] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0210.617] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0210.618] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0210.618] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0210.619] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0x1010749 [0210.619] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0210.619] CreateCompatibleDC (hdc=0x1010749) returned 0x2101074f [0210.619] SelectObject (hdc=0x2101074f, h=0x11050637) returned 0x185000f [0210.619] GdipCreateFromHDC (hdc=0x2101074f, graphics=0x5db3f0) returned 0x0 [0210.619] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0210.619] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0210.619] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0210.619] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d90) returned 0x0 [0210.619] GdipIsMatrixIdentity (matrix=0x1c326d90, result=0x5db580) returned 0x0 [0210.619] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb50 [0210.620] GdipGetMatrixElements (matrix=0x1c326d90, matrixOut=0x89eb50) returned 0x0 [0210.620] LocalFree (hMem=0x89eb50) returned 0x0 [0210.620] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.620] GdipDeleteMatrix (matrix=0x1c326d90) returned 0x0 [0210.620] GdipCreateRegion (region=0x5db520) returned 0x0 [0210.620] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.620] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0210.620] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0210.620] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd850dbd) returned 0x0 [0210.620] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.620] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.620] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0210.620] GetCurrentObject (hdc=0x2101074f, type=0x1) returned 0x1b00017 [0210.620] GetCurrentObject (hdc=0x2101074f, type=0x2) returned 0x1900010 [0210.621] GetCurrentObject (hdc=0x2101074f, type=0x7) returned 0x11050637 [0210.621] GetCurrentObject (hdc=0x2101074f, type=0x6) returned 0x18a0048 [0210.621] SaveDC (hdc=0x2101074f) returned 1 [0210.621] GetNearestColor (hdc=0x2101074f, color=0xf0f0f0) returned 0xf0f0f0 [0210.621] GetNearestColor (hdc=0x2101074f, color=0xa0a0a0) returned 0xa0a0a0 [0210.621] GetNearestColor (hdc=0x2101074f, color=0x696969) returned 0x696969 [0210.621] GetNearestColor (hdc=0x2101074f, color=0xa0a0a0) returned 0xa0a0a0 [0210.621] GetNearestColor (hdc=0x2101074f, color=0x0) returned 0x0 [0210.621] GetNearestColor (hdc=0x2101074f, color=0xffffff) returned 0xffffff [0210.621] GetNearestColor (hdc=0x2101074f, color=0xe5e5e5) returned 0xe5e5e5 [0210.622] GetNearestColor (hdc=0x2101074f, color=0xd8d8d8) returned 0xd8d8d8 [0210.622] GetNearestColor (hdc=0x2101074f, color=0x0) returned 0x0 [0210.622] RestoreDC (hdc=0x2101074f, nSavedDC=-1) returned 1 [0210.622] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.622] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2101074f) returned 0x0 [0210.622] IsAppThemed () returned 0x1 [0210.622] GetThemeAppProperties () returned 0x3 [0210.622] GetThemeAppProperties () returned 0x3 [0210.622] IsAppThemed () returned 0x1 [0210.622] GetThemeAppProperties () returned 0x3 [0210.622] GetThemeAppProperties () returned 0x3 [0210.622] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x2415, lpdtp=0x279d6b8 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0210.622] IsAppThemed () returned 0x1 [0210.622] GetThemeAppProperties () returned 0x3 [0210.622] GetThemeAppProperties () returned 0x3 [0210.622] IsAppThemed () returned 0x1 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] IsAppThemed () returned 0x1 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] IsAppThemed () returned 0x1 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] IsThemePartDefined () returned 0x1 [0210.623] IsAppThemed () returned 0x1 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0210.623] IsAppThemed () returned 0x1 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] IsAppThemed () returned 0x1 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] GetThemeAppProperties () returned 0x3 [0210.623] IsThemePartDefined () returned 0x1 [0210.623] GdipCreateRegion (region=0x5dad30) returned 0x0 [0210.623] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.623] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0210.623] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e90) returned 0x0 [0210.623] GdipIsMatrixIdentity (matrix=0x1c326e90, result=0x5dad90) returned 0x0 [0210.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ead0 [0210.624] GdipGetMatrixElements (matrix=0x1c326e90, matrixOut=0x89ead0) returned 0x0 [0210.624] LocalFree (hMem=0x89ead0) returned 0x0 [0210.624] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f0d0 [0210.624] GdipGetMatrixElements (matrix=0x1c326e90, matrixOut=0x89f0d0) returned 0x0 [0210.624] LocalFree (hMem=0x89f0d0) returned 0x0 [0210.624] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.624] GdipDeleteMatrix (matrix=0x1c326e90) returned 0x0 [0210.624] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0210.624] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0210.624] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0210.624] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.624] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.624] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0210.624] GetCurrentObject (hdc=0x2101074f, type=0x1) returned 0x1b00017 [0210.624] GetCurrentObject (hdc=0x2101074f, type=0x2) returned 0x1900010 [0210.624] GetCurrentObject (hdc=0x2101074f, type=0x7) returned 0x11050637 [0210.624] GetCurrentObject (hdc=0x2101074f, type=0x6) returned 0x18a0048 [0210.624] SaveDC (hdc=0x2101074f) returned 1 [0210.625] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2e04063b [0210.625] GetClipRgn (hdc=0x2101074f, hrgn=0x2e04063b) returned 0 [0210.625] SelectClipRgn (hdc=0x2101074f, hrgn=0xffffffffc504054e) returned 2 [0210.625] DeleteObject (ho=0x2e04063b) returned 1 [0210.625] DeleteObject (ho=0xffffffffc504054e) returned 1 [0210.625] OffsetViewportOrgEx (in: hdc=0x2101074f, x=0, y=0, lppt=0x279e0c8 | out: lppt=0x279e0c8) returned 1 [0210.625] DrawThemeParentBackground () returned 0x0 [0210.625] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0210.625] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0210.625] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.625] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.625] GetSystemMetrics (nIndex=42) returned 0 [0210.625] CoTaskMemAlloc (cb=0x20) returned 0x89d130 [0210.625] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d130, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.625] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d130) returned 0xd [0210.625] CoTaskMemFree (pv=0x89d130) [0210.625] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0210.625] GetCurrentObject (hdc=0x2101074f, type=0x1) returned 0x1b00017 [0210.625] GetCurrentObject (hdc=0x2101074f, type=0x2) returned 0x1900010 [0210.626] GetCurrentObject (hdc=0x2101074f, type=0x7) returned 0x11050637 [0210.626] GetCurrentObject (hdc=0x2101074f, type=0x6) returned 0x18a0048 [0210.626] SaveDC (hdc=0x2101074f) returned 2 [0210.626] GetNearestColor (hdc=0x2101074f, color=0xf0f0f0) returned 0xf0f0f0 [0210.626] CreateSolidBrush (color=0xf0f0f0) returned 0x5b100686 [0210.626] FillRect (hDC=0x2101074f, lprc=0x5d9fb0, hbr=0x5b100686) returned 1 [0210.626] DeleteObject (ho=0x5b100686) returned 1 [0210.626] RestoreDC (hdc=0x2101074f, nSavedDC=-1) returned 1 [0210.626] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.626] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.626] GetSystemMetrics (nIndex=42) returned 0 [0210.626] CoTaskMemAlloc (cb=0x20) returned 0x89d0d0 [0210.626] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d0d0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.626] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d0d0) returned 0xd [0210.626] CoTaskMemFree (pv=0x89d0d0) [0210.626] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0210.627] GetCurrentObject (hdc=0x2101074f, type=0x1) returned 0x1b00017 [0210.627] GetCurrentObject (hdc=0x2101074f, type=0x2) returned 0x1900010 [0210.627] GetCurrentObject (hdc=0x2101074f, type=0x7) returned 0x11050637 [0210.627] GetCurrentObject (hdc=0x2101074f, type=0x6) returned 0x18a0048 [0210.627] SaveDC (hdc=0x2101074f) returned 2 [0210.627] GetNearestColor (hdc=0x2101074f, color=0xf0f0f0) returned 0xf0f0f0 [0210.627] CreateSolidBrush (color=0xf0f0f0) returned 0x5c100686 [0210.627] FillRect (hDC=0x2101074f, lprc=0x5d9eb0, hbr=0x5c100686) returned 1 [0210.627] DeleteObject (ho=0x5c100686) returned 1 [0210.627] RestoreDC (hdc=0x2101074f, nSavedDC=-1) returned 1 [0210.627] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.627] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.627] GetSystemMetrics (nIndex=42) returned 0 [0210.627] CoTaskMemAlloc (cb=0x20) returned 0x89d460 [0210.627] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d460, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.627] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d460) returned 0xd [0210.627] CoTaskMemFree (pv=0x89d460) [0210.628] RestoreDC (hdc=0x2101074f, nSavedDC=-1) returned 1 [0210.628] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.628] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2101074f) returned 0x0 [0210.628] IsAppThemed () returned 0x1 [0210.628] GetThemeAppProperties () returned 0x3 [0210.628] GetThemeAppProperties () returned 0x3 [0210.628] IsAppThemed () returned 0x1 [0210.628] GetThemeAppProperties () returned 0x3 [0210.628] GetThemeAppProperties () returned 0x3 [0210.628] IsThemePartDefined () returned 0x1 [0210.628] GdipCreateRegion (region=0x5dac10) returned 0x0 [0210.628] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.628] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0210.628] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d90) returned 0x0 [0210.628] GdipIsMatrixIdentity (matrix=0x1c326d90, result=0x5dac70) returned 0x0 [0210.628] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f3d0 [0210.628] GdipGetMatrixElements (matrix=0x1c326d90, matrixOut=0x89f3d0) returned 0x0 [0210.628] LocalFree (hMem=0x89f3d0) returned 0x0 [0210.628] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e850 [0210.628] GdipGetMatrixElements (matrix=0x1c326d90, matrixOut=0x89e850) returned 0x0 [0210.628] LocalFree (hMem=0x89e850) returned 0x0 [0210.628] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.628] GdipDeleteMatrix (matrix=0x1c326d90) returned 0x0 [0210.628] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0210.628] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0210.629] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0210.629] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.636] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.636] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0210.636] GetCurrentObject (hdc=0x2101074f, type=0x1) returned 0x1b00017 [0210.636] GetCurrentObject (hdc=0x2101074f, type=0x2) returned 0x1900010 [0210.636] GetCurrentObject (hdc=0x2101074f, type=0x7) returned 0x11050637 [0210.636] GetCurrentObject (hdc=0x2101074f, type=0x6) returned 0x18a0048 [0210.636] SaveDC (hdc=0x2101074f) returned 1 [0210.636] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc604054e [0210.636] GetClipRgn (hdc=0x2101074f, hrgn=0xffffffffc604054e) returned 0 [0210.636] SelectClipRgn (hdc=0x2101074f, hrgn=0x3004063b) returned 2 [0210.636] DeleteObject (ho=0xffffffffc604054e) returned 1 [0210.636] DeleteObject (ho=0x3004063b) returned 1 [0210.636] OffsetViewportOrgEx (in: hdc=0x2101074f, x=0, y=0, lppt=0x279edc8 | out: lppt=0x279edc8) returned 1 [0210.636] IsAppThemed () returned 0x1 [0210.636] GetThemeAppProperties () returned 0x3 [0210.636] GetThemeAppProperties () returned 0x3 [0210.637] DrawThemeBackground () returned 0x0 [0210.637] RestoreDC (hdc=0x2101074f, nSavedDC=-1) returned 1 [0210.637] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.637] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2101074f) returned 0x0 [0210.637] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0210.637] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.637] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0210.637] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f10) returned 0x0 [0210.637] GdipIsMatrixIdentity (matrix=0x1c326f10, result=0x5dac40) returned 0x0 [0210.637] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ecd0 [0210.637] GdipGetMatrixElements (matrix=0x1c326f10, matrixOut=0x89ecd0) returned 0x0 [0210.637] LocalFree (hMem=0x89ecd0) returned 0x0 [0210.637] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f590 [0210.637] GdipGetMatrixElements (matrix=0x1c326f10, matrixOut=0x89f590) returned 0x0 [0210.637] LocalFree (hMem=0x89f590) returned 0x0 [0210.637] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.637] GdipDeleteMatrix (matrix=0x1c326f10) returned 0x0 [0210.637] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0210.637] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0210.637] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0210.637] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.637] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.637] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0210.637] GetCurrentObject (hdc=0x2101074f, type=0x1) returned 0x1b00017 [0210.637] GetCurrentObject (hdc=0x2101074f, type=0x2) returned 0x1900010 [0210.637] GetCurrentObject (hdc=0x2101074f, type=0x7) returned 0x11050637 [0210.638] GetCurrentObject (hdc=0x2101074f, type=0x6) returned 0x18a0048 [0210.638] SaveDC (hdc=0x2101074f) returned 1 [0210.638] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3104063b [0210.638] GetClipRgn (hdc=0x2101074f, hrgn=0x3104063b) returned 0 [0210.638] SelectClipRgn (hdc=0x2101074f, hrgn=0xffffffffc704054e) returned 2 [0210.638] DeleteObject (ho=0x3104063b) returned 1 [0210.638] DeleteObject (ho=0xffffffffc704054e) returned 1 [0210.638] OffsetViewportOrgEx (in: hdc=0x2101074f, x=0, y=0, lppt=0x279f2c8 | out: lppt=0x279f2c8) returned 1 [0210.638] IsAppThemed () returned 0x1 [0210.638] GetThemeAppProperties () returned 0x3 [0210.638] GetThemeAppProperties () returned 0x3 [0210.638] GetThemeBackgroundContentRect () returned 0x0 [0210.638] RestoreDC (hdc=0x2101074f, nSavedDC=-1) returned 1 [0210.638] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.638] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2101074f) returned 0x0 [0210.638] IsAppThemed () returned 0x1 [0210.638] GetThemeAppProperties () returned 0x3 [0210.638] GetThemeAppProperties () returned 0x3 [0210.638] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0210.638] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0210.638] GetCurrentObject (hdc=0x2101074f, type=0x1) returned 0x1b00017 [0210.638] GetCurrentObject (hdc=0x2101074f, type=0x2) returned 0x1900010 [0210.638] GetCurrentObject (hdc=0x2101074f, type=0x7) returned 0x11050637 [0210.638] GetCurrentObject (hdc=0x2101074f, type=0x6) returned 0x18a0048 [0210.638] SaveDC (hdc=0x2101074f) returned 1 [0210.638] GetTextAlign (hdc=0x2101074f) returned 0x0 [0210.638] GetTextColor (hdc=0x2101074f) returned 0x0 [0210.638] GetCurrentObject (hdc=0x2101074f, type=0x6) returned 0x18a0048 [0210.638] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0210.639] SelectObject (hdc=0x2101074f, h=0x290a0573) returned 0x18a0048 [0210.639] GetBkMode (hdc=0x2101074f) returned 2 [0210.639] SetBkMode (hdc=0x2101074f, mode=1) returned 2 [0210.639] DrawTextExW (in: hdc=0x2101074f, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x2415, lpdtp=0x279f820 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0210.639] DrawTextExW (in: hdc=0x2101074f, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x2015, lpdtp=0x279f820 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0210.639] RestoreDC (hdc=0x2101074f, nSavedDC=-1) returned 1 [0210.639] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.639] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2101074f) returned 0x0 [0210.639] GetFocus () returned 0x40216 [0210.639] IsAppThemed () returned 0x1 [0210.639] GetThemeAppProperties () returned 0x3 [0210.639] GetThemeAppProperties () returned 0x3 [0210.640] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0210.640] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0x2101074f, x1=0, y1=0, rop=0xcc0020) returned 1 [0210.640] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.640] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2101074f) returned 0x0 [0210.640] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0210.640] SelectObject (hdc=0x2101074f, h=0x185000f) returned 0x11050637 [0210.640] DeleteDC (hdc=0x2101074f) returned 1 [0210.640] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.640] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0210.640] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0210.640] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0210.640] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0210.640] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0x1010749 [0210.640] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0210.640] CreateCompatibleDC (hdc=0x1010749) returned 0x2201074f [0210.641] SelectObject (hdc=0x2201074f, h=0x11050637) returned 0x185000f [0210.641] GdipCreateFromHDC (hdc=0x2201074f, graphics=0x5db3f0) returned 0x0 [0210.641] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0210.641] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0210.641] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0210.641] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326ed0) returned 0x0 [0210.641] GdipIsMatrixIdentity (matrix=0x1c326ed0, result=0x5db580) returned 0x0 [0210.641] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0210.641] GdipGetMatrixElements (matrix=0x1c326ed0, matrixOut=0x89ec10) returned 0x0 [0210.641] LocalFree (hMem=0x89ec10) returned 0x0 [0210.641] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.641] GdipDeleteMatrix (matrix=0x1c326ed0) returned 0x0 [0210.641] GdipCreateRegion (region=0x5db520) returned 0x0 [0210.641] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.641] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0210.641] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0210.641] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd830dbd) returned 0x0 [0210.641] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.641] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.642] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0210.642] GetCurrentObject (hdc=0x2201074f, type=0x1) returned 0x1b00017 [0210.642] GetCurrentObject (hdc=0x2201074f, type=0x2) returned 0x1900010 [0210.642] GetCurrentObject (hdc=0x2201074f, type=0x7) returned 0x11050637 [0210.642] GetCurrentObject (hdc=0x2201074f, type=0x6) returned 0x18a0048 [0210.642] SaveDC (hdc=0x2201074f) returned 1 [0210.642] GetNearestColor (hdc=0x2201074f, color=0xf0f0f0) returned 0xf0f0f0 [0210.642] GetNearestColor (hdc=0x2201074f, color=0xa0a0a0) returned 0xa0a0a0 [0210.642] GetNearestColor (hdc=0x2201074f, color=0x696969) returned 0x696969 [0210.642] GetNearestColor (hdc=0x2201074f, color=0xa0a0a0) returned 0xa0a0a0 [0210.642] GetNearestColor (hdc=0x2201074f, color=0x0) returned 0x0 [0210.642] GetNearestColor (hdc=0x2201074f, color=0xffffff) returned 0xffffff [0210.642] GetNearestColor (hdc=0x2201074f, color=0xe5e5e5) returned 0xe5e5e5 [0210.642] GetNearestColor (hdc=0x2201074f, color=0xd8d8d8) returned 0xd8d8d8 [0210.642] GetNearestColor (hdc=0x2201074f, color=0x0) returned 0x0 [0210.643] RestoreDC (hdc=0x2201074f, nSavedDC=-1) returned 1 [0210.643] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.643] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2201074f) returned 0x0 [0210.643] IsAppThemed () returned 0x1 [0210.643] GetThemeAppProperties () returned 0x3 [0210.643] GetThemeAppProperties () returned 0x3 [0210.643] IsAppThemed () returned 0x1 [0210.643] GetThemeAppProperties () returned 0x3 [0210.643] GetThemeAppProperties () returned 0x3 [0210.643] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x2415, lpdtp=0x27a0270 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0210.643] IsAppThemed () returned 0x1 [0210.643] GetThemeAppProperties () returned 0x3 [0210.643] GetThemeAppProperties () returned 0x3 [0210.643] IsAppThemed () returned 0x1 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] GetFocus () returned 0x40216 [0210.644] IsAppThemed () returned 0x1 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] IsAppThemed () returned 0x1 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] IsThemePartDefined () returned 0x1 [0210.644] IsAppThemed () returned 0x1 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0210.644] IsAppThemed () returned 0x1 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] IsAppThemed () returned 0x1 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] GetThemeAppProperties () returned 0x3 [0210.644] IsThemePartDefined () returned 0x1 [0210.644] GdipCreateRegion (region=0x5dad30) returned 0x0 [0210.644] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.645] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0210.645] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e50) returned 0x0 [0210.645] GdipIsMatrixIdentity (matrix=0x1c326e50, result=0x5dad90) returned 0x0 [0210.645] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f710 [0210.645] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89f710) returned 0x0 [0210.645] LocalFree (hMem=0x89f710) returned 0x0 [0210.645] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f550 [0210.645] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89f550) returned 0x0 [0210.645] LocalFree (hMem=0x89f550) returned 0x0 [0210.645] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.645] GdipDeleteMatrix (matrix=0x1c326e50) returned 0x0 [0210.645] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0210.645] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0210.645] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0210.645] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.645] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.645] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0210.645] GetCurrentObject (hdc=0x2201074f, type=0x1) returned 0x1b00017 [0210.645] GetCurrentObject (hdc=0x2201074f, type=0x2) returned 0x1900010 [0210.645] GetCurrentObject (hdc=0x2201074f, type=0x7) returned 0x11050637 [0210.645] GetCurrentObject (hdc=0x2201074f, type=0x6) returned 0x18a0048 [0210.645] SaveDC (hdc=0x2201074f) returned 1 [0210.646] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc804054e [0210.646] GetClipRgn (hdc=0x2201074f, hrgn=0xffffffffc804054e) returned 0 [0210.646] SelectClipRgn (hdc=0x2201074f, hrgn=0x3504063b) returned 2 [0210.646] DeleteObject (ho=0xffffffffc804054e) returned 1 [0210.646] DeleteObject (ho=0x3504063b) returned 1 [0210.646] OffsetViewportOrgEx (in: hdc=0x2201074f, x=0, y=0, lppt=0x27a0c80 | out: lppt=0x27a0c80) returned 1 [0210.646] DrawThemeParentBackground () returned 0x0 [0210.646] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0210.646] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0210.646] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.646] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.646] GetSystemMetrics (nIndex=42) returned 0 [0210.646] CoTaskMemAlloc (cb=0x20) returned 0x89d2b0 [0210.646] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d2b0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.646] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d2b0) returned 0xd [0210.646] CoTaskMemFree (pv=0x89d2b0) [0210.646] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0210.646] GetCurrentObject (hdc=0x2201074f, type=0x1) returned 0x1b00017 [0210.646] GetCurrentObject (hdc=0x2201074f, type=0x2) returned 0x1900010 [0210.647] GetCurrentObject (hdc=0x2201074f, type=0x7) returned 0x11050637 [0210.647] GetCurrentObject (hdc=0x2201074f, type=0x6) returned 0x18a0048 [0210.647] SaveDC (hdc=0x2201074f) returned 2 [0210.647] GetNearestColor (hdc=0x2201074f, color=0xf0f0f0) returned 0xf0f0f0 [0210.647] CreateSolidBrush (color=0xf0f0f0) returned 0x5d100686 [0210.647] FillRect (hDC=0x2201074f, lprc=0x5d9fb0, hbr=0x5d100686) returned 1 [0210.647] DeleteObject (ho=0x5d100686) returned 1 [0210.647] RestoreDC (hdc=0x2201074f, nSavedDC=-1) returned 1 [0210.647] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.647] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.647] GetSystemMetrics (nIndex=42) returned 0 [0210.647] CoTaskMemAlloc (cb=0x20) returned 0x89d1f0 [0210.647] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d1f0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.647] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d1f0) returned 0xd [0210.647] CoTaskMemFree (pv=0x89d1f0) [0210.647] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0210.648] GetCurrentObject (hdc=0x2201074f, type=0x1) returned 0x1b00017 [0210.648] GetCurrentObject (hdc=0x2201074f, type=0x2) returned 0x1900010 [0210.648] GetCurrentObject (hdc=0x2201074f, type=0x7) returned 0x11050637 [0210.648] GetCurrentObject (hdc=0x2201074f, type=0x6) returned 0x18a0048 [0210.648] SaveDC (hdc=0x2201074f) returned 2 [0210.648] GetNearestColor (hdc=0x2201074f, color=0xf0f0f0) returned 0xf0f0f0 [0210.648] CreateSolidBrush (color=0xf0f0f0) returned 0x5e100686 [0210.648] FillRect (hDC=0x2201074f, lprc=0x5d9eb0, hbr=0x5e100686) returned 1 [0210.648] DeleteObject (ho=0x5e100686) returned 1 [0210.648] RestoreDC (hdc=0x2201074f, nSavedDC=-1) returned 1 [0210.648] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0210.648] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0210.648] GetSystemMetrics (nIndex=42) returned 0 [0210.648] CoTaskMemAlloc (cb=0x20) returned 0x89d3a0 [0210.648] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d3a0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0210.648] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d3a0) returned 0xd [0210.648] CoTaskMemFree (pv=0x89d3a0) [0210.649] RestoreDC (hdc=0x2201074f, nSavedDC=-1) returned 1 [0210.649] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.649] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2201074f) returned 0x0 [0210.649] IsAppThemed () returned 0x1 [0210.649] GetThemeAppProperties () returned 0x3 [0210.649] GetThemeAppProperties () returned 0x3 [0210.649] IsAppThemed () returned 0x1 [0210.649] GetThemeAppProperties () returned 0x3 [0210.649] GetThemeAppProperties () returned 0x3 [0210.649] IsThemePartDefined () returned 0x1 [0210.649] GdipCreateRegion (region=0x5dac10) returned 0x0 [0210.649] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.649] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0210.649] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326ed0) returned 0x0 [0210.649] GdipIsMatrixIdentity (matrix=0x1c326ed0, result=0x5dac70) returned 0x0 [0210.649] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f550 [0210.649] GdipGetMatrixElements (matrix=0x1c326ed0, matrixOut=0x89f550) returned 0x0 [0210.649] LocalFree (hMem=0x89f550) returned 0x0 [0210.649] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f510 [0210.649] GdipGetMatrixElements (matrix=0x1c326ed0, matrixOut=0x89f510) returned 0x0 [0210.649] LocalFree (hMem=0x89f510) returned 0x0 [0210.649] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.649] GdipDeleteMatrix (matrix=0x1c326ed0) returned 0x0 [0210.650] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0210.650] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0210.650] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0210.650] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.650] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.650] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0210.650] GetCurrentObject (hdc=0x2201074f, type=0x1) returned 0x1b00017 [0210.650] GetCurrentObject (hdc=0x2201074f, type=0x2) returned 0x1900010 [0210.650] GetCurrentObject (hdc=0x2201074f, type=0x7) returned 0x11050637 [0210.650] GetCurrentObject (hdc=0x2201074f, type=0x6) returned 0x18a0048 [0210.650] SaveDC (hdc=0x2201074f) returned 1 [0210.650] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3604063b [0210.650] GetClipRgn (hdc=0x2201074f, hrgn=0x3604063b) returned 0 [0210.650] SelectClipRgn (hdc=0x2201074f, hrgn=0xffffffffca04054e) returned 2 [0210.650] DeleteObject (ho=0x3604063b) returned 1 [0210.650] DeleteObject (ho=0xffffffffca04054e) returned 1 [0210.650] OffsetViewportOrgEx (in: hdc=0x2201074f, x=0, y=0, lppt=0x27a1980 | out: lppt=0x27a1980) returned 1 [0210.650] IsAppThemed () returned 0x1 [0210.650] GetThemeAppProperties () returned 0x3 [0210.650] GetThemeAppProperties () returned 0x3 [0210.651] DrawThemeBackground () returned 0x0 [0210.651] RestoreDC (hdc=0x2201074f, nSavedDC=-1) returned 1 [0210.651] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.651] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2201074f) returned 0x0 [0210.651] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0210.651] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.651] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0210.651] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f90) returned 0x0 [0210.651] GdipIsMatrixIdentity (matrix=0x1c326f90, result=0x5dac40) returned 0x0 [0210.651] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f3d0 [0210.651] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89f3d0) returned 0x0 [0210.651] LocalFree (hMem=0x89f3d0) returned 0x0 [0210.651] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f5d0 [0210.651] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89f5d0) returned 0x0 [0210.651] LocalFree (hMem=0x89f5d0) returned 0x0 [0210.651] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.651] GdipDeleteMatrix (matrix=0x1c326f90) returned 0x0 [0210.651] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0210.651] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0210.651] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0210.651] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.651] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.652] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0210.652] GetCurrentObject (hdc=0x2201074f, type=0x1) returned 0x1b00017 [0210.652] GetCurrentObject (hdc=0x2201074f, type=0x2) returned 0x1900010 [0210.652] GetCurrentObject (hdc=0x2201074f, type=0x7) returned 0x11050637 [0210.652] GetCurrentObject (hdc=0x2201074f, type=0x6) returned 0x18a0048 [0210.652] SaveDC (hdc=0x2201074f) returned 1 [0210.652] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffcb04054e [0210.652] GetClipRgn (hdc=0x2201074f, hrgn=0xffffffffcb04054e) returned 0 [0210.652] SelectClipRgn (hdc=0x2201074f, hrgn=0x3704063b) returned 2 [0210.652] DeleteObject (ho=0xffffffffcb04054e) returned 1 [0210.652] DeleteObject (ho=0x3704063b) returned 1 [0210.652] OffsetViewportOrgEx (in: hdc=0x2201074f, x=0, y=0, lppt=0x27a1e80 | out: lppt=0x27a1e80) returned 1 [0210.652] IsAppThemed () returned 0x1 [0210.652] GetThemeAppProperties () returned 0x3 [0210.652] GetThemeAppProperties () returned 0x3 [0210.652] GetThemeBackgroundContentRect () returned 0x0 [0210.652] RestoreDC (hdc=0x2201074f, nSavedDC=-1) returned 1 [0210.652] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.652] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2201074f) returned 0x0 [0210.653] IsAppThemed () returned 0x1 [0210.653] GetThemeAppProperties () returned 0x3 [0210.653] GetThemeAppProperties () returned 0x3 [0210.653] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0210.653] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0210.653] GetCurrentObject (hdc=0x2201074f, type=0x1) returned 0x1b00017 [0210.653] GetCurrentObject (hdc=0x2201074f, type=0x2) returned 0x1900010 [0210.653] GetCurrentObject (hdc=0x2201074f, type=0x7) returned 0x11050637 [0210.653] GetCurrentObject (hdc=0x2201074f, type=0x6) returned 0x18a0048 [0210.653] SaveDC (hdc=0x2201074f) returned 1 [0210.654] GetTextAlign (hdc=0x2201074f) returned 0x0 [0210.654] GetTextColor (hdc=0x2201074f) returned 0x0 [0210.654] GetCurrentObject (hdc=0x2201074f, type=0x6) returned 0x18a0048 [0210.654] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0210.654] SelectObject (hdc=0x2201074f, h=0x290a0573) returned 0x18a0048 [0210.654] GetBkMode (hdc=0x2201074f) returned 2 [0210.654] SetBkMode (hdc=0x2201074f, mode=1) returned 2 [0210.654] DrawTextExW (in: hdc=0x2201074f, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x2415, lpdtp=0x27a23d8 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0210.654] DrawTextExW (in: hdc=0x2201074f, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x2015, lpdtp=0x27a23d8 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0210.654] RestoreDC (hdc=0x2201074f, nSavedDC=-1) returned 1 [0210.655] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.655] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2201074f) returned 0x0 [0210.655] GetFocus () returned 0x40216 [0210.655] IsAppThemed () returned 0x1 [0210.655] GetThemeAppProperties () returned 0x3 [0210.655] GetThemeAppProperties () returned 0x3 [0210.655] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0210.655] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0x2201074f, x1=0, y1=0, rop=0xcc0020) returned 1 [0210.655] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.655] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2201074f) returned 0x0 [0210.655] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0210.655] SelectObject (hdc=0x2201074f, h=0x185000f) returned 0x11050637 [0210.655] DeleteDC (hdc=0x2201074f) returned 1 [0210.655] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.655] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0210.655] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0210.677] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0210.983] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0210.983] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0210.983] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0210.983] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x4021c) returned 0x1 [0210.984] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0210.984] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0210.984] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0210.985] GetFocus () returned 0x4021c [0210.985] GetAncestor (hwnd=0x4021c, gaFlags=0x1) returned 0x10010 [0210.985] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0 [0210.985] SetFocus (hWnd=0x2021e) returned 0x0 [0210.986] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0210.987] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0210.987] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0210.987] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0210.987] GetFocus () returned 0x20160 [0210.987] SetFocus (hWnd=0x2021e) returned 0x0 [0210.990] IsWindow (hWnd=0x20160) returned 1 [0210.990] EnableWindow (hWnd=0x20160, bEnable=1) returned 1 [0210.990] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0210.990] IsWindow (hWnd=0x20160) returned 1 [0210.991] SetActiveWindow (hWnd=0x20160) returned 0x20160 [0210.991] IsWindow (hWnd=0x2021e) returned 1 [0210.991] SetFocus (hWnd=0x2021e) returned 0x20160 [0210.991] GetFocus () returned 0x2021e [0210.991] IsChild (hWndParent=0x20160, hWnd=0x2021e) returned 1 [0210.991] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x8, wParam=0x2021e, lParam=0x0) returned 0x0 [0210.991] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0210.991] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0210.992] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0210.992] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x7, wParam=0x20160, lParam=0x0) returned 0x0 [0210.992] GetStockObject (i=5) returned 0x1900015 [0210.992] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0210.992] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xd, wParam=0x16, lParam=0x89f1d0) returned 0x15 [0210.992] GetDlgItem (hDlg=0x20160, nIDDlgItem=131614) returned 0x2021e [0210.992] SendMessageW (hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5db790) returned 0x0 [0210.992] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5db790) returned 0x0 [0210.993] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0210.993] SendMessageW (hWnd=0x20160, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0210.993] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0210.993] GetFocus () returned 0x2021e [0210.993] GetCapture () returned 0x0 [0210.993] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.993] IsWindowUnicode (hWnd=0x2021e) returned 1 [0210.993] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0210.993] TranslateMessage (lpMsg=0x5dd220) returned 0 [0210.993] DispatchMessageW (lpMsg=0x5dd220) returned 0xa0a0a0 [0210.993] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0210.993] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0210.993] CreateCompatibleDC (hdc=0xa0100d0) returned 0x1901063a [0210.994] SelectObject (hdc=0x1901063a, h=0x11050637) returned 0x185000f [0210.994] GdipCreateFromHDC (hdc=0x1901063a, graphics=0x5dc420) returned 0x0 [0210.994] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0210.994] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0210.994] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0210.994] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e10) returned 0x0 [0210.994] GdipIsMatrixIdentity (matrix=0x1c326e10, result=0x5dc5b0) returned 0x0 [0210.994] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f650 [0210.994] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89f650) returned 0x0 [0210.994] LocalFree (hMem=0x89f650) returned 0x0 [0210.994] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.994] GdipDeleteMatrix (matrix=0x1c326e10) returned 0x0 [0210.994] GdipCreateRegion (region=0x5dc550) returned 0x0 [0210.994] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.994] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0210.994] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0210.994] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd810dbd) returned 0x0 [0210.994] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.994] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.995] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0210.995] GetCurrentObject (hdc=0x1901063a, type=0x1) returned 0x1b00017 [0210.995] GetCurrentObject (hdc=0x1901063a, type=0x2) returned 0x1900010 [0210.995] GetCurrentObject (hdc=0x1901063a, type=0x7) returned 0x11050637 [0210.995] GetCurrentObject (hdc=0x1901063a, type=0x6) returned 0x18a0048 [0210.995] SaveDC (hdc=0x1901063a) returned 1 [0210.995] GetNearestColor (hdc=0x1901063a, color=0xf0f0f0) returned 0xf0f0f0 [0210.995] GetNearestColor (hdc=0x1901063a, color=0xa0a0a0) returned 0xa0a0a0 [0210.996] GetNearestColor (hdc=0x1901063a, color=0x696969) returned 0x696969 [0210.996] GetNearestColor (hdc=0x1901063a, color=0xa0a0a0) returned 0xa0a0a0 [0210.996] GetNearestColor (hdc=0x1901063a, color=0x0) returned 0x0 [0210.996] GetNearestColor (hdc=0x1901063a, color=0xffffff) returned 0xffffff [0210.996] GetNearestColor (hdc=0x1901063a, color=0xe5e5e5) returned 0xe5e5e5 [0210.996] GetNearestColor (hdc=0x1901063a, color=0xd8d8d8) returned 0xd8d8d8 [0210.996] GetNearestColor (hdc=0x1901063a, color=0x0) returned 0x0 [0210.996] RestoreDC (hdc=0x1901063a, nSavedDC=-1) returned 1 [0210.996] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.996] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x1901063a) returned 0x0 [0210.996] IsAppThemed () returned 0x1 [0210.997] GetThemeAppProperties () returned 0x3 [0210.997] GetThemeAppProperties () returned 0x3 [0210.997] IsAppThemed () returned 0x1 [0210.997] GetThemeAppProperties () returned 0x3 [0210.997] GetThemeAppProperties () returned 0x3 [0210.997] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x2415, lpdtp=0x27a2ec0 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0210.997] IsAppThemed () returned 0x1 [0210.997] GetThemeAppProperties () returned 0x3 [0210.997] GetThemeAppProperties () returned 0x3 [0210.997] IsAppThemed () returned 0x1 [0210.997] GetThemeAppProperties () returned 0x3 [0210.997] GetThemeAppProperties () returned 0x3 [0210.997] GetFocus () returned 0x2021e [0210.997] IsAppThemed () returned 0x1 [0210.997] GetThemeAppProperties () returned 0x3 [0210.997] GetThemeAppProperties () returned 0x3 [0210.997] IsAppThemed () returned 0x1 [0210.998] GetThemeAppProperties () returned 0x3 [0210.998] GetThemeAppProperties () returned 0x3 [0210.998] IsThemePartDefined () returned 0x1 [0210.998] IsAppThemed () returned 0x1 [0210.998] GetThemeAppProperties () returned 0x3 [0210.998] GetThemeAppProperties () returned 0x3 [0210.998] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0210.998] IsAppThemed () returned 0x1 [0210.998] GetThemeAppProperties () returned 0x3 [0210.998] GetThemeAppProperties () returned 0x3 [0210.998] IsAppThemed () returned 0x1 [0210.998] GetThemeAppProperties () returned 0x3 [0210.998] GetThemeAppProperties () returned 0x3 [0210.998] IsThemePartDefined () returned 0x1 [0210.998] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0210.998] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0210.998] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0210.998] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e50) returned 0x0 [0210.998] GdipIsMatrixIdentity (matrix=0x1c326e50, result=0x5dbdc0) returned 0x0 [0210.998] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0210.998] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89f050) returned 0x0 [0210.998] LocalFree (hMem=0x89f050) returned 0x0 [0210.998] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f550 [0210.998] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89f550) returned 0x0 [0210.999] LocalFree (hMem=0x89f550) returned 0x0 [0210.999] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.999] GdipDeleteMatrix (matrix=0x1c326e50) returned 0x0 [0210.999] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0210.999] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0210.999] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0210.999] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0210.999] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0210.999] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0210.999] GetCurrentObject (hdc=0x1901063a, type=0x1) returned 0x1b00017 [0210.999] GetCurrentObject (hdc=0x1901063a, type=0x2) returned 0x1900010 [0210.999] GetCurrentObject (hdc=0x1901063a, type=0x7) returned 0x11050637 [0210.999] GetCurrentObject (hdc=0x1901063a, type=0x6) returned 0x18a0048 [0210.999] SaveDC (hdc=0x1901063a) returned 1 [0211.000] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff96040572 [0211.000] GetClipRgn (hdc=0x1901063a, hrgn=0xffffffff96040572) returned 0 [0211.000] SelectClipRgn (hdc=0x1901063a, hrgn=0x4504063b) returned 2 [0211.000] DeleteObject (ho=0xffffffff96040572) returned 1 [0211.000] DeleteObject (ho=0x4504063b) returned 1 [0211.000] OffsetViewportOrgEx (in: hdc=0x1901063a, x=0, y=0, lppt=0x27a38d0 | out: lppt=0x27a38d0) returned 1 [0211.000] DrawThemeParentBackground () returned 0x0 [0211.000] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0211.000] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0211.000] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0211.000] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0211.000] GetSystemMetrics (nIndex=42) returned 0 [0211.000] CoTaskMemAlloc (cb=0x20) returned 0x89d190 [0211.000] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d190, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0211.000] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d190) returned 0xd [0211.000] CoTaskMemFree (pv=0x89d190) [0211.000] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0211.001] GetCurrentObject (hdc=0x1901063a, type=0x1) returned 0x1b00017 [0211.001] GetCurrentObject (hdc=0x1901063a, type=0x2) returned 0x1900010 [0211.001] GetCurrentObject (hdc=0x1901063a, type=0x7) returned 0x11050637 [0211.001] GetCurrentObject (hdc=0x1901063a, type=0x6) returned 0x18a0048 [0211.001] SaveDC (hdc=0x1901063a) returned 2 [0211.001] GetNearestColor (hdc=0x1901063a, color=0xf0f0f0) returned 0xf0f0f0 [0211.001] CreateSolidBrush (color=0xf0f0f0) returned 0x60100686 [0211.001] FillRect (hDC=0x1901063a, lprc=0x5dafe0, hbr=0x60100686) returned 1 [0211.001] DeleteObject (ho=0x60100686) returned 1 [0211.001] RestoreDC (hdc=0x1901063a, nSavedDC=-1) returned 1 [0211.001] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0211.001] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0211.001] GetSystemMetrics (nIndex=42) returned 0 [0211.001] CoTaskMemAlloc (cb=0x20) returned 0x89ce60 [0211.001] GetWindowTextW (in: hWnd=0x20160, lpString=0x89ce60, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0211.001] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89ce60) returned 0xd [0211.001] CoTaskMemFree (pv=0x89ce60) [0211.001] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0211.002] GetCurrentObject (hdc=0x1901063a, type=0x1) returned 0x1b00017 [0211.002] GetCurrentObject (hdc=0x1901063a, type=0x2) returned 0x1900010 [0211.002] GetCurrentObject (hdc=0x1901063a, type=0x7) returned 0x11050637 [0211.002] GetCurrentObject (hdc=0x1901063a, type=0x6) returned 0x18a0048 [0211.002] SaveDC (hdc=0x1901063a) returned 2 [0211.002] GetNearestColor (hdc=0x1901063a, color=0xf0f0f0) returned 0xf0f0f0 [0211.002] CreateSolidBrush (color=0xf0f0f0) returned 0x61100686 [0211.002] FillRect (hDC=0x1901063a, lprc=0x5daee0, hbr=0x61100686) returned 1 [0211.002] DeleteObject (ho=0x61100686) returned 1 [0211.002] RestoreDC (hdc=0x1901063a, nSavedDC=-1) returned 1 [0211.002] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0211.002] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0211.002] GetSystemMetrics (nIndex=42) returned 0 [0211.002] CoTaskMemAlloc (cb=0x20) returned 0x89d460 [0211.002] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d460, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0211.002] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d460) returned 0xd [0211.003] CoTaskMemFree (pv=0x89d460) [0211.003] RestoreDC (hdc=0x1901063a, nSavedDC=-1) returned 1 [0211.003] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0211.003] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x1901063a) returned 0x0 [0211.003] IsAppThemed () returned 0x1 [0211.003] GetThemeAppProperties () returned 0x3 [0211.003] GetThemeAppProperties () returned 0x3 [0211.003] IsAppThemed () returned 0x1 [0211.003] GetThemeAppProperties () returned 0x3 [0211.003] GetThemeAppProperties () returned 0x3 [0211.003] IsThemePartDefined () returned 0x1 [0211.003] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0211.003] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0211.003] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0211.003] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f10) returned 0x0 [0211.003] GdipIsMatrixIdentity (matrix=0x1c326f10, result=0x5dbca0) returned 0x0 [0211.003] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0211.003] GdipGetMatrixElements (matrix=0x1c326f10, matrixOut=0x89f350) returned 0x0 [0211.003] LocalFree (hMem=0x89f350) returned 0x0 [0211.004] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f3d0 [0211.004] GdipGetMatrixElements (matrix=0x1c326f10, matrixOut=0x89f3d0) returned 0x0 [0211.004] LocalFree (hMem=0x89f3d0) returned 0x0 [0211.004] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0211.004] GdipDeleteMatrix (matrix=0x1c326f10) returned 0x0 [0211.004] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0211.004] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0211.004] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0211.004] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0211.004] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0211.004] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0211.005] GetCurrentObject (hdc=0x1901063a, type=0x1) returned 0x1b00017 [0211.005] GetCurrentObject (hdc=0x1901063a, type=0x2) returned 0x1900010 [0211.005] GetCurrentObject (hdc=0x1901063a, type=0x7) returned 0x11050637 [0211.005] GetCurrentObject (hdc=0x1901063a, type=0x6) returned 0x18a0048 [0211.005] SaveDC (hdc=0x1901063a) returned 1 [0211.005] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4604063b [0211.005] GetClipRgn (hdc=0x1901063a, hrgn=0x4604063b) returned 0 [0211.005] SelectClipRgn (hdc=0x1901063a, hrgn=0xffffffff98040572) returned 2 [0211.005] DeleteObject (ho=0x4604063b) returned 1 [0211.005] DeleteObject (ho=0xffffffff98040572) returned 1 [0211.005] OffsetViewportOrgEx (in: hdc=0x1901063a, x=0, y=0, lppt=0x27a45d0 | out: lppt=0x27a45d0) returned 1 [0211.005] IsAppThemed () returned 0x1 [0211.005] GetThemeAppProperties () returned 0x3 [0211.005] GetThemeAppProperties () returned 0x3 [0211.005] DrawThemeBackground () returned 0x0 [0211.005] RestoreDC (hdc=0x1901063a, nSavedDC=-1) returned 1 [0211.005] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0211.005] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x1901063a) returned 0x0 [0211.005] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0211.005] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0211.005] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0211.005] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327090) returned 0x0 [0211.006] GdipIsMatrixIdentity (matrix=0x1c327090, result=0x5dbc70) returned 0x0 [0211.006] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f290 [0211.006] GdipGetMatrixElements (matrix=0x1c327090, matrixOut=0x89f290) returned 0x0 [0211.006] LocalFree (hMem=0x89f290) returned 0x0 [0211.011] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f110 [0211.011] GdipGetMatrixElements (matrix=0x1c327090, matrixOut=0x89f110) returned 0x0 [0211.011] LocalFree (hMem=0x89f110) returned 0x0 [0211.011] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0211.012] GdipDeleteMatrix (matrix=0x1c327090) returned 0x0 [0211.012] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0211.012] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0211.012] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0211.012] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0211.012] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0211.012] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0211.012] GetCurrentObject (hdc=0x1901063a, type=0x1) returned 0x1b00017 [0211.012] GetCurrentObject (hdc=0x1901063a, type=0x2) returned 0x1900010 [0211.012] GetCurrentObject (hdc=0x1901063a, type=0x7) returned 0x11050637 [0211.012] GetCurrentObject (hdc=0x1901063a, type=0x6) returned 0x18a0048 [0211.012] SaveDC (hdc=0x1901063a) returned 1 [0211.012] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff99040572 [0211.012] GetClipRgn (hdc=0x1901063a, hrgn=0xffffffff99040572) returned 0 [0211.012] SelectClipRgn (hdc=0x1901063a, hrgn=0x4704063b) returned 2 [0211.012] DeleteObject (ho=0xffffffff99040572) returned 1 [0211.012] DeleteObject (ho=0x4704063b) returned 1 [0211.012] OffsetViewportOrgEx (in: hdc=0x1901063a, x=0, y=0, lppt=0x27a4ad0 | out: lppt=0x27a4ad0) returned 1 [0211.012] IsAppThemed () returned 0x1 [0211.013] GetThemeAppProperties () returned 0x3 [0211.013] GetThemeAppProperties () returned 0x3 [0211.013] GetThemeBackgroundContentRect () returned 0x0 [0211.013] RestoreDC (hdc=0x1901063a, nSavedDC=-1) returned 1 [0211.013] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0211.013] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x1901063a) returned 0x0 [0211.013] IsAppThemed () returned 0x1 [0211.013] GetThemeAppProperties () returned 0x3 [0211.013] GetThemeAppProperties () returned 0x3 [0211.013] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0211.014] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0211.014] GetCurrentObject (hdc=0x1901063a, type=0x1) returned 0x1b00017 [0211.014] GetCurrentObject (hdc=0x1901063a, type=0x2) returned 0x1900010 [0211.014] GetCurrentObject (hdc=0x1901063a, type=0x7) returned 0x11050637 [0211.014] GetCurrentObject (hdc=0x1901063a, type=0x6) returned 0x18a0048 [0211.014] SaveDC (hdc=0x1901063a) returned 1 [0211.014] GetTextAlign (hdc=0x1901063a) returned 0x0 [0211.014] GetTextColor (hdc=0x1901063a) returned 0x0 [0211.014] GetCurrentObject (hdc=0x1901063a, type=0x6) returned 0x18a0048 [0211.014] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0211.014] SelectObject (hdc=0x1901063a, h=0x290a0573) returned 0x18a0048 [0211.014] GetBkMode (hdc=0x1901063a) returned 2 [0211.014] SetBkMode (hdc=0x1901063a, mode=1) returned 2 [0211.014] DrawTextExW (in: hdc=0x1901063a, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x2415, lpdtp=0x27a5028 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0211.014] DrawTextExW (in: hdc=0x1901063a, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x2015, lpdtp=0x27a5028 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0211.015] RestoreDC (hdc=0x1901063a, nSavedDC=-1) returned 1 [0211.015] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0211.015] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x1901063a) returned 0x0 [0211.015] GetFocus () returned 0x2021e [0211.015] IsAppThemed () returned 0x1 [0211.015] GetThemeAppProperties () returned 0x3 [0211.015] GetThemeAppProperties () returned 0x3 [0211.015] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0211.015] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x1901063a, x1=0, y1=0, rop=0xcc0020) returned 1 [0211.015] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0211.015] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x1901063a) returned 0x0 [0211.015] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0211.016] SelectObject (hdc=0x1901063a, h=0x185000f) returned 0x11050637 [0211.016] DeleteDC (hdc=0x1901063a) returned 1 [0211.016] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0211.018] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0211.019] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0211.019] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0211.019] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0211.019] WaitMessage () returned 1 [0211.348] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0211.348] IsWindowUnicode (hWnd=0x20230) returned 1 [0211.348] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0211.349] TranslateMessage (lpMsg=0x5dd220) returned 0 [0211.349] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0211.349] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0211.349] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0211.349] WaitMessage () returned 1 [0211.967] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0211.967] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0211.967] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0211.967] WaitMessage () returned 1 [0213.241] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.241] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14e0120) returned 0x1 [0213.242] IsWindowUnicode (hWnd=0x2021e) returned 1 [0213.242] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.242] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14e0120) returned 0x1 [0213.242] SetCursor (hCursor=0x10003) returned 0x10003 [0213.242] TranslateMessage (lpMsg=0x5dd220) returned 0 [0213.242] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0213.242] _TrackMouseEvent (in: lpEventTrack=0x2773508 | out: lpEventTrack=0x2773508) returned 1 [0213.242] SendMessageW (hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0213.242] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0213.242] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0213.242] GetKeyState (nVirtKey=1) returned 0 [0213.242] GetKeyState (nVirtKey=2) returned 0 [0213.242] GetKeyState (nVirtKey=4) returned 0 [0213.242] GetKeyState (nVirtKey=5) returned 0 [0213.242] GetKeyState (nVirtKey=6) returned 0 [0213.243] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.243] IsWindowUnicode (hWnd=0x2021e) returned 1 [0213.243] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.243] TranslateMessage (lpMsg=0x5dd220) returned 0 [0213.243] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0213.244] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0213.244] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0213.244] CreateCompatibleDC (hdc=0xa0100d0) returned 0x55010733 [0213.244] SelectObject (hdc=0x55010733, h=0x11050637) returned 0x185000f [0213.244] GdipCreateFromHDC (hdc=0x55010733, graphics=0x5dc420) returned 0x0 [0213.244] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0213.244] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0213.244] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0213.244] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d90) returned 0x0 [0213.244] GdipIsMatrixIdentity (matrix=0x1c326d90, result=0x5dc5b0) returned 0x0 [0213.244] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef10 [0213.244] GdipGetMatrixElements (matrix=0x1c326d90, matrixOut=0x89ef10) returned 0x0 [0213.244] LocalFree (hMem=0x89ef10) returned 0x0 [0213.245] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.245] GdipDeleteMatrix (matrix=0x1c326d90) returned 0x0 [0213.245] GdipCreateRegion (region=0x5dc550) returned 0x0 [0213.245] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.245] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0213.245] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0213.245] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd7f0dbd) returned 0x0 [0213.245] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.245] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.245] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0213.246] GetCurrentObject (hdc=0x55010733, type=0x1) returned 0x1b00017 [0213.246] GetCurrentObject (hdc=0x55010733, type=0x2) returned 0x1900010 [0213.246] GetCurrentObject (hdc=0x55010733, type=0x7) returned 0x11050637 [0213.246] GetCurrentObject (hdc=0x55010733, type=0x6) returned 0x18a0048 [0213.246] SaveDC (hdc=0x55010733) returned 1 [0213.246] GetNearestColor (hdc=0x55010733, color=0xf0f0f0) returned 0xf0f0f0 [0213.246] GetNearestColor (hdc=0x55010733, color=0xa0a0a0) returned 0xa0a0a0 [0213.246] GetNearestColor (hdc=0x55010733, color=0x696969) returned 0x696969 [0213.246] GetNearestColor (hdc=0x55010733, color=0xa0a0a0) returned 0xa0a0a0 [0213.246] GetNearestColor (hdc=0x55010733, color=0x0) returned 0x0 [0213.247] GetNearestColor (hdc=0x55010733, color=0xffffff) returned 0xffffff [0213.247] GetNearestColor (hdc=0x55010733, color=0xe5e5e5) returned 0xe5e5e5 [0213.247] GetNearestColor (hdc=0x55010733, color=0xd8d8d8) returned 0xd8d8d8 [0213.247] GetNearestColor (hdc=0x55010733, color=0x0) returned 0x0 [0213.247] RestoreDC (hdc=0x55010733, nSavedDC=-1) returned 1 [0213.247] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.247] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x55010733) returned 0x0 [0213.247] IsAppThemed () returned 0x1 [0213.247] GetThemeAppProperties () returned 0x3 [0213.247] GetThemeAppProperties () returned 0x3 [0213.247] IsAppThemed () returned 0x1 [0213.247] GetThemeAppProperties () returned 0x3 [0213.248] GetThemeAppProperties () returned 0x3 [0213.248] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x2415, lpdtp=0x27a5b48 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0213.248] IsAppThemed () returned 0x1 [0213.248] GetThemeAppProperties () returned 0x3 [0213.248] GetThemeAppProperties () returned 0x3 [0213.248] IsAppThemed () returned 0x1 [0213.248] GetThemeAppProperties () returned 0x3 [0213.249] GetThemeAppProperties () returned 0x3 [0213.249] IsAppThemed () returned 0x1 [0213.249] GetThemeAppProperties () returned 0x3 [0213.249] GetThemeAppProperties () returned 0x3 [0213.249] IsAppThemed () returned 0x1 [0213.249] GetThemeAppProperties () returned 0x3 [0213.249] GetThemeAppProperties () returned 0x3 [0213.249] IsThemePartDefined () returned 0x1 [0213.249] IsAppThemed () returned 0x1 [0213.249] GetThemeAppProperties () returned 0x3 [0213.249] GetThemeAppProperties () returned 0x3 [0213.249] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0213.249] IsAppThemed () returned 0x1 [0213.249] GetThemeAppProperties () returned 0x3 [0213.249] GetThemeAppProperties () returned 0x3 [0213.249] IsAppThemed () returned 0x1 [0213.249] GetThemeAppProperties () returned 0x3 [0213.250] GetThemeAppProperties () returned 0x3 [0213.250] IsThemePartDefined () returned 0x1 [0213.250] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0213.250] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.250] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0213.250] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327250) returned 0x0 [0213.250] GdipIsMatrixIdentity (matrix=0x1c327250, result=0x5dbdc0) returned 0x0 [0213.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0213.250] GdipGetMatrixElements (matrix=0x1c327250, matrixOut=0x89ec10) returned 0x0 [0213.250] LocalFree (hMem=0x89ec10) returned 0x0 [0213.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0213.250] GdipGetMatrixElements (matrix=0x1c327250, matrixOut=0x89f050) returned 0x0 [0213.250] LocalFree (hMem=0x89f050) returned 0x0 [0213.250] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.250] GdipDeleteMatrix (matrix=0x1c327250) returned 0x0 [0213.250] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0213.251] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0213.251] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0213.251] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.251] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.251] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0213.251] GetCurrentObject (hdc=0x55010733, type=0x1) returned 0x1b00017 [0213.251] GetCurrentObject (hdc=0x55010733, type=0x2) returned 0x1900010 [0213.251] GetCurrentObject (hdc=0x55010733, type=0x7) returned 0x11050637 [0213.251] GetCurrentObject (hdc=0x55010733, type=0x6) returned 0x18a0048 [0213.252] SaveDC (hdc=0x55010733) returned 1 [0213.252] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4804063b [0213.252] GetClipRgn (hdc=0x55010733, hrgn=0x4804063b) returned 0 [0213.252] SelectClipRgn (hdc=0x55010733, hrgn=0xffffffff9d040572) returned 2 [0213.252] DeleteObject (ho=0x4804063b) returned 1 [0213.252] DeleteObject (ho=0xffffffff9d040572) returned 1 [0213.252] OffsetViewportOrgEx (in: hdc=0x55010733, x=0, y=0, lppt=0x27a6558 | out: lppt=0x27a6558) returned 1 [0213.252] DrawThemeParentBackground () returned 0x0 [0213.252] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0213.252] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0213.253] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.253] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.253] GetSystemMetrics (nIndex=42) returned 0 [0213.253] CoTaskMemAlloc (cb=0x20) returned 0x89d400 [0213.253] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d400, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.253] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d400) returned 0xd [0213.253] CoTaskMemFree (pv=0x89d400) [0213.253] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0213.253] GetCurrentObject (hdc=0x55010733, type=0x1) returned 0x1b00017 [0213.253] GetCurrentObject (hdc=0x55010733, type=0x2) returned 0x1900010 [0213.253] GetCurrentObject (hdc=0x55010733, type=0x7) returned 0x11050637 [0213.253] GetCurrentObject (hdc=0x55010733, type=0x6) returned 0x18a0048 [0213.253] SaveDC (hdc=0x55010733) returned 2 [0213.253] GetNearestColor (hdc=0x55010733, color=0xf0f0f0) returned 0xf0f0f0 [0213.254] CreateSolidBrush (color=0xf0f0f0) returned 0x62100686 [0213.254] FillRect (hDC=0x55010733, lprc=0x5dafe0, hbr=0x62100686) returned 1 [0213.255] DeleteObject (ho=0x62100686) returned 1 [0213.255] RestoreDC (hdc=0x55010733, nSavedDC=-1) returned 1 [0213.255] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.255] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.255] GetSystemMetrics (nIndex=42) returned 0 [0213.255] CoTaskMemAlloc (cb=0x20) returned 0x89d2b0 [0213.255] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d2b0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.255] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d2b0) returned 0xd [0213.255] CoTaskMemFree (pv=0x89d2b0) [0213.255] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0213.255] GetCurrentObject (hdc=0x55010733, type=0x1) returned 0x1b00017 [0213.255] GetCurrentObject (hdc=0x55010733, type=0x2) returned 0x1900010 [0213.255] GetCurrentObject (hdc=0x55010733, type=0x7) returned 0x11050637 [0213.255] GetCurrentObject (hdc=0x55010733, type=0x6) returned 0x18a0048 [0213.256] SaveDC (hdc=0x55010733) returned 2 [0213.256] GetNearestColor (hdc=0x55010733, color=0xf0f0f0) returned 0xf0f0f0 [0213.256] CreateSolidBrush (color=0xf0f0f0) returned 0x63100686 [0213.256] FillRect (hDC=0x55010733, lprc=0x5daee0, hbr=0x63100686) returned 1 [0213.256] DeleteObject (ho=0x63100686) returned 1 [0213.256] RestoreDC (hdc=0x55010733, nSavedDC=-1) returned 1 [0213.256] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.256] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.256] GetSystemMetrics (nIndex=42) returned 0 [0213.256] CoTaskMemAlloc (cb=0x20) returned 0x89d4c0 [0213.256] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d4c0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.256] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d4c0) returned 0xd [0213.257] CoTaskMemFree (pv=0x89d4c0) [0213.257] RestoreDC (hdc=0x55010733, nSavedDC=-1) returned 1 [0213.257] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.257] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x55010733) returned 0x0 [0213.257] IsAppThemed () returned 0x1 [0213.257] GetThemeAppProperties () returned 0x3 [0213.257] GetThemeAppProperties () returned 0x3 [0213.257] IsAppThemed () returned 0x1 [0213.258] GetThemeAppProperties () returned 0x3 [0213.258] GetThemeAppProperties () returned 0x3 [0213.258] IsThemePartDefined () returned 0x1 [0213.258] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0213.258] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.258] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0213.258] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327150) returned 0x0 [0213.258] GdipIsMatrixIdentity (matrix=0x1c327150, result=0x5dbca0) returned 0x0 [0213.258] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0213.258] GdipGetMatrixElements (matrix=0x1c327150, matrixOut=0x89ec10) returned 0x0 [0213.258] LocalFree (hMem=0x89ec10) returned 0x0 [0213.258] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f310 [0213.258] GdipGetMatrixElements (matrix=0x1c327150, matrixOut=0x89f310) returned 0x0 [0213.258] LocalFree (hMem=0x89f310) returned 0x0 [0213.258] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.258] GdipDeleteMatrix (matrix=0x1c327150) returned 0x0 [0213.259] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0213.259] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0213.259] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0213.259] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.259] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.259] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0213.259] GetCurrentObject (hdc=0x55010733, type=0x1) returned 0x1b00017 [0213.259] GetCurrentObject (hdc=0x55010733, type=0x2) returned 0x1900010 [0213.259] GetCurrentObject (hdc=0x55010733, type=0x7) returned 0x11050637 [0213.259] GetCurrentObject (hdc=0x55010733, type=0x6) returned 0x18a0048 [0213.259] SaveDC (hdc=0x55010733) returned 1 [0213.259] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9e040572 [0213.259] GetClipRgn (hdc=0x55010733, hrgn=0xffffffff9e040572) returned 0 [0213.260] SelectClipRgn (hdc=0x55010733, hrgn=0x4a04063b) returned 2 [0213.260] DeleteObject (ho=0xffffffff9e040572) returned 1 [0213.260] DeleteObject (ho=0x4a04063b) returned 1 [0213.260] OffsetViewportOrgEx (in: hdc=0x55010733, x=0, y=0, lppt=0x27a7258 | out: lppt=0x27a7258) returned 1 [0213.260] IsAppThemed () returned 0x1 [0213.260] GetThemeAppProperties () returned 0x3 [0213.260] GetThemeAppProperties () returned 0x3 [0213.260] DrawThemeBackground () returned 0x0 [0213.260] RestoreDC (hdc=0x55010733, nSavedDC=-1) returned 1 [0213.261] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.261] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x55010733) returned 0x0 [0213.261] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0213.261] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.261] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0213.261] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327210) returned 0x0 [0213.261] GdipIsMatrixIdentity (matrix=0x1c327210, result=0x5dbc70) returned 0x0 [0213.261] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec50 [0213.261] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89ec50) returned 0x0 [0213.261] LocalFree (hMem=0x89ec50) returned 0x0 [0213.261] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0213.261] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89ec10) returned 0x0 [0213.261] LocalFree (hMem=0x89ec10) returned 0x0 [0213.261] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.261] GdipDeleteMatrix (matrix=0x1c327210) returned 0x0 [0213.262] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0213.262] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0213.262] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0213.262] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.262] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.262] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0213.262] GetCurrentObject (hdc=0x55010733, type=0x1) returned 0x1b00017 [0213.262] GetCurrentObject (hdc=0x55010733, type=0x2) returned 0x1900010 [0213.262] GetCurrentObject (hdc=0x55010733, type=0x7) returned 0x11050637 [0213.262] GetCurrentObject (hdc=0x55010733, type=0x6) returned 0x18a0048 [0213.262] SaveDC (hdc=0x55010733) returned 1 [0213.262] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4b04063b [0213.262] GetClipRgn (hdc=0x55010733, hrgn=0x4b04063b) returned 0 [0213.263] SelectClipRgn (hdc=0x55010733, hrgn=0xffffffff9f040572) returned 2 [0213.263] DeleteObject (ho=0x4b04063b) returned 1 [0213.263] DeleteObject (ho=0xffffffff9f040572) returned 1 [0213.263] OffsetViewportOrgEx (in: hdc=0x55010733, x=0, y=0, lppt=0x27a7758 | out: lppt=0x27a7758) returned 1 [0213.263] IsAppThemed () returned 0x1 [0213.263] GetThemeAppProperties () returned 0x3 [0213.263] GetThemeAppProperties () returned 0x3 [0213.263] GetThemeBackgroundContentRect () returned 0x0 [0213.263] RestoreDC (hdc=0x55010733, nSavedDC=-1) returned 1 [0213.264] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.264] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x55010733) returned 0x0 [0213.264] IsAppThemed () returned 0x1 [0213.264] GetThemeAppProperties () returned 0x3 [0213.264] GetThemeAppProperties () returned 0x3 [0213.264] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0213.264] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0213.264] GetCurrentObject (hdc=0x55010733, type=0x1) returned 0x1b00017 [0213.264] GetCurrentObject (hdc=0x55010733, type=0x2) returned 0x1900010 [0213.264] GetCurrentObject (hdc=0x55010733, type=0x7) returned 0x11050637 [0213.264] GetCurrentObject (hdc=0x55010733, type=0x6) returned 0x18a0048 [0213.264] SaveDC (hdc=0x55010733) returned 1 [0213.264] GetTextAlign (hdc=0x55010733) returned 0x0 [0213.264] GetTextColor (hdc=0x55010733) returned 0x0 [0213.265] GetCurrentObject (hdc=0x55010733, type=0x6) returned 0x18a0048 [0213.265] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0213.265] SelectObject (hdc=0x55010733, h=0x290a0573) returned 0x18a0048 [0213.265] GetBkMode (hdc=0x55010733) returned 2 [0213.265] SetBkMode (hdc=0x55010733, mode=1) returned 2 [0213.265] DrawTextExW (in: hdc=0x55010733, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x2415, lpdtp=0x27a7cb0 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0213.265] DrawTextExW (in: hdc=0x55010733, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x2015, lpdtp=0x27a7cb0 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0213.266] RestoreDC (hdc=0x55010733, nSavedDC=-1) returned 1 [0213.266] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.266] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x55010733) returned 0x0 [0213.266] GetFocus () returned 0x2021e [0213.266] IsAppThemed () returned 0x1 [0213.266] GetThemeAppProperties () returned 0x3 [0213.268] GetThemeAppProperties () returned 0x3 [0213.268] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0213.268] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x55010733, x1=0, y1=0, rop=0xcc0020) returned 1 [0213.268] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.268] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x55010733) returned 0x0 [0213.268] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0213.268] SelectObject (hdc=0x55010733, h=0x185000f) returned 0x11050637 [0213.268] DeleteDC (hdc=0x55010733) returned 1 [0213.269] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.269] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0213.269] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0213.269] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0213.269] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0213.269] WaitMessage () returned 1 [0213.348] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.348] IsWindowUnicode (hWnd=0x2021e) returned 1 [0213.348] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.348] TranslateMessage (lpMsg=0x5dd220) returned 0 [0213.348] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0213.348] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.348] IsWindowUnicode (hWnd=0x2021e) returned 1 [0213.348] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.349] TranslateMessage (lpMsg=0x5dd220) returned 0 [0213.349] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0213.349] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2a1, wParam=0x0, lParam=0xa0066) returned 0x0 [0213.349] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0213.349] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0213.349] WaitMessage () returned 1 [0213.474] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.474] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14e0120) returned 0x1 [0213.475] IsWindowUnicode (hWnd=0x2021e) returned 1 [0213.475] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.475] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14e0120) returned 0x1 [0213.475] GetDlgItem (hDlg=0x20160, nIDDlgItem=0) returned 0x0 [0213.475] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x210, wParam=0x201, lParam=0xcc00b5) returned 0x0 [0213.475] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0213.475] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0213.475] SetCursor (hCursor=0x10003) returned 0x10003 [0213.475] TranslateMessage (lpMsg=0x5dd220) returned 0 [0213.475] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0213.475] GetKeyState (nVirtKey=1) returned -127 [0213.475] GetKeyState (nVirtKey=2) returned 0 [0213.475] GetKeyState (nVirtKey=4) returned 0 [0213.475] GetKeyState (nVirtKey=5) returned 0 [0213.476] GetKeyState (nVirtKey=6) returned 0 [0213.476] IsWindowVisible (hWnd=0x2021e) returned 1 [0213.476] IsWindowEnabled (hWnd=0x2021e) returned 1 [0213.476] SetFocus (hWnd=0x2021e) returned 0x2021e [0213.476] GetFocus () returned 0x2021e [0213.476] GetFocus () returned 0x2021e [0213.476] GetFocus () returned 0x2021e [0213.476] GetKeyState (nVirtKey=1) returned -127 [0213.476] GetKeyState (nVirtKey=2) returned 0 [0213.476] GetKeyState (nVirtKey=4) returned 0 [0213.476] GetKeyState (nVirtKey=5) returned 0 [0213.476] GetKeyState (nVirtKey=6) returned 0 [0213.476] GetCapture () returned 0x0 [0213.476] SetCapture (hWnd=0x2021e) returned 0x0 [0213.476] GetKeyState (nVirtKey=1) returned -127 [0213.476] GetKeyState (nVirtKey=2) returned 0 [0213.476] GetKeyState (nVirtKey=4) returned 0 [0213.476] GetKeyState (nVirtKey=5) returned 0 [0213.476] GetKeyState (nVirtKey=6) returned 0 [0213.477] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0213.477] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc870, bErase=0) returned 1 [0213.477] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.477] IsWindowUnicode (hWnd=0x2021e) returned 1 [0213.477] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.477] TranslateMessage (lpMsg=0x5dd220) returned 0 [0213.477] DispatchMessageW (lpMsg=0x5dd220) returned 0x1 [0213.477] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x27a7ee8, cPoints=0x1 | out: lpPoints=0x27a7ee8) returned 21233850 [0213.477] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0213.477] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc7c0, bErase=0) returned 1 [0213.477] UpdateWindow (hWnd=0x2021e) returned 1 [0213.477] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dbdd8 | out: lpPaint=0x5dbdd8) returned 0xa0100d0 [0213.477] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0213.478] CreateCompatibleDC (hdc=0xa0100d0) returned 0x56010733 [0213.478] SelectObject (hdc=0x56010733, h=0x11050637) returned 0x185000f [0213.478] GdipCreateFromHDC (hdc=0x56010733, graphics=0x5dbbe0) returned 0x0 [0213.478] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0213.478] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0213.478] GdipCreateMatrix (matrix=0x5dbd10) returned 0x0 [0213.478] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d50) returned 0x0 [0213.478] GdipIsMatrixIdentity (matrix=0x1c326d50, result=0x5dbd70) returned 0x0 [0213.478] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f550 [0213.478] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89f550) returned 0x0 [0213.478] LocalFree (hMem=0x89f550) returned 0x0 [0213.478] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.479] GdipDeleteMatrix (matrix=0x1c326d50) returned 0x0 [0213.479] GdipCreateRegion (region=0x5dbd10) returned 0x0 [0213.479] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.479] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbd40) returned 0x0 [0213.479] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dbe10) returned 0x0 [0213.479] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd7d0dbd) returned 0x0 [0213.479] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.479] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.479] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db200) returned 0x0 [0213.480] GetCurrentObject (hdc=0x56010733, type=0x1) returned 0x1b00017 [0213.480] GetCurrentObject (hdc=0x56010733, type=0x2) returned 0x1900010 [0213.480] GetCurrentObject (hdc=0x56010733, type=0x7) returned 0x11050637 [0213.480] GetCurrentObject (hdc=0x56010733, type=0x6) returned 0x18a0048 [0213.480] SaveDC (hdc=0x56010733) returned 1 [0213.480] GetNearestColor (hdc=0x56010733, color=0xf0f0f0) returned 0xf0f0f0 [0213.480] GetNearestColor (hdc=0x56010733, color=0xa0a0a0) returned 0xa0a0a0 [0213.480] GetNearestColor (hdc=0x56010733, color=0x696969) returned 0x696969 [0213.480] GetNearestColor (hdc=0x56010733, color=0xa0a0a0) returned 0xa0a0a0 [0213.481] GetNearestColor (hdc=0x56010733, color=0x0) returned 0x0 [0213.481] GetNearestColor (hdc=0x56010733, color=0xffffff) returned 0xffffff [0213.481] GetNearestColor (hdc=0x56010733, color=0xe5e5e5) returned 0xe5e5e5 [0213.481] GetNearestColor (hdc=0x56010733, color=0xd8d8d8) returned 0xd8d8d8 [0213.481] GetNearestColor (hdc=0x56010733, color=0x0) returned 0x0 [0213.481] RestoreDC (hdc=0x56010733, nSavedDC=-1) returned 1 [0213.481] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.481] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x56010733) returned 0x0 [0213.481] IsAppThemed () returned 0x1 [0213.481] GetThemeAppProperties () returned 0x3 [0213.481] GetThemeAppProperties () returned 0x3 [0213.482] IsAppThemed () returned 0x1 [0213.482] GetThemeAppProperties () returned 0x3 [0213.482] GetThemeAppProperties () returned 0x3 [0213.482] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db440, format=0x2415, lpdtp=0x27a8810 | out: lpchText="Submit Decryption Key", lprc=0x5db440) returned 13 [0213.482] IsAppThemed () returned 0x1 [0213.482] GetThemeAppProperties () returned 0x3 [0213.482] GetThemeAppProperties () returned 0x3 [0213.482] IsAppThemed () returned 0x1 [0213.482] GetThemeAppProperties () returned 0x3 [0213.482] GetThemeAppProperties () returned 0x3 [0213.482] IsAppThemed () returned 0x1 [0213.482] GetThemeAppProperties () returned 0x3 [0213.482] GetThemeAppProperties () returned 0x3 [0213.483] IsAppThemed () returned 0x1 [0213.483] GetThemeAppProperties () returned 0x3 [0213.483] GetThemeAppProperties () returned 0x3 [0213.483] IsThemePartDefined () returned 0x1 [0213.483] IsAppThemed () returned 0x1 [0213.483] GetThemeAppProperties () returned 0x3 [0213.483] GetThemeAppProperties () returned 0x3 [0213.483] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0213.483] IsAppThemed () returned 0x1 [0213.483] GetThemeAppProperties () returned 0x3 [0213.483] GetThemeAppProperties () returned 0x3 [0213.483] IsAppThemed () returned 0x1 [0213.483] GetThemeAppProperties () returned 0x3 [0213.483] GetThemeAppProperties () returned 0x3 [0213.483] IsThemePartDefined () returned 0x1 [0213.483] GdipCreateRegion (region=0x5db520) returned 0x0 [0213.483] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.484] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0213.484] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327090) returned 0x0 [0213.484] GdipIsMatrixIdentity (matrix=0x1c327090, result=0x5db580) returned 0x0 [0213.484] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0213.484] GdipGetMatrixElements (matrix=0x1c327090, matrixOut=0x89f350) returned 0x0 [0213.484] LocalFree (hMem=0x89f350) returned 0x0 [0213.484] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f2d0 [0213.484] GdipGetMatrixElements (matrix=0x1c327090, matrixOut=0x89f2d0) returned 0x0 [0213.484] LocalFree (hMem=0x89f2d0) returned 0x0 [0213.484] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.484] GdipDeleteMatrix (matrix=0x1c327090) returned 0x0 [0213.484] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db5d0) returned 0x0 [0213.484] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db590) returned 0x0 [0213.484] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db590) returned 0x0 [0213.487] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.487] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.487] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db600) returned 0x0 [0213.488] GetCurrentObject (hdc=0x56010733, type=0x1) returned 0x1b00017 [0213.488] GetCurrentObject (hdc=0x56010733, type=0x2) returned 0x1900010 [0213.488] GetCurrentObject (hdc=0x56010733, type=0x7) returned 0x11050637 [0213.488] GetCurrentObject (hdc=0x56010733, type=0x6) returned 0x18a0048 [0213.488] SaveDC (hdc=0x56010733) returned 1 [0213.488] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa0040572 [0213.488] GetClipRgn (hdc=0x56010733, hrgn=0xffffffffa0040572) returned 0 [0213.489] SelectClipRgn (hdc=0x56010733, hrgn=0x4f04063b) returned 2 [0213.489] DeleteObject (ho=0xffffffffa0040572) returned 1 [0213.489] DeleteObject (ho=0x4f04063b) returned 1 [0213.489] OffsetViewportOrgEx (in: hdc=0x56010733, x=0, y=0, lppt=0x27a9220 | out: lppt=0x27a9220) returned 1 [0213.489] DrawThemeParentBackground () returned 0x0 [0213.489] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db040 | out: lpwndpl=0x5db040) returned 1 [0213.489] GetClientRect (in: hWnd=0x20160, lpRect=0x5daec0 | out: lpRect=0x5daec0) returned 1 [0213.489] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.489] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.489] GetSystemMetrics (nIndex=42) returned 0 [0213.489] CoTaskMemAlloc (cb=0x20) returned 0x89d1c0 [0213.489] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d1c0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.489] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d1c0) returned 0xd [0213.489] CoTaskMemFree (pv=0x89d1c0) [0213.489] GetClientRect (in: hWnd=0x20160, lpRect=0x5dac70 | out: lpRect=0x5dac70) returned 1 [0213.489] GetCurrentObject (hdc=0x56010733, type=0x1) returned 0x1b00017 [0213.489] GetCurrentObject (hdc=0x56010733, type=0x2) returned 0x1900010 [0213.489] GetCurrentObject (hdc=0x56010733, type=0x7) returned 0x11050637 [0213.489] GetCurrentObject (hdc=0x56010733, type=0x6) returned 0x18a0048 [0213.490] SaveDC (hdc=0x56010733) returned 2 [0213.490] GetNearestColor (hdc=0x56010733, color=0xf0f0f0) returned 0xf0f0f0 [0213.490] CreateSolidBrush (color=0xf0f0f0) returned 0x64100686 [0213.490] FillRect (hDC=0x56010733, lprc=0x5da7a0, hbr=0x64100686) returned 1 [0213.490] DeleteObject (ho=0x64100686) returned 1 [0213.490] RestoreDC (hdc=0x56010733, nSavedDC=-1) returned 1 [0213.490] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.490] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.490] GetSystemMetrics (nIndex=42) returned 0 [0213.490] CoTaskMemAlloc (cb=0x20) returned 0x89d190 [0213.490] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d190, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.490] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d190) returned 0xd [0213.490] CoTaskMemFree (pv=0x89d190) [0213.490] GetClientRect (in: hWnd=0x20160, lpRect=0x5dab70 | out: lpRect=0x5dab70) returned 1 [0213.490] GetCurrentObject (hdc=0x56010733, type=0x1) returned 0x1b00017 [0213.490] GetCurrentObject (hdc=0x56010733, type=0x2) returned 0x1900010 [0213.490] GetCurrentObject (hdc=0x56010733, type=0x7) returned 0x11050637 [0213.490] GetCurrentObject (hdc=0x56010733, type=0x6) returned 0x18a0048 [0213.491] SaveDC (hdc=0x56010733) returned 2 [0213.491] GetNearestColor (hdc=0x56010733, color=0xf0f0f0) returned 0xf0f0f0 [0213.491] CreateSolidBrush (color=0xf0f0f0) returned 0x65100686 [0213.491] FillRect (hDC=0x56010733, lprc=0x5da6a0, hbr=0x65100686) returned 1 [0213.491] DeleteObject (ho=0x65100686) returned 1 [0213.491] RestoreDC (hdc=0x56010733, nSavedDC=-1) returned 1 [0213.491] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.491] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.491] GetSystemMetrics (nIndex=42) returned 0 [0213.491] CoTaskMemAlloc (cb=0x20) returned 0x89d040 [0213.491] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d040, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.491] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d040) returned 0xd [0213.491] CoTaskMemFree (pv=0x89d040) [0213.491] RestoreDC (hdc=0x56010733, nSavedDC=-1) returned 1 [0213.491] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.491] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x56010733) returned 0x0 [0213.492] IsAppThemed () returned 0x1 [0213.492] GetThemeAppProperties () returned 0x3 [0213.492] GetThemeAppProperties () returned 0x3 [0213.492] IsAppThemed () returned 0x1 [0213.492] GetThemeAppProperties () returned 0x3 [0213.492] GetThemeAppProperties () returned 0x3 [0213.492] IsThemePartDefined () returned 0x1 [0213.492] GdipCreateRegion (region=0x5db400) returned 0x0 [0213.492] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.492] GdipCreateMatrix (matrix=0x5db400) returned 0x0 [0213.492] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327350) returned 0x0 [0213.492] GdipIsMatrixIdentity (matrix=0x1c327350, result=0x5db460) returned 0x0 [0213.492] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea50 [0213.492] GdipGetMatrixElements (matrix=0x1c327350, matrixOut=0x89ea50) returned 0x0 [0213.492] LocalFree (hMem=0x89ea50) returned 0x0 [0213.492] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f5d0 [0213.492] GdipGetMatrixElements (matrix=0x1c327350, matrixOut=0x89f5d0) returned 0x0 [0213.492] LocalFree (hMem=0x89f5d0) returned 0x0 [0213.492] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.492] GdipDeleteMatrix (matrix=0x1c327350) returned 0x0 [0213.492] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db4b0) returned 0x0 [0213.492] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db470) returned 0x0 [0213.492] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db470) returned 0x0 [0213.492] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.496] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.496] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4e0) returned 0x0 [0213.496] GetCurrentObject (hdc=0x56010733, type=0x1) returned 0x1b00017 [0213.496] GetCurrentObject (hdc=0x56010733, type=0x2) returned 0x1900010 [0213.496] GetCurrentObject (hdc=0x56010733, type=0x7) returned 0x11050637 [0213.497] GetCurrentObject (hdc=0x56010733, type=0x6) returned 0x18a0048 [0213.497] SaveDC (hdc=0x56010733) returned 1 [0213.497] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5004063b [0213.497] GetClipRgn (hdc=0x56010733, hrgn=0x5004063b) returned 0 [0213.497] SelectClipRgn (hdc=0x56010733, hrgn=0xffffffffa2040572) returned 2 [0213.497] DeleteObject (ho=0x5004063b) returned 1 [0213.497] DeleteObject (ho=0xffffffffa2040572) returned 1 [0213.497] OffsetViewportOrgEx (in: hdc=0x56010733, x=0, y=0, lppt=0x27a9f20 | out: lppt=0x27a9f20) returned 1 [0213.497] IsAppThemed () returned 0x1 [0213.498] GetThemeAppProperties () returned 0x3 [0213.498] GetThemeAppProperties () returned 0x3 [0213.498] DrawThemeBackground () returned 0x0 [0213.498] RestoreDC (hdc=0x56010733, nSavedDC=-1) returned 1 [0213.498] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.498] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x56010733) returned 0x0 [0213.498] GdipCreateRegion (region=0x5db3d0) returned 0x0 [0213.498] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.498] GdipCreateMatrix (matrix=0x5db3d0) returned 0x0 [0213.498] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326c50) returned 0x0 [0213.498] GdipIsMatrixIdentity (matrix=0x1c326c50, result=0x5db430) returned 0x0 [0213.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb50 [0213.498] GdipGetMatrixElements (matrix=0x1c326c50, matrixOut=0x89eb50) returned 0x0 [0213.498] LocalFree (hMem=0x89eb50) returned 0x0 [0213.498] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb50 [0213.498] GdipGetMatrixElements (matrix=0x1c326c50, matrixOut=0x89eb50) returned 0x0 [0213.498] LocalFree (hMem=0x89eb50) returned 0x0 [0213.498] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.498] GdipDeleteMatrix (matrix=0x1c326c50) returned 0x0 [0213.499] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db480) returned 0x0 [0213.499] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db440) returned 0x0 [0213.499] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db440) returned 0x0 [0213.499] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.499] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.499] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4b0) returned 0x0 [0213.499] GetCurrentObject (hdc=0x56010733, type=0x1) returned 0x1b00017 [0213.499] GetCurrentObject (hdc=0x56010733, type=0x2) returned 0x1900010 [0213.499] GetCurrentObject (hdc=0x56010733, type=0x7) returned 0x11050637 [0213.499] GetCurrentObject (hdc=0x56010733, type=0x6) returned 0x18a0048 [0213.499] SaveDC (hdc=0x56010733) returned 1 [0213.499] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa3040572 [0213.499] GetClipRgn (hdc=0x56010733, hrgn=0xffffffffa3040572) returned 0 [0213.499] SelectClipRgn (hdc=0x56010733, hrgn=0x5104063b) returned 2 [0213.499] DeleteObject (ho=0xffffffffa3040572) returned 1 [0213.499] DeleteObject (ho=0x5104063b) returned 1 [0213.499] OffsetViewportOrgEx (in: hdc=0x56010733, x=0, y=0, lppt=0x27aa420 | out: lppt=0x27aa420) returned 1 [0213.499] IsAppThemed () returned 0x1 [0213.499] GetThemeAppProperties () returned 0x3 [0213.499] GetThemeAppProperties () returned 0x3 [0213.499] GetThemeBackgroundContentRect () returned 0x0 [0213.499] RestoreDC (hdc=0x56010733, nSavedDC=-1) returned 1 [0213.500] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.500] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x56010733) returned 0x0 [0213.500] IsAppThemed () returned 0x1 [0213.500] GetThemeAppProperties () returned 0x3 [0213.500] GetThemeAppProperties () returned 0x3 [0213.500] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5db5a0) returned 0x0 [0213.500] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db580) returned 0x0 [0213.500] GetCurrentObject (hdc=0x56010733, type=0x1) returned 0x1b00017 [0213.500] GetCurrentObject (hdc=0x56010733, type=0x2) returned 0x1900010 [0213.500] GetCurrentObject (hdc=0x56010733, type=0x7) returned 0x11050637 [0213.500] GetCurrentObject (hdc=0x56010733, type=0x6) returned 0x18a0048 [0213.500] SaveDC (hdc=0x56010733) returned 1 [0213.500] GetTextAlign (hdc=0x56010733) returned 0x0 [0213.500] GetTextColor (hdc=0x56010733) returned 0x0 [0213.500] GetCurrentObject (hdc=0x56010733, type=0x6) returned 0x18a0048 [0213.500] GetObjectW (in: h=0x18a0048, c=92, pv=0x5daff0 | out: pv=0x5daff0) returned 92 [0213.501] SelectObject (hdc=0x56010733, h=0x290a0573) returned 0x18a0048 [0213.501] GetBkMode (hdc=0x56010733) returned 2 [0213.501] SetBkMode (hdc=0x56010733, mode=1) returned 2 [0213.501] DrawTextExW (in: hdc=0x56010733, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db080, format=0x2415, lpdtp=0x27aa978 | out: lpchText="Submit Decryption Key", lprc=0x5db080) returned 13 [0213.501] DrawTextExW (in: hdc=0x56010733, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db130, format=0x2015, lpdtp=0x27aa978 | out: lpchText="Submit Decryption Key", lprc=0x5db130) returned 13 [0213.502] RestoreDC (hdc=0x56010733, nSavedDC=-1) returned 1 [0213.502] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.502] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x56010733) returned 0x0 [0213.502] GetFocus () returned 0x2021e [0213.502] IsAppThemed () returned 0x1 [0213.502] GetThemeAppProperties () returned 0x3 [0213.502] GetThemeAppProperties () returned 0x3 [0213.502] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbce0) returned 0x0 [0213.502] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x56010733, x1=0, y1=0, rop=0xcc0020) returned 1 [0213.502] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.502] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x56010733) returned 0x0 [0213.502] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0213.502] SelectObject (hdc=0x56010733, h=0x185000f) returned 0x11050637 [0213.502] DeleteDC (hdc=0x56010733) returned 1 [0213.502] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.503] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0213.503] EndPaint (hWnd=0x2021e, lpPaint=0x5dbde8) returned 1 [0213.503] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x27aaae0, cPoints=0x1 | out: lpPoints=0x27aaae0) returned 21233850 [0213.503] WindowFromPoint (Point=0x14e00000120) returned 0x2021e [0213.503] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14e0120) returned 0x1 [0213.503] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0213.503] NotifyWinEvent (event=0x800c, hwnd=0x2021e, idObject=-4, idChild=0) [0213.506] SendMessageW (hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0213.506] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0213.506] GetProcessWindowStation () returned 0xc8 [0213.506] GetActiveWindow () returned 0x20160 [0213.506] GetCurrentActCtx (in: lphActCtx=0x5dc620 | out: lphActCtx=0x5dc620*=0x811d28) returned 1 [0213.506] GetCurrentThreadId () returned 0xe28 [0213.507] EnumThreadWindows (dwThreadId=0xe28, lpfn=0x2163fbc, lParam=0x0) returned 1 [0213.507] IsWindowVisible (hWnd=0x20160) returned 1 [0213.507] IsWindowEnabled (hWnd=0x20160) returned 1 [0213.507] IsWindowVisible (hWnd=0x901f6) returned 1 [0213.507] IsWindowEnabled (hWnd=0x901f6) returned 0 [0213.507] IsWindowVisible (hWnd=0x20232) returned 0 [0213.507] IsWindowVisible (hWnd=0x20224) returned 0 [0213.507] IsWindowVisible (hWnd=0x50020) returned 0 [0213.507] IsWindowVisible (hWnd=0x20230) returned 0 [0213.507] IsWindowVisible (hWnd=0x60152) returned 0 [0213.507] GetActiveWindow () returned 0x20160 [0213.507] GetFocus () returned 0x2021e [0213.507] IsWindow (hWnd=0x20160) returned 1 [0213.507] EnableWindow (hWnd=0x20160, bEnable=0) returned 0 [0213.507] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0213.508] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0213.508] MessageBoxW (hWnd=0x20160, lpText="The decryption key has bad format.", lpCaption="Error", uType=0x10) returned 0 [0213.510] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0213.518] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x5021c) returned 0x1 [0213.520] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0213.520] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0213.520] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0213.521] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0213.521] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0213.521] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0213.522] GetFocus () returned 0x50212 [0213.522] IsChild (hWndParent=0x20160, hWnd=0x50212) returned 0 [0213.522] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x8, wParam=0x50212, lParam=0x0) returned 0x0 [0213.522] GetCapture () returned 0x2021e [0213.522] ReleaseCapture () returned 1 [0213.522] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0213.523] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0213.523] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0213.524] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0213.525] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0213.525] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0x1010749 [0213.525] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0213.525] CreateCompatibleDC (hdc=0x1010749) returned 0x2b010759 [0213.525] SelectObject (hdc=0x2b010759, h=0x11050637) returned 0x185000f [0213.525] GdipCreateFromHDC (hdc=0x2b010759, graphics=0x5db3f0) returned 0x0 [0213.526] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0213.526] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0213.526] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0213.526] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3271d0) returned 0x0 [0213.526] GdipIsMatrixIdentity (matrix=0x1c3271d0, result=0x5db580) returned 0x0 [0213.526] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e890 [0213.526] GdipGetMatrixElements (matrix=0x1c3271d0, matrixOut=0x89e890) returned 0x0 [0213.526] LocalFree (hMem=0x89e890) returned 0x0 [0213.526] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.526] GdipDeleteMatrix (matrix=0x1c3271d0) returned 0x0 [0213.526] GdipCreateRegion (region=0x5db520) returned 0x0 [0213.526] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.526] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0213.526] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0213.526] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd7b0dbd) returned 0x0 [0213.526] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.526] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.527] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0213.527] GetCurrentObject (hdc=0x2b010759, type=0x1) returned 0x1b00017 [0213.527] GetCurrentObject (hdc=0x2b010759, type=0x2) returned 0x1900010 [0213.527] GetCurrentObject (hdc=0x2b010759, type=0x7) returned 0x11050637 [0213.527] GetCurrentObject (hdc=0x2b010759, type=0x6) returned 0x18a0048 [0213.527] SaveDC (hdc=0x2b010759) returned 1 [0213.527] GetNearestColor (hdc=0x2b010759, color=0xf0f0f0) returned 0xf0f0f0 [0213.527] GetNearestColor (hdc=0x2b010759, color=0xa0a0a0) returned 0xa0a0a0 [0213.528] GetNearestColor (hdc=0x2b010759, color=0x696969) returned 0x696969 [0213.528] GetNearestColor (hdc=0x2b010759, color=0xa0a0a0) returned 0xa0a0a0 [0213.528] GetNearestColor (hdc=0x2b010759, color=0x0) returned 0x0 [0213.528] GetNearestColor (hdc=0x2b010759, color=0xffffff) returned 0xffffff [0213.528] GetNearestColor (hdc=0x2b010759, color=0xe5e5e5) returned 0xe5e5e5 [0213.528] GetNearestColor (hdc=0x2b010759, color=0xd8d8d8) returned 0xd8d8d8 [0213.528] GetNearestColor (hdc=0x2b010759, color=0x0) returned 0x0 [0213.528] RestoreDC (hdc=0x2b010759, nSavedDC=-1) returned 1 [0213.528] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.528] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2b010759) returned 0x0 [0213.528] IsAppThemed () returned 0x1 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] IsAppThemed () returned 0x1 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x2415, lpdtp=0x27ab6f8 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0213.529] IsAppThemed () returned 0x1 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] IsAppThemed () returned 0x1 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] IsAppThemed () returned 0x1 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] IsAppThemed () returned 0x1 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] GetThemeAppProperties () returned 0x3 [0213.529] IsThemePartDefined () returned 0x1 [0213.530] IsAppThemed () returned 0x1 [0213.530] GetThemeAppProperties () returned 0x3 [0213.530] GetThemeAppProperties () returned 0x3 [0213.530] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0213.530] IsAppThemed () returned 0x1 [0213.530] GetThemeAppProperties () returned 0x3 [0213.530] GetThemeAppProperties () returned 0x3 [0213.530] IsAppThemed () returned 0x1 [0213.530] GetThemeAppProperties () returned 0x3 [0213.530] GetThemeAppProperties () returned 0x3 [0213.530] IsThemePartDefined () returned 0x1 [0213.530] GdipCreateRegion (region=0x5dad30) returned 0x0 [0213.530] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.530] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0213.530] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326cd0) returned 0x0 [0213.530] GdipIsMatrixIdentity (matrix=0x1c326cd0, result=0x5dad90) returned 0x0 [0213.530] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee10 [0213.530] GdipGetMatrixElements (matrix=0x1c326cd0, matrixOut=0x89ee10) returned 0x0 [0213.530] LocalFree (hMem=0x89ee10) returned 0x0 [0213.530] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f6d0 [0213.530] GdipGetMatrixElements (matrix=0x1c326cd0, matrixOut=0x89f6d0) returned 0x0 [0213.530] LocalFree (hMem=0x89f6d0) returned 0x0 [0213.531] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.531] GdipDeleteMatrix (matrix=0x1c326cd0) returned 0x0 [0213.531] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0213.531] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0213.531] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0213.531] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.531] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.531] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0213.531] GetCurrentObject (hdc=0x2b010759, type=0x1) returned 0x1b00017 [0213.531] GetCurrentObject (hdc=0x2b010759, type=0x2) returned 0x1900010 [0213.531] GetCurrentObject (hdc=0x2b010759, type=0x7) returned 0x11050637 [0213.531] GetCurrentObject (hdc=0x2b010759, type=0x6) returned 0x18a0048 [0213.531] SaveDC (hdc=0x2b010759) returned 1 [0213.531] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5204063b [0213.532] GetClipRgn (hdc=0x2b010759, hrgn=0x5204063b) returned 0 [0213.532] SelectClipRgn (hdc=0x2b010759, hrgn=0xffffffffa9040572) returned 2 [0213.532] DeleteObject (ho=0x5204063b) returned 1 [0213.532] DeleteObject (ho=0xffffffffa9040572) returned 1 [0213.532] OffsetViewportOrgEx (in: hdc=0x2b010759, x=0, y=0, lppt=0x27ac108 | out: lppt=0x27ac108) returned 1 [0213.532] DrawThemeParentBackground () returned 0x0 [0213.532] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0213.532] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0213.532] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.532] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.532] GetSystemMetrics (nIndex=42) returned 0 [0213.532] CoTaskMemAlloc (cb=0x20) returned 0x89d400 [0213.532] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d400, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.532] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d400) returned 0xd [0213.532] CoTaskMemFree (pv=0x89d400) [0213.532] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0213.532] GetCurrentObject (hdc=0x2b010759, type=0x1) returned 0x1b00017 [0213.533] GetCurrentObject (hdc=0x2b010759, type=0x2) returned 0x1900010 [0213.533] GetCurrentObject (hdc=0x2b010759, type=0x7) returned 0x11050637 [0213.533] GetCurrentObject (hdc=0x2b010759, type=0x6) returned 0x18a0048 [0213.533] SaveDC (hdc=0x2b010759) returned 2 [0213.533] GetNearestColor (hdc=0x2b010759, color=0xf0f0f0) returned 0xf0f0f0 [0213.533] CreateSolidBrush (color=0xf0f0f0) returned 0x66100686 [0213.533] FillRect (hDC=0x2b010759, lprc=0x5d9fb0, hbr=0x66100686) returned 1 [0213.533] DeleteObject (ho=0x66100686) returned 1 [0213.533] RestoreDC (hdc=0x2b010759, nSavedDC=-1) returned 1 [0213.533] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.533] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.533] GetSystemMetrics (nIndex=42) returned 0 [0213.533] CoTaskMemAlloc (cb=0x20) returned 0x89d310 [0213.533] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d310, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.534] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d310) returned 0xd [0213.534] CoTaskMemFree (pv=0x89d310) [0213.534] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0213.534] GetCurrentObject (hdc=0x2b010759, type=0x1) returned 0x1b00017 [0213.534] GetCurrentObject (hdc=0x2b010759, type=0x2) returned 0x1900010 [0213.534] GetCurrentObject (hdc=0x2b010759, type=0x7) returned 0x11050637 [0213.534] GetCurrentObject (hdc=0x2b010759, type=0x6) returned 0x18a0048 [0213.534] SaveDC (hdc=0x2b010759) returned 2 [0213.534] GetNearestColor (hdc=0x2b010759, color=0xf0f0f0) returned 0xf0f0f0 [0213.534] CreateSolidBrush (color=0xf0f0f0) returned 0x67100686 [0213.534] FillRect (hDC=0x2b010759, lprc=0x5d9eb0, hbr=0x67100686) returned 1 [0213.534] DeleteObject (ho=0x67100686) returned 1 [0213.535] RestoreDC (hdc=0x2b010759, nSavedDC=-1) returned 1 [0213.535] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.535] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.535] GetSystemMetrics (nIndex=42) returned 0 [0213.535] CoTaskMemAlloc (cb=0x20) returned 0x89d2e0 [0213.535] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d2e0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.535] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d2e0) returned 0xd [0213.538] CoTaskMemFree (pv=0x89d2e0) [0213.538] RestoreDC (hdc=0x2b010759, nSavedDC=-1) returned 1 [0213.538] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.538] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2b010759) returned 0x0 [0213.538] IsAppThemed () returned 0x1 [0213.539] GetThemeAppProperties () returned 0x3 [0213.539] GetThemeAppProperties () returned 0x3 [0213.539] IsAppThemed () returned 0x1 [0213.539] GetThemeAppProperties () returned 0x3 [0213.539] GetThemeAppProperties () returned 0x3 [0213.539] IsThemePartDefined () returned 0x1 [0213.539] GdipCreateRegion (region=0x5dac10) returned 0x0 [0213.539] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.539] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0213.539] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d50) returned 0x0 [0213.539] GdipIsMatrixIdentity (matrix=0x1c326d50, result=0x5dac70) returned 0x0 [0213.539] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f250 [0213.539] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89f250) returned 0x0 [0213.539] LocalFree (hMem=0x89f250) returned 0x0 [0213.539] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed50 [0213.539] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89ed50) returned 0x0 [0213.539] LocalFree (hMem=0x89ed50) returned 0x0 [0213.539] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.539] GdipDeleteMatrix (matrix=0x1c326d50) returned 0x0 [0213.540] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0213.540] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0213.540] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0213.540] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.540] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.540] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0213.540] GetCurrentObject (hdc=0x2b010759, type=0x1) returned 0x1b00017 [0213.540] GetCurrentObject (hdc=0x2b010759, type=0x2) returned 0x1900010 [0213.540] GetCurrentObject (hdc=0x2b010759, type=0x7) returned 0x11050637 [0213.540] GetCurrentObject (hdc=0x2b010759, type=0x6) returned 0x18a0048 [0213.540] SaveDC (hdc=0x2b010759) returned 1 [0213.540] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffaa040572 [0213.540] GetClipRgn (hdc=0x2b010759, hrgn=0xffffffffaa040572) returned 0 [0213.540] SelectClipRgn (hdc=0x2b010759, hrgn=0x5404063b) returned 2 [0213.540] DeleteObject (ho=0xffffffffaa040572) returned 1 [0213.540] DeleteObject (ho=0x5404063b) returned 1 [0213.540] OffsetViewportOrgEx (in: hdc=0x2b010759, x=0, y=0, lppt=0x27ace08 | out: lppt=0x27ace08) returned 1 [0213.540] IsAppThemed () returned 0x1 [0213.541] GetThemeAppProperties () returned 0x3 [0213.541] GetThemeAppProperties () returned 0x3 [0213.541] DrawThemeBackground () returned 0x0 [0213.541] RestoreDC (hdc=0x2b010759, nSavedDC=-1) returned 1 [0213.541] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.541] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2b010759) returned 0x0 [0213.541] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0213.541] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.541] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0213.541] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3272d0) returned 0x0 [0213.541] GdipIsMatrixIdentity (matrix=0x1c3272d0, result=0x5dac40) returned 0x0 [0213.541] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f6d0 [0213.541] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89f6d0) returned 0x0 [0213.541] LocalFree (hMem=0x89f6d0) returned 0x0 [0213.541] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f290 [0213.541] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89f290) returned 0x0 [0213.541] LocalFree (hMem=0x89f290) returned 0x0 [0213.541] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.541] GdipDeleteMatrix (matrix=0x1c3272d0) returned 0x0 [0213.541] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0213.541] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0213.542] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0213.542] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.542] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.542] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0213.542] GetCurrentObject (hdc=0x2b010759, type=0x1) returned 0x1b00017 [0213.542] GetCurrentObject (hdc=0x2b010759, type=0x2) returned 0x1900010 [0213.542] GetCurrentObject (hdc=0x2b010759, type=0x7) returned 0x11050637 [0213.542] GetCurrentObject (hdc=0x2b010759, type=0x6) returned 0x18a0048 [0213.542] SaveDC (hdc=0x2b010759) returned 1 [0213.542] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5504063b [0213.542] GetClipRgn (hdc=0x2b010759, hrgn=0x5504063b) returned 0 [0213.542] SelectClipRgn (hdc=0x2b010759, hrgn=0xffffffffab040572) returned 2 [0213.542] DeleteObject (ho=0x5504063b) returned 1 [0213.542] DeleteObject (ho=0xffffffffab040572) returned 1 [0213.543] OffsetViewportOrgEx (in: hdc=0x2b010759, x=0, y=0, lppt=0x27ad308 | out: lppt=0x27ad308) returned 1 [0213.543] IsAppThemed () returned 0x1 [0213.543] GetThemeAppProperties () returned 0x3 [0213.543] GetThemeAppProperties () returned 0x3 [0213.543] GetThemeBackgroundContentRect () returned 0x0 [0213.543] RestoreDC (hdc=0x2b010759, nSavedDC=-1) returned 1 [0213.543] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.543] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2b010759) returned 0x0 [0213.543] IsAppThemed () returned 0x1 [0213.543] GetThemeAppProperties () returned 0x3 [0213.543] GetThemeAppProperties () returned 0x3 [0213.543] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0213.543] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0213.543] GetCurrentObject (hdc=0x2b010759, type=0x1) returned 0x1b00017 [0213.543] GetCurrentObject (hdc=0x2b010759, type=0x2) returned 0x1900010 [0213.543] GetCurrentObject (hdc=0x2b010759, type=0x7) returned 0x11050637 [0213.543] GetCurrentObject (hdc=0x2b010759, type=0x6) returned 0x18a0048 [0213.543] SaveDC (hdc=0x2b010759) returned 1 [0213.543] GetTextAlign (hdc=0x2b010759) returned 0x0 [0213.543] GetTextColor (hdc=0x2b010759) returned 0x0 [0213.544] GetCurrentObject (hdc=0x2b010759, type=0x6) returned 0x18a0048 [0213.544] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0213.544] SelectObject (hdc=0x2b010759, h=0x290a0573) returned 0x18a0048 [0213.544] GetBkMode (hdc=0x2b010759) returned 2 [0213.544] SetBkMode (hdc=0x2b010759, mode=1) returned 2 [0213.544] DrawTextExW (in: hdc=0x2b010759, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x2415, lpdtp=0x27ad860 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0213.544] DrawTextExW (in: hdc=0x2b010759, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x2015, lpdtp=0x27ad860 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0213.545] RestoreDC (hdc=0x2b010759, nSavedDC=-1) returned 1 [0213.545] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.545] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2b010759) returned 0x0 [0213.545] GetFocus () returned 0x50212 [0213.545] IsAppThemed () returned 0x1 [0213.545] GetThemeAppProperties () returned 0x3 [0213.545] GetThemeAppProperties () returned 0x3 [0213.545] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0213.545] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0x2b010759, x1=0, y1=0, rop=0xcc0020) returned 1 [0213.545] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.545] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2b010759) returned 0x0 [0213.545] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0213.545] SelectObject (hdc=0x2b010759, h=0x185000f) returned 0x11050637 [0213.545] DeleteDC (hdc=0x2b010759) returned 1 [0213.545] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.545] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0213.545] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0213.546] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0213.546] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0213.546] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0x1010749 [0213.546] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0213.546] CreateCompatibleDC (hdc=0x1010749) returned 0x2c010759 [0213.546] SelectObject (hdc=0x2c010759, h=0x11050637) returned 0x185000f [0213.546] GdipCreateFromHDC (hdc=0x2c010759, graphics=0x5db3f0) returned 0x0 [0213.546] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0213.546] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0213.546] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0213.547] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327010) returned 0x0 [0213.547] GdipIsMatrixIdentity (matrix=0x1c327010, result=0x5db580) returned 0x0 [0213.547] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef50 [0213.547] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89ef50) returned 0x0 [0213.547] LocalFree (hMem=0x89ef50) returned 0x0 [0213.547] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.547] GdipDeleteMatrix (matrix=0x1c327010) returned 0x0 [0213.547] GdipCreateRegion (region=0x5db520) returned 0x0 [0213.547] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.547] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0213.547] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0213.547] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd790dbd) returned 0x0 [0213.547] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.547] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.547] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0213.548] GetCurrentObject (hdc=0x2c010759, type=0x1) returned 0x1b00017 [0213.548] GetCurrentObject (hdc=0x2c010759, type=0x2) returned 0x1900010 [0213.548] GetCurrentObject (hdc=0x2c010759, type=0x7) returned 0x11050637 [0213.548] GetCurrentObject (hdc=0x2c010759, type=0x6) returned 0x18a0048 [0213.548] SaveDC (hdc=0x2c010759) returned 1 [0213.548] GetNearestColor (hdc=0x2c010759, color=0xf0f0f0) returned 0xf0f0f0 [0213.548] GetNearestColor (hdc=0x2c010759, color=0xa0a0a0) returned 0xa0a0a0 [0213.548] GetNearestColor (hdc=0x2c010759, color=0x696969) returned 0x696969 [0213.548] GetNearestColor (hdc=0x2c010759, color=0xa0a0a0) returned 0xa0a0a0 [0213.548] GetNearestColor (hdc=0x2c010759, color=0x0) returned 0x0 [0213.548] GetNearestColor (hdc=0x2c010759, color=0xffffff) returned 0xffffff [0213.548] GetNearestColor (hdc=0x2c010759, color=0xe5e5e5) returned 0xe5e5e5 [0213.549] GetNearestColor (hdc=0x2c010759, color=0xd8d8d8) returned 0xd8d8d8 [0213.549] GetNearestColor (hdc=0x2c010759, color=0x0) returned 0x0 [0213.549] RestoreDC (hdc=0x2c010759, nSavedDC=-1) returned 1 [0213.549] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.549] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2c010759) returned 0x0 [0213.549] IsAppThemed () returned 0x1 [0213.549] GetThemeAppProperties () returned 0x3 [0213.549] GetThemeAppProperties () returned 0x3 [0213.549] IsAppThemed () returned 0x1 [0213.549] GetThemeAppProperties () returned 0x3 [0213.549] GetThemeAppProperties () returned 0x3 [0213.549] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x2415, lpdtp=0x27ae2b0 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0213.550] IsAppThemed () returned 0x1 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] IsAppThemed () returned 0x1 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] GetFocus () returned 0x50212 [0213.550] IsAppThemed () returned 0x1 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] IsAppThemed () returned 0x1 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] IsThemePartDefined () returned 0x1 [0213.550] IsAppThemed () returned 0x1 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0213.550] IsAppThemed () returned 0x1 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] IsAppThemed () returned 0x1 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] GetThemeAppProperties () returned 0x3 [0213.550] IsThemePartDefined () returned 0x1 [0213.550] GdipCreateRegion (region=0x5dad30) returned 0x0 [0213.559] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.559] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0213.559] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327310) returned 0x0 [0213.559] GdipIsMatrixIdentity (matrix=0x1c327310, result=0x5dad90) returned 0x0 [0213.559] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0213.559] GdipGetMatrixElements (matrix=0x1c327310, matrixOut=0x89f350) returned 0x0 [0213.560] LocalFree (hMem=0x89f350) returned 0x0 [0213.560] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0213.560] GdipGetMatrixElements (matrix=0x1c327310, matrixOut=0x89f350) returned 0x0 [0213.560] LocalFree (hMem=0x89f350) returned 0x0 [0213.560] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.560] GdipDeleteMatrix (matrix=0x1c327310) returned 0x0 [0213.560] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0213.560] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0213.560] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0213.560] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.560] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.560] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0213.560] GetCurrentObject (hdc=0x2c010759, type=0x1) returned 0x1b00017 [0213.560] GetCurrentObject (hdc=0x2c010759, type=0x2) returned 0x1900010 [0213.560] GetCurrentObject (hdc=0x2c010759, type=0x7) returned 0x11050637 [0213.561] GetCurrentObject (hdc=0x2c010759, type=0x6) returned 0x18a0048 [0213.561] SaveDC (hdc=0x2c010759) returned 1 [0213.561] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffac040572 [0213.561] GetClipRgn (hdc=0x2c010759, hrgn=0xffffffffac040572) returned 0 [0213.561] SelectClipRgn (hdc=0x2c010759, hrgn=0x5904063b) returned 2 [0213.561] DeleteObject (ho=0xffffffffac040572) returned 1 [0213.561] DeleteObject (ho=0x5904063b) returned 1 [0213.561] OffsetViewportOrgEx (in: hdc=0x2c010759, x=0, y=0, lppt=0x27aecc0 | out: lppt=0x27aecc0) returned 1 [0213.561] DrawThemeParentBackground () returned 0x0 [0213.561] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0213.562] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0213.562] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.562] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.562] GetSystemMetrics (nIndex=42) returned 0 [0213.562] CoTaskMemAlloc (cb=0x20) returned 0x89d160 [0213.562] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d160, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.562] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d160) returned 0xd [0213.562] CoTaskMemFree (pv=0x89d160) [0213.562] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0213.562] GetCurrentObject (hdc=0x2c010759, type=0x1) returned 0x1b00017 [0213.562] GetCurrentObject (hdc=0x2c010759, type=0x2) returned 0x1900010 [0213.562] GetCurrentObject (hdc=0x2c010759, type=0x7) returned 0x11050637 [0213.562] GetCurrentObject (hdc=0x2c010759, type=0x6) returned 0x18a0048 [0213.562] SaveDC (hdc=0x2c010759) returned 2 [0213.562] GetNearestColor (hdc=0x2c010759, color=0xf0f0f0) returned 0xf0f0f0 [0213.563] CreateSolidBrush (color=0xf0f0f0) returned 0x68100686 [0213.563] FillRect (hDC=0x2c010759, lprc=0x5d9fb0, hbr=0x68100686) returned 1 [0213.563] DeleteObject (ho=0x68100686) returned 1 [0213.563] RestoreDC (hdc=0x2c010759, nSavedDC=-1) returned 1 [0213.563] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.563] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.563] GetSystemMetrics (nIndex=42) returned 0 [0213.563] CoTaskMemAlloc (cb=0x20) returned 0x89d010 [0213.563] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d010, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.563] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d010) returned 0xd [0213.563] CoTaskMemFree (pv=0x89d010) [0213.563] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0213.563] GetCurrentObject (hdc=0x2c010759, type=0x1) returned 0x1b00017 [0213.563] GetCurrentObject (hdc=0x2c010759, type=0x2) returned 0x1900010 [0213.563] GetCurrentObject (hdc=0x2c010759, type=0x7) returned 0x11050637 [0213.564] GetCurrentObject (hdc=0x2c010759, type=0x6) returned 0x18a0048 [0213.564] SaveDC (hdc=0x2c010759) returned 2 [0213.564] GetNearestColor (hdc=0x2c010759, color=0xf0f0f0) returned 0xf0f0f0 [0213.564] CreateSolidBrush (color=0xf0f0f0) returned 0x69100686 [0213.564] FillRect (hDC=0x2c010759, lprc=0x5d9eb0, hbr=0x69100686) returned 1 [0213.564] DeleteObject (ho=0x69100686) returned 1 [0213.564] RestoreDC (hdc=0x2c010759, nSavedDC=-1) returned 1 [0213.564] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.564] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.564] GetSystemMetrics (nIndex=42) returned 0 [0213.564] CoTaskMemAlloc (cb=0x20) returned 0x89cf50 [0213.564] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cf50, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.564] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cf50) returned 0xd [0213.564] CoTaskMemFree (pv=0x89cf50) [0213.565] RestoreDC (hdc=0x2c010759, nSavedDC=-1) returned 1 [0213.565] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.565] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2c010759) returned 0x0 [0213.565] IsAppThemed () returned 0x1 [0213.565] GetThemeAppProperties () returned 0x3 [0213.565] GetThemeAppProperties () returned 0x3 [0213.565] IsAppThemed () returned 0x1 [0213.565] GetThemeAppProperties () returned 0x3 [0213.565] GetThemeAppProperties () returned 0x3 [0213.565] IsThemePartDefined () returned 0x1 [0213.565] GdipCreateRegion (region=0x5dac10) returned 0x0 [0213.566] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.566] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0213.566] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327110) returned 0x0 [0213.566] GdipIsMatrixIdentity (matrix=0x1c327110, result=0x5dac70) returned 0x0 [0213.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0213.566] GdipGetMatrixElements (matrix=0x1c327110, matrixOut=0x89f450) returned 0x0 [0213.566] LocalFree (hMem=0x89f450) returned 0x0 [0213.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f590 [0213.566] GdipGetMatrixElements (matrix=0x1c327110, matrixOut=0x89f590) returned 0x0 [0213.566] LocalFree (hMem=0x89f590) returned 0x0 [0213.566] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.566] GdipDeleteMatrix (matrix=0x1c327110) returned 0x0 [0213.572] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0213.572] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0213.572] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0213.572] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.572] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.572] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0213.572] GetCurrentObject (hdc=0x2c010759, type=0x1) returned 0x1b00017 [0213.572] GetCurrentObject (hdc=0x2c010759, type=0x2) returned 0x1900010 [0213.572] GetCurrentObject (hdc=0x2c010759, type=0x7) returned 0x11050637 [0213.573] GetCurrentObject (hdc=0x2c010759, type=0x6) returned 0x18a0048 [0213.573] SaveDC (hdc=0x2c010759) returned 1 [0213.573] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a04063b [0213.573] GetClipRgn (hdc=0x2c010759, hrgn=0x5a04063b) returned 0 [0213.573] SelectClipRgn (hdc=0x2c010759, hrgn=0xffffffffae040572) returned 2 [0213.573] DeleteObject (ho=0x5a04063b) returned 1 [0213.573] DeleteObject (ho=0xffffffffae040572) returned 1 [0213.573] OffsetViewportOrgEx (in: hdc=0x2c010759, x=0, y=0, lppt=0x27af9c0 | out: lppt=0x27af9c0) returned 1 [0213.573] IsAppThemed () returned 0x1 [0213.573] GetThemeAppProperties () returned 0x3 [0213.573] GetThemeAppProperties () returned 0x3 [0213.573] DrawThemeBackground () returned 0x0 [0213.573] RestoreDC (hdc=0x2c010759, nSavedDC=-1) returned 1 [0213.573] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.574] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2c010759) returned 0x0 [0213.574] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0213.574] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.574] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0213.574] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326c50) returned 0x0 [0213.574] GdipIsMatrixIdentity (matrix=0x1c326c50, result=0x5dac40) returned 0x0 [0213.574] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e850 [0213.574] GdipGetMatrixElements (matrix=0x1c326c50, matrixOut=0x89e850) returned 0x0 [0213.574] LocalFree (hMem=0x89e850) returned 0x0 [0213.574] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e9d0 [0213.574] GdipGetMatrixElements (matrix=0x1c326c50, matrixOut=0x89e9d0) returned 0x0 [0213.574] LocalFree (hMem=0x89e9d0) returned 0x0 [0213.574] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.574] GdipDeleteMatrix (matrix=0x1c326c50) returned 0x0 [0213.574] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0213.575] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0213.575] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0213.575] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.575] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.575] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0213.575] GetCurrentObject (hdc=0x2c010759, type=0x1) returned 0x1b00017 [0213.575] GetCurrentObject (hdc=0x2c010759, type=0x2) returned 0x1900010 [0213.575] GetCurrentObject (hdc=0x2c010759, type=0x7) returned 0x11050637 [0213.575] GetCurrentObject (hdc=0x2c010759, type=0x6) returned 0x18a0048 [0213.575] SaveDC (hdc=0x2c010759) returned 1 [0213.575] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffaf040572 [0213.575] GetClipRgn (hdc=0x2c010759, hrgn=0xffffffffaf040572) returned 0 [0213.575] SelectClipRgn (hdc=0x2c010759, hrgn=0x5b04063b) returned 2 [0213.575] DeleteObject (ho=0xffffffffaf040572) returned 1 [0213.575] DeleteObject (ho=0x5b04063b) returned 1 [0213.575] OffsetViewportOrgEx (in: hdc=0x2c010759, x=0, y=0, lppt=0x27afec0 | out: lppt=0x27afec0) returned 1 [0213.575] IsAppThemed () returned 0x1 [0213.576] GetThemeAppProperties () returned 0x3 [0213.576] GetThemeAppProperties () returned 0x3 [0213.576] GetThemeBackgroundContentRect () returned 0x0 [0213.576] RestoreDC (hdc=0x2c010759, nSavedDC=-1) returned 1 [0213.576] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.576] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2c010759) returned 0x0 [0213.576] IsAppThemed () returned 0x1 [0213.576] GetThemeAppProperties () returned 0x3 [0213.576] GetThemeAppProperties () returned 0x3 [0213.576] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0213.576] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0213.576] GetCurrentObject (hdc=0x2c010759, type=0x1) returned 0x1b00017 [0213.576] GetCurrentObject (hdc=0x2c010759, type=0x2) returned 0x1900010 [0213.576] GetCurrentObject (hdc=0x2c010759, type=0x7) returned 0x11050637 [0213.576] GetCurrentObject (hdc=0x2c010759, type=0x6) returned 0x18a0048 [0213.576] SaveDC (hdc=0x2c010759) returned 1 [0213.577] GetTextAlign (hdc=0x2c010759) returned 0x0 [0213.577] GetTextColor (hdc=0x2c010759) returned 0x0 [0213.577] GetCurrentObject (hdc=0x2c010759, type=0x6) returned 0x18a0048 [0213.577] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0213.577] SelectObject (hdc=0x2c010759, h=0x290a0573) returned 0x18a0048 [0213.577] GetBkMode (hdc=0x2c010759) returned 2 [0213.577] SetBkMode (hdc=0x2c010759, mode=1) returned 2 [0213.577] DrawTextExW (in: hdc=0x2c010759, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x2415, lpdtp=0x27b0418 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0213.577] DrawTextExW (in: hdc=0x2c010759, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x2015, lpdtp=0x27b0418 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0213.578] RestoreDC (hdc=0x2c010759, nSavedDC=-1) returned 1 [0213.578] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.578] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2c010759) returned 0x0 [0213.578] GetFocus () returned 0x50212 [0213.578] IsAppThemed () returned 0x1 [0213.578] GetThemeAppProperties () returned 0x3 [0213.578] GetThemeAppProperties () returned 0x3 [0213.578] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0213.578] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0x2c010759, x1=0, y1=0, rop=0xcc0020) returned 1 [0213.578] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.578] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2c010759) returned 0x0 [0213.578] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0213.578] SelectObject (hdc=0x2c010759, h=0x185000f) returned 0x11050637 [0213.578] DeleteDC (hdc=0x2c010759) returned 1 [0213.579] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.579] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0213.579] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0213.590] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0213.901] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0213.901] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0213.901] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0213.901] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x5021c) returned 0x1 [0213.902] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0213.902] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0213.902] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0213.903] GetFocus () returned 0x5021c [0213.903] GetAncestor (hwnd=0x5021c, gaFlags=0x1) returned 0x10010 [0213.903] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0 [0213.903] SetFocus (hWnd=0x2021e) returned 0x0 [0213.904] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0213.905] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0213.905] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0213.905] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0213.905] GetFocus () returned 0x20160 [0213.905] SetFocus (hWnd=0x2021e) returned 0x0 [0213.909] IsWindow (hWnd=0x20160) returned 1 [0213.909] EnableWindow (hWnd=0x20160, bEnable=1) returned 1 [0213.909] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0213.909] IsWindow (hWnd=0x20160) returned 1 [0213.909] SetActiveWindow (hWnd=0x20160) returned 0x20160 [0213.909] IsWindow (hWnd=0x2021e) returned 1 [0213.909] SetFocus (hWnd=0x2021e) returned 0x20160 [0213.909] GetFocus () returned 0x2021e [0213.909] IsChild (hWndParent=0x20160, hWnd=0x2021e) returned 1 [0213.909] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x8, wParam=0x2021e, lParam=0x0) returned 0x0 [0213.910] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0213.910] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0213.912] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0213.912] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x7, wParam=0x20160, lParam=0x0) returned 0x0 [0213.912] GetStockObject (i=5) returned 0x1900015 [0213.912] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0213.912] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xd, wParam=0x16, lParam=0x89f490) returned 0x15 [0213.912] GetDlgItem (hDlg=0x20160, nIDDlgItem=131614) returned 0x2021e [0213.912] SendMessageW (hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5db790) returned 0x0 [0213.912] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5db790) returned 0x0 [0213.912] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0213.912] SendMessageW (hWnd=0x20160, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0213.912] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0213.912] GetFocus () returned 0x2021e [0213.913] GetCapture () returned 0x0 [0213.913] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.913] IsWindowUnicode (hWnd=0x2021e) returned 1 [0213.913] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0213.913] TranslateMessage (lpMsg=0x5dd220) returned 0 [0213.913] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0213.913] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0213.913] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0213.913] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffff92010707 [0213.913] SelectObject (hdc=0xffffffff92010707, h=0x11050637) returned 0x185000f [0213.913] GdipCreateFromHDC (hdc=0xffffffff92010707, graphics=0x5dc420) returned 0x0 [0213.913] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0213.913] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0213.913] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0213.914] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327190) returned 0x0 [0213.914] GdipIsMatrixIdentity (matrix=0x1c327190, result=0x5dc5b0) returned 0x0 [0213.914] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f4d0 [0213.914] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89f4d0) returned 0x0 [0213.915] LocalFree (hMem=0x89f4d0) returned 0x0 [0213.915] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.915] GdipDeleteMatrix (matrix=0x1c327190) returned 0x0 [0213.915] GdipCreateRegion (region=0x5dc550) returned 0x0 [0213.915] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.915] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0213.915] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0213.915] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd770dbd) returned 0x0 [0213.915] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.915] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.915] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0213.915] GetCurrentObject (hdc=0xffffffff92010707, type=0x1) returned 0x1b00017 [0213.915] GetCurrentObject (hdc=0xffffffff92010707, type=0x2) returned 0x1900010 [0213.916] GetCurrentObject (hdc=0xffffffff92010707, type=0x7) returned 0x11050637 [0213.916] GetCurrentObject (hdc=0xffffffff92010707, type=0x6) returned 0x18a0048 [0213.916] SaveDC (hdc=0xffffffff92010707) returned 1 [0213.916] GetNearestColor (hdc=0xffffffff92010707, color=0xf0f0f0) returned 0xf0f0f0 [0213.916] GetNearestColor (hdc=0xffffffff92010707, color=0xa0a0a0) returned 0xa0a0a0 [0213.916] GetNearestColor (hdc=0xffffffff92010707, color=0x696969) returned 0x696969 [0213.916] GetNearestColor (hdc=0xffffffff92010707, color=0xa0a0a0) returned 0xa0a0a0 [0213.916] GetNearestColor (hdc=0xffffffff92010707, color=0x0) returned 0x0 [0213.916] GetNearestColor (hdc=0xffffffff92010707, color=0xffffff) returned 0xffffff [0213.917] GetNearestColor (hdc=0xffffffff92010707, color=0xe5e5e5) returned 0xe5e5e5 [0213.917] GetNearestColor (hdc=0xffffffff92010707, color=0xd8d8d8) returned 0xd8d8d8 [0213.917] GetNearestColor (hdc=0xffffffff92010707, color=0x0) returned 0x0 [0213.917] RestoreDC (hdc=0xffffffff92010707, nSavedDC=-1) returned 1 [0213.917] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.917] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010707) returned 0x0 [0213.917] IsAppThemed () returned 0x1 [0213.917] GetThemeAppProperties () returned 0x3 [0213.917] GetThemeAppProperties () returned 0x3 [0213.917] IsAppThemed () returned 0x1 [0213.917] GetThemeAppProperties () returned 0x3 [0213.917] GetThemeAppProperties () returned 0x3 [0213.917] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x2415, lpdtp=0x27b0f00 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0213.918] IsAppThemed () returned 0x1 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] IsAppThemed () returned 0x1 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] GetFocus () returned 0x2021e [0213.918] IsAppThemed () returned 0x1 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] IsAppThemed () returned 0x1 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] IsThemePartDefined () returned 0x1 [0213.918] IsAppThemed () returned 0x1 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0213.918] IsAppThemed () returned 0x1 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] IsAppThemed () returned 0x1 [0213.918] GetThemeAppProperties () returned 0x3 [0213.918] GetThemeAppProperties () returned 0x3 [0213.919] IsThemePartDefined () returned 0x1 [0213.919] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0213.919] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.919] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0213.919] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d50) returned 0x0 [0213.919] GdipIsMatrixIdentity (matrix=0x1c326d50, result=0x5dbdc0) returned 0x0 [0213.919] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb10 [0213.919] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89eb10) returned 0x0 [0213.919] LocalFree (hMem=0x89eb10) returned 0x0 [0213.919] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee50 [0213.919] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89ee50) returned 0x0 [0213.919] LocalFree (hMem=0x89ee50) returned 0x0 [0213.919] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.919] GdipDeleteMatrix (matrix=0x1c326d50) returned 0x0 [0213.919] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0213.919] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0213.919] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0213.919] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.919] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.919] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0213.919] GetCurrentObject (hdc=0xffffffff92010707, type=0x1) returned 0x1b00017 [0213.919] GetCurrentObject (hdc=0xffffffff92010707, type=0x2) returned 0x1900010 [0213.919] GetCurrentObject (hdc=0xffffffff92010707, type=0x7) returned 0x11050637 [0213.920] GetCurrentObject (hdc=0xffffffff92010707, type=0x6) returned 0x18a0048 [0213.920] SaveDC (hdc=0xffffffff92010707) returned 1 [0213.920] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3004074d [0213.920] GetClipRgn (hdc=0xffffffff92010707, hrgn=0x3004074d) returned 0 [0213.920] SelectClipRgn (hdc=0xffffffff92010707, hrgn=0x6904063b) returned 2 [0213.920] DeleteObject (ho=0x3004074d) returned 1 [0213.920] DeleteObject (ho=0x6904063b) returned 1 [0213.920] OffsetViewportOrgEx (in: hdc=0xffffffff92010707, x=0, y=0, lppt=0x27b1910 | out: lppt=0x27b1910) returned 1 [0213.920] DrawThemeParentBackground () returned 0x0 [0213.921] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0213.921] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0213.921] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.921] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.921] GetSystemMetrics (nIndex=42) returned 0 [0213.921] CoTaskMemAlloc (cb=0x20) returned 0x89d010 [0213.921] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d010, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.921] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d010) returned 0xd [0213.921] CoTaskMemFree (pv=0x89d010) [0213.921] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0213.921] GetCurrentObject (hdc=0xffffffff92010707, type=0x1) returned 0x1b00017 [0213.921] GetCurrentObject (hdc=0xffffffff92010707, type=0x2) returned 0x1900010 [0213.921] GetCurrentObject (hdc=0xffffffff92010707, type=0x7) returned 0x11050637 [0213.921] GetCurrentObject (hdc=0xffffffff92010707, type=0x6) returned 0x18a0048 [0213.921] SaveDC (hdc=0xffffffff92010707) returned 2 [0213.921] GetNearestColor (hdc=0xffffffff92010707, color=0xf0f0f0) returned 0xf0f0f0 [0213.922] CreateSolidBrush (color=0xf0f0f0) returned 0x6b100686 [0213.922] FillRect (hDC=0xffffffff92010707, lprc=0x5dafe0, hbr=0x6b100686) returned 1 [0213.922] DeleteObject (ho=0x6b100686) returned 1 [0213.922] RestoreDC (hdc=0xffffffff92010707, nSavedDC=-1) returned 1 [0213.922] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.922] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.922] GetSystemMetrics (nIndex=42) returned 0 [0213.922] CoTaskMemAlloc (cb=0x20) returned 0x89d550 [0213.922] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d550, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.922] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d550) returned 0xd [0213.922] CoTaskMemFree (pv=0x89d550) [0213.922] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0213.922] GetCurrentObject (hdc=0xffffffff92010707, type=0x1) returned 0x1b00017 [0213.922] GetCurrentObject (hdc=0xffffffff92010707, type=0x2) returned 0x1900010 [0213.922] GetCurrentObject (hdc=0xffffffff92010707, type=0x7) returned 0x11050637 [0213.922] GetCurrentObject (hdc=0xffffffff92010707, type=0x6) returned 0x18a0048 [0213.922] SaveDC (hdc=0xffffffff92010707) returned 2 [0213.923] GetNearestColor (hdc=0xffffffff92010707, color=0xf0f0f0) returned 0xf0f0f0 [0213.923] CreateSolidBrush (color=0xf0f0f0) returned 0x6c100686 [0213.923] FillRect (hDC=0xffffffff92010707, lprc=0x5daee0, hbr=0x6c100686) returned 1 [0213.923] DeleteObject (ho=0x6c100686) returned 1 [0213.923] RestoreDC (hdc=0xffffffff92010707, nSavedDC=-1) returned 1 [0213.924] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0213.924] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0213.925] GetSystemMetrics (nIndex=42) returned 0 [0213.925] CoTaskMemAlloc (cb=0x20) returned 0x89cfb0 [0213.925] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cfb0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0213.925] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cfb0) returned 0xd [0213.925] CoTaskMemFree (pv=0x89cfb0) [0213.925] RestoreDC (hdc=0xffffffff92010707, nSavedDC=-1) returned 1 [0213.925] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.925] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010707) returned 0x0 [0213.925] IsAppThemed () returned 0x1 [0213.925] GetThemeAppProperties () returned 0x3 [0213.925] GetThemeAppProperties () returned 0x3 [0213.925] IsAppThemed () returned 0x1 [0213.925] GetThemeAppProperties () returned 0x3 [0213.925] GetThemeAppProperties () returned 0x3 [0213.931] IsThemePartDefined () returned 0x1 [0213.931] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0213.931] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.931] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0213.931] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327010) returned 0x0 [0213.931] GdipIsMatrixIdentity (matrix=0x1c327010, result=0x5dbca0) returned 0x0 [0213.931] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea50 [0213.931] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89ea50) returned 0x0 [0213.931] LocalFree (hMem=0x89ea50) returned 0x0 [0213.931] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb10 [0213.931] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89eb10) returned 0x0 [0213.931] LocalFree (hMem=0x89eb10) returned 0x0 [0213.932] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.932] GdipDeleteMatrix (matrix=0x1c327010) returned 0x0 [0213.932] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0213.932] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0213.932] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0213.932] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.932] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.932] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0213.932] GetCurrentObject (hdc=0xffffffff92010707, type=0x1) returned 0x1b00017 [0213.932] GetCurrentObject (hdc=0xffffffff92010707, type=0x2) returned 0x1900010 [0213.932] GetCurrentObject (hdc=0xffffffff92010707, type=0x7) returned 0x11050637 [0213.932] GetCurrentObject (hdc=0xffffffff92010707, type=0x6) returned 0x18a0048 [0213.933] SaveDC (hdc=0xffffffff92010707) returned 1 [0213.933] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a04063b [0213.933] GetClipRgn (hdc=0xffffffff92010707, hrgn=0x6a04063b) returned 0 [0213.933] SelectClipRgn (hdc=0xffffffff92010707, hrgn=0x3204074d) returned 2 [0213.933] DeleteObject (ho=0x6a04063b) returned 1 [0213.933] DeleteObject (ho=0x3204074d) returned 1 [0213.933] OffsetViewportOrgEx (in: hdc=0xffffffff92010707, x=0, y=0, lppt=0x27b2610 | out: lppt=0x27b2610) returned 1 [0213.933] IsAppThemed () returned 0x1 [0213.933] GetThemeAppProperties () returned 0x3 [0213.933] GetThemeAppProperties () returned 0x3 [0213.933] DrawThemeBackground () returned 0x0 [0213.933] RestoreDC (hdc=0xffffffff92010707, nSavedDC=-1) returned 1 [0213.933] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.933] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010707) returned 0x0 [0213.933] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0213.933] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0213.933] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0213.934] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327190) returned 0x0 [0213.934] GdipIsMatrixIdentity (matrix=0x1c327190, result=0x5dbc70) returned 0x0 [0213.934] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ead0 [0213.934] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89ead0) returned 0x0 [0213.934] LocalFree (hMem=0x89ead0) returned 0x0 [0213.934] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f0d0 [0213.934] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89f0d0) returned 0x0 [0213.934] LocalFree (hMem=0x89f0d0) returned 0x0 [0213.934] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.935] GdipDeleteMatrix (matrix=0x1c327190) returned 0x0 [0213.935] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0213.935] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0213.935] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0213.935] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.935] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0213.935] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0213.935] GetCurrentObject (hdc=0xffffffff92010707, type=0x1) returned 0x1b00017 [0213.935] GetCurrentObject (hdc=0xffffffff92010707, type=0x2) returned 0x1900010 [0213.935] GetCurrentObject (hdc=0xffffffff92010707, type=0x7) returned 0x11050637 [0213.935] GetCurrentObject (hdc=0xffffffff92010707, type=0x6) returned 0x18a0048 [0213.935] SaveDC (hdc=0xffffffff92010707) returned 1 [0213.935] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3304074d [0213.935] GetClipRgn (hdc=0xffffffff92010707, hrgn=0x3304074d) returned 0 [0213.936] SelectClipRgn (hdc=0xffffffff92010707, hrgn=0x6b04063b) returned 2 [0213.936] DeleteObject (ho=0x3304074d) returned 1 [0213.936] DeleteObject (ho=0x6b04063b) returned 1 [0213.936] OffsetViewportOrgEx (in: hdc=0xffffffff92010707, x=0, y=0, lppt=0x27b2b10 | out: lppt=0x27b2b10) returned 1 [0213.936] IsAppThemed () returned 0x1 [0213.936] GetThemeAppProperties () returned 0x3 [0213.936] GetThemeAppProperties () returned 0x3 [0213.936] GetThemeBackgroundContentRect () returned 0x0 [0213.936] RestoreDC (hdc=0xffffffff92010707, nSavedDC=-1) returned 1 [0213.936] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.936] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010707) returned 0x0 [0213.936] IsAppThemed () returned 0x1 [0213.936] GetThemeAppProperties () returned 0x3 [0213.936] GetThemeAppProperties () returned 0x3 [0213.936] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0213.936] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0213.936] GetCurrentObject (hdc=0xffffffff92010707, type=0x1) returned 0x1b00017 [0213.936] GetCurrentObject (hdc=0xffffffff92010707, type=0x2) returned 0x1900010 [0213.936] GetCurrentObject (hdc=0xffffffff92010707, type=0x7) returned 0x11050637 [0213.936] GetCurrentObject (hdc=0xffffffff92010707, type=0x6) returned 0x18a0048 [0213.937] SaveDC (hdc=0xffffffff92010707) returned 1 [0213.937] GetTextAlign (hdc=0xffffffff92010707) returned 0x0 [0213.937] GetTextColor (hdc=0xffffffff92010707) returned 0x0 [0213.937] GetCurrentObject (hdc=0xffffffff92010707, type=0x6) returned 0x18a0048 [0213.937] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0213.937] SelectObject (hdc=0xffffffff92010707, h=0x290a0573) returned 0x18a0048 [0213.937] GetBkMode (hdc=0xffffffff92010707) returned 2 [0213.937] SetBkMode (hdc=0xffffffff92010707, mode=1) returned 2 [0213.937] DrawTextExW (in: hdc=0xffffffff92010707, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x2415, lpdtp=0x27b3068 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0213.938] DrawTextExW (in: hdc=0xffffffff92010707, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x2015, lpdtp=0x27b3068 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0213.938] RestoreDC (hdc=0xffffffff92010707, nSavedDC=-1) returned 1 [0213.938] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.938] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010707) returned 0x0 [0213.938] GetFocus () returned 0x2021e [0213.938] IsAppThemed () returned 0x1 [0213.938] GetThemeAppProperties () returned 0x3 [0213.938] GetThemeAppProperties () returned 0x3 [0213.938] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0213.938] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0xffffffff92010707, x1=0, y1=0, rop=0xcc0020) returned 1 [0213.939] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.939] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010707) returned 0x0 [0213.939] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0213.939] SelectObject (hdc=0xffffffff92010707, h=0x185000f) returned 0x11050637 [0213.939] DeleteDC (hdc=0xffffffff92010707) returned 1 [0213.939] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0213.939] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0213.939] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0213.939] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0213.939] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0213.939] WaitMessage () returned 1 [0214.254] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0214.254] IsWindowUnicode (hWnd=0x20230) returned 1 [0214.254] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0214.254] TranslateMessage (lpMsg=0x5dd220) returned 0 [0214.254] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0214.255] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0214.255] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0214.255] WaitMessage () returned 1 [0214.974] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0214.974] IsWindowUnicode (hWnd=0x2021e) returned 1 [0214.974] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0214.974] GetKeyState (nVirtKey=16) returned 0 [0214.974] GetKeyState (nVirtKey=17) returned 0 [0214.975] GetKeyState (nVirtKey=18) returned -127 [0214.975] SendMessageW (hWnd=0x2021e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0214.975] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0214.975] GetKeyState (nVirtKey=16) returned 0 [0214.975] GetKeyState (nVirtKey=17) returned 0 [0214.975] GetKeyState (nVirtKey=18) returned -127 [0214.975] TranslateMessage (lpMsg=0x5dd220) returned 1 [0214.975] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0214.975] GetKeyState (nVirtKey=16) returned 0 [0214.975] GetKeyState (nVirtKey=17) returned 0 [0214.975] GetKeyState (nVirtKey=18) returned -127 [0214.975] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0214.975] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0214.976] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0214.976] WaitMessage () returned 1 [0214.983] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0214.983] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0214.988] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0214.988] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dd050) returned 0x0 [0214.988] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dd050) returned 0x0 [0214.989] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dca80 | out: lpwndpl=0x5dca80) returned 1 [0214.989] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0214.989] GetClientRect (in: hWnd=0x20160, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0214.989] GetWindowRect (in: hWnd=0x20160, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0214.989] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0214.989] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0214.990] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0214.996] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dca80 | out: lpwndpl=0x5dca80) returned 1 [0214.996] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0214.996] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0214.996] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0214.997] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0214.997] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0214.999] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0214.999] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0214.999] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0215.000] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0215.000] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0215.000] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0215.000] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0215.000] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0215.000] GetFocus () returned 0x0 [0215.000] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0215.000] GetCapture () returned 0x0 [0215.000] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0215.000] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0215.001] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0215.001] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0215.001] IsWindowUnicode (hWnd=0x2021e) returned 1 [0215.001] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0215.001] TranslateMessage (lpMsg=0x5dd220) returned 0 [0215.001] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0215.001] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0215.001] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0215.001] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffff98010713 [0215.001] SelectObject (hdc=0xffffffff98010713, h=0x11050637) returned 0x185000f [0215.001] GdipCreateFromHDC (hdc=0xffffffff98010713, graphics=0x5dc420) returned 0x0 [0215.001] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0215.002] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0215.002] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0215.002] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326fd0) returned 0x0 [0215.002] GdipIsMatrixIdentity (matrix=0x1c326fd0, result=0x5dc5b0) returned 0x0 [0215.002] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e850 [0215.002] GdipGetMatrixElements (matrix=0x1c326fd0, matrixOut=0x89e850) returned 0x0 [0215.002] LocalFree (hMem=0x89e850) returned 0x0 [0215.002] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.002] GdipDeleteMatrix (matrix=0x1c326fd0) returned 0x0 [0215.002] GdipCreateRegion (region=0x5dc550) returned 0x0 [0215.003] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0215.003] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0215.003] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0215.003] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd750dbd) returned 0x0 [0215.003] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.003] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0215.004] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0215.004] GetCurrentObject (hdc=0xffffffff98010713, type=0x1) returned 0x1b00017 [0215.004] GetCurrentObject (hdc=0xffffffff98010713, type=0x2) returned 0x1900010 [0215.004] GetCurrentObject (hdc=0xffffffff98010713, type=0x7) returned 0x11050637 [0215.004] GetCurrentObject (hdc=0xffffffff98010713, type=0x6) returned 0x18a0048 [0215.005] SaveDC (hdc=0xffffffff98010713) returned 1 [0215.005] GetNearestColor (hdc=0xffffffff98010713, color=0xf0f0f0) returned 0xf0f0f0 [0215.005] GetNearestColor (hdc=0xffffffff98010713, color=0xa0a0a0) returned 0xa0a0a0 [0215.005] GetNearestColor (hdc=0xffffffff98010713, color=0x696969) returned 0x696969 [0215.005] GetNearestColor (hdc=0xffffffff98010713, color=0xa0a0a0) returned 0xa0a0a0 [0215.005] GetNearestColor (hdc=0xffffffff98010713, color=0x0) returned 0x0 [0215.005] GetNearestColor (hdc=0xffffffff98010713, color=0xffffff) returned 0xffffff [0215.005] GetNearestColor (hdc=0xffffffff98010713, color=0xe5e5e5) returned 0xe5e5e5 [0215.005] GetNearestColor (hdc=0xffffffff98010713, color=0xd8d8d8) returned 0xd8d8d8 [0215.005] GetNearestColor (hdc=0xffffffff98010713, color=0x0) returned 0x0 [0215.005] RestoreDC (hdc=0xffffffff98010713, nSavedDC=-1) returned 1 [0215.005] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.006] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff98010713) returned 0x0 [0215.006] IsAppThemed () returned 0x1 [0215.006] GetThemeAppProperties () returned 0x3 [0215.006] GetThemeAppProperties () returned 0x3 [0215.006] IsAppThemed () returned 0x1 [0215.006] GetThemeAppProperties () returned 0x3 [0215.006] GetThemeAppProperties () returned 0x3 [0215.006] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x2415, lpdtp=0x27b3cb0 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0215.006] IsAppThemed () returned 0x1 [0215.006] GetThemeAppProperties () returned 0x3 [0215.006] GetThemeAppProperties () returned 0x3 [0215.006] IsAppThemed () returned 0x1 [0215.006] GetThemeAppProperties () returned 0x3 [0215.006] GetThemeAppProperties () returned 0x3 [0215.006] GetFocus () returned 0x0 [0215.006] IsAppThemed () returned 0x1 [0215.006] GetThemeAppProperties () returned 0x3 [0215.006] GetThemeAppProperties () returned 0x3 [0215.006] IsAppThemed () returned 0x1 [0215.007] GetThemeAppProperties () returned 0x3 [0215.007] GetThemeAppProperties () returned 0x3 [0215.007] IsThemePartDefined () returned 0x1 [0215.007] IsAppThemed () returned 0x1 [0215.007] GetThemeAppProperties () returned 0x3 [0215.007] GetThemeAppProperties () returned 0x3 [0215.007] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0215.008] IsAppThemed () returned 0x1 [0215.008] GetThemeAppProperties () returned 0x3 [0215.008] GetThemeAppProperties () returned 0x3 [0215.008] IsAppThemed () returned 0x1 [0215.008] GetThemeAppProperties () returned 0x3 [0215.008] GetThemeAppProperties () returned 0x3 [0215.008] IsThemePartDefined () returned 0x1 [0215.008] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0215.008] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0215.008] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0215.008] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327010) returned 0x0 [0215.008] GdipIsMatrixIdentity (matrix=0x1c327010, result=0x5dbdc0) returned 0x0 [0215.008] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f310 [0215.008] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89f310) returned 0x0 [0215.008] LocalFree (hMem=0x89f310) returned 0x0 [0215.008] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0215.008] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89f050) returned 0x0 [0215.008] LocalFree (hMem=0x89f050) returned 0x0 [0215.009] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.009] GdipDeleteMatrix (matrix=0x1c327010) returned 0x0 [0215.009] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0215.009] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0215.009] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0215.009] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.009] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0215.009] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0215.009] GetCurrentObject (hdc=0xffffffff98010713, type=0x1) returned 0x1b00017 [0215.009] GetCurrentObject (hdc=0xffffffff98010713, type=0x2) returned 0x1900010 [0215.009] GetCurrentObject (hdc=0xffffffff98010713, type=0x7) returned 0x11050637 [0215.009] GetCurrentObject (hdc=0xffffffff98010713, type=0x6) returned 0x18a0048 [0215.009] SaveDC (hdc=0xffffffff98010713) returned 1 [0215.009] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c04063b [0215.009] GetClipRgn (hdc=0xffffffff98010713, hrgn=0x6c04063b) returned 0 [0215.009] SelectClipRgn (hdc=0xffffffff98010713, hrgn=0x3704074d) returned 2 [0215.009] DeleteObject (ho=0x6c04063b) returned 1 [0215.009] DeleteObject (ho=0x3704074d) returned 1 [0215.009] OffsetViewportOrgEx (in: hdc=0xffffffff98010713, x=0, y=0, lppt=0x27b46c0 | out: lppt=0x27b46c0) returned 1 [0215.010] DrawThemeParentBackground () returned 0x0 [0215.010] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0215.010] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0215.010] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0215.010] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0215.010] GetSystemMetrics (nIndex=42) returned 0 [0215.010] CoTaskMemAlloc (cb=0x20) returned 0x89d550 [0215.010] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d550, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0215.010] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d550) returned 0xd [0215.010] CoTaskMemFree (pv=0x89d550) [0215.010] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0215.010] GetCurrentObject (hdc=0xffffffff98010713, type=0x1) returned 0x1b00017 [0215.010] GetCurrentObject (hdc=0xffffffff98010713, type=0x2) returned 0x1900010 [0215.010] GetCurrentObject (hdc=0xffffffff98010713, type=0x7) returned 0x11050637 [0215.010] GetCurrentObject (hdc=0xffffffff98010713, type=0x6) returned 0x18a0048 [0215.010] SaveDC (hdc=0xffffffff98010713) returned 2 [0215.010] GetNearestColor (hdc=0xffffffff98010713, color=0xf0f0f0) returned 0xf0f0f0 [0215.011] CreateSolidBrush (color=0xf0f0f0) returned 0x6d100686 [0215.011] FillRect (hDC=0xffffffff98010713, lprc=0x5dafe0, hbr=0x6d100686) returned 1 [0215.011] DeleteObject (ho=0x6d100686) returned 1 [0215.011] RestoreDC (hdc=0xffffffff98010713, nSavedDC=-1) returned 1 [0215.011] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0215.011] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0215.011] GetSystemMetrics (nIndex=42) returned 0 [0215.011] CoTaskMemAlloc (cb=0x20) returned 0x89d2e0 [0215.011] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d2e0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0215.011] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d2e0) returned 0xd [0215.011] CoTaskMemFree (pv=0x89d2e0) [0215.011] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0215.011] GetCurrentObject (hdc=0xffffffff98010713, type=0x1) returned 0x1b00017 [0215.011] GetCurrentObject (hdc=0xffffffff98010713, type=0x2) returned 0x1900010 [0215.011] GetCurrentObject (hdc=0xffffffff98010713, type=0x7) returned 0x11050637 [0215.011] GetCurrentObject (hdc=0xffffffff98010713, type=0x6) returned 0x18a0048 [0215.011] SaveDC (hdc=0xffffffff98010713) returned 2 [0215.011] GetNearestColor (hdc=0xffffffff98010713, color=0xf0f0f0) returned 0xf0f0f0 [0215.012] CreateSolidBrush (color=0xf0f0f0) returned 0x6e100686 [0215.012] FillRect (hDC=0xffffffff98010713, lprc=0x5daee0, hbr=0x6e100686) returned 1 [0215.012] DeleteObject (ho=0x6e100686) returned 1 [0215.012] RestoreDC (hdc=0xffffffff98010713, nSavedDC=-1) returned 1 [0215.012] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0215.012] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0215.012] GetSystemMetrics (nIndex=42) returned 0 [0215.012] CoTaskMemAlloc (cb=0x20) returned 0x89d4f0 [0215.012] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d4f0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0215.012] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d4f0) returned 0xd [0215.013] CoTaskMemFree (pv=0x89d4f0) [0215.013] RestoreDC (hdc=0xffffffff98010713, nSavedDC=-1) returned 1 [0215.013] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.013] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff98010713) returned 0x0 [0215.013] IsAppThemed () returned 0x1 [0215.013] GetThemeAppProperties () returned 0x3 [0215.013] GetThemeAppProperties () returned 0x3 [0215.013] IsAppThemed () returned 0x1 [0215.013] GetThemeAppProperties () returned 0x3 [0215.013] GetThemeAppProperties () returned 0x3 [0215.013] IsThemePartDefined () returned 0x1 [0215.013] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0215.013] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0215.013] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0215.013] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327310) returned 0x0 [0215.013] GdipIsMatrixIdentity (matrix=0x1c327310, result=0x5dbca0) returned 0x0 [0215.013] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f110 [0215.013] GdipGetMatrixElements (matrix=0x1c327310, matrixOut=0x89f110) returned 0x0 [0215.013] LocalFree (hMem=0x89f110) returned 0x0 [0215.013] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0215.013] GdipGetMatrixElements (matrix=0x1c327310, matrixOut=0x89f350) returned 0x0 [0215.013] LocalFree (hMem=0x89f350) returned 0x0 [0215.014] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.014] GdipDeleteMatrix (matrix=0x1c327310) returned 0x0 [0215.014] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0215.014] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0215.014] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0215.014] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.014] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0215.014] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0215.014] GetCurrentObject (hdc=0xffffffff98010713, type=0x1) returned 0x1b00017 [0215.014] GetCurrentObject (hdc=0xffffffff98010713, type=0x2) returned 0x1900010 [0215.014] GetCurrentObject (hdc=0xffffffff98010713, type=0x7) returned 0x11050637 [0215.014] GetCurrentObject (hdc=0xffffffff98010713, type=0x6) returned 0x18a0048 [0215.014] SaveDC (hdc=0xffffffff98010713) returned 1 [0215.014] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3804074d [0215.014] GetClipRgn (hdc=0xffffffff98010713, hrgn=0x3804074d) returned 0 [0215.014] SelectClipRgn (hdc=0xffffffff98010713, hrgn=0x6e04063b) returned 2 [0215.014] DeleteObject (ho=0x3804074d) returned 1 [0215.014] DeleteObject (ho=0x6e04063b) returned 1 [0215.015] OffsetViewportOrgEx (in: hdc=0xffffffff98010713, x=0, y=0, lppt=0x27b53c0 | out: lppt=0x27b53c0) returned 1 [0215.015] IsAppThemed () returned 0x1 [0215.015] GetThemeAppProperties () returned 0x3 [0215.015] GetThemeAppProperties () returned 0x3 [0215.015] DrawThemeBackground () returned 0x0 [0215.015] RestoreDC (hdc=0xffffffff98010713, nSavedDC=-1) returned 1 [0215.015] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.015] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff98010713) returned 0x0 [0215.015] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0215.015] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0215.015] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0215.015] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327010) returned 0x0 [0215.015] GdipIsMatrixIdentity (matrix=0x1c327010, result=0x5dbc70) returned 0x0 [0215.015] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0215.015] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89f350) returned 0x0 [0215.015] LocalFree (hMem=0x89f350) returned 0x0 [0215.015] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f5d0 [0215.015] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89f5d0) returned 0x0 [0215.015] LocalFree (hMem=0x89f5d0) returned 0x0 [0215.015] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.015] GdipDeleteMatrix (matrix=0x1c327010) returned 0x0 [0215.015] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0215.015] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0215.016] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0215.016] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.016] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0215.016] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0215.016] GetCurrentObject (hdc=0xffffffff98010713, type=0x1) returned 0x1b00017 [0215.016] GetCurrentObject (hdc=0xffffffff98010713, type=0x2) returned 0x1900010 [0215.016] GetCurrentObject (hdc=0xffffffff98010713, type=0x7) returned 0x11050637 [0215.016] GetCurrentObject (hdc=0xffffffff98010713, type=0x6) returned 0x18a0048 [0215.016] SaveDC (hdc=0xffffffff98010713) returned 1 [0215.016] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f04063b [0215.016] GetClipRgn (hdc=0xffffffff98010713, hrgn=0x6f04063b) returned 0 [0215.016] SelectClipRgn (hdc=0xffffffff98010713, hrgn=0x3904074d) returned 2 [0215.016] DeleteObject (ho=0x6f04063b) returned 1 [0215.016] DeleteObject (ho=0x3904074d) returned 1 [0215.016] OffsetViewportOrgEx (in: hdc=0xffffffff98010713, x=0, y=0, lppt=0x27b58c0 | out: lppt=0x27b58c0) returned 1 [0215.016] IsAppThemed () returned 0x1 [0215.016] GetThemeAppProperties () returned 0x3 [0215.016] GetThemeAppProperties () returned 0x3 [0215.016] GetThemeBackgroundContentRect () returned 0x0 [0215.016] RestoreDC (hdc=0xffffffff98010713, nSavedDC=-1) returned 1 [0215.017] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.017] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff98010713) returned 0x0 [0215.017] IsAppThemed () returned 0x1 [0215.017] GetThemeAppProperties () returned 0x3 [0215.017] GetThemeAppProperties () returned 0x3 [0215.017] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0215.017] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0215.017] GetCurrentObject (hdc=0xffffffff98010713, type=0x1) returned 0x1b00017 [0215.017] GetCurrentObject (hdc=0xffffffff98010713, type=0x2) returned 0x1900010 [0215.017] GetCurrentObject (hdc=0xffffffff98010713, type=0x7) returned 0x11050637 [0215.017] GetCurrentObject (hdc=0xffffffff98010713, type=0x6) returned 0x18a0048 [0215.017] SaveDC (hdc=0xffffffff98010713) returned 1 [0215.017] GetTextAlign (hdc=0xffffffff98010713) returned 0x0 [0215.017] GetTextColor (hdc=0xffffffff98010713) returned 0x0 [0215.017] GetCurrentObject (hdc=0xffffffff98010713, type=0x6) returned 0x18a0048 [0215.017] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0215.017] SelectObject (hdc=0xffffffff98010713, h=0x290a0573) returned 0x18a0048 [0215.017] GetBkMode (hdc=0xffffffff98010713) returned 2 [0215.017] SetBkMode (hdc=0xffffffff98010713, mode=1) returned 2 [0215.018] DrawTextExW (in: hdc=0xffffffff98010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x2415, lpdtp=0x27b5e18 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0215.018] DrawTextExW (in: hdc=0xffffffff98010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x2015, lpdtp=0x27b5e18 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0215.018] RestoreDC (hdc=0xffffffff98010713, nSavedDC=-1) returned 1 [0215.018] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.018] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff98010713) returned 0x0 [0215.018] GetFocus () returned 0x0 [0215.018] IsAppThemed () returned 0x1 [0215.018] GetThemeAppProperties () returned 0x3 [0215.018] GetThemeAppProperties () returned 0x3 [0215.018] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0215.018] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0xffffffff98010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0215.019] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.019] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff98010713) returned 0x0 [0215.019] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0215.019] SelectObject (hdc=0xffffffff98010713, h=0x185000f) returned 0x11050637 [0215.019] DeleteDC (hdc=0xffffffff98010713) returned 1 [0215.019] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0215.019] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0215.019] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0215.019] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0215.019] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0215.019] WaitMessage () returned 1 [0215.332] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0215.333] IsWindowUnicode (hWnd=0x20230) returned 1 [0215.333] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0215.333] TranslateMessage (lpMsg=0x5dd220) returned 0 [0215.333] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0215.333] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0215.333] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0215.333] WaitMessage () returned 1 [0216.212] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.212] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14c015e) returned 0x1 [0216.212] IsWindowUnicode (hWnd=0x2021e) returned 1 [0216.212] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.212] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14c015e) returned 0x1 [0216.212] SetCursor (hCursor=0x10003) returned 0x10003 [0216.212] TranslateMessage (lpMsg=0x5dd220) returned 0 [0216.212] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0216.212] _TrackMouseEvent (in: lpEventTrack=0x2773508 | out: lpEventTrack=0x2773508) returned 1 [0216.212] SendMessageW (hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0216.212] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0216.212] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0216.212] GetKeyState (nVirtKey=1) returned 0 [0216.212] GetKeyState (nVirtKey=2) returned 0 [0216.213] GetKeyState (nVirtKey=4) returned 0 [0216.213] GetKeyState (nVirtKey=5) returned 0 [0216.213] GetKeyState (nVirtKey=6) returned 0 [0216.213] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.213] IsWindowUnicode (hWnd=0x2021e) returned 1 [0216.213] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.213] TranslateMessage (lpMsg=0x5dd220) returned 0 [0216.213] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0216.213] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0216.213] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0216.213] CreateCompatibleDC (hdc=0xa0100d0) returned 0x32010751 [0216.213] SelectObject (hdc=0x32010751, h=0x11050637) returned 0x185000f [0216.213] GdipCreateFromHDC (hdc=0x32010751, graphics=0x5dc420) returned 0x0 [0216.213] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0216.213] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0216.213] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0216.214] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f50) returned 0x0 [0216.214] GdipIsMatrixIdentity (matrix=0x1c326f50, result=0x5dc5b0) returned 0x0 [0216.214] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89efd0 [0216.214] GdipGetMatrixElements (matrix=0x1c326f50, matrixOut=0x89efd0) returned 0x0 [0216.214] LocalFree (hMem=0x89efd0) returned 0x0 [0216.214] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.214] GdipDeleteMatrix (matrix=0x1c326f50) returned 0x0 [0216.214] GdipCreateRegion (region=0x5dc550) returned 0x0 [0216.214] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.214] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0216.214] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0216.214] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd730dbd) returned 0x0 [0216.214] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.214] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.215] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0216.215] GetCurrentObject (hdc=0x32010751, type=0x1) returned 0x1b00017 [0216.215] GetCurrentObject (hdc=0x32010751, type=0x2) returned 0x1900010 [0216.215] GetCurrentObject (hdc=0x32010751, type=0x7) returned 0x11050637 [0216.215] GetCurrentObject (hdc=0x32010751, type=0x6) returned 0x18a0048 [0216.215] SaveDC (hdc=0x32010751) returned 1 [0216.215] GetNearestColor (hdc=0x32010751, color=0xf0f0f0) returned 0xf0f0f0 [0216.215] GetNearestColor (hdc=0x32010751, color=0xa0a0a0) returned 0xa0a0a0 [0216.215] GetNearestColor (hdc=0x32010751, color=0x696969) returned 0x696969 [0216.216] GetNearestColor (hdc=0x32010751, color=0xa0a0a0) returned 0xa0a0a0 [0216.216] GetNearestColor (hdc=0x32010751, color=0x0) returned 0x0 [0216.216] GetNearestColor (hdc=0x32010751, color=0xffffff) returned 0xffffff [0216.216] GetNearestColor (hdc=0x32010751, color=0xe5e5e5) returned 0xe5e5e5 [0216.216] GetNearestColor (hdc=0x32010751, color=0xd8d8d8) returned 0xd8d8d8 [0216.216] GetNearestColor (hdc=0x32010751, color=0x0) returned 0x0 [0216.216] RestoreDC (hdc=0x32010751, nSavedDC=-1) returned 1 [0216.216] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.216] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010751) returned 0x0 [0216.216] IsAppThemed () returned 0x1 [0216.216] GetThemeAppProperties () returned 0x3 [0216.216] GetThemeAppProperties () returned 0x3 [0216.217] IsAppThemed () returned 0x1 [0216.217] GetThemeAppProperties () returned 0x3 [0216.217] GetThemeAppProperties () returned 0x3 [0216.217] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x2415, lpdtp=0x27b6900 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0216.217] IsAppThemed () returned 0x1 [0216.217] GetThemeAppProperties () returned 0x3 [0216.217] GetThemeAppProperties () returned 0x3 [0216.217] IsAppThemed () returned 0x1 [0216.217] GetThemeAppProperties () returned 0x3 [0216.217] GetThemeAppProperties () returned 0x3 [0216.217] IsAppThemed () returned 0x1 [0216.217] GetThemeAppProperties () returned 0x3 [0216.217] GetThemeAppProperties () returned 0x3 [0216.217] IsAppThemed () returned 0x1 [0216.217] GetThemeAppProperties () returned 0x3 [0216.217] GetThemeAppProperties () returned 0x3 [0216.217] IsThemePartDefined () returned 0x1 [0216.218] IsAppThemed () returned 0x1 [0216.218] GetThemeAppProperties () returned 0x3 [0216.218] GetThemeAppProperties () returned 0x3 [0216.218] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0216.218] IsAppThemed () returned 0x1 [0216.218] GetThemeAppProperties () returned 0x3 [0216.218] GetThemeAppProperties () returned 0x3 [0216.218] IsAppThemed () returned 0x1 [0216.218] GetThemeAppProperties () returned 0x3 [0216.218] GetThemeAppProperties () returned 0x3 [0216.218] IsThemePartDefined () returned 0x1 [0216.218] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0216.218] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.218] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0216.218] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327290) returned 0x0 [0216.218] GdipIsMatrixIdentity (matrix=0x1c327290, result=0x5dbdc0) returned 0x0 [0216.218] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0216.218] GdipGetMatrixElements (matrix=0x1c327290, matrixOut=0x89f450) returned 0x0 [0216.218] LocalFree (hMem=0x89f450) returned 0x0 [0216.218] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ecd0 [0216.218] GdipGetMatrixElements (matrix=0x1c327290, matrixOut=0x89ecd0) returned 0x0 [0216.218] LocalFree (hMem=0x89ecd0) returned 0x0 [0216.218] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.218] GdipDeleteMatrix (matrix=0x1c327290) returned 0x0 [0216.218] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0216.219] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0216.219] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0216.219] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.219] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.219] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0216.219] GetCurrentObject (hdc=0x32010751, type=0x1) returned 0x1b00017 [0216.219] GetCurrentObject (hdc=0x32010751, type=0x2) returned 0x1900010 [0216.219] GetCurrentObject (hdc=0x32010751, type=0x7) returned 0x11050637 [0216.219] GetCurrentObject (hdc=0x32010751, type=0x6) returned 0x18a0048 [0216.219] SaveDC (hdc=0x32010751) returned 1 [0216.219] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a04074d [0216.219] GetClipRgn (hdc=0x32010751, hrgn=0x3a04074d) returned 0 [0216.219] SelectClipRgn (hdc=0x32010751, hrgn=0x7304063b) returned 2 [0216.219] DeleteObject (ho=0x3a04074d) returned 1 [0216.219] DeleteObject (ho=0x7304063b) returned 1 [0216.219] OffsetViewportOrgEx (in: hdc=0x32010751, x=0, y=0, lppt=0x27b7310 | out: lppt=0x27b7310) returned 1 [0216.219] DrawThemeParentBackground () returned 0x0 [0216.220] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0216.220] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0216.220] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.220] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.220] GetSystemMetrics (nIndex=42) returned 0 [0216.220] CoTaskMemAlloc (cb=0x20) returned 0x89d580 [0216.220] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d580, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.220] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d580) returned 0xd [0216.220] CoTaskMemFree (pv=0x89d580) [0216.220] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0216.220] GetCurrentObject (hdc=0x32010751, type=0x1) returned 0x1b00017 [0216.220] GetCurrentObject (hdc=0x32010751, type=0x2) returned 0x1900010 [0216.220] GetCurrentObject (hdc=0x32010751, type=0x7) returned 0x11050637 [0216.221] GetCurrentObject (hdc=0x32010751, type=0x6) returned 0x18a0048 [0216.221] SaveDC (hdc=0x32010751) returned 2 [0216.221] GetNearestColor (hdc=0x32010751, color=0xf0f0f0) returned 0xf0f0f0 [0216.221] CreateSolidBrush (color=0xf0f0f0) returned 0x6f100686 [0216.221] FillRect (hDC=0x32010751, lprc=0x5dafe0, hbr=0x6f100686) returned 1 [0216.221] DeleteObject (ho=0x6f100686) returned 1 [0216.221] RestoreDC (hdc=0x32010751, nSavedDC=-1) returned 1 [0216.221] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.221] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.221] GetSystemMetrics (nIndex=42) returned 0 [0216.221] CoTaskMemAlloc (cb=0x20) returned 0x89d4c0 [0216.221] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d4c0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.221] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d4c0) returned 0xd [0216.221] CoTaskMemFree (pv=0x89d4c0) [0216.221] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0216.222] GetCurrentObject (hdc=0x32010751, type=0x1) returned 0x1b00017 [0216.222] GetCurrentObject (hdc=0x32010751, type=0x2) returned 0x1900010 [0216.222] GetCurrentObject (hdc=0x32010751, type=0x7) returned 0x11050637 [0216.222] GetCurrentObject (hdc=0x32010751, type=0x6) returned 0x18a0048 [0216.222] SaveDC (hdc=0x32010751) returned 2 [0216.222] GetNearestColor (hdc=0x32010751, color=0xf0f0f0) returned 0xf0f0f0 [0216.222] CreateSolidBrush (color=0xf0f0f0) returned 0x70100686 [0216.222] FillRect (hDC=0x32010751, lprc=0x5daee0, hbr=0x70100686) returned 1 [0216.222] DeleteObject (ho=0x70100686) returned 1 [0216.222] RestoreDC (hdc=0x32010751, nSavedDC=-1) returned 1 [0216.222] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.223] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.223] GetSystemMetrics (nIndex=42) returned 0 [0216.223] CoTaskMemAlloc (cb=0x20) returned 0x89cf50 [0216.223] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cf50, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.223] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cf50) returned 0xd [0216.223] CoTaskMemFree (pv=0x89cf50) [0216.223] RestoreDC (hdc=0x32010751, nSavedDC=-1) returned 1 [0216.223] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.223] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010751) returned 0x0 [0216.223] IsAppThemed () returned 0x1 [0216.223] GetThemeAppProperties () returned 0x3 [0216.224] GetThemeAppProperties () returned 0x3 [0216.224] IsAppThemed () returned 0x1 [0216.224] GetThemeAppProperties () returned 0x3 [0216.224] GetThemeAppProperties () returned 0x3 [0216.224] IsThemePartDefined () returned 0x1 [0216.224] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0216.224] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.224] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0216.224] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f10) returned 0x0 [0216.224] GdipIsMatrixIdentity (matrix=0x1c326f10, result=0x5dbca0) returned 0x0 [0216.224] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec50 [0216.224] GdipGetMatrixElements (matrix=0x1c326f10, matrixOut=0x89ec50) returned 0x0 [0216.224] LocalFree (hMem=0x89ec50) returned 0x0 [0216.224] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed50 [0216.224] GdipGetMatrixElements (matrix=0x1c326f10, matrixOut=0x89ed50) returned 0x0 [0216.224] LocalFree (hMem=0x89ed50) returned 0x0 [0216.224] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.224] GdipDeleteMatrix (matrix=0x1c326f10) returned 0x0 [0216.224] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0216.224] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0216.224] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0216.224] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.225] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.225] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0216.225] GetCurrentObject (hdc=0x32010751, type=0x1) returned 0x1b00017 [0216.225] GetCurrentObject (hdc=0x32010751, type=0x2) returned 0x1900010 [0216.225] GetCurrentObject (hdc=0x32010751, type=0x7) returned 0x11050637 [0216.225] GetCurrentObject (hdc=0x32010751, type=0x6) returned 0x18a0048 [0216.225] SaveDC (hdc=0x32010751) returned 1 [0216.225] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7404063b [0216.225] GetClipRgn (hdc=0x32010751, hrgn=0x7404063b) returned 0 [0216.225] SelectClipRgn (hdc=0x32010751, hrgn=0x3c04074d) returned 2 [0216.226] DeleteObject (ho=0x7404063b) returned 1 [0216.226] DeleteObject (ho=0x3c04074d) returned 1 [0216.226] OffsetViewportOrgEx (in: hdc=0x32010751, x=0, y=0, lppt=0x27b8010 | out: lppt=0x27b8010) returned 1 [0216.226] IsAppThemed () returned 0x1 [0216.226] GetThemeAppProperties () returned 0x3 [0216.226] GetThemeAppProperties () returned 0x3 [0216.226] DrawThemeBackground () returned 0x0 [0216.226] RestoreDC (hdc=0x32010751, nSavedDC=-1) returned 1 [0216.226] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.226] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010751) returned 0x0 [0216.226] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0216.226] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.226] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0216.226] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327110) returned 0x0 [0216.226] GdipIsMatrixIdentity (matrix=0x1c327110, result=0x5dbc70) returned 0x0 [0216.226] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef90 [0216.226] GdipGetMatrixElements (matrix=0x1c327110, matrixOut=0x89ef90) returned 0x0 [0216.226] LocalFree (hMem=0x89ef90) returned 0x0 [0216.226] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea10 [0216.226] GdipGetMatrixElements (matrix=0x1c327110, matrixOut=0x89ea10) returned 0x0 [0216.226] LocalFree (hMem=0x89ea10) returned 0x0 [0216.227] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.227] GdipDeleteMatrix (matrix=0x1c327110) returned 0x0 [0216.227] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0216.227] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0216.227] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0216.227] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.227] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.227] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0216.227] GetCurrentObject (hdc=0x32010751, type=0x1) returned 0x1b00017 [0216.227] GetCurrentObject (hdc=0x32010751, type=0x2) returned 0x1900010 [0216.227] GetCurrentObject (hdc=0x32010751, type=0x7) returned 0x11050637 [0216.227] GetCurrentObject (hdc=0x32010751, type=0x6) returned 0x18a0048 [0216.227] SaveDC (hdc=0x32010751) returned 1 [0216.227] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d04074d [0216.227] GetClipRgn (hdc=0x32010751, hrgn=0x3d04074d) returned 0 [0216.227] SelectClipRgn (hdc=0x32010751, hrgn=0x7504063b) returned 2 [0216.227] DeleteObject (ho=0x3d04074d) returned 1 [0216.227] DeleteObject (ho=0x7504063b) returned 1 [0216.228] OffsetViewportOrgEx (in: hdc=0x32010751, x=0, y=0, lppt=0x27b8510 | out: lppt=0x27b8510) returned 1 [0216.228] IsAppThemed () returned 0x1 [0216.228] GetThemeAppProperties () returned 0x3 [0216.228] GetThemeAppProperties () returned 0x3 [0216.228] GetThemeBackgroundContentRect () returned 0x0 [0216.228] RestoreDC (hdc=0x32010751, nSavedDC=-1) returned 1 [0216.228] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.228] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010751) returned 0x0 [0216.228] IsAppThemed () returned 0x1 [0216.228] GetThemeAppProperties () returned 0x3 [0216.228] GetThemeAppProperties () returned 0x3 [0216.228] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0216.228] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0216.228] GetCurrentObject (hdc=0x32010751, type=0x1) returned 0x1b00017 [0216.228] GetCurrentObject (hdc=0x32010751, type=0x2) returned 0x1900010 [0216.228] GetCurrentObject (hdc=0x32010751, type=0x7) returned 0x11050637 [0216.229] GetCurrentObject (hdc=0x32010751, type=0x6) returned 0x18a0048 [0216.229] SaveDC (hdc=0x32010751) returned 1 [0216.229] GetTextAlign (hdc=0x32010751) returned 0x0 [0216.229] GetTextColor (hdc=0x32010751) returned 0x0 [0216.229] GetCurrentObject (hdc=0x32010751, type=0x6) returned 0x18a0048 [0216.229] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0216.229] SelectObject (hdc=0x32010751, h=0x290a0573) returned 0x18a0048 [0216.229] GetBkMode (hdc=0x32010751) returned 2 [0216.229] SetBkMode (hdc=0x32010751, mode=1) returned 2 [0216.229] DrawTextExW (in: hdc=0x32010751, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x2415, lpdtp=0x27b8a68 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0216.229] DrawTextExW (in: hdc=0x32010751, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x2015, lpdtp=0x27b8a68 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0216.230] RestoreDC (hdc=0x32010751, nSavedDC=-1) returned 1 [0216.230] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.230] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010751) returned 0x0 [0216.230] GetFocus () returned 0x0 [0216.230] IsAppThemed () returned 0x1 [0216.230] GetThemeAppProperties () returned 0x3 [0216.230] GetThemeAppProperties () returned 0x3 [0216.230] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0216.230] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x32010751, x1=0, y1=0, rop=0xcc0020) returned 1 [0216.230] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.230] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010751) returned 0x0 [0216.230] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0216.231] SelectObject (hdc=0x32010751, h=0x185000f) returned 0x11050637 [0216.231] DeleteDC (hdc=0x32010751) returned 1 [0216.231] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.231] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0216.231] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0216.231] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0216.231] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0216.231] WaitMessage () returned 1 [0216.316] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.316] IsWindowUnicode (hWnd=0x2021e) returned 1 [0216.316] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.317] TranslateMessage (lpMsg=0x5dd220) returned 0 [0216.317] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0216.317] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.317] IsWindowUnicode (hWnd=0x2021e) returned 1 [0216.317] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.317] TranslateMessage (lpMsg=0x5dd220) returned 0 [0216.317] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0216.317] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2a1, wParam=0x0, lParam=0x800a4) returned 0x0 [0216.317] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0216.317] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0216.317] WaitMessage () returned 1 [0216.440] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.440] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14c015e) returned 0x1 [0216.440] IsWindowUnicode (hWnd=0x2021e) returned 1 [0216.440] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.440] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14c015e) returned 0x1 [0216.440] GetDlgItem (hDlg=0x20160, nIDDlgItem=0) returned 0x0 [0216.440] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x210, wParam=0x201, lParam=0xca00f3) returned 0x0 [0216.440] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0216.440] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0216.441] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dd080) returned 0x0 [0216.441] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dd080) returned 0x0 [0216.441] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dd080) returned 0x0 [0216.442] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dcab0 | out: lpwndpl=0x5dcab0) returned 1 [0216.442] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x47, wParam=0x0, lParam=0x5dd080) returned 0x0 [0216.442] GetClientRect (in: hWnd=0x20160, lpRect=0x5dc850 | out: lpRect=0x5dc850) returned 1 [0216.442] GetWindowRect (in: hWnd=0x20160, lpRect=0x5dc850 | out: lpRect=0x5dc850) returned 1 [0216.443] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0216.443] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0216.443] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0216.443] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dcab0 | out: lpwndpl=0x5dcab0) returned 1 [0216.443] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x47, wParam=0x0, lParam=0x5dd080) returned 0x0 [0216.443] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dc850 | out: lpRect=0x5dc850) returned 1 [0216.443] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5dc850 | out: lpRect=0x5dc850) returned 1 [0216.444] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x47, wParam=0x0, lParam=0x5dd080) returned 0x0 [0216.445] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0216.445] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0216.445] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0216.445] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0216.445] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0216.445] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0216.446] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0216.447] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0216.447] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0216.447] GetFocus () returned 0x0 [0216.447] SetFocus (hWnd=0x2021e) returned 0x0 [0216.447] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0216.448] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0216.448] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0216.448] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0216.449] GetStockObject (i=5) returned 0x1900015 [0216.449] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0216.449] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xd, wParam=0x16, lParam=0x89f690) returned 0x15 [0216.449] GetDlgItem (hDlg=0x20160, nIDDlgItem=131614) returned 0x2021e [0216.449] SendMessageW (hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5dbd60) returned 0x0 [0216.449] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5dbd60) returned 0x0 [0216.449] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0216.449] SetCursor (hCursor=0x10003) returned 0x10003 [0216.449] TranslateMessage (lpMsg=0x5dd220) returned 0 [0216.449] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0216.449] GetKeyState (nVirtKey=1) returned -127 [0216.449] GetKeyState (nVirtKey=2) returned 0 [0216.449] GetKeyState (nVirtKey=4) returned 0 [0216.449] GetKeyState (nVirtKey=5) returned 0 [0216.449] GetKeyState (nVirtKey=6) returned 0 [0216.449] IsWindowVisible (hWnd=0x2021e) returned 1 [0216.449] IsWindowEnabled (hWnd=0x2021e) returned 1 [0216.450] SetFocus (hWnd=0x2021e) returned 0x2021e [0216.450] GetFocus () returned 0x2021e [0216.450] GetFocus () returned 0x2021e [0216.450] GetFocus () returned 0x2021e [0216.450] GetKeyState (nVirtKey=1) returned -127 [0216.450] GetKeyState (nVirtKey=2) returned 0 [0216.450] GetKeyState (nVirtKey=4) returned 0 [0216.450] GetKeyState (nVirtKey=5) returned 0 [0216.450] GetKeyState (nVirtKey=6) returned 0 [0216.450] GetCapture () returned 0x0 [0216.450] SetCapture (hWnd=0x2021e) returned 0x0 [0216.450] GetKeyState (nVirtKey=1) returned -127 [0216.450] GetKeyState (nVirtKey=2) returned 0 [0216.450] GetKeyState (nVirtKey=4) returned 0 [0216.450] GetKeyState (nVirtKey=5) returned 0 [0216.450] GetKeyState (nVirtKey=6) returned 0 [0216.450] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0216.450] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc870, bErase=0) returned 1 [0216.450] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.450] IsWindowUnicode (hWnd=0x2021e) returned 1 [0216.450] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.450] TranslateMessage (lpMsg=0x5dd220) returned 0 [0216.450] DispatchMessageW (lpMsg=0x5dd220) returned 0x1 [0216.450] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x27b8cf0, cPoints=0x1 | out: lpPoints=0x27b8cf0) returned 21233850 [0216.450] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0216.450] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc7c0, bErase=0) returned 1 [0216.451] UpdateWindow (hWnd=0x2021e) returned 1 [0216.451] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dbdd8 | out: lpPaint=0x5dbdd8) returned 0x1010749 [0216.451] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0216.451] CreateCompatibleDC (hdc=0x1010749) returned 0x38010751 [0216.451] SelectObject (hdc=0x38010751, h=0x11050637) returned 0x185000f [0216.451] GdipCreateFromHDC (hdc=0x38010751, graphics=0x5dbbe0) returned 0x0 [0216.452] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0216.452] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0216.452] GdipCreateMatrix (matrix=0x5dbd10) returned 0x0 [0216.452] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f90) returned 0x0 [0216.452] GdipIsMatrixIdentity (matrix=0x1c326f90, result=0x5dbd70) returned 0x0 [0216.452] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea50 [0216.452] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89ea50) returned 0x0 [0216.452] LocalFree (hMem=0x89ea50) returned 0x0 [0216.452] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.452] GdipDeleteMatrix (matrix=0x1c326f90) returned 0x0 [0216.452] GdipCreateRegion (region=0x5dbd10) returned 0x0 [0216.452] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.452] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbd40) returned 0x0 [0216.452] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dbe10) returned 0x0 [0216.452] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd710dbd) returned 0x0 [0216.452] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.452] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.453] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db200) returned 0x0 [0216.453] GetCurrentObject (hdc=0x38010751, type=0x1) returned 0x1b00017 [0216.453] GetCurrentObject (hdc=0x38010751, type=0x2) returned 0x1900010 [0216.453] GetCurrentObject (hdc=0x38010751, type=0x7) returned 0x11050637 [0216.453] GetCurrentObject (hdc=0x38010751, type=0x6) returned 0x18a0048 [0216.453] SaveDC (hdc=0x38010751) returned 1 [0216.453] GetNearestColor (hdc=0x38010751, color=0xf0f0f0) returned 0xf0f0f0 [0216.453] GetNearestColor (hdc=0x38010751, color=0xa0a0a0) returned 0xa0a0a0 [0216.453] GetNearestColor (hdc=0x38010751, color=0x696969) returned 0x696969 [0216.453] GetNearestColor (hdc=0x38010751, color=0xa0a0a0) returned 0xa0a0a0 [0216.453] GetNearestColor (hdc=0x38010751, color=0x0) returned 0x0 [0216.453] GetNearestColor (hdc=0x38010751, color=0xffffff) returned 0xffffff [0216.454] GetNearestColor (hdc=0x38010751, color=0xe5e5e5) returned 0xe5e5e5 [0216.454] GetNearestColor (hdc=0x38010751, color=0xd8d8d8) returned 0xd8d8d8 [0216.454] GetNearestColor (hdc=0x38010751, color=0x0) returned 0x0 [0216.454] RestoreDC (hdc=0x38010751, nSavedDC=-1) returned 1 [0216.454] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.454] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x38010751) returned 0x0 [0216.454] IsAppThemed () returned 0x1 [0216.454] GetThemeAppProperties () returned 0x3 [0216.454] GetThemeAppProperties () returned 0x3 [0216.454] IsAppThemed () returned 0x1 [0216.454] GetThemeAppProperties () returned 0x3 [0216.454] GetThemeAppProperties () returned 0x3 [0216.454] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db440, format=0x2415, lpdtp=0x27b9618 | out: lpchText="Submit Decryption Key", lprc=0x5db440) returned 13 [0216.454] IsAppThemed () returned 0x1 [0216.454] GetThemeAppProperties () returned 0x3 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] IsAppThemed () returned 0x1 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] IsAppThemed () returned 0x1 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] IsAppThemed () returned 0x1 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] IsThemePartDefined () returned 0x1 [0216.455] IsAppThemed () returned 0x1 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0216.455] IsAppThemed () returned 0x1 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] IsAppThemed () returned 0x1 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] GetThemeAppProperties () returned 0x3 [0216.455] IsThemePartDefined () returned 0x1 [0216.455] GdipCreateRegion (region=0x5db520) returned 0x0 [0216.455] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.455] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0216.455] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d10) returned 0x0 [0216.455] GdipIsMatrixIdentity (matrix=0x1c326d10, result=0x5db580) returned 0x0 [0216.455] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f210 [0216.455] GdipGetMatrixElements (matrix=0x1c326d10, matrixOut=0x89f210) returned 0x0 [0216.456] LocalFree (hMem=0x89f210) returned 0x0 [0216.456] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb50 [0216.456] GdipGetMatrixElements (matrix=0x1c326d10, matrixOut=0x89eb50) returned 0x0 [0216.456] LocalFree (hMem=0x89eb50) returned 0x0 [0216.456] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.456] GdipDeleteMatrix (matrix=0x1c326d10) returned 0x0 [0216.456] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db5d0) returned 0x0 [0216.456] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db590) returned 0x0 [0216.456] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db590) returned 0x0 [0216.456] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.456] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.456] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db600) returned 0x0 [0216.456] GetCurrentObject (hdc=0x38010751, type=0x1) returned 0x1b00017 [0216.456] GetCurrentObject (hdc=0x38010751, type=0x2) returned 0x1900010 [0216.456] GetCurrentObject (hdc=0x38010751, type=0x7) returned 0x11050637 [0216.456] GetCurrentObject (hdc=0x38010751, type=0x6) returned 0x18a0048 [0216.456] SaveDC (hdc=0x38010751) returned 1 [0216.456] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7604063b [0216.457] GetClipRgn (hdc=0x38010751, hrgn=0x7604063b) returned 0 [0216.457] SelectClipRgn (hdc=0x38010751, hrgn=0x4104074d) returned 2 [0216.457] DeleteObject (ho=0x7604063b) returned 1 [0216.457] DeleteObject (ho=0x4104074d) returned 1 [0216.457] OffsetViewportOrgEx (in: hdc=0x38010751, x=0, y=0, lppt=0x27ba028 | out: lppt=0x27ba028) returned 1 [0216.460] DrawThemeParentBackground () returned 0x0 [0216.460] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db040 | out: lpwndpl=0x5db040) returned 1 [0216.460] GetClientRect (in: hWnd=0x20160, lpRect=0x5daec0 | out: lpRect=0x5daec0) returned 1 [0216.460] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.460] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.460] GetSystemMetrics (nIndex=42) returned 0 [0216.460] CoTaskMemAlloc (cb=0x20) returned 0x89cf50 [0216.460] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cf50, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.460] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cf50) returned 0xd [0216.460] CoTaskMemFree (pv=0x89cf50) [0216.461] GetClientRect (in: hWnd=0x20160, lpRect=0x5dac70 | out: lpRect=0x5dac70) returned 1 [0216.461] GetCurrentObject (hdc=0x38010751, type=0x1) returned 0x1b00017 [0216.461] GetCurrentObject (hdc=0x38010751, type=0x2) returned 0x1900010 [0216.461] GetCurrentObject (hdc=0x38010751, type=0x7) returned 0x11050637 [0216.461] GetCurrentObject (hdc=0x38010751, type=0x6) returned 0x18a0048 [0216.461] SaveDC (hdc=0x38010751) returned 2 [0216.461] GetNearestColor (hdc=0x38010751, color=0xf0f0f0) returned 0xf0f0f0 [0216.461] CreateSolidBrush (color=0xf0f0f0) returned 0x71100686 [0216.461] FillRect (hDC=0x38010751, lprc=0x5da7a0, hbr=0x71100686) returned 1 [0216.461] DeleteObject (ho=0x71100686) returned 1 [0216.461] RestoreDC (hdc=0x38010751, nSavedDC=-1) returned 1 [0216.461] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.461] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.461] GetSystemMetrics (nIndex=42) returned 0 [0216.461] CoTaskMemAlloc (cb=0x20) returned 0x89d550 [0216.461] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d550, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.461] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d550) returned 0xd [0216.461] CoTaskMemFree (pv=0x89d550) [0216.461] GetClientRect (in: hWnd=0x20160, lpRect=0x5dab70 | out: lpRect=0x5dab70) returned 1 [0216.462] GetCurrentObject (hdc=0x38010751, type=0x1) returned 0x1b00017 [0216.462] GetCurrentObject (hdc=0x38010751, type=0x2) returned 0x1900010 [0216.462] GetCurrentObject (hdc=0x38010751, type=0x7) returned 0x11050637 [0216.462] GetCurrentObject (hdc=0x38010751, type=0x6) returned 0x18a0048 [0216.462] SaveDC (hdc=0x38010751) returned 2 [0216.462] GetNearestColor (hdc=0x38010751, color=0xf0f0f0) returned 0xf0f0f0 [0216.462] CreateSolidBrush (color=0xf0f0f0) returned 0x72100686 [0216.462] FillRect (hDC=0x38010751, lprc=0x5da6a0, hbr=0x72100686) returned 1 [0216.462] DeleteObject (ho=0x72100686) returned 1 [0216.462] RestoreDC (hdc=0x38010751, nSavedDC=-1) returned 1 [0216.462] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.462] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.462] GetSystemMetrics (nIndex=42) returned 0 [0216.462] CoTaskMemAlloc (cb=0x20) returned 0x89cfb0 [0216.462] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cfb0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.462] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cfb0) returned 0xd [0216.462] CoTaskMemFree (pv=0x89cfb0) [0216.462] RestoreDC (hdc=0x38010751, nSavedDC=-1) returned 1 [0216.462] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.462] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x38010751) returned 0x0 [0216.463] IsAppThemed () returned 0x1 [0216.463] GetThemeAppProperties () returned 0x3 [0216.463] GetThemeAppProperties () returned 0x3 [0216.463] IsAppThemed () returned 0x1 [0216.463] GetThemeAppProperties () returned 0x3 [0216.463] GetThemeAppProperties () returned 0x3 [0216.463] IsThemePartDefined () returned 0x1 [0216.463] GdipCreateRegion (region=0x5db400) returned 0x0 [0216.463] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.463] GdipCreateMatrix (matrix=0x5db400) returned 0x0 [0216.463] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f10) returned 0x0 [0216.463] GdipIsMatrixIdentity (matrix=0x1c326f10, result=0x5db460) returned 0x0 [0216.463] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f310 [0216.463] GdipGetMatrixElements (matrix=0x1c326f10, matrixOut=0x89f310) returned 0x0 [0216.463] LocalFree (hMem=0x89f310) returned 0x0 [0216.463] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e7d0 [0216.463] GdipGetMatrixElements (matrix=0x1c326f10, matrixOut=0x89e7d0) returned 0x0 [0216.463] LocalFree (hMem=0x89e7d0) returned 0x0 [0216.463] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.463] GdipDeleteMatrix (matrix=0x1c326f10) returned 0x0 [0216.463] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db4b0) returned 0x0 [0216.463] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db470) returned 0x0 [0216.463] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db470) returned 0x0 [0216.463] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.463] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.463] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4e0) returned 0x0 [0216.463] GetCurrentObject (hdc=0x38010751, type=0x1) returned 0x1b00017 [0216.463] GetCurrentObject (hdc=0x38010751, type=0x2) returned 0x1900010 [0216.463] GetCurrentObject (hdc=0x38010751, type=0x7) returned 0x11050637 [0216.464] GetCurrentObject (hdc=0x38010751, type=0x6) returned 0x18a0048 [0216.464] SaveDC (hdc=0x38010751) returned 1 [0216.464] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4204074d [0216.464] GetClipRgn (hdc=0x38010751, hrgn=0x4204074d) returned 0 [0216.464] SelectClipRgn (hdc=0x38010751, hrgn=0x7804063b) returned 2 [0216.464] DeleteObject (ho=0x4204074d) returned 1 [0216.464] DeleteObject (ho=0x7804063b) returned 1 [0216.464] OffsetViewportOrgEx (in: hdc=0x38010751, x=0, y=0, lppt=0x27bad28 | out: lppt=0x27bad28) returned 1 [0216.464] IsAppThemed () returned 0x1 [0216.464] GetThemeAppProperties () returned 0x3 [0216.464] GetThemeAppProperties () returned 0x3 [0216.464] DrawThemeBackground () returned 0x0 [0216.464] RestoreDC (hdc=0x38010751, nSavedDC=-1) returned 1 [0216.464] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.464] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x38010751) returned 0x0 [0216.464] GdipCreateRegion (region=0x5db3d0) returned 0x0 [0216.464] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.464] GdipCreateMatrix (matrix=0x5db3d0) returned 0x0 [0216.464] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e10) returned 0x0 [0216.464] GdipIsMatrixIdentity (matrix=0x1c326e10, result=0x5db430) returned 0x0 [0216.464] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e990 [0216.464] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89e990) returned 0x0 [0216.464] LocalFree (hMem=0x89e990) returned 0x0 [0216.464] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f090 [0216.464] GdipGetMatrixElements (matrix=0x1c326e10, matrixOut=0x89f090) returned 0x0 [0216.464] LocalFree (hMem=0x89f090) returned 0x0 [0216.465] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.465] GdipDeleteMatrix (matrix=0x1c326e10) returned 0x0 [0216.465] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db480) returned 0x0 [0216.465] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db440) returned 0x0 [0216.465] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db440) returned 0x0 [0216.465] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.465] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.465] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4b0) returned 0x0 [0216.465] GetCurrentObject (hdc=0x38010751, type=0x1) returned 0x1b00017 [0216.465] GetCurrentObject (hdc=0x38010751, type=0x2) returned 0x1900010 [0216.465] GetCurrentObject (hdc=0x38010751, type=0x7) returned 0x11050637 [0216.465] GetCurrentObject (hdc=0x38010751, type=0x6) returned 0x18a0048 [0216.465] SaveDC (hdc=0x38010751) returned 1 [0216.465] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7904063b [0216.465] GetClipRgn (hdc=0x38010751, hrgn=0x7904063b) returned 0 [0216.465] SelectClipRgn (hdc=0x38010751, hrgn=0x4304074d) returned 2 [0216.465] DeleteObject (ho=0x7904063b) returned 1 [0216.465] DeleteObject (ho=0x4304074d) returned 1 [0216.465] OffsetViewportOrgEx (in: hdc=0x38010751, x=0, y=0, lppt=0x27bb228 | out: lppt=0x27bb228) returned 1 [0216.465] IsAppThemed () returned 0x1 [0216.465] GetThemeAppProperties () returned 0x3 [0216.465] GetThemeAppProperties () returned 0x3 [0216.465] GetThemeBackgroundContentRect () returned 0x0 [0216.465] RestoreDC (hdc=0x38010751, nSavedDC=-1) returned 1 [0216.465] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.465] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x38010751) returned 0x0 [0216.465] IsAppThemed () returned 0x1 [0216.466] GetThemeAppProperties () returned 0x3 [0216.466] GetThemeAppProperties () returned 0x3 [0216.466] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5db5a0) returned 0x0 [0216.466] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db580) returned 0x0 [0216.466] GetCurrentObject (hdc=0x38010751, type=0x1) returned 0x1b00017 [0216.466] GetCurrentObject (hdc=0x38010751, type=0x2) returned 0x1900010 [0216.466] GetCurrentObject (hdc=0x38010751, type=0x7) returned 0x11050637 [0216.466] GetCurrentObject (hdc=0x38010751, type=0x6) returned 0x18a0048 [0216.466] SaveDC (hdc=0x38010751) returned 1 [0216.466] GetTextAlign (hdc=0x38010751) returned 0x0 [0216.466] GetTextColor (hdc=0x38010751) returned 0x0 [0216.466] GetCurrentObject (hdc=0x38010751, type=0x6) returned 0x18a0048 [0216.466] GetObjectW (in: h=0x18a0048, c=92, pv=0x5daff0 | out: pv=0x5daff0) returned 92 [0216.466] SelectObject (hdc=0x38010751, h=0x290a0573) returned 0x18a0048 [0216.466] GetBkMode (hdc=0x38010751) returned 2 [0216.466] SetBkMode (hdc=0x38010751, mode=1) returned 2 [0216.466] DrawTextExW (in: hdc=0x38010751, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db080, format=0x2415, lpdtp=0x27bb780 | out: lpchText="Submit Decryption Key", lprc=0x5db080) returned 13 [0216.466] DrawTextExW (in: hdc=0x38010751, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db130, format=0x2015, lpdtp=0x27bb780 | out: lpchText="Submit Decryption Key", lprc=0x5db130) returned 13 [0216.467] RestoreDC (hdc=0x38010751, nSavedDC=-1) returned 1 [0216.467] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.467] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x38010751) returned 0x0 [0216.467] GetFocus () returned 0x2021e [0216.467] IsAppThemed () returned 0x1 [0216.467] GetThemeAppProperties () returned 0x3 [0216.467] GetThemeAppProperties () returned 0x3 [0216.467] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbce0) returned 0x0 [0216.467] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0x38010751, x1=0, y1=0, rop=0xcc0020) returned 1 [0216.467] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.467] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x38010751) returned 0x0 [0216.467] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0216.467] SelectObject (hdc=0x38010751, h=0x185000f) returned 0x11050637 [0216.467] DeleteDC (hdc=0x38010751) returned 1 [0216.468] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.468] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0216.468] EndPaint (hWnd=0x2021e, lpPaint=0x5dbde8) returned 1 [0216.468] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x27bb8e8, cPoints=0x1 | out: lpPoints=0x27bb8e8) returned 21233850 [0216.468] WindowFromPoint (Point=0x14c0000015e) returned 0x2021e [0216.468] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x14c015e) returned 0x1 [0216.468] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0216.468] NotifyWinEvent (event=0x800c, hwnd=0x2021e, idObject=-4, idChild=0) [0216.468] SendMessageW (hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0216.468] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0216.468] GetProcessWindowStation () returned 0xc8 [0216.468] GetActiveWindow () returned 0x20160 [0216.469] GetCurrentActCtx (in: lphActCtx=0x5dc620 | out: lphActCtx=0x5dc620*=0x811d28) returned 1 [0216.469] GetCurrentThreadId () returned 0xe28 [0216.469] EnumThreadWindows (dwThreadId=0xe28, lpfn=0x216432c, lParam=0x0) returned 1 [0216.469] IsWindowVisible (hWnd=0x20160) returned 1 [0216.469] IsWindowEnabled (hWnd=0x20160) returned 1 [0216.469] IsWindowVisible (hWnd=0x901f6) returned 1 [0216.469] IsWindowEnabled (hWnd=0x901f6) returned 0 [0216.469] IsWindowVisible (hWnd=0x20232) returned 0 [0216.469] IsWindowVisible (hWnd=0x20224) returned 0 [0216.469] IsWindowVisible (hWnd=0x50020) returned 0 [0216.469] IsWindowVisible (hWnd=0x20230) returned 0 [0216.469] IsWindowVisible (hWnd=0x60152) returned 0 [0216.469] GetActiveWindow () returned 0x20160 [0216.469] GetFocus () returned 0x2021e [0216.469] IsWindow (hWnd=0x20160) returned 1 [0216.469] EnableWindow (hWnd=0x20160, bEnable=0) returned 0 [0216.469] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0216.470] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0216.470] MessageBoxW (hWnd=0x20160, lpText="The decryption key has bad format.", lpCaption="Error", uType=0x10) returned 1 [0216.472] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0216.480] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x6021c) returned 0x1 [0216.481] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0216.481] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0216.481] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0216.482] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0216.482] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0216.482] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0216.483] GetFocus () returned 0x60216 [0216.483] IsChild (hWndParent=0x20160, hWnd=0x60216) returned 0 [0216.483] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x8, wParam=0x60216, lParam=0x0) returned 0x0 [0216.483] GetCapture () returned 0x2021e [0216.483] ReleaseCapture () returned 1 [0216.483] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0216.483] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0216.484] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0216.485] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0216.486] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0216.486] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0xa0100d0 [0216.486] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0216.486] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffffa8010713 [0216.486] SelectObject (hdc=0xffffffffa8010713, h=0x11050637) returned 0x185000f [0216.486] GdipCreateFromHDC (hdc=0xffffffffa8010713, graphics=0x5db3f0) returned 0x0 [0216.486] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0216.486] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0216.486] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0216.486] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327090) returned 0x0 [0216.486] GdipIsMatrixIdentity (matrix=0x1c327090, result=0x5db580) returned 0x0 [0216.486] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef10 [0216.486] GdipGetMatrixElements (matrix=0x1c327090, matrixOut=0x89ef10) returned 0x0 [0216.486] LocalFree (hMem=0x89ef10) returned 0x0 [0216.486] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.487] GdipDeleteMatrix (matrix=0x1c327090) returned 0x0 [0216.487] GdipCreateRegion (region=0x5db520) returned 0x0 [0216.487] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.487] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0216.487] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0216.487] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd6f0dbd) returned 0x0 [0216.487] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.487] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.487] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0216.487] GetCurrentObject (hdc=0xffffffffa8010713, type=0x1) returned 0x1b00017 [0216.487] GetCurrentObject (hdc=0xffffffffa8010713, type=0x2) returned 0x1900010 [0216.487] GetCurrentObject (hdc=0xffffffffa8010713, type=0x7) returned 0x11050637 [0216.487] GetCurrentObject (hdc=0xffffffffa8010713, type=0x6) returned 0x18a0048 [0216.488] SaveDC (hdc=0xffffffffa8010713) returned 1 [0216.488] GetNearestColor (hdc=0xffffffffa8010713, color=0xf0f0f0) returned 0xf0f0f0 [0216.488] GetNearestColor (hdc=0xffffffffa8010713, color=0xa0a0a0) returned 0xa0a0a0 [0216.488] GetNearestColor (hdc=0xffffffffa8010713, color=0x696969) returned 0x696969 [0216.496] GetNearestColor (hdc=0xffffffffa8010713, color=0xa0a0a0) returned 0xa0a0a0 [0216.496] GetNearestColor (hdc=0xffffffffa8010713, color=0x0) returned 0x0 [0216.496] GetNearestColor (hdc=0xffffffffa8010713, color=0xffffff) returned 0xffffff [0216.496] GetNearestColor (hdc=0xffffffffa8010713, color=0xe5e5e5) returned 0xe5e5e5 [0216.496] GetNearestColor (hdc=0xffffffffa8010713, color=0xd8d8d8) returned 0xd8d8d8 [0216.497] GetNearestColor (hdc=0xffffffffa8010713, color=0x0) returned 0x0 [0216.497] RestoreDC (hdc=0xffffffffa8010713, nSavedDC=-1) returned 1 [0216.497] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.497] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa8010713) returned 0x0 [0216.497] IsAppThemed () returned 0x1 [0216.497] GetThemeAppProperties () returned 0x3 [0216.497] GetThemeAppProperties () returned 0x3 [0216.497] IsAppThemed () returned 0x1 [0216.497] GetThemeAppProperties () returned 0x3 [0216.497] GetThemeAppProperties () returned 0x3 [0216.497] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x2415, lpdtp=0x27bc500 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0216.497] IsAppThemed () returned 0x1 [0216.497] GetThemeAppProperties () returned 0x3 [0216.497] GetThemeAppProperties () returned 0x3 [0216.498] IsAppThemed () returned 0x1 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] IsAppThemed () returned 0x1 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] IsAppThemed () returned 0x1 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] IsThemePartDefined () returned 0x1 [0216.498] IsAppThemed () returned 0x1 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0216.498] IsAppThemed () returned 0x1 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] IsAppThemed () returned 0x1 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] GetThemeAppProperties () returned 0x3 [0216.498] IsThemePartDefined () returned 0x1 [0216.498] GdipCreateRegion (region=0x5dad30) returned 0x0 [0216.498] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.498] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0216.498] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e50) returned 0x0 [0216.498] GdipIsMatrixIdentity (matrix=0x1c326e50, result=0x5dad90) returned 0x0 [0216.499] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e990 [0216.499] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89e990) returned 0x0 [0216.499] LocalFree (hMem=0x89e990) returned 0x0 [0216.499] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f0d0 [0216.499] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89f0d0) returned 0x0 [0216.499] LocalFree (hMem=0x89f0d0) returned 0x0 [0216.499] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.499] GdipDeleteMatrix (matrix=0x1c326e50) returned 0x0 [0216.499] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0216.499] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0216.499] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0216.499] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.499] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.499] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0216.499] GetCurrentObject (hdc=0xffffffffa8010713, type=0x1) returned 0x1b00017 [0216.499] GetCurrentObject (hdc=0xffffffffa8010713, type=0x2) returned 0x1900010 [0216.499] GetCurrentObject (hdc=0xffffffffa8010713, type=0x7) returned 0x11050637 [0216.499] GetCurrentObject (hdc=0xffffffffa8010713, type=0x6) returned 0x18a0048 [0216.500] SaveDC (hdc=0xffffffffa8010713) returned 1 [0216.500] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4404074d [0216.500] GetClipRgn (hdc=0xffffffffa8010713, hrgn=0x4404074d) returned 0 [0216.500] SelectClipRgn (hdc=0xffffffffa8010713, hrgn=0x7f04063b) returned 2 [0216.500] DeleteObject (ho=0x4404074d) returned 1 [0216.500] DeleteObject (ho=0x7f04063b) returned 1 [0216.500] OffsetViewportOrgEx (in: hdc=0xffffffffa8010713, x=0, y=0, lppt=0x27bcf10 | out: lppt=0x27bcf10) returned 1 [0216.500] DrawThemeParentBackground () returned 0x0 [0216.501] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0216.501] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0216.501] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.501] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.501] GetSystemMetrics (nIndex=42) returned 0 [0216.501] CoTaskMemAlloc (cb=0x20) returned 0x89d280 [0216.501] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d280, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.501] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d280) returned 0xd [0216.501] CoTaskMemFree (pv=0x89d280) [0216.501] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0216.501] GetCurrentObject (hdc=0xffffffffa8010713, type=0x1) returned 0x1b00017 [0216.501] GetCurrentObject (hdc=0xffffffffa8010713, type=0x2) returned 0x1900010 [0216.501] GetCurrentObject (hdc=0xffffffffa8010713, type=0x7) returned 0x11050637 [0216.501] GetCurrentObject (hdc=0xffffffffa8010713, type=0x6) returned 0x18a0048 [0216.501] SaveDC (hdc=0xffffffffa8010713) returned 2 [0216.501] GetNearestColor (hdc=0xffffffffa8010713, color=0xf0f0f0) returned 0xf0f0f0 [0216.502] CreateSolidBrush (color=0xf0f0f0) returned 0x73100686 [0216.502] FillRect (hDC=0xffffffffa8010713, lprc=0x5d9fb0, hbr=0x73100686) returned 1 [0216.502] DeleteObject (ho=0x73100686) returned 1 [0216.502] RestoreDC (hdc=0xffffffffa8010713, nSavedDC=-1) returned 1 [0216.502] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.502] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.502] GetSystemMetrics (nIndex=42) returned 0 [0216.502] CoTaskMemAlloc (cb=0x20) returned 0x89ce30 [0216.502] GetWindowTextW (in: hWnd=0x20160, lpString=0x89ce30, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.502] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89ce30) returned 0xd [0216.502] CoTaskMemFree (pv=0x89ce30) [0216.502] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0216.502] GetCurrentObject (hdc=0xffffffffa8010713, type=0x1) returned 0x1b00017 [0216.502] GetCurrentObject (hdc=0xffffffffa8010713, type=0x2) returned 0x1900010 [0216.502] GetCurrentObject (hdc=0xffffffffa8010713, type=0x7) returned 0x11050637 [0216.502] GetCurrentObject (hdc=0xffffffffa8010713, type=0x6) returned 0x18a0048 [0216.502] SaveDC (hdc=0xffffffffa8010713) returned 2 [0216.503] GetNearestColor (hdc=0xffffffffa8010713, color=0xf0f0f0) returned 0xf0f0f0 [0216.503] CreateSolidBrush (color=0xf0f0f0) returned 0x74100686 [0216.503] FillRect (hDC=0xffffffffa8010713, lprc=0x5d9eb0, hbr=0x74100686) returned 1 [0216.503] DeleteObject (ho=0x74100686) returned 1 [0216.503] RestoreDC (hdc=0xffffffffa8010713, nSavedDC=-1) returned 1 [0216.503] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.503] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.503] GetSystemMetrics (nIndex=42) returned 0 [0216.503] CoTaskMemAlloc (cb=0x20) returned 0x89cfe0 [0216.503] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cfe0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.503] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cfe0) returned 0xd [0216.503] CoTaskMemFree (pv=0x89cfe0) [0216.503] RestoreDC (hdc=0xffffffffa8010713, nSavedDC=-1) returned 1 [0216.503] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.503] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa8010713) returned 0x0 [0216.503] IsAppThemed () returned 0x1 [0216.503] GetThemeAppProperties () returned 0x3 [0216.504] GetThemeAppProperties () returned 0x3 [0216.504] IsAppThemed () returned 0x1 [0216.505] GetThemeAppProperties () returned 0x3 [0216.505] GetThemeAppProperties () returned 0x3 [0216.505] IsThemePartDefined () returned 0x1 [0216.505] GdipCreateRegion (region=0x5dac10) returned 0x0 [0216.505] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.505] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0216.505] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327050) returned 0x0 [0216.505] GdipIsMatrixIdentity (matrix=0x1c327050, result=0x5dac70) returned 0x0 [0216.505] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f250 [0216.505] GdipGetMatrixElements (matrix=0x1c327050, matrixOut=0x89f250) returned 0x0 [0216.505] LocalFree (hMem=0x89f250) returned 0x0 [0216.505] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb10 [0216.505] GdipGetMatrixElements (matrix=0x1c327050, matrixOut=0x89eb10) returned 0x0 [0216.505] LocalFree (hMem=0x89eb10) returned 0x0 [0216.505] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.506] GdipDeleteMatrix (matrix=0x1c327050) returned 0x0 [0216.506] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0216.506] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0216.506] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0216.506] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.506] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.506] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0216.506] GetCurrentObject (hdc=0xffffffffa8010713, type=0x1) returned 0x1b00017 [0216.506] GetCurrentObject (hdc=0xffffffffa8010713, type=0x2) returned 0x1900010 [0216.506] GetCurrentObject (hdc=0xffffffffa8010713, type=0x7) returned 0x11050637 [0216.506] GetCurrentObject (hdc=0xffffffffa8010713, type=0x6) returned 0x18a0048 [0216.506] SaveDC (hdc=0xffffffffa8010713) returned 1 [0216.506] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8004063b [0216.506] GetClipRgn (hdc=0xffffffffa8010713, hrgn=0xffffffff8004063b) returned 0 [0216.506] SelectClipRgn (hdc=0xffffffffa8010713, hrgn=0x4604074d) returned 2 [0216.506] DeleteObject (ho=0xffffffff8004063b) returned 1 [0216.506] DeleteObject (ho=0x4604074d) returned 1 [0216.507] OffsetViewportOrgEx (in: hdc=0xffffffffa8010713, x=0, y=0, lppt=0x27bdc10 | out: lppt=0x27bdc10) returned 1 [0216.507] IsAppThemed () returned 0x1 [0216.507] GetThemeAppProperties () returned 0x3 [0216.507] GetThemeAppProperties () returned 0x3 [0216.507] DrawThemeBackground () returned 0x0 [0216.507] RestoreDC (hdc=0xffffffffa8010713, nSavedDC=-1) returned 1 [0216.507] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.507] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa8010713) returned 0x0 [0216.507] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0216.507] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.507] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0216.507] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d50) returned 0x0 [0216.507] GdipIsMatrixIdentity (matrix=0x1c326d50, result=0x5dac40) returned 0x0 [0216.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f290 [0216.507] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89f290) returned 0x0 [0216.507] LocalFree (hMem=0x89f290) returned 0x0 [0216.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f5d0 [0216.507] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89f5d0) returned 0x0 [0216.507] LocalFree (hMem=0x89f5d0) returned 0x0 [0216.507] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.507] GdipDeleteMatrix (matrix=0x1c326d50) returned 0x0 [0216.508] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0216.508] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0216.508] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0216.508] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.508] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.508] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0216.508] GetCurrentObject (hdc=0xffffffffa8010713, type=0x1) returned 0x1b00017 [0216.508] GetCurrentObject (hdc=0xffffffffa8010713, type=0x2) returned 0x1900010 [0216.508] GetCurrentObject (hdc=0xffffffffa8010713, type=0x7) returned 0x11050637 [0216.508] GetCurrentObject (hdc=0xffffffffa8010713, type=0x6) returned 0x18a0048 [0216.508] SaveDC (hdc=0xffffffffa8010713) returned 1 [0216.508] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4704074d [0216.508] GetClipRgn (hdc=0xffffffffa8010713, hrgn=0x4704074d) returned 0 [0216.508] SelectClipRgn (hdc=0xffffffffa8010713, hrgn=0xffffffff8104063b) returned 2 [0216.508] DeleteObject (ho=0x4704074d) returned 1 [0216.508] DeleteObject (ho=0xffffffff8104063b) returned 1 [0216.509] OffsetViewportOrgEx (in: hdc=0xffffffffa8010713, x=0, y=0, lppt=0x27be110 | out: lppt=0x27be110) returned 1 [0216.509] IsAppThemed () returned 0x1 [0216.509] GetThemeAppProperties () returned 0x3 [0216.509] GetThemeAppProperties () returned 0x3 [0216.509] GetThemeBackgroundContentRect () returned 0x0 [0216.509] RestoreDC (hdc=0xffffffffa8010713, nSavedDC=-1) returned 1 [0216.509] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.509] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa8010713) returned 0x0 [0216.509] IsAppThemed () returned 0x1 [0216.509] GetThemeAppProperties () returned 0x3 [0216.509] GetThemeAppProperties () returned 0x3 [0216.509] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0216.509] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0216.509] GetCurrentObject (hdc=0xffffffffa8010713, type=0x1) returned 0x1b00017 [0216.509] GetCurrentObject (hdc=0xffffffffa8010713, type=0x2) returned 0x1900010 [0216.509] GetCurrentObject (hdc=0xffffffffa8010713, type=0x7) returned 0x11050637 [0216.509] GetCurrentObject (hdc=0xffffffffa8010713, type=0x6) returned 0x18a0048 [0216.510] SaveDC (hdc=0xffffffffa8010713) returned 1 [0216.510] GetTextAlign (hdc=0xffffffffa8010713) returned 0x0 [0216.510] GetTextColor (hdc=0xffffffffa8010713) returned 0x0 [0216.510] GetCurrentObject (hdc=0xffffffffa8010713, type=0x6) returned 0x18a0048 [0216.510] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0216.510] SelectObject (hdc=0xffffffffa8010713, h=0x290a0573) returned 0x18a0048 [0216.510] GetBkMode (hdc=0xffffffffa8010713) returned 2 [0216.510] SetBkMode (hdc=0xffffffffa8010713, mode=1) returned 2 [0216.510] DrawTextExW (in: hdc=0xffffffffa8010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x2415, lpdtp=0x27be668 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0216.511] DrawTextExW (in: hdc=0xffffffffa8010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x2015, lpdtp=0x27be668 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0216.511] RestoreDC (hdc=0xffffffffa8010713, nSavedDC=-1) returned 1 [0216.511] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.511] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa8010713) returned 0x0 [0216.511] GetFocus () returned 0x60216 [0216.511] IsAppThemed () returned 0x1 [0216.511] GetThemeAppProperties () returned 0x3 [0216.511] GetThemeAppProperties () returned 0x3 [0216.511] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0216.512] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0xffffffffa8010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0216.512] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.512] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa8010713) returned 0x0 [0216.512] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0216.512] SelectObject (hdc=0xffffffffa8010713, h=0x185000f) returned 0x11050637 [0216.512] DeleteDC (hdc=0xffffffffa8010713) returned 1 [0216.512] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.512] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0216.512] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0216.512] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0216.512] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0216.512] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0xa0100d0 [0216.513] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0216.513] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffffa9010713 [0216.513] SelectObject (hdc=0xffffffffa9010713, h=0x11050637) returned 0x185000f [0216.513] GdipCreateFromHDC (hdc=0xffffffffa9010713, graphics=0x5db3f0) returned 0x0 [0216.514] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0216.514] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0216.514] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0216.514] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327250) returned 0x0 [0216.514] GdipIsMatrixIdentity (matrix=0x1c327250, result=0x5db580) returned 0x0 [0216.514] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef50 [0216.514] GdipGetMatrixElements (matrix=0x1c327250, matrixOut=0x89ef50) returned 0x0 [0216.514] LocalFree (hMem=0x89ef50) returned 0x0 [0216.514] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.514] GdipDeleteMatrix (matrix=0x1c327250) returned 0x0 [0216.514] GdipCreateRegion (region=0x5db520) returned 0x0 [0216.514] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.514] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0216.514] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0216.514] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd6d0dbd) returned 0x0 [0216.514] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.514] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.515] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0216.515] GetCurrentObject (hdc=0xffffffffa9010713, type=0x1) returned 0x1b00017 [0216.515] GetCurrentObject (hdc=0xffffffffa9010713, type=0x2) returned 0x1900010 [0216.515] GetCurrentObject (hdc=0xffffffffa9010713, type=0x7) returned 0x11050637 [0216.515] GetCurrentObject (hdc=0xffffffffa9010713, type=0x6) returned 0x18a0048 [0216.515] SaveDC (hdc=0xffffffffa9010713) returned 1 [0216.515] GetNearestColor (hdc=0xffffffffa9010713, color=0xf0f0f0) returned 0xf0f0f0 [0216.515] GetNearestColor (hdc=0xffffffffa9010713, color=0xa0a0a0) returned 0xa0a0a0 [0216.515] GetNearestColor (hdc=0xffffffffa9010713, color=0x696969) returned 0x696969 [0216.515] GetNearestColor (hdc=0xffffffffa9010713, color=0xa0a0a0) returned 0xa0a0a0 [0216.515] GetNearestColor (hdc=0xffffffffa9010713, color=0x0) returned 0x0 [0216.516] GetNearestColor (hdc=0xffffffffa9010713, color=0xffffff) returned 0xffffff [0216.516] GetNearestColor (hdc=0xffffffffa9010713, color=0xe5e5e5) returned 0xe5e5e5 [0216.516] GetNearestColor (hdc=0xffffffffa9010713, color=0xd8d8d8) returned 0xd8d8d8 [0216.516] GetNearestColor (hdc=0xffffffffa9010713, color=0x0) returned 0x0 [0216.516] RestoreDC (hdc=0xffffffffa9010713, nSavedDC=-1) returned 1 [0216.516] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.516] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa9010713) returned 0x0 [0216.516] IsAppThemed () returned 0x1 [0216.516] GetThemeAppProperties () returned 0x3 [0216.516] GetThemeAppProperties () returned 0x3 [0216.516] IsAppThemed () returned 0x1 [0216.516] GetThemeAppProperties () returned 0x3 [0216.516] GetThemeAppProperties () returned 0x3 [0216.516] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x2415, lpdtp=0x27bf0b8 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0216.517] IsAppThemed () returned 0x1 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] IsAppThemed () returned 0x1 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] GetFocus () returned 0x60216 [0216.517] IsAppThemed () returned 0x1 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] IsAppThemed () returned 0x1 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] IsThemePartDefined () returned 0x1 [0216.517] IsAppThemed () returned 0x1 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0216.517] IsAppThemed () returned 0x1 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] IsAppThemed () returned 0x1 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] GetThemeAppProperties () returned 0x3 [0216.517] IsThemePartDefined () returned 0x1 [0216.518] GdipCreateRegion (region=0x5dad30) returned 0x0 [0216.518] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.518] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0216.518] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327310) returned 0x0 [0216.518] GdipIsMatrixIdentity (matrix=0x1c327310, result=0x5dad90) returned 0x0 [0216.518] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0216.518] GdipGetMatrixElements (matrix=0x1c327310, matrixOut=0x89f450) returned 0x0 [0216.518] LocalFree (hMem=0x89f450) returned 0x0 [0216.518] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f4d0 [0216.518] GdipGetMatrixElements (matrix=0x1c327310, matrixOut=0x89f4d0) returned 0x0 [0216.518] LocalFree (hMem=0x89f4d0) returned 0x0 [0216.518] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.518] GdipDeleteMatrix (matrix=0x1c327310) returned 0x0 [0216.518] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0216.518] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0216.518] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0216.518] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.518] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.518] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0216.518] GetCurrentObject (hdc=0xffffffffa9010713, type=0x1) returned 0x1b00017 [0216.518] GetCurrentObject (hdc=0xffffffffa9010713, type=0x2) returned 0x1900010 [0216.518] GetCurrentObject (hdc=0xffffffffa9010713, type=0x7) returned 0x11050637 [0216.519] GetCurrentObject (hdc=0xffffffffa9010713, type=0x6) returned 0x18a0048 [0216.519] SaveDC (hdc=0xffffffffa9010713) returned 1 [0216.519] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8204063b [0216.519] GetClipRgn (hdc=0xffffffffa9010713, hrgn=0xffffffff8204063b) returned 0 [0216.519] SelectClipRgn (hdc=0xffffffffa9010713, hrgn=0x4b04074d) returned 2 [0216.519] DeleteObject (ho=0xffffffff8204063b) returned 1 [0216.519] DeleteObject (ho=0x4b04074d) returned 1 [0216.519] OffsetViewportOrgEx (in: hdc=0xffffffffa9010713, x=0, y=0, lppt=0x27bfac8 | out: lppt=0x27bfac8) returned 1 [0216.519] DrawThemeParentBackground () returned 0x0 [0216.519] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0216.520] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0216.520] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.520] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.520] GetSystemMetrics (nIndex=42) returned 0 [0216.520] CoTaskMemAlloc (cb=0x20) returned 0x89cfb0 [0216.520] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cfb0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.520] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cfb0) returned 0xd [0216.520] CoTaskMemFree (pv=0x89cfb0) [0216.520] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0216.520] GetCurrentObject (hdc=0xffffffffa9010713, type=0x1) returned 0x1b00017 [0216.520] GetCurrentObject (hdc=0xffffffffa9010713, type=0x2) returned 0x1900010 [0216.520] GetCurrentObject (hdc=0xffffffffa9010713, type=0x7) returned 0x11050637 [0216.520] GetCurrentObject (hdc=0xffffffffa9010713, type=0x6) returned 0x18a0048 [0216.520] SaveDC (hdc=0xffffffffa9010713) returned 2 [0216.520] GetNearestColor (hdc=0xffffffffa9010713, color=0xf0f0f0) returned 0xf0f0f0 [0216.520] CreateSolidBrush (color=0xf0f0f0) returned 0x75100686 [0216.520] FillRect (hDC=0xffffffffa9010713, lprc=0x5d9fb0, hbr=0x75100686) returned 1 [0216.520] DeleteObject (ho=0x75100686) returned 1 [0216.521] RestoreDC (hdc=0xffffffffa9010713, nSavedDC=-1) returned 1 [0216.521] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.521] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.521] GetSystemMetrics (nIndex=42) returned 0 [0216.521] CoTaskMemAlloc (cb=0x20) returned 0x89d400 [0216.521] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d400, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.521] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d400) returned 0xd [0216.521] CoTaskMemFree (pv=0x89d400) [0216.521] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0216.521] GetCurrentObject (hdc=0xffffffffa9010713, type=0x1) returned 0x1b00017 [0216.521] GetCurrentObject (hdc=0xffffffffa9010713, type=0x2) returned 0x1900010 [0216.521] GetCurrentObject (hdc=0xffffffffa9010713, type=0x7) returned 0x11050637 [0216.521] GetCurrentObject (hdc=0xffffffffa9010713, type=0x6) returned 0x18a0048 [0216.521] SaveDC (hdc=0xffffffffa9010713) returned 2 [0216.521] GetNearestColor (hdc=0xffffffffa9010713, color=0xf0f0f0) returned 0xf0f0f0 [0216.521] CreateSolidBrush (color=0xf0f0f0) returned 0x76100686 [0216.521] FillRect (hDC=0xffffffffa9010713, lprc=0x5d9eb0, hbr=0x76100686) returned 1 [0216.521] DeleteObject (ho=0x76100686) returned 1 [0216.521] RestoreDC (hdc=0xffffffffa9010713, nSavedDC=-1) returned 1 [0216.521] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.522] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.522] GetSystemMetrics (nIndex=42) returned 0 [0216.522] CoTaskMemAlloc (cb=0x20) returned 0x89d100 [0216.522] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d100, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.522] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d100) returned 0xd [0216.522] CoTaskMemFree (pv=0x89d100) [0216.522] RestoreDC (hdc=0xffffffffa9010713, nSavedDC=-1) returned 1 [0216.522] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.522] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa9010713) returned 0x0 [0216.522] IsAppThemed () returned 0x1 [0216.522] GetThemeAppProperties () returned 0x3 [0216.522] GetThemeAppProperties () returned 0x3 [0216.522] IsAppThemed () returned 0x1 [0216.522] GetThemeAppProperties () returned 0x3 [0216.522] GetThemeAppProperties () returned 0x3 [0216.522] IsThemePartDefined () returned 0x1 [0216.522] GdipCreateRegion (region=0x5dac10) returned 0x0 [0216.522] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.522] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0216.522] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d50) returned 0x0 [0216.522] GdipIsMatrixIdentity (matrix=0x1c326d50, result=0x5dac70) returned 0x0 [0216.522] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0216.523] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89ec10) returned 0x0 [0216.523] LocalFree (hMem=0x89ec10) returned 0x0 [0216.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e910 [0216.523] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89e910) returned 0x0 [0216.523] LocalFree (hMem=0x89e910) returned 0x0 [0216.523] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.523] GdipDeleteMatrix (matrix=0x1c326d50) returned 0x0 [0216.523] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0216.523] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0216.523] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0216.523] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.523] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.523] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0216.523] GetCurrentObject (hdc=0xffffffffa9010713, type=0x1) returned 0x1b00017 [0216.523] GetCurrentObject (hdc=0xffffffffa9010713, type=0x2) returned 0x1900010 [0216.523] GetCurrentObject (hdc=0xffffffffa9010713, type=0x7) returned 0x11050637 [0216.523] GetCurrentObject (hdc=0xffffffffa9010713, type=0x6) returned 0x18a0048 [0216.523] SaveDC (hdc=0xffffffffa9010713) returned 1 [0216.523] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c04074d [0216.523] GetClipRgn (hdc=0xffffffffa9010713, hrgn=0x4c04074d) returned 0 [0216.523] SelectClipRgn (hdc=0xffffffffa9010713, hrgn=0xffffffff8404063b) returned 2 [0216.523] DeleteObject (ho=0x4c04074d) returned 1 [0216.523] DeleteObject (ho=0xffffffff8404063b) returned 1 [0216.523] OffsetViewportOrgEx (in: hdc=0xffffffffa9010713, x=0, y=0, lppt=0x27c07c8 | out: lppt=0x27c07c8) returned 1 [0216.523] IsAppThemed () returned 0x1 [0216.524] GetThemeAppProperties () returned 0x3 [0216.524] GetThemeAppProperties () returned 0x3 [0216.524] DrawThemeBackground () returned 0x0 [0216.524] RestoreDC (hdc=0xffffffffa9010713, nSavedDC=-1) returned 1 [0216.524] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.524] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa9010713) returned 0x0 [0216.524] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0216.524] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.524] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0216.524] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d10) returned 0x0 [0216.524] GdipIsMatrixIdentity (matrix=0x1c326d10, result=0x5dac40) returned 0x0 [0216.524] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea50 [0216.524] GdipGetMatrixElements (matrix=0x1c326d10, matrixOut=0x89ea50) returned 0x0 [0216.524] LocalFree (hMem=0x89ea50) returned 0x0 [0216.524] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb50 [0216.524] GdipGetMatrixElements (matrix=0x1c326d10, matrixOut=0x89eb50) returned 0x0 [0216.524] LocalFree (hMem=0x89eb50) returned 0x0 [0216.524] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.524] GdipDeleteMatrix (matrix=0x1c326d10) returned 0x0 [0216.524] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0216.524] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0216.524] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0216.524] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.524] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.524] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0216.524] GetCurrentObject (hdc=0xffffffffa9010713, type=0x1) returned 0x1b00017 [0216.524] GetCurrentObject (hdc=0xffffffffa9010713, type=0x2) returned 0x1900010 [0216.524] GetCurrentObject (hdc=0xffffffffa9010713, type=0x7) returned 0x11050637 [0216.525] GetCurrentObject (hdc=0xffffffffa9010713, type=0x6) returned 0x18a0048 [0216.525] SaveDC (hdc=0xffffffffa9010713) returned 1 [0216.525] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8504063b [0216.525] GetClipRgn (hdc=0xffffffffa9010713, hrgn=0xffffffff8504063b) returned 0 [0216.525] SelectClipRgn (hdc=0xffffffffa9010713, hrgn=0x4d04074d) returned 2 [0216.525] DeleteObject (ho=0xffffffff8504063b) returned 1 [0216.525] DeleteObject (ho=0x4d04074d) returned 1 [0216.525] OffsetViewportOrgEx (in: hdc=0xffffffffa9010713, x=0, y=0, lppt=0x27c0cc8 | out: lppt=0x27c0cc8) returned 1 [0216.525] IsAppThemed () returned 0x1 [0216.525] GetThemeAppProperties () returned 0x3 [0216.525] GetThemeAppProperties () returned 0x3 [0216.525] GetThemeBackgroundContentRect () returned 0x0 [0216.525] RestoreDC (hdc=0xffffffffa9010713, nSavedDC=-1) returned 1 [0216.525] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.525] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa9010713) returned 0x0 [0216.525] IsAppThemed () returned 0x1 [0216.525] GetThemeAppProperties () returned 0x3 [0216.525] GetThemeAppProperties () returned 0x3 [0216.525] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0216.525] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0216.525] GetCurrentObject (hdc=0xffffffffa9010713, type=0x1) returned 0x1b00017 [0216.525] GetCurrentObject (hdc=0xffffffffa9010713, type=0x2) returned 0x1900010 [0216.525] GetCurrentObject (hdc=0xffffffffa9010713, type=0x7) returned 0x11050637 [0216.525] GetCurrentObject (hdc=0xffffffffa9010713, type=0x6) returned 0x18a0048 [0216.525] SaveDC (hdc=0xffffffffa9010713) returned 1 [0216.526] GetTextAlign (hdc=0xffffffffa9010713) returned 0x0 [0216.526] GetTextColor (hdc=0xffffffffa9010713) returned 0x0 [0216.526] GetCurrentObject (hdc=0xffffffffa9010713, type=0x6) returned 0x18a0048 [0216.526] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0216.526] SelectObject (hdc=0xffffffffa9010713, h=0x290a0573) returned 0x18a0048 [0216.526] GetBkMode (hdc=0xffffffffa9010713) returned 2 [0216.526] SetBkMode (hdc=0xffffffffa9010713, mode=1) returned 2 [0216.526] DrawTextExW (in: hdc=0xffffffffa9010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x2415, lpdtp=0x27c1220 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0216.526] DrawTextExW (in: hdc=0xffffffffa9010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x2015, lpdtp=0x27c1220 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0216.526] RestoreDC (hdc=0xffffffffa9010713, nSavedDC=-1) returned 1 [0216.526] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.527] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa9010713) returned 0x0 [0216.527] GetFocus () returned 0x60216 [0216.527] IsAppThemed () returned 0x1 [0216.527] GetThemeAppProperties () returned 0x3 [0216.527] GetThemeAppProperties () returned 0x3 [0216.527] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0216.527] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0xffffffffa9010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0216.528] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.528] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa9010713) returned 0x0 [0216.528] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0216.528] SelectObject (hdc=0xffffffffa9010713, h=0x185000f) returned 0x11050637 [0216.528] DeleteDC (hdc=0xffffffffa9010713) returned 1 [0216.528] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.528] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0216.528] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0216.538] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0216.861] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0216.861] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0216.861] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0216.861] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x6021c) returned 0x1 [0216.862] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0216.862] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0216.862] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0216.862] GetFocus () returned 0x6021c [0216.862] GetAncestor (hwnd=0x6021c, gaFlags=0x1) returned 0x10010 [0216.862] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0 [0216.863] SetFocus (hWnd=0x2021e) returned 0x0 [0216.863] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0216.864] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0216.864] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0216.864] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0216.864] GetFocus () returned 0x20160 [0216.864] SetFocus (hWnd=0x2021e) returned 0x0 [0216.868] IsWindow (hWnd=0x20160) returned 1 [0216.868] EnableWindow (hWnd=0x20160, bEnable=1) returned 1 [0216.868] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0216.868] IsWindow (hWnd=0x20160) returned 1 [0216.871] SetActiveWindow (hWnd=0x20160) returned 0x20160 [0216.872] IsWindow (hWnd=0x2021e) returned 1 [0216.872] SetFocus (hWnd=0x2021e) returned 0x20160 [0216.872] GetFocus () returned 0x2021e [0216.872] IsChild (hWndParent=0x20160, hWnd=0x2021e) returned 1 [0216.872] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x8, wParam=0x2021e, lParam=0x0) returned 0x0 [0216.872] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0216.872] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0216.873] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0216.873] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x7, wParam=0x20160, lParam=0x0) returned 0x0 [0216.873] GetStockObject (i=5) returned 0x1900015 [0216.873] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0216.873] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xd, wParam=0x16, lParam=0x89f510) returned 0x15 [0216.873] GetDlgItem (hDlg=0x20160, nIDDlgItem=131614) returned 0x2021e [0216.873] SendMessageW (hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5db790) returned 0x0 [0216.873] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5db790) returned 0x0 [0216.873] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0216.874] SendMessageW (hWnd=0x20160, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0216.874] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0216.874] GetFocus () returned 0x2021e [0216.874] GetCapture () returned 0x0 [0216.874] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.874] IsWindowUnicode (hWnd=0x2021e) returned 1 [0216.874] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0216.874] TranslateMessage (lpMsg=0x5dd220) returned 0 [0216.874] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0216.874] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x1010749 [0216.874] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0216.874] CreateCompatibleDC (hdc=0x1010749) returned 0x32010740 [0216.874] SelectObject (hdc=0x32010740, h=0x11050637) returned 0x185000f [0216.874] GdipCreateFromHDC (hdc=0x32010740, graphics=0x5dc420) returned 0x0 [0216.874] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0216.874] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0216.874] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0216.874] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f90) returned 0x0 [0216.874] GdipIsMatrixIdentity (matrix=0x1c326f90, result=0x5dc5b0) returned 0x0 [0216.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f3d0 [0216.875] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89f3d0) returned 0x0 [0216.875] LocalFree (hMem=0x89f3d0) returned 0x0 [0216.875] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.875] GdipDeleteMatrix (matrix=0x1c326f90) returned 0x0 [0216.875] GdipCreateRegion (region=0x5dc550) returned 0x0 [0216.875] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.875] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0216.875] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0216.875] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd6b0dbd) returned 0x0 [0216.875] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.875] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.875] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0216.876] GetCurrentObject (hdc=0x32010740, type=0x1) returned 0x1b00017 [0216.876] GetCurrentObject (hdc=0x32010740, type=0x2) returned 0x1900010 [0216.876] GetCurrentObject (hdc=0x32010740, type=0x7) returned 0x11050637 [0216.876] GetCurrentObject (hdc=0x32010740, type=0x6) returned 0x18a0048 [0216.876] SaveDC (hdc=0x32010740) returned 1 [0216.876] GetNearestColor (hdc=0x32010740, color=0xf0f0f0) returned 0xf0f0f0 [0216.876] GetNearestColor (hdc=0x32010740, color=0xa0a0a0) returned 0xa0a0a0 [0216.876] GetNearestColor (hdc=0x32010740, color=0x696969) returned 0x696969 [0216.876] GetNearestColor (hdc=0x32010740, color=0xa0a0a0) returned 0xa0a0a0 [0216.876] GetNearestColor (hdc=0x32010740, color=0x0) returned 0x0 [0216.876] GetNearestColor (hdc=0x32010740, color=0xffffff) returned 0xffffff [0216.877] GetNearestColor (hdc=0x32010740, color=0xe5e5e5) returned 0xe5e5e5 [0216.877] GetNearestColor (hdc=0x32010740, color=0xd8d8d8) returned 0xd8d8d8 [0216.877] GetNearestColor (hdc=0x32010740, color=0x0) returned 0x0 [0216.877] RestoreDC (hdc=0x32010740, nSavedDC=-1) returned 1 [0216.877] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.877] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010740) returned 0x0 [0216.877] IsAppThemed () returned 0x1 [0216.877] GetThemeAppProperties () returned 0x3 [0216.877] GetThemeAppProperties () returned 0x3 [0216.877] IsAppThemed () returned 0x1 [0216.877] GetThemeAppProperties () returned 0x3 [0216.877] GetThemeAppProperties () returned 0x3 [0216.877] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x2415, lpdtp=0x27c1d08 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0216.877] IsAppThemed () returned 0x1 [0216.877] GetThemeAppProperties () returned 0x3 [0216.877] GetThemeAppProperties () returned 0x3 [0216.877] IsAppThemed () returned 0x1 [0216.877] GetThemeAppProperties () returned 0x3 [0216.878] GetThemeAppProperties () returned 0x3 [0216.878] GetFocus () returned 0x2021e [0216.878] IsAppThemed () returned 0x1 [0216.878] GetThemeAppProperties () returned 0x3 [0216.878] GetThemeAppProperties () returned 0x3 [0216.878] IsAppThemed () returned 0x1 [0216.878] GetThemeAppProperties () returned 0x3 [0216.878] GetThemeAppProperties () returned 0x3 [0216.878] IsThemePartDefined () returned 0x1 [0216.878] IsAppThemed () returned 0x1 [0216.878] GetThemeAppProperties () returned 0x3 [0216.878] GetThemeAppProperties () returned 0x3 [0216.878] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0216.878] IsAppThemed () returned 0x1 [0216.879] GetThemeAppProperties () returned 0x3 [0216.879] GetThemeAppProperties () returned 0x3 [0216.879] IsAppThemed () returned 0x1 [0216.879] GetThemeAppProperties () returned 0x3 [0216.879] GetThemeAppProperties () returned 0x3 [0216.879] IsThemePartDefined () returned 0x1 [0216.879] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0216.879] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.879] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0216.879] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3272d0) returned 0x0 [0216.879] GdipIsMatrixIdentity (matrix=0x1c3272d0, result=0x5dbdc0) returned 0x0 [0216.879] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0216.879] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89f450) returned 0x0 [0216.879] LocalFree (hMem=0x89f450) returned 0x0 [0216.879] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0216.879] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89f450) returned 0x0 [0216.879] LocalFree (hMem=0x89f450) returned 0x0 [0216.879] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.879] GdipDeleteMatrix (matrix=0x1c3272d0) returned 0x0 [0216.879] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0216.879] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0216.879] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0216.879] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.879] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.879] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0216.879] GetCurrentObject (hdc=0x32010740, type=0x1) returned 0x1b00017 [0216.879] GetCurrentObject (hdc=0x32010740, type=0x2) returned 0x1900010 [0216.879] GetCurrentObject (hdc=0x32010740, type=0x7) returned 0x11050637 [0216.879] GetCurrentObject (hdc=0x32010740, type=0x6) returned 0x18a0048 [0216.880] SaveDC (hdc=0x32010740) returned 1 [0216.880] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5804074d [0216.880] GetClipRgn (hdc=0x32010740, hrgn=0x5804074d) returned 0 [0216.880] SelectClipRgn (hdc=0x32010740, hrgn=0xffffffffb7040572) returned 2 [0216.880] DeleteObject (ho=0x5804074d) returned 1 [0216.880] DeleteObject (ho=0xffffffffb7040572) returned 1 [0216.880] OffsetViewportOrgEx (in: hdc=0x32010740, x=0, y=0, lppt=0x27c2718 | out: lppt=0x27c2718) returned 1 [0216.880] DrawThemeParentBackground () returned 0x1 [0216.880] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0216.880] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0216.880] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.880] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.880] GetSystemMetrics (nIndex=42) returned 0 [0216.880] CoTaskMemAlloc (cb=0x20) returned 0x89d310 [0216.880] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d310, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.880] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d310) returned 0xd [0216.880] CoTaskMemFree (pv=0x89d310) [0216.880] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0216.880] GetCurrentObject (hdc=0x32010740, type=0x1) returned 0x1b00017 [0216.880] GetCurrentObject (hdc=0x32010740, type=0x2) returned 0x1900010 [0216.880] GetCurrentObject (hdc=0x32010740, type=0x7) returned 0x11050637 [0216.880] GetCurrentObject (hdc=0x32010740, type=0x6) returned 0x18a0048 [0216.881] SaveDC (hdc=0x32010740) returned 2 [0216.881] GetNearestColor (hdc=0x32010740, color=0xf0f0f0) returned 0xf0f0f0 [0216.881] CreateSolidBrush (color=0xf0f0f0) returned 0x78100686 [0216.881] FillRect (hDC=0x32010740, lprc=0x5dafe0, hbr=0x78100686) returned 1 [0216.881] DeleteObject (ho=0x78100686) returned 1 [0216.881] RestoreDC (hdc=0x32010740, nSavedDC=-1) returned 1 [0216.881] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.881] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.881] GetSystemMetrics (nIndex=42) returned 0 [0216.881] CoTaskMemAlloc (cb=0x20) returned 0x89d280 [0216.881] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d280, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.881] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d280) returned 0xd [0216.881] CoTaskMemFree (pv=0x89d280) [0216.881] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0216.881] GetCurrentObject (hdc=0x32010740, type=0x1) returned 0x1b00017 [0216.881] GetCurrentObject (hdc=0x32010740, type=0x2) returned 0x1900010 [0216.881] GetCurrentObject (hdc=0x32010740, type=0x7) returned 0x11050637 [0216.881] GetCurrentObject (hdc=0x32010740, type=0x6) returned 0x18a0048 [0216.882] SaveDC (hdc=0x32010740) returned 2 [0216.882] GetNearestColor (hdc=0x32010740, color=0xf0f0f0) returned 0xf0f0f0 [0216.882] CreateSolidBrush (color=0xf0f0f0) returned 0x79100686 [0216.882] FillRect (hDC=0x32010740, lprc=0x5daee0, hbr=0x79100686) returned 1 [0216.882] DeleteObject (ho=0x79100686) returned 1 [0216.882] RestoreDC (hdc=0x32010740, nSavedDC=-1) returned 1 [0216.882] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0216.882] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0216.882] GetSystemMetrics (nIndex=42) returned 0 [0216.882] CoTaskMemAlloc (cb=0x20) returned 0x89d400 [0216.882] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d400, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0216.882] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d400) returned 0xd [0216.882] CoTaskMemFree (pv=0x89d400) [0216.882] RestoreDC (hdc=0x32010740, nSavedDC=-1) returned 1 [0216.882] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.882] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010740) returned 0x0 [0216.882] IsAppThemed () returned 0x1 [0216.882] GetThemeAppProperties () returned 0x3 [0216.882] GetThemeAppProperties () returned 0x3 [0216.882] IsAppThemed () returned 0x1 [0216.883] GetThemeAppProperties () returned 0x3 [0216.883] GetThemeAppProperties () returned 0x3 [0216.883] IsThemePartDefined () returned 0x1 [0216.883] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0216.883] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.883] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0216.883] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326c10) returned 0x0 [0216.883] GdipIsMatrixIdentity (matrix=0x1c326c10, result=0x5dbca0) returned 0x0 [0216.883] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb10 [0216.883] GdipGetMatrixElements (matrix=0x1c326c10, matrixOut=0x89eb10) returned 0x0 [0216.883] LocalFree (hMem=0x89eb10) returned 0x0 [0216.883] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0216.883] GdipGetMatrixElements (matrix=0x1c326c10, matrixOut=0x89ec10) returned 0x0 [0216.883] LocalFree (hMem=0x89ec10) returned 0x0 [0216.883] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.883] GdipDeleteMatrix (matrix=0x1c326c10) returned 0x0 [0216.883] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0216.883] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0216.883] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0216.883] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.883] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.883] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0216.883] GetCurrentObject (hdc=0x32010740, type=0x1) returned 0x1b00017 [0216.883] GetCurrentObject (hdc=0x32010740, type=0x2) returned 0x1900010 [0216.883] GetCurrentObject (hdc=0x32010740, type=0x7) returned 0x11050637 [0216.883] GetCurrentObject (hdc=0x32010740, type=0x6) returned 0x18a0048 [0216.883] SaveDC (hdc=0x32010740) returned 1 [0216.884] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb8040572 [0216.884] GetClipRgn (hdc=0x32010740, hrgn=0xffffffffb8040572) returned 0 [0216.884] SelectClipRgn (hdc=0x32010740, hrgn=0x5a04074d) returned 2 [0216.884] DeleteObject (ho=0xffffffffb8040572) returned 1 [0216.884] DeleteObject (ho=0x5a04074d) returned 1 [0216.884] OffsetViewportOrgEx (in: hdc=0x32010740, x=0, y=0, lppt=0x27c3418 | out: lppt=0x27c3418) returned 1 [0216.884] IsAppThemed () returned 0x1 [0216.888] GetThemeAppProperties () returned 0x3 [0216.888] GetThemeAppProperties () returned 0x3 [0216.888] DrawThemeBackground () returned 0x0 [0216.888] RestoreDC (hdc=0x32010740, nSavedDC=-1) returned 1 [0216.888] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.888] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010740) returned 0x0 [0216.888] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0216.888] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0216.888] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0216.888] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327210) returned 0x0 [0216.888] GdipIsMatrixIdentity (matrix=0x1c327210, result=0x5dbc70) returned 0x0 [0216.888] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef50 [0216.888] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89ef50) returned 0x0 [0216.888] LocalFree (hMem=0x89ef50) returned 0x0 [0216.888] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e850 [0216.888] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89e850) returned 0x0 [0216.888] LocalFree (hMem=0x89e850) returned 0x0 [0216.889] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.889] GdipDeleteMatrix (matrix=0x1c327210) returned 0x0 [0216.889] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0216.889] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0216.889] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0216.889] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.889] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0216.889] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0216.889] GetCurrentObject (hdc=0x32010740, type=0x1) returned 0x1b00017 [0216.889] GetCurrentObject (hdc=0x32010740, type=0x2) returned 0x1900010 [0216.889] GetCurrentObject (hdc=0x32010740, type=0x7) returned 0x11050637 [0216.889] GetCurrentObject (hdc=0x32010740, type=0x6) returned 0x18a0048 [0216.889] SaveDC (hdc=0x32010740) returned 1 [0216.889] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b04074d [0216.889] GetClipRgn (hdc=0x32010740, hrgn=0x5b04074d) returned 0 [0216.889] SelectClipRgn (hdc=0x32010740, hrgn=0xffffffffb9040572) returned 2 [0216.889] DeleteObject (ho=0x5b04074d) returned 1 [0216.890] DeleteObject (ho=0xffffffffb9040572) returned 1 [0216.890] OffsetViewportOrgEx (in: hdc=0x32010740, x=0, y=0, lppt=0x27c3918 | out: lppt=0x27c3918) returned 1 [0216.890] IsAppThemed () returned 0x1 [0216.890] GetThemeAppProperties () returned 0x3 [0216.890] GetThemeAppProperties () returned 0x3 [0216.890] GetThemeBackgroundContentRect () returned 0x0 [0216.890] RestoreDC (hdc=0x32010740, nSavedDC=-1) returned 1 [0216.890] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.890] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010740) returned 0x0 [0216.890] IsAppThemed () returned 0x1 [0216.890] GetThemeAppProperties () returned 0x3 [0216.890] GetThemeAppProperties () returned 0x3 [0216.890] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0216.890] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0216.890] GetCurrentObject (hdc=0x32010740, type=0x1) returned 0x1b00017 [0216.890] GetCurrentObject (hdc=0x32010740, type=0x2) returned 0x1900010 [0216.890] GetCurrentObject (hdc=0x32010740, type=0x7) returned 0x11050637 [0216.890] GetCurrentObject (hdc=0x32010740, type=0x6) returned 0x18a0048 [0216.890] SaveDC (hdc=0x32010740) returned 1 [0216.890] GetTextAlign (hdc=0x32010740) returned 0x0 [0216.890] GetTextColor (hdc=0x32010740) returned 0x0 [0216.890] GetCurrentObject (hdc=0x32010740, type=0x6) returned 0x18a0048 [0216.890] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0216.891] SelectObject (hdc=0x32010740, h=0x290a0573) returned 0x18a0048 [0216.891] GetBkMode (hdc=0x32010740) returned 2 [0216.891] SetBkMode (hdc=0x32010740, mode=1) returned 2 [0216.891] DrawTextExW (in: hdc=0x32010740, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x2415, lpdtp=0x27c3e70 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0216.891] DrawTextExW (in: hdc=0x32010740, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x2015, lpdtp=0x27c3e70 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0216.891] RestoreDC (hdc=0x32010740, nSavedDC=-1) returned 1 [0216.891] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.891] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010740) returned 0x0 [0216.891] GetFocus () returned 0x2021e [0216.891] IsAppThemed () returned 0x1 [0216.891] GetThemeAppProperties () returned 0x3 [0216.891] GetThemeAppProperties () returned 0x3 [0216.891] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0216.892] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0x32010740, x1=0, y1=0, rop=0xcc0020) returned 1 [0216.892] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.892] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x32010740) returned 0x0 [0216.892] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0216.892] SelectObject (hdc=0x32010740, h=0x185000f) returned 0x11050637 [0216.892] DeleteDC (hdc=0x32010740) returned 1 [0216.892] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0216.892] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0216.892] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0216.892] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0216.892] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0216.892] WaitMessage () returned 1 [0217.033] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0217.033] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0217.033] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0217.033] WaitMessage () returned 1 [0217.175] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0217.175] IsWindowUnicode (hWnd=0x20230) returned 1 [0217.175] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0217.175] TranslateMessage (lpMsg=0x5dd220) returned 0 [0217.175] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0217.175] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0217.175] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0217.175] WaitMessage () returned 1 [0218.007] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0218.007] IsWindowUnicode (hWnd=0x2021e) returned 1 [0218.007] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0218.008] GetKeyState (nVirtKey=16) returned 0 [0218.008] GetKeyState (nVirtKey=17) returned 0 [0218.008] GetKeyState (nVirtKey=18) returned 0 [0218.008] GetKeyState (nVirtKey=16) returned 0 [0218.008] GetKeyState (nVirtKey=17) returned 0 [0218.008] GetKeyState (nVirtKey=18) returned 0 [0218.008] SendMessageW (hWnd=0x2021e, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0218.008] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0218.008] SendMessageW (hWnd=0x2021e, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0218.008] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0218.008] TranslateMessage (lpMsg=0x5dd220) returned 1 [0218.008] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0218.008] GetKeyState (nVirtKey=16) returned 0 [0218.008] GetKeyState (nVirtKey=17) returned 0 [0218.009] GetKeyState (nVirtKey=18) returned 0 [0218.009] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x100, wParam=0x5b, lParam=0x15b0001) returned 0x0 [0218.009] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.009] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.009] WaitMessage () returned 1 [0218.023] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.023] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0218.023] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.023] WaitMessage () returned 1 [0218.024] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.024] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0218.024] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.024] WaitMessage () returned 1 [0218.026] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.026] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0218.026] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.026] WaitMessage () returned 1 [0218.027] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0218.027] IsWindowUnicode (hWnd=0x2021e) returned 1 [0218.027] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0218.028] GetKeyState (nVirtKey=16) returned 0 [0218.028] GetKeyState (nVirtKey=17) returned 0 [0218.028] GetKeyState (nVirtKey=18) returned 0 [0218.028] TranslateMessage (lpMsg=0x5dd220) returned 1 [0218.028] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0218.028] GetKeyState (nVirtKey=16) returned 0 [0218.028] GetKeyState (nVirtKey=17) returned 0 [0218.028] GetKeyState (nVirtKey=18) returned 0 [0218.028] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x101, wParam=0x44, lParam=0x80200001) returned 0x0 [0218.028] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.028] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.028] WaitMessage () returned 1 [0218.030] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0218.030] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0218.031] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0218.031] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0218.031] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0218.032] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1c, wParam=0x0, lParam=0x824) returned 0x0 [0218.032] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1c, wParam=0x0, lParam=0x824) returned 0x0 [0218.032] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x1c, wParam=0x0, lParam=0x824) returned 0x0 [0218.032] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x1c, wParam=0x0, lParam=0x824) returned 0x0 [0218.032] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x1c, wParam=0x0, lParam=0x824) returned 0x0 [0218.032] GetFocus () returned 0x0 [0218.032] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0218.033] GetCapture () returned 0x0 [0218.033] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0218.033] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0218.033] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0218.033] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0218.034] IsWindowUnicode (hWnd=0x2021e) returned 1 [0218.034] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0218.034] TranslateMessage (lpMsg=0x5dd220) returned 0 [0218.034] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0218.034] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0218.034] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0218.034] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffffa1010707 [0218.034] SelectObject (hdc=0xffffffffa1010707, h=0x11050637) returned 0x185000f [0218.034] GdipCreateFromHDC (hdc=0xffffffffa1010707, graphics=0x5dc420) returned 0x0 [0218.034] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0218.034] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0218.034] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0218.034] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327310) returned 0x0 [0218.034] GdipIsMatrixIdentity (matrix=0x1c327310, result=0x5dc5b0) returned 0x0 [0218.034] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec90 [0218.034] GdipGetMatrixElements (matrix=0x1c327310, matrixOut=0x89ec90) returned 0x0 [0218.034] LocalFree (hMem=0x89ec90) returned 0x0 [0218.034] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.034] GdipDeleteMatrix (matrix=0x1c327310) returned 0x0 [0218.035] GdipCreateRegion (region=0x5dc550) returned 0x0 [0218.035] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0218.035] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0218.035] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0218.035] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd690dbd) returned 0x0 [0218.035] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.035] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0218.035] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0218.035] GetCurrentObject (hdc=0xffffffffa1010707, type=0x1) returned 0x1b00017 [0218.036] GetCurrentObject (hdc=0xffffffffa1010707, type=0x2) returned 0x1900010 [0218.036] GetCurrentObject (hdc=0xffffffffa1010707, type=0x7) returned 0x11050637 [0218.036] GetCurrentObject (hdc=0xffffffffa1010707, type=0x6) returned 0x18a0048 [0218.036] SaveDC (hdc=0xffffffffa1010707) returned 1 [0218.036] GetNearestColor (hdc=0xffffffffa1010707, color=0xf0f0f0) returned 0xf0f0f0 [0218.036] GetNearestColor (hdc=0xffffffffa1010707, color=0xa0a0a0) returned 0xa0a0a0 [0218.036] GetNearestColor (hdc=0xffffffffa1010707, color=0x696969) returned 0x696969 [0218.036] GetNearestColor (hdc=0xffffffffa1010707, color=0xa0a0a0) returned 0xa0a0a0 [0218.036] GetNearestColor (hdc=0xffffffffa1010707, color=0x0) returned 0x0 [0218.036] GetNearestColor (hdc=0xffffffffa1010707, color=0xffffff) returned 0xffffff [0218.036] GetNearestColor (hdc=0xffffffffa1010707, color=0xe5e5e5) returned 0xe5e5e5 [0218.036] GetNearestColor (hdc=0xffffffffa1010707, color=0xd8d8d8) returned 0xd8d8d8 [0218.036] GetNearestColor (hdc=0xffffffffa1010707, color=0x0) returned 0x0 [0218.036] RestoreDC (hdc=0xffffffffa1010707, nSavedDC=-1) returned 1 [0218.037] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.037] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa1010707) returned 0x0 [0218.037] IsAppThemed () returned 0x1 [0218.037] GetThemeAppProperties () returned 0x3 [0218.037] GetThemeAppProperties () returned 0x3 [0218.037] IsAppThemed () returned 0x1 [0218.037] GetThemeAppProperties () returned 0x3 [0218.037] GetThemeAppProperties () returned 0x3 [0218.037] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x2415, lpdtp=0x27c4bb0 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0218.037] IsAppThemed () returned 0x1 [0218.037] GetThemeAppProperties () returned 0x3 [0218.037] GetThemeAppProperties () returned 0x3 [0218.037] IsAppThemed () returned 0x1 [0218.037] GetThemeAppProperties () returned 0x3 [0218.037] GetThemeAppProperties () returned 0x3 [0218.037] GetFocus () returned 0x0 [0218.037] IsAppThemed () returned 0x1 [0218.037] GetThemeAppProperties () returned 0x3 [0218.037] GetThemeAppProperties () returned 0x3 [0218.038] IsAppThemed () returned 0x1 [0218.038] GetThemeAppProperties () returned 0x3 [0218.038] GetThemeAppProperties () returned 0x3 [0218.038] IsThemePartDefined () returned 0x1 [0218.038] IsAppThemed () returned 0x1 [0218.038] GetThemeAppProperties () returned 0x3 [0218.038] GetThemeAppProperties () returned 0x3 [0218.038] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0218.038] IsAppThemed () returned 0x1 [0218.038] GetThemeAppProperties () returned 0x3 [0218.038] GetThemeAppProperties () returned 0x3 [0218.038] IsAppThemed () returned 0x1 [0218.038] GetThemeAppProperties () returned 0x3 [0218.038] GetThemeAppProperties () returned 0x3 [0218.038] IsThemePartDefined () returned 0x1 [0218.038] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0218.038] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0218.038] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0218.038] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327010) returned 0x0 [0218.038] GdipIsMatrixIdentity (matrix=0x1c327010, result=0x5dbdc0) returned 0x0 [0218.038] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f550 [0218.038] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89f550) returned 0x0 [0218.038] LocalFree (hMem=0x89f550) returned 0x0 [0218.038] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef10 [0218.038] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89ef10) returned 0x0 [0218.038] LocalFree (hMem=0x89ef10) returned 0x0 [0218.038] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.039] GdipDeleteMatrix (matrix=0x1c327010) returned 0x0 [0218.039] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0218.039] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0218.039] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0218.039] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.044] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0218.044] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0218.044] GetCurrentObject (hdc=0xffffffffa1010707, type=0x1) returned 0x1b00017 [0218.044] GetCurrentObject (hdc=0xffffffffa1010707, type=0x2) returned 0x1900010 [0218.044] GetCurrentObject (hdc=0xffffffffa1010707, type=0x7) returned 0x11050637 [0218.044] GetCurrentObject (hdc=0xffffffffa1010707, type=0x6) returned 0x18a0048 [0218.044] SaveDC (hdc=0xffffffffa1010707) returned 1 [0218.044] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffba040572 [0218.044] GetClipRgn (hdc=0xffffffffa1010707, hrgn=0xffffffffba040572) returned 0 [0218.044] SelectClipRgn (hdc=0xffffffffa1010707, hrgn=0x5f04074d) returned 2 [0218.044] DeleteObject (ho=0xffffffffba040572) returned 1 [0218.044] DeleteObject (ho=0x5f04074d) returned 1 [0218.044] OffsetViewportOrgEx (in: hdc=0xffffffffa1010707, x=0, y=0, lppt=0x27c55c0 | out: lppt=0x27c55c0) returned 1 [0218.044] DrawThemeParentBackground () returned 0x0 [0218.044] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0218.045] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0218.045] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0218.045] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0218.045] GetSystemMetrics (nIndex=42) returned 0 [0218.045] CoTaskMemAlloc (cb=0x20) returned 0x89ce60 [0218.045] GetWindowTextW (in: hWnd=0x20160, lpString=0x89ce60, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0218.045] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89ce60) returned 0xd [0218.045] CoTaskMemFree (pv=0x89ce60) [0218.045] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0218.045] GetCurrentObject (hdc=0xffffffffa1010707, type=0x1) returned 0x1b00017 [0218.045] GetCurrentObject (hdc=0xffffffffa1010707, type=0x2) returned 0x1900010 [0218.045] GetCurrentObject (hdc=0xffffffffa1010707, type=0x7) returned 0x11050637 [0218.045] GetCurrentObject (hdc=0xffffffffa1010707, type=0x6) returned 0x18a0048 [0218.045] SaveDC (hdc=0xffffffffa1010707) returned 2 [0218.045] GetNearestColor (hdc=0xffffffffa1010707, color=0xf0f0f0) returned 0xf0f0f0 [0218.045] CreateSolidBrush (color=0xf0f0f0) returned 0x7a100686 [0218.045] FillRect (hDC=0xffffffffa1010707, lprc=0x5dafe0, hbr=0x7a100686) returned 1 [0218.046] DeleteObject (ho=0x7a100686) returned 1 [0218.046] RestoreDC (hdc=0xffffffffa1010707, nSavedDC=-1) returned 1 [0218.046] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0218.046] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0218.046] GetSystemMetrics (nIndex=42) returned 0 [0218.046] CoTaskMemAlloc (cb=0x20) returned 0x89d460 [0218.046] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d460, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0218.046] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d460) returned 0xd [0218.046] CoTaskMemFree (pv=0x89d460) [0218.046] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0218.046] GetCurrentObject (hdc=0xffffffffa1010707, type=0x1) returned 0x1b00017 [0218.046] GetCurrentObject (hdc=0xffffffffa1010707, type=0x2) returned 0x1900010 [0218.046] GetCurrentObject (hdc=0xffffffffa1010707, type=0x7) returned 0x11050637 [0218.046] GetCurrentObject (hdc=0xffffffffa1010707, type=0x6) returned 0x18a0048 [0218.046] SaveDC (hdc=0xffffffffa1010707) returned 2 [0218.046] GetNearestColor (hdc=0xffffffffa1010707, color=0xf0f0f0) returned 0xf0f0f0 [0218.046] CreateSolidBrush (color=0xf0f0f0) returned 0x7b100686 [0218.046] FillRect (hDC=0xffffffffa1010707, lprc=0x5daee0, hbr=0x7b100686) returned 1 [0218.047] DeleteObject (ho=0x7b100686) returned 1 [0218.047] RestoreDC (hdc=0xffffffffa1010707, nSavedDC=-1) returned 1 [0218.047] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0218.047] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0218.047] GetSystemMetrics (nIndex=42) returned 0 [0218.047] CoTaskMemAlloc (cb=0x20) returned 0x89d130 [0218.047] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d130, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0218.047] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d130) returned 0xd [0218.047] CoTaskMemFree (pv=0x89d130) [0218.047] RestoreDC (hdc=0xffffffffa1010707, nSavedDC=-1) returned 1 [0218.047] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.047] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa1010707) returned 0x0 [0218.047] IsAppThemed () returned 0x1 [0218.047] GetThemeAppProperties () returned 0x3 [0218.047] GetThemeAppProperties () returned 0x3 [0218.047] IsAppThemed () returned 0x1 [0218.047] GetThemeAppProperties () returned 0x3 [0218.047] GetThemeAppProperties () returned 0x3 [0218.047] IsThemePartDefined () returned 0x1 [0218.047] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0218.048] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0218.048] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0218.048] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327190) returned 0x0 [0218.048] GdipIsMatrixIdentity (matrix=0x1c327190, result=0x5dbca0) returned 0x0 [0218.048] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f3d0 [0218.048] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89f3d0) returned 0x0 [0218.048] LocalFree (hMem=0x89f3d0) returned 0x0 [0218.048] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f150 [0218.048] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89f150) returned 0x0 [0218.048] LocalFree (hMem=0x89f150) returned 0x0 [0218.048] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.048] GdipDeleteMatrix (matrix=0x1c327190) returned 0x0 [0218.048] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0218.048] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0218.048] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0218.048] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.048] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0218.048] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0218.048] GetCurrentObject (hdc=0xffffffffa1010707, type=0x1) returned 0x1b00017 [0218.048] GetCurrentObject (hdc=0xffffffffa1010707, type=0x2) returned 0x1900010 [0218.048] GetCurrentObject (hdc=0xffffffffa1010707, type=0x7) returned 0x11050637 [0218.048] GetCurrentObject (hdc=0xffffffffa1010707, type=0x6) returned 0x18a0048 [0218.049] SaveDC (hdc=0xffffffffa1010707) returned 1 [0218.049] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6004074d [0218.049] GetClipRgn (hdc=0xffffffffa1010707, hrgn=0x6004074d) returned 0 [0218.049] SelectClipRgn (hdc=0xffffffffa1010707, hrgn=0xffffffffbc040572) returned 2 [0218.049] DeleteObject (ho=0x6004074d) returned 1 [0218.049] DeleteObject (ho=0xffffffffbc040572) returned 1 [0218.049] OffsetViewportOrgEx (in: hdc=0xffffffffa1010707, x=0, y=0, lppt=0x27c62c0 | out: lppt=0x27c62c0) returned 1 [0218.049] IsAppThemed () returned 0x1 [0218.049] GetThemeAppProperties () returned 0x3 [0218.049] GetThemeAppProperties () returned 0x3 [0218.049] DrawThemeBackground () returned 0x0 [0218.049] RestoreDC (hdc=0xffffffffa1010707, nSavedDC=-1) returned 1 [0218.049] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.049] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa1010707) returned 0x0 [0218.049] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0218.050] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0218.050] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0218.050] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327110) returned 0x0 [0218.050] GdipIsMatrixIdentity (matrix=0x1c327110, result=0x5dbc70) returned 0x0 [0218.050] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f110 [0218.050] GdipGetMatrixElements (matrix=0x1c327110, matrixOut=0x89f110) returned 0x0 [0218.050] LocalFree (hMem=0x89f110) returned 0x0 [0218.050] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb10 [0218.050] GdipGetMatrixElements (matrix=0x1c327110, matrixOut=0x89eb10) returned 0x0 [0218.050] LocalFree (hMem=0x89eb10) returned 0x0 [0218.050] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.050] GdipDeleteMatrix (matrix=0x1c327110) returned 0x0 [0218.050] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0218.050] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0218.050] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0218.050] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.050] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0218.050] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0218.050] GetCurrentObject (hdc=0xffffffffa1010707, type=0x1) returned 0x1b00017 [0218.050] GetCurrentObject (hdc=0xffffffffa1010707, type=0x2) returned 0x1900010 [0218.050] GetCurrentObject (hdc=0xffffffffa1010707, type=0x7) returned 0x11050637 [0218.051] GetCurrentObject (hdc=0xffffffffa1010707, type=0x6) returned 0x18a0048 [0218.051] SaveDC (hdc=0xffffffffa1010707) returned 1 [0218.051] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbd040572 [0218.051] GetClipRgn (hdc=0xffffffffa1010707, hrgn=0xffffffffbd040572) returned 0 [0218.051] SelectClipRgn (hdc=0xffffffffa1010707, hrgn=0x6104074d) returned 2 [0218.051] DeleteObject (ho=0xffffffffbd040572) returned 1 [0218.051] DeleteObject (ho=0x6104074d) returned 1 [0218.051] OffsetViewportOrgEx (in: hdc=0xffffffffa1010707, x=0, y=0, lppt=0x27c67c0 | out: lppt=0x27c67c0) returned 1 [0218.051] IsAppThemed () returned 0x1 [0218.051] GetThemeAppProperties () returned 0x3 [0218.051] GetThemeAppProperties () returned 0x3 [0218.051] GetThemeBackgroundContentRect () returned 0x0 [0218.051] RestoreDC (hdc=0xffffffffa1010707, nSavedDC=-1) returned 1 [0218.051] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.051] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa1010707) returned 0x0 [0218.051] IsAppThemed () returned 0x1 [0218.051] GetThemeAppProperties () returned 0x3 [0218.051] GetThemeAppProperties () returned 0x3 [0218.051] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0218.051] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0218.051] GetCurrentObject (hdc=0xffffffffa1010707, type=0x1) returned 0x1b00017 [0218.052] GetCurrentObject (hdc=0xffffffffa1010707, type=0x2) returned 0x1900010 [0218.052] GetCurrentObject (hdc=0xffffffffa1010707, type=0x7) returned 0x11050637 [0218.052] GetCurrentObject (hdc=0xffffffffa1010707, type=0x6) returned 0x18a0048 [0218.052] SaveDC (hdc=0xffffffffa1010707) returned 1 [0218.052] GetTextAlign (hdc=0xffffffffa1010707) returned 0x0 [0218.052] GetTextColor (hdc=0xffffffffa1010707) returned 0x0 [0218.052] GetCurrentObject (hdc=0xffffffffa1010707, type=0x6) returned 0x18a0048 [0218.052] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0218.052] SelectObject (hdc=0xffffffffa1010707, h=0x290a0573) returned 0x18a0048 [0218.052] GetBkMode (hdc=0xffffffffa1010707) returned 2 [0218.052] SetBkMode (hdc=0xffffffffa1010707, mode=1) returned 2 [0218.052] DrawTextExW (in: hdc=0xffffffffa1010707, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x2415, lpdtp=0x27c6d18 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0218.053] DrawTextExW (in: hdc=0xffffffffa1010707, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x2015, lpdtp=0x27c6d18 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0218.053] RestoreDC (hdc=0xffffffffa1010707, nSavedDC=-1) returned 1 [0218.053] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.053] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa1010707) returned 0x0 [0218.053] GetFocus () returned 0x0 [0218.053] IsAppThemed () returned 0x1 [0218.053] GetThemeAppProperties () returned 0x3 [0218.053] GetThemeAppProperties () returned 0x3 [0218.053] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0218.053] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0xffffffffa1010707, x1=0, y1=0, rop=0xcc0020) returned 1 [0218.054] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.054] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffa1010707) returned 0x0 [0218.054] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0218.054] SelectObject (hdc=0xffffffffa1010707, h=0x185000f) returned 0x11050637 [0218.054] DeleteDC (hdc=0xffffffffa1010707) returned 1 [0218.054] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0218.054] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0218.054] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0218.054] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.054] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.054] WaitMessage () returned 1 [0218.390] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0218.390] IsWindowUnicode (hWnd=0x20230) returned 1 [0218.390] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0218.390] TranslateMessage (lpMsg=0x5dd220) returned 0 [0218.390] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0218.391] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.391] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0218.391] WaitMessage () returned 1 [0219.324] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.324] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x88, wParam=0x4, lParam=0x0) returned 0x0 [0219.324] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.325] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0219.325] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0219.325] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0219.325] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dbfc0 | out: lpwndpl=0x5dbfc0) returned 1 [0219.325] GetClientRect (in: hWnd=0x20160, lpRect=0x5dbe40 | out: lpRect=0x5dbe40) returned 1 [0219.325] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.326] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.326] GetSystemMetrics (nIndex=42) returned 0 [0219.326] CoTaskMemAlloc (cb=0x20) returned 0x89d190 [0219.326] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d190, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.326] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d190) returned 0xd [0219.326] CoTaskMemFree (pv=0x89d190) [0219.326] GetClientRect (in: hWnd=0x20160, lpRect=0x5dbbf0 | out: lpRect=0x5dbbf0) returned 1 [0219.326] GetCurrentObject (hdc=0xa0100d0, type=0x1) returned 0x1b00017 [0219.326] GetCurrentObject (hdc=0xa0100d0, type=0x2) returned 0x1900010 [0219.326] GetCurrentObject (hdc=0xa0100d0, type=0x7) returned 0x510506ac [0219.326] GetCurrentObject (hdc=0xa0100d0, type=0x6) returned 0x18a0048 [0219.326] SaveDC (hdc=0xa0100d0) returned 1 [0219.326] GetNearestColor (hdc=0xa0100d0, color=0xf0f0f0) returned 0xf0f0f0 [0219.326] CreateSolidBrush (color=0xf0f0f0) returned 0x7c100686 [0219.327] FillRect (hDC=0xa0100d0, lprc=0x5db720, hbr=0x7c100686) returned 1 [0219.327] DeleteObject (ho=0x7c100686) returned 1 [0219.327] RestoreDC (hdc=0xa0100d0, nSavedDC=-1) returned 1 [0219.327] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.327] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x14, wParam=0x1010749, lParam=0x0) returned 0x1 [0219.327] GetStockObject (i=5) returned 0x1900015 [0219.327] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.327] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.328] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0219.328] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x88, wParam=0x4, lParam=0x0) returned 0x0 [0219.328] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.329] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dbfc0 | out: lpwndpl=0x5dbfc0) returned 1 [0219.329] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dbe40 | out: lpRect=0x5dbe40) returned 1 [0219.329] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.329] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.329] GetSystemMetrics (nIndex=42) returned 0 [0219.329] CoTaskMemAlloc (cb=0x22) returned 0x89d4c0 [0219.329] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89d4c0, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.329] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89d4c0) returned 0xe [0219.329] CoTaskMemFree (pv=0x89d4c0) [0219.329] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dbbf0 | out: lpRect=0x5dbbf0) returned 1 [0219.329] GetCurrentObject (hdc=0x1010749, type=0x1) returned 0x1b00017 [0219.329] GetCurrentObject (hdc=0x1010749, type=0x2) returned 0x1900010 [0219.329] GetCurrentObject (hdc=0x1010749, type=0x7) returned 0xc05073a [0219.329] GetCurrentObject (hdc=0x1010749, type=0x6) returned 0x18a0048 [0219.329] SaveDC (hdc=0x1010749) returned 1 [0219.329] GetNearestColor (hdc=0x1010749, color=0xf0f0f0) returned 0xf0f0f0 [0219.330] CreateSolidBrush (color=0xf0f0f0) returned 0x7d100686 [0219.330] FillRect (hDC=0x1010749, lprc=0x5db720, hbr=0x7d100686) returned 1 [0219.330] DeleteObject (ho=0x7d100686) returned 1 [0219.330] RestoreDC (hdc=0x1010749, nSavedDC=-1) returned 1 [0219.330] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.330] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x14, wParam=0x10105e0, lParam=0x0) returned 0x1 [0219.330] GetStockObject (i=5) returned 0x1900015 [0219.330] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.330] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0219.330] GetStockObject (i=5) returned 0x1900015 [0219.331] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.331] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x14, wParam=0x1010749, lParam=0x0) returned 0x1 [0219.331] GetStockObject (i=5) returned 0x1900015 [0219.331] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.331] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.331] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.331] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.332] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.372] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0219.373] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dd050) returned 0x0 [0219.373] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dd050) returned 0x0 [0219.373] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dd050) returned 0x0 [0219.374] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.374] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0219.374] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0219.374] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0219.374] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dcaa0 | out: lpwndpl=0x5dcaa0) returned 1 [0219.375] GetClientRect (in: hWnd=0x20160, lpRect=0x5dc920 | out: lpRect=0x5dc920) returned 1 [0219.375] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.375] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.375] GetSystemMetrics (nIndex=42) returned 0 [0219.375] CoTaskMemAlloc (cb=0x20) returned 0x89d010 [0219.375] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d010, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.375] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d010) returned 0xd [0219.375] CoTaskMemFree (pv=0x89d010) [0219.375] GetClientRect (in: hWnd=0x20160, lpRect=0x5dc6d0 | out: lpRect=0x5dc6d0) returned 1 [0219.375] GetCurrentObject (hdc=0x1010749, type=0x1) returned 0x1b00017 [0219.375] GetCurrentObject (hdc=0x1010749, type=0x2) returned 0x1900010 [0219.375] GetCurrentObject (hdc=0x1010749, type=0x7) returned 0x510506ac [0219.375] GetCurrentObject (hdc=0x1010749, type=0x6) returned 0x18a0048 [0219.375] SaveDC (hdc=0x1010749) returned 1 [0219.375] GetNearestColor (hdc=0x1010749, color=0xf0f0f0) returned 0xf0f0f0 [0219.375] CreateSolidBrush (color=0xf0f0f0) returned 0x7e100686 [0219.375] FillRect (hDC=0x1010749, lprc=0x5dc200, hbr=0x7e100686) returned 1 [0219.376] DeleteObject (ho=0x7e100686) returned 1 [0219.376] RestoreDC (hdc=0x1010749, nSavedDC=-1) returned 1 [0219.376] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.376] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0219.376] GetStockObject (i=5) returned 0x1900015 [0219.376] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.376] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.378] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x14, wParam=0x1010749, lParam=0x0) returned 0x1 [0219.378] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.379] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dcaa0 | out: lpwndpl=0x5dcaa0) returned 1 [0219.379] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dc920 | out: lpRect=0x5dc920) returned 1 [0219.379] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.379] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.379] GetSystemMetrics (nIndex=42) returned 0 [0219.379] CoTaskMemAlloc (cb=0x22) returned 0x89d280 [0219.379] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89d280, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.380] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89d280) returned 0xe [0219.380] CoTaskMemFree (pv=0x89d280) [0219.380] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dc6d0 | out: lpRect=0x5dc6d0) returned 1 [0219.380] GetCurrentObject (hdc=0xa0100d0, type=0x1) returned 0x1b00017 [0219.380] GetCurrentObject (hdc=0xa0100d0, type=0x2) returned 0x1900010 [0219.380] GetCurrentObject (hdc=0xa0100d0, type=0x7) returned 0xc05073a [0219.380] GetCurrentObject (hdc=0xa0100d0, type=0x6) returned 0x18a0048 [0219.381] SaveDC (hdc=0xa0100d0) returned 1 [0219.381] GetNearestColor (hdc=0xa0100d0, color=0xf0f0f0) returned 0xf0f0f0 [0219.381] CreateSolidBrush (color=0xf0f0f0) returned 0x7f100686 [0219.381] FillRect (hDC=0xa0100d0, lprc=0x5dc200, hbr=0x7f100686) returned 1 [0219.381] DeleteObject (ho=0x7f100686) returned 1 [0219.381] RestoreDC (hdc=0xa0100d0, nSavedDC=-1) returned 1 [0219.381] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.382] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x8003a, Msg=0x14, wParam=0x10105e0, lParam=0x0) returned 0x1 [0219.382] GetStockObject (i=5) returned 0x1900015 [0219.382] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.382] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xd0028, Msg=0x14, wParam=0x1010749, lParam=0x0) returned 0x1 [0219.382] GetStockObject (i=5) returned 0x1900015 [0219.382] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.382] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0xa018a, Msg=0x14, wParam=0xa0100d0, lParam=0x0) returned 0x1 [0219.382] GetStockObject (i=5) returned 0x1900015 [0219.383] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.383] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.383] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.383] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.384] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0219.386] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0x14, wParam=0x1010749, lParam=0x0) returned 0x1 [0219.387] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dca80 | out: lpwndpl=0x5dca80) returned 1 [0219.387] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0219.387] GetClientRect (in: hWnd=0x20160, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0219.387] GetWindowRect (in: hWnd=0x20160, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0219.389] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0219.389] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0219.390] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0219.391] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dca80 | out: lpwndpl=0x5dca80) returned 1 [0219.391] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0219.391] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0219.391] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0219.394] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0219.395] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1c, wParam=0x1, lParam=0x86c) returned 0x0 [0219.410] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1c, wParam=0x1, lParam=0x86c) returned 0x0 [0219.410] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x1c, wParam=0x1, lParam=0x86c) returned 0x0 [0219.410] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x1c, wParam=0x1, lParam=0x86c) returned 0x0 [0219.410] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x1c, wParam=0x1, lParam=0x86c) returned 0x0 [0219.410] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0219.411] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0219.412] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0219.412] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0219.412] GetFocus () returned 0x0 [0219.412] SetFocus (hWnd=0x2021e) returned 0x0 [0219.413] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0219.413] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0219.414] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0219.414] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0219.414] GetStockObject (i=5) returned 0x1900015 [0219.414] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x15 [0219.414] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xd, wParam=0x16, lParam=0x89f150) returned 0x15 [0219.414] GetDlgItem (hDlg=0x20160, nIDDlgItem=131614) returned 0x2021e [0219.414] SendMessageW (hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5dbd30) returned 0x0 [0219.414] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x202b, wParam=0x2021e, lParam=0x5dbd30) returned 0x0 [0219.414] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0219.416] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x20, wParam=0x901f6, lParam=0x200fffe) returned 0x0 [0219.416] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1500143) returned 0x1 [0219.416] IsWindowUnicode (hWnd=0x2021e) returned 1 [0219.416] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.416] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1500143) returned 0x1 [0219.416] SetCursor (hCursor=0x10003) returned 0x10003 [0219.416] TranslateMessage (lpMsg=0x5dd220) returned 0 [0219.416] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0219.416] _TrackMouseEvent (in: lpEventTrack=0x2773508 | out: lpEventTrack=0x2773508) returned 1 [0219.416] SendMessageW (hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0219.416] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0xc161, wParam=0x0, lParam=0x0) returned 0x0 [0219.416] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0219.417] GetKeyState (nVirtKey=1) returned 0 [0219.417] GetKeyState (nVirtKey=2) returned 0 [0219.417] GetKeyState (nVirtKey=4) returned 0 [0219.417] GetKeyState (nVirtKey=5) returned 0 [0219.417] GetKeyState (nVirtKey=6) returned 0 [0219.417] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.417] IsWindowUnicode (hWnd=0x20160) returned 1 [0219.417] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.417] TranslateMessage (lpMsg=0x5dd220) returned 0 [0219.417] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0219.417] BeginPaint (in: hWnd=0x20160, lpPaint=0x5dc6c8 | out: lpPaint=0x5dc6c8) returned 0x1010749 [0219.417] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.417] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.417] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.417] GetSystemMetrics (nIndex=42) returned 0 [0219.417] CoTaskMemAlloc (cb=0x20) returned 0x89d4c0 [0219.417] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d4c0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.417] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d4c0) returned 0xd [0219.418] CoTaskMemFree (pv=0x89d4c0) [0219.418] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.418] EndPaint (hWnd=0x20160, lpPaint=0x5dc6d8) returned 1 [0219.418] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.418] IsWindowUnicode (hWnd=0x2021e) returned 1 [0219.418] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.418] TranslateMessage (lpMsg=0x5dd220) returned 0 [0219.418] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0219.418] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0219.418] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.418] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffffeb010713 [0219.418] SelectObject (hdc=0xffffffffeb010713, h=0x11050637) returned 0x185000f [0219.418] GdipCreateFromHDC (hdc=0xffffffffeb010713, graphics=0x5dc420) returned 0x0 [0219.418] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.419] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0219.419] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0219.419] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327150) returned 0x0 [0219.419] GdipIsMatrixIdentity (matrix=0x1c327150, result=0x5dc5b0) returned 0x0 [0219.419] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0219.419] GdipGetMatrixElements (matrix=0x1c327150, matrixOut=0x89ec10) returned 0x0 [0219.419] LocalFree (hMem=0x89ec10) returned 0x0 [0219.419] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.419] GdipDeleteMatrix (matrix=0x1c327150) returned 0x0 [0219.419] GdipCreateRegion (region=0x5dc550) returned 0x0 [0219.419] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.419] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0219.419] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0219.419] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd670dbd) returned 0x0 [0219.419] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.419] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.420] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0219.420] GetCurrentObject (hdc=0xffffffffeb010713, type=0x1) returned 0x1b00017 [0219.420] GetCurrentObject (hdc=0xffffffffeb010713, type=0x2) returned 0x1900010 [0219.420] GetCurrentObject (hdc=0xffffffffeb010713, type=0x7) returned 0x11050637 [0219.420] GetCurrentObject (hdc=0xffffffffeb010713, type=0x6) returned 0x18a0048 [0219.420] SaveDC (hdc=0xffffffffeb010713) returned 1 [0219.420] GetNearestColor (hdc=0xffffffffeb010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.420] GetNearestColor (hdc=0xffffffffeb010713, color=0xa0a0a0) returned 0xa0a0a0 [0219.420] GetNearestColor (hdc=0xffffffffeb010713, color=0x696969) returned 0x696969 [0219.420] GetNearestColor (hdc=0xffffffffeb010713, color=0xa0a0a0) returned 0xa0a0a0 [0219.420] GetNearestColor (hdc=0xffffffffeb010713, color=0x0) returned 0x0 [0219.421] GetNearestColor (hdc=0xffffffffeb010713, color=0xffffff) returned 0xffffff [0219.421] GetNearestColor (hdc=0xffffffffeb010713, color=0xe5e5e5) returned 0xe5e5e5 [0219.421] GetNearestColor (hdc=0xffffffffeb010713, color=0xd8d8d8) returned 0xd8d8d8 [0219.421] GetNearestColor (hdc=0xffffffffeb010713, color=0x0) returned 0x0 [0219.421] RestoreDC (hdc=0xffffffffeb010713, nSavedDC=-1) returned 1 [0219.421] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.421] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffeb010713) returned 0x0 [0219.421] IsAppThemed () returned 0x1 [0219.421] GetThemeAppProperties () returned 0x3 [0219.421] GetThemeAppProperties () returned 0x3 [0219.421] IsAppThemed () returned 0x1 [0219.421] GetThemeAppProperties () returned 0x3 [0219.421] GetThemeAppProperties () returned 0x3 [0219.421] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x2415, lpdtp=0x27c8788 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0219.422] IsAppThemed () returned 0x1 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] IsAppThemed () returned 0x1 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] IsAppThemed () returned 0x1 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] IsAppThemed () returned 0x1 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] IsThemePartDefined () returned 0x1 [0219.422] IsAppThemed () returned 0x1 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0219.422] IsAppThemed () returned 0x1 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] IsAppThemed () returned 0x1 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] GetThemeAppProperties () returned 0x3 [0219.422] IsThemePartDefined () returned 0x1 [0219.422] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0219.423] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.423] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0219.423] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327190) returned 0x0 [0219.423] GdipIsMatrixIdentity (matrix=0x1c327190, result=0x5dbdc0) returned 0x0 [0219.423] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f490 [0219.423] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89f490) returned 0x0 [0219.423] LocalFree (hMem=0x89f490) returned 0x0 [0219.423] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec50 [0219.423] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89ec50) returned 0x0 [0219.423] LocalFree (hMem=0x89ec50) returned 0x0 [0219.423] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.423] GdipDeleteMatrix (matrix=0x1c327190) returned 0x0 [0219.423] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0219.423] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0219.423] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0219.423] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.423] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.423] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0219.423] GetCurrentObject (hdc=0xffffffffeb010713, type=0x1) returned 0x1b00017 [0219.423] GetCurrentObject (hdc=0xffffffffeb010713, type=0x2) returned 0x1900010 [0219.423] GetCurrentObject (hdc=0xffffffffeb010713, type=0x7) returned 0x11050637 [0219.423] GetCurrentObject (hdc=0xffffffffeb010713, type=0x6) returned 0x18a0048 [0219.424] SaveDC (hdc=0xffffffffeb010713) returned 1 [0219.424] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6204074d [0219.424] GetClipRgn (hdc=0xffffffffeb010713, hrgn=0x6204074d) returned 0 [0219.424] SelectClipRgn (hdc=0xffffffffeb010713, hrgn=0xffffffffc1040572) returned 2 [0219.424] DeleteObject (ho=0x6204074d) returned 1 [0219.424] DeleteObject (ho=0xffffffffc1040572) returned 1 [0219.424] OffsetViewportOrgEx (in: hdc=0xffffffffeb010713, x=0, y=0, lppt=0x27c9198 | out: lppt=0x27c9198) returned 1 [0219.424] DrawThemeParentBackground () returned 0x0 [0219.424] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0219.424] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0219.424] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.424] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.424] GetSystemMetrics (nIndex=42) returned 0 [0219.424] CoTaskMemAlloc (cb=0x20) returned 0x89d010 [0219.424] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d010, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.424] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d010) returned 0xd [0219.425] CoTaskMemFree (pv=0x89d010) [0219.425] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0219.425] GetCurrentObject (hdc=0xffffffffeb010713, type=0x1) returned 0x1b00017 [0219.425] GetCurrentObject (hdc=0xffffffffeb010713, type=0x2) returned 0x1900010 [0219.425] GetCurrentObject (hdc=0xffffffffeb010713, type=0x7) returned 0x11050637 [0219.425] GetCurrentObject (hdc=0xffffffffeb010713, type=0x6) returned 0x18a0048 [0219.425] SaveDC (hdc=0xffffffffeb010713) returned 2 [0219.425] GetNearestColor (hdc=0xffffffffeb010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.425] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff80100686 [0219.425] FillRect (hDC=0xffffffffeb010713, lprc=0x5dafe0, hbr=0xffffffff80100686) returned 1 [0219.425] DeleteObject (ho=0xffffffff80100686) returned 1 [0219.425] RestoreDC (hdc=0xffffffffeb010713, nSavedDC=-1) returned 1 [0219.425] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.425] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.425] GetSystemMetrics (nIndex=42) returned 0 [0219.426] CoTaskMemAlloc (cb=0x20) returned 0x89cfb0 [0219.426] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cfb0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.426] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cfb0) returned 0xd [0219.426] CoTaskMemFree (pv=0x89cfb0) [0219.426] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0219.426] GetCurrentObject (hdc=0xffffffffeb010713, type=0x1) returned 0x1b00017 [0219.426] GetCurrentObject (hdc=0xffffffffeb010713, type=0x2) returned 0x1900010 [0219.426] GetCurrentObject (hdc=0xffffffffeb010713, type=0x7) returned 0x11050637 [0219.426] GetCurrentObject (hdc=0xffffffffeb010713, type=0x6) returned 0x18a0048 [0219.426] SaveDC (hdc=0xffffffffeb010713) returned 2 [0219.426] GetNearestColor (hdc=0xffffffffeb010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.426] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff81100686 [0219.426] FillRect (hDC=0xffffffffeb010713, lprc=0x5daee0, hbr=0xffffffff81100686) returned 1 [0219.426] DeleteObject (ho=0xffffffff81100686) returned 1 [0219.432] RestoreDC (hdc=0xffffffffeb010713, nSavedDC=-1) returned 1 [0219.432] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.432] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.432] GetSystemMetrics (nIndex=42) returned 0 [0219.432] CoTaskMemAlloc (cb=0x20) returned 0x89d4c0 [0219.432] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d4c0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.432] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d4c0) returned 0xd [0219.432] CoTaskMemFree (pv=0x89d4c0) [0219.433] RestoreDC (hdc=0xffffffffeb010713, nSavedDC=-1) returned 1 [0219.433] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.433] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffeb010713) returned 0x0 [0219.433] IsAppThemed () returned 0x1 [0219.433] GetThemeAppProperties () returned 0x3 [0219.433] GetThemeAppProperties () returned 0x3 [0219.433] IsAppThemed () returned 0x1 [0219.433] GetThemeAppProperties () returned 0x3 [0219.433] GetThemeAppProperties () returned 0x3 [0219.433] IsThemePartDefined () returned 0x1 [0219.433] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0219.433] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.433] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0219.433] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327090) returned 0x0 [0219.433] GdipIsMatrixIdentity (matrix=0x1c327090, result=0x5dbca0) returned 0x0 [0219.433] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0219.433] GdipGetMatrixElements (matrix=0x1c327090, matrixOut=0x89f350) returned 0x0 [0219.433] LocalFree (hMem=0x89f350) returned 0x0 [0219.433] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f2d0 [0219.433] GdipGetMatrixElements (matrix=0x1c327090, matrixOut=0x89f2d0) returned 0x0 [0219.433] LocalFree (hMem=0x89f2d0) returned 0x0 [0219.433] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.434] GdipDeleteMatrix (matrix=0x1c327090) returned 0x0 [0219.434] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0219.434] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0219.434] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0219.434] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.434] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.434] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0219.434] GetCurrentObject (hdc=0xffffffffeb010713, type=0x1) returned 0x1b00017 [0219.434] GetCurrentObject (hdc=0xffffffffeb010713, type=0x2) returned 0x1900010 [0219.434] GetCurrentObject (hdc=0xffffffffeb010713, type=0x7) returned 0x11050637 [0219.434] GetCurrentObject (hdc=0xffffffffeb010713, type=0x6) returned 0x18a0048 [0219.434] SaveDC (hdc=0xffffffffeb010713) returned 1 [0219.434] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc2040572 [0219.434] GetClipRgn (hdc=0xffffffffeb010713, hrgn=0xffffffffc2040572) returned 0 [0219.434] SelectClipRgn (hdc=0xffffffffeb010713, hrgn=0x6404074d) returned 2 [0219.434] DeleteObject (ho=0xffffffffc2040572) returned 1 [0219.434] DeleteObject (ho=0x6404074d) returned 1 [0219.434] OffsetViewportOrgEx (in: hdc=0xffffffffeb010713, x=0, y=0, lppt=0x27c9e98 | out: lppt=0x27c9e98) returned 1 [0219.435] IsAppThemed () returned 0x1 [0219.435] GetThemeAppProperties () returned 0x3 [0219.435] GetThemeAppProperties () returned 0x3 [0219.435] DrawThemeBackground () returned 0x0 [0219.435] RestoreDC (hdc=0xffffffffeb010713, nSavedDC=-1) returned 1 [0219.435] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.435] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffeb010713) returned 0x0 [0219.435] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0219.435] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.435] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0219.435] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f90) returned 0x0 [0219.435] GdipIsMatrixIdentity (matrix=0x1c326f90, result=0x5dbc70) returned 0x0 [0219.435] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef10 [0219.435] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89ef10) returned 0x0 [0219.435] LocalFree (hMem=0x89ef10) returned 0x0 [0219.435] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec50 [0219.435] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89ec50) returned 0x0 [0219.435] LocalFree (hMem=0x89ec50) returned 0x0 [0219.435] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.436] GdipDeleteMatrix (matrix=0x1c326f90) returned 0x0 [0219.436] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0219.436] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0219.436] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0219.436] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.436] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.436] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0219.436] GetCurrentObject (hdc=0xffffffffeb010713, type=0x1) returned 0x1b00017 [0219.436] GetCurrentObject (hdc=0xffffffffeb010713, type=0x2) returned 0x1900010 [0219.436] GetCurrentObject (hdc=0xffffffffeb010713, type=0x7) returned 0x11050637 [0219.436] GetCurrentObject (hdc=0xffffffffeb010713, type=0x6) returned 0x18a0048 [0219.436] SaveDC (hdc=0xffffffffeb010713) returned 1 [0219.436] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6504074d [0219.436] GetClipRgn (hdc=0xffffffffeb010713, hrgn=0x6504074d) returned 0 [0219.436] SelectClipRgn (hdc=0xffffffffeb010713, hrgn=0xffffffffc3040572) returned 2 [0219.436] DeleteObject (ho=0x6504074d) returned 1 [0219.436] DeleteObject (ho=0xffffffffc3040572) returned 1 [0219.436] OffsetViewportOrgEx (in: hdc=0xffffffffeb010713, x=0, y=0, lppt=0x27ca398 | out: lppt=0x27ca398) returned 1 [0219.437] IsAppThemed () returned 0x1 [0219.437] GetThemeAppProperties () returned 0x3 [0219.437] GetThemeAppProperties () returned 0x3 [0219.437] GetThemeBackgroundContentRect () returned 0x0 [0219.437] RestoreDC (hdc=0xffffffffeb010713, nSavedDC=-1) returned 1 [0219.437] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.437] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffeb010713) returned 0x0 [0219.437] IsAppThemed () returned 0x1 [0219.437] GetThemeAppProperties () returned 0x3 [0219.437] GetThemeAppProperties () returned 0x3 [0219.437] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0219.437] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0219.437] GetCurrentObject (hdc=0xffffffffeb010713, type=0x1) returned 0x1b00017 [0219.437] GetCurrentObject (hdc=0xffffffffeb010713, type=0x2) returned 0x1900010 [0219.437] GetCurrentObject (hdc=0xffffffffeb010713, type=0x7) returned 0x11050637 [0219.437] GetCurrentObject (hdc=0xffffffffeb010713, type=0x6) returned 0x18a0048 [0219.437] SaveDC (hdc=0xffffffffeb010713) returned 1 [0219.437] GetTextAlign (hdc=0xffffffffeb010713) returned 0x0 [0219.437] GetTextColor (hdc=0xffffffffeb010713) returned 0x0 [0219.438] GetCurrentObject (hdc=0xffffffffeb010713, type=0x6) returned 0x18a0048 [0219.438] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0219.438] SelectObject (hdc=0xffffffffeb010713, h=0x290a0573) returned 0x18a0048 [0219.438] GetBkMode (hdc=0xffffffffeb010713) returned 2 [0219.438] SetBkMode (hdc=0xffffffffeb010713, mode=1) returned 2 [0219.438] DrawTextExW (in: hdc=0xffffffffeb010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x2415, lpdtp=0x27ca8f0 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0219.438] DrawTextExW (in: hdc=0xffffffffeb010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x2015, lpdtp=0x27ca8f0 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0219.438] RestoreDC (hdc=0xffffffffeb010713, nSavedDC=-1) returned 1 [0219.438] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.439] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffeb010713) returned 0x0 [0219.439] GetFocus () returned 0x2021e [0219.439] IsAppThemed () returned 0x1 [0219.439] GetThemeAppProperties () returned 0x3 [0219.439] GetThemeAppProperties () returned 0x3 [0219.439] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0219.439] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0xffffffffeb010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.439] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.439] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffeb010713) returned 0x0 [0219.439] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.439] SelectObject (hdc=0xffffffffeb010713, h=0x185000f) returned 0x11050637 [0219.439] DeleteDC (hdc=0xffffffffeb010713) returned 1 [0219.439] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.439] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.439] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0219.439] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.439] IsWindowUnicode (hWnd=0x20220) returned 1 [0219.439] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.440] TranslateMessage (lpMsg=0x5dd220) returned 0 [0219.440] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0219.440] BeginPaint (in: hWnd=0x20220, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x10105e0 [0219.440] SelectPalette (hdc=0x10105e0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.440] CreateCompatibleDC (hdc=0x10105e0) returned 0xffffffffed010713 [0219.440] SelectObject (hdc=0xffffffffed010713, h=0x11050637) returned 0x185000f [0219.440] GdipCreateFromHDC (hdc=0xffffffffed010713, graphics=0x5dc420) returned 0x0 [0219.440] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.440] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=145, height=13, combineMode=0x0) returned 0x0 [0219.440] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0219.440] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327350) returned 0x0 [0219.440] GdipIsMatrixIdentity (matrix=0x1c327350, result=0x5dc5b0) returned 0x0 [0219.440] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea50 [0219.440] GdipGetMatrixElements (matrix=0x1c327350, matrixOut=0x89ea50) returned 0x0 [0219.440] LocalFree (hMem=0x89ea50) returned 0x0 [0219.440] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.440] GdipDeleteMatrix (matrix=0x1c327350) returned 0x0 [0219.441] GdipCreateRegion (region=0x5dc550) returned 0x0 [0219.441] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.441] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0219.441] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0219.441] GetWindowTextLengthW (hWnd=0x20220) returned 29 [0219.441] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0219.441] GetSystemMetrics (nIndex=42) returned 0 [0219.441] CoTaskMemAlloc (cb=0x40) returned 0x896210 [0219.441] GetWindowTextW (in: hWnd=0x20220, lpString=0x896210, nMaxCount=30 | out: lpString="Put your decryption key here:") returned 29 [0219.441] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xd, wParam=0x1e, lParam=0x896210) returned 0x1d [0219.441] CoTaskMemFree (pv=0x896210) [0219.441] GetClientRect (in: hWnd=0x20220, lpRect=0x5dc5c0 | out: lpRect=0x5dc5c0) returned 1 [0219.441] GdipCreateRegion (region=0x5dc040) returned 0x0 [0219.441] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0219.441] GdipCreateMatrix (matrix=0x5dc040) returned 0x0 [0219.441] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326c50) returned 0x0 [0219.441] GdipIsMatrixIdentity (matrix=0x1c326c50, result=0x5dc0a0) returned 0x0 [0219.441] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb50 [0219.441] GdipGetMatrixElements (matrix=0x1c326c50, matrixOut=0x89eb50) returned 0x0 [0219.441] LocalFree (hMem=0x89eb50) returned 0x0 [0219.441] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0219.441] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0219.441] GdipGetMatrixElements (matrix=0x1c326c50, matrixOut=0x89f050) returned 0x0 [0219.441] LocalFree (hMem=0x89f050) returned 0x0 [0219.441] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.442] GdipDeleteMatrix (matrix=0x1c326c50) returned 0x0 [0219.442] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0f0) returned 0x0 [0219.442] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5dc0b0) returned 0x0 [0219.442] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x5dc0b0) returned 0x0 [0219.442] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.442] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0219.442] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc120) returned 0x0 [0219.442] GetCurrentObject (hdc=0xffffffffed010713, type=0x1) returned 0x1b00017 [0219.442] GetCurrentObject (hdc=0xffffffffed010713, type=0x2) returned 0x1900010 [0219.442] GetCurrentObject (hdc=0xffffffffed010713, type=0x7) returned 0x11050637 [0219.442] GetCurrentObject (hdc=0xffffffffed010713, type=0x6) returned 0x18a0048 [0219.442] SaveDC (hdc=0xffffffffed010713) returned 1 [0219.442] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc4040572 [0219.442] GetClipRgn (hdc=0xffffffffed010713, hrgn=0xffffffffc4040572) returned 0 [0219.498] SelectClipRgn (hdc=0xffffffffed010713, hrgn=0x6804074d) returned 2 [0219.498] DeleteObject (ho=0xffffffffc4040572) returned 1 [0219.498] DeleteObject (ho=0x6804074d) returned 1 [0219.498] OffsetViewportOrgEx (in: hdc=0xffffffffed010713, x=0, y=0, lppt=0x27cb008 | out: lppt=0x27cb008) returned 1 [0219.498] GetNearestColor (hdc=0xffffffffed010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.499] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff82100686 [0219.499] FillRect (hDC=0xffffffffed010713, lprc=0x5dc0f0, hbr=0xffffffff82100686) returned 1 [0219.499] DeleteObject (ho=0xffffffff82100686) returned 1 [0219.499] RestoreDC (hdc=0xffffffffed010713, nSavedDC=-1) returned 1 [0219.499] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.499] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffed010713) returned 0x0 [0219.499] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd650dbd) returned 0x0 [0219.499] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.499] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.499] GetWindowTextLengthW (hWnd=0x20220) returned 29 [0219.499] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0219.499] GetSystemMetrics (nIndex=42) returned 0 [0219.499] CoTaskMemAlloc (cb=0x40) returned 0x895400 [0219.499] GetWindowTextW (in: hWnd=0x20220, lpString=0x895400, nMaxCount=30 | out: lpString="Put your decryption key here:") returned 29 [0219.499] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0xd, wParam=0x1e, lParam=0x895400) returned 0x1d [0219.499] CoTaskMemFree (pv=0x895400) [0219.499] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc180) returned 0x0 [0219.499] GetCurrentObject (hdc=0xffffffffed010713, type=0x1) returned 0x1b00017 [0219.499] GetCurrentObject (hdc=0xffffffffed010713, type=0x2) returned 0x1900010 [0219.499] GetCurrentObject (hdc=0xffffffffed010713, type=0x7) returned 0x11050637 [0219.499] GetCurrentObject (hdc=0xffffffffed010713, type=0x6) returned 0x18a0048 [0219.500] SaveDC (hdc=0xffffffffed010713) returned 1 [0219.500] GetNearestColor (hdc=0xffffffffed010713, color=0x0) returned 0x0 [0219.500] RestoreDC (hdc=0xffffffffed010713, nSavedDC=-1) returned 1 [0219.500] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.500] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffed010713) returned 0x0 [0219.500] AdjustWindowRectEx (in: lpRect=0x5dc040, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5dc040) returned 1 [0219.500] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dc060) returned 0x0 [0219.500] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc040) returned 0x0 [0219.500] GetCurrentObject (hdc=0xffffffffed010713, type=0x1) returned 0x1b00017 [0219.500] GetCurrentObject (hdc=0xffffffffed010713, type=0x2) returned 0x1900010 [0219.500] GetCurrentObject (hdc=0xffffffffed010713, type=0x7) returned 0x11050637 [0219.500] GetCurrentObject (hdc=0xffffffffed010713, type=0x6) returned 0x18a0048 [0219.500] SaveDC (hdc=0xffffffffed010713) returned 1 [0219.500] GetTextAlign (hdc=0xffffffffed010713) returned 0x0 [0219.500] GetTextColor (hdc=0xffffffffed010713) returned 0x0 [0219.500] GetCurrentObject (hdc=0xffffffffed010713, type=0x6) returned 0x18a0048 [0219.500] GetObjectW (in: h=0x18a0048, c=92, pv=0x5dbab0 | out: pv=0x5dbab0) returned 92 [0219.500] SelectObject (hdc=0xffffffffed010713, h=0x290a0573) returned 0x18a0048 [0219.500] GetBkMode (hdc=0xffffffffed010713) returned 2 [0219.500] SetBkMode (hdc=0xffffffffed010713, mode=1) returned 2 [0219.500] DrawTextExW (in: hdc=0xffffffffed010713, lpchText="Put your decryption key here:", cchText=29, lprc=0x5dbbf0, format=0x0, lpdtp=0x27cb700 | out: lpchText="Put your decryption key here:", lprc=0x5dbbf0) returned 13 [0219.501] RestoreDC (hdc=0xffffffffed010713, nSavedDC=-1) returned 1 [0219.501] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.501] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffed010713) returned 0x0 [0219.501] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0219.501] BitBlt (hdc=0x10105e0, x=0, y=0, cx=145, cy=13, hdcSrc=0xffffffffed010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.501] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.501] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffed010713) returned 0x0 [0219.501] SelectPalette (hdc=0x10105e0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.501] SelectObject (hdc=0xffffffffed010713, h=0x185000f) returned 0x11050637 [0219.501] DeleteDC (hdc=0xffffffffed010713) returned 1 [0219.501] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.501] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.501] EndPaint (hWnd=0x20220, lpPaint=0x5dc628) returned 1 [0219.501] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.501] IsWindowUnicode (hWnd=0x2021a) returned 1 [0219.501] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.502] TranslateMessage (lpMsg=0x5dd220) returned 0 [0219.502] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0219.502] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0219.502] SendMessageW (hWnd=0x2021a, Msg=0x2111, wParam=0x400021a, lParam=0x2021a) returned 0x0 [0219.502] SendMessageW (hWnd=0x2021a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0219.502] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0219.502] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.502] IsWindowUnicode (hWnd=0x901f6) returned 1 [0219.502] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.502] TranslateMessage (lpMsg=0x5dd220) returned 0 [0219.502] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0219.502] BeginPaint (in: hWnd=0x901f6, lpPaint=0x5dc6c8 | out: lpPaint=0x5dc6c8) returned 0x1010749 [0219.502] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.503] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.503] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.503] GetSystemMetrics (nIndex=42) returned 0 [0219.503] CoTaskMemAlloc (cb=0x22) returned 0x89d400 [0219.503] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89d400, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.503] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89d400) returned 0xe [0219.503] CoTaskMemFree (pv=0x89d400) [0219.503] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.503] EndPaint (hWnd=0x901f6, lpPaint=0x5dc6d8) returned 1 [0219.503] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.503] IsWindowUnicode (hWnd=0x8003a) returned 1 [0219.503] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.503] TranslateMessage (lpMsg=0x5dd220) returned 0 [0219.503] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0219.503] BeginPaint (in: hWnd=0x8003a, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x10105e0 [0219.503] SelectPalette (hdc=0x10105e0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.503] CreateCompatibleDC (hdc=0x10105e0) returned 0xfffffffff2010713 [0219.503] GetObjectType (h=0x10105e0) returned 0x3 [0219.503] CreateCompatibleBitmap (hdc=0x10105e0, cx=1, cy=1) returned 0xffffffff8d050758 [0219.504] GetDIBits (in: hdc=0x10105e0, hbm=0xffffffff8d050758, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x5dbca8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x5dbca8) returned 1 [0219.504] GetDIBits (in: hdc=0x10105e0, hbm=0xffffffff8d050758, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x5dbca8, usage=0x0 | out: lpvBits=0x0, lpbmi=0x5dbca8) returned 1 [0219.504] DeleteObject (ho=0xffffffff8d050758) returned 1 [0219.504] CreateDIBSection (in: hdc=0x10105e0, lpbmi=0x5dbe80, usage=0x0, ppvBits=0x5dbe78, hSection=0x0, offset=0x0 | out: ppvBits=0x5dbe78) returned 0x4a050750 [0219.504] SelectObject (hdc=0xfffffffff2010713, h=0x4a050750) returned 0x185000f [0219.504] GdipCreateFromHDC (hdc=0xfffffffff2010713, graphics=0x5dc390) returned 0x0 [0219.504] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.504] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=637, height=37, combineMode=0x0) returned 0x0 [0219.504] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0219.504] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e50) returned 0x0 [0219.504] GdipIsMatrixIdentity (matrix=0x1c326e50, result=0x5dc5b0) returned 0x0 [0219.504] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f1d0 [0219.504] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89f1d0) returned 0x0 [0219.504] LocalFree (hMem=0x89f1d0) returned 0x0 [0219.505] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.511] GdipDeleteMatrix (matrix=0x1c326e50) returned 0x0 [0219.511] GdipCreateRegion (region=0x5dc550) returned 0x0 [0219.511] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.511] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0219.511] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0219.511] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd630dbd) returned 0x0 [0219.511] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.511] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.512] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0219.512] GetCurrentObject (hdc=0xfffffffff2010713, type=0x1) returned 0x1b00017 [0219.512] GetCurrentObject (hdc=0xfffffffff2010713, type=0x2) returned 0x1900010 [0219.512] GetCurrentObject (hdc=0xfffffffff2010713, type=0x7) returned 0x4a050750 [0219.513] GetCurrentObject (hdc=0xfffffffff2010713, type=0x6) returned 0x18a0048 [0219.513] SaveDC (hdc=0xfffffffff2010713) returned 1 [0219.513] GetNearestColor (hdc=0xfffffffff2010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.513] GetNearestColor (hdc=0xfffffffff2010713, color=0xa0a0a0) returned 0xa0a0a0 [0219.513] GetNearestColor (hdc=0xfffffffff2010713, color=0x696969) returned 0x696969 [0219.514] GetNearestColor (hdc=0xfffffffff2010713, color=0xa0a0a0) returned 0xa0a0a0 [0219.514] GetNearestColor (hdc=0xfffffffff2010713, color=0x0) returned 0x0 [0219.514] GetNearestColor (hdc=0xfffffffff2010713, color=0xffffff) returned 0xffffff [0219.514] GetNearestColor (hdc=0xfffffffff2010713, color=0xe5e5e5) returned 0xe5e5e5 [0219.515] GetNearestColor (hdc=0xfffffffff2010713, color=0xd8d8d8) returned 0xd8d8d8 [0219.515] GetNearestColor (hdc=0xfffffffff2010713, color=0x0) returned 0x0 [0219.515] RestoreDC (hdc=0xfffffffff2010713, nSavedDC=-1) returned 1 [0219.515] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.515] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xfffffffff2010713) returned 0x0 [0219.515] IsAppThemed () returned 0x1 [0219.516] GetThemeAppProperties () returned 0x3 [0219.516] GetThemeAppProperties () returned 0x3 [0219.516] IsAppThemed () returned 0x1 [0219.516] GetThemeAppProperties () returned 0x3 [0219.516] GetThemeAppProperties () returned 0x3 [0219.516] DrawTextExW (in: hdc=0x42010685, lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", cchText=69, lprc=0x5dbc80, format=0x102415, lpdtp=0x27cd190 | out: lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", lprc=0x5dbc80) returned 13 [0219.518] IsAppThemed () returned 0x1 [0219.518] GetThemeAppProperties () returned 0x3 [0219.518] GetThemeAppProperties () returned 0x3 [0219.518] IsAppThemed () returned 0x1 [0219.518] GetThemeAppProperties () returned 0x3 [0219.518] GetThemeAppProperties () returned 0x3 [0219.518] GetFocus () returned 0x2021e [0219.518] IsAppThemed () returned 0x1 [0219.518] GetThemeAppProperties () returned 0x3 [0219.519] GetThemeAppProperties () returned 0x3 [0219.519] IsAppThemed () returned 0x1 [0219.519] GetThemeAppProperties () returned 0x3 [0219.519] GetThemeAppProperties () returned 0x3 [0219.519] IsThemePartDefined () returned 0x1 [0219.519] IsAppThemed () returned 0x1 [0219.520] GetThemeAppProperties () returned 0x3 [0219.520] GetThemeAppProperties () returned 0x3 [0219.520] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0219.520] IsAppThemed () returned 0x1 [0219.520] GetThemeAppProperties () returned 0x3 [0219.520] GetThemeAppProperties () returned 0x3 [0219.520] IsAppThemed () returned 0x1 [0219.521] GetThemeAppProperties () returned 0x3 [0219.521] GetThemeAppProperties () returned 0x3 [0219.521] IsThemePartDefined () returned 0x1 [0219.521] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0219.521] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.522] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0219.522] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327150) returned 0x0 [0219.522] GdipIsMatrixIdentity (matrix=0x1c327150, result=0x5dbdc0) returned 0x0 [0219.522] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e850 [0219.522] GdipGetMatrixElements (matrix=0x1c327150, matrixOut=0x89e850) returned 0x0 [0219.522] LocalFree (hMem=0x89e850) returned 0x0 [0219.522] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec50 [0219.522] GdipGetMatrixElements (matrix=0x1c327150, matrixOut=0x89ec50) returned 0x0 [0219.522] LocalFree (hMem=0x89ec50) returned 0x0 [0219.522] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.522] GdipDeleteMatrix (matrix=0x1c327150) returned 0x0 [0219.523] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0219.523] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0219.523] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0219.523] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.523] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.523] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0219.523] GetCurrentObject (hdc=0xfffffffff2010713, type=0x1) returned 0x1b00017 [0219.523] GetCurrentObject (hdc=0xfffffffff2010713, type=0x2) returned 0x1900010 [0219.524] GetCurrentObject (hdc=0xfffffffff2010713, type=0x7) returned 0x4a050750 [0219.524] GetCurrentObject (hdc=0xfffffffff2010713, type=0x6) returned 0x18a0048 [0219.524] SaveDC (hdc=0xfffffffff2010713) returned 1 [0219.524] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6904074d [0219.524] GetClipRgn (hdc=0xfffffffff2010713, hrgn=0x6904074d) returned 0 [0219.524] SelectClipRgn (hdc=0xfffffffff2010713, hrgn=0xffffffffc7040572) returned 2 [0219.525] DeleteObject (ho=0x6904074d) returned 1 [0219.525] DeleteObject (ho=0xffffffffc7040572) returned 1 [0219.525] OffsetViewportOrgEx (in: hdc=0xfffffffff2010713, x=0, y=0, lppt=0x27cdba0 | out: lppt=0x27cdba0) returned 1 [0219.525] DrawThemeParentBackground () returned 0x0 [0219.525] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0219.525] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0219.525] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.525] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.525] GetSystemMetrics (nIndex=42) returned 0 [0219.525] CoTaskMemAlloc (cb=0x22) returned 0x89d460 [0219.525] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89d460, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.525] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89d460) returned 0xe [0219.525] CoTaskMemFree (pv=0x89d460) [0219.526] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0219.526] GetCurrentObject (hdc=0xfffffffff2010713, type=0x1) returned 0x1b00017 [0219.526] GetCurrentObject (hdc=0xfffffffff2010713, type=0x2) returned 0x1900010 [0219.526] GetCurrentObject (hdc=0xfffffffff2010713, type=0x7) returned 0x4a050750 [0219.526] GetCurrentObject (hdc=0xfffffffff2010713, type=0x6) returned 0x18a0048 [0219.526] SaveDC (hdc=0xfffffffff2010713) returned 2 [0219.526] GetNearestColor (hdc=0xfffffffff2010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.526] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff83100686 [0219.526] FillRect (hDC=0xfffffffff2010713, lprc=0x5dafe0, hbr=0xffffffff83100686) returned 1 [0219.527] DeleteObject (ho=0xffffffff83100686) returned 1 [0219.527] RestoreDC (hdc=0xfffffffff2010713, nSavedDC=-1) returned 1 [0219.527] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.528] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.528] GetSystemMetrics (nIndex=42) returned 0 [0219.528] CoTaskMemAlloc (cb=0x22) returned 0x89d400 [0219.528] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89d400, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.528] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89d400) returned 0xe [0219.528] CoTaskMemFree (pv=0x89d400) [0219.528] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0219.528] GetCurrentObject (hdc=0xfffffffff2010713, type=0x1) returned 0x1b00017 [0219.528] GetCurrentObject (hdc=0xfffffffff2010713, type=0x2) returned 0x1900010 [0219.528] GetCurrentObject (hdc=0xfffffffff2010713, type=0x7) returned 0x4a050750 [0219.529] GetCurrentObject (hdc=0xfffffffff2010713, type=0x6) returned 0x18a0048 [0219.529] SaveDC (hdc=0xfffffffff2010713) returned 2 [0219.529] GetNearestColor (hdc=0xfffffffff2010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.529] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff84100686 [0219.530] FillRect (hDC=0xfffffffff2010713, lprc=0x5daee0, hbr=0xffffffff84100686) returned 1 [0219.530] DeleteObject (ho=0xffffffff84100686) returned 1 [0219.530] RestoreDC (hdc=0xfffffffff2010713, nSavedDC=-1) returned 1 [0219.530] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.530] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.530] GetSystemMetrics (nIndex=42) returned 0 [0219.530] CoTaskMemAlloc (cb=0x22) returned 0x89d010 [0219.530] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89d010, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.530] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89d010) returned 0xe [0219.531] CoTaskMemFree (pv=0x89d010) [0219.531] RestoreDC (hdc=0xfffffffff2010713, nSavedDC=-1) returned 1 [0219.531] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.531] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xfffffffff2010713) returned 0x0 [0219.531] IsAppThemed () returned 0x1 [0219.531] GetThemeAppProperties () returned 0x3 [0219.531] GetThemeAppProperties () returned 0x3 [0219.531] IsAppThemed () returned 0x1 [0219.532] GetThemeAppProperties () returned 0x3 [0219.532] GetThemeAppProperties () returned 0x3 [0219.532] IsThemePartDefined () returned 0x1 [0219.532] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0219.532] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.532] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0219.532] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327210) returned 0x0 [0219.532] GdipIsMatrixIdentity (matrix=0x1c327210, result=0x5dbca0) returned 0x0 [0219.532] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f590 [0219.533] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89f590) returned 0x0 [0219.533] LocalFree (hMem=0x89f590) returned 0x0 [0219.533] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea10 [0219.533] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89ea10) returned 0x0 [0219.533] LocalFree (hMem=0x89ea10) returned 0x0 [0219.533] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.533] GdipDeleteMatrix (matrix=0x1c327210) returned 0x0 [0219.533] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0219.533] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0219.533] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0219.534] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.534] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.534] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0219.534] GetCurrentObject (hdc=0xfffffffff2010713, type=0x1) returned 0x1b00017 [0219.534] GetCurrentObject (hdc=0xfffffffff2010713, type=0x2) returned 0x1900010 [0219.534] GetCurrentObject (hdc=0xfffffffff2010713, type=0x7) returned 0x4a050750 [0219.534] GetCurrentObject (hdc=0xfffffffff2010713, type=0x6) returned 0x18a0048 [0219.534] SaveDC (hdc=0xfffffffff2010713) returned 1 [0219.535] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc8040572 [0219.535] GetClipRgn (hdc=0xfffffffff2010713, hrgn=0xffffffffc8040572) returned 0 [0219.535] SelectClipRgn (hdc=0xfffffffff2010713, hrgn=0x6b04074d) returned 2 [0219.535] DeleteObject (ho=0xffffffffc8040572) returned 1 [0219.535] DeleteObject (ho=0x6b04074d) returned 1 [0219.535] OffsetViewportOrgEx (in: hdc=0xfffffffff2010713, x=0, y=0, lppt=0x27ce8a0 | out: lppt=0x27ce8a0) returned 1 [0219.535] IsAppThemed () returned 0x1 [0219.535] GetThemeAppProperties () returned 0x3 [0219.535] GetThemeAppProperties () returned 0x3 [0219.535] DrawThemeBackground () returned 0x0 [0219.536] RestoreDC (hdc=0xfffffffff2010713, nSavedDC=-1) returned 1 [0219.548] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.549] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xfffffffff2010713) returned 0x0 [0219.549] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0219.549] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.549] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0219.549] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f90) returned 0x0 [0219.549] GdipIsMatrixIdentity (matrix=0x1c326f90, result=0x5dbc70) returned 0x0 [0219.549] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ecd0 [0219.549] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89ecd0) returned 0x0 [0219.549] LocalFree (hMem=0x89ecd0) returned 0x0 [0219.549] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0219.549] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89f450) returned 0x0 [0219.549] LocalFree (hMem=0x89f450) returned 0x0 [0219.549] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.549] GdipDeleteMatrix (matrix=0x1c326f90) returned 0x0 [0219.549] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0219.549] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0219.549] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0219.550] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.550] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.550] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0219.550] GetCurrentObject (hdc=0xfffffffff2010713, type=0x1) returned 0x1b00017 [0219.550] GetCurrentObject (hdc=0xfffffffff2010713, type=0x2) returned 0x1900010 [0219.550] GetCurrentObject (hdc=0xfffffffff2010713, type=0x7) returned 0x4a050750 [0219.550] GetCurrentObject (hdc=0xfffffffff2010713, type=0x6) returned 0x18a0048 [0219.550] SaveDC (hdc=0xfffffffff2010713) returned 1 [0219.550] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c04074d [0219.550] GetClipRgn (hdc=0xfffffffff2010713, hrgn=0x6c04074d) returned 0 [0219.550] SelectClipRgn (hdc=0xfffffffff2010713, hrgn=0xffffffffc9040572) returned 2 [0219.550] DeleteObject (ho=0x6c04074d) returned 1 [0219.550] DeleteObject (ho=0xffffffffc9040572) returned 1 [0219.550] OffsetViewportOrgEx (in: hdc=0xfffffffff2010713, x=0, y=0, lppt=0x27ceda0 | out: lppt=0x27ceda0) returned 1 [0219.550] IsAppThemed () returned 0x1 [0219.551] GetThemeAppProperties () returned 0x3 [0219.551] GetThemeAppProperties () returned 0x3 [0219.551] GetThemeBackgroundContentRect () returned 0x0 [0219.551] RestoreDC (hdc=0xfffffffff2010713, nSavedDC=-1) returned 1 [0219.551] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.551] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xfffffffff2010713) returned 0x0 [0219.551] IsAppThemed () returned 0x1 [0219.551] GetThemeAppProperties () returned 0x3 [0219.551] GetThemeAppProperties () returned 0x3 [0219.553] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0219.553] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0219.553] GetCurrentObject (hdc=0xfffffffff2010713, type=0x1) returned 0x1b00017 [0219.553] GetCurrentObject (hdc=0xfffffffff2010713, type=0x2) returned 0x1900010 [0219.553] GetCurrentObject (hdc=0xfffffffff2010713, type=0x7) returned 0x4a050750 [0219.553] GetCurrentObject (hdc=0xfffffffff2010713, type=0x6) returned 0x18a0048 [0219.554] SaveDC (hdc=0xfffffffff2010713) returned 1 [0219.554] GetTextAlign (hdc=0xfffffffff2010713) returned 0x0 [0219.554] GetTextColor (hdc=0xfffffffff2010713) returned 0x0 [0219.554] GetCurrentObject (hdc=0xfffffffff2010713, type=0x6) returned 0x18a0048 [0219.554] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0219.554] SelectObject (hdc=0xfffffffff2010713, h=0x290a0573) returned 0x18a0048 [0219.555] GetBkMode (hdc=0xfffffffff2010713) returned 2 [0219.555] SetBkMode (hdc=0xfffffffff2010713, mode=1) returned 2 [0219.555] DrawTextExW (in: hdc=0xfffffffff2010713, lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", cchText=69, lprc=0x5db8c0, format=0x102415, lpdtp=0x27cf2f8 | out: lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", lprc=0x5db8c0) returned 13 [0219.558] DrawTextExW (in: hdc=0xfffffffff2010713, lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", cchText=69, lprc=0x5db970, format=0x102015, lpdtp=0x27cf2f8 | out: lpchText="You got the decryption key ?? Cool, click me to decrypt your files !!", lprc=0x5db970) returned 13 [0219.561] RestoreDC (hdc=0xfffffffff2010713, nSavedDC=-1) returned 1 [0219.561] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.561] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xfffffffff2010713) returned 0x0 [0219.561] GetFocus () returned 0x2021e [0219.561] IsAppThemed () returned 0x1 [0219.562] GetThemeAppProperties () returned 0x3 [0219.562] GetThemeAppProperties () returned 0x3 [0219.562] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0219.562] BitBlt (hdc=0x10105e0, x=0, y=0, cx=637, cy=37, hdcSrc=0xfffffffff2010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.562] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.562] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xfffffffff2010713) returned 0x0 [0219.563] SelectPalette (hdc=0x10105e0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.563] SelectObject (hdc=0xfffffffff2010713, h=0x185000f) returned 0x4a050750 [0219.563] DeleteDC (hdc=0xfffffffff2010713) returned 1 [0219.563] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.563] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.563] DeleteObject (ho=0x4a050750) returned 1 [0219.565] EndPaint (hWnd=0x8003a, lpPaint=0x5dc628) returned 1 [0219.565] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.565] IsWindowUnicode (hWnd=0xd0028) returned 1 [0219.565] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.565] TranslateMessage (lpMsg=0x5dd220) returned 0 [0219.565] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0219.565] BeginPaint (in: hWnd=0xd0028, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0219.565] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.565] CreateCompatibleDC (hdc=0xa0100d0) returned 0xffffffff90010758 [0219.565] SelectObject (hdc=0xffffffff90010758, h=0x11050637) returned 0x185000f [0219.565] GdipCreateFromHDC (hdc=0xffffffff90010758, graphics=0x5dc420) returned 0x0 [0219.566] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.566] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=296, height=23, combineMode=0x0) returned 0x0 [0219.566] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0219.566] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326c50) returned 0x0 [0219.566] GdipIsMatrixIdentity (matrix=0x1c326c50, result=0x5dc5b0) returned 0x0 [0219.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e990 [0219.566] GdipGetMatrixElements (matrix=0x1c326c50, matrixOut=0x89e990) returned 0x0 [0219.566] LocalFree (hMem=0x89e990) returned 0x0 [0219.566] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.566] GdipDeleteMatrix (matrix=0x1c326c50) returned 0x0 [0219.566] GdipCreateRegion (region=0x5dc550) returned 0x0 [0219.566] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.566] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0219.566] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0219.566] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd610dbd) returned 0x0 [0219.566] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.566] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.567] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0219.567] GetCurrentObject (hdc=0xffffffff90010758, type=0x1) returned 0x1b00017 [0219.567] GetCurrentObject (hdc=0xffffffff90010758, type=0x2) returned 0x1900010 [0219.567] GetCurrentObject (hdc=0xffffffff90010758, type=0x7) returned 0x11050637 [0219.567] GetCurrentObject (hdc=0xffffffff90010758, type=0x6) returned 0x18a0048 [0219.573] SaveDC (hdc=0xffffffff90010758) returned 1 [0219.573] GetNearestColor (hdc=0xffffffff90010758, color=0xf0f0f0) returned 0xf0f0f0 [0219.573] GetNearestColor (hdc=0xffffffff90010758, color=0xa0a0a0) returned 0xa0a0a0 [0219.573] GetNearestColor (hdc=0xffffffff90010758, color=0x696969) returned 0x696969 [0219.573] GetNearestColor (hdc=0xffffffff90010758, color=0xa0a0a0) returned 0xa0a0a0 [0219.573] GetNearestColor (hdc=0xffffffff90010758, color=0x0) returned 0x0 [0219.573] GetNearestColor (hdc=0xffffffff90010758, color=0xffffff) returned 0xffffff [0219.573] GetNearestColor (hdc=0xffffffff90010758, color=0xe5e5e5) returned 0xe5e5e5 [0219.573] GetNearestColor (hdc=0xffffffff90010758, color=0xd8d8d8) returned 0xd8d8d8 [0219.574] GetNearestColor (hdc=0xffffffff90010758, color=0x0) returned 0x0 [0219.574] RestoreDC (hdc=0xffffffff90010758, nSavedDC=-1) returned 1 [0219.574] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.574] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff90010758) returned 0x0 [0219.574] IsAppThemed () returned 0x1 [0219.574] GetThemeAppProperties () returned 0x3 [0219.574] GetThemeAppProperties () returned 0x3 [0219.574] IsAppThemed () returned 0x1 [0219.574] GetThemeAppProperties () returned 0x3 [0219.574] GetThemeAppProperties () returned 0x3 [0219.574] DrawTextExW (in: hdc=0x42010685, lpchText="Copy The Bitcoin Address", cchText=24, lprc=0x5dbc80, format=0x102415, lpdtp=0x27cfd10 | out: lpchText="Copy The Bitcoin Address", lprc=0x5dbc80) returned 13 [0219.574] IsAppThemed () returned 0x1 [0219.574] GetThemeAppProperties () returned 0x3 [0219.574] GetThemeAppProperties () returned 0x3 [0219.574] IsAppThemed () returned 0x1 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] GetFocus () returned 0x2021e [0219.575] IsAppThemed () returned 0x1 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] IsAppThemed () returned 0x1 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] IsThemePartDefined () returned 0x1 [0219.575] IsAppThemed () returned 0x1 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0219.575] IsAppThemed () returned 0x1 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] IsAppThemed () returned 0x1 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] GetThemeAppProperties () returned 0x3 [0219.575] IsThemePartDefined () returned 0x1 [0219.575] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0219.575] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.575] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0219.575] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f10) returned 0x0 [0219.576] GdipIsMatrixIdentity (matrix=0x1c326f10, result=0x5dbdc0) returned 0x0 [0219.576] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f6d0 [0219.576] GdipGetMatrixElements (matrix=0x1c326f10, matrixOut=0x89f6d0) returned 0x0 [0219.576] LocalFree (hMem=0x89f6d0) returned 0x0 [0219.576] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f250 [0219.576] GdipGetMatrixElements (matrix=0x1c326f10, matrixOut=0x89f250) returned 0x0 [0219.576] LocalFree (hMem=0x89f250) returned 0x0 [0219.576] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.576] GdipDeleteMatrix (matrix=0x1c326f10) returned 0x0 [0219.576] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0219.576] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0219.576] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0219.576] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.576] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.576] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0219.576] GetCurrentObject (hdc=0xffffffff90010758, type=0x1) returned 0x1b00017 [0219.576] GetCurrentObject (hdc=0xffffffff90010758, type=0x2) returned 0x1900010 [0219.576] GetCurrentObject (hdc=0xffffffff90010758, type=0x7) returned 0x11050637 [0219.576] GetCurrentObject (hdc=0xffffffff90010758, type=0x6) returned 0x18a0048 [0219.577] SaveDC (hdc=0xffffffff90010758) returned 1 [0219.577] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffca040572 [0219.577] GetClipRgn (hdc=0xffffffff90010758, hrgn=0xffffffffca040572) returned 0 [0219.577] SelectClipRgn (hdc=0xffffffff90010758, hrgn=0x7004074d) returned 2 [0219.577] DeleteObject (ho=0xffffffffca040572) returned 1 [0219.577] DeleteObject (ho=0x7004074d) returned 1 [0219.577] OffsetViewportOrgEx (in: hdc=0xffffffff90010758, x=0, y=0, lppt=0x27d0720 | out: lppt=0x27d0720) returned 1 [0219.577] DrawThemeParentBackground () returned 0x0 [0219.577] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0219.577] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0219.577] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.577] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.577] GetSystemMetrics (nIndex=42) returned 0 [0219.577] CoTaskMemAlloc (cb=0x22) returned 0x89d310 [0219.577] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89d310, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.577] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89d310) returned 0xe [0219.577] CoTaskMemFree (pv=0x89d310) [0219.577] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0219.577] GetCurrentObject (hdc=0xffffffff90010758, type=0x1) returned 0x1b00017 [0219.577] GetCurrentObject (hdc=0xffffffff90010758, type=0x2) returned 0x1900010 [0219.578] GetCurrentObject (hdc=0xffffffff90010758, type=0x7) returned 0x11050637 [0219.578] GetCurrentObject (hdc=0xffffffff90010758, type=0x6) returned 0x18a0048 [0219.578] SaveDC (hdc=0xffffffff90010758) returned 2 [0219.578] GetNearestColor (hdc=0xffffffff90010758, color=0xf0f0f0) returned 0xf0f0f0 [0219.578] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff85100686 [0219.578] FillRect (hDC=0xffffffff90010758, lprc=0x5dafe0, hbr=0xffffffff85100686) returned 1 [0219.578] DeleteObject (ho=0xffffffff85100686) returned 1 [0219.578] RestoreDC (hdc=0xffffffff90010758, nSavedDC=-1) returned 1 [0219.578] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.578] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.578] GetSystemMetrics (nIndex=42) returned 0 [0219.578] CoTaskMemAlloc (cb=0x22) returned 0x89d310 [0219.578] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89d310, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.578] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89d310) returned 0xe [0219.578] CoTaskMemFree (pv=0x89d310) [0219.578] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0219.578] GetCurrentObject (hdc=0xffffffff90010758, type=0x1) returned 0x1b00017 [0219.578] GetCurrentObject (hdc=0xffffffff90010758, type=0x2) returned 0x1900010 [0219.578] GetCurrentObject (hdc=0xffffffff90010758, type=0x7) returned 0x11050637 [0219.578] GetCurrentObject (hdc=0xffffffff90010758, type=0x6) returned 0x18a0048 [0219.578] SaveDC (hdc=0xffffffff90010758) returned 2 [0219.579] GetNearestColor (hdc=0xffffffff90010758, color=0xf0f0f0) returned 0xf0f0f0 [0219.579] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff86100686 [0219.579] FillRect (hDC=0xffffffff90010758, lprc=0x5daee0, hbr=0xffffffff86100686) returned 1 [0219.579] DeleteObject (ho=0xffffffff86100686) returned 1 [0219.579] RestoreDC (hdc=0xffffffff90010758, nSavedDC=-1) returned 1 [0219.579] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.579] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.579] GetSystemMetrics (nIndex=42) returned 0 [0219.579] CoTaskMemAlloc (cb=0x22) returned 0x89cfb0 [0219.579] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89cfb0, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.579] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89cfb0) returned 0xe [0219.579] CoTaskMemFree (pv=0x89cfb0) [0219.579] RestoreDC (hdc=0xffffffff90010758, nSavedDC=-1) returned 1 [0219.579] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.579] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff90010758) returned 0x0 [0219.579] IsAppThemed () returned 0x1 [0219.579] GetThemeAppProperties () returned 0x3 [0219.579] GetThemeAppProperties () returned 0x3 [0219.579] IsAppThemed () returned 0x1 [0219.579] GetThemeAppProperties () returned 0x3 [0219.579] GetThemeAppProperties () returned 0x3 [0219.579] IsThemePartDefined () returned 0x1 [0219.579] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0219.580] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.580] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0219.580] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327110) returned 0x0 [0219.580] GdipIsMatrixIdentity (matrix=0x1c327110, result=0x5dbca0) returned 0x0 [0219.580] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed50 [0219.580] GdipGetMatrixElements (matrix=0x1c327110, matrixOut=0x89ed50) returned 0x0 [0219.580] LocalFree (hMem=0x89ed50) returned 0x0 [0219.580] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f5d0 [0219.580] GdipGetMatrixElements (matrix=0x1c327110, matrixOut=0x89f5d0) returned 0x0 [0219.580] LocalFree (hMem=0x89f5d0) returned 0x0 [0219.580] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.580] GdipDeleteMatrix (matrix=0x1c327110) returned 0x0 [0219.580] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0219.580] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0219.580] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0219.580] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.580] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.580] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0219.580] GetCurrentObject (hdc=0xffffffff90010758, type=0x1) returned 0x1b00017 [0219.580] GetCurrentObject (hdc=0xffffffff90010758, type=0x2) returned 0x1900010 [0219.580] GetCurrentObject (hdc=0xffffffff90010758, type=0x7) returned 0x11050637 [0219.580] GetCurrentObject (hdc=0xffffffff90010758, type=0x6) returned 0x18a0048 [0219.580] SaveDC (hdc=0xffffffff90010758) returned 1 [0219.580] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7104074d [0219.580] GetClipRgn (hdc=0xffffffff90010758, hrgn=0x7104074d) returned 0 [0219.580] SelectClipRgn (hdc=0xffffffff90010758, hrgn=0xffffffffcc040572) returned 2 [0219.580] DeleteObject (ho=0x7104074d) returned 1 [0219.580] DeleteObject (ho=0xffffffffcc040572) returned 1 [0219.580] OffsetViewportOrgEx (in: hdc=0xffffffff90010758, x=0, y=0, lppt=0x27d1420 | out: lppt=0x27d1420) returned 1 [0219.581] IsAppThemed () returned 0x1 [0219.581] GetThemeAppProperties () returned 0x3 [0219.581] GetThemeAppProperties () returned 0x3 [0219.581] DrawThemeBackground () returned 0x0 [0219.581] RestoreDC (hdc=0xffffffff90010758, nSavedDC=-1) returned 1 [0219.581] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.581] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff90010758) returned 0x0 [0219.581] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0219.581] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.581] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0219.581] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327350) returned 0x0 [0219.581] GdipIsMatrixIdentity (matrix=0x1c327350, result=0x5dbc70) returned 0x0 [0219.581] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f290 [0219.582] GdipGetMatrixElements (matrix=0x1c327350, matrixOut=0x89f290) returned 0x0 [0219.582] LocalFree (hMem=0x89f290) returned 0x0 [0219.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0219.582] GdipGetMatrixElements (matrix=0x1c327350, matrixOut=0x89f050) returned 0x0 [0219.582] LocalFree (hMem=0x89f050) returned 0x0 [0219.582] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.582] GdipDeleteMatrix (matrix=0x1c327350) returned 0x0 [0219.582] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0219.582] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0219.582] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0219.582] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.582] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.582] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0219.582] GetCurrentObject (hdc=0xffffffff90010758, type=0x1) returned 0x1b00017 [0219.582] GetCurrentObject (hdc=0xffffffff90010758, type=0x2) returned 0x1900010 [0219.582] GetCurrentObject (hdc=0xffffffff90010758, type=0x7) returned 0x11050637 [0219.582] GetCurrentObject (hdc=0xffffffff90010758, type=0x6) returned 0x18a0048 [0219.583] SaveDC (hdc=0xffffffff90010758) returned 1 [0219.583] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffcd040572 [0219.583] GetClipRgn (hdc=0xffffffff90010758, hrgn=0xffffffffcd040572) returned 0 [0219.583] SelectClipRgn (hdc=0xffffffff90010758, hrgn=0x7204074d) returned 2 [0219.583] DeleteObject (ho=0xffffffffcd040572) returned 1 [0219.583] DeleteObject (ho=0x7204074d) returned 1 [0219.583] OffsetViewportOrgEx (in: hdc=0xffffffff90010758, x=0, y=0, lppt=0x27d1920 | out: lppt=0x27d1920) returned 1 [0219.583] IsAppThemed () returned 0x1 [0219.583] GetThemeAppProperties () returned 0x3 [0219.583] GetThemeAppProperties () returned 0x3 [0219.583] GetThemeBackgroundContentRect () returned 0x0 [0219.584] RestoreDC (hdc=0xffffffff90010758, nSavedDC=-1) returned 1 [0219.584] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.584] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff90010758) returned 0x0 [0219.584] IsAppThemed () returned 0x1 [0219.584] GetThemeAppProperties () returned 0x3 [0219.584] GetThemeAppProperties () returned 0x3 [0219.584] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0219.584] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0219.584] GetCurrentObject (hdc=0xffffffff90010758, type=0x1) returned 0x1b00017 [0219.584] GetCurrentObject (hdc=0xffffffff90010758, type=0x2) returned 0x1900010 [0219.584] GetCurrentObject (hdc=0xffffffff90010758, type=0x7) returned 0x11050637 [0219.584] GetCurrentObject (hdc=0xffffffff90010758, type=0x6) returned 0x18a0048 [0219.584] SaveDC (hdc=0xffffffff90010758) returned 1 [0219.584] GetTextAlign (hdc=0xffffffff90010758) returned 0x0 [0219.584] GetTextColor (hdc=0xffffffff90010758) returned 0x0 [0219.584] GetCurrentObject (hdc=0xffffffff90010758, type=0x6) returned 0x18a0048 [0219.584] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0219.584] SelectObject (hdc=0xffffffff90010758, h=0x290a0573) returned 0x18a0048 [0219.584] GetBkMode (hdc=0xffffffff90010758) returned 2 [0219.584] SetBkMode (hdc=0xffffffff90010758, mode=1) returned 2 [0219.584] DrawTextExW (in: hdc=0xffffffff90010758, lpchText="Copy The Bitcoin Address", cchText=24, lprc=0x5db8c0, format=0x102415, lpdtp=0x27d1e78 | out: lpchText="Copy The Bitcoin Address", lprc=0x5db8c0) returned 13 [0219.585] DrawTextExW (in: hdc=0xffffffff90010758, lpchText="Copy The Bitcoin Address", cchText=24, lprc=0x5db970, format=0x102015, lpdtp=0x27d1e78 | out: lpchText="Copy The Bitcoin Address", lprc=0x5db970) returned 13 [0219.585] RestoreDC (hdc=0xffffffff90010758, nSavedDC=-1) returned 1 [0219.585] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.585] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff90010758) returned 0x0 [0219.585] GetFocus () returned 0x2021e [0219.598] IsAppThemed () returned 0x1 [0219.598] GetThemeAppProperties () returned 0x3 [0219.604] GetThemeAppProperties () returned 0x3 [0219.604] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0219.604] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=296, cy=23, hdcSrc=0xffffffff90010758, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.604] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.604] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff90010758) returned 0x0 [0219.604] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.604] SelectObject (hdc=0xffffffff90010758, h=0x185000f) returned 0x11050637 [0219.604] DeleteDC (hdc=0xffffffff90010758) returned 1 [0219.604] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.604] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.604] EndPaint (hWnd=0xd0028, lpPaint=0x5dc628) returned 1 [0219.604] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.604] IsWindowUnicode (hWnd=0xa018a) returned 1 [0219.604] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.604] TranslateMessage (lpMsg=0x5dd220) returned 0 [0219.604] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0219.604] BeginPaint (in: hWnd=0xa018a, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0x1010749 [0219.604] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.605] CreateCompatibleDC (hdc=0x1010749) returned 0xffffffff92010758 [0219.605] SelectObject (hdc=0xffffffff92010758, h=0x11050637) returned 0x185000f [0219.605] GdipCreateFromHDC (hdc=0xffffffff92010758, graphics=0x5dc420) returned 0x0 [0219.605] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.605] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=296, height=23, combineMode=0x0) returned 0x0 [0219.605] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0219.605] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326f90) returned 0x0 [0219.605] GdipIsMatrixIdentity (matrix=0x1c326f90, result=0x5dc5b0) returned 0x0 [0219.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f650 [0219.605] GdipGetMatrixElements (matrix=0x1c326f90, matrixOut=0x89f650) returned 0x0 [0219.605] LocalFree (hMem=0x89f650) returned 0x0 [0219.605] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.605] GdipDeleteMatrix (matrix=0x1c326f90) returned 0x0 [0219.605] GdipCreateRegion (region=0x5dc550) returned 0x0 [0219.605] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.605] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0219.605] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0219.605] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd5f0dbd) returned 0x0 [0219.605] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.606] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.606] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0219.606] GetCurrentObject (hdc=0xffffffff92010758, type=0x1) returned 0x1b00017 [0219.606] GetCurrentObject (hdc=0xffffffff92010758, type=0x2) returned 0x1900010 [0219.606] GetCurrentObject (hdc=0xffffffff92010758, type=0x7) returned 0x11050637 [0219.606] GetCurrentObject (hdc=0xffffffff92010758, type=0x6) returned 0x18a0048 [0219.606] SaveDC (hdc=0xffffffff92010758) returned 1 [0219.606] GetNearestColor (hdc=0xffffffff92010758, color=0xf0f0f0) returned 0xf0f0f0 [0219.606] GetNearestColor (hdc=0xffffffff92010758, color=0xa0a0a0) returned 0xa0a0a0 [0219.606] GetNearestColor (hdc=0xffffffff92010758, color=0x696969) returned 0x696969 [0219.607] GetNearestColor (hdc=0xffffffff92010758, color=0xa0a0a0) returned 0xa0a0a0 [0219.607] GetNearestColor (hdc=0xffffffff92010758, color=0x0) returned 0x0 [0219.607] GetNearestColor (hdc=0xffffffff92010758, color=0xffffff) returned 0xffffff [0219.607] GetNearestColor (hdc=0xffffffff92010758, color=0xe5e5e5) returned 0xe5e5e5 [0219.607] GetNearestColor (hdc=0xffffffff92010758, color=0xd8d8d8) returned 0xd8d8d8 [0219.607] GetNearestColor (hdc=0xffffffff92010758, color=0x0) returned 0x0 [0219.607] RestoreDC (hdc=0xffffffff92010758, nSavedDC=-1) returned 1 [0219.607] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.607] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010758) returned 0x0 [0219.607] IsAppThemed () returned 0x1 [0219.607] GetThemeAppProperties () returned 0x3 [0219.607] GetThemeAppProperties () returned 0x3 [0219.607] IsAppThemed () returned 0x1 [0219.607] GetThemeAppProperties () returned 0x3 [0219.607] GetThemeAppProperties () returned 0x3 [0219.607] DrawTextExW (in: hdc=0x42010685, lpchText="Copy Personal ID", cchText=16, lprc=0x5dbc80, format=0x102415, lpdtp=0x27d2890 | out: lpchText="Copy Personal ID", lprc=0x5dbc80) returned 13 [0219.608] IsAppThemed () returned 0x1 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] IsAppThemed () returned 0x1 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] GetFocus () returned 0x2021e [0219.608] IsAppThemed () returned 0x1 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] IsAppThemed () returned 0x1 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] IsThemePartDefined () returned 0x1 [0219.608] IsAppThemed () returned 0x1 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0219.608] IsAppThemed () returned 0x1 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] IsAppThemed () returned 0x1 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] GetThemeAppProperties () returned 0x3 [0219.608] IsThemePartDefined () returned 0x1 [0219.609] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0219.609] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.609] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0219.609] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327190) returned 0x0 [0219.609] GdipIsMatrixIdentity (matrix=0x1c327190, result=0x5dbdc0) returned 0x0 [0219.609] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0219.609] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89f350) returned 0x0 [0219.609] LocalFree (hMem=0x89f350) returned 0x0 [0219.609] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee50 [0219.609] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89ee50) returned 0x0 [0219.609] LocalFree (hMem=0x89ee50) returned 0x0 [0219.609] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.609] GdipDeleteMatrix (matrix=0x1c327190) returned 0x0 [0219.609] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0219.609] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0219.609] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0219.609] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.609] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.609] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0219.609] GetCurrentObject (hdc=0xffffffff92010758, type=0x1) returned 0x1b00017 [0219.609] GetCurrentObject (hdc=0xffffffff92010758, type=0x2) returned 0x1900010 [0219.609] GetCurrentObject (hdc=0xffffffff92010758, type=0x7) returned 0x11050637 [0219.609] GetCurrentObject (hdc=0xffffffff92010758, type=0x6) returned 0x18a0048 [0219.609] SaveDC (hdc=0xffffffff92010758) returned 1 [0219.610] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7304074d [0219.610] GetClipRgn (hdc=0xffffffff92010758, hrgn=0x7304074d) returned 0 [0219.610] SelectClipRgn (hdc=0xffffffff92010758, hrgn=0xffffffffd1040572) returned 2 [0219.610] DeleteObject (ho=0x7304074d) returned 1 [0219.610] DeleteObject (ho=0xffffffffd1040572) returned 1 [0219.610] OffsetViewportOrgEx (in: hdc=0xffffffff92010758, x=0, y=0, lppt=0x27d32a0 | out: lppt=0x27d32a0) returned 1 [0219.610] DrawThemeParentBackground () returned 0x1900010 [0219.613] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0219.613] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0219.613] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.613] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.613] GetSystemMetrics (nIndex=42) returned 0 [0219.614] CoTaskMemAlloc (cb=0x22) returned 0x89d010 [0219.614] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89d010, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.614] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89d010) returned 0xe [0219.614] CoTaskMemFree (pv=0x89d010) [0219.614] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0219.614] GetCurrentObject (hdc=0xffffffff92010758, type=0x1) returned 0x1b00017 [0219.614] GetCurrentObject (hdc=0xffffffff92010758, type=0x2) returned 0x1900010 [0219.614] GetCurrentObject (hdc=0xffffffff92010758, type=0x7) returned 0x11050637 [0219.614] GetCurrentObject (hdc=0xffffffff92010758, type=0x6) returned 0x18a0048 [0219.615] SaveDC (hdc=0xffffffff92010758) returned 2 [0219.615] GetNearestColor (hdc=0xffffffff92010758, color=0xf0f0f0) returned 0xf0f0f0 [0219.615] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff87100686 [0219.615] FillRect (hDC=0xffffffff92010758, lprc=0x5dafe0, hbr=0xffffffff87100686) returned 1 [0219.615] DeleteObject (ho=0xffffffff87100686) returned 1 [0219.615] RestoreDC (hdc=0xffffffff92010758, nSavedDC=-1) returned 1 [0219.615] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.615] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.615] GetSystemMetrics (nIndex=42) returned 0 [0219.615] CoTaskMemAlloc (cb=0x22) returned 0x89cf50 [0219.615] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89cf50, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.615] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89cf50) returned 0xe [0219.615] CoTaskMemFree (pv=0x89cf50) [0219.615] GetClientRect (in: hWnd=0x901f6, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0219.615] GetCurrentObject (hdc=0xffffffff92010758, type=0x1) returned 0x1b00017 [0219.615] GetCurrentObject (hdc=0xffffffff92010758, type=0x2) returned 0x1900010 [0219.615] GetCurrentObject (hdc=0xffffffff92010758, type=0x7) returned 0x11050637 [0219.616] GetCurrentObject (hdc=0xffffffff92010758, type=0x6) returned 0x18a0048 [0219.616] SaveDC (hdc=0xffffffff92010758) returned 2 [0219.616] GetNearestColor (hdc=0xffffffff92010758, color=0xf0f0f0) returned 0xf0f0f0 [0219.616] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff88100686 [0219.616] FillRect (hDC=0xffffffff92010758, lprc=0x5daee0, hbr=0xffffffff88100686) returned 1 [0219.616] DeleteObject (ho=0xffffffff88100686) returned 1 [0219.616] RestoreDC (hdc=0xffffffff92010758, nSavedDC=-1) returned 1 [0219.616] GetWindowTextLengthW (hWnd=0x901f6) returned 14 [0219.616] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0219.616] GetSystemMetrics (nIndex=42) returned 0 [0219.616] CoTaskMemAlloc (cb=0x22) returned 0x89d310 [0219.616] GetWindowTextW (in: hWnd=0x901f6, lpString=0x89d310, nMaxCount=15 | out: lpString="Crypto Nar 1.0") returned 14 [0219.616] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0xd, wParam=0xf, lParam=0x89d310) returned 0xe [0219.616] CoTaskMemFree (pv=0x89d310) [0219.616] RestoreDC (hdc=0xffffffff92010758, nSavedDC=-1) returned 1 [0219.616] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.617] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010758) returned 0x0 [0219.617] IsAppThemed () returned 0x1 [0219.617] GetThemeAppProperties () returned 0x3 [0219.617] GetThemeAppProperties () returned 0x3 [0219.617] IsAppThemed () returned 0x1 [0219.617] GetThemeAppProperties () returned 0x3 [0219.617] GetThemeAppProperties () returned 0x3 [0219.617] IsThemePartDefined () returned 0x1 [0219.617] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0219.617] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.617] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0219.617] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327210) returned 0x0 [0219.617] GdipIsMatrixIdentity (matrix=0x1c327210, result=0x5dbca0) returned 0x0 [0219.617] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f590 [0219.617] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89f590) returned 0x0 [0219.617] LocalFree (hMem=0x89f590) returned 0x0 [0219.617] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e890 [0219.617] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89e890) returned 0x0 [0219.617] LocalFree (hMem=0x89e890) returned 0x0 [0219.617] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.617] GdipDeleteMatrix (matrix=0x1c327210) returned 0x0 [0219.617] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0219.617] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0219.617] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0219.618] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.618] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.618] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0219.618] GetCurrentObject (hdc=0xffffffff92010758, type=0x1) returned 0x1b00017 [0219.618] GetCurrentObject (hdc=0xffffffff92010758, type=0x2) returned 0x1900010 [0219.618] GetCurrentObject (hdc=0xffffffff92010758, type=0x7) returned 0x11050637 [0219.618] GetCurrentObject (hdc=0xffffffff92010758, type=0x6) returned 0x18a0048 [0219.618] SaveDC (hdc=0xffffffff92010758) returned 1 [0219.618] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd2040572 [0219.618] GetClipRgn (hdc=0xffffffff92010758, hrgn=0xffffffffd2040572) returned 0 [0219.618] SelectClipRgn (hdc=0xffffffff92010758, hrgn=0x7504074d) returned 2 [0219.618] DeleteObject (ho=0xffffffffd2040572) returned 1 [0219.618] DeleteObject (ho=0x7504074d) returned 1 [0219.618] OffsetViewportOrgEx (in: hdc=0xffffffff92010758, x=0, y=0, lppt=0x27d3fa0 | out: lppt=0x27d3fa0) returned 1 [0219.618] IsAppThemed () returned 0x1 [0219.618] GetThemeAppProperties () returned 0x3 [0219.618] GetThemeAppProperties () returned 0x3 [0219.618] DrawThemeBackground () returned 0x0 [0219.619] RestoreDC (hdc=0xffffffff92010758, nSavedDC=-1) returned 1 [0219.619] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.619] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010758) returned 0x0 [0219.619] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0219.619] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.619] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0219.619] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326c50) returned 0x0 [0219.619] GdipIsMatrixIdentity (matrix=0x1c326c50, result=0x5dbc70) returned 0x0 [0219.619] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e9d0 [0219.619] GdipGetMatrixElements (matrix=0x1c326c50, matrixOut=0x89e9d0) returned 0x0 [0219.619] LocalFree (hMem=0x89e9d0) returned 0x0 [0219.619] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e7d0 [0219.619] GdipGetMatrixElements (matrix=0x1c326c50, matrixOut=0x89e7d0) returned 0x0 [0219.619] LocalFree (hMem=0x89e7d0) returned 0x0 [0219.619] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.619] GdipDeleteMatrix (matrix=0x1c326c50) returned 0x0 [0219.619] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0219.619] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0219.619] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0219.619] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.619] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.619] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0219.620] GetCurrentObject (hdc=0xffffffff92010758, type=0x1) returned 0x1b00017 [0219.620] GetCurrentObject (hdc=0xffffffff92010758, type=0x2) returned 0x1900010 [0219.620] GetCurrentObject (hdc=0xffffffff92010758, type=0x7) returned 0x11050637 [0219.620] GetCurrentObject (hdc=0xffffffff92010758, type=0x6) returned 0x18a0048 [0219.620] SaveDC (hdc=0xffffffff92010758) returned 1 [0219.620] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7604074d [0219.620] GetClipRgn (hdc=0xffffffff92010758, hrgn=0x7604074d) returned 0 [0219.620] SelectClipRgn (hdc=0xffffffff92010758, hrgn=0xffffffffd3040572) returned 2 [0219.620] DeleteObject (ho=0x7604074d) returned 1 [0219.620] DeleteObject (ho=0xffffffffd3040572) returned 1 [0219.620] OffsetViewportOrgEx (in: hdc=0xffffffff92010758, x=0, y=0, lppt=0x27d44a0 | out: lppt=0x27d44a0) returned 1 [0219.620] IsAppThemed () returned 0x1 [0219.620] GetThemeAppProperties () returned 0x3 [0219.620] GetThemeAppProperties () returned 0x3 [0219.620] GetThemeBackgroundContentRect () returned 0x0 [0219.620] RestoreDC (hdc=0xffffffff92010758, nSavedDC=-1) returned 1 [0219.620] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.620] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010758) returned 0x0 [0219.620] IsAppThemed () returned 0x1 [0219.620] GetThemeAppProperties () returned 0x3 [0219.620] GetThemeAppProperties () returned 0x3 [0219.621] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0219.621] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0219.621] GetCurrentObject (hdc=0xffffffff92010758, type=0x1) returned 0x1b00017 [0219.621] GetCurrentObject (hdc=0xffffffff92010758, type=0x2) returned 0x1900010 [0219.621] GetCurrentObject (hdc=0xffffffff92010758, type=0x7) returned 0x11050637 [0219.621] GetCurrentObject (hdc=0xffffffff92010758, type=0x6) returned 0x18a0048 [0219.621] SaveDC (hdc=0xffffffff92010758) returned 1 [0219.621] GetTextAlign (hdc=0xffffffff92010758) returned 0x0 [0219.621] GetTextColor (hdc=0xffffffff92010758) returned 0x0 [0219.621] GetCurrentObject (hdc=0xffffffff92010758, type=0x6) returned 0x18a0048 [0219.621] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0219.621] SelectObject (hdc=0xffffffff92010758, h=0x290a0573) returned 0x18a0048 [0219.621] GetBkMode (hdc=0xffffffff92010758) returned 2 [0219.621] SetBkMode (hdc=0xffffffff92010758, mode=1) returned 2 [0219.621] DrawTextExW (in: hdc=0xffffffff92010758, lpchText="Copy Personal ID", cchText=16, lprc=0x5db8c0, format=0x102415, lpdtp=0x27d49f8 | out: lpchText="Copy Personal ID", lprc=0x5db8c0) returned 13 [0219.622] DrawTextExW (in: hdc=0xffffffff92010758, lpchText="Copy Personal ID", cchText=16, lprc=0x5db970, format=0x102015, lpdtp=0x27d49f8 | out: lpchText="Copy Personal ID", lprc=0x5db970) returned 13 [0219.622] RestoreDC (hdc=0xffffffff92010758, nSavedDC=-1) returned 1 [0219.622] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.622] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010758) returned 0x0 [0219.622] GetFocus () returned 0x2021e [0219.622] IsAppThemed () returned 0x1 [0219.622] GetThemeAppProperties () returned 0x3 [0219.622] GetThemeAppProperties () returned 0x3 [0219.622] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0219.622] BitBlt (hdc=0x1010749, x=0, y=0, cx=296, cy=23, hdcSrc=0xffffffff92010758, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.622] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.622] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff92010758) returned 0x0 [0219.622] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.623] SelectObject (hdc=0xffffffff92010758, h=0x185000f) returned 0x11050637 [0219.623] DeleteDC (hdc=0xffffffff92010758) returned 1 [0219.623] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.623] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.623] EndPaint (hWnd=0xa018a, lpPaint=0x5dc628) returned 1 [0219.623] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.623] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1500143) returned 0x1 [0219.623] IsWindowUnicode (hWnd=0x2021e) returned 1 [0219.623] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.623] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1500143) returned 0x1 [0219.623] GetDlgItem (hDlg=0x20160, nIDDlgItem=0) returned 0x0 [0219.623] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x210, wParam=0x201, lParam=0xce00d8) returned 0x0 [0219.623] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0219.623] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x21, wParam=0x20160, lParam=0x2010001) returned 0x1 [0219.623] SetCursor (hCursor=0x10003) returned 0x10003 [0219.624] TranslateMessage (lpMsg=0x5dd220) returned 0 [0219.624] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0219.624] GetKeyState (nVirtKey=1) returned -127 [0219.624] GetKeyState (nVirtKey=2) returned 0 [0219.624] GetKeyState (nVirtKey=4) returned 0 [0219.624] GetKeyState (nVirtKey=5) returned 0 [0219.624] GetKeyState (nVirtKey=6) returned 0 [0219.624] IsWindowVisible (hWnd=0x2021e) returned 1 [0219.624] IsWindowEnabled (hWnd=0x2021e) returned 1 [0219.624] SetFocus (hWnd=0x2021e) returned 0x2021e [0219.624] GetFocus () returned 0x2021e [0219.624] GetFocus () returned 0x2021e [0219.624] GetFocus () returned 0x2021e [0219.624] GetKeyState (nVirtKey=1) returned -127 [0219.624] GetKeyState (nVirtKey=2) returned 0 [0219.624] GetKeyState (nVirtKey=4) returned 0 [0219.624] GetKeyState (nVirtKey=5) returned 0 [0219.624] GetKeyState (nVirtKey=6) returned 0 [0219.624] GetCapture () returned 0x0 [0219.624] SetCapture (hWnd=0x2021e) returned 0x0 [0219.624] GetKeyState (nVirtKey=1) returned -127 [0219.624] GetKeyState (nVirtKey=2) returned 0 [0219.624] GetKeyState (nVirtKey=4) returned 0 [0219.624] GetKeyState (nVirtKey=5) returned 0 [0219.624] GetKeyState (nVirtKey=6) returned 0 [0219.624] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0219.624] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc870, bErase=0) returned 1 [0219.624] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.625] IsWindowUnicode (hWnd=0x2021e) returned 1 [0219.625] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0219.625] TranslateMessage (lpMsg=0x5dd220) returned 0 [0219.625] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0219.625] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x27d4bc0, cPoints=0x1 | out: lpPoints=0x27d4bc0) returned 21233850 [0219.625] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0219.625] InvalidateRect (hWnd=0x2021e, lpRect=0x5dc7c0, bErase=0) returned 1 [0219.625] UpdateWindow (hWnd=0x2021e) returned 0 [0219.625] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dbdd8 | out: lpPaint=0x5dbdd8) returned 0x10105e0 [0219.625] SelectPalette (hdc=0x10105e0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.625] CreateCompatibleDC (hdc=0x10105e0) returned 0xffffffff94010758 [0219.625] SelectObject (hdc=0xffffffff94010758, h=0x11050637) returned 0x185000f [0219.625] GdipCreateFromHDC (hdc=0xffffffff94010758, graphics=0x5dbbe0) returned 0x0 [0219.625] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.625] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0219.625] GdipCreateMatrix (matrix=0x5dbd10) returned 0x0 [0219.625] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327210) returned 0x0 [0219.626] GdipIsMatrixIdentity (matrix=0x1c327210, result=0x5dbd70) returned 0x0 [0219.626] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e7d0 [0219.626] GdipGetMatrixElements (matrix=0x1c327210, matrixOut=0x89e7d0) returned 0x0 [0219.626] LocalFree (hMem=0x89e7d0) returned 0x0 [0219.626] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.626] GdipDeleteMatrix (matrix=0x1c327210) returned 0x0 [0219.626] GdipCreateRegion (region=0x5dbd10) returned 0x0 [0219.626] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.626] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbd40) returned 0x0 [0219.626] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dbe10) returned 0x0 [0219.626] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd5d0dbd) returned 0x0 [0219.626] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.626] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.626] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db200) returned 0x0 [0219.626] GetCurrentObject (hdc=0xffffffff94010758, type=0x1) returned 0x1b00017 [0219.626] GetCurrentObject (hdc=0xffffffff94010758, type=0x2) returned 0x1900010 [0219.627] GetCurrentObject (hdc=0xffffffff94010758, type=0x7) returned 0x11050637 [0219.627] GetCurrentObject (hdc=0xffffffff94010758, type=0x6) returned 0x18a0048 [0219.627] SaveDC (hdc=0xffffffff94010758) returned 1 [0219.627] GetNearestColor (hdc=0xffffffff94010758, color=0xf0f0f0) returned 0xf0f0f0 [0219.627] GetNearestColor (hdc=0xffffffff94010758, color=0xa0a0a0) returned 0xa0a0a0 [0219.627] GetNearestColor (hdc=0xffffffff94010758, color=0x696969) returned 0x696969 [0219.627] GetNearestColor (hdc=0xffffffff94010758, color=0xa0a0a0) returned 0xa0a0a0 [0219.627] GetNearestColor (hdc=0xffffffff94010758, color=0x0) returned 0x0 [0219.627] GetNearestColor (hdc=0xffffffff94010758, color=0xffffff) returned 0xffffff [0219.627] GetNearestColor (hdc=0xffffffff94010758, color=0xe5e5e5) returned 0xe5e5e5 [0219.627] GetNearestColor (hdc=0xffffffff94010758, color=0xd8d8d8) returned 0xd8d8d8 [0219.628] GetNearestColor (hdc=0xffffffff94010758, color=0x0) returned 0x0 [0219.628] RestoreDC (hdc=0xffffffff94010758, nSavedDC=-1) returned 1 [0219.628] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.628] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff94010758) returned 0x0 [0219.628] IsAppThemed () returned 0x1 [0219.628] GetThemeAppProperties () returned 0x3 [0219.628] GetThemeAppProperties () returned 0x3 [0219.628] IsAppThemed () returned 0x1 [0219.628] GetThemeAppProperties () returned 0x3 [0219.628] GetThemeAppProperties () returned 0x3 [0219.628] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db440, format=0x2415, lpdtp=0x27d54e8 | out: lpchText="Submit Decryption Key", lprc=0x5db440) returned 13 [0219.628] IsAppThemed () returned 0x1 [0219.628] GetThemeAppProperties () returned 0x3 [0219.628] GetThemeAppProperties () returned 0x3 [0219.628] IsAppThemed () returned 0x1 [0219.628] GetThemeAppProperties () returned 0x3 [0219.629] GetThemeAppProperties () returned 0x3 [0219.629] IsAppThemed () returned 0x1 [0219.629] GetThemeAppProperties () returned 0x3 [0219.629] GetThemeAppProperties () returned 0x3 [0219.629] IsAppThemed () returned 0x1 [0219.629] GetThemeAppProperties () returned 0x3 [0219.629] GetThemeAppProperties () returned 0x3 [0219.629] IsThemePartDefined () returned 0x1 [0219.629] IsAppThemed () returned 0x1 [0219.629] GetThemeAppProperties () returned 0x3 [0219.629] GetThemeAppProperties () returned 0x3 [0219.629] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0219.629] IsAppThemed () returned 0x1 [0219.629] GetThemeAppProperties () returned 0x3 [0219.629] GetThemeAppProperties () returned 0x3 [0219.629] IsAppThemed () returned 0x1 [0219.629] GetThemeAppProperties () returned 0x3 [0219.629] GetThemeAppProperties () returned 0x3 [0219.629] IsThemePartDefined () returned 0x1 [0219.629] GdipCreateRegion (region=0x5db520) returned 0x0 [0219.629] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.629] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0219.629] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326dd0) returned 0x0 [0219.629] GdipIsMatrixIdentity (matrix=0x1c326dd0, result=0x5db580) returned 0x0 [0219.629] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee10 [0219.629] GdipGetMatrixElements (matrix=0x1c326dd0, matrixOut=0x89ee10) returned 0x0 [0219.629] LocalFree (hMem=0x89ee10) returned 0x0 [0219.722] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f510 [0219.722] GdipGetMatrixElements (matrix=0x1c326dd0, matrixOut=0x89f510) returned 0x0 [0219.722] LocalFree (hMem=0x89f510) returned 0x0 [0219.722] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.722] GdipDeleteMatrix (matrix=0x1c326dd0) returned 0x0 [0219.723] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db5d0) returned 0x0 [0219.723] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db590) returned 0x0 [0219.723] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db590) returned 0x0 [0219.723] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.723] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.723] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db600) returned 0x0 [0219.723] GetCurrentObject (hdc=0xffffffff94010758, type=0x1) returned 0x1b00017 [0219.723] GetCurrentObject (hdc=0xffffffff94010758, type=0x2) returned 0x1900010 [0219.723] GetCurrentObject (hdc=0xffffffff94010758, type=0x7) returned 0x11050637 [0219.723] GetCurrentObject (hdc=0xffffffff94010758, type=0x6) returned 0x18a0048 [0219.723] SaveDC (hdc=0xffffffff94010758) returned 1 [0219.723] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd4040572 [0219.723] GetClipRgn (hdc=0xffffffff94010758, hrgn=0xffffffffd4040572) returned 0 [0219.724] SelectClipRgn (hdc=0xffffffff94010758, hrgn=0x7a04074d) returned 2 [0219.724] DeleteObject (ho=0xffffffffd4040572) returned 1 [0219.724] DeleteObject (ho=0x7a04074d) returned 1 [0219.724] OffsetViewportOrgEx (in: hdc=0xffffffff94010758, x=0, y=0, lppt=0x27d5ef8 | out: lppt=0x27d5ef8) returned 1 [0219.724] DrawThemeParentBackground () returned 0x0 [0219.724] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db040 | out: lpwndpl=0x5db040) returned 1 [0219.724] GetClientRect (in: hWnd=0x20160, lpRect=0x5daec0 | out: lpRect=0x5daec0) returned 1 [0219.724] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.724] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.724] GetSystemMetrics (nIndex=42) returned 0 [0219.724] CoTaskMemAlloc (cb=0x20) returned 0x89d4f0 [0219.724] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d4f0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.724] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d4f0) returned 0xd [0219.724] CoTaskMemFree (pv=0x89d4f0) [0219.724] GetClientRect (in: hWnd=0x20160, lpRect=0x5dac70 | out: lpRect=0x5dac70) returned 1 [0219.724] GetCurrentObject (hdc=0xffffffff94010758, type=0x1) returned 0x1b00017 [0219.724] GetCurrentObject (hdc=0xffffffff94010758, type=0x2) returned 0x1900010 [0219.724] GetCurrentObject (hdc=0xffffffff94010758, type=0x7) returned 0x11050637 [0219.725] GetCurrentObject (hdc=0xffffffff94010758, type=0x6) returned 0x18a0048 [0219.725] SaveDC (hdc=0xffffffff94010758) returned 2 [0219.725] GetNearestColor (hdc=0xffffffff94010758, color=0xf0f0f0) returned 0xf0f0f0 [0219.725] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff89100686 [0219.725] FillRect (hDC=0xffffffff94010758, lprc=0x5da7a0, hbr=0xffffffff89100686) returned 1 [0219.725] DeleteObject (ho=0xffffffff89100686) returned 1 [0219.725] RestoreDC (hdc=0xffffffff94010758, nSavedDC=-1) returned 1 [0219.725] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.725] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.725] GetSystemMetrics (nIndex=42) returned 0 [0219.725] CoTaskMemAlloc (cb=0x20) returned 0x89d280 [0219.725] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d280, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.725] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d280) returned 0xd [0219.725] CoTaskMemFree (pv=0x89d280) [0219.725] GetClientRect (in: hWnd=0x20160, lpRect=0x5dab70 | out: lpRect=0x5dab70) returned 1 [0219.725] GetCurrentObject (hdc=0xffffffff94010758, type=0x1) returned 0x1b00017 [0219.725] GetCurrentObject (hdc=0xffffffff94010758, type=0x2) returned 0x1900010 [0219.725] GetCurrentObject (hdc=0xffffffff94010758, type=0x7) returned 0x11050637 [0219.726] GetCurrentObject (hdc=0xffffffff94010758, type=0x6) returned 0x18a0048 [0219.726] SaveDC (hdc=0xffffffff94010758) returned 2 [0219.726] GetNearestColor (hdc=0xffffffff94010758, color=0xf0f0f0) returned 0xf0f0f0 [0219.726] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff8a100686 [0219.726] FillRect (hDC=0xffffffff94010758, lprc=0x5da6a0, hbr=0xffffffff8a100686) returned 1 [0219.726] DeleteObject (ho=0xffffffff8a100686) returned 1 [0219.726] RestoreDC (hdc=0xffffffff94010758, nSavedDC=-1) returned 1 [0219.726] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.726] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.726] GetSystemMetrics (nIndex=42) returned 0 [0219.726] CoTaskMemAlloc (cb=0x20) returned 0x89cef0 [0219.726] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cef0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.726] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cef0) returned 0xd [0219.726] CoTaskMemFree (pv=0x89cef0) [0219.726] RestoreDC (hdc=0xffffffff94010758, nSavedDC=-1) returned 1 [0219.726] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.726] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff94010758) returned 0x0 [0219.726] IsAppThemed () returned 0x1 [0219.726] GetThemeAppProperties () returned 0x3 [0219.726] GetThemeAppProperties () returned 0x3 [0219.727] IsAppThemed () returned 0x1 [0219.727] GetThemeAppProperties () returned 0x3 [0219.727] GetThemeAppProperties () returned 0x3 [0219.727] IsThemePartDefined () returned 0x1 [0219.727] GdipCreateRegion (region=0x5db400) returned 0x0 [0219.727] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.727] GdipCreateMatrix (matrix=0x5db400) returned 0x0 [0219.727] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3272d0) returned 0x0 [0219.727] GdipIsMatrixIdentity (matrix=0x1c3272d0, result=0x5db460) returned 0x0 [0219.727] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f110 [0219.727] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89f110) returned 0x0 [0219.727] LocalFree (hMem=0x89f110) returned 0x0 [0219.727] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e990 [0219.727] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89e990) returned 0x0 [0219.727] LocalFree (hMem=0x89e990) returned 0x0 [0219.727] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.727] GdipDeleteMatrix (matrix=0x1c3272d0) returned 0x0 [0219.727] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db4b0) returned 0x0 [0219.727] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db470) returned 0x0 [0219.727] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db470) returned 0x0 [0219.727] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.727] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.727] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4e0) returned 0x0 [0219.727] GetCurrentObject (hdc=0xffffffff94010758, type=0x1) returned 0x1b00017 [0219.727] GetCurrentObject (hdc=0xffffffff94010758, type=0x2) returned 0x1900010 [0219.727] GetCurrentObject (hdc=0xffffffff94010758, type=0x7) returned 0x11050637 [0219.727] GetCurrentObject (hdc=0xffffffff94010758, type=0x6) returned 0x18a0048 [0219.727] SaveDC (hdc=0xffffffff94010758) returned 1 [0219.728] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7b04074d [0219.728] GetClipRgn (hdc=0xffffffff94010758, hrgn=0x7b04074d) returned 0 [0219.728] SelectClipRgn (hdc=0xffffffff94010758, hrgn=0xffffffffd6040572) returned 2 [0219.728] DeleteObject (ho=0x7b04074d) returned 1 [0219.728] DeleteObject (ho=0xffffffffd6040572) returned 1 [0219.728] OffsetViewportOrgEx (in: hdc=0xffffffff94010758, x=0, y=0, lppt=0x27d6bf8 | out: lppt=0x27d6bf8) returned 1 [0219.728] IsAppThemed () returned 0x1 [0219.728] GetThemeAppProperties () returned 0x3 [0219.728] GetThemeAppProperties () returned 0x3 [0219.728] DrawThemeBackground () returned 0x0 [0219.728] RestoreDC (hdc=0xffffffff94010758, nSavedDC=-1) returned 1 [0219.728] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.728] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff94010758) returned 0x0 [0219.728] GdipCreateRegion (region=0x5db3d0) returned 0x0 [0219.728] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.728] GdipCreateMatrix (matrix=0x5db3d0) returned 0x0 [0219.728] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327350) returned 0x0 [0219.728] GdipIsMatrixIdentity (matrix=0x1c327350, result=0x5db430) returned 0x0 [0219.728] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed10 [0219.728] GdipGetMatrixElements (matrix=0x1c327350, matrixOut=0x89ed10) returned 0x0 [0219.728] LocalFree (hMem=0x89ed10) returned 0x0 [0219.728] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee90 [0219.728] GdipGetMatrixElements (matrix=0x1c327350, matrixOut=0x89ee90) returned 0x0 [0219.728] LocalFree (hMem=0x89ee90) returned 0x0 [0219.728] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.728] GdipDeleteMatrix (matrix=0x1c327350) returned 0x0 [0219.728] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db480) returned 0x0 [0219.729] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db440) returned 0x0 [0219.729] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5db440) returned 0x0 [0219.729] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.729] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.729] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4b0) returned 0x0 [0219.729] GetCurrentObject (hdc=0xffffffff94010758, type=0x1) returned 0x1b00017 [0219.729] GetCurrentObject (hdc=0xffffffff94010758, type=0x2) returned 0x1900010 [0219.729] GetCurrentObject (hdc=0xffffffff94010758, type=0x7) returned 0x11050637 [0219.729] GetCurrentObject (hdc=0xffffffff94010758, type=0x6) returned 0x18a0048 [0219.729] SaveDC (hdc=0xffffffff94010758) returned 1 [0219.729] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd7040572 [0219.729] GetClipRgn (hdc=0xffffffff94010758, hrgn=0xffffffffd7040572) returned 0 [0219.729] SelectClipRgn (hdc=0xffffffff94010758, hrgn=0x7c04074d) returned 2 [0219.729] DeleteObject (ho=0xffffffffd7040572) returned 1 [0219.729] DeleteObject (ho=0x7c04074d) returned 1 [0219.729] OffsetViewportOrgEx (in: hdc=0xffffffff94010758, x=0, y=0, lppt=0x27d70f8 | out: lppt=0x27d70f8) returned 1 [0219.729] IsAppThemed () returned 0x1 [0219.729] GetThemeAppProperties () returned 0x3 [0219.729] GetThemeAppProperties () returned 0x3 [0219.729] GetThemeBackgroundContentRect () returned 0x0 [0219.729] RestoreDC (hdc=0xffffffff94010758, nSavedDC=-1) returned 1 [0219.729] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.729] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff94010758) returned 0x0 [0219.729] IsAppThemed () returned 0x1 [0219.729] GetThemeAppProperties () returned 0x3 [0219.729] GetThemeAppProperties () returned 0x3 [0219.729] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5db5a0) returned 0x0 [0219.730] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db580) returned 0x0 [0219.730] GetCurrentObject (hdc=0xffffffff94010758, type=0x1) returned 0x1b00017 [0219.730] GetCurrentObject (hdc=0xffffffff94010758, type=0x2) returned 0x1900010 [0219.730] GetCurrentObject (hdc=0xffffffff94010758, type=0x7) returned 0x11050637 [0219.730] GetCurrentObject (hdc=0xffffffff94010758, type=0x6) returned 0x18a0048 [0219.730] SaveDC (hdc=0xffffffff94010758) returned 1 [0219.730] GetTextAlign (hdc=0xffffffff94010758) returned 0x0 [0219.730] GetTextColor (hdc=0xffffffff94010758) returned 0x0 [0219.730] GetCurrentObject (hdc=0xffffffff94010758, type=0x6) returned 0x18a0048 [0219.730] GetObjectW (in: h=0x18a0048, c=92, pv=0x5daff0 | out: pv=0x5daff0) returned 92 [0219.730] SelectObject (hdc=0xffffffff94010758, h=0x290a0573) returned 0x18a0048 [0219.730] GetBkMode (hdc=0xffffffff94010758) returned 2 [0219.730] SetBkMode (hdc=0xffffffff94010758, mode=1) returned 2 [0219.730] DrawTextExW (in: hdc=0xffffffff94010758, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db080, format=0x2415, lpdtp=0x27d7650 | out: lpchText="Submit Decryption Key", lprc=0x5db080) returned 13 [0219.730] DrawTextExW (in: hdc=0xffffffff94010758, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db130, format=0x2015, lpdtp=0x27d7650 | out: lpchText="Submit Decryption Key", lprc=0x5db130) returned 13 [0219.731] RestoreDC (hdc=0xffffffff94010758, nSavedDC=-1) returned 1 [0219.731] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.731] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff94010758) returned 0x0 [0219.731] GetFocus () returned 0x2021e [0219.731] IsAppThemed () returned 0x1 [0219.731] GetThemeAppProperties () returned 0x3 [0219.731] GetThemeAppProperties () returned 0x3 [0219.731] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbce0) returned 0x0 [0219.731] BitBlt (hdc=0x10105e0, x=0, y=0, cx=262, cy=36, hdcSrc=0xffffffff94010758, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.731] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.731] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffff94010758) returned 0x0 [0219.731] SelectPalette (hdc=0x10105e0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.731] SelectObject (hdc=0xffffffff94010758, h=0x185000f) returned 0x11050637 [0219.732] DeleteDC (hdc=0xffffffff94010758) returned 1 [0219.732] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.732] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.732] EndPaint (hWnd=0x2021e, lpPaint=0x5dbde8) returned 1 [0219.732] MapWindowPoints (in: hWndFrom=0x2021e, hWndTo=0x0, lpPoints=0x27d77b8, cPoints=0x1 | out: lpPoints=0x27d77b8) returned 21233850 [0219.732] WindowFromPoint (Point=0x15000000143) returned 0x2021e [0219.732] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x84, wParam=0x0, lParam=0x1500143) returned 0x1 [0219.732] NotifyWinEvent (event=0x800a, hwnd=0x2021e, idObject=-4, idChild=0) [0219.732] NotifyWinEvent (event=0x800c, hwnd=0x2021e, idObject=-4, idChild=0) [0219.732] SendMessageW (hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0219.732] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x44a, wParam=0x11, lParam=0x5dc720) returned 0x0 [0219.732] GetProcessWindowStation () returned 0xc8 [0219.732] GetActiveWindow () returned 0x20160 [0219.733] GetCurrentActCtx (in: lphActCtx=0x5dc620 | out: lphActCtx=0x5dc620*=0x811d28) returned 1 [0219.733] GetCurrentThreadId () returned 0xe28 [0219.733] EnumThreadWindows (dwThreadId=0xe28, lpfn=0x216738c, lParam=0x0) returned 1 [0219.733] IsWindowVisible (hWnd=0x20160) returned 1 [0219.733] IsWindowEnabled (hWnd=0x20160) returned 1 [0219.733] IsWindowVisible (hWnd=0x901f6) returned 1 [0219.733] IsWindowEnabled (hWnd=0x901f6) returned 0 [0219.733] IsWindowVisible (hWnd=0x20232) returned 0 [0219.733] IsWindowVisible (hWnd=0x20224) returned 0 [0219.733] IsWindowVisible (hWnd=0x50020) returned 0 [0219.733] IsWindowVisible (hWnd=0x20230) returned 0 [0219.733] IsWindowVisible (hWnd=0x60152) returned 0 [0219.733] GetActiveWindow () returned 0x20160 [0219.733] GetFocus () returned 0x2021e [0219.733] IsWindow (hWnd=0x20160) returned 1 [0219.733] EnableWindow (hWnd=0x20160, bEnable=0) returned 0 [0219.733] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0219.734] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0219.734] MessageBoxW (hWnd=0x20160, lpText="The decryption key has bad format.", lpCaption="Error", uType=0x10) returned 1 [0219.737] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0219.745] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x80216) returned 0x1 [0219.747] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0219.747] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0219.747] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0219.747] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0219.747] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0219.748] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dbbc0) returned 0x0 [0219.749] GetFocus () returned 0x2023e [0219.749] IsChild (hWndParent=0x20160, hWnd=0x2023e) returned 0 [0219.749] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x8, wParam=0x2023e, lParam=0x0) returned 0x0 [0219.749] GetCapture () returned 0x2021e [0219.749] ReleaseCapture () returned 1 [0219.749] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0219.749] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0219.749] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0219.750] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0219.751] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0219.751] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0x1010749 [0219.751] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.751] CreateCompatibleDC (hdc=0x1010749) returned 0xffffffffff010713 [0219.751] SelectObject (hdc=0xffffffffff010713, h=0x11050637) returned 0x185000f [0219.751] GdipCreateFromHDC (hdc=0xffffffffff010713, graphics=0x5db3f0) returned 0x0 [0219.751] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.752] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0219.752] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0219.752] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327190) returned 0x0 [0219.752] GdipIsMatrixIdentity (matrix=0x1c327190, result=0x5db580) returned 0x0 [0219.752] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ead0 [0219.752] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89ead0) returned 0x0 [0219.752] LocalFree (hMem=0x89ead0) returned 0x0 [0219.752] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.752] GdipDeleteMatrix (matrix=0x1c327190) returned 0x0 [0219.752] GdipCreateRegion (region=0x5db520) returned 0x0 [0219.752] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.752] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0219.752] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0219.752] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd5b0dbd) returned 0x0 [0219.752] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.752] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.753] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0219.753] GetCurrentObject (hdc=0xffffffffff010713, type=0x1) returned 0x1b00017 [0219.753] GetCurrentObject (hdc=0xffffffffff010713, type=0x2) returned 0x1900010 [0219.753] GetCurrentObject (hdc=0xffffffffff010713, type=0x7) returned 0x11050637 [0219.753] GetCurrentObject (hdc=0xffffffffff010713, type=0x6) returned 0x18a0048 [0219.753] SaveDC (hdc=0xffffffffff010713) returned 1 [0219.753] GetNearestColor (hdc=0xffffffffff010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.753] GetNearestColor (hdc=0xffffffffff010713, color=0xa0a0a0) returned 0xa0a0a0 [0219.753] GetNearestColor (hdc=0xffffffffff010713, color=0x696969) returned 0x696969 [0219.754] GetNearestColor (hdc=0xffffffffff010713, color=0xa0a0a0) returned 0xa0a0a0 [0219.754] GetNearestColor (hdc=0xffffffffff010713, color=0x0) returned 0x0 [0219.754] GetNearestColor (hdc=0xffffffffff010713, color=0xffffff) returned 0xffffff [0219.754] GetNearestColor (hdc=0xffffffffff010713, color=0xe5e5e5) returned 0xe5e5e5 [0219.754] GetNearestColor (hdc=0xffffffffff010713, color=0xd8d8d8) returned 0xd8d8d8 [0219.754] GetNearestColor (hdc=0xffffffffff010713, color=0x0) returned 0x0 [0219.754] RestoreDC (hdc=0xffffffffff010713, nSavedDC=-1) returned 1 [0219.754] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.754] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffff010713) returned 0x0 [0219.754] IsAppThemed () returned 0x1 [0219.754] GetThemeAppProperties () returned 0x3 [0219.754] GetThemeAppProperties () returned 0x3 [0219.754] IsAppThemed () returned 0x1 [0219.754] GetThemeAppProperties () returned 0x3 [0219.754] GetThemeAppProperties () returned 0x3 [0219.754] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x2415, lpdtp=0x27d83d0 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0219.757] IsAppThemed () returned 0x1 [0219.757] GetThemeAppProperties () returned 0x3 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] IsAppThemed () returned 0x1 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] IsAppThemed () returned 0x1 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] IsAppThemed () returned 0x1 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] IsThemePartDefined () returned 0x1 [0219.758] IsAppThemed () returned 0x1 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0219.758] IsAppThemed () returned 0x1 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] IsAppThemed () returned 0x1 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] GetThemeAppProperties () returned 0x3 [0219.758] IsThemePartDefined () returned 0x1 [0219.758] GdipCreateRegion (region=0x5dad30) returned 0x0 [0219.758] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.758] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0219.758] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327050) returned 0x0 [0219.758] GdipIsMatrixIdentity (matrix=0x1c327050, result=0x5dad90) returned 0x0 [0219.758] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f710 [0219.759] GdipGetMatrixElements (matrix=0x1c327050, matrixOut=0x89f710) returned 0x0 [0219.759] LocalFree (hMem=0x89f710) returned 0x0 [0219.759] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef90 [0219.759] GdipGetMatrixElements (matrix=0x1c327050, matrixOut=0x89ef90) returned 0x0 [0219.759] LocalFree (hMem=0x89ef90) returned 0x0 [0219.759] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.759] GdipDeleteMatrix (matrix=0x1c327050) returned 0x0 [0219.759] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0219.759] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0219.759] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0219.759] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.759] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.759] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0219.759] GetCurrentObject (hdc=0xffffffffff010713, type=0x1) returned 0x1b00017 [0219.759] GetCurrentObject (hdc=0xffffffffff010713, type=0x2) returned 0x1900010 [0219.759] GetCurrentObject (hdc=0xffffffffff010713, type=0x7) returned 0x11050637 [0219.759] GetCurrentObject (hdc=0xffffffffff010713, type=0x6) returned 0x18a0048 [0219.759] SaveDC (hdc=0xffffffffff010713) returned 1 [0219.759] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d04074d [0219.759] GetClipRgn (hdc=0xffffffffff010713, hrgn=0x7d04074d) returned 0 [0219.760] SelectClipRgn (hdc=0xffffffffff010713, hrgn=0xffffffffdd040572) returned 2 [0219.760] DeleteObject (ho=0x7d04074d) returned 1 [0219.760] DeleteObject (ho=0xffffffffdd040572) returned 1 [0219.760] OffsetViewportOrgEx (in: hdc=0xffffffffff010713, x=0, y=0, lppt=0x27d8de0 | out: lppt=0x27d8de0) returned 1 [0219.760] DrawThemeParentBackground () returned 0x0 [0219.760] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0219.760] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0219.760] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.760] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.760] GetSystemMetrics (nIndex=42) returned 0 [0219.760] CoTaskMemAlloc (cb=0x20) returned 0x89ce60 [0219.760] GetWindowTextW (in: hWnd=0x20160, lpString=0x89ce60, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.760] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89ce60) returned 0xd [0219.760] CoTaskMemFree (pv=0x89ce60) [0219.760] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0219.760] GetCurrentObject (hdc=0xffffffffff010713, type=0x1) returned 0x1b00017 [0219.760] GetCurrentObject (hdc=0xffffffffff010713, type=0x2) returned 0x1900010 [0219.760] GetCurrentObject (hdc=0xffffffffff010713, type=0x7) returned 0x11050637 [0219.760] GetCurrentObject (hdc=0xffffffffff010713, type=0x6) returned 0x18a0048 [0219.760] SaveDC (hdc=0xffffffffff010713) returned 2 [0219.761] GetNearestColor (hdc=0xffffffffff010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.761] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff8b100686 [0219.761] FillRect (hDC=0xffffffffff010713, lprc=0x5d9fb0, hbr=0xffffffff8b100686) returned 1 [0219.761] DeleteObject (ho=0xffffffff8b100686) returned 1 [0219.761] RestoreDC (hdc=0xffffffffff010713, nSavedDC=-1) returned 1 [0219.761] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.761] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.761] GetSystemMetrics (nIndex=42) returned 0 [0219.761] CoTaskMemAlloc (cb=0x20) returned 0x89d280 [0219.761] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d280, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.761] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d280) returned 0xd [0219.761] CoTaskMemFree (pv=0x89d280) [0219.761] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0219.761] GetCurrentObject (hdc=0xffffffffff010713, type=0x1) returned 0x1b00017 [0219.761] GetCurrentObject (hdc=0xffffffffff010713, type=0x2) returned 0x1900010 [0219.761] GetCurrentObject (hdc=0xffffffffff010713, type=0x7) returned 0x11050637 [0219.761] GetCurrentObject (hdc=0xffffffffff010713, type=0x6) returned 0x18a0048 [0219.762] SaveDC (hdc=0xffffffffff010713) returned 2 [0219.762] GetNearestColor (hdc=0xffffffffff010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.762] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff8c100686 [0219.762] FillRect (hDC=0xffffffffff010713, lprc=0x5d9eb0, hbr=0xffffffff8c100686) returned 1 [0219.762] DeleteObject (ho=0xffffffff8c100686) returned 1 [0219.762] RestoreDC (hdc=0xffffffffff010713, nSavedDC=-1) returned 1 [0219.762] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.762] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.762] GetSystemMetrics (nIndex=42) returned 0 [0219.762] CoTaskMemAlloc (cb=0x20) returned 0x89d400 [0219.762] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d400, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.762] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d400) returned 0xd [0219.762] CoTaskMemFree (pv=0x89d400) [0219.762] RestoreDC (hdc=0xffffffffff010713, nSavedDC=-1) returned 1 [0219.762] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.762] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffff010713) returned 0x0 [0219.763] IsAppThemed () returned 0x1 [0219.763] GetThemeAppProperties () returned 0x3 [0219.763] GetThemeAppProperties () returned 0x3 [0219.763] IsAppThemed () returned 0x1 [0219.763] GetThemeAppProperties () returned 0x3 [0219.763] GetThemeAppProperties () returned 0x3 [0219.763] IsThemePartDefined () returned 0x1 [0219.763] GdipCreateRegion (region=0x5dac10) returned 0x0 [0219.763] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.763] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0219.763] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327010) returned 0x0 [0219.763] GdipIsMatrixIdentity (matrix=0x1c327010, result=0x5dac70) returned 0x0 [0219.763] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f650 [0219.763] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89f650) returned 0x0 [0219.763] LocalFree (hMem=0x89f650) returned 0x0 [0219.763] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f190 [0219.763] GdipGetMatrixElements (matrix=0x1c327010, matrixOut=0x89f190) returned 0x0 [0219.763] LocalFree (hMem=0x89f190) returned 0x0 [0219.763] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.763] GdipDeleteMatrix (matrix=0x1c327010) returned 0x0 [0219.763] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0219.763] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0219.763] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0219.763] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.763] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.764] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0219.764] GetCurrentObject (hdc=0xffffffffff010713, type=0x1) returned 0x1b00017 [0219.764] GetCurrentObject (hdc=0xffffffffff010713, type=0x2) returned 0x1900010 [0219.764] GetCurrentObject (hdc=0xffffffffff010713, type=0x7) returned 0x11050637 [0219.764] GetCurrentObject (hdc=0xffffffffff010713, type=0x6) returned 0x18a0048 [0219.764] SaveDC (hdc=0xffffffffff010713) returned 1 [0219.764] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffde040572 [0219.764] GetClipRgn (hdc=0xffffffffff010713, hrgn=0xffffffffde040572) returned 0 [0219.764] SelectClipRgn (hdc=0xffffffffff010713, hrgn=0x7f04074d) returned 2 [0219.764] DeleteObject (ho=0xffffffffde040572) returned 1 [0219.764] DeleteObject (ho=0x7f04074d) returned 1 [0219.764] OffsetViewportOrgEx (in: hdc=0xffffffffff010713, x=0, y=0, lppt=0x27d9ae0 | out: lppt=0x27d9ae0) returned 1 [0219.764] IsAppThemed () returned 0x1 [0219.764] GetThemeAppProperties () returned 0x3 [0219.764] GetThemeAppProperties () returned 0x3 [0219.764] DrawThemeBackground () returned 0x0 [0219.764] RestoreDC (hdc=0xffffffffff010713, nSavedDC=-1) returned 1 [0219.764] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.764] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffff010713) returned 0x0 [0219.765] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0219.765] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.765] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0219.765] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3272d0) returned 0x0 [0219.765] GdipIsMatrixIdentity (matrix=0x1c3272d0, result=0x5dac40) returned 0x0 [0219.765] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f650 [0219.765] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89f650) returned 0x0 [0219.765] LocalFree (hMem=0x89f650) returned 0x0 [0219.765] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f110 [0219.765] GdipGetMatrixElements (matrix=0x1c3272d0, matrixOut=0x89f110) returned 0x0 [0219.765] LocalFree (hMem=0x89f110) returned 0x0 [0219.765] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.765] GdipDeleteMatrix (matrix=0x1c3272d0) returned 0x0 [0219.765] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0219.765] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0219.765] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0219.765] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.765] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.765] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0219.765] GetCurrentObject (hdc=0xffffffffff010713, type=0x1) returned 0x1b00017 [0219.765] GetCurrentObject (hdc=0xffffffffff010713, type=0x2) returned 0x1900010 [0219.765] GetCurrentObject (hdc=0xffffffffff010713, type=0x7) returned 0x11050637 [0219.765] GetCurrentObject (hdc=0xffffffffff010713, type=0x6) returned 0x18a0048 [0219.766] SaveDC (hdc=0xffffffffff010713) returned 1 [0219.766] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8004074d [0219.766] GetClipRgn (hdc=0xffffffffff010713, hrgn=0xffffffff8004074d) returned 0 [0219.766] SelectClipRgn (hdc=0xffffffffff010713, hrgn=0xffffffffdf040572) returned 2 [0219.766] DeleteObject (ho=0xffffffff8004074d) returned 1 [0219.766] DeleteObject (ho=0xffffffffdf040572) returned 1 [0219.766] OffsetViewportOrgEx (in: hdc=0xffffffffff010713, x=0, y=0, lppt=0x27d9fe0 | out: lppt=0x27d9fe0) returned 1 [0219.766] IsAppThemed () returned 0x1 [0219.766] GetThemeAppProperties () returned 0x3 [0219.766] GetThemeAppProperties () returned 0x3 [0219.766] GetThemeBackgroundContentRect () returned 0x0 [0219.766] RestoreDC (hdc=0xffffffffff010713, nSavedDC=-1) returned 1 [0219.766] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.766] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffff010713) returned 0x0 [0219.766] IsAppThemed () returned 0x1 [0219.766] GetThemeAppProperties () returned 0x3 [0219.766] GetThemeAppProperties () returned 0x3 [0219.766] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0219.766] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0219.767] GetCurrentObject (hdc=0xffffffffff010713, type=0x1) returned 0x1b00017 [0219.767] GetCurrentObject (hdc=0xffffffffff010713, type=0x2) returned 0x1900010 [0219.767] GetCurrentObject (hdc=0xffffffffff010713, type=0x7) returned 0x11050637 [0219.767] GetCurrentObject (hdc=0xffffffffff010713, type=0x6) returned 0x18a0048 [0219.767] SaveDC (hdc=0xffffffffff010713) returned 1 [0219.767] GetTextAlign (hdc=0xffffffffff010713) returned 0x0 [0219.767] GetTextColor (hdc=0xffffffffff010713) returned 0x0 [0219.767] GetCurrentObject (hdc=0xffffffffff010713, type=0x6) returned 0x18a0048 [0219.767] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0219.767] SelectObject (hdc=0xffffffffff010713, h=0x290a0573) returned 0x18a0048 [0219.767] GetBkMode (hdc=0xffffffffff010713) returned 2 [0219.767] SetBkMode (hdc=0xffffffffff010713, mode=1) returned 2 [0219.767] DrawTextExW (in: hdc=0xffffffffff010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x2415, lpdtp=0x27da538 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0219.767] DrawTextExW (in: hdc=0xffffffffff010713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x2015, lpdtp=0x27da538 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0219.768] RestoreDC (hdc=0xffffffffff010713, nSavedDC=-1) returned 1 [0219.768] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.768] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffff010713) returned 0x0 [0219.768] GetFocus () returned 0x2023e [0219.768] IsAppThemed () returned 0x1 [0219.768] GetThemeAppProperties () returned 0x3 [0219.768] GetThemeAppProperties () returned 0x3 [0219.768] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0219.768] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0xffffffffff010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.768] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.768] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xffffffffff010713) returned 0x0 [0219.768] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.768] SelectObject (hdc=0xffffffffff010713, h=0x185000f) returned 0x11050637 [0219.768] DeleteDC (hdc=0xffffffffff010713) returned 1 [0219.769] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.769] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.769] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0219.769] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0219.769] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0219.769] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0x1010749 [0219.769] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.769] CreateCompatibleDC (hdc=0x1010749) returned 0x10713 [0219.769] SelectObject (hdc=0x10713, h=0x11050637) returned 0x185000f [0219.769] GdipCreateFromHDC (hdc=0x10713, graphics=0x5db3f0) returned 0x0 [0219.769] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.769] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0219.769] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0219.769] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327190) returned 0x0 [0219.770] GdipIsMatrixIdentity (matrix=0x1c327190, result=0x5db580) returned 0x0 [0219.770] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0219.770] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89f050) returned 0x0 [0219.770] LocalFree (hMem=0x89f050) returned 0x0 [0219.770] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.770] GdipDeleteMatrix (matrix=0x1c327190) returned 0x0 [0219.770] GdipCreateRegion (region=0x5db520) returned 0x0 [0219.770] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.770] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0219.770] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0219.770] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd590dbd) returned 0x0 [0219.770] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.770] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.771] GdipGetDC (graphics=0x1c3267f0, hdc=0x5daa10) returned 0x0 [0219.771] GetCurrentObject (hdc=0x10713, type=0x1) returned 0x1b00017 [0219.771] GetCurrentObject (hdc=0x10713, type=0x2) returned 0x1900010 [0219.771] GetCurrentObject (hdc=0x10713, type=0x7) returned 0x11050637 [0219.771] GetCurrentObject (hdc=0x10713, type=0x6) returned 0x18a0048 [0219.771] SaveDC (hdc=0x10713) returned 1 [0219.771] GetNearestColor (hdc=0x10713, color=0xf0f0f0) returned 0xf0f0f0 [0219.771] GetNearestColor (hdc=0x10713, color=0xa0a0a0) returned 0xa0a0a0 [0219.771] GetNearestColor (hdc=0x10713, color=0x696969) returned 0x696969 [0219.771] GetNearestColor (hdc=0x10713, color=0xa0a0a0) returned 0xa0a0a0 [0219.771] GetNearestColor (hdc=0x10713, color=0x0) returned 0x0 [0219.771] GetNearestColor (hdc=0x10713, color=0xffffff) returned 0xffffff [0219.771] GetNearestColor (hdc=0x10713, color=0xe5e5e5) returned 0xe5e5e5 [0219.772] GetNearestColor (hdc=0x10713, color=0xd8d8d8) returned 0xd8d8d8 [0219.772] GetNearestColor (hdc=0x10713, color=0x0) returned 0x0 [0219.772] RestoreDC (hdc=0x10713, nSavedDC=-1) returned 1 [0219.772] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.772] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x10713) returned 0x0 [0219.772] IsAppThemed () returned 0x1 [0219.772] GetThemeAppProperties () returned 0x3 [0219.772] GetThemeAppProperties () returned 0x3 [0219.772] IsAppThemed () returned 0x1 [0219.772] GetThemeAppProperties () returned 0x3 [0219.772] GetThemeAppProperties () returned 0x3 [0219.772] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dac50, format=0x2415, lpdtp=0x27daf88 | out: lpchText="Submit Decryption Key", lprc=0x5dac50) returned 13 [0219.772] IsAppThemed () returned 0x1 [0219.772] GetThemeAppProperties () returned 0x3 [0219.772] GetThemeAppProperties () returned 0x3 [0219.772] IsAppThemed () returned 0x1 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] GetFocus () returned 0x2023e [0219.773] IsAppThemed () returned 0x1 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] IsAppThemed () returned 0x1 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] IsThemePartDefined () returned 0x1 [0219.773] IsAppThemed () returned 0x1 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0219.773] IsAppThemed () returned 0x1 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] IsAppThemed () returned 0x1 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] GetThemeAppProperties () returned 0x3 [0219.773] IsThemePartDefined () returned 0x1 [0219.773] GdipCreateRegion (region=0x5dad30) returned 0x0 [0219.773] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.773] GdipCreateMatrix (matrix=0x5dad30) returned 0x0 [0219.773] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3271d0) returned 0x0 [0219.773] GdipIsMatrixIdentity (matrix=0x1c3271d0, result=0x5dad90) returned 0x0 [0219.773] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f5d0 [0219.773] GdipGetMatrixElements (matrix=0x1c3271d0, matrixOut=0x89f5d0) returned 0x0 [0219.774] LocalFree (hMem=0x89f5d0) returned 0x0 [0219.774] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef10 [0219.774] GdipGetMatrixElements (matrix=0x1c3271d0, matrixOut=0x89ef10) returned 0x0 [0219.774] LocalFree (hMem=0x89ef10) returned 0x0 [0219.774] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.774] GdipDeleteMatrix (matrix=0x1c3271d0) returned 0x0 [0219.774] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dade0) returned 0x0 [0219.774] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dada0) returned 0x0 [0219.774] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dada0) returned 0x0 [0219.774] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.774] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.774] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dae10) returned 0x0 [0219.774] GetCurrentObject (hdc=0x10713, type=0x1) returned 0x1b00017 [0219.774] GetCurrentObject (hdc=0x10713, type=0x2) returned 0x1900010 [0219.774] GetCurrentObject (hdc=0x10713, type=0x7) returned 0x11050637 [0219.774] GetCurrentObject (hdc=0x10713, type=0x6) returned 0x18a0048 [0219.774] SaveDC (hdc=0x10713) returned 1 [0219.774] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe0040572 [0219.774] GetClipRgn (hdc=0x10713, hrgn=0xffffffffe0040572) returned 0 [0219.774] SelectClipRgn (hdc=0x10713, hrgn=0xffffffff8404074d) returned 2 [0219.774] DeleteObject (ho=0xffffffffe0040572) returned 1 [0219.775] DeleteObject (ho=0xffffffff8404074d) returned 1 [0219.775] OffsetViewportOrgEx (in: hdc=0x10713, x=0, y=0, lppt=0x27db998 | out: lppt=0x27db998) returned 1 [0219.775] DrawThemeParentBackground () returned 0x0 [0219.775] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5da850 | out: lpwndpl=0x5da850) returned 1 [0219.775] GetClientRect (in: hWnd=0x20160, lpRect=0x5da6d0 | out: lpRect=0x5da6d0) returned 1 [0219.775] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.775] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.775] GetSystemMetrics (nIndex=42) returned 0 [0219.775] CoTaskMemAlloc (cb=0x20) returned 0x89d280 [0219.775] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d280, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.775] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d280) returned 0xd [0219.775] CoTaskMemFree (pv=0x89d280) [0219.775] GetClientRect (in: hWnd=0x20160, lpRect=0x5da480 | out: lpRect=0x5da480) returned 1 [0219.775] GetCurrentObject (hdc=0x10713, type=0x1) returned 0x1b00017 [0219.775] GetCurrentObject (hdc=0x10713, type=0x2) returned 0x1900010 [0219.775] GetCurrentObject (hdc=0x10713, type=0x7) returned 0x11050637 [0219.775] GetCurrentObject (hdc=0x10713, type=0x6) returned 0x18a0048 [0219.775] SaveDC (hdc=0x10713) returned 2 [0219.775] GetNearestColor (hdc=0x10713, color=0xf0f0f0) returned 0xf0f0f0 [0219.775] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff8d100686 [0219.775] FillRect (hDC=0x10713, lprc=0x5d9fb0, hbr=0xffffffff8d100686) returned 1 [0219.776] DeleteObject (ho=0xffffffff8d100686) returned 1 [0219.776] RestoreDC (hdc=0x10713, nSavedDC=-1) returned 1 [0219.776] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.776] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.776] GetSystemMetrics (nIndex=42) returned 0 [0219.776] CoTaskMemAlloc (cb=0x20) returned 0x89d4c0 [0219.776] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d4c0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.776] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d4c0) returned 0xd [0219.776] CoTaskMemFree (pv=0x89d4c0) [0219.776] GetClientRect (in: hWnd=0x20160, lpRect=0x5da380 | out: lpRect=0x5da380) returned 1 [0219.776] GetCurrentObject (hdc=0x10713, type=0x1) returned 0x1b00017 [0219.776] GetCurrentObject (hdc=0x10713, type=0x2) returned 0x1900010 [0219.776] GetCurrentObject (hdc=0x10713, type=0x7) returned 0x11050637 [0219.776] GetCurrentObject (hdc=0x10713, type=0x6) returned 0x18a0048 [0219.776] SaveDC (hdc=0x10713) returned 2 [0219.776] GetNearestColor (hdc=0x10713, color=0xf0f0f0) returned 0xf0f0f0 [0219.776] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff8e100686 [0219.776] FillRect (hDC=0x10713, lprc=0x5d9eb0, hbr=0xffffffff8e100686) returned 1 [0219.776] DeleteObject (ho=0xffffffff8e100686) returned 1 [0219.776] RestoreDC (hdc=0x10713, nSavedDC=-1) returned 1 [0219.776] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0219.776] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0219.777] GetSystemMetrics (nIndex=42) returned 0 [0219.777] CoTaskMemAlloc (cb=0x20) returned 0x89d460 [0219.777] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d460, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0219.777] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d460) returned 0xd [0219.777] CoTaskMemFree (pv=0x89d460) [0219.777] RestoreDC (hdc=0x10713, nSavedDC=-1) returned 1 [0219.777] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.777] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x10713) returned 0x0 [0219.777] IsAppThemed () returned 0x1 [0219.777] GetThemeAppProperties () returned 0x3 [0219.777] GetThemeAppProperties () returned 0x3 [0219.777] IsAppThemed () returned 0x1 [0219.777] GetThemeAppProperties () returned 0x3 [0219.777] GetThemeAppProperties () returned 0x3 [0219.777] IsThemePartDefined () returned 0x1 [0219.777] GdipCreateRegion (region=0x5dac10) returned 0x0 [0219.777] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.777] GdipCreateMatrix (matrix=0x5dac10) returned 0x0 [0219.777] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e50) returned 0x0 [0219.777] GdipIsMatrixIdentity (matrix=0x1c326e50, result=0x5dac70) returned 0x0 [0219.777] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f710 [0219.777] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89f710) returned 0x0 [0219.777] LocalFree (hMem=0x89f710) returned 0x0 [0219.777] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f510 [0219.777] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89f510) returned 0x0 [0219.777] LocalFree (hMem=0x89f510) returned 0x0 [0219.777] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.778] GdipDeleteMatrix (matrix=0x1c326e50) returned 0x0 [0219.778] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dacc0) returned 0x0 [0219.778] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac80) returned 0x0 [0219.778] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac80) returned 0x0 [0219.778] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.778] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.778] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacf0) returned 0x0 [0219.778] GetCurrentObject (hdc=0x10713, type=0x1) returned 0x1b00017 [0219.778] GetCurrentObject (hdc=0x10713, type=0x2) returned 0x1900010 [0219.778] GetCurrentObject (hdc=0x10713, type=0x7) returned 0x11050637 [0219.778] GetCurrentObject (hdc=0x10713, type=0x6) returned 0x18a0048 [0219.778] SaveDC (hdc=0x10713) returned 1 [0219.778] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8504074d [0219.778] GetClipRgn (hdc=0x10713, hrgn=0xffffffff8504074d) returned 0 [0219.778] SelectClipRgn (hdc=0x10713, hrgn=0xffffffffe2040572) returned 2 [0219.778] DeleteObject (ho=0xffffffff8504074d) returned 1 [0219.778] DeleteObject (ho=0xffffffffe2040572) returned 1 [0219.778] OffsetViewportOrgEx (in: hdc=0x10713, x=0, y=0, lppt=0x27dc698 | out: lppt=0x27dc698) returned 1 [0219.778] IsAppThemed () returned 0x1 [0219.778] GetThemeAppProperties () returned 0x3 [0219.778] GetThemeAppProperties () returned 0x3 [0219.778] DrawThemeBackground () returned 0x0 [0219.778] RestoreDC (hdc=0x10713, nSavedDC=-1) returned 1 [0219.778] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.778] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x10713) returned 0x0 [0219.778] GdipCreateRegion (region=0x5dabe0) returned 0x0 [0219.779] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.779] GdipCreateMatrix (matrix=0x5dabe0) returned 0x0 [0219.779] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d10) returned 0x0 [0219.779] GdipIsMatrixIdentity (matrix=0x1c326d10, result=0x5dac40) returned 0x0 [0219.779] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ee50 [0219.779] GdipGetMatrixElements (matrix=0x1c326d10, matrixOut=0x89ee50) returned 0x0 [0219.779] LocalFree (hMem=0x89ee50) returned 0x0 [0219.779] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec50 [0219.779] GdipGetMatrixElements (matrix=0x1c326d10, matrixOut=0x89ec50) returned 0x0 [0219.779] LocalFree (hMem=0x89ec50) returned 0x0 [0219.779] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.779] GdipDeleteMatrix (matrix=0x1c326d10) returned 0x0 [0219.779] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac90) returned 0x0 [0219.779] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dac50) returned 0x0 [0219.779] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dac50) returned 0x0 [0219.779] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.779] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.779] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dacc0) returned 0x0 [0219.779] GetCurrentObject (hdc=0x10713, type=0x1) returned 0x1b00017 [0219.779] GetCurrentObject (hdc=0x10713, type=0x2) returned 0x1900010 [0219.779] GetCurrentObject (hdc=0x10713, type=0x7) returned 0x11050637 [0219.779] GetCurrentObject (hdc=0x10713, type=0x6) returned 0x18a0048 [0219.779] SaveDC (hdc=0x10713) returned 1 [0219.779] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe3040572 [0219.779] GetClipRgn (hdc=0x10713, hrgn=0xffffffffe3040572) returned 0 [0219.779] SelectClipRgn (hdc=0x10713, hrgn=0xffffffff8604074d) returned 2 [0219.779] DeleteObject (ho=0xffffffffe3040572) returned 1 [0219.779] DeleteObject (ho=0xffffffff8604074d) returned 1 [0219.779] OffsetViewportOrgEx (in: hdc=0x10713, x=0, y=0, lppt=0x27dcb98 | out: lppt=0x27dcb98) returned 1 [0219.780] IsAppThemed () returned 0x1 [0219.780] GetThemeAppProperties () returned 0x3 [0219.780] GetThemeAppProperties () returned 0x3 [0219.780] GetThemeBackgroundContentRect () returned 0x0 [0219.780] RestoreDC (hdc=0x10713, nSavedDC=-1) returned 1 [0219.780] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.780] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x10713) returned 0x0 [0219.780] IsAppThemed () returned 0x1 [0219.780] GetThemeAppProperties () returned 0x3 [0219.780] GetThemeAppProperties () returned 0x3 [0219.780] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dadb0) returned 0x0 [0219.780] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dad90) returned 0x0 [0219.780] GetCurrentObject (hdc=0x10713, type=0x1) returned 0x1b00017 [0219.780] GetCurrentObject (hdc=0x10713, type=0x2) returned 0x1900010 [0219.780] GetCurrentObject (hdc=0x10713, type=0x7) returned 0x11050637 [0219.780] GetCurrentObject (hdc=0x10713, type=0x6) returned 0x18a0048 [0219.780] SaveDC (hdc=0x10713) returned 1 [0219.780] GetTextAlign (hdc=0x10713) returned 0x0 [0219.780] GetTextColor (hdc=0x10713) returned 0x0 [0219.780] GetCurrentObject (hdc=0x10713, type=0x6) returned 0x18a0048 [0219.780] GetObjectW (in: h=0x18a0048, c=92, pv=0x5da800 | out: pv=0x5da800) returned 92 [0219.780] SelectObject (hdc=0x10713, h=0x290a0573) returned 0x18a0048 [0219.780] GetBkMode (hdc=0x10713) returned 2 [0219.780] SetBkMode (hdc=0x10713, mode=1) returned 2 [0219.780] DrawTextExW (in: hdc=0x10713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da890, format=0x2415, lpdtp=0x27dd0f0 | out: lpchText="Submit Decryption Key", lprc=0x5da890) returned 13 [0219.781] DrawTextExW (in: hdc=0x10713, lpchText="Submit Decryption Key", cchText=21, lprc=0x5da940, format=0x2015, lpdtp=0x27dd0f0 | out: lpchText="Submit Decryption Key", lprc=0x5da940) returned 13 [0219.781] RestoreDC (hdc=0x10713, nSavedDC=-1) returned 1 [0219.781] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.781] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x10713) returned 0x0 [0219.781] GetFocus () returned 0x2023e [0219.781] IsAppThemed () returned 0x1 [0219.781] GetThemeAppProperties () returned 0x3 [0219.781] GetThemeAppProperties () returned 0x3 [0219.781] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0219.781] BitBlt (hdc=0x1010749, x=0, y=0, cx=262, cy=36, hdcSrc=0x10713, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.781] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.781] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x10713) returned 0x0 [0219.781] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.782] SelectObject (hdc=0x10713, h=0x185000f) returned 0x11050637 [0219.782] DeleteDC (hdc=0x10713) returned 1 [0219.782] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.782] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.782] EndPaint (hWnd=0x2021e, lpPaint=0x5db5f8) returned 1 [0219.782] BeginPaint (in: hWnd=0x5016e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0xa0100d0 [0219.782] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.782] CreateCompatibleDC (hdc=0xa0100d0) returned 0x2010713 [0219.782] SelectObject (hdc=0x2010713, h=0x11050637) returned 0x185000f [0219.782] GdipCreateFromHDC (hdc=0x2010713, graphics=0x5db3f0) returned 0x0 [0219.782] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.782] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=211, height=13, combineMode=0x0) returned 0x0 [0219.782] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0219.782] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326ed0) returned 0x0 [0219.782] GdipIsMatrixIdentity (matrix=0x1c326ed0, result=0x5db580) returned 0x0 [0219.782] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f250 [0219.782] GdipGetMatrixElements (matrix=0x1c326ed0, matrixOut=0x89f250) returned 0x0 [0219.782] LocalFree (hMem=0x89f250) returned 0x0 [0219.782] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.783] GdipDeleteMatrix (matrix=0x1c326ed0) returned 0x0 [0219.783] GdipCreateRegion (region=0x5db520) returned 0x0 [0219.783] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.783] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0219.783] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0219.783] GetWindowTextLengthW (hWnd=0x5016e) returned 34 [0219.783] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0219.783] GetSystemMetrics (nIndex=42) returned 0 [0219.783] CoTaskMemAlloc (cb=0x4a) returned 0x876ae0 [0219.783] GetWindowTextW (in: hWnd=0x5016e, lpString=0x876ae0, nMaxCount=35 | out: lpString="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq") returned 34 [0219.783] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0xd, wParam=0x23, lParam=0x876ae0) returned 0x22 [0219.783] CoTaskMemFree (pv=0x876ae0) [0219.783] GetClientRect (in: hWnd=0x5016e, lpRect=0x5db590 | out: lpRect=0x5db590) returned 1 [0219.783] GdipCreateRegion (region=0x5db010) returned 0x0 [0219.783] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0219.783] GdipCreateMatrix (matrix=0x5db010) returned 0x0 [0219.783] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d10) returned 0x0 [0219.783] GdipIsMatrixIdentity (matrix=0x1c326d10, result=0x5db070) returned 0x0 [0219.783] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f350 [0219.783] GdipGetMatrixElements (matrix=0x1c326d10, matrixOut=0x89f350) returned 0x0 [0219.783] LocalFree (hMem=0x89f350) returned 0x0 [0219.783] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0219.783] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f690 [0219.783] GdipGetMatrixElements (matrix=0x1c326d10, matrixOut=0x89f690) returned 0x0 [0219.783] LocalFree (hMem=0x89f690) returned 0x0 [0219.783] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.783] GdipDeleteMatrix (matrix=0x1c326d10) returned 0x0 [0219.783] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5db0c0) returned 0x0 [0219.783] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5db080) returned 0x0 [0219.783] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x5db080) returned 0x0 [0219.783] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.784] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0219.784] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db0f0) returned 0x0 [0219.784] GetCurrentObject (hdc=0x2010713, type=0x1) returned 0x1b00017 [0219.784] GetCurrentObject (hdc=0x2010713, type=0x2) returned 0x1900010 [0219.784] GetCurrentObject (hdc=0x2010713, type=0x7) returned 0x11050637 [0219.784] GetCurrentObject (hdc=0x2010713, type=0x6) returned 0x18a0048 [0219.784] SaveDC (hdc=0x2010713) returned 1 [0219.784] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8704074d [0219.784] GetClipRgn (hdc=0x2010713, hrgn=0xffffffff8704074d) returned 0 [0219.784] SelectClipRgn (hdc=0x2010713, hrgn=0xffffffffe6040572) returned 2 [0219.784] DeleteObject (ho=0xffffffff8704074d) returned 1 [0219.784] DeleteObject (ho=0xffffffffe6040572) returned 1 [0219.784] OffsetViewportOrgEx (in: hdc=0x2010713, x=0, y=0, lppt=0x27dd810 | out: lppt=0x27dd810) returned 1 [0219.784] GetNearestColor (hdc=0x2010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.784] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff8f100686 [0219.784] FillRect (hDC=0x2010713, lprc=0x5db0c0, hbr=0xffffffff8f100686) returned 1 [0219.784] DeleteObject (ho=0xffffffff8f100686) returned 1 [0219.784] RestoreDC (hdc=0x2010713, nSavedDC=-1) returned 1 [0219.784] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.784] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2010713) returned 0x0 [0219.784] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd570dbd) returned 0x0 [0219.784] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.784] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.784] GetWindowTextLengthW (hWnd=0x5016e) returned 34 [0219.784] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x22 [0219.784] GetSystemMetrics (nIndex=42) returned 0 [0219.785] CoTaskMemAlloc (cb=0x4a) returned 0x876900 [0219.785] GetWindowTextW (in: hWnd=0x5016e, lpString=0x876900, nMaxCount=35 | out: lpString="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq") returned 34 [0219.785] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x5016e, Msg=0xd, wParam=0x23, lParam=0x876900) returned 0x22 [0219.785] CoTaskMemFree (pv=0x876900) [0219.785] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db150) returned 0x0 [0219.785] GetCurrentObject (hdc=0x2010713, type=0x1) returned 0x1b00017 [0219.785] GetCurrentObject (hdc=0x2010713, type=0x2) returned 0x1900010 [0219.785] GetCurrentObject (hdc=0x2010713, type=0x7) returned 0x11050637 [0219.785] GetCurrentObject (hdc=0x2010713, type=0x6) returned 0x18a0048 [0219.785] SaveDC (hdc=0x2010713) returned 1 [0219.785] GetNearestColor (hdc=0x2010713, color=0x0) returned 0x0 [0219.785] RestoreDC (hdc=0x2010713, nSavedDC=-1) returned 1 [0219.785] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.785] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2010713) returned 0x0 [0219.785] AdjustWindowRectEx (in: lpRect=0x5db010, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5db010) returned 1 [0219.785] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5db030) returned 0x0 [0219.785] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db010) returned 0x0 [0219.785] GetCurrentObject (hdc=0x2010713, type=0x1) returned 0x1b00017 [0219.785] GetCurrentObject (hdc=0x2010713, type=0x2) returned 0x1900010 [0219.786] GetCurrentObject (hdc=0x2010713, type=0x7) returned 0x11050637 [0219.786] GetCurrentObject (hdc=0x2010713, type=0x6) returned 0x18a0048 [0219.786] SaveDC (hdc=0x2010713) returned 1 [0219.788] GetTextAlign (hdc=0x2010713) returned 0x0 [0219.788] GetTextColor (hdc=0x2010713) returned 0x0 [0219.788] GetCurrentObject (hdc=0x2010713, type=0x6) returned 0x18a0048 [0219.788] GetObjectW (in: h=0x18a0048, c=92, pv=0x5daa80 | out: pv=0x5daa80) returned 92 [0219.788] SelectObject (hdc=0x2010713, h=0x290a0573) returned 0x18a0048 [0219.789] GetBkMode (hdc=0x2010713) returned 2 [0219.789] SetBkMode (hdc=0x2010713, mode=1) returned 2 [0219.789] DrawTextExW (in: hdc=0x2010713, lpchText="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq", cchText=34, lprc=0x5dabc0, format=0x100000, lpdtp=0x27ddf10 | out: lpchText="1FeutvrVeiF8Qdnnx9Rr3CyBfHBCFeKWPq", lprc=0x5dabc0) returned 13 [0219.789] RestoreDC (hdc=0x2010713, nSavedDC=-1) returned 1 [0219.789] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.789] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2010713) returned 0x0 [0219.789] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0219.789] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=211, cy=13, hdcSrc=0x2010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.789] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.789] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x2010713) returned 0x0 [0219.789] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.789] SelectObject (hdc=0x2010713, h=0x185000f) returned 0x11050637 [0219.789] DeleteDC (hdc=0x2010713) returned 1 [0219.789] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.789] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.790] EndPaint (hWnd=0x5016e, lpPaint=0x5db5f8) returned 1 [0219.790] BeginPaint (in: hWnd=0xb0030, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0x10105e0 [0219.790] SelectPalette (hdc=0x10105e0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.790] CreateCompatibleDC (hdc=0x10105e0) returned 0x4010713 [0219.790] SelectObject (hdc=0x4010713, h=0x11050637) returned 0x185000f [0219.790] GdipCreateFromHDC (hdc=0x4010713, graphics=0x5db3f0) returned 0x0 [0219.790] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.790] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=83, height=13, combineMode=0x0) returned 0x0 [0219.790] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0219.790] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d50) returned 0x0 [0219.790] GdipIsMatrixIdentity (matrix=0x1c326d50, result=0x5db580) returned 0x0 [0219.790] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e9d0 [0219.790] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89e9d0) returned 0x0 [0219.791] LocalFree (hMem=0x89e9d0) returned 0x0 [0219.791] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.791] GdipDeleteMatrix (matrix=0x1c326d50) returned 0x0 [0219.791] GdipCreateRegion (region=0x5db520) returned 0x0 [0219.791] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.791] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0219.791] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0219.791] GetWindowTextLengthW (hWnd=0xb0030) returned 16 [0219.791] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0219.791] GetSystemMetrics (nIndex=42) returned 0 [0219.791] CoTaskMemAlloc (cb=0x26) returned 0x89d310 [0219.791] GetWindowTextW (in: hWnd=0xb0030, lpString=0x89d310, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0219.791] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0xd, wParam=0x11, lParam=0x89d310) returned 0x10 [0219.791] CoTaskMemFree (pv=0x89d310) [0219.791] GetClientRect (in: hWnd=0xb0030, lpRect=0x5db590 | out: lpRect=0x5db590) returned 1 [0219.791] GdipCreateRegion (region=0x5db010) returned 0x0 [0219.791] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0219.791] GdipCreateMatrix (matrix=0x5db010) returned 0x0 [0219.791] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d90) returned 0x0 [0219.791] GdipIsMatrixIdentity (matrix=0x1c326d90, result=0x5db070) returned 0x0 [0219.791] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e990 [0219.791] GdipGetMatrixElements (matrix=0x1c326d90, matrixOut=0x89e990) returned 0x0 [0219.791] LocalFree (hMem=0x89e990) returned 0x0 [0219.792] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0219.792] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea90 [0219.792] GdipGetMatrixElements (matrix=0x1c326d90, matrixOut=0x89ea90) returned 0x0 [0219.792] LocalFree (hMem=0x89ea90) returned 0x0 [0219.792] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.792] GdipDeleteMatrix (matrix=0x1c326d90) returned 0x0 [0219.792] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5db0c0) returned 0x0 [0219.792] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5db080) returned 0x0 [0219.792] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x5db080) returned 0x0 [0219.792] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.792] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0219.792] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db0f0) returned 0x0 [0219.792] GetCurrentObject (hdc=0x4010713, type=0x1) returned 0x1b00017 [0219.792] GetCurrentObject (hdc=0x4010713, type=0x2) returned 0x1900010 [0219.792] GetCurrentObject (hdc=0x4010713, type=0x7) returned 0x11050637 [0219.792] GetCurrentObject (hdc=0x4010713, type=0x6) returned 0x18a0048 [0219.792] SaveDC (hdc=0x4010713) returned 1 [0219.792] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe7040572 [0219.792] GetClipRgn (hdc=0x4010713, hrgn=0xffffffffe7040572) returned 0 [0219.793] SelectClipRgn (hdc=0x4010713, hrgn=0xffffffff8904074d) returned 2 [0219.793] DeleteObject (ho=0xffffffffe7040572) returned 1 [0219.793] DeleteObject (ho=0xffffffff8904074d) returned 1 [0219.793] OffsetViewportOrgEx (in: hdc=0x4010713, x=0, y=0, lppt=0x27de510 | out: lppt=0x27de510) returned 1 [0219.793] GetNearestColor (hdc=0x4010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.793] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff90100686 [0219.793] FillRect (hDC=0x4010713, lprc=0x5db0c0, hbr=0xffffffff90100686) returned 1 [0219.793] DeleteObject (ho=0xffffffff90100686) returned 1 [0219.793] RestoreDC (hdc=0x4010713, nSavedDC=-1) returned 1 [0219.793] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.793] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4010713) returned 0x0 [0219.793] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd550dbd) returned 0x0 [0219.793] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.793] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.793] GetWindowTextLengthW (hWnd=0xb0030) returned 16 [0219.793] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0219.793] GetSystemMetrics (nIndex=42) returned 0 [0219.793] CoTaskMemAlloc (cb=0x26) returned 0x89d130 [0219.793] GetWindowTextW (in: hWnd=0xb0030, lpString=0x89d130, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0219.793] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0xb0030, Msg=0xd, wParam=0x11, lParam=0x89d130) returned 0x10 [0219.793] CoTaskMemFree (pv=0x89d130) [0219.794] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db150) returned 0x0 [0219.794] GetCurrentObject (hdc=0x4010713, type=0x1) returned 0x1b00017 [0219.794] GetCurrentObject (hdc=0x4010713, type=0x2) returned 0x1900010 [0219.794] GetCurrentObject (hdc=0x4010713, type=0x7) returned 0x11050637 [0219.794] GetCurrentObject (hdc=0x4010713, type=0x6) returned 0x18a0048 [0219.794] SaveDC (hdc=0x4010713) returned 1 [0219.794] GetNearestColor (hdc=0x4010713, color=0x0) returned 0x0 [0219.794] RestoreDC (hdc=0x4010713, nSavedDC=-1) returned 1 [0219.794] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.794] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4010713) returned 0x0 [0219.794] AdjustWindowRectEx (in: lpRect=0x5db010, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5db010) returned 1 [0219.794] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5db030) returned 0x0 [0219.794] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db010) returned 0x0 [0219.794] GetCurrentObject (hdc=0x4010713, type=0x1) returned 0x1b00017 [0219.794] GetCurrentObject (hdc=0x4010713, type=0x2) returned 0x1900010 [0219.794] GetCurrentObject (hdc=0x4010713, type=0x7) returned 0x11050637 [0219.794] GetCurrentObject (hdc=0x4010713, type=0x6) returned 0x18a0048 [0219.795] SaveDC (hdc=0x4010713) returned 1 [0219.795] GetTextAlign (hdc=0x4010713) returned 0x0 [0219.795] GetTextColor (hdc=0x4010713) returned 0x0 [0219.795] GetCurrentObject (hdc=0x4010713, type=0x6) returned 0x18a0048 [0219.795] GetObjectW (in: h=0x18a0048, c=92, pv=0x5daa80 | out: pv=0x5daa80) returned 92 [0219.795] SelectObject (hdc=0x4010713, h=0x290a0573) returned 0x18a0048 [0219.795] GetBkMode (hdc=0x4010713) returned 2 [0219.795] SetBkMode (hdc=0x4010713, mode=1) returned 2 [0219.795] DrawTextExW (in: hdc=0x4010713, lpchText="Bitcoin Address:", cchText=16, lprc=0x5dabc0, format=0x100000, lpdtp=0x27debf0 | out: lpchText="Bitcoin Address:", lprc=0x5dabc0) returned 13 [0219.795] RestoreDC (hdc=0x4010713, nSavedDC=-1) returned 1 [0219.795] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.795] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4010713) returned 0x0 [0219.795] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0219.795] BitBlt (hdc=0x10105e0, x=0, y=0, cx=83, cy=13, hdcSrc=0x4010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.796] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.796] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x4010713) returned 0x0 [0219.796] SelectPalette (hdc=0x10105e0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.796] SelectObject (hdc=0x4010713, h=0x185000f) returned 0x11050637 [0219.796] DeleteDC (hdc=0x4010713) returned 1 [0219.796] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.796] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.796] EndPaint (hWnd=0xb0030, lpPaint=0x5db5f8) returned 1 [0219.796] BeginPaint (in: hWnd=0x7002e, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0x1010749 [0219.796] SelectPalette (hdc=0x1010749, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.796] CreateCompatibleDC (hdc=0x1010749) returned 0x6010713 [0219.796] SelectObject (hdc=0x6010713, h=0x11050637) returned 0x185000f [0219.796] GdipCreateFromHDC (hdc=0x6010713, graphics=0x5db3f0) returned 0x0 [0219.796] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.797] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=161, height=13, combineMode=0x0) returned 0x0 [0219.797] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0219.797] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327190) returned 0x0 [0219.797] GdipIsMatrixIdentity (matrix=0x1c327190, result=0x5db580) returned 0x0 [0219.797] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e7d0 [0219.797] GdipGetMatrixElements (matrix=0x1c327190, matrixOut=0x89e7d0) returned 0x0 [0219.797] LocalFree (hMem=0x89e7d0) returned 0x0 [0219.797] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.797] GdipDeleteMatrix (matrix=0x1c327190) returned 0x0 [0219.797] GdipCreateRegion (region=0x5db520) returned 0x0 [0219.797] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.797] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0219.797] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0219.797] GetWindowTextLengthW (hWnd=0x7002e) returned 24 [0219.797] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0219.797] GetSystemMetrics (nIndex=42) returned 0 [0219.797] CoTaskMemAlloc (cb=0x36) returned 0x89ec10 [0219.797] GetWindowTextW (in: hWnd=0x7002e, lpString=0x89ec10, nMaxCount=25 | out: lpString="D2CA4DEF1F8BFBFF000506E3") returned 24 [0219.797] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xd, wParam=0x19, lParam=0x89ec10) returned 0x18 [0219.797] CoTaskMemFree (pv=0x89ec10) [0219.797] GetClientRect (in: hWnd=0x7002e, lpRect=0x5db590 | out: lpRect=0x5db590) returned 1 [0219.797] GdipCreateRegion (region=0x5db010) returned 0x0 [0219.797] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0219.798] GdipCreateMatrix (matrix=0x5db010) returned 0x0 [0219.798] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326cd0) returned 0x0 [0219.798] GdipIsMatrixIdentity (matrix=0x1c326cd0, result=0x5db070) returned 0x0 [0219.798] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f090 [0219.798] GdipGetMatrixElements (matrix=0x1c326cd0, matrixOut=0x89f090) returned 0x0 [0219.798] LocalFree (hMem=0x89f090) returned 0x0 [0219.798] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0219.798] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f050 [0219.798] GdipGetMatrixElements (matrix=0x1c326cd0, matrixOut=0x89f050) returned 0x0 [0219.798] LocalFree (hMem=0x89f050) returned 0x0 [0219.798] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.798] GdipDeleteMatrix (matrix=0x1c326cd0) returned 0x0 [0219.798] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5db0c0) returned 0x0 [0219.798] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5db080) returned 0x0 [0219.798] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x5db080) returned 0x0 [0219.798] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.798] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0219.798] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db0f0) returned 0x0 [0219.798] GetCurrentObject (hdc=0x6010713, type=0x1) returned 0x1b00017 [0219.798] GetCurrentObject (hdc=0x6010713, type=0x2) returned 0x1900010 [0219.798] GetCurrentObject (hdc=0x6010713, type=0x7) returned 0x11050637 [0219.798] GetCurrentObject (hdc=0x6010713, type=0x6) returned 0x18a0048 [0219.799] SaveDC (hdc=0x6010713) returned 1 [0219.799] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8a04074d [0219.799] GetClipRgn (hdc=0x6010713, hrgn=0xffffffff8a04074d) returned 0 [0219.799] SelectClipRgn (hdc=0x6010713, hrgn=0xffffffffe9040572) returned 2 [0219.799] DeleteObject (ho=0xffffffff8a04074d) returned 1 [0219.799] DeleteObject (ho=0xffffffffe9040572) returned 1 [0219.799] OffsetViewportOrgEx (in: hdc=0x6010713, x=0, y=0, lppt=0x27df200 | out: lppt=0x27df200) returned 1 [0219.799] GetNearestColor (hdc=0x6010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.799] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff91100686 [0219.799] FillRect (hDC=0x6010713, lprc=0x5db0c0, hbr=0xffffffff91100686) returned 1 [0219.799] DeleteObject (ho=0xffffffff91100686) returned 1 [0219.799] RestoreDC (hdc=0x6010713, nSavedDC=-1) returned 1 [0219.799] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.800] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x6010713) returned 0x0 [0219.800] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd530dbd) returned 0x0 [0219.800] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.800] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.800] GetWindowTextLengthW (hWnd=0x7002e) returned 24 [0219.800] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0219.800] GetSystemMetrics (nIndex=42) returned 0 [0219.800] CoTaskMemAlloc (cb=0x36) returned 0x89ed50 [0219.800] GetWindowTextW (in: hWnd=0x7002e, lpString=0x89ed50, nMaxCount=25 | out: lpString="D2CA4DEF1F8BFBFF000506E3") returned 24 [0219.800] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x7002e, Msg=0xd, wParam=0x19, lParam=0x89ed50) returned 0x18 [0219.800] CoTaskMemFree (pv=0x89ed50) [0219.800] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db150) returned 0x0 [0219.800] GetCurrentObject (hdc=0x6010713, type=0x1) returned 0x1b00017 [0219.800] GetCurrentObject (hdc=0x6010713, type=0x2) returned 0x1900010 [0219.800] GetCurrentObject (hdc=0x6010713, type=0x7) returned 0x11050637 [0219.801] GetCurrentObject (hdc=0x6010713, type=0x6) returned 0x18a0048 [0219.801] SaveDC (hdc=0x6010713) returned 1 [0219.801] GetNearestColor (hdc=0x6010713, color=0x0) returned 0x0 [0219.801] RestoreDC (hdc=0x6010713, nSavedDC=-1) returned 1 [0219.801] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.801] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x6010713) returned 0x0 [0219.801] AdjustWindowRectEx (in: lpRect=0x5db010, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5db010) returned 1 [0219.804] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5db030) returned 0x0 [0219.804] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db010) returned 0x0 [0219.804] GetCurrentObject (hdc=0x6010713, type=0x1) returned 0x1b00017 [0219.804] GetCurrentObject (hdc=0x6010713, type=0x2) returned 0x1900010 [0219.805] GetCurrentObject (hdc=0x6010713, type=0x7) returned 0x11050637 [0219.805] GetCurrentObject (hdc=0x6010713, type=0x6) returned 0x18a0048 [0219.805] SaveDC (hdc=0x6010713) returned 1 [0219.805] GetTextAlign (hdc=0x6010713) returned 0x0 [0219.805] GetTextColor (hdc=0x6010713) returned 0x0 [0219.805] GetCurrentObject (hdc=0x6010713, type=0x6) returned 0x18a0048 [0219.805] GetObjectW (in: h=0x18a0048, c=92, pv=0x5daa80 | out: pv=0x5daa80) returned 92 [0219.805] SelectObject (hdc=0x6010713, h=0x290a0573) returned 0x18a0048 [0219.805] GetBkMode (hdc=0x6010713) returned 2 [0219.805] SetBkMode (hdc=0x6010713, mode=1) returned 2 [0219.806] DrawTextExW (in: hdc=0x6010713, lpchText="D2CA4DEF1F8BFBFF000506E3", cchText=24, lprc=0x5dabc0, format=0x100000, lpdtp=0x27df8f0 | out: lpchText="D2CA4DEF1F8BFBFF000506E3", lprc=0x5dabc0) returned 13 [0219.806] RestoreDC (hdc=0x6010713, nSavedDC=-1) returned 1 [0219.806] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.806] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x6010713) returned 0x0 [0219.806] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0219.806] BitBlt (hdc=0x1010749, x=0, y=0, cx=161, cy=13, hdcSrc=0x6010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.806] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.806] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x6010713) returned 0x0 [0219.807] SelectPalette (hdc=0x1010749, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.807] SelectObject (hdc=0x6010713, h=0x185000f) returned 0x11050637 [0219.807] DeleteDC (hdc=0x6010713) returned 1 [0219.807] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.807] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.807] EndPaint (hWnd=0x7002e, lpPaint=0x5db5f8) returned 1 [0219.807] BeginPaint (in: hWnd=0x40148, lpPaint=0x5db5e8 | out: lpPaint=0x5db5e8) returned 0xa0100d0 [0219.807] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0219.808] CreateCompatibleDC (hdc=0xa0100d0) returned 0x8010713 [0219.808] SelectObject (hdc=0x8010713, h=0x11050637) returned 0x185000f [0219.808] GdipCreateFromHDC (hdc=0x8010713, graphics=0x5db3f0) returned 0x0 [0219.808] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0219.808] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=65, height=13, combineMode=0x0) returned 0x0 [0219.808] GdipCreateMatrix (matrix=0x5db520) returned 0x0 [0219.808] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3270d0) returned 0x0 [0219.808] GdipIsMatrixIdentity (matrix=0x1c3270d0, result=0x5db580) returned 0x0 [0219.808] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ef10 [0219.808] GdipGetMatrixElements (matrix=0x1c3270d0, matrixOut=0x89ef10) returned 0x0 [0219.808] LocalFree (hMem=0x89ef10) returned 0x0 [0219.808] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.808] GdipDeleteMatrix (matrix=0x1c3270d0) returned 0x0 [0219.808] GdipCreateRegion (region=0x5db520) returned 0x0 [0219.808] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0219.809] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5db550) returned 0x0 [0219.809] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5db620) returned 0x0 [0219.809] GetWindowTextLengthW (hWnd=0x40148) returned 12 [0219.809] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0219.809] GetSystemMetrics (nIndex=42) returned 0 [0219.809] CoTaskMemAlloc (cb=0x1e) returned 0x89d040 [0219.809] GetWindowTextW (in: hWnd=0x40148, lpString=0x89d040, nMaxCount=13 | out: lpString="Personal ID:") returned 12 [0219.809] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0xd, wParam=0xd, lParam=0x89d040) returned 0xc [0219.809] CoTaskMemFree (pv=0x89d040) [0219.809] GetClientRect (in: hWnd=0x40148, lpRect=0x5db590 | out: lpRect=0x5db590) returned 1 [0219.809] GdipCreateRegion (region=0x5db010) returned 0x0 [0219.809] GdipGetClip (graphics=0x1c3267f0, region=0x1c3217f0) returned 0x0 [0219.809] GdipCreateMatrix (matrix=0x5db010) returned 0x0 [0219.809] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e50) returned 0x0 [0219.809] GdipIsMatrixIdentity (matrix=0x1c326e50, result=0x5db070) returned 0x0 [0219.809] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb10 [0219.809] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89eb10) returned 0x0 [0219.809] LocalFree (hMem=0x89eb10) returned 0x0 [0219.809] GdipCombineRegionRegion (region=0x1c3217f0, region2=0x1c321730, combineMode=0x1) returned 0x0 [0219.809] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f310 [0219.809] GdipGetMatrixElements (matrix=0x1c326e50, matrixOut=0x89f310) returned 0x0 [0219.810] LocalFree (hMem=0x89f310) returned 0x0 [0219.810] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.810] GdipDeleteMatrix (matrix=0x1c326e50) returned 0x0 [0219.810] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5db0c0) returned 0x0 [0219.810] GdipIsInfiniteRegion (region=0x1c3217f0, graphics=0x1c3267f0, result=0x5db080) returned 0x0 [0219.810] GdipGetRegionHRgn (region=0x1c3217f0, graphics=0x1c3267f0, hRgn=0x5db080) returned 0x0 [0219.810] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.810] GdipDeleteRegion (region=0x1c3217f0) returned 0x0 [0219.810] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db0f0) returned 0x0 [0219.810] GetCurrentObject (hdc=0x8010713, type=0x1) returned 0x1b00017 [0219.810] GetCurrentObject (hdc=0x8010713, type=0x2) returned 0x1900010 [0219.810] GetCurrentObject (hdc=0x8010713, type=0x7) returned 0x11050637 [0219.810] GetCurrentObject (hdc=0x8010713, type=0x6) returned 0x18a0048 [0219.810] SaveDC (hdc=0x8010713) returned 1 [0219.810] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffea040572 [0219.810] GetClipRgn (hdc=0x8010713, hrgn=0xffffffffea040572) returned 0 [0219.810] SelectClipRgn (hdc=0x8010713, hrgn=0xffffffff8c04074d) returned 2 [0219.810] DeleteObject (ho=0xffffffffea040572) returned 1 [0219.810] DeleteObject (ho=0xffffffff8c04074d) returned 1 [0219.810] OffsetViewportOrgEx (in: hdc=0x8010713, x=0, y=0, lppt=0x27dfee8 | out: lppt=0x27dfee8) returned 1 [0219.810] GetNearestColor (hdc=0x8010713, color=0xf0f0f0) returned 0xf0f0f0 [0219.811] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff92100686 [0219.811] FillRect (hDC=0x8010713, lprc=0x5db0c0, hbr=0xffffffff92100686) returned 1 [0219.811] DeleteObject (ho=0xffffffff92100686) returned 1 [0219.811] RestoreDC (hdc=0x8010713, nSavedDC=-1) returned 1 [0219.811] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.811] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x8010713) returned 0x0 [0219.811] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd510dbd) returned 0x0 [0219.811] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.811] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0219.811] GetWindowTextLengthW (hWnd=0x40148) returned 12 [0219.811] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0219.811] GetSystemMetrics (nIndex=42) returned 0 [0219.811] CoTaskMemAlloc (cb=0x1e) returned 0x89d4f0 [0219.811] GetWindowTextW (in: hWnd=0x40148, lpString=0x89d4f0, nMaxCount=13 | out: lpString="Personal ID:") returned 12 [0219.811] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x40148, Msg=0xd, wParam=0xd, lParam=0x89d4f0) returned 0xc [0219.811] CoTaskMemFree (pv=0x89d4f0) [0219.811] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db150) returned 0x0 [0219.811] GetCurrentObject (hdc=0x8010713, type=0x1) returned 0x1b00017 [0219.811] GetCurrentObject (hdc=0x8010713, type=0x2) returned 0x1900010 [0219.811] GetCurrentObject (hdc=0x8010713, type=0x7) returned 0x11050637 [0219.812] GetCurrentObject (hdc=0x8010713, type=0x6) returned 0x18a0048 [0219.812] SaveDC (hdc=0x8010713) returned 1 [0219.812] GetNearestColor (hdc=0x8010713, color=0x0) returned 0x0 [0219.812] RestoreDC (hdc=0x8010713, nSavedDC=-1) returned 1 [0219.812] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.812] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x8010713) returned 0x0 [0219.812] AdjustWindowRectEx (in: lpRect=0x5db010, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x5db010) returned 1 [0219.812] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5db030) returned 0x0 [0219.812] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db010) returned 0x0 [0219.812] GetCurrentObject (hdc=0x8010713, type=0x1) returned 0x1b00017 [0219.812] GetCurrentObject (hdc=0x8010713, type=0x2) returned 0x1900010 [0219.812] GetCurrentObject (hdc=0x8010713, type=0x7) returned 0x11050637 [0219.812] GetCurrentObject (hdc=0x8010713, type=0x6) returned 0x18a0048 [0219.812] SaveDC (hdc=0x8010713) returned 1 [0219.812] GetTextAlign (hdc=0x8010713) returned 0x0 [0219.812] GetTextColor (hdc=0x8010713) returned 0x0 [0219.812] GetCurrentObject (hdc=0x8010713, type=0x6) returned 0x18a0048 [0219.812] GetObjectW (in: h=0x18a0048, c=92, pv=0x5daa80 | out: pv=0x5daa80) returned 92 [0219.813] SelectObject (hdc=0x8010713, h=0x290a0573) returned 0x18a0048 [0219.813] GetBkMode (hdc=0x8010713) returned 2 [0219.813] SetBkMode (hdc=0x8010713, mode=1) returned 2 [0219.813] DrawTextExW (in: hdc=0x8010713, lpchText="Personal ID:", cchText=12, lprc=0x5dabc0, format=0x100000, lpdtp=0x27e05c0 | out: lpchText="Personal ID:", lprc=0x5dabc0) returned 13 [0219.813] RestoreDC (hdc=0x8010713, nSavedDC=-1) returned 1 [0219.813] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.813] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x8010713) returned 0x0 [0219.813] GdipGetDC (graphics=0x1c3267f0, hdc=0x5db4f0) returned 0x0 [0219.813] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=65, cy=13, hdcSrc=0x8010713, x1=0, y1=0, rop=0xcc0020) returned 1 [0219.813] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.813] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x8010713) returned 0x0 [0219.813] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0219.813] SelectObject (hdc=0x8010713, h=0x185000f) returned 0x11050637 [0219.813] DeleteDC (hdc=0x8010713) returned 1 [0219.814] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0219.814] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0219.814] EndPaint (hWnd=0x40148, lpPaint=0x5db5f8) returned 1 [0219.814] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x0 [0219.814] SendMessageW (hWnd=0x50208, Msg=0x2111, wParam=0x4000208, lParam=0x50208) returned 0x0 [0219.814] SendMessageW (hWnd=0x50208, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0219.814] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x50208, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0219.825] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0219.827] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0219.828] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0219.829] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0219.830] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0219.831] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0219.833] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x20, wParam=0x20160, lParam=0x200fffe) returned 0x0 [0220.066] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0220.066] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0220.066] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5db960) returned 0x0 [0220.066] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x1, lParam=0x80216) returned 0x1 [0220.072] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0220.073] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0220.073] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0220.073] GetFocus () returned 0x80216 [0220.074] GetAncestor (hwnd=0x80216, gaFlags=0x1) returned 0x10010 [0220.074] GetAncestor (hwnd=0x10010, gaFlags=0x1) returned 0x0 [0220.074] SetFocus (hWnd=0x2021e) returned 0x0 [0220.076] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x1, lParam=0xc000000f) [0220.077] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0220.077] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0220.078] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0220.078] GetFocus () returned 0x20160 [0220.078] SetFocus (hWnd=0x2021e) returned 0x0 [0220.083] IsWindow (hWnd=0x20160) returned 1 [0220.083] EnableWindow (hWnd=0x20160, bEnable=1) [0220.083] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0220.090] SetActiveWindow (hWnd=0x20160) returned 0x20160 [0220.090] IsWindow (hWnd=0x2021e) returned 1 [0220.090] SetFocus (hWnd=0x2021e) [0220.091] GetFocus () returned 0x2021e [0220.091] IsChild (hWndParent=0x20160, hWnd=0x2021e) returned 1 [0220.091] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x8, wParam=0x2021e, lParam=0x0) returned 0x0 [0220.091] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0220.092] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0220.093] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0220.093] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x7, wParam=0x20160, lParam=0x0) [0220.093] GetStockObject (i=5) returned 0x1900015 [0220.094] SendMessageW (hWnd=0x20160, Msg=0x7, wParam=0x0, lParam=0x0) [0220.094] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0220.094] GetFocus () returned 0x2021e [0220.094] GetCapture () returned 0x0 [0220.095] IsWindowUnicode (hWnd=0x2021e) returned 1 [0220.095] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0220.095] TranslateMessage (lpMsg=0x5dd220) returned 0 [0220.095] DispatchMessageW (lpMsg=0x5dd220) returned 0xa0a0a0 [0220.095] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0220.095] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0220.095] CreateCompatibleDC (hdc=0xa0100d0) returned 0xd0105db [0220.095] SelectObject (hdc=0xd0105db, h=0x11050637) returned 0x185000f [0220.095] GdipCreateFromHDC (hdc=0xd0105db, graphics=0x5dc420) returned 0x0 [0220.095] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0220.095] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0220.095] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0220.095] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c3271d0) returned 0x0 [0220.095] GdipIsMatrixIdentity (matrix=0x1c3271d0, result=0x5dc5b0) returned 0x0 [0220.095] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f4d0 [0220.095] GdipGetMatrixElements (matrix=0x1c3271d0, matrixOut=0x89f4d0) returned 0x0 [0220.096] LocalFree (hMem=0x89f4d0) returned 0x0 [0220.096] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.096] GdipDeleteMatrix (matrix=0x1c3271d0) returned 0x0 [0220.096] GdipCreateRegion (region=0x5dc550) returned 0x0 [0220.096] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0220.096] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0220.096] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0220.096] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd4f0dbd) returned 0x0 [0220.096] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.096] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0220.096] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0220.097] GetCurrentObject (hdc=0xd0105db, type=0x1) returned 0x1b00017 [0220.097] GetCurrentObject (hdc=0xd0105db, type=0x2) returned 0x1900010 [0220.097] GetCurrentObject (hdc=0xd0105db, type=0x7) returned 0x11050637 [0220.097] GetCurrentObject (hdc=0xd0105db, type=0x6) returned 0x18a0048 [0220.097] SaveDC (hdc=0xd0105db) returned 1 [0220.097] GetNearestColor (hdc=0xd0105db, color=0xf0f0f0) returned 0xf0f0f0 [0220.097] GetNearestColor (hdc=0xd0105db, color=0xa0a0a0) returned 0xa0a0a0 [0220.097] GetNearestColor (hdc=0xd0105db, color=0x696969) returned 0x696969 [0220.097] GetNearestColor (hdc=0xd0105db, color=0xa0a0a0) returned 0xa0a0a0 [0220.097] GetNearestColor (hdc=0xd0105db, color=0x0) returned 0x0 [0220.097] GetNearestColor (hdc=0xd0105db, color=0xffffff) returned 0xffffff [0220.098] GetNearestColor (hdc=0xd0105db, color=0xe5e5e5) returned 0xe5e5e5 [0220.098] GetNearestColor (hdc=0xd0105db, color=0xd8d8d8) returned 0xd8d8d8 [0220.098] GetNearestColor (hdc=0xd0105db, color=0x0) returned 0x0 [0220.098] RestoreDC (hdc=0xd0105db, nSavedDC=-1) returned 1 [0220.098] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.098] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xd0105db) returned 0x0 [0220.098] IsAppThemed () returned 0x1 [0220.098] GetThemeAppProperties () returned 0x3 [0220.098] GetThemeAppProperties () returned 0x3 [0220.098] IsAppThemed () returned 0x1 [0220.098] GetThemeAppProperties () returned 0x3 [0220.098] GetThemeAppProperties () returned 0x3 [0220.098] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x2415, lpdtp=0x27e0fa8 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0220.099] IsAppThemed () returned 0x1 [0220.099] GetThemeAppProperties () returned 0x3 [0220.099] GetThemeAppProperties () returned 0x3 [0220.099] IsAppThemed () returned 0x1 [0220.099] GetThemeAppProperties () returned 0x3 [0220.099] GetThemeAppProperties () returned 0x3 [0220.099] GetFocus () returned 0x2021e [0220.099] IsAppThemed () returned 0x1 [0220.099] GetThemeAppProperties () returned 0x3 [0220.099] GetThemeAppProperties () returned 0x3 [0220.099] IsAppThemed () returned 0x1 [0220.102] GetThemeAppProperties () returned 0x3 [0220.102] GetThemeAppProperties () returned 0x3 [0220.102] IsThemePartDefined () returned 0x1 [0220.102] IsAppThemed () returned 0x1 [0220.102] GetThemeAppProperties () returned 0x3 [0220.103] GetThemeAppProperties () returned 0x3 [0220.103] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0220.103] IsAppThemed () returned 0x1 [0220.103] GetThemeAppProperties () returned 0x3 [0220.103] GetThemeAppProperties () returned 0x3 [0220.103] IsAppThemed () returned 0x1 [0220.103] GetThemeAppProperties () returned 0x3 [0220.103] GetThemeAppProperties () returned 0x3 [0220.103] IsThemePartDefined () returned 0x1 [0220.103] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0220.103] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0220.103] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0220.103] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d50) returned 0x0 [0220.103] GdipIsMatrixIdentity (matrix=0x1c326d50, result=0x5dbdc0) returned 0x0 [0220.103] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f290 [0220.103] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89f290) returned 0x0 [0220.103] LocalFree (hMem=0x89f290) returned 0x0 [0220.103] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ed10 [0220.103] GdipGetMatrixElements (matrix=0x1c326d50, matrixOut=0x89ed10) returned 0x0 [0220.103] LocalFree (hMem=0x89ed10) returned 0x0 [0220.103] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.103] GdipDeleteMatrix (matrix=0x1c326d50) returned 0x0 [0220.103] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0220.103] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0220.104] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0220.104] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.104] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0220.104] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0220.104] GetCurrentObject (hdc=0xd0105db, type=0x1) returned 0x1b00017 [0220.104] GetCurrentObject (hdc=0xd0105db, type=0x2) returned 0x1900010 [0220.104] GetCurrentObject (hdc=0xd0105db, type=0x7) returned 0x11050637 [0220.104] GetCurrentObject (hdc=0xd0105db, type=0x6) returned 0x18a0048 [0220.104] SaveDC (hdc=0xd0105db) returned 1 [0220.104] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffdb04054e [0220.104] GetClipRgn (hdc=0xd0105db, hrgn=0xffffffffdb04054e) returned 0 [0220.104] SelectClipRgn (hdc=0xd0105db, hrgn=0xffffffff9a04074d) returned 2 [0220.104] DeleteObject (ho=0xffffffffdb04054e) returned 1 [0220.104] DeleteObject (ho=0xffffffff9a04074d) returned 1 [0220.104] OffsetViewportOrgEx (in: hdc=0xd0105db, x=0, y=0, lppt=0x27e19b8 | out: lppt=0x27e19b8) returned 1 [0220.104] DrawThemeParentBackground () returned 0x0 [0220.105] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0220.105] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0220.105] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0220.105] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0220.105] GetSystemMetrics (nIndex=42) returned 0 [0220.105] CoTaskMemAlloc (cb=0x20) returned 0x89cfb0 [0220.105] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cfb0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0220.105] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cfb0) returned 0xd [0220.105] CoTaskMemFree (pv=0x89cfb0) [0220.105] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0220.105] GetCurrentObject (hdc=0xd0105db, type=0x1) returned 0x1b00017 [0220.105] GetCurrentObject (hdc=0xd0105db, type=0x2) returned 0x1900010 [0220.105] GetCurrentObject (hdc=0xd0105db, type=0x7) returned 0x11050637 [0220.105] GetCurrentObject (hdc=0xd0105db, type=0x6) returned 0x18a0048 [0220.105] SaveDC (hdc=0xd0105db) returned 2 [0220.105] GetNearestColor (hdc=0xd0105db, color=0xf0f0f0) returned 0xf0f0f0 [0220.106] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff94100686 [0220.106] FillRect (hDC=0xd0105db, lprc=0x5dafe0, hbr=0xffffffff94100686) returned 1 [0220.106] DeleteObject (ho=0xffffffff94100686) returned 1 [0220.106] RestoreDC (hdc=0xd0105db, nSavedDC=-1) returned 1 [0220.106] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0220.106] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0220.106] GetSystemMetrics (nIndex=42) returned 0 [0220.106] CoTaskMemAlloc (cb=0x20) returned 0x89d040 [0220.106] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d040, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0220.106] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d040) returned 0xd [0220.106] CoTaskMemFree (pv=0x89d040) [0220.106] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0220.106] GetCurrentObject (hdc=0xd0105db, type=0x1) returned 0x1b00017 [0220.106] GetCurrentObject (hdc=0xd0105db, type=0x2) returned 0x1900010 [0220.106] GetCurrentObject (hdc=0xd0105db, type=0x7) returned 0x11050637 [0220.106] GetCurrentObject (hdc=0xd0105db, type=0x6) returned 0x18a0048 [0220.106] SaveDC (hdc=0xd0105db) returned 2 [0220.107] GetNearestColor (hdc=0xd0105db, color=0xf0f0f0) returned 0xf0f0f0 [0220.107] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff95100686 [0220.107] FillRect (hDC=0xd0105db, lprc=0x5daee0, hbr=0xffffffff95100686) returned 1 [0220.107] DeleteObject (ho=0xffffffff95100686) returned 1 [0220.107] RestoreDC (hdc=0xd0105db, nSavedDC=-1) returned 1 [0220.108] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0220.108] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0220.108] GetSystemMetrics (nIndex=42) returned 0 [0220.108] CoTaskMemAlloc (cb=0x20) returned 0x89cec0 [0220.108] GetWindowTextW (in: hWnd=0x20160, lpString=0x89cec0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0220.108] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89cec0) returned 0xd [0220.108] CoTaskMemFree (pv=0x89cec0) [0220.108] RestoreDC (hdc=0xd0105db, nSavedDC=-1) returned 1 [0220.108] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.108] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xd0105db) returned 0x0 [0220.108] IsAppThemed () returned 0x1 [0220.108] GetThemeAppProperties () returned 0x3 [0220.108] GetThemeAppProperties () returned 0x3 [0220.108] IsAppThemed () returned 0x1 [0220.108] GetThemeAppProperties () returned 0x3 [0220.108] GetThemeAppProperties () returned 0x3 [0220.108] IsThemePartDefined () returned 0x1 [0220.109] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0220.109] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0220.109] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0220.109] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d10) returned 0x0 [0220.109] GdipIsMatrixIdentity (matrix=0x1c326d10, result=0x5dbca0) returned 0x0 [0220.109] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ea50 [0220.109] GdipGetMatrixElements (matrix=0x1c326d10, matrixOut=0x89ea50) returned 0x0 [0220.109] LocalFree (hMem=0x89ea50) returned 0x0 [0220.109] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89eb50 [0220.109] GdipGetMatrixElements (matrix=0x1c326d10, matrixOut=0x89eb50) returned 0x0 [0220.109] LocalFree (hMem=0x89eb50) returned 0x0 [0220.109] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.109] GdipDeleteMatrix (matrix=0x1c326d10) returned 0x0 [0220.109] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0220.109] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0220.109] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0220.110] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.110] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0220.110] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0220.110] GetCurrentObject (hdc=0xd0105db, type=0x1) returned 0x1b00017 [0220.110] GetCurrentObject (hdc=0xd0105db, type=0x2) returned 0x1900010 [0220.110] GetCurrentObject (hdc=0xd0105db, type=0x7) returned 0x11050637 [0220.110] GetCurrentObject (hdc=0xd0105db, type=0x6) returned 0x18a0048 [0220.110] SaveDC (hdc=0xd0105db) returned 1 [0220.110] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9b04074d [0220.110] GetClipRgn (hdc=0xd0105db, hrgn=0xffffffff9b04074d) returned 0 [0220.110] SelectClipRgn (hdc=0xd0105db, hrgn=0xffffffffdd04054e) returned 2 [0220.110] DeleteObject (ho=0xffffffff9b04074d) returned 1 [0220.110] DeleteObject (ho=0xffffffffdd04054e) returned 1 [0220.110] OffsetViewportOrgEx (in: hdc=0xd0105db, x=0, y=0, lppt=0x27e26b8 | out: lppt=0x27e26b8) returned 1 [0220.111] IsAppThemed () returned 0x1 [0220.111] GetThemeAppProperties () returned 0x3 [0220.111] GetThemeAppProperties () returned 0x3 [0220.111] DrawThemeBackground () returned 0x0 [0220.111] RestoreDC (hdc=0xd0105db, nSavedDC=-1) returned 1 [0220.111] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.111] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xd0105db) returned 0x0 [0220.111] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0220.111] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0220.111] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0220.111] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326e90) returned 0x0 [0220.111] GdipIsMatrixIdentity (matrix=0x1c326e90, result=0x5dbc70) returned 0x0 [0220.111] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ead0 [0220.111] GdipGetMatrixElements (matrix=0x1c326e90, matrixOut=0x89ead0) returned 0x0 [0220.111] LocalFree (hMem=0x89ead0) returned 0x0 [0220.111] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f0d0 [0220.111] GdipGetMatrixElements (matrix=0x1c326e90, matrixOut=0x89f0d0) returned 0x0 [0220.111] LocalFree (hMem=0x89f0d0) returned 0x0 [0220.111] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.111] GdipDeleteMatrix (matrix=0x1c326e90) returned 0x0 [0220.111] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0220.112] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0220.112] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0220.112] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.112] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0220.112] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0220.112] GetCurrentObject (hdc=0xd0105db, type=0x1) returned 0x1b00017 [0220.112] GetCurrentObject (hdc=0xd0105db, type=0x2) returned 0x1900010 [0220.112] GetCurrentObject (hdc=0xd0105db, type=0x7) returned 0x11050637 [0220.112] GetCurrentObject (hdc=0xd0105db, type=0x6) returned 0x18a0048 [0220.112] SaveDC (hdc=0xd0105db) returned 1 [0220.112] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffde04054e [0220.112] GetClipRgn (hdc=0xd0105db, hrgn=0xffffffffde04054e) returned 0 [0220.112] SelectClipRgn (hdc=0xd0105db, hrgn=0xffffffff9c04074d) returned 2 [0220.112] DeleteObject (ho=0xffffffffde04054e) returned 1 [0220.112] DeleteObject (ho=0xffffffff9c04074d) returned 1 [0220.112] OffsetViewportOrgEx (in: hdc=0xd0105db, x=0, y=0, lppt=0x27e2bb8 | out: lppt=0x27e2bb8) returned 1 [0220.112] IsAppThemed () returned 0x1 [0220.112] GetThemeAppProperties () returned 0x3 [0220.113] GetThemeAppProperties () returned 0x3 [0220.113] GetThemeBackgroundContentRect () returned 0x0 [0220.113] RestoreDC (hdc=0xd0105db, nSavedDC=-1) returned 1 [0220.113] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.113] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xd0105db) returned 0x0 [0220.113] IsAppThemed () returned 0x1 [0220.113] GetThemeAppProperties () returned 0x3 [0220.113] GetThemeAppProperties () returned 0x3 [0220.113] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0220.113] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0220.113] GetCurrentObject (hdc=0xd0105db, type=0x1) returned 0x1b00017 [0220.113] GetCurrentObject (hdc=0xd0105db, type=0x2) returned 0x1900010 [0220.113] GetCurrentObject (hdc=0xd0105db, type=0x7) returned 0x11050637 [0220.113] GetCurrentObject (hdc=0xd0105db, type=0x6) returned 0x18a0048 [0220.113] SaveDC (hdc=0xd0105db) returned 1 [0220.113] GetTextAlign (hdc=0xd0105db) returned 0x0 [0220.114] GetTextColor (hdc=0xd0105db) returned 0x0 [0220.114] GetCurrentObject (hdc=0xd0105db, type=0x6) returned 0x18a0048 [0220.114] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0220.114] SelectObject (hdc=0xd0105db, h=0x290a0573) returned 0x18a0048 [0220.114] GetBkMode (hdc=0xd0105db) returned 2 [0220.114] SetBkMode (hdc=0xd0105db, mode=1) returned 2 [0220.114] DrawTextExW (in: hdc=0xd0105db, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x2415, lpdtp=0x27e3110 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0220.114] DrawTextExW (in: hdc=0xd0105db, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x2015, lpdtp=0x27e3110 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0220.115] RestoreDC (hdc=0xd0105db, nSavedDC=-1) returned 1 [0220.115] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.115] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xd0105db) returned 0x0 [0220.115] GetFocus () returned 0x2021e [0220.115] IsAppThemed () returned 0x1 [0220.115] GetThemeAppProperties () returned 0x3 [0220.115] GetThemeAppProperties () returned 0x3 [0220.115] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0220.115] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0xd0105db, x1=0, y1=0, rop=0xcc0020) returned 1 [0220.115] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.115] GdipReleaseDC (graphics=0x1c3267f0, hdc=0xd0105db) returned 0x0 [0220.115] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0220.115] SelectObject (hdc=0xd0105db, h=0x185000f) returned 0x11050637 [0220.119] DeleteDC (hdc=0xd0105db) returned 1 [0220.119] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.119] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0220.119] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0220.119] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0220.119] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0220.119] WaitMessage () returned 1 [0220.136] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0220.136] IsWindowUnicode (hWnd=0x2021e) returned 1 [0220.136] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0220.136] GetKeyState (nVirtKey=16) returned 0 [0220.136] GetKeyState (nVirtKey=17) returned 0 [0220.136] GetKeyState (nVirtKey=18) returned -128 [0220.136] SendMessageW (hWnd=0x2021e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0220.136] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0220.136] GetKeyState (nVirtKey=16) returned 0 [0220.136] GetKeyState (nVirtKey=17) returned 0 [0220.136] GetKeyState (nVirtKey=18) returned -128 [0220.137] TranslateMessage (lpMsg=0x5dd220) returned 1 [0220.137] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0220.137] GetKeyState (nVirtKey=16) returned 0 [0220.137] GetKeyState (nVirtKey=17) returned 0 [0220.137] GetKeyState (nVirtKey=18) returned -128 [0220.137] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0220.137] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0220.137] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0220.137] WaitMessage () returned 1 [0220.151] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0220.151] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0220.156] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0220.157] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x46, wParam=0x0, lParam=0x5dd050) returned 0x0 [0220.157] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x46, wParam=0x0, lParam=0x5dd050) returned 0x0 [0220.157] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5dca80 | out: lpwndpl=0x5dca80) returned 1 [0220.157] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0220.157] GetClientRect (in: hWnd=0x20160, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0220.157] GetWindowRect (in: hWnd=0x20160, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0220.159] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0220.159] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0220.159] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0220.159] GetWindowPlacement (in: hWnd=0x901f6, lpwndpl=0x5dca80 | out: lpwndpl=0x5dca80) returned 1 [0220.160] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0220.160] GetClientRect (in: hWnd=0x901f6, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0220.160] GetWindowRect (in: hWnd=0x901f6, lpRect=0x5dc820 | out: lpRect=0x5dc820) returned 1 [0220.161] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x47, wParam=0x0, lParam=0x5dd050) returned 0x0 [0220.161] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0220.163] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0220.163] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0220.163] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0220.171] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0220.171] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0220.171] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0220.171] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0220.171] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0220.171] GetFocus () returned 0x0 [0220.171] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0220.171] GetCapture () returned 0x0 [0220.172] InvalidateRect (hWnd=0x2021e, lpRect=0x0, bErase=0) returned 1 [0220.172] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0220.172] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0220.172] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0220.172] IsWindowUnicode (hWnd=0x2021e) returned 1 [0220.172] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0220.173] TranslateMessage (lpMsg=0x5dd220) returned 0 [0220.173] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0220.173] BeginPaint (in: hWnd=0x2021e, lpPaint=0x5dc618 | out: lpPaint=0x5dc618) returned 0xa0100d0 [0220.173] SelectPalette (hdc=0xa0100d0, hPal=0x370806b1, bForceBkgd=1) returned 0x188000b [0220.173] CreateCompatibleDC (hdc=0xa0100d0) returned 0x180105db [0220.173] SelectObject (hdc=0x180105db, h=0x11050637) returned 0x185000f [0220.173] GdipCreateFromHDC (hdc=0x180105db, graphics=0x5dc420) returned 0x0 [0220.173] GdipTranslateWorldTransform (graphics=0x1c3267f0, dx=0x0, dy=0x7ffadb66ba78, order=0x0) returned 0x0 [0220.173] GdipSetClipRectI (graphics=0x1c3267f0, x=0, y=0, width=262, height=36, combineMode=0x0) returned 0x0 [0220.173] GdipCreateMatrix (matrix=0x5dc550) returned 0x0 [0220.173] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326ed0) returned 0x0 [0220.173] GdipIsMatrixIdentity (matrix=0x1c326ed0, result=0x5dc5b0) returned 0x0 [0220.173] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f450 [0220.173] GdipGetMatrixElements (matrix=0x1c326ed0, matrixOut=0x89f450) returned 0x0 [0220.173] LocalFree (hMem=0x89f450) returned 0x0 [0220.173] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.173] GdipDeleteMatrix (matrix=0x1c326ed0) returned 0x0 [0220.174] GdipCreateRegion (region=0x5dc550) returned 0x0 [0220.174] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0220.174] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dc580) returned 0x0 [0220.174] GdipSaveGraphics (graphics=0x1c3267f0, state=0x5dc650) returned 0x0 [0220.174] GdipRestoreGraphics (graphics=0x1c3267f0, state=0xfffffffffd4d0dbd) returned 0x0 [0220.174] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.174] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0220.174] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dba40) returned 0x0 [0220.174] GetCurrentObject (hdc=0x180105db, type=0x1) returned 0x1b00017 [0220.174] GetCurrentObject (hdc=0x180105db, type=0x2) returned 0x1900010 [0220.174] GetCurrentObject (hdc=0x180105db, type=0x7) returned 0x11050637 [0220.174] GetCurrentObject (hdc=0x180105db, type=0x6) returned 0x18a0048 [0220.175] SaveDC (hdc=0x180105db) returned 1 [0220.175] GetNearestColor (hdc=0x180105db, color=0xf0f0f0) returned 0xf0f0f0 [0220.175] GetNearestColor (hdc=0x180105db, color=0xa0a0a0) returned 0xa0a0a0 [0220.175] GetNearestColor (hdc=0x180105db, color=0x696969) returned 0x696969 [0220.175] GetNearestColor (hdc=0x180105db, color=0xa0a0a0) returned 0xa0a0a0 [0220.175] GetNearestColor (hdc=0x180105db, color=0x0) returned 0x0 [0220.175] GetNearestColor (hdc=0x180105db, color=0xffffff) returned 0xffffff [0220.175] GetNearestColor (hdc=0x180105db, color=0xe5e5e5) returned 0xe5e5e5 [0220.175] GetNearestColor (hdc=0x180105db, color=0xd8d8d8) returned 0xd8d8d8 [0220.176] GetNearestColor (hdc=0x180105db, color=0x0) returned 0x0 [0220.176] RestoreDC (hdc=0x180105db, nSavedDC=-1) returned 1 [0220.176] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.176] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x180105db) returned 0x0 [0220.176] IsAppThemed () returned 0x1 [0220.176] GetThemeAppProperties () returned 0x3 [0220.176] GetThemeAppProperties () returned 0x3 [0220.176] IsAppThemed () returned 0x1 [0220.176] GetThemeAppProperties () returned 0x3 [0220.176] GetThemeAppProperties () returned 0x3 [0220.176] DrawTextExW (in: hdc=0x42010685, lpchText="Submit Decryption Key", cchText=21, lprc=0x5dbc80, format=0x2415, lpdtp=0x27e3d20 | out: lpchText="Submit Decryption Key", lprc=0x5dbc80) returned 13 [0220.197] IsAppThemed () returned 0x1 [0220.198] GetThemeAppProperties () returned 0x3 [0220.198] GetThemeAppProperties () returned 0x3 [0220.198] IsAppThemed () returned 0x1 [0220.198] GetThemeAppProperties () returned 0x3 [0220.198] GetThemeAppProperties () returned 0x3 [0220.198] GetFocus () returned 0x0 [0220.198] IsAppThemed () returned 0x1 [0220.199] GetThemeAppProperties () returned 0x3 [0220.199] GetThemeAppProperties () returned 0x3 [0220.199] IsAppThemed () returned 0x1 [0220.199] GetThemeAppProperties () returned 0x3 [0220.199] GetThemeAppProperties () returned 0x3 [0220.199] IsThemePartDefined () returned 0x1 [0220.199] IsAppThemed () returned 0x1 [0220.199] GetThemeAppProperties () returned 0x3 [0220.199] GetThemeAppProperties () returned 0x3 [0220.199] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0220.199] IsAppThemed () returned 0x1 [0220.199] GetThemeAppProperties () returned 0x3 [0220.199] GetThemeAppProperties () returned 0x3 [0220.199] IsAppThemed () returned 0x1 [0220.199] GetThemeAppProperties () returned 0x3 [0220.199] GetThemeAppProperties () returned 0x3 [0220.199] IsThemePartDefined () returned 0x1 [0220.199] GdipCreateRegion (region=0x5dbd60) returned 0x0 [0220.199] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0220.199] GdipCreateMatrix (matrix=0x5dbd60) returned 0x0 [0220.200] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326d90) returned 0x0 [0220.200] GdipIsMatrixIdentity (matrix=0x1c326d90, result=0x5dbdc0) returned 0x0 [0220.200] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f3d0 [0220.200] GdipGetMatrixElements (matrix=0x1c326d90, matrixOut=0x89f3d0) returned 0x0 [0220.200] LocalFree (hMem=0x89f3d0) returned 0x0 [0220.200] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89e850 [0220.200] GdipGetMatrixElements (matrix=0x1c326d90, matrixOut=0x89e850) returned 0x0 [0220.200] LocalFree (hMem=0x89e850) returned 0x0 [0220.200] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.200] GdipDeleteMatrix (matrix=0x1c326d90) returned 0x0 [0220.200] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbe10) returned 0x0 [0220.200] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbdd0) returned 0x0 [0220.200] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbdd0) returned 0x0 [0220.200] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.200] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0220.200] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbe40) returned 0x0 [0220.200] GetCurrentObject (hdc=0x180105db, type=0x1) returned 0x1b00017 [0220.200] GetCurrentObject (hdc=0x180105db, type=0x2) returned 0x1900010 [0220.200] GetCurrentObject (hdc=0x180105db, type=0x7) returned 0x11050637 [0220.200] GetCurrentObject (hdc=0x180105db, type=0x6) returned 0x18a0048 [0220.201] SaveDC (hdc=0x180105db) returned 1 [0220.201] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9d04074d [0220.201] GetClipRgn (hdc=0x180105db, hrgn=0xffffffff9d04074d) returned 0 [0220.201] SelectClipRgn (hdc=0x180105db, hrgn=0xffffffffe204054e) returned 2 [0220.201] DeleteObject (ho=0xffffffff9d04074d) returned 1 [0220.201] DeleteObject (ho=0xffffffffe204054e) returned 1 [0220.201] OffsetViewportOrgEx (in: hdc=0x180105db, x=0, y=0, lppt=0x27e4730 | out: lppt=0x27e4730) returned 1 [0220.201] DrawThemeParentBackground () returned 0x0 [0220.201] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db880 | out: lpwndpl=0x5db880) returned 1 [0220.201] GetClientRect (in: hWnd=0x20160, lpRect=0x5db700 | out: lpRect=0x5db700) returned 1 [0220.201] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0220.201] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0220.201] GetSystemMetrics (nIndex=42) returned 0 [0220.201] CoTaskMemAlloc (cb=0x20) returned 0x89d130 [0220.201] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d130, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0220.201] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d130) returned 0xd [0220.201] CoTaskMemFree (pv=0x89d130) [0220.201] GetClientRect (in: hWnd=0x20160, lpRect=0x5db4b0 | out: lpRect=0x5db4b0) returned 1 [0220.202] GetCurrentObject (hdc=0x180105db, type=0x1) returned 0x1b00017 [0220.202] GetCurrentObject (hdc=0x180105db, type=0x2) returned 0x1900010 [0220.202] GetCurrentObject (hdc=0x180105db, type=0x7) returned 0x11050637 [0220.202] GetCurrentObject (hdc=0x180105db, type=0x6) returned 0x18a0048 [0220.202] SaveDC (hdc=0x180105db) returned 2 [0220.202] GetNearestColor (hdc=0x180105db, color=0xf0f0f0) returned 0xf0f0f0 [0220.202] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff96100686 [0220.202] FillRect (hDC=0x180105db, lprc=0x5dafe0, hbr=0xffffffff96100686) returned 1 [0220.202] DeleteObject (ho=0xffffffff96100686) returned 1 [0220.202] RestoreDC (hdc=0x180105db, nSavedDC=-1) returned 1 [0220.202] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0220.202] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0220.203] GetSystemMetrics (nIndex=42) returned 0 [0220.203] CoTaskMemAlloc (cb=0x20) returned 0x89d100 [0220.203] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d100, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0220.203] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d100) returned 0xd [0220.203] CoTaskMemFree (pv=0x89d100) [0220.203] GetClientRect (in: hWnd=0x20160, lpRect=0x5db3b0 | out: lpRect=0x5db3b0) returned 1 [0220.203] GetCurrentObject (hdc=0x180105db, type=0x1) returned 0x1b00017 [0220.203] GetCurrentObject (hdc=0x180105db, type=0x2) returned 0x1900010 [0220.203] GetCurrentObject (hdc=0x180105db, type=0x7) returned 0x11050637 [0220.203] GetCurrentObject (hdc=0x180105db, type=0x6) returned 0x18a0048 [0220.203] SaveDC (hdc=0x180105db) returned 2 [0220.203] GetNearestColor (hdc=0x180105db, color=0xf0f0f0) returned 0xf0f0f0 [0220.203] CreateSolidBrush (color=0xf0f0f0) returned 0xffffffff97100686 [0220.203] FillRect (hDC=0x180105db, lprc=0x5daee0, hbr=0xffffffff97100686) returned 1 [0220.203] DeleteObject (ho=0xffffffff97100686) returned 1 [0220.203] RestoreDC (hdc=0x180105db, nSavedDC=-1) returned 1 [0220.203] GetWindowTextLengthW (hWnd=0x20160) returned 13 [0220.203] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0220.203] GetSystemMetrics (nIndex=42) returned 0 [0220.203] CoTaskMemAlloc (cb=0x20) returned 0x89d4c0 [0220.204] GetWindowTextW (in: hWnd=0x20160, lpString=0x89d4c0, nMaxCount=14 | out: lpString="Key Validator") returned 13 [0220.204] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0xd, wParam=0xe, lParam=0x89d4c0) returned 0xd [0220.204] CoTaskMemFree (pv=0x89d4c0) [0220.204] RestoreDC (hdc=0x180105db, nSavedDC=-1) returned 1 [0220.204] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.204] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x180105db) returned 0x0 [0220.204] IsAppThemed () returned 0x1 [0220.204] GetThemeAppProperties () returned 0x3 [0220.204] GetThemeAppProperties () returned 0x3 [0220.204] IsAppThemed () returned 0x1 [0220.204] GetThemeAppProperties () returned 0x3 [0220.204] GetThemeAppProperties () returned 0x3 [0220.204] IsThemePartDefined () returned 0x1 [0220.204] GdipCreateRegion (region=0x5dbc40) returned 0x0 [0220.204] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0220.204] GdipCreateMatrix (matrix=0x5dbc40) returned 0x0 [0220.204] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c326ed0) returned 0x0 [0220.204] GdipIsMatrixIdentity (matrix=0x1c326ed0, result=0x5dbca0) returned 0x0 [0220.204] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec10 [0220.204] GdipGetMatrixElements (matrix=0x1c326ed0, matrixOut=0x89ec10) returned 0x0 [0220.205] LocalFree (hMem=0x89ec10) returned 0x0 [0220.205] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89ec90 [0220.205] GdipGetMatrixElements (matrix=0x1c326ed0, matrixOut=0x89ec90) returned 0x0 [0220.205] LocalFree (hMem=0x89ec90) returned 0x0 [0220.205] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.205] GdipDeleteMatrix (matrix=0x1c326ed0) returned 0x0 [0220.205] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcf0) returned 0x0 [0220.205] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcb0) returned 0x0 [0220.205] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbcb0) returned 0x0 [0220.205] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.205] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0220.205] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbd20) returned 0x0 [0220.205] GetCurrentObject (hdc=0x180105db, type=0x1) returned 0x1b00017 [0220.205] GetCurrentObject (hdc=0x180105db, type=0x2) returned 0x1900010 [0220.205] GetCurrentObject (hdc=0x180105db, type=0x7) returned 0x11050637 [0220.205] GetCurrentObject (hdc=0x180105db, type=0x6) returned 0x18a0048 [0220.205] SaveDC (hdc=0x180105db) returned 1 [0220.205] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe304054e [0220.205] GetClipRgn (hdc=0x180105db, hrgn=0xffffffffe304054e) returned 0 [0220.205] SelectClipRgn (hdc=0x180105db, hrgn=0xffffffff9f04074d) returned 2 [0220.205] DeleteObject (ho=0xffffffffe304054e) returned 1 [0220.205] DeleteObject (ho=0xffffffff9f04074d) returned 1 [0220.205] OffsetViewportOrgEx (in: hdc=0x180105db, x=0, y=0, lppt=0x27e5430 | out: lppt=0x27e5430) returned 1 [0220.205] IsAppThemed () returned 0x1 [0220.205] GetThemeAppProperties () returned 0x3 [0220.205] GetThemeAppProperties () returned 0x3 [0220.206] DrawThemeBackground () returned 0x0 [0220.206] RestoreDC (hdc=0x180105db, nSavedDC=-1) returned 1 [0220.206] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.206] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x180105db) returned 0x0 [0220.206] GdipCreateRegion (region=0x5dbc10) returned 0x0 [0220.206] GdipGetClip (graphics=0x1c3267f0, region=0x1c321730) returned 0x0 [0220.206] GdipCreateMatrix (matrix=0x5dbc10) returned 0x0 [0220.206] GdipGetWorldTransform (graphics=0x1c3267f0, matrix=0x1c327350) returned 0x0 [0220.206] GdipIsMatrixIdentity (matrix=0x1c327350, result=0x5dbc70) returned 0x0 [0220.206] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f550 [0220.206] GdipGetMatrixElements (matrix=0x1c327350, matrixOut=0x89f550) returned 0x0 [0220.206] LocalFree (hMem=0x89f550) returned 0x0 [0220.206] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x89f110 [0220.206] GdipGetMatrixElements (matrix=0x1c327350, matrixOut=0x89f110) returned 0x0 [0220.206] LocalFree (hMem=0x89f110) returned 0x0 [0220.206] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.206] GdipDeleteMatrix (matrix=0x1c327350) returned 0x0 [0220.206] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbcc0) returned 0x0 [0220.206] GdipIsInfiniteRegion (region=0x1c321730, graphics=0x1c3267f0, result=0x5dbc80) returned 0x0 [0220.206] GdipGetRegionHRgn (region=0x1c321730, graphics=0x1c3267f0, hRgn=0x5dbc80) returned 0x0 [0220.206] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.206] GdipDeleteRegion (region=0x1c321730) returned 0x0 [0220.207] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbcf0) returned 0x0 [0220.207] GetCurrentObject (hdc=0x180105db, type=0x1) returned 0x1b00017 [0220.207] GetCurrentObject (hdc=0x180105db, type=0x2) returned 0x1900010 [0220.207] GetCurrentObject (hdc=0x180105db, type=0x7) returned 0x11050637 [0220.207] GetCurrentObject (hdc=0x180105db, type=0x6) returned 0x18a0048 [0220.207] SaveDC (hdc=0x180105db) returned 1 [0220.207] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa004074d [0220.207] GetClipRgn (hdc=0x180105db, hrgn=0xffffffffa004074d) returned 0 [0220.207] SelectClipRgn (hdc=0x180105db, hrgn=0xffffffffe404054e) returned 2 [0220.207] DeleteObject (ho=0xffffffffa004074d) returned 1 [0220.207] DeleteObject (ho=0xffffffffe404054e) returned 1 [0220.207] OffsetViewportOrgEx (in: hdc=0x180105db, x=0, y=0, lppt=0x27e5930 | out: lppt=0x27e5930) returned 1 [0220.207] IsAppThemed () returned 0x1 [0220.207] GetThemeAppProperties () returned 0x3 [0220.207] GetThemeAppProperties () returned 0x3 [0220.207] GetThemeBackgroundContentRect () returned 0x0 [0220.207] RestoreDC (hdc=0x180105db, nSavedDC=-1) returned 1 [0220.207] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.207] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x180105db) returned 0x0 [0220.207] IsAppThemed () returned 0x1 [0220.207] GetThemeAppProperties () returned 0x3 [0220.207] GetThemeAppProperties () returned 0x3 [0220.207] GdipGetTextRenderingHint (graphics=0x1c3267f0, mode=0x5dbde0) returned 0x0 [0220.207] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dbdc0) returned 0x0 [0220.207] GetCurrentObject (hdc=0x180105db, type=0x1) returned 0x1b00017 [0220.207] GetCurrentObject (hdc=0x180105db, type=0x2) returned 0x1900010 [0220.208] GetCurrentObject (hdc=0x180105db, type=0x7) returned 0x11050637 [0220.208] GetCurrentObject (hdc=0x180105db, type=0x6) returned 0x18a0048 [0220.208] SaveDC (hdc=0x180105db) returned 1 [0220.208] GetTextAlign (hdc=0x180105db) returned 0x0 [0220.208] GetTextColor (hdc=0x180105db) returned 0x0 [0220.208] GetCurrentObject (hdc=0x180105db, type=0x6) returned 0x18a0048 [0220.208] GetObjectW (in: h=0x18a0048, c=92, pv=0x5db830 | out: pv=0x5db830) returned 92 [0220.208] SelectObject (hdc=0x180105db, h=0x290a0573) returned 0x18a0048 [0220.208] GetBkMode (hdc=0x180105db) returned 2 [0220.208] SetBkMode (hdc=0x180105db, mode=1) returned 2 [0220.208] DrawTextExW (in: hdc=0x180105db, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db8c0, format=0x2415, lpdtp=0x27e5e88 | out: lpchText="Submit Decryption Key", lprc=0x5db8c0) returned 13 [0220.209] DrawTextExW (in: hdc=0x180105db, lpchText="Submit Decryption Key", cchText=21, lprc=0x5db970, format=0x2015, lpdtp=0x27e5e88 | out: lpchText="Submit Decryption Key", lprc=0x5db970) returned 13 [0220.209] RestoreDC (hdc=0x180105db, nSavedDC=-1) returned 1 [0220.209] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.209] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x180105db) returned 0x0 [0220.209] GetFocus () returned 0x0 [0220.209] IsAppThemed () returned 0x1 [0220.209] GetThemeAppProperties () returned 0x3 [0220.209] GetThemeAppProperties () returned 0x3 [0220.209] GdipGetDC (graphics=0x1c3267f0, hdc=0x5dc520) returned 0x0 [0220.210] BitBlt (hdc=0xa0100d0, x=0, y=0, cx=262, cy=36, hdcSrc=0x180105db, x1=0, y1=0, rop=0xcc0020) returned 1 [0220.210] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.210] GdipReleaseDC (graphics=0x1c3267f0, hdc=0x180105db) returned 0x0 [0220.210] SelectPalette (hdc=0xa0100d0, hPal=0x188000b, bForceBkgd=0) returned 0x370806b1 [0220.210] SelectObject (hdc=0x180105db, h=0x185000f) returned 0x11050637 [0220.210] DeleteDC (hdc=0x180105db) returned 1 [0220.210] FindAtomW (lpString="GDI+Atom_3608_1") returned 0xc000 [0220.210] GdipDeleteGraphics (graphics=0x1c3267f0) returned 0x0 [0220.210] EndPaint (hWnd=0x2021e, lpPaint=0x5dc628) returned 1 [0220.210] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0220.210] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0220.210] WaitMessage () returned 1 [0220.476] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 1 [0220.476] IsWindowUnicode (hWnd=0x20230) returned 1 [0220.476] GetMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x5dd210) returned 1 [0220.476] TranslateMessage (lpMsg=0x5dd220) returned 0 [0220.476] DispatchMessageW (lpMsg=0x5dd220) returned 0x0 [0220.476] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0220.476] PeekMessageW (in: lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x5dd210) returned 0 [0220.476] WaitMessage () returned 1 [0220.810] PeekMessageW (lpMsg=0x5dd210, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0) [0220.810] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x3b, wParam=0x50e, lParam=0x0) returned 0x1 [0220.810] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x11, wParam=0x0, lParam=0x0) returned 0x1 [0221.234] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x11, wParam=0x0, lParam=0x0) returned 0x1 [0221.235] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x1c, wParam=0x1, lParam=0x85c) returned 0x0 [0221.235] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x1c, wParam=0x1, lParam=0x85c) returned 0x0 [0221.236] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1c, wParam=0x1, lParam=0x85c) returned 0x0 [0221.236] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1c, wParam=0x1, lParam=0x85c) returned 0x0 [0221.236] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x1c, wParam=0x1, lParam=0x85c) returned 0x0 [0221.236] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0221.236] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x6, wParam=0x1, lParam=0x0) returned 0x0 [0221.237] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0221.238] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0221.238] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0221.238] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0221.239] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x6, wParam=0x0, lParam=0x0) returned 0x0 [0221.240] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0221.240] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0221.240] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0221.240] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x901f6, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0221.240] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20232, Msg=0x1c, wParam=0x0, lParam=0x54c) returned 0x0 [0221.240] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0221.240] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0221.249] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0221.249] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x3b, wParam=0x50c, lParam=0x0) [0221.250] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x16, wParam=0x1, lParam=0x0) returned 0x0 [0221.250] NtdllDefWindowProc_W (hWnd=0x50020, Msg=0x16, wParam=0x1, lParam=0x0) returned 0x0 [0221.428] GetWindowLongPtrW (hWnd=0x20160, nIndex=-20) returned 0x10101 [0221.428] DestroyWindow (hWnd=0x20160) [0221.428] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0221.429] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x46, wParam=0x0, lParam=0x5dbe10) returned 0x0 [0221.430] GetWindowPlacement (in: hWnd=0x20160, lpwndpl=0x5db840 | out: lpwndpl=0x5db840) returned 1 [0221.431] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x47, wParam=0x0, lParam=0x5dbe10) returned 0x0 [0221.431] GetClientRect (in: hWnd=0x20160, lpRect=0x5db5e0 | out: lpRect=0x5db5e0) returned 1 [0221.431] GetWindowRect (in: hWnd=0x20160, lpRect=0x5db5e0 | out: lpRect=0x5db5e0) returned 1 [0221.437] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0221.437] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0221.437] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0221.437] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x272, wParam=0x0, lParam=0x0) returned 0x0 [0221.454] SendMessageW (hWnd=0x2021a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0221.454] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0221.456] SendMessageW (hWnd=0x2021a, Msg=0xb0, wParam=0x5db5f4, lParam=0x5db5f0) returned 0x0 [0221.456] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0xb0, wParam=0x5db5f4, lParam=0x5db5f0) returned 0x0 [0221.459] SendMessageW (hWnd=0x2021a, Msg=0x44a, wParam=0x2, lParam=0x5db560) returned 0x84 [0221.459] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x44a, wParam=0x2, lParam=0x5db560) returned 0x84 [0221.463] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0221.464] CallWindowProcW (lpPrevWndFunc=0x7ffaecc8f3f0, hWnd=0x2021e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0221.469] CallWindowProcW (lpPrevWndFunc=0x7ffaecc560c0, hWnd=0x20220, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0221.470] CallWindowProcW (lpPrevWndFunc=0x7ffadd2a9920, hWnd=0x2021a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0221.472] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20160, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0221.472] DestroyWindow (hWnd=0x20224) [0221.472] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0221.472] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0221.473] CallWindowProcW (lpPrevWndFunc=0x7ffaf7aa3240, hWnd=0x20224, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 89 os_tid = 0xe2c Thread: id = 90 os_tid = 0xe44 Thread: id = 91 os_tid = 0xbf4 [0188.215] CoGetContextToken (in: pToken=0x1af8f1e0 | out: pToken=0x1af8f1e0) returned 0x800401f0 [0188.215] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 92 os_tid = 0xd68 Thread: id = 93 os_tid = 0xcd0 Thread: id = 96 os_tid = 0xfac Thread: id = 97 os_tid = 0xcc8 Thread: id = 98 os_tid = 0xcc4 Thread: id = 99 os_tid = 0xcc0 [0198.172] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0198.205] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x209ee540 | out: lpiid=0x209ee540) returned 0x0 [0198.205] CoGetClassObject (in: rclsid=0x809f48*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x209ee3b0 | out: ppv=0x209ee3b0*=0x868ff0) returned 0x0 [0198.219] WbemDefPath:IUnknown:QueryInterface (in: This=0x868ff0, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x209ee0c0 | out: ppvObject=0x209ee0c0*=0x0) returned 0x80004002 [0198.219] WbemDefPath:IClassFactory:CreateInstance (in: This=0x868ff0, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209ee0a8 | out: ppvObject=0x209ee0a8*=0x820d10) returned 0x0 [0198.220] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edfb0 | out: ppvObject=0x209edfb0*=0x820d10) returned 0x0 [0198.220] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x209ee030 | out: ppvObject=0x209ee030*=0x0) returned 0x80004002 [0198.221] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x3 [0198.221] CoGetContextToken (in: pToken=0x209edc80 | out: pToken=0x209edc80) returned 0x0 [0198.221] CoGetObjectContext (in: riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x869f88 | out: ppv=0x869f88*=0x7f7150) returned 0x0 [0198.222] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edc40 | out: ppvObject=0x209edc40*=0x868fd0) returned 0x0 [0198.222] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x868fd0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x209edc70 | out: pCid=0x209edc70*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0198.222] WbemDefPath:IUnknown:Release (This=0x868fd0) returned 0x3 [0198.223] CoGetContextToken (in: pToken=0x209edc50 | out: pToken=0x209edc50) returned 0x0 [0198.223] WbemDefPath:IUnknown:AddRef (This=0x820d10) returned 0x4 [0198.223] WbemDefPath:IUnknown:QueryInterface (in: This=0x820d10, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edd68 | out: ppvObject=0x209edd68*=0x0) returned 0x80004002 [0198.223] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x3 [0198.223] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x2 [0198.223] WbemDefPath:IUnknown:Release (This=0x868ff0) returned 0x0 [0198.223] WbemDefPath:IUnknown:Release (This=0x820d10) returned 0x1 [0198.224] SetEvent (hEvent=0x3bc) returned 1 [0198.227] CoGetClassObject (in: rclsid=0x809f48*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x209ee3b0 | out: ppv=0x209ee3b0*=0x868f10) returned 0x0 [0198.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x868f10, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x209ee0c0 | out: ppvObject=0x209ee0c0*=0x0) returned 0x80004002 [0198.227] WbemDefPath:IClassFactory:CreateInstance (in: This=0x868f10, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209ee0a8 | out: ppvObject=0x209ee0a8*=0x820dd0) returned 0x0 [0198.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edfb0 | out: ppvObject=0x209edfb0*=0x820dd0) returned 0x0 [0198.227] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x209ee030 | out: ppvObject=0x209ee030*=0x0) returned 0x80004002 [0198.228] WbemDefPath:IUnknown:AddRef (This=0x820dd0) returned 0x3 [0198.228] CoGetContextToken (in: pToken=0x209edc80 | out: pToken=0x209edc80) returned 0x0 [0198.228] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edc40 | out: ppvObject=0x209edc40*=0x8692d0) returned 0x0 [0198.228] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x8692d0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x209edc70 | out: pCid=0x209edc70*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0198.228] WbemDefPath:IUnknown:Release (This=0x8692d0) returned 0x3 [0198.229] CoGetContextToken (in: pToken=0x209edc50 | out: pToken=0x209edc50) returned 0x0 [0198.229] WbemDefPath:IUnknown:AddRef (This=0x820dd0) returned 0x4 [0198.229] WbemDefPath:IUnknown:QueryInterface (in: This=0x820dd0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edd68 | out: ppvObject=0x209edd68*=0x0) returned 0x80004002 [0198.229] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x3 [0198.229] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x2 [0198.229] WbemDefPath:IUnknown:Release (This=0x868f10) returned 0x0 [0198.229] WbemDefPath:IUnknown:Release (This=0x820dd0) returned 0x1 [0198.229] SetEvent (hEvent=0x408) returned 1 [0198.245] CoGetClassObject (in: rclsid=0x809f48*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x209ee3b0 | out: ppv=0x209ee3b0*=0x869270) returned 0x0 [0198.246] WbemDefPath:IUnknown:QueryInterface (in: This=0x869270, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x209ee0c0 | out: ppvObject=0x209ee0c0*=0x0) returned 0x80004002 [0198.246] WbemDefPath:IClassFactory:CreateInstance (in: This=0x869270, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209ee0a8 | out: ppvObject=0x209ee0a8*=0x820e90) returned 0x0 [0198.246] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edfb0 | out: ppvObject=0x209edfb0*=0x820e90) returned 0x0 [0198.246] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x209ee030 | out: ppvObject=0x209ee030*=0x0) returned 0x80004002 [0198.246] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x3 [0198.246] CoGetContextToken (in: pToken=0x209edc80 | out: pToken=0x209edc80) returned 0x0 [0198.246] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edc40 | out: ppvObject=0x209edc40*=0x868f50) returned 0x0 [0198.246] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x868f50, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x209edc70 | out: pCid=0x209edc70*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0198.246] WbemDefPath:IUnknown:Release (This=0x868f50) returned 0x3 [0198.246] CoGetContextToken (in: pToken=0x209edc50 | out: pToken=0x209edc50) returned 0x0 [0198.246] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x4 [0198.247] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edd68 | out: ppvObject=0x209edd68*=0x0) returned 0x80004002 [0198.247] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x3 [0198.247] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x2 [0198.247] WbemDefPath:IUnknown:Release (This=0x869270) returned 0x0 [0198.247] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x1 [0198.247] SetEvent (hEvent=0x40c) returned 1 [0199.444] CoGetClassObject (in: rclsid=0x809f48*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x209ee3b0 | out: ppv=0x209ee3b0*=0x869390) returned 0x0 [0199.444] WbemDefPath:IUnknown:QueryInterface (in: This=0x869390, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x209ee0c0 | out: ppvObject=0x209ee0c0*=0x0) returned 0x80004002 [0199.444] WbemDefPath:IClassFactory:CreateInstance (in: This=0x869390, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209ee0a8 | out: ppvObject=0x209ee0a8*=0x821010) returned 0x0 [0199.444] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edfb0 | out: ppvObject=0x209edfb0*=0x821010) returned 0x0 [0199.444] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x209ee030 | out: ppvObject=0x209ee030*=0x0) returned 0x80004002 [0199.444] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.444] CoGetContextToken (in: pToken=0x209edc80 | out: pToken=0x209edc80) returned 0x0 [0199.444] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edc40 | out: ppvObject=0x209edc40*=0x8693f0) returned 0x0 [0199.445] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x8693f0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x209edc70 | out: pCid=0x209edc70*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.445] WbemDefPath:IUnknown:Release (This=0x8693f0) returned 0x3 [0199.445] CoGetContextToken (in: pToken=0x209edc50 | out: pToken=0x209edc50) returned 0x0 [0199.445] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x4 [0199.445] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edd68 | out: ppvObject=0x209edd68*=0x0) returned 0x80004002 [0199.445] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x3 [0199.445] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.445] WbemDefPath:IUnknown:Release (This=0x869390) returned 0x0 [0199.445] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x1 [0199.445] SetEvent (hEvent=0x47c) returned 1 [0199.658] CoGetClassObject (in: rclsid=0x809f48*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x209ee3b0 | out: ppv=0x209ee3b0*=0x882610) returned 0x0 [0199.659] WbemDefPath:IUnknown:QueryInterface (in: This=0x882610, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x209ee0c0 | out: ppvObject=0x209ee0c0*=0x0) returned 0x80004002 [0199.659] WbemDefPath:IClassFactory:CreateInstance (in: This=0x882610, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209ee0a8 | out: ppvObject=0x209ee0a8*=0x87fc30) returned 0x0 [0199.659] WbemDefPath:IUnknown:QueryInterface (in: This=0x87fc30, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edfb0 | out: ppvObject=0x209edfb0*=0x87fc30) returned 0x0 [0199.659] WbemDefPath:IUnknown:QueryInterface (in: This=0x87fc30, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x209ee030 | out: ppvObject=0x209ee030*=0x0) returned 0x80004002 [0199.659] WbemDefPath:IUnknown:AddRef (This=0x87fc30) returned 0x3 [0199.659] CoGetContextToken (in: pToken=0x209edc80 | out: pToken=0x209edc80) returned 0x0 [0199.659] WbemDefPath:IUnknown:QueryInterface (in: This=0x87fc30, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edc40 | out: ppvObject=0x209edc40*=0x8826b0) returned 0x0 [0199.660] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x8826b0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x209edc70 | out: pCid=0x209edc70*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.660] WbemDefPath:IUnknown:Release (This=0x8826b0) returned 0x3 [0199.660] CoGetContextToken (in: pToken=0x209edc50 | out: pToken=0x209edc50) returned 0x0 [0199.660] WbemDefPath:IUnknown:AddRef (This=0x87fc30) returned 0x4 [0199.660] WbemDefPath:IUnknown:QueryInterface (in: This=0x87fc30, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edd68 | out: ppvObject=0x209edd68*=0x0) returned 0x80004002 [0199.660] WbemDefPath:IUnknown:Release (This=0x87fc30) returned 0x3 [0199.660] WbemDefPath:IUnknown:Release (This=0x87fc30) returned 0x2 [0199.660] WbemDefPath:IUnknown:Release (This=0x882610) returned 0x0 [0199.660] WbemDefPath:IUnknown:Release (This=0x87fc30) returned 0x1 [0199.661] SetEvent (hEvent=0x494) returned 1 [0199.940] CoGetClassObject (in: rclsid=0x809f48*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x209ee3b0 | out: ppv=0x209ee3b0*=0x8825f0) returned 0x0 [0199.940] WbemDefPath:IUnknown:QueryInterface (in: This=0x8825f0, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x209ee0c0 | out: ppvObject=0x209ee0c0*=0x0) returned 0x80004002 [0199.940] WbemDefPath:IClassFactory:CreateInstance (in: This=0x8825f0, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209ee0a8 | out: ppvObject=0x209ee0a8*=0x8802f0) returned 0x0 [0199.940] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edfb0 | out: ppvObject=0x209edfb0*=0x8802f0) returned 0x0 [0199.940] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x209ee030 | out: ppvObject=0x209ee030*=0x0) returned 0x80004002 [0199.941] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x3 [0199.941] CoGetContextToken (in: pToken=0x209edc80 | out: pToken=0x209edc80) returned 0x0 [0199.941] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edc40 | out: ppvObject=0x209edc40*=0x8823b0) returned 0x0 [0199.941] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x8823b0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x209edc70 | out: pCid=0x209edc70*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.941] WbemDefPath:IUnknown:Release (This=0x8823b0) returned 0x3 [0199.941] CoGetContextToken (in: pToken=0x209edc50 | out: pToken=0x209edc50) returned 0x0 [0199.941] WbemDefPath:IUnknown:AddRef (This=0x8802f0) returned 0x4 [0199.941] WbemDefPath:IUnknown:QueryInterface (in: This=0x8802f0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edd68 | out: ppvObject=0x209edd68*=0x0) returned 0x80004002 [0199.941] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x3 [0199.941] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x2 [0199.942] WbemDefPath:IUnknown:Release (This=0x8825f0) returned 0x0 [0199.942] WbemDefPath:IUnknown:Release (This=0x8802f0) returned 0x1 [0199.942] SetEvent (hEvent=0x4a4) returned 1 [0199.949] CoGetClassObject (in: rclsid=0x809f48*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x209ee3b0 | out: ppv=0x209ee3b0*=0x8825f0) returned 0x0 [0199.949] WbemDefPath:IUnknown:QueryInterface (in: This=0x8825f0, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x209ee0c0 | out: ppvObject=0x209ee0c0*=0x0) returned 0x80004002 [0199.949] WbemDefPath:IClassFactory:CreateInstance (in: This=0x8825f0, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209ee0a8 | out: ppvObject=0x209ee0a8*=0x87f870) returned 0x0 [0199.949] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edfb0 | out: ppvObject=0x209edfb0*=0x87f870) returned 0x0 [0199.949] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x209ee030 | out: ppvObject=0x209ee030*=0x0) returned 0x80004002 [0199.950] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x3 [0199.950] CoGetContextToken (in: pToken=0x209edc80 | out: pToken=0x209edc80) returned 0x0 [0199.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edc40 | out: ppvObject=0x209edc40*=0x882750) returned 0x0 [0199.950] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x882750, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x209edc70 | out: pCid=0x209edc70*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.950] WbemDefPath:IUnknown:Release (This=0x882750) returned 0x3 [0199.950] CoGetContextToken (in: pToken=0x209edc50 | out: pToken=0x209edc50) returned 0x0 [0199.950] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x4 [0199.950] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edd68 | out: ppvObject=0x209edd68*=0x0) returned 0x80004002 [0199.950] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x3 [0199.951] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x2 [0199.951] WbemDefPath:IUnknown:Release (This=0x8825f0) returned 0x0 [0199.951] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x1 [0199.951] SetEvent (hEvent=0x4a0) returned 1 [0200.027] CoGetClassObject (in: rclsid=0x809f48*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x209ee3b0 | out: ppv=0x209ee3b0*=0x882430) returned 0x0 [0200.027] WbemDefPath:IUnknown:QueryInterface (in: This=0x882430, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x209ee0c0 | out: ppvObject=0x209ee0c0*=0x0) returned 0x80004002 [0200.028] WbemDefPath:IClassFactory:CreateInstance (in: This=0x882430, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209ee0a8 | out: ppvObject=0x209ee0a8*=0x87e5b0) returned 0x0 [0200.028] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edfb0 | out: ppvObject=0x209edfb0*=0x87e5b0) returned 0x0 [0200.028] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x209ee030 | out: ppvObject=0x209ee030*=0x0) returned 0x80004002 [0200.028] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.028] CoGetContextToken (in: pToken=0x209edc80 | out: pToken=0x209edc80) returned 0x0 [0200.028] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edc40 | out: ppvObject=0x209edc40*=0x882570) returned 0x0 [0200.028] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x882570, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x209edc70 | out: pCid=0x209edc70*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0200.028] WbemDefPath:IUnknown:Release (This=0x882570) returned 0x3 [0200.029] CoGetContextToken (in: pToken=0x209edc50 | out: pToken=0x209edc50) returned 0x0 [0200.029] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x4 [0200.029] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edd68 | out: ppvObject=0x209edd68*=0x0) returned 0x80004002 [0200.029] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x3 [0200.029] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.029] WbemDefPath:IUnknown:Release (This=0x882430) returned 0x0 [0200.029] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x1 [0200.029] SetEvent (hEvent=0x4bc) returned 1 [0200.415] CoGetClassObject (in: rclsid=0x809f48*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x209ee3b0 | out: ppv=0x209ee3b0*=0x87d8d0) returned 0x0 [0200.416] WbemDefPath:IUnknown:QueryInterface (in: This=0x87d8d0, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x209ee0c0 | out: ppvObject=0x209ee0c0*=0x0) returned 0x80004002 [0200.416] WbemDefPath:IClassFactory:CreateInstance (in: This=0x87d8d0, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209ee0a8 | out: ppvObject=0x209ee0a8*=0x8803b0) returned 0x0 [0200.416] WbemDefPath:IUnknown:QueryInterface (in: This=0x8803b0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edfb0 | out: ppvObject=0x209edfb0*=0x8803b0) returned 0x0 [0200.416] WbemDefPath:IUnknown:QueryInterface (in: This=0x8803b0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x209ee030 | out: ppvObject=0x209ee030*=0x0) returned 0x80004002 [0200.416] WbemDefPath:IUnknown:AddRef (This=0x8803b0) returned 0x3 [0200.416] CoGetContextToken (in: pToken=0x209edc80 | out: pToken=0x209edc80) returned 0x0 [0200.416] WbemDefPath:IUnknown:QueryInterface (in: This=0x8803b0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edc40 | out: ppvObject=0x209edc40*=0x87dbb0) returned 0x0 [0200.416] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x87dbb0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x209edc70 | out: pCid=0x209edc70*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0200.417] WbemDefPath:IUnknown:Release (This=0x87dbb0) returned 0x3 [0200.417] CoGetContextToken (in: pToken=0x209edc50 | out: pToken=0x209edc50) returned 0x0 [0200.417] WbemDefPath:IUnknown:AddRef (This=0x8803b0) returned 0x4 [0200.417] WbemDefPath:IUnknown:QueryInterface (in: This=0x8803b0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209edd68 | out: ppvObject=0x209edd68*=0x0) returned 0x80004002 [0200.417] WbemDefPath:IUnknown:Release (This=0x8803b0) returned 0x3 [0200.417] WbemDefPath:IUnknown:Release (This=0x8803b0) returned 0x2 [0200.417] WbemDefPath:IUnknown:Release (This=0x87d8d0) returned 0x0 [0200.417] WbemDefPath:IUnknown:Release (This=0x8803b0) returned 0x1 [0200.417] SetEvent (hEvent=0x4d8) returned 1 Thread: id = 100 os_tid = 0xcbc [0198.254] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0198.256] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x20aeee60 | out: lpiid=0x20aeee60) returned 0x0 [0198.257] CoGetClassObject (in: rclsid=0x809a48*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x20aeecd0 | out: ppv=0x20aeecd0*=0x868ef0) returned 0x0 [0198.259] WbemLocator:IUnknown:QueryInterface (in: This=0x868ef0, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x20aee9e0 | out: ppvObject=0x20aee9e0*=0x0) returned 0x80004002 [0198.259] WbemLocator:IClassFactory:CreateInstance (in: This=0x868ef0, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20aee9c8 | out: ppvObject=0x20aee9c8*=0x8694d0) returned 0x0 [0198.259] WbemLocator:IUnknown:QueryInterface (in: This=0x8694d0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20aee8d0 | out: ppvObject=0x20aee8d0*=0x8694d0) returned 0x0 [0198.259] WbemLocator:IUnknown:QueryInterface (in: This=0x8694d0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x20aee950 | out: ppvObject=0x20aee950*=0x0) returned 0x80004002 [0198.259] WbemLocator:IUnknown:AddRef (This=0x8694d0) returned 0x3 [0198.260] CoGetContextToken (in: pToken=0x20aee5a0 | out: pToken=0x20aee5a0) returned 0x0 [0198.260] WbemLocator:IUnknown:QueryInterface (in: This=0x8694d0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20aee560 | out: ppvObject=0x20aee560*=0x0) returned 0x80004002 [0198.260] CoGetContextToken (in: pToken=0x20aee570 | out: pToken=0x20aee570) returned 0x0 [0198.260] WbemLocator:IUnknown:AddRef (This=0x8694d0) returned 0x4 [0198.260] WbemLocator:IUnknown:QueryInterface (in: This=0x8694d0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20aee688 | out: ppvObject=0x20aee688*=0x0) returned 0x80004002 [0198.260] WbemLocator:IUnknown:Release (This=0x8694d0) returned 0x3 [0198.260] WbemLocator:IUnknown:Release (This=0x8694d0) returned 0x2 [0198.260] WbemLocator:IUnknown:Release (This=0x868ef0) returned 0x0 [0198.260] WbemLocator:IUnknown:Release (This=0x8694d0) returned 0x1 [0198.261] CoGetContextToken (in: pToken=0x20aeeb90 | out: pToken=0x20aeeb90) returned 0x0 [0198.261] CoGetContextToken (in: pToken=0x20aeead0 | out: pToken=0x20aeead0) returned 0x0 [0198.261] WbemLocator:IUnknown:AddRef (This=0x8694d0) returned 0x2 [0198.261] WbemLocator:IUnknown:QueryInterface (in: This=0x8694d0, riid=0x20aeec10*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x20aeebf0 | out: ppvObject=0x20aeebf0*=0x8694d0) returned 0x0 [0198.261] WbemLocator:IUnknown:Release (This=0x8694d0) returned 0x2 [0198.261] WbemLocator:IUnknown:Release (This=0x8694d0) returned 0x1 [0198.265] CoGetContextToken (in: pToken=0x20aeecf0 | out: pToken=0x20aeecf0) returned 0x0 [0198.265] CoGetContextToken (in: pToken=0x20aeec30 | out: pToken=0x20aeec30) returned 0x0 [0198.265] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x2 [0198.266] WbemDefPath:IUnknown:QueryInterface (in: This=0x820e90, riid=0x20aeed70*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x20aeed50 | out: ppvObject=0x20aeed50*=0x820e90) returned 0x0 [0198.266] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x2 [0198.266] WbemDefPath:IUnknown:AddRef (This=0x820e90) returned 0x3 [0198.266] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x820e90, puCount=0x20aeeff0 | out: puCount=0x20aeeff0*=0x2) returned 0x0 [0198.266] WbemDefPath:IUnknown:Release (This=0x820e90) returned 0x2 [0198.266] WbemDefPath:IWbemPath:GetText (in: This=0x820e90, lFlags=8, puBuffLength=0x20aeeff0*=0x0, pszText=0x0 | out: puBuffLength=0x20aeeff0*=0xf, pszText=0x0) returned 0x0 [0198.266] WbemDefPath:IWbemPath:GetText (in: This=0x820e90, lFlags=8, puBuffLength=0x20aeeff0*=0xf, pszText="00000000000000" | out: puBuffLength=0x20aeeff0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0198.271] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", nBufferLength=0x105, lpBuffer=0x20aed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\", lpFilePart=0x0) returned 0x30 [0198.272] CoTaskMemAlloc (cb=0x43) returned 0x869bb0 [0198.272] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v2.0.50727\\\\wminet_utils.dll") returned 0x7ffaf0230000 [0198.275] CoTaskMemFree (pv=0x869bb0) [0198.276] CoTaskMemAlloc (cb=0xf) returned 0x869430 [0198.276] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="ResetSecurity") returned 0x7ffaf02320e0 [0198.276] CoTaskMemFree (pv=0x869430) [0198.368] CoTaskMemAlloc (cb=0xd) returned 0x869430 [0198.368] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="SetSecurity") returned 0x7ffaf02321b0 [0198.368] CoTaskMemFree (pv=0x869430) [0198.394] CoTaskMemAlloc (cb=0x14) returned 0x869430 [0198.395] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="BlessIWbemServices") returned 0x7ffaf0232290 [0198.395] CoTaskMemFree (pv=0x869430) [0198.483] CoTaskMemAlloc (cb=0x1a) returned 0x85d650 [0198.483] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="BlessIWbemServicesObject") returned 0x7ffaf02323b0 [0198.483] CoTaskMemFree (pv=0x85d650) [0198.539] CoTaskMemAlloc (cb=0x13) returned 0x869430 [0198.539] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="GetPropertyHandle") returned 0x7ffaf02324d0 [0198.539] CoTaskMemFree (pv=0x869430) [0198.571] CoTaskMemAlloc (cb=0x14) returned 0x868ef0 [0198.571] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="WritePropertyValue") returned 0x7ffaf0232500 [0198.571] CoTaskMemFree (pv=0x868ef0) [0198.598] CoTaskMemAlloc (cb=0x7) returned 0x865760 [0198.598] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="Clone") returned 0x7ffaf0232530 [0198.598] CoTaskMemFree (pv=0x865760) [0198.613] CoTaskMemAlloc (cb=0x11) returned 0x869050 [0198.613] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="VerifyClientKey") returned 0x7ffaf02331f0 [0198.613] CoTaskMemFree (pv=0x869050) [0198.622] CoTaskMemAlloc (cb=0x11) returned 0x869430 [0198.622] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="GetQualifierSet") returned 0x7ffaf0232a50 [0198.622] CoTaskMemFree (pv=0x869430) [0198.637] CoTaskMemAlloc (cb=0x5) returned 0x8657b0 [0198.638] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="Get") returned 0x7ffaf0232700 [0198.638] CoTaskMemFree (pv=0x8657b0) [0198.679] CoTaskMemAlloc (cb=0x5) returned 0x865760 [0198.680] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="Put") returned 0x7ffaf02326c0 [0198.680] CoTaskMemFree (pv=0x865760) [0198.714] CoTaskMemAlloc (cb=0x8) returned 0x865840 [0198.714] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="Delete") returned 0x7ffaf0232750 [0198.714] CoTaskMemFree (pv=0x865840) [0198.736] CoTaskMemAlloc (cb=0xa) returned 0x869430 [0198.737] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="GetNames") returned 0x7ffaf0232760 [0198.737] CoTaskMemFree (pv=0x869430) [0198.790] CoTaskMemAlloc (cb=0x12) returned 0x869430 [0198.790] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="BeginEnumeration") returned 0x7ffaf02327b0 [0198.790] CoTaskMemFree (pv=0x869430) [0198.805] CoTaskMemAlloc (cb=0x6) returned 0x865800 [0198.806] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="Next") returned 0x7ffaf02327c0 [0198.806] CoTaskMemFree (pv=0x865800) [0198.864] CoTaskMemAlloc (cb=0x10) returned 0x869430 [0198.864] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="EndEnumeration") returned 0x7ffaf0232810 [0198.864] CoTaskMemFree (pv=0x869430) [0198.876] CoTaskMemAlloc (cb=0x19) returned 0x85d6e0 [0198.877] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="GetPropertyQualifierSet") returned 0x7ffaf0232820 [0198.877] CoTaskMemFree (pv=0x85d6e0) [0198.892] CoTaskMemAlloc (cb=0x7) returned 0x8655d0 [0198.892] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="Clone") returned 0x7ffaf0232530 [0198.892] CoTaskMemFree (pv=0x8655d0) [0198.892] CoTaskMemAlloc (cb=0xf) returned 0x869430 [0198.893] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="GetObjectText") returned 0x7ffaf0232840 [0198.893] CoTaskMemFree (pv=0x869430) [0198.926] CoTaskMemAlloc (cb=0x13) returned 0x869430 [0198.926] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="SpawnDerivedClass") returned 0x7ffaf0232860 [0198.926] CoTaskMemFree (pv=0x869430) [0198.947] CoTaskMemAlloc (cb=0xf) returned 0x869430 [0198.947] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="SpawnInstance") returned 0x7ffaf0232880 [0198.947] CoTaskMemFree (pv=0x869430) [0198.962] CoTaskMemAlloc (cb=0xb) returned 0x869050 [0198.962] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="CompareTo") returned 0x7ffaf02328a0 [0198.962] CoTaskMemFree (pv=0x869050) [0198.970] CoTaskMemAlloc (cb=0x13) returned 0x8694f0 [0198.970] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="GetPropertyOrigin") returned 0x7ffaf02328c0 [0198.970] CoTaskMemFree (pv=0x8694f0) [0198.996] CoTaskMemAlloc (cb=0xe) returned 0x869430 [0198.996] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="InheritsFrom") returned 0x7ffaf02328e0 [0198.996] CoTaskMemFree (pv=0x869430) [0199.019] CoTaskMemAlloc (cb=0xb) returned 0x869430 [0199.019] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="GetMethod") returned 0x7ffaf02328f0 [0199.019] CoTaskMemFree (pv=0x869430) [0199.043] CoTaskMemAlloc (cb=0xb) returned 0x869430 [0199.043] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="PutMethod") returned 0x7ffaf0232940 [0199.043] CoTaskMemFree (pv=0x869430) [0199.054] CoTaskMemAlloc (cb=0xe) returned 0x869430 [0199.054] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="DeleteMethod") returned 0x7ffaf0232990 [0199.054] CoTaskMemFree (pv=0x869430) [0199.060] CoTaskMemAlloc (cb=0x18) returned 0x8694f0 [0199.061] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="BeginMethodEnumeration") returned 0x7ffaf02329a0 [0199.061] CoTaskMemFree (pv=0x8694f0) [0199.066] CoTaskMemAlloc (cb=0xc) returned 0x869430 [0199.066] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="NextMethod") returned 0x7ffaf02329b0 [0199.066] CoTaskMemFree (pv=0x869430) [0199.073] CoTaskMemAlloc (cb=0x16) returned 0x868ef0 [0199.073] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="EndMethodEnumeration") returned 0x7ffaf0232a00 [0199.073] CoTaskMemFree (pv=0x868ef0) [0199.074] CoTaskMemAlloc (cb=0x17) returned 0x868ef0 [0199.075] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="GetMethodQualifierSet") returned 0x7ffaf0232a10 [0199.075] CoTaskMemFree (pv=0x868ef0) [0199.079] CoTaskMemAlloc (cb=0x11) returned 0x869430 [0199.079] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="GetMethodOrigin") returned 0x7ffaf0232a30 [0199.079] CoTaskMemFree (pv=0x869430) [0199.083] CoTaskMemAlloc (cb=0x12) returned 0x869430 [0199.083] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="QualifierSet_Get") returned 0x7ffaf0232a60 [0199.083] CoTaskMemFree (pv=0x869430) [0199.086] CoTaskMemAlloc (cb=0x12) returned 0x869430 [0199.086] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="QualifierSet_Put") returned 0x7ffaf0232ab0 [0199.086] CoTaskMemFree (pv=0x869430) [0199.088] CoTaskMemAlloc (cb=0x15) returned 0x869430 [0199.088] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="QualifierSet_Delete") returned 0x7ffaf0232ae0 [0199.088] CoTaskMemFree (pv=0x869430) [0199.090] CoTaskMemAlloc (cb=0x17) returned 0x868ef0 [0199.090] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="QualifierSet_GetNames") returned 0x7ffaf0232af0 [0199.090] CoTaskMemFree (pv=0x868ef0) [0199.091] CoTaskMemAlloc (cb=0x1f) returned 0x85ddd0 [0199.091] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="QualifierSet_BeginEnumeration") returned 0x7ffaf0232b10 [0199.091] CoTaskMemFree (pv=0x85ddd0) [0199.092] CoTaskMemAlloc (cb=0x13) returned 0x869430 [0199.092] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="QualifierSet_Next") returned 0x7ffaf0232b20 [0199.092] CoTaskMemFree (pv=0x869430) [0199.095] CoTaskMemAlloc (cb=0x1d) returned 0x85d2c0 [0199.095] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="QualifierSet_EndEnumeration") returned 0x7ffaf0232b70 [0199.095] CoTaskMemFree (pv=0x85d2c0) [0199.096] CoTaskMemAlloc (cb=0x19) returned 0x85d890 [0199.096] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="GetCurrentApartmentType") returned 0x7ffaf0232a50 [0199.096] CoTaskMemFree (pv=0x85d890) [0199.097] CoTaskMemAlloc (cb=0x16) returned 0x869430 [0199.097] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="GetDemultiplexedStub") returned 0x7ffaf0232060 [0199.097] CoTaskMemFree (pv=0x869430) [0199.100] CoTaskMemAlloc (cb=0x17) returned 0x869050 [0199.100] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="CreateInstanceEnumWmi") returned 0x7ffaf0231760 [0199.100] CoTaskMemFree (pv=0x869050) [0199.102] CoTaskMemAlloc (cb=0x14) returned 0x869050 [0199.102] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="CreateClassEnumWmi") returned 0x7ffaf02318c0 [0199.102] CoTaskMemFree (pv=0x869050) [0199.105] CoTaskMemAlloc (cb=0xe) returned 0x869430 [0199.105] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="ExecQueryWmi") returned 0x7ffaf0231a20 [0199.105] CoTaskMemFree (pv=0x869430) [0199.115] CoTaskMemAlloc (cb=0x1a) returned 0x85d560 [0199.115] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="ExecNotificationQueryWmi") returned 0x7ffaf0231b90 [0199.115] CoTaskMemFree (pv=0x85d560) [0199.118] CoTaskMemAlloc (cb=0x10) returned 0x868ef0 [0199.118] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="PutInstanceWmi") returned 0x7ffaf0231d00 [0199.118] CoTaskMemFree (pv=0x868ef0) [0199.121] CoTaskMemAlloc (cb=0xd) returned 0x869430 [0199.121] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="PutClassWmi") returned 0x7ffaf0231e00 [0199.121] CoTaskMemFree (pv=0x869430) [0199.124] CoTaskMemAlloc (cb=0x1a) returned 0x85dc50 [0199.124] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="CloneEnumWbemClassObject") returned 0x7ffaf0231f00 [0199.124] CoTaskMemFree (pv=0x85dc50) [0199.126] CoTaskMemAlloc (cb=0x12) returned 0x869430 [0199.127] GetProcAddress (hModule=0x7ffaf0230000, lpProcName="ConnectServerWmi") returned 0x7ffaf02334c0 [0199.127] CoTaskMemFree (pv=0x869430) [0199.130] CoCreateInstance (in: rclsid=0x7ffaf02315a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffaf02314d8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x20aeec60 | out: ppv=0x20aeec60*=0x869470) returned 0x0 [0199.131] WbemLocator:IWbemLocator:ConnectServer (in: This=0x869470, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x20aeeef0 | out: ppNamespace=0x20aeeef0*=0x8677e0) returned 0x0 [0199.150] WbemLocator:IUnknown:QueryInterface (in: This=0x8677e0, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20aeead8 | out: ppvObject=0x20aeead8*=0x862d90) returned 0x0 [0199.151] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x862d90, pProxy=0x8677e0, pAuthnSvc=0x20aeead0, pAuthzSvc=0x20aeeacc, pServerPrincName=0x20aeeaf8, pAuthnLevel=0x20aeeac8, pImpLevel=0x20aeeae4, pAuthInfo=0x20aeeb08, pCapabilites=0x20aeeae0 | out: pAuthnSvc=0x20aeead0*=0xa, pAuthzSvc=0x20aeeacc*=0x0, pServerPrincName=0x20aeeaf8, pAuthnLevel=0x20aeeac8*=0x6, pImpLevel=0x20aeeae4*=0x2, pAuthInfo=0x20aeeb08, pCapabilites=0x20aeeae0*=0x1) returned 0x0 [0199.151] WbemLocator:IUnknown:Release (This=0x862d90) returned 0x1 [0199.151] WbemLocator:IUnknown:QueryInterface (in: This=0x8677e0, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20aeea78 | out: ppvObject=0x20aeea78*=0x862dd8) returned 0x0 [0199.151] WbemLocator:IUnknown:QueryInterface (in: This=0x8677e0, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20aeea08 | out: ppvObject=0x20aeea08*=0x862d90) returned 0x0 [0199.151] WbemLocator:IClientSecurity:SetBlanket (This=0x862d90, pProxy=0x8677e0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0199.151] WbemLocator:IUnknown:Release (This=0x862d90) returned 0x2 [0199.151] WbemLocator:IUnknown:Release (This=0x862dd8) returned 0x1 [0199.151] CoTaskMemFree (pv=0x85d9b0) [0199.151] WbemLocator:IUnknown:Release (This=0x869470) returned 0x0 [0199.151] WbemLocator:IUnknown:QueryInterface (in: This=0x8677e0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20aee6f0 | out: ppvObject=0x20aee6f0*=0x862dd8) returned 0x0 [0199.151] WbemLocator:IUnknown:QueryInterface (in: This=0x862dd8, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x20aee770 | out: ppvObject=0x20aee770*=0x0) returned 0x80004002 [0199.152] WbemLocator:IUnknown:QueryInterface (in: This=0x862dd8, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x20aee508 | out: ppvObject=0x20aee508*=0x0) returned 0x80004002 [0199.152] WbemLocator:IUnknown:AddRef (This=0x862dd8) returned 0x3 [0199.152] CoGetContextToken (in: pToken=0x20aee3c0 | out: pToken=0x20aee3c0) returned 0x0 [0199.152] WbemLocator:IUnknown:QueryInterface (in: This=0x862dd8, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20aee380 | out: ppvObject=0x20aee380*=0x862cb8) returned 0x0 [0199.152] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x862cb8, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x20aee3b0 | out: pCid=0x20aee3b0*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.152] WbemLocator:IUnknown:Release (This=0x862cb8) returned 0x3 [0199.152] CoGetContextToken (in: pToken=0x20aee390 | out: pToken=0x20aee390) returned 0x0 [0199.153] WbemLocator:IUnknown:AddRef (This=0x862dd8) returned 0x4 [0199.153] WbemLocator:IUnknown:QueryInterface (in: This=0x862dd8, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20aee4a8 | out: ppvObject=0x20aee4a8*=0x862da0) returned 0x0 [0199.153] WbemLocator:IUnknown:Release (This=0x862dd8) returned 0x4 [0199.153] WbemLocator:IRpcOptions:Query (in: This=0x862da0, pPrx=0x862dd8, dwProperty=2, pdwValue=0x20aee518 | out: pdwValue=0x20aee518) returned 0x80004002 [0199.153] WbemLocator:IUnknown:Release (This=0x862da0) returned 0x3 [0199.153] WbemLocator:IUnknown:Release (This=0x862dd8) returned 0x2 [0199.153] CoGetContextToken (in: pToken=0x20aee890 | out: pToken=0x20aee890) returned 0x0 [0199.153] CoGetContextToken (in: pToken=0x20aee7d0 | out: pToken=0x20aee7d0) returned 0x0 [0199.153] WbemLocator:IUnknown:AddRef (This=0x862dd8) returned 0x3 [0199.153] WbemLocator:IUnknown:QueryInterface (in: This=0x862dd8, riid=0x20aee910*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x20aee8f0 | out: ppvObject=0x20aee8f0*=0x8677e0) returned 0x0 [0199.153] WbemLocator:IUnknown:Release (This=0x862dd8) returned 0x3 [0199.154] WbemLocator:IUnknown:Release (This=0x8677e0) returned 0x2 [0199.154] WbemLocator:IUnknown:Release (This=0x8677e0) returned 0x1 [0199.155] SysStringLen (param_1=0x0) returned 0x0 [0199.157] CoUninitialize () Thread: id = 101 os_tid = 0xcb4 [0199.175] CoGetContextToken (in: pToken=0x20aee6d0 | out: pToken=0x20aee6d0) returned 0x0 [0199.175] CoGetContextToken (in: pToken=0x20aee6a0 | out: pToken=0x20aee6a0) returned 0x0 [0199.175] CoGetMarshalSizeMax (in: pulSize=0x20aee688, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x862dd8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x20aee688) returned 0x0 [0199.176] CoMarshalInterface (pStm=0x85d7d0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x862dd8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0199.487] CoGetContextToken (in: pToken=0x20aee6d0 | out: pToken=0x20aee6d0) returned 0x0 [0199.487] CoGetContextToken (in: pToken=0x20aee6a0 | out: pToken=0x20aee6a0) returned 0x0 [0199.487] CoGetMarshalSizeMax (in: pulSize=0x20aee688, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x85fd98, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x20aee688) returned 0x0 [0199.487] CoMarshalInterface (pStm=0x85df20, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x85fd98, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0199.979] CoGetContextToken (in: pToken=0x20aee6d0 | out: pToken=0x20aee6d0) returned 0x0 [0199.979] CoGetContextToken (in: pToken=0x20aee6a0 | out: pToken=0x20aee6a0) returned 0x0 [0199.979] CoGetMarshalSizeMax (in: pulSize=0x20aee688, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x85fa58, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x20aee688) returned 0x0 [0199.979] CoMarshalInterface (pStm=0x85d3b0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x85fa58, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0200.158] CoGetContextToken (in: pToken=0x20aee6d0 | out: pToken=0x20aee6d0) returned 0x0 [0200.158] CoGetContextToken (in: pToken=0x20aee6a0 | out: pToken=0x20aee6a0) returned 0x0 [0200.158] CoGetMarshalSizeMax (in: pulSize=0x20aee688, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x893d98, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x20aee688) returned 0x0 [0200.158] CoMarshalInterface (pStm=0x85d560, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x893d98, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 Thread: id = 102 os_tid = 0xcb8 [0199.457] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0199.459] CoGetClassObject (in: rclsid=0x809a48*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x20c0eaa0 | out: ppv=0x20c0eaa0*=0x882910) returned 0x0 [0199.459] WbemLocator:IUnknown:QueryInterface (in: This=0x882910, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x20c0e7b0 | out: ppvObject=0x20c0e7b0*=0x0) returned 0x80004002 [0199.459] WbemLocator:IClassFactory:CreateInstance (in: This=0x882910, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e798 | out: ppvObject=0x20c0e798*=0x8827b0) returned 0x0 [0199.459] WbemLocator:IUnknown:QueryInterface (in: This=0x8827b0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e6a0 | out: ppvObject=0x20c0e6a0*=0x8827b0) returned 0x0 [0199.459] WbemLocator:IUnknown:QueryInterface (in: This=0x8827b0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x20c0e720 | out: ppvObject=0x20c0e720*=0x0) returned 0x80004002 [0199.460] WbemLocator:IUnknown:AddRef (This=0x8827b0) returned 0x3 [0199.460] CoGetContextToken (in: pToken=0x20c0e370 | out: pToken=0x20c0e370) returned 0x0 [0199.460] WbemLocator:IUnknown:QueryInterface (in: This=0x8827b0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e330 | out: ppvObject=0x20c0e330*=0x0) returned 0x80004002 [0199.460] CoGetContextToken (in: pToken=0x20c0e340 | out: pToken=0x20c0e340) returned 0x0 [0199.460] WbemLocator:IUnknown:AddRef (This=0x8827b0) returned 0x4 [0199.460] WbemLocator:IUnknown:QueryInterface (in: This=0x8827b0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e458 | out: ppvObject=0x20c0e458*=0x0) returned 0x80004002 [0199.460] WbemLocator:IUnknown:Release (This=0x8827b0) returned 0x3 [0199.460] WbemLocator:IUnknown:Release (This=0x8827b0) returned 0x2 [0199.460] WbemLocator:IUnknown:Release (This=0x882910) returned 0x0 [0199.461] WbemLocator:IUnknown:Release (This=0x8827b0) returned 0x1 [0199.461] CoGetContextToken (in: pToken=0x20c0e960 | out: pToken=0x20c0e960) returned 0x0 [0199.461] CoGetContextToken (in: pToken=0x20c0e8a0 | out: pToken=0x20c0e8a0) returned 0x0 [0199.461] WbemLocator:IUnknown:AddRef (This=0x8827b0) returned 0x2 [0199.461] WbemLocator:IUnknown:QueryInterface (in: This=0x8827b0, riid=0x20c0e9e0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x20c0e9c0 | out: ppvObject=0x20c0e9c0*=0x8827b0) returned 0x0 [0199.461] WbemLocator:IUnknown:Release (This=0x8827b0) returned 0x2 [0199.461] WbemLocator:IUnknown:Release (This=0x8827b0) returned 0x1 [0199.461] CoGetContextToken (in: pToken=0x20c0eac0 | out: pToken=0x20c0eac0) returned 0x0 [0199.461] CoGetContextToken (in: pToken=0x20c0ea00 | out: pToken=0x20c0ea00) returned 0x0 [0199.461] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x2 [0199.461] WbemDefPath:IUnknown:QueryInterface (in: This=0x821010, riid=0x20c0eb40*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x20c0eb20 | out: ppvObject=0x20c0eb20*=0x821010) returned 0x0 [0199.461] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.461] WbemDefPath:IUnknown:AddRef (This=0x821010) returned 0x3 [0199.461] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x821010, puCount=0x20c0edc0 | out: puCount=0x20c0edc0*=0x2) returned 0x0 [0199.462] WbemDefPath:IUnknown:Release (This=0x821010) returned 0x2 [0199.462] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=8, puBuffLength=0x20c0edc0*=0x0, pszText=0x0 | out: puBuffLength=0x20c0edc0*=0xf, pszText=0x0) returned 0x0 [0199.462] WbemDefPath:IWbemPath:GetText (in: This=0x821010, lFlags=8, puBuffLength=0x20c0edc0*=0xf, pszText="00000000000000" | out: puBuffLength=0x20c0edc0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0199.462] CoCreateInstance (in: rclsid=0x7ffaf02315a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffaf02314d8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x20c0ea30 | out: ppv=0x20c0ea30*=0x8826b0) returned 0x0 [0199.462] WbemLocator:IWbemLocator:ConnectServer (in: This=0x8826b0, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x20c0ecc0 | out: ppNamespace=0x20c0ecc0*=0x865fb0) returned 0x0 [0199.472] WbemLocator:IUnknown:QueryInterface (in: This=0x865fb0, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e8a8 | out: ppvObject=0x20c0e8a8*=0x85fd50) returned 0x0 [0199.472] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x85fd50, pProxy=0x865fb0, pAuthnSvc=0x20c0e8a0, pAuthzSvc=0x20c0e89c, pServerPrincName=0x20c0e8c8, pAuthnLevel=0x20c0e898, pImpLevel=0x20c0e8b4, pAuthInfo=0x20c0e8d8, pCapabilites=0x20c0e8b0 | out: pAuthnSvc=0x20c0e8a0*=0xa, pAuthzSvc=0x20c0e89c*=0x0, pServerPrincName=0x20c0e8c8, pAuthnLevel=0x20c0e898*=0x6, pImpLevel=0x20c0e8b4*=0x2, pAuthInfo=0x20c0e8d8, pCapabilites=0x20c0e8b0*=0x1) returned 0x0 [0199.472] WbemLocator:IUnknown:Release (This=0x85fd50) returned 0x1 [0199.472] WbemLocator:IUnknown:QueryInterface (in: This=0x865fb0, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e848 | out: ppvObject=0x20c0e848*=0x85fd98) returned 0x0 [0199.472] WbemLocator:IUnknown:QueryInterface (in: This=0x865fb0, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e7d8 | out: ppvObject=0x20c0e7d8*=0x85fd50) returned 0x0 [0199.472] WbemLocator:IClientSecurity:SetBlanket (This=0x85fd50, pProxy=0x865fb0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0199.472] WbemLocator:IUnknown:Release (This=0x85fd50) returned 0x2 [0199.472] WbemLocator:IUnknown:Release (This=0x85fd98) returned 0x1 [0199.472] CoTaskMemFree (pv=0x85dec0) [0199.472] WbemLocator:IUnknown:Release (This=0x8826b0) returned 0x0 [0199.472] WbemLocator:IUnknown:QueryInterface (in: This=0x865fb0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e4c0 | out: ppvObject=0x20c0e4c0*=0x85fd98) returned 0x0 [0199.472] WbemLocator:IUnknown:QueryInterface (in: This=0x85fd98, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x20c0e540 | out: ppvObject=0x20c0e540*=0x0) returned 0x80004002 [0199.481] WbemLocator:IUnknown:QueryInterface (in: This=0x85fd98, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x20c0e2d8 | out: ppvObject=0x20c0e2d8*=0x0) returned 0x80004002 [0199.482] WbemLocator:IUnknown:AddRef (This=0x85fd98) returned 0x3 [0199.482] CoGetContextToken (in: pToken=0x20c0e190 | out: pToken=0x20c0e190) returned 0x0 [0199.482] WbemLocator:IUnknown:QueryInterface (in: This=0x85fd98, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e150 | out: ppvObject=0x20c0e150*=0x85fc78) returned 0x0 [0199.482] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x85fc78, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x20c0e180 | out: pCid=0x20c0e180*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.482] WbemLocator:IUnknown:Release (This=0x85fc78) returned 0x3 [0199.482] CoGetContextToken (in: pToken=0x20c0e160 | out: pToken=0x20c0e160) returned 0x0 [0199.482] WbemLocator:IUnknown:AddRef (This=0x85fd98) returned 0x4 [0199.482] WbemLocator:IUnknown:QueryInterface (in: This=0x85fd98, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e278 | out: ppvObject=0x20c0e278*=0x85fd60) returned 0x0 [0199.482] WbemLocator:IUnknown:Release (This=0x85fd98) returned 0x4 [0199.482] WbemLocator:IRpcOptions:Query (in: This=0x85fd60, pPrx=0x85fd98, dwProperty=2, pdwValue=0x20c0e2e8 | out: pdwValue=0x20c0e2e8) returned 0x80004002 [0199.482] WbemLocator:IUnknown:Release (This=0x85fd60) returned 0x3 [0199.483] WbemLocator:IUnknown:Release (This=0x85fd98) returned 0x2 [0199.483] CoGetContextToken (in: pToken=0x20c0e660 | out: pToken=0x20c0e660) returned 0x0 [0199.483] CoGetContextToken (in: pToken=0x20c0e5a0 | out: pToken=0x20c0e5a0) returned 0x0 [0199.483] WbemLocator:IUnknown:AddRef (This=0x85fd98) returned 0x3 [0199.483] WbemLocator:IUnknown:QueryInterface (in: This=0x85fd98, riid=0x20c0e6e0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x20c0e6c0 | out: ppvObject=0x20c0e6c0*=0x865fb0) returned 0x0 [0199.483] WbemLocator:IUnknown:Release (This=0x85fd98) returned 0x3 [0199.483] WbemLocator:IUnknown:Release (This=0x865fb0) returned 0x2 [0199.483] WbemLocator:IUnknown:Release (This=0x865fb0) returned 0x1 [0199.483] SysStringLen (param_1=0x0) returned 0x0 [0199.483] CoUninitialize () Thread: id = 107 os_tid = 0xfd4 [0199.960] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0199.963] CoGetClassObject (in: rclsid=0x809a48*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x20c0e760 | out: ppv=0x20c0e760*=0x882590) returned 0x0 [0199.963] WbemLocator:IUnknown:QueryInterface (in: This=0x882590, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x20c0e470 | out: ppvObject=0x20c0e470*=0x0) returned 0x80004002 [0199.963] WbemLocator:IClassFactory:CreateInstance (in: This=0x882590, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e458 | out: ppvObject=0x20c0e458*=0x8825f0) returned 0x0 [0199.963] WbemLocator:IUnknown:QueryInterface (in: This=0x8825f0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e360 | out: ppvObject=0x20c0e360*=0x8825f0) returned 0x0 [0199.963] WbemLocator:IUnknown:QueryInterface (in: This=0x8825f0, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x20c0e3e0 | out: ppvObject=0x20c0e3e0*=0x0) returned 0x80004002 [0199.964] WbemLocator:IUnknown:AddRef (This=0x8825f0) returned 0x3 [0199.964] CoGetContextToken (in: pToken=0x20c0e030 | out: pToken=0x20c0e030) returned 0x0 [0199.964] WbemLocator:IUnknown:QueryInterface (in: This=0x8825f0, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0dff0 | out: ppvObject=0x20c0dff0*=0x0) returned 0x80004002 [0199.964] CoGetContextToken (in: pToken=0x20c0e000 | out: pToken=0x20c0e000) returned 0x0 [0199.964] WbemLocator:IUnknown:AddRef (This=0x8825f0) returned 0x4 [0199.964] WbemLocator:IUnknown:QueryInterface (in: This=0x8825f0, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e118 | out: ppvObject=0x20c0e118*=0x0) returned 0x80004002 [0199.964] WbemLocator:IUnknown:Release (This=0x8825f0) returned 0x3 [0199.964] WbemLocator:IUnknown:Release (This=0x8825f0) returned 0x2 [0199.964] WbemLocator:IUnknown:Release (This=0x882590) returned 0x0 [0199.965] WbemLocator:IUnknown:Release (This=0x8825f0) returned 0x1 [0199.965] CoGetContextToken (in: pToken=0x20c0e620 | out: pToken=0x20c0e620) returned 0x0 [0199.965] CoGetContextToken (in: pToken=0x20c0e560 | out: pToken=0x20c0e560) returned 0x0 [0199.965] WbemLocator:IUnknown:AddRef (This=0x8825f0) returned 0x2 [0199.965] WbemLocator:IUnknown:QueryInterface (in: This=0x8825f0, riid=0x20c0e6a0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x20c0e680 | out: ppvObject=0x20c0e680*=0x8825f0) returned 0x0 [0199.965] WbemLocator:IUnknown:Release (This=0x8825f0) returned 0x2 [0199.965] WbemLocator:IUnknown:Release (This=0x8825f0) returned 0x1 [0199.965] CoGetContextToken (in: pToken=0x20c0e780 | out: pToken=0x20c0e780) returned 0x0 [0199.965] CoGetContextToken (in: pToken=0x20c0e6c0 | out: pToken=0x20c0e6c0) returned 0x0 [0199.965] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x2 [0199.965] WbemDefPath:IUnknown:QueryInterface (in: This=0x87f870, riid=0x20c0e800*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x20c0e7e0 | out: ppvObject=0x20c0e7e0*=0x87f870) returned 0x0 [0199.965] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x2 [0199.965] WbemDefPath:IUnknown:AddRef (This=0x87f870) returned 0x3 [0199.965] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x87f870, puCount=0x20c0ea80 | out: puCount=0x20c0ea80*=0x2) returned 0x0 [0199.965] WbemDefPath:IUnknown:Release (This=0x87f870) returned 0x2 [0199.966] WbemDefPath:IWbemPath:GetText (in: This=0x87f870, lFlags=8, puBuffLength=0x20c0ea80*=0x0, pszText=0x0 | out: puBuffLength=0x20c0ea80*=0xf, pszText=0x0) returned 0x0 [0199.966] WbemDefPath:IWbemPath:GetText (in: This=0x87f870, lFlags=8, puBuffLength=0x20c0ea80*=0xf, pszText="00000000000000" | out: puBuffLength=0x20c0ea80*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0199.966] CoCreateInstance (in: rclsid=0x7ffaf02315a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffaf02314d8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x20c0e6f0 | out: ppv=0x20c0e6f0*=0x882650) returned 0x0 [0199.966] WbemLocator:IWbemLocator:ConnectServer (in: This=0x882650, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x20c0e980 | out: ppNamespace=0x20c0e980*=0x867510) returned 0x0 [0199.973] WbemLocator:IUnknown:QueryInterface (in: This=0x867510, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e568 | out: ppvObject=0x20c0e568*=0x85fa10) returned 0x0 [0199.973] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x85fa10, pProxy=0x867510, pAuthnSvc=0x20c0e560, pAuthzSvc=0x20c0e55c, pServerPrincName=0x20c0e588, pAuthnLevel=0x20c0e558, pImpLevel=0x20c0e574, pAuthInfo=0x20c0e598, pCapabilites=0x20c0e570 | out: pAuthnSvc=0x20c0e560*=0xa, pAuthzSvc=0x20c0e55c*=0x0, pServerPrincName=0x20c0e588, pAuthnLevel=0x20c0e558*=0x6, pImpLevel=0x20c0e574*=0x2, pAuthInfo=0x20c0e598, pCapabilites=0x20c0e570*=0x1) returned 0x0 [0199.973] WbemLocator:IUnknown:Release (This=0x85fa10) returned 0x1 [0199.973] WbemLocator:IUnknown:QueryInterface (in: This=0x867510, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e508 | out: ppvObject=0x20c0e508*=0x85fa58) returned 0x0 [0199.973] WbemLocator:IUnknown:QueryInterface (in: This=0x867510, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e498 | out: ppvObject=0x20c0e498*=0x85fa10) returned 0x0 [0199.973] WbemLocator:IClientSecurity:SetBlanket (This=0x85fa10, pProxy=0x867510, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0199.973] WbemLocator:IUnknown:Release (This=0x85fa10) returned 0x2 [0199.973] WbemLocator:IUnknown:Release (This=0x85fa58) returned 0x1 [0199.973] CoTaskMemFree (pv=0x85dbf0) [0199.973] WbemLocator:IUnknown:Release (This=0x882650) returned 0x0 [0199.974] WbemLocator:IUnknown:QueryInterface (in: This=0x867510, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e180 | out: ppvObject=0x20c0e180*=0x85fa58) returned 0x0 [0199.974] WbemLocator:IUnknown:QueryInterface (in: This=0x85fa58, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x20c0e200 | out: ppvObject=0x20c0e200*=0x0) returned 0x80004002 [0199.974] WbemLocator:IUnknown:QueryInterface (in: This=0x85fa58, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x20c0df98 | out: ppvObject=0x20c0df98*=0x0) returned 0x80004002 [0199.974] WbemLocator:IUnknown:AddRef (This=0x85fa58) returned 0x3 [0199.974] CoGetContextToken (in: pToken=0x20c0de50 | out: pToken=0x20c0de50) returned 0x0 [0199.975] WbemLocator:IUnknown:QueryInterface (in: This=0x85fa58, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0de10 | out: ppvObject=0x20c0de10*=0x85f938) returned 0x0 [0199.975] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x85f938, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x20c0de40 | out: pCid=0x20c0de40*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0199.975] WbemLocator:IUnknown:Release (This=0x85f938) returned 0x3 [0199.975] CoGetContextToken (in: pToken=0x20c0de20 | out: pToken=0x20c0de20) returned 0x0 [0199.975] WbemLocator:IUnknown:AddRef (This=0x85fa58) returned 0x4 [0199.975] WbemLocator:IUnknown:QueryInterface (in: This=0x85fa58, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0df38 | out: ppvObject=0x20c0df38*=0x85fa20) returned 0x0 [0199.975] WbemLocator:IUnknown:Release (This=0x85fa58) returned 0x4 [0199.975] WbemLocator:IRpcOptions:Query (in: This=0x85fa20, pPrx=0x85fa58, dwProperty=2, pdwValue=0x20c0dfa8 | out: pdwValue=0x20c0dfa8) returned 0x80004002 [0199.975] WbemLocator:IUnknown:Release (This=0x85fa20) returned 0x3 [0199.975] WbemLocator:IUnknown:Release (This=0x85fa58) returned 0x2 [0199.975] CoGetContextToken (in: pToken=0x20c0e320 | out: pToken=0x20c0e320) returned 0x0 [0199.975] CoGetContextToken (in: pToken=0x20c0e260 | out: pToken=0x20c0e260) returned 0x0 [0199.975] WbemLocator:IUnknown:AddRef (This=0x85fa58) returned 0x3 [0199.975] WbemLocator:IUnknown:QueryInterface (in: This=0x85fa58, riid=0x20c0e3a0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x20c0e380 | out: ppvObject=0x20c0e380*=0x867510) returned 0x0 [0199.976] WbemLocator:IUnknown:Release (This=0x85fa58) returned 0x3 [0199.976] WbemLocator:IUnknown:Release (This=0x867510) returned 0x2 [0199.976] WbemLocator:IUnknown:Release (This=0x867510) returned 0x1 [0199.976] SysStringLen (param_1=0x0) returned 0x0 [0199.976] CoUninitialize () Thread: id = 108 os_tid = 0xfd0 [0200.037] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0200.039] CoGetClassObject (in: rclsid=0x809a48*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ffadec5d250*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x20c0ec90 | out: ppv=0x20c0ec90*=0x87dd50) returned 0x0 [0200.040] WbemLocator:IUnknown:QueryInterface (in: This=0x87dd50, riid=0x7ffadec5d2d0*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x20c0e9a0 | out: ppvObject=0x20c0e9a0*=0x0) returned 0x80004002 [0200.040] WbemLocator:IClassFactory:CreateInstance (in: This=0x87dd50, pUnkOuter=0x0, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e988 | out: ppvObject=0x20c0e988*=0x87df50) returned 0x0 [0200.040] WbemLocator:IUnknown:QueryInterface (in: This=0x87df50, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e890 | out: ppvObject=0x20c0e890*=0x87df50) returned 0x0 [0200.040] WbemLocator:IUnknown:QueryInterface (in: This=0x87df50, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x20c0e910 | out: ppvObject=0x20c0e910*=0x0) returned 0x80004002 [0200.040] WbemLocator:IUnknown:AddRef (This=0x87df50) returned 0x3 [0200.040] CoGetContextToken (in: pToken=0x20c0e560 | out: pToken=0x20c0e560) returned 0x0 [0200.040] WbemLocator:IUnknown:QueryInterface (in: This=0x87df50, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e520 | out: ppvObject=0x20c0e520*=0x0) returned 0x80004002 [0200.041] CoGetContextToken (in: pToken=0x20c0e530 | out: pToken=0x20c0e530) returned 0x0 [0200.041] WbemLocator:IUnknown:AddRef (This=0x87df50) returned 0x4 [0200.041] WbemLocator:IUnknown:QueryInterface (in: This=0x87df50, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e648 | out: ppvObject=0x20c0e648*=0x0) returned 0x80004002 [0200.041] WbemLocator:IUnknown:Release (This=0x87df50) returned 0x3 [0200.041] WbemLocator:IUnknown:Release (This=0x87df50) returned 0x2 [0200.041] WbemLocator:IUnknown:Release (This=0x87dd50) returned 0x0 [0200.041] WbemLocator:IUnknown:Release (This=0x87df50) returned 0x1 [0200.041] CoGetContextToken (in: pToken=0x20c0eb50 | out: pToken=0x20c0eb50) returned 0x0 [0200.041] CoGetContextToken (in: pToken=0x20c0ea90 | out: pToken=0x20c0ea90) returned 0x0 [0200.041] WbemLocator:IUnknown:AddRef (This=0x87df50) returned 0x2 [0200.041] WbemLocator:IUnknown:QueryInterface (in: This=0x87df50, riid=0x20c0ebd0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x20c0ebb0 | out: ppvObject=0x20c0ebb0*=0x87df50) returned 0x0 [0200.041] WbemLocator:IUnknown:Release (This=0x87df50) returned 0x2 [0200.041] WbemLocator:IUnknown:Release (This=0x87df50) returned 0x1 [0200.041] CoGetContextToken (in: pToken=0x20c0ecb0 | out: pToken=0x20c0ecb0) returned 0x0 [0200.041] CoGetContextToken (in: pToken=0x20c0ebf0 | out: pToken=0x20c0ebf0) returned 0x0 [0200.041] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x2 [0200.042] WbemDefPath:IUnknown:QueryInterface (in: This=0x87e5b0, riid=0x20c0ed30*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x20c0ed10 | out: ppvObject=0x20c0ed10*=0x87e5b0) returned 0x0 [0200.042] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.042] WbemDefPath:IUnknown:AddRef (This=0x87e5b0) returned 0x3 [0200.042] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x87e5b0, puCount=0x20c0efb0 | out: puCount=0x20c0efb0*=0x2) returned 0x0 [0200.042] WbemDefPath:IUnknown:Release (This=0x87e5b0) returned 0x2 [0200.042] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=8, puBuffLength=0x20c0efb0*=0x0, pszText=0x0 | out: puBuffLength=0x20c0efb0*=0xf, pszText=0x0) returned 0x0 [0200.042] WbemDefPath:IWbemPath:GetText (in: This=0x87e5b0, lFlags=8, puBuffLength=0x20c0efb0*=0xf, pszText="00000000000000" | out: puBuffLength=0x20c0efb0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0200.042] CoCreateInstance (in: rclsid=0x7ffaf02315a8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ffaf02314d8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x20c0ec20 | out: ppv=0x20c0ec20*=0x87deb0) returned 0x0 [0200.042] WbemLocator:IWbemLocator:ConnectServer (in: This=0x87deb0, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x20c0eeb0 | out: ppNamespace=0x20c0eeb0*=0x867000) returned 0x0 [0200.149] WbemLocator:IUnknown:QueryInterface (in: This=0x867000, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0ea98 | out: ppvObject=0x20c0ea98*=0x893d50) returned 0x0 [0200.149] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x893d50, pProxy=0x867000, pAuthnSvc=0x20c0ea90, pAuthzSvc=0x20c0ea8c, pServerPrincName=0x20c0eab8, pAuthnLevel=0x20c0ea88, pImpLevel=0x20c0eaa4, pAuthInfo=0x20c0eac8, pCapabilites=0x20c0eaa0 | out: pAuthnSvc=0x20c0ea90*=0xa, pAuthzSvc=0x20c0ea8c*=0x0, pServerPrincName=0x20c0eab8, pAuthnLevel=0x20c0ea88*=0x6, pImpLevel=0x20c0eaa4*=0x2, pAuthInfo=0x20c0eac8, pCapabilites=0x20c0eaa0*=0x1) returned 0x0 [0200.149] WbemLocator:IUnknown:Release (This=0x893d50) returned 0x1 [0200.149] WbemLocator:IUnknown:QueryInterface (in: This=0x867000, riid=0x7ffaf0231458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0ea38 | out: ppvObject=0x20c0ea38*=0x893d98) returned 0x0 [0200.149] WbemLocator:IUnknown:QueryInterface (in: This=0x867000, riid=0x7ffaf0231468*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e9c8 | out: ppvObject=0x20c0e9c8*=0x893d50) returned 0x0 [0200.149] WbemLocator:IClientSecurity:SetBlanket (This=0x893d50, pProxy=0x867000, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0200.149] WbemLocator:IUnknown:Release (This=0x893d50) returned 0x2 [0200.149] WbemLocator:IUnknown:Release (This=0x893d98) returned 0x1 [0200.149] CoTaskMemFree (pv=0x85daa0) [0200.149] WbemLocator:IUnknown:Release (This=0x87deb0) returned 0x0 [0200.150] WbemLocator:IUnknown:QueryInterface (in: This=0x867000, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e6b0 | out: ppvObject=0x20c0e6b0*=0x893d98) returned 0x0 [0200.150] WbemLocator:IUnknown:QueryInterface (in: This=0x893d98, riid=0x7ffadec5d840*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x20c0e730 | out: ppvObject=0x20c0e730*=0x0) returned 0x80004002 [0200.150] WbemLocator:IUnknown:QueryInterface (in: This=0x893d98, riid=0x7ffadec5d2c0*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x20c0e4c8 | out: ppvObject=0x20c0e4c8*=0x0) returned 0x80004002 [0200.150] WbemLocator:IUnknown:AddRef (This=0x893d98) returned 0x3 [0200.150] CoGetContextToken (in: pToken=0x20c0e380 | out: pToken=0x20c0e380) returned 0x0 [0200.150] WbemLocator:IUnknown:QueryInterface (in: This=0x893d98, riid=0x7ffadec5d2b0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e340 | out: ppvObject=0x20c0e340*=0x893c78) returned 0x0 [0200.151] WbemLocator:IMarshal:GetUnmarshalClass (in: This=0x893c78, riid=0x7ffadec5d260*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x20c0e370 | out: pCid=0x20c0e370*(Data1=0x17, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0200.151] WbemLocator:IUnknown:Release (This=0x893c78) returned 0x3 [0200.151] CoGetContextToken (in: pToken=0x20c0e350 | out: pToken=0x20c0e350) returned 0x0 [0200.151] WbemLocator:IUnknown:AddRef (This=0x893d98) returned 0x4 [0200.151] WbemLocator:IUnknown:QueryInterface (in: This=0x893d98, riid=0x7ffadec5d280*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20c0e468 | out: ppvObject=0x20c0e468*=0x893d60) returned 0x0 [0200.151] WbemLocator:IUnknown:Release (This=0x893d98) returned 0x4 [0200.151] WbemLocator:IRpcOptions:Query (in: This=0x893d60, pPrx=0x893d98, dwProperty=2, pdwValue=0x20c0e4d8 | out: pdwValue=0x20c0e4d8) returned 0x80004002 [0200.151] WbemLocator:IUnknown:Release (This=0x893d60) returned 0x3 [0200.151] WbemLocator:IUnknown:Release (This=0x893d98) returned 0x2 [0200.151] CoGetContextToken (in: pToken=0x20c0e850 | out: pToken=0x20c0e850) returned 0x0 [0200.151] CoGetContextToken (in: pToken=0x20c0e790 | out: pToken=0x20c0e790) returned 0x0 [0200.151] WbemLocator:IUnknown:AddRef (This=0x893d98) returned 0x3 [0200.151] WbemLocator:IUnknown:QueryInterface (in: This=0x893d98, riid=0x20c0e8d0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x20c0e8b0 | out: ppvObject=0x20c0e8b0*=0x867000) returned 0x0 [0200.151] WbemLocator:IUnknown:Release (This=0x893d98) returned 0x3 [0200.152] WbemLocator:IUnknown:Release (This=0x867000) returned 0x2 [0200.152] WbemLocator:IUnknown:Release (This=0x867000) returned 0x1 [0200.152] SysStringLen (param_1=0x0) returned 0x0 [0200.152] CoUninitialize ()